@ambushsoftworks/nestjs-auth-graphql 0.18.0 → 0.19.0

package/dist/exceptions/guest-session.exceptions.d.ts

@@ -0,0 +1,9 @@
+import { GraphQLError } from 'graphql';
+import { CodedHttpException } from './coded-http.exception';
+export declare class GuestSessionInvalidException extends CodedHttpException {
+    constructor();
+}
+export declare class GuestSessionUnavailableException extends GraphQLError {
+    constructor();
+}
+//# sourceMappingURL=guest-session.exceptions.d.ts.map

package/dist/exceptions/guest-session.exceptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-session.exceptions.d.ts","sourceRoot":"","sources":["../../src/exceptions/guest-session.exceptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAe5D,qBAAa,4BAA6B,SAAQ,kBAAkB;;CAInE;AAOD,qBAAa,gCAAiC,SAAQ,YAAY;;CAMjE"}

package/dist/exceptions/guest-session.exceptions.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GuestSessionUnavailableException = exports.GuestSessionInvalidException = void 0;
+const graphql_1 = require("graphql");
+const coded_http_exception_1 = require("./coded-http.exception");
+class GuestSessionInvalidException extends coded_http_exception_1.CodedHttpException {
+    constructor() {
+        super({ message: 'Guest session is not valid', code: 'GUEST_SESSION_INVALID' }, 401);
+    }
+}
+exports.GuestSessionInvalidException = GuestSessionInvalidException;
+class GuestSessionUnavailableException extends graphql_1.GraphQLError {
+    constructor() {
+        super('Guest sessions are not available', {
+            extensions: { code: 'GUEST_SESSION_UNAVAILABLE', statusCode: 503 },
+        });
+    }
+}
+exports.GuestSessionUnavailableException = GuestSessionUnavailableException;
+//# sourceMappingURL=guest-session.exceptions.js.map

package/dist/exceptions/guest-session.exceptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-session.exceptions.js","sourceRoot":"","sources":["../../src/exceptions/guest-session.exceptions.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,iEAA4D;AAe5D,MAAa,4BAA6B,SAAQ,yCAAkB;IAClE;QACE,KAAK,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;IACvF,CAAC;CACF;AAJD,oEAIC;AAOD,MAAa,gCAAiC,SAAQ,sBAAY;IAChE;QACE,KAAK,CAAC,kCAAkC,EAAE;YACxC,UAAU,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,UAAU,EAAE,GAAG,EAAE;SACnE,CAAC,CAAC;IACL,CAAC;CACF;AAND,4EAMC"}

package/dist/guards/create-auth-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-auth-guard.d.ts","sourceRoot":"","sources":["../../src/guards/create-auth-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAO7C,MAAM,MAAM,cAAc,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAK3D,MAAM,WAAW,sBAAsB;IAErC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AA8BD,wBAAgB,eAAe,CAC7B,UAAU,GAAE,MAAM,EAAY,EAC9B,OAAO,CAAC,EAAE,sBAAsB,GAC/B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CA4BlD"}
+{"version":3,"file":"create-auth-guard.d.ts","sourceRoot":"","sources":["../../src/guards/create-auth-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkD,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEtF,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAS7C,MAAM,MAAM,cAAc,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAK3D,MAAM,WAAW,sBAAsB;IAErC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAoCD,wBAAgB,eAAe,CAC7B,UAAU,GAAE,MAAM,EAAY,EAC9B,OAAO,CAAC,EAAE,sBAAsB,GAC/B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAuDlD"}

package/dist/guards/create-auth-guard.js

@@ -14,7 +14,9 @@ const common_1 = require("@nestjs/common");
 const core_1 = require("@nestjs/core");
 const passport_1 = require("@nestjs/passport");
 const public_decorator_1 = require("../decorators/public.decorator");
+const guest_session_service_1 = require("../services/guest-session.service");
 const execution_context_1 = require("../utils/execution-context");
+const guest_session_guard_1 = require("./guest-session.guard");
 function createAuthGuard(strategies = ['jwt'], options) {
     let ConfigurableAuthGuard = class ConfigurableAuthGuard extends (0, passport_1.AuthGuard)(strategies) {
         constructor(_reflector) {
@@ -31,12 +33,38 @@ function createAuthGuard(strategies = ['jwt'], options) {
                     return true;
             }
             (0, execution_context_1.requireRequestFromContext)(context);
-            return super.canActivate(context);
+            if (!(0, guest_session_guard_1.guestKindsFor)(this._reflector, context)) {
+                return super.canActivate(context);
+            }
+            return this.userThenGuest(context);
+        }
+        async userThenGuest(context) {
+            let userFailure;
+            try {
+                if (await super.canActivate(context)) {
+                    return true;
+                }
+            }
+            catch (error) {
+                userFailure = error;
+            }
+            if (await (0, guest_session_guard_1.admitGuest)(context, this._reflector, this._guestSessions)) {
+                return true;
+            }
+            if (userFailure !== undefined) {
+                throw userFailure;
+            }
+            return false;
         }
         getRequest(context) {
             return (0, execution_context_1.getRequestFromContext)(context);
         }
     };
+    __decorate([
+        (0, common_1.Optional)(),
+        (0, common_1.Inject)(guest_session_service_1.GuestSessionService),
+        __metadata("design:type", guest_session_service_1.GuestSessionService)
+    ], ConfigurableAuthGuard.prototype, "_guestSessions", void 0);
     ConfigurableAuthGuard = __decorate([
         (0, common_1.Injectable)(),
         __metadata("design:paramtypes", [core_1.Reflector])

