@ambushsoftworks/nestjs-auth-graphql 0.6.5 → 0.7.2

package/dist/services/auth.service.d.ts

@@ -13,8 +13,10 @@ import { IAuthLogger } from '../interfaces/auth-logger.interface';
 import { IRateLimiter } from '../interfaces/rate-limiter.interface';
 import { IJwtPayloadFactory } from '../interfaces/jwt-payload-factory.interface';
 import { JwtPayload } from '../dto/jwt-payload.interface';
+import { IPhoneVerificationUser } from '../dto/phone-verification-response.dto';
 import { IAuthUser } from '../interfaces/auth-user.interface';
 import { SocialProvider } from '../utils/provider-helpers';
+import type { AuthModuleOptions } from '../auth.module';
 export declare class AuthService {
     private userRepository;
     private refreshTokenRepository;
@@ -35,18 +37,18 @@ export declare class AuthService {
     private readonly authModuleOptions;
     private readonly jwtPayloadFactory;
     private static readonly DUMMY_HASH;
-    constructor(userRepository: IUserRepository<IAuthUser>, refreshTokenRepository: IRefreshTokenRepository, jwtService: JwtService, refreshTokenService: RefreshTokenService, bruteForceProtection: BruteForceProtectionService, verificationService: VerificationService, oauthLinkingTokenService: OAuthLinkingTokenService, facebookStrategy: FacebookStrategy, securityLogger: IAuthLogger, lifecycleHooks: IAuthLifecycleHooks<IAuthUser>, emailService: IEmailService, smsService: ISmsService, authModuleOptions: any, rateLimiter: IRateLimiter, jwtPayloadFactory?: IJwtPayloadFactory);
-    signup(email: string, password: string): Promise<{
+    constructor(userRepository: IUserRepository<IAuthUser>, refreshTokenRepository: IRefreshTokenRepository, jwtService: JwtService, refreshTokenService: RefreshTokenService, bruteForceProtection: BruteForceProtectionService, verificationService: VerificationService, oauthLinkingTokenService: OAuthLinkingTokenService, facebookStrategy: FacebookStrategy, securityLogger: IAuthLogger, lifecycleHooks: IAuthLifecycleHooks<IAuthUser>, emailService: IEmailService, smsService: ISmsService, authModuleOptions: AuthModuleOptions, rateLimiter: IRateLimiter, jwtPayloadFactory?: IJwtPayloadFactory);
+    signup(email: string, password: string, realm?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         user: IAuthUser;
     }>;
-    login(email: string, password: string, ipAddress?: string): Promise<{
+    login(email: string, password: string, ipAddress?: string, realm?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         user: IAuthUser;
     }>;
-    refreshToken(refreshToken: string, ipAddress?: string): Promise<{
+    refreshToken(refreshToken: string, ipAddress?: string, realm?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         user: IAuthUser;
@@ -58,15 +60,15 @@ export declare class AuthService {
         success: boolean;
         message: string;
     }>;
-    verifyEmail(email: string, code: string): Promise<{
+    verifyEmail(email: string, code: string, realm?: string): Promise<{
         success: boolean;
         message: string;
     }>;
-    resendVerificationEmail(email: string): Promise<{
+    resendVerificationEmail(email: string, realm?: string): Promise<{
         success: boolean;
         message: string;
     }>;
-    sendPhoneVerification(userId: string, phoneNumber: string, countryCode?: string): Promise<{
+    sendPhoneVerification(userId: string, phoneNumber: string, countryCode?: string, realm?: string): Promise<{
         success: boolean;
         message: string;
         phoneNumber?: string;
@@ -75,7 +77,7 @@ export declare class AuthService {
     verifyPhone(userId: string, phoneNumber: string, code: string): Promise<{
         success: boolean;
         message: string;
-        user?: any;
+        user?: IPhoneVerificationUser;
     }>;
     resendPhoneVerification(userId: string, phoneNumber: string): Promise<{
         success: boolean;
@@ -85,7 +87,7 @@ export declare class AuthService {
     removePhoneNumber(userId: string): Promise<{
         success: boolean;
         message: string;
-        user?: any;
+        user?: Partial<IAuthUser>;
     }>;
     handleSocialLogin(provider: 'google' | 'facebook' | 'apple', profile: {
         googleId?: string;
@@ -95,12 +97,12 @@ export declare class AuthService {
         emailVerified: boolean;
         firstName?: string;
         lastName?: string;
-    }, _ipAddress?: string): Promise<{
+    }, _ipAddress?: string, realm?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         user: IAuthUser;
     }>;
-    completeFacebookSignUp(fallbackToken: string, email: string, accessToken: string): Promise<{
+    completeFacebookSignUp(fallbackToken: string, email: string, accessToken: string, realm?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         user: IAuthUser;
