@ambushsoftworks/nestjs-auth-graphql 0.9.0-rc.2 → 0.9.0-rc.3

package/CHANGELOG.md

@@ -34,6 +34,9 @@ down to what the package actually fires, a fix making
 `verificationMode: 'token'` functional for the first time, and enforcement of
 account status — which had never been checked at all. See **Security** first.
 
+Alongside them, `bcrypt` moves from 5 to 6, taking `tar@6.2.1` and its
+advisories out of consumers' production dependency trees. No hash migration.
+
 > Published as a release candidate under the `next` dist-tag first, so the
 > verification and password-reset emails could be confirmed through a real
 > mail client before reaching `latest`. That last hop — a mail client
@@ -41,9 +44,10 @@ account status — which had never been checked at all. See **Security** first.
 > thing no test suite in this repo can exercise. Install the candidate with
 > `npm install @ambushsoftworks/nestjs-auth-graphql@next`.
 >
-> **`0.9.0-rc.2` supersedes `rc.1`.** `rc.1` predates the account-status fix
-> in **Security** below and still has the suspension window open — test
-> against `rc.2`, not `rc.1`.
+> **Test against `0.9.0-rc.3`.** It is `rc.2` plus the move to bcrypt 6 in
+> **Security** below and its documentation — nothing else in the published
+> package changed. `rc.1` predates the account-status fix in the same section
+> and still has the suspension window open.
 
 ### ⚠ External configuration required
 - **`verificationMode: 'token'` requires your frontend to serve two routes.**
@@ -101,6 +105,34 @@ account status — which had never been checked at all. See **Security** first.
   still exists" — and now states the consequence. No behavioral change to that
   mode in this release.
 
+- **`bcrypt` 5.1.1 → 6.0.0: `tar@6.2.1` is no longer in your production dependencies.**
+  `bcrypt@5` installed its native binary through `@mapbox/node-pre-gyp@1.0.11`,
+  which depends on `tar@6.2.1` — 1 critical and 8 high advisories (path
+  traversal, file overwrite, denial of service). All three were the last release
+  of their major, so nothing on the bcrypt 5 line fixes it, and consumers could
+  not fix it either: this package declared `bcrypt ^5.1.1`, so upgrading your
+  own `bcrypt` only nested a second copy. `bcrypt@6` ships prebuilt binaries
+  loaded by `node-gyp-build`; its dependency tree is two packages and audits
+  clean. Reported by Lift, whose production-dependency audit gate flagged this
+  package as high.
+
+  **The exposure was at install time, not on the request path.** `tar` ran
+  while installing bcrypt, to unpack the downloaded binary; at runtime
+  `node-pre-gyp` loads and `tar` does not. The advisories still failed
+  `npm audit --omit=dev`, which is how consumers gate a release.
+
+  **No hash migration, in either direction.** Hashes written by bcrypt 5 verify
+  under 6 and the reverse, so existing users sign in unchanged and rolling back
+  to 0.8.0 does not lock out anyone who set a password on 0.9.0. Checked across
+  `$2a$` and `$2b$`, costs 10 and 12, unicode, and passwords past bcrypt's
+  72-byte limit, on Node 22 (glibc) and `node:20-alpine` (musl, no compiler
+  toolchain). `auth.service.password-hash-compat.spec.ts` pins it: it signs in
+  and changes passwords against hashes generated by bcrypt 5.1.1, which the
+  suite never regenerates.
+
+  **If your app also depends on `bcrypt` directly, move it to `^6.0.0`** in the
+  same deploy. Otherwise your own bcrypt 5 keeps `tar` in the tree.
+
 ### Added
 - **`isUserActive?: (user: IAuthUser) => boolean` module option.** Overrides the
   default account-active predicate for consumers whose status vocabulary differs
@@ -163,9 +195,10 @@ account status — which had never been checked at all. See **Security** first.
 - **Base URL resolution consolidated on `verification.baseUrl`.** `AuthService` no longer reads `process.env.FRONTEND_URL` directly. In code mode the legacy env var is still honored as a fallback (deprecated, logged once); in token mode `verification.baseUrl` is required and the env fallback is deliberately not consulted.
 - Default renderer copy is now mode-aware — a token-mode verification email no longer instructs the reader to "enter the code below" when the email contains no code.
 - `PASSWORD_RESET_COMPLETED` security-event metadata now reports the real `method` (`'code'` or `'token'`) instead of a hardcoded `'code'`.
+- **`engines.node` is now declared as `>=18`**, which bcrypt 6 requires. This declares the floor rather than raising it: `google-auth-library@10`, a dependency since 0.1.3, already required Node 18, so no install that worked before is excluded. npm warns on an older Node rather than refusing.
 
 ### Breaking
-- **`IEmailService` — four notification methods removed.** The package never fired these on its own; they were interface surface consumers had to implement for no benefit. Notification beyond verification, password-reset, and password-changed is now consumer-owned via lifecycle hooks. Only affects consumers who implement `IEmailService` **directly** — the bundled `ConfigurableEmailService`, `SendGridEmailService`, and `NoOpEmailService` are updated, so `emailServiceInstance` / `email` users need no action.
+- **`IEmailService` — four notification methods removed.** The package never fired these on its own; they were interface surface consumers had to implement for no benefit. Notification beyond verification, password-reset, and password-changed is now consumer-owned via lifecycle hooks. Only affects consumers who implement `IEmailService` **directly** — the bundled `ConfigurableEmailService`, `SendGridEmailService`, and `NoOpEmailService` are updated, so `emailServiceInstance` / `email` users need no action. **If you did implement them, those emails were never sent** — the package had no call site for any of the four, so an implementation that looked wired up was dead code, and moving it onto the hooks below is the first time it will run. Raised by Lift.
   - `sendAccountLockedEmail` → wire from the new `onAccountLocked` hook
   - `sendWelcomeEmail` → wire from `onSignup` (or `onEmailVerified`)
   - `sendAccountLinkedEmail` → wire from `onOAuthAccountLinked`
@@ -175,6 +208,8 @@ account status — which had never been checked at all. See **Security** first.
 
 ### Documentation
 - **`IBruteForceRepository.deleteOlderThan` contract clarified.** Documented explicitly that it is a retention operation ("prune whatever attempt history you keep, if any"), not a guarantee the caller can rely on, and that **a no-op returning `0` is a valid implementation** for schemas keeping no attempt history — e.g. `failedLoginAttempts` / `lockedUntil` as columns on the user row, overwritten in place. Raised as a question by the Ariadne team, whose schema is exactly that shape.
+- README: the `deleteOlderThan` Prisma example no longer uses `createdAt`, and says to substitute whichever column records when an attempt happened. The name is schema-specific, and a copied name that happens to exist in your schema with a different meaning compiles and prunes the wrong rows. Raised by Lift, whose column is `attemptedAt`.
+- README: **Installation** states the Node.js 18 floor and the platforms bcrypt ships prebuilt binaries for; **Migrating to v0.9.0** covers the bcrypt move.
 - README: the two verification modes differ in **where the secret lives**, not merely in formatting — token mode puts the credential in the link, code mode keeps it in the body so it never reaches browser history, referrer headers, or proxy logs.
