@ambushsoftworks/nestjs-auth-graphql 0.17.1 → 0.19.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (105) hide show
  1. package/CHANGELOG.md +99 -0
  2. package/README.md +363 -1
  3. package/dist/auth.module.d.ts +16 -0
  4. package/dist/auth.module.d.ts.map +1 -1
  5. package/dist/auth.module.js +71 -3
  6. package/dist/auth.module.js.map +1 -1
  7. package/dist/constants.d.ts +2 -0
  8. package/dist/constants.d.ts.map +1 -1
  9. package/dist/constants.js +3 -1
  10. package/dist/constants.js.map +1 -1
  11. package/dist/decorators/allow-guest-session.decorator.d.ts +3 -0
  12. package/dist/decorators/allow-guest-session.decorator.d.ts.map +1 -0
  13. package/dist/decorators/allow-guest-session.decorator.js +8 -0
  14. package/dist/decorators/allow-guest-session.decorator.js.map +1 -0
  15. package/dist/decorators/current-guest.decorator.d.ts +2 -0
  16. package/dist/decorators/current-guest.decorator.d.ts.map +1 -0
  17. package/dist/decorators/current-guest.decorator.js +7 -0
  18. package/dist/decorators/current-guest.decorator.js.map +1 -0
  19. package/dist/exceptions/email-challenge.exceptions.d.ts +8 -0
  20. package/dist/exceptions/email-challenge.exceptions.d.ts.map +1 -0
  21. package/dist/exceptions/email-challenge.exceptions.js +21 -0
  22. package/dist/exceptions/email-challenge.exceptions.js.map +1 -0
  23. package/dist/exceptions/guest-session.exceptions.d.ts +9 -0
  24. package/dist/exceptions/guest-session.exceptions.d.ts.map +1 -0
  25. package/dist/exceptions/guest-session.exceptions.js +20 -0
  26. package/dist/exceptions/guest-session.exceptions.js.map +1 -0
  27. package/dist/guards/create-auth-guard.d.ts.map +1 -1
  28. package/dist/guards/create-auth-guard.js +29 -1
  29. package/dist/guards/create-auth-guard.js.map +1 -1
  30. package/dist/guards/guest-session.guard.d.ts +14 -0
  31. package/dist/guards/guest-session.guard.d.ts.map +1 -0
  32. package/dist/guards/guest-session.guard.js +63 -0
  33. package/dist/guards/guest-session.guard.js.map +1 -0
  34. package/dist/index.d.ts +11 -0
  35. package/dist/index.d.ts.map +1 -1
  36. package/dist/index.js +11 -0
  37. package/dist/index.js.map +1 -1
  38. package/dist/interfaces/auth-logger.interface.d.ts +10 -1
  39. package/dist/interfaces/auth-logger.interface.d.ts.map +1 -1
  40. package/dist/interfaces/auth-logger.interface.js +9 -0
  41. package/dist/interfaces/auth-logger.interface.js.map +1 -1
  42. package/dist/interfaces/email-challenge-repository.interface.d.ts +22 -0
  43. package/dist/interfaces/email-challenge-repository.interface.d.ts.map +1 -0
  44. package/dist/interfaces/email-challenge-repository.interface.js +3 -0
  45. package/dist/interfaces/email-challenge-repository.interface.js.map +1 -0
  46. package/dist/interfaces/email-service.interface.d.ts +5 -0
  47. package/dist/interfaces/email-service.interface.d.ts.map +1 -1
  48. package/dist/interfaces/email-template-renderer.interface.d.ts +7 -0
  49. package/dist/interfaces/email-template-renderer.interface.d.ts.map +1 -1
  50. package/dist/interfaces/guest-session-repository.interface.d.ts +37 -0
  51. package/dist/interfaces/guest-session-repository.interface.d.ts.map +1 -0
  52. package/dist/interfaces/guest-session-repository.interface.js +3 -0
  53. package/dist/interfaces/guest-session-repository.interface.js.map +1 -0
  54. package/dist/interfaces/index.d.ts +2 -0
  55. package/dist/interfaces/index.d.ts.map +1 -1
  56. package/dist/interfaces/index.js +2 -0
  57. package/dist/interfaces/index.js.map +1 -1
  58. package/dist/repositories/in-memory-email-challenge.repository.d.ts +14 -0
  59. package/dist/repositories/in-memory-email-challenge.repository.d.ts.map +1 -0
  60. package/dist/repositories/in-memory-email-challenge.repository.js +55 -0
  61. package/dist/repositories/in-memory-email-challenge.repository.js.map +1 -0
  62. package/dist/repositories/in-memory-guest-session.repository.d.ts +18 -0
  63. package/dist/repositories/in-memory-guest-session.repository.d.ts.map +1 -0
  64. package/dist/repositories/in-memory-guest-session.repository.js +83 -0
  65. package/dist/repositories/in-memory-guest-session.repository.js.map +1 -0
  66. package/dist/services/configurable-email.service.d.ts +2 -1
  67. package/dist/services/configurable-email.service.d.ts.map +1 -1
  68. package/dist/services/configurable-email.service.js +24 -0
  69. package/dist/services/configurable-email.service.js.map +1 -1
  70. package/dist/services/default-email-template-renderer.d.ts +7 -0
  71. package/dist/services/default-email-template-renderer.d.ts.map +1 -1
  72. package/dist/services/default-email-template-renderer.js +31 -0
  73. package/dist/services/default-email-template-renderer.js.map +1 -1
  74. package/dist/services/email-challenge.service.d.ts +74 -0
  75. package/dist/services/email-challenge.service.d.ts.map +1 -0
  76. package/dist/services/email-challenge.service.js +306 -0
  77. package/dist/services/email-challenge.service.js.map +1 -0
  78. package/dist/services/guest-session.service.d.ts +80 -0
  79. package/dist/services/guest-session.service.d.ts.map +1 -0
  80. package/dist/services/guest-session.service.js +293 -0
  81. package/dist/services/guest-session.service.js.map +1 -0
  82. package/dist/services/passkey.service.d.ts.map +1 -1
  83. package/dist/services/passkey.service.js +8 -20
  84. package/dist/services/passkey.service.js.map +1 -1
  85. package/dist/testing/email-challenge-repository.contract.d.ts +15 -0
  86. package/dist/testing/email-challenge-repository.contract.d.ts.map +1 -0
  87. package/dist/testing/email-challenge-repository.contract.js +287 -0
  88. package/dist/testing/email-challenge-repository.contract.js.map +1 -0
  89. package/dist/testing/guest-session-repository.contract.d.ts +18 -0
  90. package/dist/testing/guest-session-repository.contract.d.ts.map +1 -0
  91. package/dist/testing/guest-session-repository.contract.js +368 -0
  92. package/dist/testing/guest-session-repository.contract.js.map +1 -0
  93. package/dist/testing/index.d.ts +2 -0
  94. package/dist/testing/index.d.ts.map +1 -1
  95. package/dist/testing/index.js +7 -1
  96. package/dist/testing/index.js.map +1 -1
  97. package/dist/utils/rate-limit-helpers.d.ts +4 -0
  98. package/dist/utils/rate-limit-helpers.d.ts.map +1 -0
  99. package/dist/utils/rate-limit-helpers.js +20 -0
  100. package/dist/utils/rate-limit-helpers.js.map +1 -0
  101. package/examples/email-challenge/prisma-email-challenge.repository.ts +85 -0
  102. package/examples/email-challenge/schema.prisma +24 -0
  103. package/examples/guest-sessions/prisma-guest-session.repository.ts +86 -0
  104. package/examples/guest-sessions/schema.prisma +33 -0
  105. package/package.json +1 -1
@@ -39,6 +39,13 @@ export declare class DefaultEmailTemplateRenderer implements IEmailTemplateRende
39
39
  code: string;
40
40
  expiresInMinutes: number;
41
41
  }): Promise<RenderedEmail>;
42
+ renderEmailChallengeCodeEmail(params: {
43
+ email: string;
44
+ code: string;
45
+ expiresInMinutes: number;
46
+ purpose: string;
47
+ data?: Record<string, unknown>;
48
+ }): Promise<RenderedEmail>;
42
49
  renderPasskeyAddedEmail(params: {
43
50
  email: string;
44
51
  passkeyName: string;
@@ -1 +1 @@
1
- {"version":3,"file":"default-email-template-renderer.d.ts","sourceRoot":"","sources":["../../src/services/default-email-template-renderer.ts"],"names":[],"mappings":"AACA,OAAO,EACL,sBAAsB,EACtB,aAAa,EACd,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AAapF,qBACa,4BAA6B,YAAW,sBAAsB;IACzE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAGrC,QAAQ,EAAE,mBAAmB,EAE7B,aAAa,CAAC,EAAE,MAAM;IAwBlB,uBAAuB,CAAC,MAAM,EAAE;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,aAAa,CAAC;IAqCpB,kBAAkB,CAAC,MAAM,EAAE;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC;IA6BpB,wBAAwB,CAAC,MAAM,EAAE;QACrC,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,aAAa,CAAC;IAgCpB,0BAA0B,CAAC,MAAM,EAAE;QACvC,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC;IAyBpB,qBAAqB,CAAC,MAAM,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,gBAAgB,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,aAAa,CAAC;IAqCpB,qBAAqB,CAAC,MAAM,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,gBAAgB,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,aAAa,CAAC;IAqCpB,uBAAuB,CAAC,MAAM,EAAE;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,IAAI,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC;IAYpB,yBAAyB,CAAC,MAAM,EAAE;QACtC,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,IAAI,CAAC;KACjB,GAAG,OAAO,CAAC,aAAa,CAAC;IAgB1B,OAAO,CAAC,mBAAmB;IAwCrB,wBAAwB,CAAC,MAAM,EAAE;QACrC,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,IAAI,CAAC;KACpB,GAAG,OAAO,CAAC,aAAa,CAAC;IA6BpB,uBAAuB,CAAC,MAAM,EAAE;QACpC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,aAAa,CAAC;IA+B1B,OAAO,CAAC,gBAAgB;IA8DxB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,YAAY;IAqBpB,OAAO,CAAC,gBAAgB;IAqBxB,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,cAAc;IAkBtB,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,sBAAsB;IAmC9B,OAAO,CAAC,iBAAiB;IAiBzB,OAAO,CAAC,uBAAuB;IAmC/B,OAAO,CAAC,yBAAyB;IAiBjC,OAAO,CAAC,uBAAuB;IAoB/B,OAAO,CAAC,sBAAsB;CAiB/B"}