@@ -111,12 +113,12 @@ export declare class AuthService {
         user: IAuthUser;
         alreadyUnlinked: boolean;
     }>;
-    requestPasswordReset(email: string, ipAddress?: string): Promise<{
+    requestPasswordReset(email: string, ipAddress?: string, realm?: string): Promise<{
         success: boolean;
         message: string;
         retryAfterSeconds?: number;
     }>;
-    resetPassword(email: string, code: string, newPassword: string, ipAddress?: string): Promise<{
+    resetPassword(email: string, code: string, newPassword: string, ipAddress?: string, realm?: string): Promise<{
         success: boolean;
         message: string;
         user: IAuthUser;
@@ -128,6 +130,8 @@ export declare class AuthService {
     clearAuthCookies(res: {
         clearCookie: (name: string, options: Record<string, unknown>) => void;
     }): void;
+    maskPhoneNumber(phone: string): string;
     private generateToken;
+    private generateTokenPairAndStore;
 }
 //# sourceMappingURL=auth.service.d.ts.map

package/dist/services/auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAkB,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAiB,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAIjF,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAgB,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,cAAc,EAGf,MAAM,2BAA2B,CAAC;AAOnC,qBACa,WAAW;IAiBpB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,sBAAsB;IAC9B,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,oBAAoB;IAC5B,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,wBAAwB;IAChC,OAAO,CAAC,gBAAgB;IAExB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,YAAY;IAEpB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,WAAW;IApCrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA4B;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAM;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAOvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAC+B;gBAIvD,cAAc,EAAE,eAAe,CAAC,SAAS,CAAC,EAE1C,sBAAsB,EAAE,uBAAuB,EAC/C,UAAU,EAAE,UAAU,EACtB,mBAAmB,EAAE,mBAAmB,EACxC,oBAAoB,EAAE,2BAA2B,EACjD,mBAAmB,EAAE,mBAAmB,EACxC,wBAAwB,EAAE,wBAAwB,EAClD,gBAAgB,EAAE,gBAAgB,EAElC,cAAc,EAAE,WAAW,EAE3B,cAAc,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAE9C,YAAY,EAAE,aAAa,EAE3B,UAAU,EAAE,WAAW,EAE/B,iBAAiB,EAAE,GAAG,EAEd,WAAW,EAAE,YAAY,EAGjC,iBAAiB,CAAC,EAAE,kBAAkB;IAelC,MAAM,CACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAiHpE,KAAK,CACT,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA2HpE,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAkIpE,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAarD,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwC9D,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA6B1C,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAmE3C,WAAW,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAsC3C,uBAAuB,CAC3B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA0E3C,qBAAqB,CACzB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IA4FI,WAAW,CACf,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,GAAG,CAAC;KACZ,CAAC;IA0EI,uBAAuB,CAC3B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IAgFI,iBAAiB,CACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,GAAG,CAAC;KACZ,CAAC;IAuEI,iBAAiB,CACrB,QAAQ,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,EACzC,OAAO,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACnJ,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA6LpE,sBAAsB,CAC1B,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAkPpE,mBAAmB,CACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAC;QAAC,eAAe,EAAE,OAAO,CAAA;KAAE,CAAC;IA8HtF,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA4JvE,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA+FlE,IAAI,iBAAiB,IAAI,OAAO,CAE/B;IAUD,cAAc,CACZ,GAAG,EAAE;QAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,EACxF,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,IAAI;IA8BP,gBAAgB,CACd,GAAG,EAAE;QAAE,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,GAC7E,IAAI;IAiCP,OAAO,CAAC,aAAa;CAKtB"}