 - README: new "Migrating to v0.9.0" section covering both workstreams — the removed interface methods with their hook-based replacements, and the action-required items for token-mode consumers (`verification.baseUrl` now required at boot; `resetPassword`/`verifyEmail` now receive a 128-character token, so input DTO constraints sized for 6-digit codes must be relaxed).
 - README: "Verification Modes" section rewritten with a code-vs-token comparison table, the exact link format the package emits, base-URL resolution order, and guidance for custom `IEmailService` implementations.

package/README.md

@@ -54,6 +54,8 @@ Production-grade authentication module for NestJS GraphQL + REST APIs. JWT, cook
 npm install @ambushsoftworks/nestjs-auth-graphql
 ```
 
+Requires **Node.js 18 or later**. Passwords are hashed with the native `bcrypt` module, which ships prebuilt binaries for Linux (glibc and musl/Alpine; x64, arm64, arm), macOS, and Windows, so installing on those platforms needs no compiler toolchain.
+
 ### Peer Dependencies
 
 ```bash
@@ -765,7 +767,7 @@ export class BruteForceCleanupJob {
 }
 ```
 
-This requires `IBruteForceRepository.deleteOlderThan(beforeDate: Date): Promise<number>` on your repository implementation. Reference Prisma implementation: `return (await this.prisma.bruteForceAttempt.deleteMany({ where: { createdAt: { lt: beforeDate } } })).count;`. Multi-replica deployments should coordinate at the cron layer (advisory lock, leader election) or accept the duplicate-delete cost — `DELETE WHERE createdAt < ?` is idempotent.
+This requires `IBruteForceRepository.deleteOlderThan(beforeDate: Date): Promise<number>` on your repository implementation. Reference Prisma implementation: `return (await this.prisma.bruteForceAttempt.deleteMany({ where: { attemptedAt: { lt: beforeDate } } })).count;` — substitute whichever column records when the attempt happened, and check the name against your schema rather than copying it. Multi-replica deployments should coordinate at the cron layer (advisory lock, leader election) or accept the duplicate-delete cost — a timestamp-bounded `DELETE` is idempotent.
 
 #### Stay Logged In After Password Change
 
@@ -1107,6 +1109,17 @@ Token TTL also differs from code TTL: 60 minutes by default
 **`verificationMode: 'code'` — the default — is unaffected.** Behaviour is
 identical, including the legacy `FRONTEND_URL` fallback for the reset page URL.
 
+**`bcrypt` 5 → 6.** No code change and no hash migration: existing hashes
+verify unchanged, and hashes written by 0.9.0 still verify if you roll back to
+0.8.0. The move exists because bcrypt 5 pulls in `tar@6.2.1` (1 critical, 8
+high advisories) through `@mapbox/node-pre-gyp`, with no fix on the 5 line.
+
+- **If your app also depends on `bcrypt` directly, move it to `^6.0.0` in the
+  same deploy.** Otherwise npm installs both, and your bcrypt 5 keeps `tar` in
+  your tree.
+- **Node.js 18 or later**, now declared in `engines`. It was already required
+  by `google-auth-library@10`, so an install that worked before still works.
+
 **Additive — new behaviour, no action required.**
 
 - `BaseAuthResolver.performRefreshToken` and `performLogout` now fall back to the refresh cookie when `features.cookieAuth: true` and `input.refreshToken` is empty. Your consumer `RefreshTokenInput` / `LogoutInput` DTOs should mark `refreshToken` `@IsOptional()` for browser flows. Explicit `input.refreshToken` still wins for non-browser callers.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ambushsoftworks/nestjs-auth-graphql",
-  "version": "0.9.0-rc.2",
+  "version": "0.9.0-rc.3",
   "description": "Production-grade authentication package for NestJS with GraphQL, supporting JWT, OAuth, email/SMS verification, and biometric auth",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -64,7 +64,7 @@
   },
   "dependencies": {
     "@sendgrid/mail": "^8.1.6",
-    "bcrypt": "^5.1.1",
+    "bcrypt": "^6.0.0",
     "class-transformer": "^0.5.1",
     "class-validator": "^0.14.1",
     "google-auth-library": "^10.5.0",
@@ -78,7 +78,7 @@
     "@nestjs/config": "^3.3.0",
     "@nestjs/testing": "^10.3.1",
     "@nestjs/throttler": "^6.4.0",
-    "@types/bcrypt": "^5.0.2",
+    "@types/bcrypt": "^6.0.0",
     "@types/jest": "^29.5.11",
     "@types/node": "^20.11.5",
     "@types/passport-google-oauth20": "^2.0.17",
@@ -112,5 +112,8 @@
     ],
     "coverageDirectory": "../coverage",
     "testEnvironment": "node"
+  },
+  "engines": {
+    "node": ">=18"
   }
 }

package/dist/resolvers/auth.resolver.d.ts

@@ -1,73 +0,0 @@
-import { AuthService } from '../services/auth.service';
-import { AuthResponseBase } from '../dto/auth-response.dto';
-import { AuthUser } from '../entities/auth-user.entity';
-declare class AuthResponse implements AuthResponseBase<AuthUser> {
-    accessToken: string;
-    refreshToken: string;
-    user: AuthUser;
-}
-import { AuthSignupInput } from '../dto/signup.input';
-import { AuthLoginInput } from '../dto/login.input';
-import { AuthRefreshTokenInput } from '../dto/refresh-token.input';
-import { AuthLogoutInput } from '../dto/logout.input';
-import { AuthLogoutResponse, AuthLogoutAllResponse } from '../dto/logout-response.dto';
-import { AuthAccountLockStatus } from '../dto/account-lock-status.dto';
-import { AuthVerifyEmailInput } from '../dto/verify-email.input';
-import { AuthVerifyEmailResponse } from '../dto/verify-email-response.dto';
-import { AuthSendPhoneVerificationInput } from '../dto/send-phone-verification.input';
-import { AuthVerifyPhoneInput } from '../dto/verify-phone.input';
-import { AuthPhoneVerificationResponse, AuthVerifyPhoneResponse, AuthRemovePhoneResponse } from '../dto/phone-verification-response.dto';
-import { AuthPhoneVerificationStatus } from '../dto/phone-verification-status.dto';
-import { AuthCompleteFacebookSignUpInput } from '../dto/complete-facebook-signup.input';
-import { AuthUnlinkSocialAccountInput } from '../dto/unlink-social-account.input';
-import { AuthUnlinkSocialAccountResponse } from '../dto/unlink-social-account-response.dto';
-import { AuthEnableBiometricInput } from '../dto/enable-biometric.input';
-import { AuthBiometricLoginInput } from '../dto/biometric-login.input';
-import { AuthBiometricStatusResponse } from '../dto/biometric-status.dto';
-import { EnrollBiometricInput } from '../dto/enroll-biometric.input';
-import { VerifyBiometricSignatureInput } from '../dto/verify-biometric-signature.input';
-import { BiometricCredentialDto } from '../dto/biometric-credential.dto';
-import { BiometricChallengeDto } from '../dto/biometric-challenge.dto';
-import { RemoveBiometricDeviceResponse } from '../dto/remove-biometric-device-response.dto';
-import { BruteForceProtectionService } from '../services/brute-force-protection.service';
-import { OAuthLinkingTokenService } from '../services/oauth-linking-token.service';
-import { BiometricAuthService } from '../services/biometric-auth.service';
-import { BiometricVerificationService } from '../services/biometric-verification.service';
-import { IUserRepository } from '../interfaces/user-repository.interface';