1
+ {"version":3,"file":"default-email-template-renderer.d.ts","sourceRoot":"","sources":["../../src/services/default-email-template-renderer.ts"],"names":[],"mappings":"AACA,OAAO,EACL,sBAAsB,EACtB,aAAa,EACd,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AAapF,qBACa,4BAA6B,YAAW,sBAAsB;IACzE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAGrC,QAAQ,EAAE,mBAAmB,EAE7B,aAAa,CAAC,EAAE,MAAM;IAwBlB,uBAAuB,CAAC,MAAM,EAAE;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,aAAa,CAAC;IAqCpB,kBAAkB,CAAC,MAAM,EAAE;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC;IA6BpB,wBAAwB,CAAC,MAAM,EAAE;QACrC,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,aAAa,CAAC;IAgCpB,0BAA0B,CAAC,MAAM,EAAE;QACvC,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC;IAyBpB,qBAAqB,CAAC,MAAM,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,gBAAgB,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,aAAa,CAAC;IAqCpB,qBAAqB,CAAC,MAAM,EAAE;QAClC,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,gBAAgB,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,aAAa,CAAC;IA0CpB,6BAA6B,CAAC,MAAM,EAAE;QAC1C,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,gBAAgB,EAAE,MAAM,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,GAAG,OAAO,CAAC,aAAa,CAAC;IAqCpB,uBAAuB,CAAC,MAAM,EAAE;QACpC,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,IAAI,CAAC;KACf,GAAG,OAAO,CAAC,aAAa,CAAC;IAYpB,yBAAyB,CAAC,MAAM,EAAE;QACtC,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,IAAI,CAAC;KACjB,GAAG,OAAO,CAAC,aAAa,CAAC;IAgB1B,OAAO,CAAC,mBAAmB;IAwCrB,wBAAwB,CAAC,MAAM,EAAE;QACrC,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,IAAI,CAAC;KACpB,GAAG,OAAO,CAAC,aAAa,CAAC;IA6BpB,uBAAuB,CAAC,MAAM,EAAE;QACpC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,aAAa,CAAC;IA+B1B,OAAO,CAAC,gBAAgB;IA8DxB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,YAAY;IAqBpB,OAAO,CAAC,gBAAgB;IAqBxB,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,cAAc;IAkBtB,OAAO,CAAC,gBAAgB;IAgBxB,OAAO,CAAC,sBAAsB;IAmC9B,OAAO,CAAC,iBAAiB;IAiBzB,OAAO,CAAC,uBAAuB;IAmC/B,OAAO,CAAC,yBAAyB;IAiBjC,OAAO,CAAC,uBAAuB;IAoB/B,OAAO,CAAC,sBAAsB;CAiB/B"}
@@ -191,6 +191,37 @@ let DefaultEmailTemplateRenderer = class DefaultEmailTemplateRenderer {
191
191
  ].join('\n');
192
192
  return { subject, html, text };
193
193
  }
194
+ async renderEmailChallengeCodeEmail(params) {
195
+ const content = `
196
+ <tr>
197
+ <td style="padding: 40px;">
198
+ <h1 style="margin: 0 0 16px; color: #333333; font-size: 24px; font-weight: 600;">Your Verification Code</h1>
199
+ <p style="margin: 0 0 24px; color: #555555; font-size: 16px; line-height: 24px;">
200
+ Enter this code in ${this.appName} to confirm this is your email address:
201
+ </p>
202
+ ${this.renderCodeBox(params.code)}
203
+ ${this.renderExpiryNote(params.expiresInMinutes, 'code')}
204
+ ${this.renderWarningBox('Security Notice', 'If you didn&#39;t ask for this code, you can safely ignore this email. Do not share the code with anyone.')}
205
+ </td>
206
+ </tr>`;
207
+ const subject = `Your ${this.appName} verification code`;
208
+ const html = this.renderBaseLayout(subject, content);
209
+ const text = [
210
+ `${this.appName} - Your Verification Code`,
211
+ '',
212
+ `Enter this code in ${this.appName} to confirm this is your email address:`,
213
+ '',
214
+ params.code,
215
+ '',
216
+ this.renderExpiryText(params.expiresInMinutes, 'code'),
217
+ '',
218
+ "If you didn't ask for this code, you can safely ignore this email.",
219
+ 'Do not share the code with anyone.',
220
+ '',
221
+ `(c) ${this.copyrightYear} ${this.companyName}. All rights reserved.`,
222
+ ].join('\n');
223
+ return { subject, html, text };
224
+ }
194
225
  async renderPasskeyAddedEmail(params) {
195
226
  return this.renderPasskeyNotice({
196
227
  subject: `A passkey was added to your ${this.appName} account`,
@@ -1 +1 @@
1
- {"version":3,"file":"default-email-template-renderer.js","sourceRoot":"","sources":["../../src/services/default-email-template-renderer.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAM5C,sDAAkD;AAa3C,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAUvC,YACE,QAA6B,EAE7B,aAAsB;QAEtB,IAAI,CAAC,OAAO,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW;YACrC,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,WAAW,CAAC;YAClC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACjB,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY;YACvC,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,YAAY,CAAC;YACnC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe;YAC7C,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,eAAe,CAAC;YACtC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc;YAC3C,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,cAAc,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,aAAa,GAAG,aAAa,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,CAAC;IAMD,KAAK,CAAC,uBAAuB,CAAC,MAK7B;QACC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI;YAC3B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe;YACrC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC;YAC3D,CAAC,CAAC,EAAE,CAAC;QAIP,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI;YAC7B,CAAC,CAAC,+BAA+B,IAAI,CAAC,OAAO,8BAA8B;YAC3E,CAAC,CAAC,kCAAkC,IAAI,CAAC,OAAO,wBAAwB,CAAC;QAE3E,MAAM,OAAO,GAAG;;;;;cAKN,WAAW;;YAEb,SAAS;YACT,QAAQ;YACR,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;;uDAElC,IAAI,CAAC,OAAO;;;YAGvD,CAAC;QAET,MAAM,OAAO,GAAG,eAAe,IAAI,CAAC,OAAO,UAAU,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAEjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAGxB;QACC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI;YAC1B,CAAC,CAAC,MAAM,IAAA,wBAAU,EAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACjC,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc;YAClC,CAAC,CAAC,oFAAoF,IAAI,CAAC,cAAc,MAAM;YAC/G,CAAC,CAAC;oCAC4B,IAAI,CAAC,OAAO;eACjC,CAAC;QAEZ,MAAM,OAAO,GAAG;;;6FAGyE,QAAQ;YACzF,QAAQ;;2BAEO,IAAI,CAAC,OAAO;;;YAG3B,CAAC;QAET,MAAM,OAAO,GAAG,cAAc,IAAI,CAAC,OAAO,GAAG,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,MAK9B;QACC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI;YAC3B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ;YAC9B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC;YACtD,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,OAAO,GAAG;;;;;4DAKwC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;;YAE7E,SAAS;YACT,QAAQ;YACR,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7E,IAAI,CAAC,gBAAgB,CACrB,iBAAiB,EACjB,qHAAqH,CACtH;;YAEC,CAAC;QAET,MAAM,OAAO,GAAG,cAAc,IAAI,CAAC,OAAO,WAAW,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAElD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,MAEhC;QACC,MAAM,OAAO,GAAG;;;;;mBAKD,IAAI,CAAC,OAAO;;YAEnB,IAAI,CAAC,cAAc,CACnB,gBAAgB,EAChB,6IAA6I,CAC9I;;2BAEgB,IAAI,CAAC,OAAO;;;YAG3B,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,uBAAuB,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAEpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAI3B;QACC,MAAM,OAAO,GAAG;;;;;iCAKa,IAAI,CAAC,OAAO;;YAEjC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;YACtD,IAAI,CAAC,cAAc,CACnB,gBAAgB,EAChB,qJAAqJ,CACtJ;;YAEC,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,oBAAoB,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG;YACX,GAAG,IAAI,CAAC,OAAO,qBAAqB;YACpC,EAAE;YACF,sBAAsB,IAAI,CAAC,OAAO,6EAA6E;YAC/G,EAAE;YACF,MAAM,CAAC,IAAI;YACX,EAAE;YACF,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;YACtD,EAAE;YACF,uFAAuF;YACvF,2EAA2E;YAC3E,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAI3B;QACC,MAAM,OAAO,GAAG;;;;;iCAKa,IAAI,CAAC,OAAO;;YAEjC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;YACtD,IAAI,CAAC,gBAAgB,CACrB,iBAAiB,EACjB,wHAAwH,CACzH;;YAEC,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,eAAe,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG;YACX,GAAG,IAAI,CAAC,OAAO,uBAAuB;YACtC,EAAE;YACF,sBAAsB,IAAI,CAAC,OAAO,mCAAmC;YACrE,EAAE;YACF,MAAM,CAAC,IAAI;YACX,EAAE;YACF,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;YACtD,EAAE;YACF,2EAA2E;YAC3E,0CAA0C;YAC1C,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAI7B;QACC,OAAO,IAAI,CAAC,mBAAmB,CAAC;YAC9B,OAAO,EAAE,+BAA+B,IAAI,CAAC,OAAO,UAAU;YAC9D,OAAO,EAAE,eAAe;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,MAAM,CAAC,OAAO;YAClB,OAAO,EACL,uIAAuI;SAC1I,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,MAI/B;QACC,OAAO,IAAI,CAAC,mBAAmB,CAAC;YAC9B,OAAO,EAAE,mCAAmC,IAAI,CAAC,OAAO,UAAU;YAClE,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,cAAc;YACtB,EAAE,EAAE,MAAM,CAAC,SAAS;YACpB,OAAO,EAAE,wFAAwF;SAClG,CAAC,CAAC;IACL,CAAC;IAOO,mBAAmB,CAAC,MAO3B;QACC,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG;;;6FAGyE,MAAM,CAAC,OAAO;;gCAE3E,IAAA,wBAAU,EAAC,MAAM,CAAC,WAAW,CAAC,cAAc,MAAM,CAAC,MAAM,SAAS,IAAI,CAAC,OAAO,eAAe,IAAI;;YAErH,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,IAAA,wBAAU,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;;2BAElD,IAAI,CAAC,OAAO;;;YAG3B,CAAC;QAET,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG;YACX,GAAG,IAAI,CAAC,OAAO,MAAM,MAAM,CAAC,OAAO,EAAE;YACrC,EAAE;YACF,gBAAgB,MAAM,CAAC,WAAW,SAAS,MAAM,CAAC,MAAM,SAAS,IAAI,CAAC,OAAO,eAAe,IAAI,GAAG;YACnG,EAAE;YACF,mBAAmB,MAAM,CAAC,OAAO,EAAE;YACnC,EAAE;YACF,OAAO;YACP,OAAO,IAAI,CAAC,OAAO,OAAO;YAC1B,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,MAG9B;QACC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW;YACjC,CAAC,CAAC,oCAAoC,IAAA,wBAAU,EAAC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,GAAG;YACrF,CAAC,CAAC,yBAAyB,CAAC;QAE9B,MAAM,OAAO,GAAG;;;;;mBAKD,IAAI,CAAC,OAAO;;;cAGjB,QAAQ;;YAEV,IAAI,CAAC,cAAc,CACnB,iBAAiB,EACjB,4HAA4H,CAC7H;;YAEC,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,sCAAsC,CAAC;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAElD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAG7B;QACC,MAAM,YAAY,GAAG,IAAA,wBAAU,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG;;;;;wCAKoB,IAAI,CAAC,OAAO,mCAAmC,YAAY;;YAEvF,IAAI,CAAC,cAAc,CACnB,gBAAgB,EAChB,yEAAyE,CAC1E;;2BAEgB,IAAI,CAAC,OAAO;;;YAG3B,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,4BAA4B,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAEjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAMO,gBAAgB,CAAC,KAAa,EAAE,OAAe;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO;YAC3B,CAAC,CAAC,aAAa,IAAI,CAAC,OAAO,UAAU,IAAI,CAAC,OAAO,gEAAgE;YACjH,CAAC,CAAC,2DAA2D,IAAI,CAAC,YAAY,8BAA8B,IAAI,CAAC,OAAO,SAAS,CAAC;QAEpI,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY;YACnC,CAAC,CAAC,mGAAmG,IAAI,CAAC,YAAY,mBAAmB,IAAI,CAAC,YAAY,MAAM,IAAI,CAAC,YAAY,UAAU;YAC3L,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe;YACtC,CAAC,CAAC,gEAAgE,IAAI,CAAC,eAAe,MAAM;YAC5F,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO;;;;;WAKA,KAAK;;;;;;;;;;;gBAWA,QAAQ;;;;;YAKZ,OAAO;;;;;;yBAMM,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW;;gBAE/C,WAAW;gBACX,WAAW;;;;;;;;;;;;QAYnB,CAAC;IACP,CAAC;IAMO,aAAa,CAAC,IAAY;QAChC,MAAM,QAAQ,GAAG,IAAA,wBAAU,EAAC,IAAI,CAAC,CAAC;QAClC,OAAO;;;+HAGoH,IAAI,CAAC,YAAY;6FACnD,IAAI,CAAC,YAAY;oBAC1F,QAAQ;;;;mBAIT,CAAC;IAClB,CAAC;IAEO,YAAY,CAAC,KAAa,EAAE,GAAW;QAC7C,MAAM,OAAO,GAAG,IAAA,wBAAU,EAAC,GAAG,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,KAAK,CAAC,CAAC;QACpC,OAAO;;;;2BAIgB,OAAO,yEAAyE,IAAI,CAAC,YAAY,oGAAoG,SAAS;;;mBAGtN,CAAC;IAClB,CAAC;IAUO,gBAAgB,CACtB,gBAAoC,EACpC,IAAqB;QAErB,IACE,OAAO,gBAAgB,KAAK,QAAQ;YACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,gBAAgB,IAAI,CAAC,EACrB,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAElD,OAAO;;mBAEQ,IAAI,eAAe,OAAO,IAAI,IAAI;eACtC,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,KAAa,EAAE,OAAe;QACrD,OAAO;;;;;4BAKiB,KAAK,cAAc,OAAO;;;;mBAInC,CAAC;IAClB,CAAC;IAEO,cAAc,CAAC,KAAa,EAAE,OAAe;QACnD,OAAO;;;;;4BAKiB,KAAK,cAAc,OAAO;;;;mBAInC,CAAC;IAClB,CAAC;IAOO,gBAAgB,CACtB,gBAAoC,EACpC,IAAqB;QAErB,IACE,OAAO,gBAAgB,KAAK,QAAQ;YACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,gBAAgB,IAAI,CAAC,EACrB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC7C,OAAO,QAAQ,IAAI,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC;IACvF,CAAC;IAEO,sBAAsB,CAAC,MAK9B;QACC,MAAM,KAAK,GAAa;YACtB,GAAG,IAAI,CAAC,OAAO,sBAAsB;YACrC,EAAE;YACF,MAAM,CAAC,IAAI;gBACT,CAAC,CAAC,0BAA0B,IAAI,CAAC,OAAO,8BAA8B;gBACtE,CAAC,CAAC,kCAAkC,IAAI,CAAC,OAAO,eAAe;SAClE,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAC9C,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAC9B,CAAC;QACF,IAAI,kBAAkB,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,wCAAwC,IAAI,CAAC,OAAO,qCAAqC,EACzF,EAAE,EACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB,CACtE,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,iBAAiB,CAAC,MAAwC;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc;YAC9B,CAAC,CAAC,IAAI,CAAC,cAAc;YACrB,CAAC,CAAC,yBAAyB,IAAI,CAAC,OAAO,uCAAuC,CAAC;QACjF,OAAO;YACL,GAAG,IAAI,CAAC,OAAO,MAAM,QAAQ,GAAG;YAChC,EAAE;YACF,IAAI;YACJ,EAAE;YACF,OAAO;YACP,OAAO,IAAI,CAAC,OAAO,OAAO;YAC1B,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAEO,uBAAuB,CAAC,MAK/B;QACC,MAAM,KAAK,GAAa;YACtB,cAAc,IAAI,CAAC,OAAO,WAAW;YACrC,EAAE;YACF,uCAAuC;SACxC,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,sBAAsB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CACvC,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAC9B,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,kBAAkB,EAClB,8EAA8E,EAC9E,oCAAoC,EACpC,EAAE,EACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB,CACtE,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,yBAAyB,CAAC,MAAyB;QACzD,KAAK,MAAM,CAAC;QACZ,OAAO;YACL,GAAG,IAAI,CAAC,OAAO,qBAAqB;YACpC,EAAE;YACF,QAAQ,IAAI,CAAC,OAAO,yCAAyC;YAC7D,EAAE;YACF,6FAA6F;YAC7F,6DAA6D;YAC7D,EAAE;YACF,OAAO;YACP,OAAO,IAAI,CAAC,OAAO,OAAO;YAC1B,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAEO,uBAAuB,CAAC,MAG/B;QACC,KAAK,MAAM,CAAC,KAAK,CAAC;QAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW;YACjC,CAAC,CAAC,oCAAoC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG;YACzE,CAAC,CAAC,yBAAyB,CAAC;QAC9B,OAAO;YACL,GAAG,IAAI,CAAC,OAAO,+BAA+B;YAC9C,EAAE;YACF,iFAAiF;YACjF,QAAQ;YACR,EAAE;YACF,sEAAsE;YACtE,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAEO,sBAAsB,CAAC,MAG9B;QACC,OAAO;YACL,GAAG,IAAI,CAAC,OAAO,0BAA0B;YACzC,EAAE;YACF,6BAA6B,IAAI,CAAC,OAAO,2BAA2B,MAAM,CAAC,QAAQ,GAAG;YACtF,EAAE;YACF,qFAAqF;YACrF,EAAE;YACF,OAAO;YACP,OAAO,IAAI,CAAC,OAAO,OAAO;YAC1B,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;CACF,CAAA;AAjsBY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;;GACA,4BAA4B,CAisBxC;AAGD,SAAS,gBAAgB,CAAC,IAAU;IAClC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC;AACpE,CAAC"}
1