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8CAA8C,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAkB,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAiB,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AAIjF,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,SAAS,EAAgC,MAAM,mCAAmC,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAOxD,qBACa,WAAW;IAiBpB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,sBAAsB;IAC9B,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,oBAAoB;IAC5B,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,wBAAwB;IAChC,OAAO,CAAC,gBAAgB;IAExB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,YAAY;IAEpB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,WAAW;IApCrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAA4B;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAOvD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAC+B;gBAIvD,cAAc,EAAE,eAAe,CAAC,SAAS,CAAC,EAE1C,sBAAsB,EAAE,uBAAuB,EAC/C,UAAU,EAAE,UAAU,EACtB,mBAAmB,EAAE,mBAAmB,EACxC,oBAAoB,EAAE,2BAA2B,EACjD,mBAAmB,EAAE,mBAAmB,EACxC,wBAAwB,EAAE,wBAAwB,EAClD,gBAAgB,EAAE,gBAAgB,EAElC,cAAc,EAAE,WAAW,EAE3B,cAAc,EAAE,mBAAmB,CAAC,SAAS,CAAC,EAE9C,YAAY,EAAE,aAAa,EAE3B,UAAU,EAAE,WAAW,EAE/B,iBAAiB,EAAE,iBAAiB,EAE5B,WAAW,EAAE,YAAY,EAGjC,iBAAiB,CAAC,EAAE,kBAAkB;IAelC,MAAM,CACV,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA0GpE,KAAK,CACT,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAqHpE,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA4HpE,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAarD,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwC9D,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA6B1C,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAmE3C,WAAW,CACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAsC3C,uBAAuB,CAC3B,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA0E3C,qBAAqB,CACzB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IA4FI,WAAW,CACf,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,sBAAsB,CAAC;KAC/B,CAAC;IA0EI,uBAAuB,CAC3B,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IAgFI,iBAAiB,CACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QACT,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;KAC3B,CAAC;IAuEI,iBAAiB,CACrB,QAAQ,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,EACzC,OAAO,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EACnJ,UAAU,CAAC,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAoKpE,sBAAsB,CAC1B,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAmOpE,mBAAmB,CACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAC;QAAC,eAAe,EAAE,OAAO,CAAA;KAAE,CAAC;IA4BtF,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA4JvE,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA4FlE,IAAI,iBAAiB,IAAI,OAAO,CAE/B;IAUD,cAAc,CACZ,GAAG,EAAE;QAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,EACxF,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,IAAI;IA8BP,gBAAgB,CACd,GAAG,EAAE;QAAE,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,GAC7E,IAAI;IAiCP,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAWtC,OAAO,CAAC,aAAa;YAYP,yBAAyB;CAiBxC"}

package/dist/services/auth.service.js

@@ -85,7 +85,7 @@ let AuthService = AuthService_1 = class AuthService {
         this.jwtPayloadFactory = jwtPayloadFactory || new default_jwt_payload_factory_1.DefaultJwtPayloadFactory();
         this.passwordValidationService = new password_validation_service_1.PasswordValidationService(authModuleOptions?.passwordPolicy);
     }
-    async signup(email, password) {
+    async signup(email, password, realm) {
         const passwordHash = await bcrypt.hash(password, this.bcryptRounds);
         let user;
         try {
@@ -93,6 +93,7 @@ let AuthService = AuthService_1 = class AuthService {
                 email,
                 passwordHash,
                 authProvider: auth_user_interface_1.AuthProvider.EMAIL,
+                realm,
             });
         }
         catch (error) {
@@ -134,7 +135,7 @@ let AuthService = AuthService_1 = class AuthService {
             await this.lifecycleHooks.onSignup(user);
         }
         try {
-            const verificationCode = await this.verificationService.generateCode(user.email, 'email');
+            const verificationCode = await this.verificationService.generateCode(user.email, 'email', realm);
             await this.emailService.sendVerificationEmail(user.email, verificationCode, 15);
             await this.userRepository.update(user.id, {
                 emailVerificationSentAt: new Date(),
@@ -145,17 +146,10 @@ let AuthService = AuthService_1 = class AuthService {
             const errorStack = error instanceof Error ? error.stack : undefined;
             this.logger.error(`Failed to send verification email to ${user.email}`, errorStack);
         }
-        const accessToken = this.generateToken(user);
-        const { token: refreshToken, hash: refreshTokenHash } = this.refreshTokenService.generateToken();
-        await this.refreshTokenRepository.create({
-            userId: user.id,
-            token: refreshToken,
-            hashedToken: refreshTokenHash,
-            expiresAt: this.refreshTokenService.getExpiryDate(),
-        });
+        const { accessToken, refreshToken } = await this.generateTokenPairAndStore(user, realm);
         return { accessToken, refreshToken, user };
     }
-    async login(email, password, ipAddress) {
+    async login(email, password, ipAddress, realm) {