package/dist/guards/create-auth-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-auth-guard.js","sourceRoot":"","sources":["../../src/guards/create-auth-guard.ts"],"names":[],"mappings":";;;;;;;;;;;AA+CA,0CA+BC;AA9ED,2CAAoE;AACpE,uCAAyC;AACzC,+CAA6C;AAC7C,qEAA+D;AAC/D,kEAA8F;AA2C9F,SAAgB,eAAe,CAC7B,aAAuB,CAAC,KAAK,CAAC,EAC9B,OAAgC;IAEhC,IACM,qBAAqB,GAD3B,MACM,qBAAsB,SAAQ,IAAA,oBAAS,EAAC,UAAU,CAAC;QACvD,YAA6B,UAAqB;YAChD,KAAK,EAAE,CAAC;YADmB,eAAU,GAAV,UAAU,CAAW;QAElD,CAAC;QAED,WAAW,CAAC,OAAyB;YACnC,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAU,gCAAa,EAAE;oBACzE,OAAO,CAAC,UAAU,EAAE;oBACpB,OAAO,CAAC,QAAQ,EAAE;iBACnB,CAAC,CAAC;gBACH,IAAI,QAAQ;oBAAE,OAAO,IAAI,CAAC;YAC5B,CAAC;YAGD,IAAA,6CAAyB,EAAC,OAAO,CAAC,CAAC;YAEnC,OAAO,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,UAAU,CAAC,OAAyB;YAClC,OAAO,IAAA,yCAAqB,EAAC,OAAO,CAAC,CAAC;QACxC,CAAC;KACF,CAAA;IAvBK,qBAAqB;QAD1B,IAAA,mBAAU,GAAE;yCAE8B,gBAAS;OAD9C,qBAAqB,CAuB1B;IAED,OAAO,qBAAqB,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"create-auth-guard.js","sourceRoot":"","sources":["../../src/guards/create-auth-guard.ts"],"names":[],"mappings":";;;;;;;;;;;AAuDA,0CA0DC;AAjHD,2CAAsF;AACtF,uCAAyC;AACzC,+CAA6C;AAC7C,qEAA+D;AAC/D,6EAAwE;AACxE,kEAA8F;AAC9F,+DAAkE;AAiDlE,SAAgB,eAAe,CAC7B,aAAuB,CAAC,KAAK,CAAC,EAC9B,OAAgC;IAEhC,IACM,qBAAqB,GAD3B,MACM,qBAAsB,SAAQ,IAAA,oBAAS,EAAC,UAAU,CAAC;QAMvD,YAA6B,UAAqB;YAChD,KAAK,EAAE,CAAC;YADmB,eAAU,GAAV,UAAU,CAAW;QAElD,CAAC;QAED,WAAW,CAAC,OAAyB;YACnC,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAU,gCAAa,EAAE;oBACzE,OAAO,CAAC,UAAU,EAAE;oBACpB,OAAO,CAAC,QAAQ,EAAE;iBACnB,CAAC,CAAC;gBACH,IAAI,QAAQ;oBAAE,OAAO,IAAI,CAAC;YAC5B,CAAC;YAGD,IAAA,6CAAyB,EAAC,OAAO,CAAC,CAAC;YAEnC,IAAI,CAAC,IAAA,mCAAa,EAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC7C,OAAO,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;YACD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAGO,KAAK,CAAC,aAAa,CAAC,OAAyB;YACnD,IAAI,WAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,MAAO,KAAK,CAAC,WAAW,CAAC,OAAO,CAAsB,EAAE,CAAC;oBAC3D,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,WAAW,GAAG,KAAK,CAAC;YACtB,CAAC;YACD,IAAI,MAAM,IAAA,gCAAU,EAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACpE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,WAAW,CAAC;YACpB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,UAAU,CAAC,OAAyB;YAClC,OAAO,IAAA,yCAAqB,EAAC,OAAO,CAAC,CAAC;QACxC,CAAC;KACF,CAAA;IA9CkB;QAFhB,IAAA,iBAAQ,GAAE;QACV,IAAA,eAAM,EAAC,2CAAmB,CAAC;kCACM,2CAAmB;iEAAC;IAJlD,qBAAqB;QAD1B,IAAA,mBAAU,GAAE;yCAO8B,gBAAS;OAN9C,qBAAqB,CAkD1B;IAED,OAAO,qBAAqB,CAAC;AAC/B,CAAC"}

package/dist/guards/guest-session.guard.d.ts

@@ -0,0 +1,14 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { GuestSessionService } from '../services/guest-session.service';
+export declare function guestKindsFor(reflector: Reflector, context: ExecutionContext): string[] | undefined;
+export declare function admitGuest(context: ExecutionContext, reflector: Reflector, guestSessions: GuestSessionService | undefined): Promise<boolean>;
+export declare class GuestSessionGuard implements CanActivate {
+    private readonly reflector;
+    private readonly guestSessions;
+    private readonly logger;
+    private warnedUndecorated;
+    constructor(reflector: Reflector, guestSessions: GuestSessionService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+}
+//# sourceMappingURL=guest-session.guard.d.ts.map

package/dist/guards/guest-session.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-session.guard.d.ts","sourceRoot":"","sources":["../../src/guards/guest-session.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAA6C,MAAM,gBAAgB,CAAC;AAC1G,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAOxE,wBAAgB,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,GAAG,MAAM,EAAE,GAAG,SAAS,CAGnG;AAWD,wBAAsB,UAAU,CAC9B,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,mBAAmB,GAAG,SAAS,GAC7C,OAAO,CAAC,OAAO,CAAC,CAclB;AAeD,qBACa,iBAAkB,YAAW,WAAW;IAKjD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IALhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,iBAAiB,CAAS;gBAGf,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,mBAAmB;IAG/C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAa/D"}

package/dist/guards/guest-session.guard.js

@@ -0,0 +1,63 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var GuestSessionGuard_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GuestSessionGuard = void 0;
+exports.guestKindsFor = guestKindsFor;
+exports.admitGuest = admitGuest;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const allow_guest_session_decorator_1 = require("../decorators/allow-guest-session.decorator");
+const guest_session_service_1 = require("../services/guest-session.service");
+const execution_context_1 = require("../utils/execution-context");
+function guestKindsFor(reflector, context) {
+    const kinds = reflector.get(allow_guest_session_decorator_1.ALLOW_GUEST_SESSION_KEY, context.getHandler());
+    return Array.isArray(kinds) && kinds.length > 0 ? kinds : undefined;
+}
+async function admitGuest(context, reflector, guestSessions) {
+    const kinds = guestKindsFor(reflector, context);
+    if (!kinds || !guestSessions || (0, execution_context_1.isWebSocketContext)(context)) {
+        return false;
+    }
+    const request = (0, execution_context_1.getRequestFromContext)(context);
+    const guest = await guestSessions.authenticate(request, kinds);
+    if (!guest || !request) {
+        return false;
+    }
+    request.guest = guest;
+    return true;
+}
+let GuestSessionGuard = GuestSessionGuard_1 = class GuestSessionGuard {
+    constructor(reflector, guestSessions) {
+        this.reflector = reflector;
+        this.guestSessions = guestSessions;
+        this.logger = new common_1.Logger(GuestSessionGuard_1.name);
+        this.warnedUndecorated = false;
+    }
+    async canActivate(context) {
+        if (!guestKindsFor(this.reflector, context) && !this.warnedUndecorated) {
+            this.warnedUndecorated = true;
+            this.logger.warn(`GuestSessionGuard is on ${context.getClass().name}.${context.getHandler().name}, which has no ` +
+                '@AllowGuestSession(kind) on the method, so it refuses every request. Add the decorator to the method.');
+        }
+        if (await admitGuest(context, this.reflector, this.guestSessions)) {
+            return true;
+        }
+        throw new common_1.UnauthorizedException('Guest session required');
+    }
+};
+exports.GuestSessionGuard = GuestSessionGuard;
+exports.GuestSessionGuard = GuestSessionGuard = GuestSessionGuard_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector,
+        guest_session_service_1.GuestSessionService])
+], GuestSessionGuard);
+//# sourceMappingURL=guest-session.guard.js.map

package/dist/guards/guest-session.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-session.guard.js","sourceRoot":"","sources":["../../src/guards/guest-session.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAUA,sCAGC;AAWD,gCAkBC;AA1CD,2CAA0G;AAC1G,uCAAyC;AACzC,+FAAsF;AACtF,6EAAwE;AACxE,kEAAuF;AAMvF,SAAgB,aAAa,CAAC,SAAoB,EAAE,OAAyB;IAC3E,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAuB,uDAAuB,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAWM,KAAK,UAAU,UAAU,CAC9B,OAAyB,EACzB,SAAoB,EACpB,aAA8C;IAE9C,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAGhD,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,IAAI,IAAA,sCAAkB,EAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,yCAAqB,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AAgBM,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAI5B,YACmB,SAAoB,EACpB,aAAkC;QADlC,cAAS,GAAT,SAAS,CAAW;QACpB,kBAAa,GAAb,aAAa,CAAqB;QALpC,WAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;QACrD,sBAAiB,GAAG,KAAK,CAAC;IAK/B,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2BAA2B,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,iBAAiB;gBAC9F,uGAAuG,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,8BAAqB,CAAC,wBAAwB,CAAC,CAAC;IAC5D,CAAC;CACF,CAAA;AAtBY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAMmB,gBAAS;QACL,2CAAmB;GAN1C,iBAAiB,CAsB7B"}