+ {"version":3,"file":"default-email-template-renderer.js","sourceRoot":"","sources":["../../src/services/default-email-template-renderer.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAM5C,sDAAkD;AAa3C,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAUvC,YACE,QAA6B,EAE7B,aAAsB;QAEtB,IAAI,CAAC,OAAO,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW;YACrC,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,WAAW,CAAC;YAClC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACjB,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY;YACvC,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,YAAY,CAAC;YACnC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe;YAC7C,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,eAAe,CAAC;YACtC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc;YAC3C,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,cAAc,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,aAAa,GAAG,aAAa,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,CAAC;IAMD,KAAK,CAAC,uBAAuB,CAAC,MAK7B;QACC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI;YAC3B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe;YACrC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC;YAC3D,CAAC,CAAC,EAAE,CAAC;QAIP,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI;YAC7B,CAAC,CAAC,+BAA+B,IAAI,CAAC,OAAO,8BAA8B;YAC3E,CAAC,CAAC,kCAAkC,IAAI,CAAC,OAAO,wBAAwB,CAAC;QAE3E,MAAM,OAAO,GAAG;;;;;cAKN,WAAW;;YAEb,SAAS;YACT,QAAQ;YACR,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;;uDAElC,IAAI,CAAC,OAAO;;;YAGvD,CAAC;QAET,MAAM,OAAO,GAAG,eAAe,IAAI,CAAC,OAAO,UAAU,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAEjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAGxB;QACC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI;YAC1B,CAAC,CAAC,MAAM,IAAA,wBAAU,EAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACjC,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc;YAClC,CAAC,CAAC,oFAAoF,IAAI,CAAC,cAAc,MAAM;YAC/G,CAAC,CAAC;oCAC4B,IAAI,CAAC,OAAO;eACjC,CAAC;QAEZ,MAAM,OAAO,GAAG;;;6FAGyE,QAAQ;YACzF,QAAQ;;2BAEO,IAAI,CAAC,OAAO;;;YAG3B,CAAC;QAET,MAAM,OAAO,GAAG,cAAc,IAAI,CAAC,OAAO,GAAG,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,MAK9B;QACC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI;YAC3B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;YACjC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ;YAC9B,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC;YACtD,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,OAAO,GAAG;;;;;4DAKwC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;;YAE7E,SAAS;YACT,QAAQ;YACR,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7E,IAAI,CAAC,gBAAgB,CACrB,iBAAiB,EACjB,qHAAqH,CACtH;;YAEC,CAAC;QAET,MAAM,OAAO,GAAG,cAAc,IAAI,CAAC,OAAO,WAAW,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAElD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,MAEhC;QACC,MAAM,OAAO,GAAG;;;;;mBAKD,IAAI,CAAC,OAAO;;YAEnB,IAAI,CAAC,cAAc,CACnB,gBAAgB,EAChB,6IAA6I,CAC9I;;2BAEgB,IAAI,CAAC,OAAO;;;YAG3B,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,uBAAuB,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAEpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAI3B;QACC,MAAM,OAAO,GAAG;;;;;iCAKa,IAAI,CAAC,OAAO;;YAEjC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;YACtD,IAAI,CAAC,cAAc,CACnB,gBAAgB,EAChB,qJAAqJ,CACtJ;;YAEC,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,oBAAoB,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG;YACX,GAAG,IAAI,CAAC,OAAO,qBAAqB;YACpC,EAAE;YACF,sBAAsB,IAAI,CAAC,OAAO,6EAA6E;YAC/G,EAAE;YACF,MAAM,CAAC,IAAI;YACX,EAAE;YACF,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;YACtD,EAAE;YACF,uFAAuF;YACvF,2EAA2E;YAC3E,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAI3B;QACC,MAAM,OAAO,GAAG;;;;;iCAKa,IAAI,CAAC,OAAO;;YAEjC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;YACtD,IAAI,CAAC,gBAAgB,CACrB,iBAAiB,EACjB,wHAAwH,CACzH;;YAEC,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,eAAe,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG;YACX,GAAG,IAAI,CAAC,OAAO,uBAAuB;YACtC,EAAE;YACF,sBAAsB,IAAI,CAAC,OAAO,mCAAmC;YACrE,EAAE;YACF,MAAM,CAAC,IAAI;YACX,EAAE;YACF,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;YACtD,EAAE;YACF,2EAA2E;YAC3E,0CAA0C;YAC1C,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAOD,KAAK,CAAC,6BAA6B,CAAC,MAMnC;QACC,MAAM,OAAO,GAAG;;;;;iCAKa,IAAI,CAAC,OAAO;;YAEjC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;YACtD,IAAI,CAAC,gBAAgB,CACrB,iBAAiB,EACjB,2GAA2G,CAC5G;;YAEC,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,oBAAoB,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG;YACX,GAAG,IAAI,CAAC,OAAO,2BAA2B;YAC1C,EAAE;YACF,sBAAsB,IAAI,CAAC,OAAO,yCAAyC;YAC3E,EAAE;YACF,MAAM,CAAC,IAAI;YACX,EAAE;YACF,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;YACtD,EAAE;YACF,oEAAoE;YACpE,oCAAoC;YACpC,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAI7B;QACC,OAAO,IAAI,CAAC,mBAAmB,CAAC;YAC9B,OAAO,EAAE,+BAA+B,IAAI,CAAC,OAAO,UAAU;YAC9D,OAAO,EAAE,eAAe;YACxB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,MAAM,CAAC,OAAO;YAClB,OAAO,EACL,uIAAuI;SAC1I,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,MAI/B;QACC,OAAO,IAAI,CAAC,mBAAmB,CAAC;YAC9B,OAAO,EAAE,mCAAmC,IAAI,CAAC,OAAO,UAAU;YAClE,OAAO,EAAE,iBAAiB;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,cAAc;YACtB,EAAE,EAAE,MAAM,CAAC,SAAS;YACpB,OAAO,EAAE,wFAAwF;SAClG,CAAC,CAAC;IACL,CAAC;IAOO,mBAAmB,CAAC,MAO3B;QACC,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG;;;6FAGyE,MAAM,CAAC,OAAO;;gCAE3E,IAAA,wBAAU,EAAC,MAAM,CAAC,WAAW,CAAC,cAAc,MAAM,CAAC,MAAM,SAAS,IAAI,CAAC,OAAO,eAAe,IAAI;;YAErH,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,IAAA,wBAAU,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;;2BAElD,IAAI,CAAC,OAAO;;;YAG3B,CAAC;QAET,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG;YACX,GAAG,IAAI,CAAC,OAAO,MAAM,MAAM,CAAC,OAAO,EAAE;YACrC,EAAE;YACF,gBAAgB,MAAM,CAAC,WAAW,SAAS,MAAM,CAAC,MAAM,SAAS,IAAI,CAAC,OAAO,eAAe,IAAI,GAAG;YACnG,EAAE;YACF,mBAAmB,MAAM,CAAC,OAAO,EAAE;YACnC,EAAE;YACF,OAAO;YACP,OAAO,IAAI,CAAC,OAAO,OAAO;YAC1B,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,MAG9B;QACC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW;YACjC,CAAC,CAAC,oCAAoC,IAAA,wBAAU,EAAC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,GAAG;YACrF,CAAC,CAAC,yBAAyB,CAAC;QAE9B,MAAM,OAAO,GAAG;;;;;mBAKD,IAAI,CAAC,OAAO;;;cAGjB,QAAQ;;YAEV,IAAI,CAAC,cAAc,CACnB,iBAAiB,EACjB,4HAA4H,CAC7H;;YAEC,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,sCAAsC,CAAC;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAElD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAG7B;QACC,MAAM,YAAY,GAAG,IAAA,wBAAU,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG;;;;;wCAKoB,IAAI,CAAC,OAAO,mCAAmC,YAAY;;YAEvF,IAAI,CAAC,cAAc,CACnB,gBAAgB,EAChB,yEAAyE,CAC1E;;2BAEgB,IAAI,CAAC,OAAO;;;YAG3B,CAAC;QAET,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,OAAO,4BAA4B,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAEjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAMO,gBAAgB,CAAC,KAAa,EAAE,OAAe;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO;YAC3B,CAAC,CAAC,aAAa,IAAI,CAAC,OAAO,UAAU,IAAI,CAAC,OAAO,gEAAgE;YACjH,CAAC,CAAC,2DAA2D,IAAI,CAAC,YAAY,8BAA8B,IAAI,CAAC,OAAO,SAAS,CAAC;QAEpI,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY;YACnC,CAAC,CAAC,mGAAmG,IAAI,CAAC,YAAY,mBAAmB,IAAI,CAAC,YAAY,MAAM,IAAI,CAAC,YAAY,UAAU;YAC3L,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe;YACtC,CAAC,CAAC,gEAAgE,IAAI,CAAC,eAAe,MAAM;YAC5F,CAAC,CAAC,EAAE,CAAC;QAEP,OAAO;;;;;WAKA,KAAK;;;;;;;;;;;gBAWA,QAAQ;;;;;YAKZ,OAAO;;;;;;yBAMM,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW;;gBAE/C,WAAW;gBACX,WAAW;;;;;;;;;;;;QAYnB,CAAC;IACP,CAAC;IAMO,aAAa,CAAC,IAAY;QAChC,MAAM,QAAQ,GAAG,IAAA,wBAAU,EAAC,IAAI,CAAC,CAAC;QAClC,OAAO;;;+HAGoH,IAAI,CAAC,YAAY;6FACnD,IAAI,CAAC,YAAY;oBAC1F,QAAQ;;;;mBAIT,CAAC;IAClB,CAAC;IAEO,YAAY,CAAC,KAAa,EAAE,GAAW;QAC7C,MAAM,OAAO,GAAG,IAAA,wBAAU,EAAC,GAAG,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,KAAK,CAAC,CAAC;QACpC,OAAO;;;;2BAIgB,OAAO,yEAAyE,IAAI,CAAC,YAAY,oGAAoG,SAAS;;;mBAGtN,CAAC;IAClB,CAAC;IAUO,gBAAgB,CACtB,gBAAoC,EACpC,IAAqB;QAErB,IACE,OAAO,gBAAgB,KAAK,QAAQ;YACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,gBAAgB,IAAI,CAAC,EACrB,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAElD,OAAO;;mBAEQ,IAAI,eAAe,OAAO,IAAI,IAAI;eACtC,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,KAAa,EAAE,OAAe;QACrD,OAAO;;;;;4BAKiB,KAAK,cAAc,OAAO;;;;mBAInC,CAAC;IAClB,CAAC;IAEO,cAAc,CAAC,KAAa,EAAE,OAAe;QACnD,OAAO;;;;;4BAKiB,KAAK,cAAc,OAAO;;;;mBAInC,CAAC;IAClB,CAAC;IAOO,gBAAgB,CACtB,gBAAoC,EACpC,IAAqB;QAErB,IACE,OAAO,gBAAgB,KAAK,QAAQ;YACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,gBAAgB,IAAI,CAAC,EACrB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC7C,OAAO,QAAQ,IAAI,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC;IACvF,CAAC;IAEO,sBAAsB,CAAC,MAK9B;QACC,MAAM,KAAK,GAAa;YACtB,GAAG,IAAI,CAAC,OAAO,sBAAsB;YACrC,EAAE;YACF,MAAM,CAAC,IAAI;gBACT,CAAC,CAAC,0BAA0B,IAAI,CAAC,OAAO,8BAA8B;gBACtE,CAAC,CAAC,kCAAkC,IAAI,CAAC,OAAO,eAAe;SAClE,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAC9C,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAC9B,CAAC;QACF,IAAI,kBAAkB,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,wCAAwC,IAAI,CAAC,OAAO,qCAAqC,EACzF,EAAE,EACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB,CACtE,