         this.logger.log(`[AUTH_SERVICE] Login started for email: ${email}`);
         if (ipAddress && (await this.bruteForceProtection.checkIpRateLimit(ipAddress))) {
             throw new common_1.HttpException({
@@ -163,7 +157,7 @@ let AuthService = AuthService_1 = class AuthService {
                 code: 'RATE_LIMIT_EXCEEDED',
             }, common_1.HttpStatus.TOO_MANY_REQUESTS);
         }
-        const user = await this.userRepository.findByEmail(email);
+        const user = await this.userRepository.findByEmail(email, realm);
         if (user && await this.bruteForceProtection.isAccountLockedById(user.id)) {
             const remainingTime = await this.bruteForceProtection.getRemainingLockoutTimeById(user.id);
             throw new account_locked_exception_1.AccountLockedException(remainingTime);
@@ -179,7 +173,7 @@ let AuthService = AuthService_1 = class AuthService {
                 this.lifecycleHooks.onAuthFailure(email, ipAddress, 'USER_NOT_FOUND');
             }
             if (ipAddress) {
-                await this.bruteForceProtection.recordFailedAttempt(email, ipAddress);
+                await this.bruteForceProtection.recordFailedAttempt(email, ipAddress, undefined, realm);
             }
             throw new common_1.UnauthorizedException('Invalid credentials');
         }
@@ -198,11 +192,11 @@ let AuthService = AuthService_1 = class AuthService {
                 this.lifecycleHooks.onAuthFailure(email, ipAddress, 'INVALID_PASSWORD');
             }
             if (ipAddress) {
-                await this.bruteForceProtection.recordFailedAttempt(email, ipAddress, user.id);
+                await this.bruteForceProtection.recordFailedAttempt(email, ipAddress, user.id, realm);
             }
             throw new common_1.UnauthorizedException('Invalid credentials');
         }
-        await this.bruteForceProtection.resetFailedAttempts(email);
+        await this.bruteForceProtection.resetFailedAttempts(email, realm);
         this.securityLogger.log(auth_logger_interface_1.SecurityEvent.LOGIN_SUCCESS, {
             userId: user.id,
             email,
@@ -211,17 +205,10 @@ let AuthService = AuthService_1 = class AuthService {
         if (this.lifecycleHooks.onLogin) {
             await this.lifecycleHooks.onLogin(user);
         }
-        const accessToken = this.generateToken(user);
-        const { token: refreshToken, hash: refreshTokenHash } = this.refreshTokenService.generateToken();
-        await this.refreshTokenRepository.create({
-            userId: user.id,
-            token: refreshToken,
-            hashedToken: refreshTokenHash,
-            expiresAt: this.refreshTokenService.getExpiryDate(),
-        });
+        const { accessToken, refreshToken } = await this.generateTokenPairAndStore(user, realm);
         return { accessToken, refreshToken, user };
     }
-    async refreshToken(refreshToken, ipAddress) {
+    async refreshToken(refreshToken, ipAddress, realm) {
         try {
             const refreshTokenHash = this.refreshTokenService.hashToken(refreshToken);
             const cachedResult = this.refreshTokenService.getCachedRefreshResult(refreshTokenHash);
@@ -270,14 +257,7 @@ let AuthService = AuthService_1 = class AuthService {
                 });
                 throw new common_1.UnauthorizedException('User not found');
             }
-            const newAccessToken = this.generateToken(user);
-            const { token: newRefreshToken, hash: newRefreshTokenHash } = this.refreshTokenService.generateToken();
-            await this.refreshTokenRepository.create({
-                userId: user.id,
-                token: newRefreshToken,
-                hashedToken: newRefreshTokenHash,
-                expiresAt: this.refreshTokenService.getExpiryDate(),
-            });
+            const { accessToken: newAccessToken, refreshToken: newRefreshToken, refreshTokenHash: newRefreshTokenHash, } = await this.generateTokenPairAndStore(user, realm);
             await this.refreshTokenRepository.delete(storedToken.id);
             await this.refreshTokenRepository.deleteExpired().catch((err) => {
                 this.logger.warn(`Failed to clean up expired refresh tokens: ${err instanceof Error ? err.message : String(err)}`);
@@ -375,8 +355,8 @@ let AuthService = AuthService_1 = class AuthService {
             message: 'Password changed successfully. Please log in again with your new password.',
         };
     }
-    async verifyEmail(email, code) {
-        const user = await this.userRepository.findByEmail(email);
+    async verifyEmail(email, code, realm) {
+        const user = await this.userRepository.findByEmail(email, realm);
         if (!user) {
             throw new common_1.UnauthorizedException('Invalid email address');