-import { IAuthUser } from '../interfaces/auth-user.interface';
-export declare class AuthResolver {
-    private authService;
-    private bruteForceProtection;
-    private oauthLinkingTokenService;
-    private biometricAuthService;
-    private biometricVerificationService;
-    private userRepository;
-    private readonly logger;
-    constructor(authService: AuthService, bruteForceProtection: BruteForceProtectionService, oauthLinkingTokenService: OAuthLinkingTokenService, biometricAuthService: BiometricAuthService, biometricVerificationService: BiometricVerificationService, userRepository: IUserRepository<IAuthUser>);
-    signup(input: AuthSignupInput): Promise<AuthResponse>;
-    login(input: AuthLoginInput, context: any): Promise<AuthResponse>;
-    refreshToken(input: AuthRefreshTokenInput): Promise<AuthResponse>;
-    logout(input: AuthLogoutInput, user: IAuthUser): Promise<AuthLogoutResponse>;
-    logoutAll(user: IAuthUser): Promise<AuthLogoutAllResponse>;
-    checkAuthAccountLockStatus(email: string): Promise<AuthAccountLockStatus>;
-    verifyEmail(input: AuthVerifyEmailInput): Promise<AuthVerifyEmailResponse>;
-    resendVerificationEmail(email: string): Promise<AuthVerifyEmailResponse>;
-    sendPhoneVerification(input: AuthSendPhoneVerificationInput, user: IAuthUser): Promise<AuthPhoneVerificationResponse>;
-    verifyPhone(input: AuthVerifyPhoneInput, user: IAuthUser): Promise<AuthVerifyPhoneResponse>;
-    resendPhoneVerification(phoneNumber: string, user: IAuthUser): Promise<AuthPhoneVerificationResponse>;
-    removePhoneNumber(user: IAuthUser): Promise<AuthRemovePhoneResponse>;
-    phoneVerificationStatus(user: IAuthUser): Promise<AuthPhoneVerificationStatus>;
-    completeFacebookSignUp(input: AuthCompleteFacebookSignUpInput): Promise<AuthResponse>;
-    unlinkSocialAccount(input: AuthUnlinkSocialAccountInput, user: IAuthUser): Promise<AuthUnlinkSocialAccountResponse>;
-    enableBiometric(input: AuthEnableBiometricInput, user: IAuthUser): Promise<boolean>;
-    disableBiometric(user: IAuthUser): Promise<boolean>;
-    biometricLogin(input: AuthBiometricLoginInput): Promise<AuthResponse>;
-    biometricStatus(user: IAuthUser): Promise<AuthBiometricStatusResponse>;
-    enrollBiometric(input: EnrollBiometricInput, user: IAuthUser): Promise<BiometricCredentialDto>;
-    requestBiometricChallenge(deviceId: string, user: IAuthUser): Promise<BiometricChallengeDto>;
-    verifyBiometricSignature(input: VerifyBiometricSignatureInput): Promise<AuthResponse>;
-    removeBiometricDevice(deviceId: string, user: IAuthUser): Promise<RemoveBiometricDeviceResponse>;
-    biometricDevices(user: IAuthUser): Promise<BiometricCredentialDto[]>;
-}
-export {};
-//# sourceMappingURL=auth.resolver.d.ts.map

package/dist/resolvers/auth.resolver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.resolver.d.ts","sourceRoot":"","sources":["../../src/resolvers/auth.resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAGxD,cACM,YAAa,YAAW,gBAAgB,CAAC,QAAQ,CAAC;IAEtD,WAAW,EAAE,MAAM,CAAC;IAGpB,YAAY,EAAE,MAAM,CAAC;IAGrB,IAAI,EAAE,QAAQ,CAAC;CAChB;AACD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAEnF,OAAO,EAAE,+BAA+B,EAAE,MAAM,uCAAuC,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAC5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AAEzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAE9D,qBACa,YAAY;IAIrB,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,oBAAoB;IAE5B,OAAO,CAAC,wBAAwB;IAChC,OAAO,CAAC,oBAAoB;IAE5B,OAAO,CAAC,4BAA4B;IAEpC,OAAO,CAAC,cAAc;IAXxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;gBAG9C,WAAW,EAAE,WAAW,EACxB,oBAAoB,EAAE,2BAA2B,EAEjD,wBAAwB,EAAE,wBAAwB,EAClD,oBAAoB,EAAE,oBAAoB,EAE1C,4BAA4B,EAAE,4BAA4B,EAE1D,cAAc,EAAE,eAAe,CAAC,SAAS,CAAC;IAK9C,MAAM,CAAgB,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;IAUpE,KAAK,CACM,KAAK,EAAE,cAAc,EACzB,OAAO,EAAE,GAAG,GACtB,OAAO,CAAC,YAAY,CAAC;IAalB,YAAY,CACD,KAAK,EAAE,qBAAqB,GAC1C,OAAO,CAAC,YAAY,CAAC;IAWlB,MAAM,CACK,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,kBAAkB,CAAC;IAaxB,SAAS,CAAgB,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAUzE,0BAA0B,CACf,KAAK,EAAE,MAAM,GAC3B,OAAO,CAAC,qBAAqB,CAAC;IAc3B,WAAW,CACA,KAAK,EAAE,oBAAoB,GACzC,OAAO,CAAC,uBAAuB,CAAC;IAM7B,uBAAuB,CACZ,KAAK,EAAE,MAAM,GAC3B,OAAO,CAAC,uBAAuB,CAAC;IAS7B,qBAAqB,CACV,KAAK,EAAE,8BAA8B,EACrC,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,6BAA6B,CAAC;IAWnC,WAAW,CACA,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAO7B,uBAAuB,CACN,WAAW,EAAE,MAAM,EACzB,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,6BAA6B,CAAC;IAOnC,iBAAiB,CAAgB,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAOnF,uBAAuB,CACZ,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,2BAA2B,CAAC;IAmFjC,sBAAsB,CACX,KAAK,EAAE,+BAA+B,GACpD,OAAO,CAAC,YAAY,CAAC;IA6ClB,mBAAmB,CACR,KAAK,EAAE,4BAA4B,EACnC,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,+BAA+B,CAAC;IAyCrC,eAAe,CACJ,KAAK,EAAE,wBAAwB,EAC/B,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,OAAO,CAAC;IAkCb,gBAAgB,CAAgB,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAkClE,cAAc,CACH,KAAK,EAAE,uBAAuB,GAC5C,OAAO,CAAC,YAAY,CAAC;IA0ClB,eAAe,CACJ,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,2BAA2B,CAAC;IA8BjC,eAAe,CACJ,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IA6B5B,yBAAyB,CACX,QAAQ,EAAE,MAAM,EACnB,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,qBAAqB,CAAC;IAkC3B,wBAAwB,CACb,KAAK,EAAE,6BAA6B,GAClD,OAAO,CAAC,YAAY,CAAC;IA6BlB,qBAAqB,CACP,QAAQ,EAAE,MAAM,EACnB,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,6BAA6B,CAAC;IA0BnC,gBAAgB,CACL,IAAI,EAAE,SAAS,GAC7B,OAAO,CAAC,sBAAsB,EAAE,CAAC;CAMrC"}

package/dist/resolvers/auth.resolver.js

@@ -1,472 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var AuthResolver_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthResolver = void 0;
-const graphql_1 = require("@nestjs/graphql");
-const common_1 = require("@nestjs/common");
-const throttler_1 = require("@nestjs/throttler");
-const graphql_2 = require("@nestjs/graphql");
-const auth_service_1 = require("../services/auth.service");
-const jwt_auth_guard_1 = require("../guards/jwt-auth.guard");
-const current_user_decorator_1 = require("../decorators/current-user.decorator");
-const auth_user_entity_1 = require("../entities/auth-user.entity");
-let AuthResponse = class AuthResponse {
-};
-__decorate([
-    (0, graphql_2.Field)(),
-    __metadata("design:type", String)
-], AuthResponse.prototype, "accessToken", void 0);
-__decorate([
-    (0, graphql_2.Field)(),
-    __metadata("design:type", String)
-], AuthResponse.prototype, "refreshToken", void 0);
-__decorate([
-    (0, graphql_2.Field)(() => auth_user_entity_1.AuthUser),
-    __metadata("design:type", auth_user_entity_1.AuthUser)
-], AuthResponse.prototype, "user", void 0);
-AuthResponse = __decorate([
-    (0, graphql_2.ObjectType)()
-], AuthResponse);
-const signup_input_1 = require("../dto/signup.input");
-const login_input_1 = require("../dto/login.input");
-const refresh_token_input_1 = require("../dto/refresh-token.input");
-const logout_input_1 = require("../dto/logout.input");