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,iBAAiB,CAAC,MAAwC;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc;YAC9B,CAAC,CAAC,IAAI,CAAC,cAAc;YACrB,CAAC,CAAC,yBAAyB,IAAI,CAAC,OAAO,uCAAuC,CAAC;QACjF,OAAO;YACL,GAAG,IAAI,CAAC,OAAO,MAAM,QAAQ,GAAG;YAChC,EAAE;YACF,IAAI;YACJ,EAAE;YACF,OAAO;YACP,OAAO,IAAI,CAAC,OAAO,OAAO;YAC1B,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAEO,uBAAuB,CAAC,MAK/B;QACC,MAAM,KAAK,GAAa;YACtB,cAAc,IAAI,CAAC,OAAO,WAAW;YACrC,EAAE;YACF,uCAAuC;SACxC,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,sBAAsB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CACvC,MAAM,CAAC,gBAAgB,EACvB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAC9B,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,kBAAkB,EAClB,8EAA8E,EAC9E,oCAAoC,EACpC,EAAE,EACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB,CACtE,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,yBAAyB,CAAC,MAAyB;QACzD,KAAK,MAAM,CAAC;QACZ,OAAO;YACL,GAAG,IAAI,CAAC,OAAO,qBAAqB;YACpC,EAAE;YACF,QAAQ,IAAI,CAAC,OAAO,yCAAyC;YAC7D,EAAE;YACF,6FAA6F;YAC7F,6DAA6D;YAC7D,EAAE;YACF,OAAO;YACP,OAAO,IAAI,CAAC,OAAO,OAAO;YAC1B,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAEO,uBAAuB,CAAC,MAG/B;QACC,KAAK,MAAM,CAAC,KAAK,CAAC;QAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW;YACjC,CAAC,CAAC,oCAAoC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG;YACzE,CAAC,CAAC,yBAAyB,CAAC;QAC9B,OAAO;YACL,GAAG,IAAI,CAAC,OAAO,+BAA+B;YAC9C,EAAE;YACF,iFAAiF;YACjF,QAAQ;YACR,EAAE;YACF,sEAAsE;YACtE,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAEO,sBAAsB,CAAC,MAG9B;QACC,OAAO;YACL,GAAG,IAAI,CAAC,OAAO,0BAA0B;YACzC,EAAE;YACF,6BAA6B,IAAI,CAAC,OAAO,2BAA2B,MAAM,CAAC,QAAQ,GAAG;YACtF,EAAE;YACF,qFAAqF;YACrF,EAAE;YACF,OAAO;YACP,OAAO,IAAI,CAAC,OAAO,OAAO;YAC1B,EAAE;YACF,OAAO,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,WAAW,wBAAwB;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;CACF,CAAA;AAjvBY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;;GACA,4BAA4B,CAivBxC;AAGD,SAAS,gBAAgB,CAAC,IAAU;IAClC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC;AACpE,CAAC"}
@@ -0,0 +1,74 @@
1
+ import type { AuthModuleOptions } from '../auth.module';
2
+ import { IAuthLogger } from '../interfaces/auth-logger.interface';
3
+ import { IEmailChallengeRepository } from '../interfaces/email-challenge-repository.interface';
4
+ import { IEmailService } from '../interfaces/email-service.interface';
5
+ import { IRateLimiter } from '../interfaces/rate-limiter.interface';
6
+ export declare const DEFAULT_EMAIL_CHALLENGE_ISSUE_LIMITS: {
7
+ readonly cooldownSeconds: 60;
8
+ readonly perHour: 5;
9
+ readonly perIpPerHour: 30;
10
+ };
11
+ export type EmailChallengeFailureReason = 'WRONG' | 'EXPIRED' | 'LOCKED';
12
+ export type EmailChallengeResult = {
13
+ ok: true;
14
+ email: string;
15
+ purpose: string;
16
+ } | {
17
+ ok: false;
18
+ reason: EmailChallengeFailureReason;
19
+ };
20
+ export interface IssuedEmailChallenge {
21
+ challengeId: string;
22
+ expiresAt: Date;
23
+ expiresInMinutes: number;
24
+ }
25
+ interface CallOptions {
26
+ realm?: string | null;
27
+ ipAddress?: string;
28
+ }
29
+ export declare class EmailChallengeService {
30
+ private readonly repository;
31
+ private readonly options;
32
+ private readonly securityLogger;
33
+ private readonly rateLimiter;
34
+ private readonly emailService;
35
+ private readonly logger;
36
+ private readonly key;
37
+ private readonly realmsEnabled;
38
+ private readonly ipHashSalt;
39
+ private lastSweepAt;
40
+ private warnedMissingIp;
41
+ constructor(repository: IEmailChallengeRepository | null, options: AuthModuleOptions, securityLogger: IAuthLogger, rateLimiter: IRateLimiter, emailService?: IEmailService | null);
42
+ get available(): boolean;
43
+ issue(input: {
44
+ email: string;
45
+ purpose: string;
46
+ emailData?: Record<string, unknown>;
47
+ }, opts?: CallOptions & {
48
+ ttlMinutes?: number;
49
+ }): Promise<IssuedEmailChallenge>;
50
+ verify(input: {
51
+ challengeId: string;
52
+ code: string;
53
+ email: string;
54
+ purpose: string;
55
+ }, opts?: CallOptions): Promise<EmailChallengeResult>;
56
+ revoke(input: {
57
+ purpose: string;
58
+ email?: string;
59
+ }, opts?: CallOptions): Promise<number>;
60
+ private requireRepository;
61
+ private requireIssuing;
62
+ private realmOf;
63
+ private mac;
64
+ private hashEmail;
65
+ private hashPurpose;
66
+ private hashCode;
67
+ private issueLimits;
68
+ private assertWithinLimits;
69
+ private record;
70
+ private cancelUnsent;
71
+ private sweep;
72
+ }
73
+ export {};
74
+ //# sourceMappingURL=email-challenge.service.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"email-challenge.service.d.ts","sourceRoot":"","sources":["../../src/services/email-challenge.service.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAiB,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAEL,yBAAyB,EAC1B,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAsBpE,eAAO,MAAM,oCAAoC;;;;CAIvC,CAAC;AAWX,MAAM,MAAM,2BAA2B,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEzE,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAA;CAAE,CAAC;AAEvD,MAAM,WAAW,oBAAoB;IAEnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,UAAU,WAAW;IAEnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmCD,qBACa,qBAAqB;IAU9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAE3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAE/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAjB/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAU;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,eAAe,CAAS;gBAIb,UAAU,EAAE,yBAAyB,GAAG,IAAI,EAE5C,OAAO,EAAE,iBAAiB,EAE1B,cAAc,EAAE,WAAW,EAE3B,WAAW,EAAE,YAAY,EAEzB,YAAY,GAAE,aAAa,GAAG,IAAW;IAqB5D,IAAI,SAAS,IAAI,OAAO,CAEvB;IAqBK,KAAK,CACT,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAC9E,IAAI,GAAE,WAAW,GAAG;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAC/C,OAAO,CAAC,oBAAoB,CAAC;IA+E1B,MAAM,CACV,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAC5E,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,oBAAoB,CAAC;IAqE1B,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAcjG,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,OAAO;IAaf,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,WAAW;YAsCL,kBAAkB;YAYlB,MAAM;YAON,YAAY;YAaZ,KAAK;CAgBpB"}
@@ -0,0 +1,306 @@
1
+ "use strict";
2
+ var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
3
+ var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
4
+ if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
5
+ else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
6
+ return c > 3 && r && Object.defineProperty(target, key, r), r;
7
+ };
8
+ var __metadata = (this && this.__metadata) || function (k, v) {
9
+ if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
10
+ };
11
+ var __param = (this && this.__param) || function (paramIndex, decorator) {
12
+ return function (target, key) { decorator(target, key, paramIndex); }
13
+ };
14
+ var EmailChallengeService_1;
15
+ Object.defineProperty(exports, "__esModule", { value: true });
16
+ exports.EmailChallengeService = exports.DEFAULT_EMAIL_CHALLENGE_ISSUE_LIMITS = void 0;
17
+ const common_1 = require("@nestjs/common");
18
+ const crypto_1 = require("crypto");
19
+ const constants_1 = require("../constants");
20
+ const auth_logger_interface_1 = require("../interfaces/auth-logger.interface");
21
+ const email_challenge_exceptions_1 = require("../exceptions/email-challenge.exceptions");
22
+ const step_up_exceptions_1 = require("../exceptions/step-up.exceptions");
23
+ const ip_hash_1 = require("../utils/ip-hash");
24
+ const rate_limit_helpers_1 = require("../utils/rate-limit-helpers");
25
+ const CODE_ATTEMPTS = 3;
26
+ const DEFAULT_TTL_MINUTES = 15;
27
+ const MAX_TTL_MINUTES = 60;
28
+ const MAX_PURPOSE_LENGTH = 200;
29
+ const MAX_CHALLENGE_ID_LENGTH = 128;
30
+ const CHALLENGE_ID_BYTES = 32;
31
+ const HOUR_MS = 3_600_000;
32
+ const SWEEP_THROTTLE_MS = 2 * 60_000;
33
+ const HKDF_INFO = 'nestjs-auth-graphql email-challenge/v1';
34
+ exports.DEFAULT_EMAIL_CHALLENGE_ISSUE_LIMITS = {
35
+ cooldownSeconds: 60,
36
+ perHour: 5,
37
+ perIpPerHour: 30,
38
+ };
39
+ let EmailChallengeService = EmailChallengeService_1 = class EmailChallengeService {
40