         }
@@ -386,7 +366,7 @@ let AuthService = AuthService_1 = class AuthService {
                 message: 'Email is already verified',
             };
         }
-        await this.verificationService.validateCode(email, 'email', code);
+        await this.verificationService.validateCode(email, 'email', code, realm);
         await this.userRepository.markEmailVerified(user.id);
         if (this.lifecycleHooks.onEmailVerified) {
             await this.lifecycleHooks.onEmailVerified(user);
@@ -397,8 +377,8 @@ let AuthService = AuthService_1 = class AuthService {
             message: 'Email successfully verified',
         };
     }
-    async resendVerificationEmail(email) {
-        const user = await this.userRepository.findByEmail(email);
+    async resendVerificationEmail(email, realm) {
+        const user = await this.userRepository.findByEmail(email, realm);
         if (!user) {
             throw new common_1.UnauthorizedException('Invalid email address');
         }
@@ -417,8 +397,8 @@ let AuthService = AuthService_1 = class AuthService {
                 throw new VerificationEmailRateLimitException(retryAfterSeconds);
             }
         }
-        await this.verificationService.invalidateCode(email, 'email');
-        const verificationCode = await this.verificationService.generateCode(email, 'email');
+        await this.verificationService.invalidateCode(email, 'email', realm);
+        const verificationCode = await this.verificationService.generateCode(email, 'email', realm);
         try {
             await this.emailService.sendVerificationEmail(email, verificationCode, 15);
             await this.userRepository.update(user.id, {
@@ -436,7 +416,7 @@ let AuthService = AuthService_1 = class AuthService {
             throw new common_1.HttpException('Failed to send verification email. Please try again later.', common_1.HttpStatus.INTERNAL_SERVER_ERROR);
         }
     }
-    async sendPhoneVerification(userId, phoneNumber, countryCode) {
+    async sendPhoneVerification(userId, phoneNumber, countryCode, realm) {
         const user = await this.userRepository.findById(userId);
         if (!user) {
             throw new common_1.UnauthorizedException('User not found');
@@ -445,7 +425,7 @@ let AuthService = AuthService_1 = class AuthService {
         if (!normalizedPhone) {
             throw new common_1.BadRequestException('Invalid phone number format');
         }
-        const existingUser = await this.userRepository.findByPhoneNumber(normalizedPhone);
+        const existingUser = await this.userRepository.findByPhoneNumber(normalizedPhone, realm);
         if (existingUser && existingUser.id !== userId) {
             throw new common_1.ConflictException('This phone number is already associated with another account');
         }
@@ -498,9 +478,9 @@ let AuthService = AuthService_1 = class AuthService {
                 user: {
                     id: user.id,
                     email: user.email,
-                    phoneNumber: user.phoneNumber,
-                    phoneVerified: user.phoneVerified,
-                    phoneVerifiedAt: user.phoneVerifiedAt,
+                    phoneNumber: user.phoneNumber ?? undefined,
+                    phoneVerified: user.phoneVerified ?? false,
+                    phoneVerifiedAt: user.phoneVerifiedAt ?? undefined,
                 },
             };
         }
@@ -531,9 +511,9 @@ let AuthService = AuthService_1 = class AuthService {
             user: {
                 id: updatedUser.id,
                 email: updatedUser.email,
-                phoneNumber: updatedUser.phoneNumber,
-                phoneVerified: updatedUser.phoneVerified,
-                phoneVerifiedAt: updatedUser.phoneVerifiedAt,
+                phoneNumber: updatedUser.phoneNumber ?? undefined,
+                phoneVerified: updatedUser.phoneVerified ?? false,
+                phoneVerifiedAt: updatedUser.phoneVerifiedAt ?? undefined,
             },
         };
     }
@@ -623,30 +603,23 @@ let AuthService = AuthService_1 = class AuthService {
             },
         };
     }
-    async handleSocialLogin(provider, profile, _ipAddress) {
+    async handleSocialLogin(provider, profile, _ipAddress, realm) {
         this.logger.log(`[AUTH_SERVICE] Social login started for ${provider}: ${profile.email}`);
         const providerIdField = `${provider}Id`;
         const providerId = profile[providerIdField];
         if (!providerId) {
             throw new common_1.UnauthorizedException(`Missing ${providerIdField} in profile`);
         }
-        let user = await this.userRepository.findByOAuthProvider(provider, providerId);
+        let user = await this.userRepository.findByOAuthProvider(provider, providerId, realm);