package/dist/index.d.ts

@@ -14,6 +14,7 @@ export * from './interfaces/biometric-repository.interface';
 export * from './interfaces/biometric-verifier.interface';
 export * from './interfaces/passkey-repository.interface';
 export * from './interfaces/email-challenge-repository.interface';
+export * from './interfaces/guest-session-repository.interface';
 export * from './passkey/passkey-json.types';
 export * from './interfaces/password-policy-config.interface';
 export * from './interfaces/rate-limiter.interface';
@@ -43,6 +44,7 @@ export * from './services/step-up.service';
 export * from './services/step-up-token.service';
 export * from './services/passkey-signup-token.service';
 export * from './services/email-challenge.service';
+export * from './services/guest-session.service';
 export * from './services/password-validation.service';
 export * from './services/in-memory-rate-limiter.service';
 export * from './services/in-memory-refresh-retry-cache';
@@ -65,6 +67,7 @@ export * from './repositories/noop-tenant.repository';
 export * from './repositories/noop-tenant-extractor';
 export * from './repositories/in-memory-passkey.repository';
 export * from './repositories/in-memory-email-challenge.repository';
+export * from './repositories/in-memory-guest-session.repository';
 export * from './strategies/jwt.strategy';
 export * from './strategies/google.strategy';
 export * from './strategies/facebook.strategy';
@@ -113,11 +116,14 @@ export * from './decorators/require-scopes.decorator';
 export * from './decorators/current-tenant.decorator';
 export * from './decorators/current-realm.decorator';
 export * from './decorators/resource-scope.decorator';
+export * from './decorators/allow-guest-session.decorator';
+export * from './decorators/current-guest.decorator';
 export * from './guards/jwt-auth.guard';
 export * from './guards/tenant.guard';
 export * from './guards/permission.guard';
 export * from './guards/scope.guard';
 export * from './guards/create-auth-guard';
+export * from './guards/guest-session.guard';
 export * from './guards/csrf.guard';
 export * from './middleware/realm.middleware';
 export { AuthUser } from './entities/auth-user.entity';
@@ -131,6 +137,7 @@ export * from './exceptions/coded-http.exception';
 export * from './exceptions/step-up.exceptions';
 export * from './exceptions/passkey.exceptions';
 export * from './exceptions/email-challenge.exceptions';
+export * from './exceptions/guest-session.exceptions';
 export * from './enums/verification-type.enum';
 export * from './types/oauth.types';
 export * from './utils/provider-helpers';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAK5B,cAAc,kCAAkC,CAAC;AACjD,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,oCAAoC,CAAC;AACnD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,wCAAwC,CAAC;AACvD,cAAc,iDAAiD,CAAC;AAChE,cAAc,oCAAoC,CAAC;AACnD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,+CAA+C,CAAC;AAC9D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+CAA+C,CAAC;AAC9D,cAAc,qCAAqC,CAAC;AACpD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,0CAA0C,CAAC;AACzD,cAAc,yCAAyC,CAAC;AACxD,cAAc,wCAAwC,CAAC;AACvD,cAAc,uDAAuD,CAAC;AACtE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qCAAqC,CAAC;AACpD,cAAc,8CAA8C,CAAC;AAK7D,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2CAA2C,CAAC;AAE1D,cAAc,mCAAmC,CAAC;AAElD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,yCAAyC,CAAC;AACxD,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,0CAA0C,CAAC;AACzD,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AAKtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAK7C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,kCAAkC,CAAC;AACjD,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,qDAAqD,CAAC;AAKpE,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oCAAoC,CAAC;AAKnD,cAAc,gCAAgC,CAAC;AAG/C,cAAc,8BAA8B,CAAC;AAK7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,uCAAuC,CAAC;AACtD,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAChD,cAAc,sCAAsC,CAAC;AACrD,cAAc,mCAAmC,CAAC;AAClD,cAAc,0CAA0C,CAAC;AACzD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wCAAwC,CAAC;AACvD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mBAAmB,CAAC;AAKlC,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AAKtD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AAKpC,cAAc,+BAA+B,CAAC;AAK9C,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAKvD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yCAAyC,CAAC;AACxD,cAAc,sCAAsC,CAAC;AACrD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,mCAAmC,CAAC;AAClD,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,yCAAyC,CAAC;AAKxD,cAAc,gCAAgC,CAAC;AAK/C,cAAc,qBAAqB,CAAC;AAKpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EACL,WAAW,EACX,QAAQ,EACR,eAAe,EACf,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,cAAc,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAK5B,cAAc,kCAAkC,CAAC;AACjD,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,oCAAoC,CAAC;AACnD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,wCAAwC,CAAC;AACvD,cAAc,iDAAiD,CAAC;AAChE,cAAc,oCAAoC,CAAC;AACnD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,+CAA+C,CAAC;AAC9D,cAAc,6CAA6C,CAAC;AAC5D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,iDAAiD,CAAC;AAChE,cAAc,8BAA8B,CAAC;AAC7C,cAAc,+CAA+C,CAAC;AAC9D,cAAc,qCAAqC,CAAC;AACpD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,0CAA0C,CAAC;AACzD,cAAc,yCAAyC,CAAC;AACxD,cAAc,wCAAwC,CAAC;AACvD,cAAc,uDAAuD,CAAC;AACtE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,qCAAqC,CAAC;AACpD,cAAc,8CAA8C,CAAC;AAK7D,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2CAA2C,CAAC;AAE1D,cAAc,mCAAmC,CAAC;AAElD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,yCAAyC,CAAC;AACxD,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,0CAA0C,CAAC;AACzD,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AAKtD,cAAc,mCAAmC,CAAC;AAClD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAK7C,cAAc,6CAA6C,CAAC;AAC5D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,kCAAkC,CAAC;AACjD,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,qDAAqD,CAAC;AACpE,cAAc,mDAAmD,CAAC;AAKlE,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mCAAmC,CAAC;AAClD,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oCAAoC,CAAC;AAKnD,cAAc,gCAAgC,CAAC;AAG/C,cAAc,8BAA8B,CAAC;AAK7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,uCAAuC,CAAC;AACtD,cAAc,qCAAqC,CAAC;AACpD,cAAc,iCAAiC,CAAC;AAChD,cAAc,sCAAsC,CAAC;AACrD,cAAc,mCAAmC,CAAC;AAClD,cAAc,0CAA0C,CAAC;AACzD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wCAAwC,CAAC;AACvD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4CAA4C,CAAC;AAC3D,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mBAAmB,CAAC;AAKlC,cAAc,qCAAqC,CAAC;AACpD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,sCAAsC,CAAC;AAKrD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qBAAqB,CAAC;AAKpC,cAAc,+BAA+B,CAAC;AAK9C,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAKvD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yCAAyC,CAAC;AACxD,cAAc,sCAAsC,CAAC;AACrD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,4CAA4C,CAAC;AAC3D,cAAc,mCAAmC,CAAC;AAClD,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,yCAAyC,CAAC;AACxD,cAAc,uCAAuC,CAAC;AAKtD,cAAc,gCAAgC,CAAC;AAK/C,cAAc,qBAAqB,CAAC;AAKpC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EACL,WAAW,EACX,QAAQ,EACR,eAAe,EACf,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,cAAc,wBAAwB,CAAC"}