-const logout_response_dto_1 = require("../dto/logout-response.dto");
-const account_lock_status_dto_1 = require("../dto/account-lock-status.dto");
-const verify_email_input_1 = require("../dto/verify-email.input");
-const verify_email_response_dto_1 = require("../dto/verify-email-response.dto");
-const send_phone_verification_input_1 = require("../dto/send-phone-verification.input");
-const verify_phone_input_1 = require("../dto/verify-phone.input");
-const phone_verification_response_dto_1 = require("../dto/phone-verification-response.dto");
-const phone_verification_status_dto_1 = require("../dto/phone-verification-status.dto");
-const complete_facebook_signup_input_1 = require("../dto/complete-facebook-signup.input");
-const unlink_social_account_input_1 = require("../dto/unlink-social-account.input");
-const unlink_social_account_response_dto_1 = require("../dto/unlink-social-account-response.dto");
-const enable_biometric_input_1 = require("../dto/enable-biometric.input");
-const biometric_login_input_1 = require("../dto/biometric-login.input");
-const biometric_status_dto_1 = require("../dto/biometric-status.dto");
-const enroll_biometric_input_1 = require("../dto/enroll-biometric.input");
-const verify_biometric_signature_input_1 = require("../dto/verify-biometric-signature.input");
-const biometric_credential_dto_1 = require("../dto/biometric-credential.dto");
-const biometric_challenge_dto_1 = require("../dto/biometric-challenge.dto");
-const remove_biometric_device_response_dto_1 = require("../dto/remove-biometric-device-response.dto");
-const brute_force_protection_service_1 = require("../services/brute-force-protection.service");
-const oauth_linking_token_service_1 = require("../services/oauth-linking-token.service");
-const biometric_auth_service_1 = require("../services/biometric-auth.service");
-const biometric_verification_service_1 = require("../services/biometric-verification.service");
-let AuthResolver = AuthResolver_1 = class AuthResolver {
-    constructor(authService, bruteForceProtection, oauthLinkingTokenService, biometricAuthService, biometricVerificationService, userRepository) {
-        this.authService = authService;
-        this.bruteForceProtection = bruteForceProtection;
-        this.oauthLinkingTokenService = oauthLinkingTokenService;
-        this.biometricAuthService = biometricAuthService;
-        this.biometricVerificationService = biometricVerificationService;
-        this.userRepository = userRepository;
-        this.logger = new common_1.Logger(AuthResolver_1.name);
-    }
-    async signup(input) {
-        const result = await this.authService.signup(input.email, input.password);
-        return {
-            ...result,
-            user: auth_user_entity_1.AuthUser.fromInterface(result.user),
-        };
-    }
-    async login(input, context) {
-        const ipAddress = context.req?.clientIp || context.req?.ip || 'unknown';
-        this.logger.log(`[AUTH_RESOLVER] Login attempt for email: ${input.email} from IP: ${ipAddress}`);
-        const result = await this.authService.login(input.email, input.password, ipAddress);
-        return {
-            ...result,
-            user: auth_user_entity_1.AuthUser.fromInterface(result.user),
-        };
-    }
-    async refreshToken(input) {
-        const result = await this.authService.refreshToken(input.refreshToken);
-        return {
-            ...result,
-            user: auth_user_entity_1.AuthUser.fromInterface(result.user),
-        };
-    }
-    async logout(input, user) {
-        const success = await this.authService.logout(input.refreshToken, user.id);
-        return {
-            success,
-            message: success
-                ? 'Successfully logged out'
-                : 'Refresh token not found or already invalidated',
-        };
-    }
-    async logoutAll(user) {
-        const count = await this.authService.logoutAll(user.id);
-        return {
-            count,
-            message: `Successfully logged out from ${count} device(s)`,
-        };
-    }
-    async checkAuthAccountLockStatus(email) {
-        const locked = await this.bruteForceProtection.isAccountLocked(email);
-        const remainingTime = locked
-            ? await this.bruteForceProtection.getRemainingLockoutTime(email)
-            : 0;
-        return {
-            locked,
-            remainingTime,
-        };
-    }
-    async verifyEmail(input) {
-        return this.authService.verifyEmail(input.email, input.code);
-    }
-    async resendVerificationEmail(email) {
-        return this.authService.resendVerificationEmail(email);
-    }
-    async sendPhoneVerification(input, user) {
-        return this.authService.sendPhoneVerification(user.id, input.phoneNumber, input.countryCode);
-    }
-    async verifyPhone(input, user) {
-        return this.authService.verifyPhone(user.id, input.phoneNumber, input.code);
-    }
-    async resendPhoneVerification(phoneNumber, user) {
-        return this.authService.resendPhoneVerification(user.id, phoneNumber);
-    }
-    async removePhoneNumber(user) {
-        return this.authService.removePhoneNumber(user.id);
-    }
-    async phoneVerificationStatus(user) {
-        const userRecord = await this.userRepository.findById(user.id);
-        if (!userRecord) {
-            throw new Error('User not found');
-        }
-        let canResendInSeconds = undefined;
-        if (userRecord.phoneVerificationSentAt) {
-            const timeSinceLastSent = Date.now() - userRecord.phoneVerificationSentAt.getTime();
-            const cooldownMs = 60 * 1000;
-            if (timeSinceLastSent < cooldownMs) {
-                canResendInSeconds = Math.ceil((cooldownMs - timeSinceLastSent) / 1000);
-            }
-        }
-        let maskedPhoneNumber = undefined;
-        if (userRecord.phoneNumber) {
-            maskedPhoneNumber = this.authService['smsService'].maskPhoneNumber(userRecord.phoneNumber);
-        }
-        return {
-            phoneVerified: userRecord.phoneVerified ?? false,
-            phoneNumber: userRecord.phoneNumber || undefined,
-            phoneVerifiedAt: userRecord.phoneVerifiedAt || undefined,
-            maskedPhoneNumber,
-            phoneVerificationSentAt: userRecord.phoneVerificationSentAt || undefined,
-            canResendInSeconds,
-        };
-    }
-    async completeFacebookSignUp(input) {
-        this.logger.log('[AUTH_RESOLVER] ===== COMPLETE FACEBOOK SIGN-UP =====');
-        this.logger.log(`[AUTH_RESOLVER] Email: ${input.email}`);
-        const result = await this.authService.completeFacebookSignUp(input.fallbackToken, input.email, input.accessToken);
-        this.logger.log(`[AUTH_RESOLVER] Successfully completed Facebook sign-up for user: ${result.user.id}`);
-        this.logger.log(`[AUTH_RESOLVER] NOTE: Email verification required before app access`);
-        return {
-            ...result,
-            user: auth_user_entity_1.AuthUser.fromInterface(result.user),
-        };
-    }
-    async unlinkSocialAccount(input, user) {