         if (user) {
             this.logger.log(`[AUTH_SERVICE] Existing OAuth user found: ${user.id}`);
             if (this.lifecycleHooks.onLogin) {
                 await this.lifecycleHooks.onLogin(user);
             }
-            const accessToken = this.generateToken(user);
-            const { token: refreshToken, hash: refreshTokenHash } = this.refreshTokenService.generateToken();
-            await this.refreshTokenRepository.create({
-                userId: user.id,
-                token: refreshToken,
-                hashedToken: refreshTokenHash,
-                expiresAt: this.refreshTokenService.getExpiryDate(),
-            });
+            const { accessToken, refreshToken } = await this.generateTokenPairAndStore(user, realm);
             return { accessToken, refreshToken, user };
         }
-        user = await this.userRepository.findByEmail(profile.email);
+        user = await this.userRepository.findByEmail(profile.email, realm);
         if (user) {
             this.logger.log(`[AUTH_SERVICE] Email exists for ${profile.email}, checking account linking`);
             if (user.passwordHash) {
@@ -676,14 +649,7 @@ let AuthService = AuthService_1 = class AuthService {
             if (this.lifecycleHooks.onLogin) {
                 await this.lifecycleHooks.onLogin(user);
             }
-            const accessToken = this.generateToken(user);
-            const { token: refreshToken, hash: refreshTokenHash } = this.refreshTokenService.generateToken();
-            await this.refreshTokenRepository.create({
-                userId: user.id,
-                token: refreshToken,
-                hashedToken: refreshTokenHash,
-                expiresAt: this.refreshTokenService.getExpiryDate(),
-            });
+            const { accessToken, refreshToken } = await this.generateTokenPairAndStore(user, realm);
             return { accessToken, refreshToken, user };
         }
         this.logger.log(`[AUTH_SERVICE] Creating new OAuth user for ${profile.email}`);
@@ -693,6 +659,7 @@ let AuthService = AuthService_1 = class AuthService {
             passwordHash: null,
             emailVerified: true,
             authProvider: providerEnum,
+            realm,
         };
         userData[providerIdField] = providerId;
         const newUser = await this.userRepository.create(userData);
@@ -701,17 +668,10 @@ let AuthService = AuthService_1 = class AuthService {
             await this.lifecycleHooks.onSignup(newUser);
         }
         this.logger.log(`[AUTH_SERVICE] Lifecycle hooks completed for user: ${newUser.id}`);
-        const accessToken = this.generateToken(newUser);
-        const { token: refreshToken, hash: refreshTokenHash } = this.refreshTokenService.generateToken();
-        await this.refreshTokenRepository.create({
-            userId: newUser.id,
-            token: refreshToken,
-            hashedToken: refreshTokenHash,
-            expiresAt: this.refreshTokenService.getExpiryDate(),
-        });
+        const { accessToken, refreshToken } = await this.generateTokenPairAndStore(newUser, realm);
         return { accessToken, refreshToken, user: newUser };
     }
-    async completeFacebookSignUp(fallbackToken, email, accessToken) {
+    async completeFacebookSignUp(fallbackToken, email, accessToken, realm) {
         this.logger.log(`[AUTH_SERVICE] ===== COMPLETE FACEBOOK SIGN-UP =====`);
         this.logger.log(`[AUTH_SERVICE] Email: ${email}`);
         let fallbackPayload;
@@ -741,7 +701,7 @@ let AuthService = AuthService_1 = class AuthService {
             throw new oauth_exceptions_1.InvalidOAuthTokenException('facebook', 'Access token does not match Facebook account');
         }
         this.logger.log(`[AUTH_SERVICE] Facebook access token validated and matched facebookId: ${facebookId}`);
-        const existingUser = await this.userRepository.findByEmail(email);
+        const existingUser = await this.userRepository.findByEmail(email, realm);
         if (existingUser) {
             this.logger.log(`[AUTH_SERVICE] Email exists for ${email}, checking account linking...`);
             if (existingUser.passwordHash) {
@@ -760,8 +720,8 @@ let AuthService = AuthService_1 = class AuthService {
                 emailVerified: true,
                 emailVerifiedAt: new Date(),
                 updatedAt: new Date(),
+                facebookId,
             };
-            updateData['facebookId'] = facebookId;
             await this.userRepository.update(existingUser.id, updateData);
             const linkedUser = await this.userRepository.findById(existingUser.id);
             if (!linkedUser) {
@@ -771,14 +731,7 @@ let AuthService = AuthService_1 = class AuthService {
             if (this.lifecycleHooks.onLogin) {