package/dist/index.js

@@ -31,6 +31,7 @@ __exportStar(require("./interfaces/biometric-repository.interface"), exports);
 __exportStar(require("./interfaces/biometric-verifier.interface"), exports);
 __exportStar(require("./interfaces/passkey-repository.interface"), exports);
 __exportStar(require("./interfaces/email-challenge-repository.interface"), exports);
+__exportStar(require("./interfaces/guest-session-repository.interface"), exports);
 __exportStar(require("./passkey/passkey-json.types"), exports);
 __exportStar(require("./interfaces/password-policy-config.interface"), exports);
 __exportStar(require("./interfaces/rate-limiter.interface"), exports);
@@ -60,6 +61,7 @@ __exportStar(require("./services/step-up.service"), exports);
 __exportStar(require("./services/step-up-token.service"), exports);
 __exportStar(require("./services/passkey-signup-token.service"), exports);
 __exportStar(require("./services/email-challenge.service"), exports);
+__exportStar(require("./services/guest-session.service"), exports);
 __exportStar(require("./services/password-validation.service"), exports);
 __exportStar(require("./services/in-memory-rate-limiter.service"), exports);
 __exportStar(require("./services/in-memory-refresh-retry-cache"), exports);
@@ -82,6 +84,7 @@ __exportStar(require("./repositories/noop-tenant.repository"), exports);
 __exportStar(require("./repositories/noop-tenant-extractor"), exports);
 __exportStar(require("./repositories/in-memory-passkey.repository"), exports);
 __exportStar(require("./repositories/in-memory-email-challenge.repository"), exports);
+__exportStar(require("./repositories/in-memory-guest-session.repository"), exports);
 __exportStar(require("./strategies/jwt.strategy"), exports);
 __exportStar(require("./strategies/google.strategy"), exports);
 __exportStar(require("./strategies/facebook.strategy"), exports);
@@ -129,11 +132,14 @@ __exportStar(require("./decorators/require-scopes.decorator"), exports);
 __exportStar(require("./decorators/current-tenant.decorator"), exports);
 __exportStar(require("./decorators/current-realm.decorator"), exports);
 __exportStar(require("./decorators/resource-scope.decorator"), exports);
+__exportStar(require("./decorators/allow-guest-session.decorator"), exports);
+__exportStar(require("./decorators/current-guest.decorator"), exports);
 __exportStar(require("./guards/jwt-auth.guard"), exports);
 __exportStar(require("./guards/tenant.guard"), exports);
 __exportStar(require("./guards/permission.guard"), exports);
 __exportStar(require("./guards/scope.guard"), exports);
 __exportStar(require("./guards/create-auth-guard"), exports);
+__exportStar(require("./guards/guest-session.guard"), exports);
 __exportStar(require("./guards/csrf.guard"), exports);
 __exportStar(require("./middleware/realm.middleware"), exports);
 var auth_user_entity_1 = require("./entities/auth-user.entity");
@@ -148,6 +154,7 @@ __exportStar(require("./exceptions/coded-http.exception"), exports);
 __exportStar(require("./exceptions/step-up.exceptions"), exports);
 __exportStar(require("./exceptions/passkey.exceptions"), exports);
 __exportStar(require("./exceptions/email-challenge.exceptions"), exports);
+__exportStar(require("./exceptions/guest-session.exceptions"), exports);