-        this.logger.log(`[AUTH_RESOLVER] Unlink ${input.provider} account for user: ${user.id}`);
-        const result = await this.authService.unlinkSocialAccount(user.id, input.provider);
-        this.logger.log(`[AUTH_RESOLVER] Successfully unlinked ${input.provider} account for user: ${user.id}`);
-        return {
-            ...result,
-            user: auth_user_entity_1.AuthUser.fromInterface(result.user),
-        };
-    }
-    async enableBiometric(input, user) {
-        this.logger.log(`[AUTH_RESOLVER] Enable biometric for user: ${user.id} on device: ${input.deviceId}`);
-        const result = await this.biometricAuthService.enableBiometric(user.id, input.deviceId, input.publicKey);
-        this.logger.log(`[AUTH_RESOLVER] Successfully enabled biometric for user: ${user.id}`);
-        return result;
-    }
-    async disableBiometric(user) {
-        this.logger.log(`[AUTH_RESOLVER] Disable biometric for user: ${user.id}`);
-        const result = await this.biometricAuthService.disableBiometric(user.id);
-        this.logger.log(`[AUTH_RESOLVER] Successfully disabled biometric for user: ${user.id}`);
-        return result;
-    }
-    async biometricLogin(input) {
-        this.logger.log(`[AUTH_RESOLVER] Biometric login attempt for user: ${input.userId}`);
-        const result = await this.biometricAuthService.authenticateWithBiometric(input.userId, input.deviceId);
-        this.logger.log(`[AUTH_RESOLVER] Successfully authenticated user via biometric: ${input.userId}`);
-        const user = await this.userRepository.findById(input.userId);
-        if (!user) {
-            throw new common_1.UnauthorizedException('User not found');
-        }
-        return {
-            accessToken: result.accessToken,
-            refreshToken: result.refreshToken,
-            user: auth_user_entity_1.AuthUser.fromInterface(user),
-        };
-    }
-    async biometricStatus(user) {
-        const status = await this.biometricAuthService.getBiometricStatus(user.id);
-        return {
-            enabled: status.enabled,
-            deviceId: status.deviceId || undefined,
-        };
-    }
-    async enrollBiometric(input, user) {
-        this.logger.log(`[AUTH_RESOLVER] Enroll biometric for user: ${user.id} device: ${input.deviceId}`);
-        throw new Error('enrollBiometric not implemented - requires IBiometricRepository implementation. See README.md');
-    }
-    async requestBiometricChallenge(deviceId, user) {
-        this.logger.log(`[AUTH_RESOLVER] Request biometric challenge for user: ${user.id} device: ${deviceId}`);
-        throw new Error('requestBiometricChallenge not implemented - requires IBiometricRepository implementation. See README.md');
-    }
-    async verifyBiometricSignature(input) {
-        this.logger.log(`[AUTH_RESOLVER] Verify biometric signature for challenge: ${input.challengeId}`);
-        throw new Error('verifyBiometricSignature not implemented - requires IBiometricRepository implementation. See README.md');
-    }
-    async removeBiometricDevice(deviceId, user) {
-        this.logger.log(`[AUTH_RESOLVER] Remove biometric device ${deviceId} for user: ${user.id}`);
-        throw new Error('removeBiometricDevice not implemented - requires IBiometricRepository implementation. See README.md');
-    }
-    async biometricDevices(user) {
-        throw new Error('biometricDevices not implemented - requires IBiometricRepository implementation. See README.md');
-    }
-};
-exports.AuthResolver = AuthResolver;
-__decorate([
-    (0, graphql_1.Mutation)(() => AuthResponse),
-    (0, throttler_1.Throttle)({ default: { limit: 5, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [signup_input_1.AuthSignupInput]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "signup", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => AuthResponse),
-    (0, throttler_1.Throttle)({ default: { limit: 5, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __param(1, (0, graphql_1.Context)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [login_input_1.AuthLoginInput, Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "login", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => AuthResponse),
-    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [refresh_token_input_1.AuthRefreshTokenInput]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "refreshToken", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => logout_response_dto_1.AuthLogoutResponse),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __param(1, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [logout_input_1.AuthLogoutInput, Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "logout", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => logout_response_dto_1.AuthLogoutAllResponse),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 5, ttl: 60000 } }),
-    __param(0, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "logoutAll", null);
-__decorate([
-    (0, graphql_1.Query)(() => account_lock_status_dto_1.AuthAccountLockStatus),
-    (0, throttler_1.Throttle)({ default: { limit: 20, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('email')),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "checkAuthAccountLockStatus", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => verify_email_response_dto_1.AuthVerifyEmailResponse),
-    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [verify_email_input_1.AuthVerifyEmailInput]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "verifyEmail", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => verify_email_response_dto_1.AuthVerifyEmailResponse),
-    (0, throttler_1.Throttle)({ default: { limit: 3, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('email')),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "resendVerificationEmail", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => phone_verification_response_dto_1.AuthPhoneVerificationResponse),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 3, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __param(1, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [send_phone_verification_input_1.AuthSendPhoneVerificationInput, Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "sendPhoneVerification", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => phone_verification_response_dto_1.AuthVerifyPhoneResponse),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __param(1, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [verify_phone_input_1.AuthVerifyPhoneInput, Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "verifyPhone", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => phone_verification_response_dto_1.AuthPhoneVerificationResponse),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 3, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('phoneNumber')),
-    __param(1, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "resendPhoneVerification", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => phone_verification_response_dto_1.AuthRemovePhoneResponse),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 5, ttl: 60000 } }),