                 await this.lifecycleHooks.onLogin(linkedUser);
             }
-            const jwtAccessToken = this.generateToken(linkedUser);
-            const { token: refreshToken, hash: refreshTokenHash } = this.refreshTokenService.generateToken();
-            await this.refreshTokenRepository.create({
-                userId: linkedUser.id,
-                token: refreshToken,
-                hashedToken: refreshTokenHash,
-                expiresAt: this.refreshTokenService.getExpiryDate(),
-            });
+            const { accessToken: jwtAccessToken, refreshToken } = await this.generateTokenPairAndStore(linkedUser, realm);
             this.logger.log(`[AUTH_SERVICE] Facebook account linking complete for user: ${linkedUser.id}`);
             return {
                 accessToken: jwtAccessToken,
@@ -794,6 +747,7 @@ let AuthService = AuthService_1 = class AuthService {
             emailVerified: false,
             createdAt: new Date(),
             updatedAt: new Date(),
+            realm,
         });
         this.logger.log(`[AUTH_SERVICE] New Facebook user created: ${newUser.id}`);
         if (this.lifecycleHooks.onSignup) {
@@ -801,7 +755,7 @@ let AuthService = AuthService_1 = class AuthService {
         }
         this.logger.log(`[AUTH_SERVICE] Lifecycle hooks completed for user: ${newUser.id}`);
         try {
-            const verificationCode = await this.verificationService.generateCode(newUser.email, 'email');
+            const verificationCode = await this.verificationService.generateCode(newUser.email, 'email', realm);
             await this.emailService.sendVerificationEmail(newUser.email, verificationCode, 15);
             await this.userRepository.update(newUser.id, {
                 emailVerificationSentAt: new Date(),
@@ -813,14 +767,7 @@ let AuthService = AuthService_1 = class AuthService {
             const errorStack = error instanceof Error ? error.stack : undefined;
             this.logger.error(`[AUTH_SERVICE] Failed to send verification email to ${newUser.email}: ${errorMessage}`, errorStack);
         }
-        const jwtAccessToken = this.generateToken(newUser);
-        const { token: refreshToken, hash: refreshTokenHash } = this.refreshTokenService.generateToken();
-        await this.refreshTokenRepository.create({
-            userId: newUser.id,
-            token: refreshToken,
-            hashedToken: refreshTokenHash,
-            expiresAt: this.refreshTokenService.getExpiryDate(),
-        });
+        const { accessToken: jwtAccessToken, refreshToken } = await this.generateTokenPairAndStore(newUser, realm);
         this.logger.log(`[AUTH_SERVICE] Facebook sign-up complete for user: ${newUser.id}`);
         this.logger.log(`[AUTH_SERVICE] NOTE: Email verification required (check email for code)`);
         return { accessToken: jwtAccessToken, refreshToken, user: newUser };
@@ -829,10 +776,10 @@ let AuthService = AuthService_1 = class AuthService {
         this.logger.log(`[AUTH_SERVICE] Unlink ${provider} account for user: ${userId}`);
         throw new Error('unlinkSocialAccount transaction not implemented - requires repository with transaction support. See README.md');
     }
-    async requestPasswordReset(email, ipAddress) {
+    async requestPasswordReset(email, ipAddress, realm) {
         const normalizedEmail = email.toLowerCase();
         if (ipAddress && this.rateLimiter) {
-            const ipRateLimitKey = `password-reset:ip:${ipAddress}`;
+            const ipRateLimitKey = realm ? `${realm}:password-reset:ip:${ipAddress}` : `password-reset:ip:${ipAddress}`;
             const ipLimit = await this.rateLimiter.checkRateLimit(ipRateLimitKey, 5, 3600000);
             if (!ipLimit.allowed) {
                 const retryAfterSeconds = Math.ceil((ipLimit.resetAt.getTime() - Date.now()) / 1000);
@@ -842,7 +789,7 @@ let AuthService = AuthService_1 = class AuthService {
             }
             await this.rateLimiter.recordAttempt(ipRateLimitKey, 3600000);
         }
-        const user = await this.userRepository.findByEmail(normalizedEmail);
+        const user = await this.userRepository.findByEmail(normalizedEmail, realm);
         if (!user) {
             this.securityLogger.log(auth_logger_interface_1.SecurityEvent.PASSWORD_RESET_REQUESTED, {
                 email: normalizedEmail,
@@ -854,8 +801,8 @@ let AuthService = AuthService_1 = class AuthService {
                 message: 'If an account exists with this email, a password reset code has been sent.',
             };
         }
-        if (await this.bruteForceProtection.isAccountLocked(normalizedEmail)) {
-            const remainingTime = await this.bruteForceProtection.getRemainingLockoutTime(normalizedEmail);