 __exportStar(require("./enums/verification-type.enum"), exports);
 __exportStar(require("./types/oauth.types"), exports);
 __exportStar(require("./utils/provider-helpers"), exports);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAYA,gDAA8B;AAC9B,8CAA4B;AAK5B,mEAAiD;AACjD,yEAAuD;AACvD,uEAAqD;AACrD,qEAAmD;AACnD,8EAA4D;AAC5D,yEAAuD;AACvD,kFAAgE;AAChE,qEAAmD;AACnD,iFAA+D;AAC/D,gFAA8D;AAC9D,8EAA4D;AAC5D,4EAA0D;AAC1D,4EAA0D;AAC1D,oFAAkE;AAClE,+DAA6C;AAC7C,gFAA8D;AAC9D,sEAAoD;AACpD,6EAA2D;AAC3D,2EAAyD;AACzD,0EAAwD;AACxD,yEAAuD;AACvD,wFAAsE;AACtE,6EAA2D;AAC3D,4EAA0D;AAC1D,iFAA+D;AAC/D,sEAAoD;AACpD,+EAA6D;AAK7D,0DAAwC;AACxC,mEAAiD;AACjD,kEAAgD;AAChD,gEAA8C;AAC9C,iEAA+C;AAC/C,4EAA0D;AAE1D,oEAAkD;AAElD,4EAA0D;AAC1D,yEAAuD;AACvD,wEAAsD;AACtD,yEAAuD;AACvD,6DAA2C;AAC3C,6DAA2C;AAC3C,mEAAiD;AACjD,0EAAwD;AACxD,qEAAmD;AACnD,yEAAuD;AACvD,4EAA0D;AAC1D,2EAAyD;AACzD,yEAAuD;AACvD,qEAAmD;AACnD,6EAA2D;AAC3D,wEAAsD;AAKtD,oEAAkD;AAClD,gEAA8C;AAC9C,gEAA8C;AAC9C,8DAA4C;AAC5C,oEAAkD;AAClD,mEAAiD;AACjD,iEAA+C;AAC/C,+DAA6C;AAK7C,8EAA4D;AAC5D,6EAA2D;AAC3D,mEAAiD;AACjD,wEAAsD;AACtD,uEAAqD;AACrD,8EAA4D;AAC5D,sFAAoE;AAKpE,4DAA0C;AAC1C,+DAA6C;AAC7C,iEAA+C;AAC/C,oEAAkD;AAClD,sEAAoD;AACpD,gEAA8C;AAC9C,qEAAmD;AAKnD,iEAA+C;AAG/C,+DAA6C;AAM7C,oDAAkC;AAClC,qDAAmC;AACnC,4DAA0C;AAC1C,qDAAmC;AACnC,4DAA0C;AAC1C,2DAAyC;AACzC,kEAAgD;AAChD,sEAAoD;AACpD,2DAAyC;AACzC,wEAAsD;AACtD,sEAAoD;AACpD,kEAAgD;AAChD,uEAAqD;AACrD,oEAAkD;AAClD,2EAAyD;AACzD,gEAA8C;AAC9C,8DAA4C;AAC5C,6DAA2C;AAC3C,+DAA6C;AAC7C,+DAA6C;AAC7C,yEAAuD;AACvD,iEAA+C;AAC/C,gEAA8C;AAC9C,6EAA2D;AAC3D,8DAA4C;AAC5C,qEAAmD;AACnD,6DAA2C;AAC3C,oEAAkD;AAClD,oDAAkC;AAKlC,sEAAoD;AACpD,gEAA8C;AAC9C,yEAAuD;AACvD,qEAAmD;AACnD,6EAA2D;AAC3D,wEAAsD;AACtD,wEAAsD;AACtD,uEAAqD;AACrD,wEAAsD;AAKtD,0DAAwC;AACxC,wDAAsC;AACtC,4DAA0C;AAC1C,uDAAqC;AACrC,6DAA2C;AAC3C,sDAAoC;AAKpC,gEAA8C;AAK9C,gEAAuD;AAA9C,4GAAA,QAAQ,OAAA;AAKjB,wEAAsD;AACtD,0EAAwD;AACxD,uEAAqD;AACrD,gEAA8C;AAC9C,yEAAuD;AACvD,6EAA2D;AAC3D,oEAAkD;AAClD,kEAAgD;AAChD,kEAAgD;AAChD,0EAAwD;AAKxD,iEAA+C;AAK/C,sDAAoC;AAKpC,2DAAyC;AACzC,yDAAuC;AACvC,sDAAoC;AACpC,4DAA0C;AAC1C,kDAAgC;AAChC,0DAAwC;AACxC,kDAAgC;AAEhC,uDAK+B;AAJ7B,4GAAA,WAAW,OAAA;AACX,yGAAA,QAAQ,OAAA;AACR,gHAAA,eAAe,OAAA;AACf,4HAAA,2BAA2B,OAAA;AAE7B,yDAAuC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAYA,gDAA8B;AAC9B,8CAA4B;AAK5B,mEAAiD;AACjD,yEAAuD;AACvD,uEAAqD;AACrD,qEAAmD;AACnD,8EAA4D;AAC5D,yEAAuD;AACvD,kFAAgE;AAChE,qEAAmD;AACnD,iFAA+D;AAC/D,gFAA8D;AAC9D,8EAA4D;AAC5D,4EAA0D;AAC1D,4EAA0D;AAC1D,oFAAkE;AAClE,kFAAgE;AAChE,+DAA6C;AAC7C,gFAA8D;AAC9D,sEAAoD;AACpD,6EAA2D;AAC3D,2EAAyD;AACzD,0EAAwD;AACxD,yEAAuD;AACvD,wFAAsE;AACtE,6EAA2D;AAC3D,4EAA0D;AAC1D,iFAA+D;AAC/D,sEAAoD;AACpD,+EAA6D;AAK7D,0DAAwC;AACxC,mEAAiD;AACjD,kEAAgD;AAChD,gEAA8C;AAC9C,iEAA+C;AAC/C,4EAA0D;AAE1D,oEAAkD;AAElD,4EAA0D;AAC1D,yEAAuD;AACvD,wEAAsD;AACtD,yEAAuD;AACvD,6DAA2C;AAC3C,6DAA2C;AAC3C,mEAAiD;AACjD,0EAAwD;AACxD,qEAAmD;AACnD,mEAAiD;AACjD,yEAAuD;AACvD,4EAA0D;AAC1D,2EAAyD;AACzD,yEAAuD;AACvD,qEAAmD;AACnD,6EAA2D;AAC3D,wEAAsD;AAKtD,oEAAkD;AAClD,gEAA8C;AAC9C,gEAA8C;AAC9C,8DAA4C;AAC5C,oEAAkD;AAClD,mEAAiD;AACjD,iEAA+C;AAC/C,+DAA6C;AAK7C,8EAA4D;AAC5D,6EAA2D;AAC3D,mEAAiD;AACjD,wEAAsD;AACtD,uEAAqD;AACrD,8EAA4D;AAC5D,sFAAoE;AACpE,oFAAkE;AAKlE,4DAA0C;AAC1C,+DAA6C;AAC7C,iEAA+C;AAC/C,oEAAkD;AAClD,sEAAoD;AACpD,gEAA8C;AAC9C,qEAAmD;AAKnD,iEAA+C;AAG/C,+DAA6C;AAM7C,oDAAkC;AAClC,qDAAmC;AACnC,4DAA0C;AAC1C,qDAAmC;AACnC,4DAA0C;AAC1C,2DAAyC;AACzC,kEAAgD;AAChD,sEAAoD;AACpD,2DAAyC;AACzC,wEAAsD;AACtD,sEAAoD;AACpD,kEAAgD;AAChD,uEAAqD;AACrD,oEAAkD;AAClD,2EAAyD;AACzD,gEAA8C;AAC9C,8DAA4C;AAC5C,6DAA2C;AAC3C,+DAA6C;AAC7C,+DAA6C;AAC7C,yEAAuD;AACvD,iEAA+C;AAC/C,gEAA8C;AAC9C,6EAA2D;AAC3D,8DAA4C;AAC5C,qEAAmD;AACnD,6DAA2C;AAC3C,oEAAkD;AAClD,oDAAkC;AAKlC,sEAAoD;AACpD,gEAA8C;AAC9C,yEAAuD;AACvD,qEAAmD;AACnD,6EAA2D;AAC3D,wEAAsD;AACtD,wEAAsD;AACtD,uEAAqD;AACrD,wEAAsD;AACtD,6EAA2D;AAC3D,uEAAqD;AAKrD,0DAAwC;AACxC,wDAAsC;AACtC,4DAA0C;AAC1C,uDAAqC;AACrC,6DAA2C;AAC3C,+DAA6C;AAC7C,sDAAoC;AAKpC,gEAA8C;AAK9C,gEAAuD;AAA9C,4GAAA,QAAQ,OAAA;AAKjB,wEAAsD;AACtD,0EAAwD;AACxD,uEAAqD;AACrD,gEAA8C;AAC9C,yEAAuD;AACvD,6EAA2D;AAC3D,oEAAkD;AAClD,kEAAgD;AAChD,kEAAgD;AAChD,0EAAwD;AACxD,wEAAsD;AAKtD,iEAA+C;AAK/C,sDAAoC;AAKpC,2DAAyC;AACzC,yDAAuC;AACvC,sDAAoC;AACpC,4DAA0C;AAC1C,kDAAgC;AAChC,0DAAwC;AACxC,kDAAgC;AAEhC,uDAK+B;AAJ7B,4GAAA,WAAW,OAAA;AACX,yGAAA,QAAQ,OAAA;AACR,gHAAA,eAAe,OAAA;AACf,4HAAA,2BAA2B,OAAA;AAE7B,yDAAuC"}