+ constructor(repository, options, securityLogger, rateLimiter, emailService = null) {
41
+ this.repository = repository;
42
+ this.options = options;
43
+ this.securityLogger = securityLogger;
44
+ this.rateLimiter = rateLimiter;
45
+ this.emailService = emailService;
46
+ this.logger = new common_1.Logger(EmailChallengeService_1.name);
47
+ this.lastSweepAt = 0;
48
+ this.warnedMissingIp = false;
49
+ this.key = Buffer.from((0, crypto_1.hkdfSync)('sha256', options.verificationCodeSecret || options.jwtSecret, Buffer.alloc(0), HKDF_INFO, 32));
50
+ this.realmsEnabled = Boolean(options.realmExtractorInstance);
51
+ this.ipHashSalt = process.env.AUTH_IP_HASH_SALT || options.jwtSecret || '';
52
+ }
53
+ get available() {
54
+ return this.repository !== null && typeof this.emailService?.sendEmailChallengeCode === 'function';
55
+ }
56
+ async issue(input, opts = {}) {
57
+ const { repository, send } = this.requireIssuing();
58
+ const realm = this.realmOf(opts);
59
+ const email = (0, rate_limit_helpers_1.normaliseEmail)(input.email);
60
+ const purpose = requirePurpose(input.purpose);
61
+ const emailData = requireEmailData(input.emailData);
62
+ const ttlMinutes = requireTtl(opts.ttlMinutes ?? this.options.emailChallenge?.ttlMinutes);
63
+ const emailHash = this.hashEmail(email, realm);
64
+ const purposeHash = this.hashPurpose(purpose, realm);
65
+ const { cooldown, hourly, perIp } = this.issueLimits(emailHash, purposeHash, realm, opts.ipAddress);
66
+ await this.assertWithinLimits([cooldown, hourly, perIp]);
67
+ await this.record([cooldown, perIp]);
68
+ const id = (0, crypto_1.randomBytes)(CHALLENGE_ID_BYTES).toString('base64url');
69
+ const code = String((0, crypto_1.randomInt)(0, 1_000_000)).padStart(6, '0');
70
+ const now = Date.now();
71
+ const expiresAt = new Date(now + ttlMinutes * 60_000);
72
+ await repository.invalidateChallenges({ purposeHash, emailHash });
73
+ await repository.createChallenge({
74
+ id,
75
+ emailHash,
76
+ purposeHash,
77
+ codeHash: this.hashCode(id, code),
78
+ attempts: 0,
79
+ consumedAt: null,
80
+ expiresAt,
81
+ createdAt: new Date(now),
82
+ });
83
+ try {
84
+ await send(email, code, ttlMinutes, {
85
+ purpose,
86
+ ...(emailData !== undefined ? { data: emailData } : {}),
87
+ });
88
+ }
89
+ catch (error) {
90
+ await this.cancelUnsent(repository, id);
91
+ this.securityLogger.error('Email challenge code could not be sent', error instanceof Error ? error.stack : String(error), 'EmailChallengeService');
92
+ throw new email_challenge_exceptions_1.EmailChallengeSendFailedException();
93
+ }
94
+ await this.record([hourly]);
95
+ this.securityLogger.log(auth_logger_interface_1.SecurityEvent.EMAIL_CHALLENGE_ISSUED, {
96
+ email,
97
+ purpose,
98
+ realm,
99
+ ipAddress: opts.ipAddress,
100
+ challenge: challengeRef(id),
101
+ expiresAt,
102
+ });
103
+ void this.sweep(repository);
104
+ return { challengeId: id, expiresAt, expiresInMinutes: ttlMinutes };
105
+ }
106
+ async verify(input, opts = {}) {
107
+ const repository = this.requireRepository();
108
+ const realm = this.realmOf(opts);
109
+ const email = (0, rate_limit_helpers_1.normaliseEmail)(input.email);
110
+ const purpose = requirePurpose(input.purpose);
111
+ const id = input.challengeId;
112
+ const refuse = (reason, cause) => {
113
+ this.securityLogger.log(reason === 'LOCKED' ? auth_logger_interface_1.SecurityEvent.EMAIL_CHALLENGE_LOCKED : auth_logger_interface_1.SecurityEvent.EMAIL_CHALLENGE_FAILED, {
114
+ email,
115
+ purpose,
116
+ realm,
117
+ ipAddress: opts.ipAddress,
118
+ ...(typeof id === 'string' ? { challenge: challengeRef(id) } : {}),
119
+ reason: cause,
120
+ });
121
+ return { ok: false, reason };
122
+ };
123
+ if (typeof id !== 'string' || id === '' || id.length > MAX_CHALLENGE_ID_LENGTH) {
124
+ return refuse('EXPIRED', 'challenge_malformed');
125
+ }
126
+ const challenge = await repository.findChallenge(id);
127
+ if (!challenge)
128
+ return refuse('EXPIRED', 'challenge_unknown');
129
+ if (!sameHash(challenge.emailHash, this.hashEmail(email, realm))) {
130
+ return refuse('EXPIRED', 'email_mismatch');
131
+ }
132
+ if (!sameHash(challenge.purposeHash, this.hashPurpose(purpose, realm))) {
133
+ return refuse('EXPIRED', 'purpose_mismatch');
134
+ }
135
+ if (challenge.expiresAt.getTime() <= Date.now())
136
+ return refuse('EXPIRED', 'challenge_expired');
137
+ if (!(await repository.registerAttempt(id, CODE_ATTEMPTS))) {
138
+ const latest = await repository.findChallenge(id);
139
+ return latest && latest.consumedAt === null
140
+ ? refuse('LOCKED', 'attempts_exhausted')
141
+ : refuse('EXPIRED', 'challenge_consumed');
142
+ }
143
+ if (typeof input.code !== 'string' || !sameHash(challenge.codeHash, this.hashCode(id, input.code))) {
144
+ return refuse('WRONG', 'code_wrong');
145
+ }
146
+ if (!(await repository.consumeChallenge(id)))
147
+ return refuse('EXPIRED', 'challenge_consumed');
148
+ this.securityLogger.log(auth_logger_interface_1.SecurityEvent.EMAIL_CHALLENGE_VERIFIED, {
149
+ email,
150
+ purpose,
151
+ realm,
152
+ ipAddress: opts.ipAddress,
153
+ challenge: challengeRef(id),
154
+ });
155
+ return { ok: true, email, purpose };
156
+ }
157
+ async revoke(input, opts = {}) {
158
+ const repository = this.requireRepository();
159
+ const realm = this.realmOf(opts);
160
+ const purpose = requirePurpose(input.purpose);
161
+ return repository.invalidateChallenges({
162
+ purposeHash: this.hashPurpose(purpose, realm),
163
+ ...(input.email !== undefined ? { emailHash: this.hashEmail((0, rate_limit_helpers_1.normaliseEmail)(input.email), realm) } : {}),
164
+ });
165
+ }
166
+ requireRepository() {
167
+ if (!this.repository)
168
+ throw new email_challenge_exceptions_1.EmailChallengeUnavailableException();
169
+ return this.repository;
170
+ }
171
+ requireIssuing() {
172
+ const service = this.emailService;
173
+ const send = service?.sendEmailChallengeCode;
174
+ if (!this.repository || !service || typeof send !== 'function') {
175
+ throw new email_challenge_exceptions_1.EmailChallengeUnavailableException();
176
+ }
177
+ return { repository: this.repository, send: send.bind(service) };
178
+ }
179
+ realmOf(opts) {
180
+ const realm = opts.realm ?? undefined;
181
+ if (this.realmsEnabled && realm === undefined) {
182
+ throw new common_1.BadRequestException('Realm required');
183
+ }
184
+ return realm;
185
+ }
186
+ mac(...parts) {
187
+ return (0, crypto_1.createHmac)('sha256', this.key).update(JSON.stringify(parts)).digest('hex');
188
+ }
189
+ hashEmail(email, realm) {
190
+ return this.mac('email', realm ?? null, email);
191
+ }
192
+ hashPurpose(purpose, realm) {
193
+ return this.mac('purpose', realm ?? null, purpose);
194
+ }
195
+ hashCode(challengeId, code) {
196
+ return this.mac('code', challengeId, code);
197
+ }
198
+ issueLimits(emailHash, purposeHash, realm, ipAddress) {
199
+ const configured = this.options.emailChallenge?.issueLimits;
200
+ const cooldownSeconds = configured?.cooldownSeconds ?? exports.DEFAULT_EMAIL_CHALLENGE_ISSUE_LIMITS.cooldownSeconds;
201
+ const perHour = configured?.perHour ?? exports.DEFAULT_EMAIL_CHALLENGE_ISSUE_LIMITS.perHour;
202
+ const perIpPerHour = configured?.perIpPerHour ?? exports.DEFAULT_EMAIL_CHALLENGE_ISSUE_LIMITS.perIpPerHour;
203
+ const subject = `${emailHash.slice(0, 32)}:${purposeHash.slice(0, 32)}`;
204
+ if (perIpPerHour > 0 && !ipAddress && !this.warnedMissingIp) {
205
+ this.warnedMissingIp = true;
206
+ this.logger.warn('EmailChallengeService.issue was called without opts.ipAddress, so the per-IP limit on ' +
207
+ 'sending codes is not applied. Pass the client IP.');
208
+ }
209
+ return {
210
+ ...(cooldownSeconds > 0
211
+ ? { cooldown: { key: `auth:emailChallenge:cooldown:${subject}`, max: 1, windowMs: cooldownSeconds * 1000 } }
212
+ : {}),
213
+ hourly: { key: `auth:emailChallenge:hour:${subject}`, max: perHour, windowMs: HOUR_MS },
214
+ ...(perIpPerHour > 0 && ipAddress
215
+ ? {
216
+ perIp: {
217
+ key: `auth:emailChallenge:ip:${(0, rate_limit_helpers_1.realmKeyPrefix)(realm)}${(0, ip_hash_1.hashIp)(ipAddress, this.ipHashSalt)}`,
218
+ max: perIpPerHour,
219
+ windowMs: HOUR_MS,
220
+ },
221
+ }
222
+ : {}),
223
+ };
224
+ }
225
+ async assertWithinLimits(limits) {
226
+ let retryAfter = 0;
227
+ for (const limit of limits) {