-    __param(0, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "removePhoneNumber", null);
-__decorate([
-    (0, graphql_1.Query)(() => phone_verification_status_dto_1.AuthPhoneVerificationStatus),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 20, ttl: 60000 } }),
-    __param(0, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "phoneVerificationStatus", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => AuthResponse),
-    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 900000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [complete_facebook_signup_input_1.AuthCompleteFacebookSignUpInput]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "completeFacebookSignUp", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => unlink_social_account_response_dto_1.AuthUnlinkSocialAccountResponse),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 5, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __param(1, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [unlink_social_account_input_1.AuthUnlinkSocialAccountInput, Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "unlinkSocialAccount", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => Boolean),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 5, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __param(1, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [enable_biometric_input_1.AuthEnableBiometricInput, Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "enableBiometric", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => Boolean),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 5, ttl: 60000 } }),
-    __param(0, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "disableBiometric", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => AuthResponse),
-    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [biometric_login_input_1.AuthBiometricLoginInput]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "biometricLogin", null);
-__decorate([
-    (0, graphql_1.Query)(() => biometric_status_dto_1.AuthBiometricStatusResponse),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 20, ttl: 60000 } }),
-    __param(0, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "biometricStatus", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => biometric_credential_dto_1.BiometricCredentialDto),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 5, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __param(1, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [enroll_biometric_input_1.EnrollBiometricInput, Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "enrollBiometric", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => biometric_challenge_dto_1.BiometricChallengeDto),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('deviceId')),
-    __param(1, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "requestBiometricChallenge", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => AuthResponse),
-    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('input')),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [verify_biometric_signature_input_1.VerifyBiometricSignatureInput]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "verifyBiometricSignature", null);
-__decorate([
-    (0, graphql_1.Mutation)(() => remove_biometric_device_response_dto_1.RemoveBiometricDeviceResponse),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 5, ttl: 60000 } }),
-    __param(0, (0, graphql_1.Args)('deviceId')),
-    __param(1, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "removeBiometricDevice", null);
-__decorate([
-    (0, graphql_1.Query)(() => [biometric_credential_dto_1.BiometricCredentialDto]),
-    (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
-    (0, throttler_1.Throttle)({ default: { limit: 20, ttl: 60000 } }),
-    __param(0, (0, current_user_decorator_1.CurrentUser)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], AuthResolver.prototype, "biometricDevices", null);
-exports.AuthResolver = AuthResolver = AuthResolver_1 = __decorate([
-    (0, graphql_1.Resolver)(),
-    __param(5, (0, common_1.Inject)('USER_REPOSITORY')),
-    __metadata("design:paramtypes", [auth_service_1.AuthService,
-        brute_force_protection_service_1.BruteForceProtectionService,
-        oauth_linking_token_service_1.OAuthLinkingTokenService,
-        biometric_auth_service_1.BiometricAuthService,
-        biometric_verification_service_1.BiometricVerificationService, Object])
-], AuthResolver);
-//# sourceMappingURL=auth.resolver.js.map

package/dist/resolvers/auth.resolver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.resolver.js","sourceRoot":"","sources":["../../src/resolvers/auth.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2E;AAC3E,2CAAqG;AACrG,iDAA6C;AAC7C,6CAAoD;AACpD,2DAAuD;AACvD,6DAAwD;AACxD,iFAAmE;AAEnE,mEAAwD;AAIxD,IAAM,YAAY,GAAlB,MAAM,YAAY;CASjB,CAAA;AAPC;IADC,IAAA,eAAK,GAAE;;iDACY;AAGpB;IADC,IAAA,eAAK,GAAE;;kDACa;AAGrB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,2BAAQ,CAAC;8BAChB,2BAAQ;0CAAC;AARX,YAAY;IADjB,IAAA,oBAAU,GAAE;GACP,YAAY,CASjB;AACD,sDAAsD;AACtD,oDAAoD;AACpD,oEAAmE;AACnE,sDAAsD;AACtD,oEAAuF;AACvF,4EAAuE;AACvE,kEAAiE;AACjE,gFAA2E;AAC3E,wFAAsF;AACtF,kEAAiE;AACjE,4FAIgD;AAChD,wFAAmF;AAEnF,0FAAwF;AACxF,oFAAkF;AAClF,kGAA4F;AAC5F,0EAAyE;AACzE,wEAAuE;AACvE,sEAA0E;AAC1E,0EAAqE;AACrE,8FAAwF;AACxF,8EAAyE;AACzE,4EAAuE;AACvE,sGAA4F;AAC5F,+FAAyF;AAEzF,yFAAmF;AACnF,+EAA0E;AAE1E,+FAA0F;AAKnF,IAAM,YAAY,oBAAlB,MAAM,YAAY;IAGvB,YACU,WAAwB,EACxB,oBAAiD,EAEjD,wBAAkD,EAClD,oBAA0C,EAE1C,4BAA0D,EAElE,cAAkD;QAR1C,gBAAW,GAAX,WAAW,CAAa;QACxB,yBAAoB,GAApB,oBAAoB,CAA6B;QAEjD,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,yBAAoB,GAApB,oBAAoB,CAAsB;QAE1C,iCAA4B,GAA5B,4BAA4B,CAA8B;QAE1D,mBAAc,GAAd,cAAc,CAA4B;QAXnC,WAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IAYrD,CAAC;IAIE,AAAN,KAAK,CAAC,MAAM,CAAgB,KAAsB;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1E,OAAO;YACL,GAAG,MAAM;YACT,IAAI,EAAE,2BAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;SAC1C,CAAC;IACJ,CAAC;IAIK,AAAN,KAAK,CAAC,KAAK,CACM,KAAqB,EACzB,OAAY;QAGvB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,SAAS,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4CAA4C,KAAK,CAAC,KAAK,aAAa,SAAS,EAAE,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpF,OAAO;YACL,GAAG,MAAM;YACT,IAAI,EAAE,2BAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;SAC1C,CAAC;IACJ,CAAC;IAIK,AAAN,KAAK,CAAC,YAAY,CACD,KAA4B;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvE,OAAO;YACL,GAAG,MAAM;YACT,IAAI,EAAE,2BAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;SAC1C,CAAC;IACJ,CAAC;IAKK,AAAN,KAAK,CAAC,MAAM,CACK,KAAsB,EACtB,IAAe;QAE9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO;YACL,OAAO;YACP,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,yBAAyB;gBAC3B,CAAC,CAAC,gDAAgD;SACrD,CAAC;IACJ,CAAC;IAKK,AAAN,KAAK,CAAC,SAAS,CAAgB,IAAe;QAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO;YACL,KAAK;YACL,OAAO,EAAE,gCAAgC,KAAK,YAAY;SAC3D,CAAC;IACJ,CAAC;IAIK,AAAN,KAAK,CAAC,0BAA0B,CACf,KAAa;QAE5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,MAAM;YAC1B,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