package/dist/interfaces/auth-logger.interface.d.ts

@@ -60,6 +60,11 @@ export declare enum SecurityEvent {
     EMAIL_CHALLENGE_ISSUED = "EMAIL_CHALLENGE_ISSUED",
     EMAIL_CHALLENGE_VERIFIED = "EMAIL_CHALLENGE_VERIFIED",
     EMAIL_CHALLENGE_FAILED = "EMAIL_CHALLENGE_FAILED",
-    EMAIL_CHALLENGE_LOCKED = "EMAIL_CHALLENGE_LOCKED"
+    EMAIL_CHALLENGE_LOCKED = "EMAIL_CHALLENGE_LOCKED",
+    GUEST_SESSION_ISSUED = "GUEST_SESSION_ISSUED",
+    GUEST_SESSION_REJECTED = "GUEST_SESSION_REJECTED",
+    GUEST_SESSION_REVOKED = "GUEST_SESSION_REVOKED",
+    GUEST_SESSION_ENDED = "GUEST_SESSION_ENDED",
+    GUEST_GRANT_REVOKED = "GUEST_GRANT_REVOKED"
 }
 //# sourceMappingURL=auth-logger.interface.d.ts.map

package/dist/interfaces/auth-logger.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-logger.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-logger.interface.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,WAAW;IAK1B,GAAG,CAAC,cAAc,EAAE,MAAM,GAAG,aAAa,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAKpG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK9C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK/C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClD;AAKD,oBAAY,aAAa;IAEvB,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,MAAM,WAAW;IACjB,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,MAAM,WAAW;IACjB,cAAc,mBAAmB;IACjC,UAAU,eAAe;IAQzB,cAAc,mBAAmB;IAGjC,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAG7C,wBAAwB,6BAA6B;IACrD,wBAAwB,6BAA6B;IAGrD,cAAc,mBAAmB;IACjC,gBAAgB,qBAAqB;IASrC,wBAAwB,6BAA6B;IAcrD,sBAAsB,2BAA2B;IAGjD,sBAAsB,2BAA2B;IACjD,2BAA2B,gCAAgC;IAC3D,wBAAwB,6BAA6B;IACrD,yBAAyB,8BAA8B;IACvD,uBAAuB,4BAA4B;IACnD,cAAc,mBAAmB;IACjC,uBAAuB,4BAA4B;IACnD,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAG/B,eAAe,oBAAoB;IACnC,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IAGnD,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,kBAAkB,uBAAuB;IACzC,wBAAwB,6BAA6B;IAGrD,kBAAkB,uBAAuB;IACzC,4BAA4B,iCAAiC;IAC7D,qBAAqB,0BAA0B;IAC/C,qBAAqB,0BAA0B;IAE/C,0BAA0B,+BAA+B;IACzD,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IAEnC,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IAGjD,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IAGnC,sBAAsB,2BAA2B;IACjD,wBAAwB,6BAA6B;IAErD,sBAAsB,2BAA2B;IAEjD,sBAAsB,2BAA2B;CAClD"}
+{"version":3,"file":"auth-logger.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/auth-logger.interface.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,WAAW;IAK1B,GAAG,CAAC,cAAc,EAAE,MAAM,GAAG,aAAa,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAKpG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK9C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK/C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClD;AAKD,oBAAY,aAAa;IAEvB,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,MAAM,WAAW;IACjB,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IACjC,MAAM,WAAW;IACjB,cAAc,mBAAmB;IACjC,UAAU,eAAe;IAQzB,cAAc,mBAAmB;IAGjC,aAAa,kBAAkB;IAC/B,qBAAqB,0BAA0B;IAC/C,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAG7C,wBAAwB,6BAA6B;IACrD,wBAAwB,6BAA6B;IAGrD,cAAc,mBAAmB;IACjC,gBAAgB,qBAAqB;IASrC,wBAAwB,6BAA6B;IAcrD,sBAAsB,2BAA2B;IAGjD,sBAAsB,2BAA2B;IACjD,2BAA2B,gCAAgC;IAC3D,wBAAwB,6BAA6B;IACrD,yBAAyB,8BAA8B;IACvD,uBAAuB,4BAA4B;IACnD,cAAc,mBAAmB;IACjC,uBAAuB,4BAA4B;IACnD,cAAc,mBAAmB;IACjC,aAAa,kBAAkB;IAG/B,eAAe,oBAAoB;IACnC,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IAGnD,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;IACnD,uBAAuB,4BAA4B;IACnD,kBAAkB,uBAAuB;IACzC,wBAAwB,6BAA6B;IAGrD,kBAAkB,uBAAuB;IACzC,4BAA4B,iCAAiC;IAC7D,qBAAqB,0BAA0B;IAC/C,qBAAqB,0BAA0B;IAE/C,0BAA0B,+BAA+B;IACzD,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IAEnC,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IAGjD,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IAGnC,sBAAsB,2BAA2B;IACjD,wBAAwB,6BAA6B;IAErD,sBAAsB,2BAA2B;IAEjD,sBAAsB,2BAA2B;IAIjD,oBAAoB,yBAAyB;IAE7C,sBAAsB,2BAA2B;IACjD,qBAAqB,0BAA0B;IAE/C,mBAAmB,wBAAwB;IAC3C,mBAAmB,wBAAwB;CAC5C"}

package/dist/interfaces/auth-logger.interface.js

@@ -58,5 +58,10 @@ var SecurityEvent;
     SecurityEvent["EMAIL_CHALLENGE_VERIFIED"] = "EMAIL_CHALLENGE_VERIFIED";
     SecurityEvent["EMAIL_CHALLENGE_FAILED"] = "EMAIL_CHALLENGE_FAILED";
     SecurityEvent["EMAIL_CHALLENGE_LOCKED"] = "EMAIL_CHALLENGE_LOCKED";
+    SecurityEvent["GUEST_SESSION_ISSUED"] = "GUEST_SESSION_ISSUED";
+    SecurityEvent["GUEST_SESSION_REJECTED"] = "GUEST_SESSION_REJECTED";
+    SecurityEvent["GUEST_SESSION_REVOKED"] = "GUEST_SESSION_REVOKED";
+    SecurityEvent["GUEST_SESSION_ENDED"] = "GUEST_SESSION_ENDED";
+    SecurityEvent["GUEST_GRANT_REVOKED"] = "GUEST_GRANT_REVOKED";
 })(SecurityEvent || (exports.SecurityEvent = SecurityEvent = {}));
 //# sourceMappingURL=auth-logger.interface.js.map