228
+ if (!limit)
229
+ continue;
230
+ const { allowed, resetAt } = await this.rateLimiter.checkRateLimit(limit.key, limit.max, limit.windowMs);
231
+ if (!allowed)
232
+ retryAfter = Math.max(retryAfter, (0, rate_limit_helpers_1.retryAfterSeconds)(resetAt));
233
+ }
234
+ if (retryAfter > 0) {
235
+ throw new step_up_exceptions_1.AuthRateLimitException('Too many code requests. Please try again later.', retryAfter);
236
+ }
237
+ }
238
+ async record(limits) {
239
+ for (const limit of limits) {
240
+ if (limit)
241
+ await this.rateLimiter.recordAttempt(limit.key, limit.windowMs);
242
+ }
243
+ }
244
+ async cancelUnsent(repository, id) {
245
+ try {
246
+ await repository.consumeChallenge(id);
247
+ }
248
+ catch (error) {
249
+ this.securityLogger.error('Email challenge could not be cancelled after its email failed to send; it expires on its own', error instanceof Error ? error.stack : String(error), 'EmailChallengeService');
250
+ }
251
+ }
252
+ async sweep(repository) {
253
+ const now = Date.now();
254
+ if (now - this.lastSweepAt < SWEEP_THROTTLE_MS) {
255
+ return;
256
+ }
257
+ this.lastSweepAt = now;
258
+ try {
259
+ await repository.deleteExpiredChallenges();
260
+ }
261
+ catch (error) {
262
+ this.logger.warn(`Sweeping expired email challenges failed: ${error instanceof Error ? error.message : String(error)}. Challenges still expire: verify checks expiry.`);
263
+ }
264
+ }
265
+ };
266
+ exports.EmailChallengeService = EmailChallengeService;
267
+ exports.EmailChallengeService = EmailChallengeService = EmailChallengeService_1 = __decorate([
268
+ (0, common_1.Injectable)(),
269
+ __param(0, (0, common_1.Inject)(constants_1.EMAIL_CHALLENGE_REPOSITORY)),
270
+ __param(1, (0, common_1.Inject)(constants_1.AUTH_MODULE_OPTIONS)),
271
+ __param(2, (0, common_1.Inject)(constants_1.AUTH_LOGGER)),
272
+ __param(3, (0, common_1.Inject)(constants_1.RATE_LIMITER)),
273
+ __param(4, (0, common_1.Inject)(constants_1.EMAIL_SERVICE)),
274
+ __metadata("design:paramtypes", [Object, Object, Object, Object, Object])
275
+ ], EmailChallengeService);
276
+ function challengeRef(id) {
277
+ return (0, crypto_1.createHash)('sha256').update(id).digest('hex').slice(0, 16);
278
+ }
279
+ function sameHash(a, b) {
280
+ const left = Buffer.from(String(a), 'utf8');
281
+ const right = Buffer.from(b, 'utf8');
282
+ return left.length === right.length && (0, crypto_1.timingSafeEqual)(left, right);
283
+ }
284
+ function requirePurpose(purpose) {
285
+ if (typeof purpose !== 'string' || purpose.length === 0 || purpose.length > MAX_PURPOSE_LENGTH) {
286
+ throw new common_1.BadRequestException(`An email challenge needs a purpose: a non-empty string of at most ${MAX_PURPOSE_LENGTH} characters`);
287
+ }
288
+ return purpose;
289
+ }
290
+ function requireTtl(ttlMinutes) {
291
+ if (ttlMinutes === undefined)
292
+ return DEFAULT_TTL_MINUTES;
293
+ if (typeof ttlMinutes !== 'number' || !Number.isInteger(ttlMinutes) || ttlMinutes < 1 || ttlMinutes > MAX_TTL_MINUTES) {
294
+ throw new common_1.BadRequestException(`ttlMinutes must be an integer from 1 to ${MAX_TTL_MINUTES}`);
295
+ }
296
+ return ttlMinutes;
297
+ }
298
+ function requireEmailData(data) {
299
+ if (data === undefined)
300
+ return undefined;
301
+ if (typeof data !== 'object' || data === null || Array.isArray(data)) {
302
+ throw new common_1.BadRequestException('emailData must be an object');
303
+ }
304
+ return data;
305
+ }
306
+ //# sourceMappingURL=email-challenge.service.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"email-challenge.service.js","sourceRoot":"","sources":["../../src/services/email-challenge.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAiF;AACjF,mCAAmG;AACnG,4CAMsB;AAEtB,+EAAiF;AAOjF,yFAGkD;AAClD,yEAA0E;AAC1E,8CAA0C;AAC1C,oEAAgG;AAGhG,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAC;AACrC,MAAM,SAAS,GAAG,wCAAwC,CAAC;AAG9C,QAAA,oCAAoC,GAAG;IAClD,eAAe,EAAE,EAAE;IACnB,OAAO,EAAE,CAAC;IACV,YAAY,EAAE,EAAE;CACR,CAAC;AAiEJ,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAQhC,YAEE,UAA6D,EAE7D,OAA2C,EAE3C,cAA4C,EAE5C,WAA0C,EAE1C,eAAsD,IAAI;QARzC,eAAU,GAAV,UAAU,CAAkC;QAE5C,YAAO,GAAP,OAAO,CAAmB;QAE1B,mBAAc,GAAd,cAAc,CAAa;QAE3B,gBAAW,GAAX,WAAW,CAAc;QAEzB,iBAAY,GAAZ,YAAY,CAA6B;QAjB3C,WAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;QAIzD,gBAAW,GAAG,CAAC,CAAC;QAChB,oBAAe,GAAG,KAAK,CAAC;QAgB9B,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CACpB,IAAA,iBAAQ,EACN,QAAQ,EACR,OAAO,CAAC,sBAAsB,IAAI,OAAO,CAAC,SAAS,EACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EACf,SAAS,EACT,EAAE,CACH,CACF,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC7E,CAAC;IAMD,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,YAAY,EAAE,sBAAsB,KAAK,UAAU,CAAC;IACrG,CAAC;IAqBD,KAAK,CAAC,KAAK,CACT,KAA8E,EAC9E,OAA8C,EAAE;QAEhD,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAA,mCAAc,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAE1F,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAIpG,MAAM,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAIzD,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAErC,MAAM,EAAE,GAAG,IAAA,oBAAW,EAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAA,kBAAS,EAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,UAAU,GAAG,MAAM,CAAC,CAAC;QAEtD,MAAM,UAAU,CAAC,oBAAoB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,MAAM,UAAU,CAAC,eAAe,CAAC;YAC/B,EAAE;YACF,SAAS;YACT,WAAW;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;YACjC,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,IAAI;YAChB,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;gBAClC,OAAO;gBACP,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,cAAc,CAAC,KAAK,CACvB,wCAAwC,EACxC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACpD,uBAAuB,CACxB,CAAC;YACF,MAAM,IAAI,8DAAiC,EAAE,CAAC;QAChD,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,sBAAsB,EAAE;YAC5D,KAAK;YACL,OAAO;YACP,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;YAC3B,SAAS;SACV,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAE5B,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;IACtE,CAAC;IAeD,KAAK,CAAC,MAAM,CACV,KAA4E,EAC5E,OAAoB,EAAE;QAEtB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAA,mCAAc,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC;QAE7B,MAAM,MAAM,GAAG,CAAC,MAAmC,EAAE,KAAa,EAAwB,EAAE;YAC1F,IAAI,CAAC,cAAc,CAAC,GAAG,CACrB,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,qCAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC,qCAAa,CAAC,sBAAsB,EACjG;gBACE,KAAK;gBACL,OAAO;gBACP,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,MAAM,EAAE,KAAK;aACd,CACF,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC,CAAC;QAEF,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;YAC/E,OAAO,MAAM,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAG9D,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAK/F,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,eAAe,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;gBACzC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,oBAAoB,CAAC;gBACxC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnG,OAAO,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAE7F,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,qCAAa,CAAC,wBAAwB,EAAE;YAC9D,KAAK;YACL,OAAO;YACP,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;SAC5B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IAOD,KAAK,CAAC,MAAM,CAAC,KAA0C,EAAE,OAAoB,EAAE;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,UAAU,CAAC,oBAAoB,CAAC;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC;YAC7C,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAA,mCAAc,EAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxG,CAAC,CAAC;IACL,CAAC;IAMO,iBAAiB;QACvB,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,+DAAkC,EAAE,CAAC;QACrE,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAEO,cAAc;QAIpB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,EAAE,sBAAsB,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/D,MAAM,IAAI,+DAAkC,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACnE,CAAC;IAGO,OAAO,CAAC,IAAiB;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;QACtC,IAAI,IAAI,CAAC,aAAa,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAOO,GAAG,CAAC,GAAG,KAA2B;QACxC,