CAAC,KAAK,CAAC;YAChE,CAAC,CAAC,CAAC,CAAC;QAEN,OAAO;YACL,MAAM;YACN,aAAa;SACd,CAAC;IACJ,CAAC;IAIK,AAAN,KAAK,CAAC,WAAW,CACA,KAA2B;QAE1C,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IAIK,AAAN,KAAK,CAAC,uBAAuB,CACZ,KAAa;QAE5B,OAAO,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC;IAOK,AAAN,KAAK,CAAC,qBAAqB,CACV,KAAqC,EACrC,IAAe;QAE9B,OAAO,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAC3C,IAAI,CAAC,EAAE,EACP,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,WAAW,CAClB,CAAC;IACJ,CAAC;IAKK,AAAN,KAAK,CAAC,WAAW,CACA,KAA2B,EAC3B,IAAe;QAE9B,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IAKK,AAAN,KAAK,CAAC,uBAAuB,CACN,WAAmB,EACzB,IAAe;QAE9B,OAAO,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACxE,CAAC;IAKK,AAAN,KAAK,CAAC,iBAAiB,CAAgB,IAAe;QACpD,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAKK,AAAN,KAAK,CAAC,uBAAuB,CACZ,IAAe;QAE9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAGD,IAAI,kBAAkB,GAAuB,SAAS,CAAC;QACvD,IAAI,UAAU,CAAC,uBAAuB,EAAE,CAAC;YACvC,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,uBAAuB,CAAC,OAAO,EAAE,CAAC;YACpF,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC;YAC7B,IAAI,iBAAiB,GAAG,UAAU,EAAE,CAAC;gBACnC,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAGD,IAAI,iBAAiB,GAAuB,SAAS,CAAC;QACtD,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3B,iBAAiB,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,eAAe,CAChE,UAAU,CAAC,WAAW,CACvB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,KAAK;YAChD,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,SAAS;YAChD,eAAe,EAAE,UAAU,CAAC,eAAe,IAAI,SAAS;YACxD,iBAAiB;YACjB,uBAAuB,EAAE,UAAU,CAAC,uBAAuB,IAAI,SAAS;YACxE,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAmDK,AAAN,KAAK,CAAC,sBAAsB,CACX,KAAsC;QAErD,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,uDAAuD,CACxD,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAGzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAC1D,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,WAAW,CAClB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,qEAAqE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CACtF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,qEAAqE,CACtE,CAAC;QAEF,OAAO;YACL,GAAG,MAAM;YACT,IAAI,EAAE,2BAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;SAC1C,CAAC;IACJ,CAAC;IAqBK,AAAN,KAAK,CAAC,mBAAmB,CACR,KAAmC,EACnC,IAAe;QAE9B,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,0BAA0B,KAAK,CAAC,QAAQ,sBAAsB,IAAI,CAAC,EAAE,EAAE,CACxE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CACvD,IAAI,CAAC,EAAE,EACP,KAAK,CAAC,QAAQ,CACf,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,yCAAyC,KAAK,CAAC,QAAQ,sBAAsB,IAAI,CAAC,EAAE,EAAE,CACvF,CAAC;QAEF,OAAO;YACL,GAAG,MAAM;YACT,IAAI,EAAE,2BAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;SAC1C,CAAC;IACJ,CAAC;IAuBK,AAAN,KAAK,CAAC,eAAe,CACJ,KAA+B,EAC/B,IAAe;QAE9B,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,8CAA8C,IAAI,CAAC,EAAE,eAAe,KAAK,CAAC,QAAQ,EAAE,CACrF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAC5D,IAAI,CAAC,EAAE,EACP,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,CAChB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,4DAA4D,IAAI,CAAC,EAAE,EAAE,CACtE,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAkBK,AAAN,KAAK,CAAC,gBAAgB,CAAgB,IAAe;QACnD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,+CAA+C,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEzE,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,6DAA6D,IAAI,CAAC,EAAE,EAAE,CACvE,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAwBK,AAAN,KAAK,CAAC,cAAc,CACH,KAA8B;QAE7C,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,qDAAqD,KAAK,CAAC,MAAM,EAAE,CACpE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CACtE,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,QAAQ,CACf,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,kEAAkE,KAAK,CAAC,MAAM,EAAE,CACjF,CAAC;QAGF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAED,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,IAAI,EAAE,2BAAQ,CAAC,aAAa,CAAC,IAAI,CAAC;SACnC,CAAC;IACJ,CAAC;IAiBK,AAAN,KAAK,CAAC,eAAe,CACJ,IAAe;QAE9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3E,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;SACvC,CAAC;IACJ,CAAC;IAuBK,AAAN,KAAK,CAAC,eAAe,CACJ,KAA2B,EAC3B,IAAe;QAE9B,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,8CAA8C,IAAI,CAAC,EAAE,YAAY,KAAK,CAAC,QAAQ,EAAE,CAClF,CAAC;QAGF,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IAoBK,AAAN,KAAK,CAAC,yBAAyB,CACX,QAAgB,EACnB,IAAe;QAE9B,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,yDAAyD,IAAI,CAAC,EAAE,YAAY,QAAQ,EAAE,CACvF,CAAC;QAGF,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IAyBK,AAAN,KAAK,CAAC,wBAAwB,CACb,KAAoC;QAEnD,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,6DAA6D,KAAK,CAAC,WAAW,EAAE,CACjF,CAAC;QAGF,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;IACJ,CAAC;IAoBK,AAAN,KAAK,CAAC,qBAAqB,CACP,QAAgB,EACnB,IAAe;QAE9B,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,2CAA2C,QAAQ,cAAc,IAAI,CAAC,EAAE,EAAE,CAC3E,CAAC;QAGF,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;IAiBK,AAAN,KAAK,CAAC,gBAAgB,CACL,IAAe;QAG9B,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;IACJ,CAAC;CACF,CAAA;AA1mBY,oCAAY;AAiBjB;IAFL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC;IAC5B,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAClC,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;;qCAAQ,8BAAe;;0CAMjD;AAIK;IAFL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC;IAC5B,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE7C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,WAAA,IAAA,iBAAO,GAAE,CAAA;;qCADY,4BAAc;;yCAWrC;AAIK;IAFL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC;IAC5B,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;;qCAAQ,2CAAqB;;gDAO5C;AAKK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,wCAAkB,CAAC;IAClC,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,WAAA,IAAA,oCAAW,GAAE,CAAA;;qCADQ,8BAAe;;0CAUtC;AAKK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,2CAAqB,CAAC;IACrC,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAC/B,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;6CAM7B;AAIK;IAFL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,+CAAqB,CAAC;IAClC,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;;;;8DAWf;AAIK;IAFL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,mDAAuB,CAAC;IACvC,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;;qCAAQ,yCAAoB;;+CAG3C;AAIK;IAFL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,mDAAuB,CAAC;IACvC,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE7C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;;;;2DAGf;AAOK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,+DAA6B,CAAC;IAC7C,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE7C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,WAAA,IAAA,oCAAW,GAAE,CAAA;;qCADQ,8DAA8B;;yDAQrD;AAKK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,yDAAuB,CAAC;IACvC,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,WAAA,IAAA,oCAAW,GAAE,CAAA;;qCADQ,yCAAoB;;+CAI3C;AAKK