package/dist/interfaces/auth-logger.interface.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-logger.interface.js","sourceRoot":"","sources":["../../src/interfaces/auth-logger.interface.ts"],"names":[],"mappings":";;;AA2CA,IAAY,aA2GX;AA3GD,WAAY,aAAa;IAEvB,gDAA+B,CAAA;IAC/B,gDAA+B,CAAA;IAC/B,kCAAiB,CAAA;IACjB,kDAAiC,CAAA;IACjC,kDAAiC,CAAA;IACjC,kCAAiB,CAAA;IACjB,kDAAiC,CAAA;IACjC,0CAAyB,CAAA;IAQzB,kDAAiC,CAAA;IAGjC,gDAA+B,CAAA;IAC/B,gEAA+C,CAAA;IAC/C,gEAA+C,CAAA;IAC/C,8DAA6C,CAAA;IAG7C,sEAAqD,CAAA;IACrD,sEAAqD,CAAA;IAGrD,kDAAiC,CAAA;IACjC,sDAAqC,CAAA;IASrC,sEAAqD,CAAA;IAcrD,kEAAiD,CAAA;IAGjD,kEAAiD,CAAA;IACjD,4EAA2D,CAAA;IAC3D,sEAAqD,CAAA;IACrD,wEAAuD,CAAA;IACvD,oEAAmD,CAAA;IACnD,kDAAiC,CAAA;IACjC,oEAAmD,CAAA;IACnD,kDAAiC,CAAA;IACjC,gDAA+B,CAAA;IAG/B,oDAAmC,CAAA;IACnC,gDAA+B,CAAA;IAC/B,gDAA+B,CAAA;IAC/B,8DAA6C,CAAA;IAC7C,8DAA6C,CAAA;IAC7C,gEAA+C,CAAA;IAC/C,oEAAmD,CAAA;IAGnD,0DAAyC,CAAA;IACzC,oEAAmD,CAAA;IACnD,oEAAmD,CAAA;IACnD,0DAAyC,CAAA;IACzC,sEAAqD,CAAA;IAGrD,0DAAyC,CAAA;IACzC,8EAA6D,CAAA;IAC7D,gEAA+C,CAAA;IAC/C,gEAA+C,CAAA;IAE/C,0EAAyD,CAAA;IACzD,oDAAmC,CAAA;IACnC,oDAAmC,CAAA;IAEnC,kEAAiD,CAAA;IACjD,kEAAiD,CAAA;IAGjD,oDAAmC,CAAA;IACnC,oDAAmC,CAAA;IAGnC,kEAAiD,CAAA;IACjD,sEAAqD,CAAA;IAErD,kEAAiD,CAAA;IAEjD,kEAAiD,CAAA;AACnD,CAAC,EA3GW,aAAa,6BAAb,aAAa,QA2GxB"}
+{"version":3,"file":"auth-logger.interface.js","sourceRoot":"","sources":["../../src/interfaces/auth-logger.interface.ts"],"names":[],"mappings":";;;AA2CA,IAAY,aAqHX;AArHD,WAAY,aAAa;IAEvB,gDAA+B,CAAA;IAC/B,gDAA+B,CAAA;IAC/B,kCAAiB,CAAA;IACjB,kDAAiC,CAAA;IACjC,kDAAiC,CAAA;IACjC,kCAAiB,CAAA;IACjB,kDAAiC,CAAA;IACjC,0CAAyB,CAAA;IAQzB,kDAAiC,CAAA;IAGjC,gDAA+B,CAAA;IAC/B,gEAA+C,CAAA;IAC/C,gEAA+C,CAAA;IAC/C,8DAA6C,CAAA;IAG7C,sEAAqD,CAAA;IACrD,sEAAqD,CAAA;IAGrD,kDAAiC,CAAA;IACjC,sDAAqC,CAAA;IASrC,sEAAqD,CAAA;IAcrD,kEAAiD,CAAA;IAGjD,kEAAiD,CAAA;IACjD,4EAA2D,CAAA;IAC3D,sEAAqD,CAAA;IACrD,wEAAuD,CAAA;IACvD,oEAAmD,CAAA;IACnD,kDAAiC,CAAA;IACjC,oEAAmD,CAAA;IACnD,kDAAiC,CAAA;IACjC,gDAA+B,CAAA;IAG/B,oDAAmC,CAAA;IACnC,gDAA+B,CAAA;IAC/B,gDAA+B,CAAA;IAC/B,8DAA6C,CAAA;IAC7C,8DAA6C,CAAA;IAC7C,gEAA+C,CAAA;IAC/C,oEAAmD,CAAA;IAGnD,0DAAyC,CAAA;IACzC,oEAAmD,CAAA;IACnD,oEAAmD,CAAA;IACnD,0DAAyC,CAAA;IACzC,sEAAqD,CAAA;IAGrD,0DAAyC,CAAA;IACzC,8EAA6D,CAAA;IAC7D,gEAA+C,CAAA;IAC/C,gEAA+C,CAAA;IAE/C,0EAAyD,CAAA;IACzD,oDAAmC,CAAA;IACnC,oDAAmC,CAAA;IAEnC,kEAAiD,CAAA;IACjD,kEAAiD,CAAA;IAGjD,oDAAmC,CAAA;IACnC,oDAAmC,CAAA;IAGnC,kEAAiD,CAAA;IACjD,sEAAqD,CAAA;IAErD,kEAAiD,CAAA;IAEjD,kEAAiD,CAAA;IAIjD,8DAA6C,CAAA;IAE7C,kEAAiD,CAAA;IACjD,gEAA+C,CAAA;IAE/C,4DAA2C,CAAA;IAC3C,4DAA2C,CAAA;AAC7C,CAAC,EArHW,aAAa,6BAAb,aAAa,QAqHxB"}

package/dist/interfaces/guest-session-repository.interface.d.ts

@@ -0,0 +1,37 @@
+export interface GuestSessionRecord {
+    id: string;
+    tokenHash: string;
+    principalId: string;
+    email: string;
+    realm: string | null;
+    revokedAt: Date | null;
+    createdAt: Date;
+}
+export interface GuestGrantRecord {
+    id: string;
+    sessionId: string;
+    kind: string;
+    grantId: string;
+    realm: string | null;
+    expiresAt: Date;
+    revokedAt: Date | null;
+    createdAt: Date;
+}
+export interface GuestSessionWithGrants extends GuestSessionRecord {
+    grants: GuestGrantRecord[];
+}
+export interface IGuestSessionRepository {
+    createSession(session: GuestSessionRecord, grant: GuestGrantRecord): Promise<void>;
+    findSessionByTokenHash(tokenHash: string): Promise<GuestSessionWithGrants | null>;
+    addGrant(grant: GuestGrantRecord): Promise<void>;
+    rotateToken(sessionId: string, oldHash: string, newHash: string): Promise<boolean>;
+    revokeSession(sessionId: string): Promise<boolean>;
+    revokeGrant(grantRecordId: string): Promise<boolean>;
+    revokeGrants(filter: {
+        kind: string;
+        grantId: string;
+        realm: string | null;
+    }): Promise<number>;
+    deleteExpired(): Promise<number>;
+}
+//# sourceMappingURL=guest-session-repository.interface.d.ts.map

package/dist/interfaces/guest-session-repository.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-session-repository.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/guest-session-repository.interface.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,kBAAkB;IAEjC,EAAE,EAAE,MAAM,CAAC;IAGX,SAAS,EAAE,MAAM,CAAC;IAGlB,WAAW,EAAE,MAAM,CAAC;IAGpB,KAAK,EAAE,MAAM,CAAC;IAGd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IAEvB,SAAS,EAAE,IAAI,CAAC;CACjB;AAGD,MAAM,WAAW,gBAAgB;IAE/B,EAAE,EAAE,MAAM,CAAC;IAEX,SAAS,EAAE,MAAM,CAAC;IAGlB,IAAI,EAAE,MAAM,CAAC;IAGb,OAAO,EAAE,MAAM,CAAC;IAGhB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAGrB,SAAS,EAAE,IAAI,CAAC;IAGhB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IAEvB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAEhE,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC5B;AAqBD,MAAM,WAAW,uBAAuB;IAEtC,aAAa,CAAC,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAOnF,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAGlF,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAcjD,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAGnF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAGnD,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAOrD,YAAY,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAM/F,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAClC"}

package/dist/interfaces/guest-session-repository.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=guest-session-repository.interface.js.map

package/dist/interfaces/guest-session-repository.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-session-repository.interface.js","sourceRoot":"","sources":["../../src/interfaces/guest-session-repository.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/index.d.ts