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC;IAEO,SAAS,CAAC,KAAa,EAAE,KAAyB;QACxD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAEO,WAAW,CAAC,OAAe,EAAE,KAAyB;QAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAEO,QAAQ,CAAC,WAAmB,EAAE,IAAY;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAEO,WAAW,CACjB,SAAiB,EACjB,WAAmB,EACnB,KAAyB,EACzB,SAA6B;QAE7B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,CAAC;QAC5D,MAAM,eAAe,GAAG,UAAU,EAAE,eAAe,IAAI,4CAAoC,CAAC,eAAe,CAAC;QAC5G,MAAM,OAAO,GAAG,UAAU,EAAE,OAAO,IAAI,4CAAoC,CAAC,OAAO,CAAC;QACpF,MAAM,YAAY,GAAG,UAAU,EAAE,YAAY,IAAI,4CAAoC,CAAC,YAAY,CAAC;QAEnG,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAExE,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,wFAAwF;gBACtF,mDAAmD,CACtD,CAAC;QACJ,CAAC;QAED,OAAO;YACL,GAAG,CAAC,eAAe,GAAG,CAAC;gBACrB,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,gCAAgC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,GAAG,IAAI,EAAE,EAAE;gBAC5G,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,EAAE,EAAE,GAAG,EAAE,4BAA4B,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE;YACvF,GAAG,CAAC,YAAY,GAAG,CAAC,IAAI,SAAS;gBAC/B,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,GAAG,EAAE,0BAA0B,IAAA,mCAAc,EAAC,KAAK,CAAC,GAAG,IAAA,gBAAM,EAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;wBAC3F,GAAG,EAAE,YAAY;wBACjB,QAAQ,EAAE,OAAO;qBAClB;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,MAAgC;QAC/D,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACzG,IAAI,CAAC,OAAO;gBAAE,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,sCAAiB,EAAC,OAAO,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,2CAAsB,CAAC,iDAAiD,EAAE,UAAU,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,MAAgC;QACnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK;gBAAE,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,YAAY,CAAC,UAAqC,EAAE,EAAU;QAC1E,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,cAAc,CAAC,KAAK,CACvB,8FAA8F,EAC9F,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACpD,uBAAuB,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAGO,KAAK,CAAC,KAAK,CAAC,UAAqC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW,GAAG,iBAAiB,EAAE,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,uBAAuB,EAAE,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6CACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,kDAAkD,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AA3WY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAUR,WAAA,IAAA,eAAM,EAAC,sCAA0B,CAAC,CAAA;IAElC,WAAA,IAAA,eAAM,EAAC,+BAAmB,CAAC,CAAA;IAE3B,WAAA,IAAA,eAAM,EAAC,uBAAW,CAAC,CAAA;IAEnB,WAAA,IAAA,eAAM,EAAC,wBAAY,CAAC,CAAA;IAEpB,WAAA,IAAA,eAAM,EAAC,yBAAa,CAAC,CAAA;;GAjBb,qBAAqB,CA2WjC;AAGD,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,CAAmC,EAAE,CAAS;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAA,wBAAe,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAC/F,MAAM,IAAI,4BAAmB,CAC3B,qEAAqE,kBAAkB,aAAa,CACrG,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,UAAmB;IACrC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,mBAAmB,CAAC;IACzD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;QACtH,MAAM,IAAI,4BAAmB,CAAC,2CAA2C,eAAe,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACrC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,4BAAmB,CAAC,6BAA6B,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAA+B,CAAC;AACzC,CAAC"}
@@ -0,0 +1,80 @@
1
+ import type { AuthModuleOptions } from '../auth.module';
2
+ import { IAuthLogger } from '../interfaces/auth-logger.interface';
3
+ import { IGuestSessionRepository } from '../interfaces/guest-session-repository.interface';
4
+ export declare const GUEST_SESSION_COOKIE = "guest_session";
5
+ export declare const DEFAULT_GUEST_SESSION_OPTIONS: {
6
+ readonly maxGrantsPerSession: 10;
7
+ readonly maxLifetimeDays: 30;
8
+ };
9
+ export interface GuestGrant {
10
+ kind: string;
11
+ id: string;
12
+ expiresAt: Date;
13
+ }
14
+ export interface GuestPrincipal {
15
+ sessionId: string;
16
+ principalId: string;
17
+ email: string;
18
+ realm?: string;
19
+ grants: GuestGrant[];
20
+ }
21
+ export interface IssuedGuestSession {
22
+ sessionId: string;
23
+ token: string;
24
+ added: boolean;
25
+ grants: GuestGrant[];
26
+ }
27
+ type CookieResponse = {
28
+ cookie: (name: string, value: string, options: Record<string, unknown>) => void;
29
+ };
30
+ type ClearCookieResponse = {
31
+ clearCookie: (name: string, options: Record<string, unknown>) => void;
32
+ };
33
+ type RequestLike = Record<string, any>;
34
+ interface RealmOption {
35
+ realm?: string | null;
36
+ }
37
+ export declare class GuestSessionService {
38
+ private readonly repository;
39
+ private readonly options;
40
+ private readonly securityLogger;
41
+ private readonly logger;
42
+ private readonly key;
43
+ private readonly realmsEnabled;
44
+ private readonly cookieAuthEnabled;
45
+ private lastSweepAt;
46
+ constructor(repository: IGuestSessionRepository | null, options: AuthModuleOptions, securityLogger: IAuthLogger);
47
+ get enabled(): boolean;
48
+ get cookieName(): string;
49
+ issue(input: {
50
+ principal: {
51
+ id: string;
52
+ email: string;
53
+ };
54
+ grant: {
55
+ kind: string;
56
+ id: string;
57
+ expiresAt: Date;
58
+ };
59
+ }, opts?: RealmOption & {
60
+ request?: RequestLike;
61
+ res?: CookieResponse;
62
+ ipAddress?: string;
63
+ }): Promise<IssuedGuestSession>;
64
+ authenticate(request: RequestLike | undefined, kinds: readonly string[]): Promise<GuestPrincipal | null>;
65
+ revokeGrant(grant: {
66
+ kind: string;
67
+ id: string;
68
+ }, opts?: RealmOption): Promise<number>;
69
+ revoke(sessionId: string): Promise<boolean>;
70
+ end(request: RequestLike | undefined, res?: ClearCookieResponse): Promise<void>;
71
+ private requireRepository;
72
+ private realmOf;
73
+ private readToken;
74
+ private find;
75
+ private hashToken;
76
+ private requireExpiry;
77
+ private sweep;
78
+ }
79
+ export {};
80
+ //# sourceMappingURL=guest-session.service.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"guest-session.service.d.ts","sourceRoot":"","sources":["../../src/services/guest-session.service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAiB,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAGL,uBAAuB,EACxB,MAAM,kDAAkD,CAAC;AAW1D,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AAapD,eAAO,MAAM,6BAA6B;;;CAGhC,CAAC;AAGX,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IAEb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,IAAI,CAAC;CACjB;AAGD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAElB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAMlB,KAAK,EAAE,MAAM,CAAC;IAEd,KAAK,EAAE,OAAO,CAAC;IAEf,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,KAAK,cAAc,GAAG;IACpB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACjF,CAAC;AACF,KAAK,mBAAmB,GAAG;IACzB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACvE,CAAC;AACF,KAAK,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEvC,UAAU,WAAW;IAEnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AA0BD,qBACa,mBAAmB;IAS5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAE3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAZjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAU;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAU;IAC5C,OAAO,CAAC,WAAW,CAAK;gBAIL,UAAU,EAAE,uBAAuB,GAAG,IAAI,EAE1C,OAAO,EAAE,iBAAiB,EAE1B,cAAc,EAAE,WAAW;IAQ9C,IAAI,OAAO,IAAI,OAAO,CAErB;IAGD,IAAI,UAAU,IAAI,MAAM,CAEvB;IAsBK,KAAK,CACT,KAAK,EAAE;QACL,SAAS,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACzC,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,IAAI,CAAA;SAAE,CAAC;KACtD,EACD,IAAI,GAAE,WAAW,GAAG;QAAE,OAAO,CAAC,EAAE,WAAW,CAAC;QAAC,GAAG,CAAC,EAAE,cAAc,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAC3F,OAAO,CAAC,kBAAkB,CAAC;IAyGxB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IA6CxG,WAAW,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAazF,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAc3C,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,EAAE,GAAG,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBrF,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,OAAO;IAYf,OAAO,CAAC,SAAS;YAOH,IAAI;IAWlB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,aAAa;YAiBP,KAAK;CAgBpB"}