+        if (await this.bruteForceProtection.isAccountLocked(normalizedEmail, realm)) {
+            const remainingTime = await this.bruteForceProtection.getRemainingLockoutTime(normalizedEmail, realm);
             throw new account_locked_exception_1.AccountLockedException(remainingTime);
         }
         if (user.passwordResetSentAt) {
@@ -874,8 +821,8 @@ let AuthService = AuthService_1 = class AuthService {
                 message: 'If an account exists with this email, a password reset code has been sent.',
             };
         }
-        await this.verificationService.invalidateCode(normalizedEmail, 'password-reset');
-        const code = await this.verificationService.generateCode(normalizedEmail, 'password-reset');
+        await this.verificationService.invalidateCode(normalizedEmail, 'password-reset', realm);
+        const code = await this.verificationService.generateCode(normalizedEmail, 'password-reset', realm);
         try {
             const resetUrl = `${process.env.FRONTEND_URL || 'https://app.example.com'}/reset-password`;
             await this.emailService.sendPasswordResetEmail(normalizedEmail, code, resetUrl);
@@ -903,14 +850,14 @@ let AuthService = AuthService_1 = class AuthService {
             };
         }
     }
-    async resetPassword(email, code, newPassword, ipAddress) {
+    async resetPassword(email, code, newPassword, ipAddress, realm) {
         const normalizedEmail = email.toLowerCase();
-        const user = await this.userRepository.findByEmail(normalizedEmail);
+        const user = await this.userRepository.findByEmail(normalizedEmail, realm);
         if (!user) {
             throw new common_1.UnauthorizedException('Invalid email or verification code');
         }
-        if (await this.bruteForceProtection.isAccountLocked(normalizedEmail)) {
-            const remainingTime = await this.bruteForceProtection.getRemainingLockoutTime(normalizedEmail);
+        if (await this.bruteForceProtection.isAccountLocked(normalizedEmail, realm)) {
+            const remainingTime = await this.bruteForceProtection.getRemainingLockoutTime(normalizedEmail, realm);
             throw new account_locked_exception_1.AccountLockedException(remainingTime);
         }
         if (!user.passwordHash) {
@@ -921,7 +868,7 @@ let AuthService = AuthService_1 = class AuthService {
             const { WeakPasswordException } = await Promise.resolve().then(() => __importStar(require('../exceptions/password-reset.exceptions')));
             throw new WeakPasswordException(errors);
         }
-        await this.verificationService.validateCode(normalizedEmail, 'password-reset', code);
+        await this.verificationService.validateCode(normalizedEmail, 'password-reset', code, realm);
         const passwordHash = await bcrypt.hash(newPassword, this.bcryptRounds);
         const updatedUser = await this.userRepository.updatePassword(user.id, passwordHash);
         await this.refreshTokenRepository.deleteByUserId(user.id);
@@ -933,9 +880,7 @@ let AuthService = AuthService_1 = class AuthService {
             method: 'code',
         });
         try {
-            if (typeof this.emailService.sendPasswordChangedEmail === 'function') {
-                await this.emailService.sendPasswordChangedEmail(normalizedEmail, new Date(), ipAddress);
-            }
+            await this.emailService.sendPasswordChangedEmail(normalizedEmail, new Date(), ipAddress);
         }
         catch (error) {
             const errorStack = error instanceof Error ? error.stack : undefined;
@@ -992,10 +937,24 @@ let AuthService = AuthService_1 = class AuthService {
         res.clearCookie(accessTokenName, baseOpts);
         res.clearCookie(refreshTokenName, baseOpts);
     }
-    generateToken(user) {
-        const payload = this.jwtPayloadFactory.createPayload(user);
+    maskPhoneNumber(phone) {
+        return this.smsService.maskPhoneNumber(phone);
+    }
+    generateToken(user, realm) {
+        const payload = this.jwtPayloadFactory.createPayload(realm !== undefined ? { ...user, realm } : user);
         return this.jwtService.sign(payload);
     }
+    async generateTokenPairAndStore(user, realm) {
+        const accessToken = this.generateToken(user, realm);
+        const { token: refreshToken, hash: refreshTokenHash } = this.refreshTokenService.generateToken();
+        await this.refreshTokenRepository.create({
+            userId: user.id,
+            token: refreshToken,
+            hashedToken: refreshTokenHash,
+            expiresAt: this.refreshTokenService.getExpiryDate(),
+        });
+        return { accessToken, refreshToken, refreshTokenHash };
+    }
 };
 exports.AuthService = AuthService;
 AuthService.DUMMY_HASH = '$2b$12$LJ3m4ys3Sxz.f7.v6Jk0XOY/RP7/.NR3WaGy0JH3HxqrP8Q.LRzqy';