@@ -4,6 +4,7 @@ export * from './auth-user.interface';
 export * from './biometric-repository.interface';
 export * from './passkey-repository.interface';
 export * from './email-challenge-repository.interface';
+export * from './guest-session-repository.interface';
 export * from './brute-force-repository.interface';
 export * from './email-service.interface';
 export * from './email-template-renderer.interface';

package/dist/interfaces/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":"AAIA,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qCAAqC,CAAC;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,mCAAmC,CAAC;AAClD,cAAc,sCAAsC,CAAC;AACrD,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":"AAIA,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wCAAwC,CAAC;AACvD,cAAc,sCAAsC,CAAC;AACrD,cAAc,oCAAoC,CAAC;AACnD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qCAAqC,CAAC;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,mCAAmC,CAAC;AAClD,cAAc,sCAAsC,CAAC;AACrD,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qCAAqC,CAAC"}

package/dist/interfaces/index.js

@@ -20,6 +20,7 @@ __exportStar(require("./auth-user.interface"), exports);
 __exportStar(require("./biometric-repository.interface"), exports);
 __exportStar(require("./passkey-repository.interface"), exports);
 __exportStar(require("./email-challenge-repository.interface"), exports);
+__exportStar(require("./guest-session-repository.interface"), exports);
 __exportStar(require("./brute-force-repository.interface"), exports);
 __exportStar(require("./email-service.interface"), exports);
 __exportStar(require("./email-template-renderer.interface"), exports);

package/dist/interfaces/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,mEAAiD;AACjD,0DAAwC;AACxC,wDAAsC;AACtC,mEAAiD;AACjD,iEAA+C;AAC/C,yEAAuD;AACvD,qEAAmD;AACnD,4DAA0C;AAC1C,sEAAoD;AACpD,2DAAyC;AACzC,oEAAkD;AAClD,uEAAqD;AACrD,0DAAwC;AACxC,8DAA4C;AAC5C,8DAA4C;AAC5C,sEAAoD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAIA,mEAAiD;AACjD,0DAAwC;AACxC,wDAAsC;AACtC,mEAAiD;AACjD,iEAA+C;AAC/C,yEAAuD;AACvD,uEAAqD;AACrD,qEAAmD;AACnD,4DAA0C;AAC1C,sEAAoD;AACpD,2DAAyC;AACzC,oEAAkD;AAClD,uEAAqD;AACrD,0DAAwC;AACxC,8DAA4C;AAC5C,8DAA4C;AAC5C,sEAAoD"}

package/dist/repositories/in-memory-guest-session.repository.d.ts

@@ -0,0 +1,18 @@
+import { GuestGrantRecord, GuestSessionRecord, GuestSessionWithGrants, IGuestSessionRepository } from '../interfaces/guest-session-repository.interface';
+export declare class InMemoryGuestSessionRepository implements IGuestSessionRepository {
+    private readonly sessions;
+    private readonly grants;
+    createSession(session: GuestSessionRecord, grant: GuestGrantRecord): Promise<void>;
+    findSessionByTokenHash(tokenHash: string): Promise<GuestSessionWithGrants | null>;
+    addGrant(grant: GuestGrantRecord): Promise<void>;
+    rotateToken(sessionId: string, oldHash: string, newHash: string): Promise<boolean>;
+    revokeSession(sessionId: string): Promise<boolean>;
+    revokeGrant(grantRecordId: string): Promise<boolean>;
+    revokeGrants(filter: {
+        kind: string;
+        grantId: string;
+        realm: string | null;
+    }): Promise<number>;
+    deleteExpired(): Promise<number>;
+}
+//# sourceMappingURL=in-memory-guest-session.repository.d.ts.map

package/dist/repositories/in-memory-guest-session.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-guest-session.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/in-memory-guest-session.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,kDAAkD,CAAC;AAW1D,qBAAa,8BAA+B,YAAW,uBAAuB;IAC5E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAyC;IAClE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAExD,aAAa,CAAC,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlF,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAYjF,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASlF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASlD,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASpD,YAAY,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAgB9F,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;CAiBvC"}

package/dist/repositories/in-memory-guest-session.repository.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemoryGuestSessionRepository = void 0;
+class InMemoryGuestSessionRepository {
+    constructor() {
+        this.sessions = new Map();
+        this.grants = new Map();
+    }
+    async createSession(session, grant) {
+        this.sessions.set(session.id, { ...session });
+        this.grants.set(grant.id, { ...grant });
+    }
+    async findSessionByTokenHash(tokenHash) {
+        for (const session of this.sessions.values()) {
+            if (session.tokenHash === tokenHash) {
+                return {
+                    ...session,
+                    grants: [...this.grants.values()].filter((g) => g.sessionId === session.id).map((g) => ({ ...g })),
+                };
+            }
+        }
+        return null;
+    }
+    async addGrant(grant) {
+        this.grants.set(grant.id, { ...grant });
+    }
+    async rotateToken(sessionId, oldHash, newHash) {
+        const session = this.sessions.get(sessionId);
+        if (!session || session.tokenHash !== oldHash || session.revokedAt !== null) {
+            return false;
+        }
+        session.tokenHash = newHash;
+        return true;
+    }
+    async revokeSession(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session || session.revokedAt !== null) {
+            return false;
+        }
+        session.revokedAt = new Date();
+        return true;
+    }
+    async revokeGrant(grantRecordId) {
+        const grant = this.grants.get(grantRecordId);
+        if (!grant || grant.revokedAt !== null) {
+            return false;
+        }
+        grant.revokedAt = new Date();
+        return true;
+    }
+    async revokeGrants(filter) {
+        let revoked = 0;
+        for (const grant of this.grants.values()) {
+            if (grant.revokedAt === null &&
+                grant.kind === filter.kind &&
+                grant.grantId === filter.grantId &&
+                grant.realm === filter.realm) {
+                grant.revokedAt = new Date();
+                revoked += 1;
+            }
+        }
+        return revoked;
+    }
+    async deleteExpired() {
+        let deleted = 0;
+        for (const [id, grant] of this.grants) {
+            if (grant.expiresAt.getTime() <= Date.now()) {
+                this.grants.delete(id);
+                deleted += 1;
+            }
+        }
+        const withGrants = new Set([...this.grants.values()].map((g) => g.sessionId));
+        for (const id of this.sessions.keys()) {
+            if (!withGrants.has(id)) {
+                this.sessions.delete(id);
+                deleted += 1;
+            }
+        }
+        return deleted;
+    }
+}
+exports.InMemoryGuestSessionRepository = InMemoryGuestSessionRepository;
+//# sourceMappingURL=in-memory-guest-session.repository.js.map

package/dist/repositories/in-memory-guest-session.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-guest-session.repository.js","sourceRoot":"","sources":["../../src/repositories/in-memory-guest-session.repository.ts"],"names":[],"mappings":";;;AAgBA,MAAa,8BAA8B;IAA3C;QACmB,aAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;QACjD,WAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAmFhE,CAAC;IAjFC,KAAK,CAAC,aAAa,CAAC,OAA2B,EAAE,KAAuB;QACtE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO;oBACL,GAAG,OAAO;oBACV,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;iBACnG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAuB;QACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAe;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC5E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,aAAqB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA+D;QAChF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,IACE,KAAK,CAAC,SAAS,KAAK,IAAI;gBACxB,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBAC1B,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;gBAChC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAC5B,CAAC;gBACD,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC5C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvB,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9E,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzB,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AArFD,wEAqFC"}