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,+DAA6B,CAAC;IAC7C,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE7C,WAAA,IAAA,cAAI,EAAC,aAAa,CAAC,CAAA;IACnB,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;2DAGf;AAKK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,yDAAuB,CAAC;IACvC,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IACvB,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;qDAErC;AAKK;IAHL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,2DAA2B,CAAC;IACxC,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;2DAiCf;AAmDK;IAFL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC;IAC5B,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;IAE/C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;;qCAAQ,gEAA+B;;0DAyBtD;AAqBK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,oEAA+B,CAAC;IAC/C,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE7C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,WAAA,IAAA,oCAAW,GAAE,CAAA;;qCADQ,0DAA4B;;uDAoBnD;AAuBK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IACvB,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE7C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,WAAA,IAAA,oCAAW,GAAE,CAAA;;qCADQ,iDAAwB;;mDAkB/C;AAkBK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IACvB,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IACxB,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;oDAUpC;AAwBK;IAFL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC;IAC5B,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;;qCAAQ,+CAAuB;;kDA0B9C;AAiBK;IAHL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,kDAA2B,CAAC;IACxC,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;mDAQf;AAuBK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,iDAAsB,CAAC;IACtC,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE7C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,WAAA,IAAA,oCAAW,GAAE,CAAA;;qCADQ,6CAAoB;;mDAW3C;AAoBK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,+CAAqB,CAAC;IACrC,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,cAAI,EAAC,UAAU,CAAC,CAAA;IAChB,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;6DAUf;AAyBK;IAFL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,YAAY,CAAC;IAC5B,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;;qCAAQ,gEAA6B;;4DAUpD;AAoBK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,oEAA6B,CAAC;IAC7C,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE7C,WAAA,IAAA,cAAI,EAAC,UAAU,CAAC,CAAA;IAChB,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;yDAUf;AAiBK;IAHL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,iDAAsB,CAAC,CAAC;IACrC,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;IAE9C,WAAA,IAAA,oCAAW,GAAE,CAAA;;;;oDAMf;uBAzmBU,YAAY;IADxB,IAAA,kBAAQ,GAAE;IAYN,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;qCAPL,0BAAW;QACF,4DAA2B;QAEvB,sDAAwB;QAC5B,6CAAoB;QAEZ,6DAA4B;GAVzD,YAAY,CA0mBxB"}

package/dist/utils/passport-inspector.d.ts

@@ -1,11 +0,0 @@
-export interface PassportInstanceInfo {
-    instanceId: string;
-    modulePath: string;
-    registeredStrategies: string[];
-    timestamp: string;
-    inspectionPoint: string;
-}
-export declare function inspectPassportInstance(passportInstance: any, inspectionPoint: string): PassportInstanceInfo;
-export declare function logPassportInstanceInfo(info: PassportInstanceInfo): void;
-export declare function arePassportInstancesDifferent(info1: PassportInstanceInfo, info2: PassportInstanceInfo): boolean;
-//# sourceMappingURL=passport-inspector.d.ts.map

package/dist/utils/passport-inspector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"passport-inspector.d.ts","sourceRoot":"","sources":["../../src/utils/passport-inspector.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,oBAAoB;IAEnC,UAAU,EAAE,MAAM,CAAC;IAEnB,UAAU,EAAE,MAAM,CAAC;IAEnB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAE/B,SAAS,EAAE,MAAM,CAAC;IAElB,eAAe,EAAE,MAAM,CAAC;CACzB;AASD,wBAAgB,uBAAuB,CACrC,gBAAgB,EAAE,GAAG,EACrB,eAAe,EAAE,MAAM,GACtB,oBAAoB,CAsBtB;AAOD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAOxE;AASD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAiBT"}

package/dist/utils/passport-inspector.js

@@ -1,48 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.inspectPassportInstance = inspectPassportInstance;
-exports.logPassportInstanceInfo = logPassportInstanceInfo;
-exports.arePassportInstancesDifferent = arePassportInstancesDifferent;
-function inspectPassportInstance(passportInstance, inspectionPoint) {
-    const instanceId = Object.prototype.toString.call(passportInstance);
-    let modulePath;
-    try {
-        modulePath = require.resolve('passport');
-    }
-    catch (error) {
-        modulePath = 'UNKNOWN - require.resolve failed';
-    }
-    const registeredStrategies = Object.keys(passportInstance._strategies || {});
-    return {
-        instanceId,
-        modulePath,
-        registeredStrategies,
-        timestamp: new Date().toISOString(),
-        inspectionPoint,
-    };
-}
-function logPassportInstanceInfo(info) {
-    console.log(`[PASSPORT-DEBUG:${info.inspectionPoint}] Passport Instance Inspection:`);
-    console.log(`  Timestamp: ${info.timestamp}`);
-    console.log(`  Instance ID: ${info.instanceId}`);
-    console.log(`  Module Path: ${info.modulePath}`);
-    console.log(`  Registered Strategies: [${info.registeredStrategies.join(', ')}]`);
-    console.log(`  Strategy Count: ${info.registeredStrategies.length}`);
-}
-function arePassportInstancesDifferent(info1, info2) {
-    const differentModule = info1.modulePath !== info2.modulePath;
-    const differentInstance = info1.instanceId !== info2.instanceId;
-    if (differentModule || differentInstance) {
-        console.log('[PASSPORT-DEBUG:Comparison] MULTIPLE PASSPORT INSTANCES DETECTED!');
-        console.log(`  ${info1.inspectionPoint}:`);
-        console.log(`    Module: ${info1.modulePath}`);
-        console.log(`    Instance: ${info1.instanceId}`);
-        console.log(`  ${info2.inspectionPoint}:`);
-        console.log(`    Module: ${info2.modulePath}`);
-        console.log(`    Instance: ${info2.instanceId}`);
-        return true;
-    }
-    console.log('[PASSPORT-DEBUG:Comparison] Same Passport instance confirmed');
-    return false;
-}
-//# sourceMappingURL=passport-inspector.js.map

package/dist/utils/passport-inspector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"passport-inspector.js","sourceRoot":"","sources":["../../src/utils/passport-inspector.ts"],"names":[],"mappings":";;AA4BA,0DAyBC;AAOD,0DAOC;AASD,sEAoBC;AApED,SAAgB,uBAAuB,CACrC,gBAAqB,EACrB,eAAuB;IAGvB,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAGpE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,GAAG,kCAAkC,CAAC;IAClD,CAAC;IAGD,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAE7E,OAAO;QACL,UAAU;QACV,UAAU;QACV,oBAAoB;QACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,eAAe;KAChB,CAAC;AACJ,CAAC;AAOD,SAAgB,uBAAuB,CAAC,IAA0B;IAChE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,eAAe,iCAAiC,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,CAAC;AACvE,CAAC;AASD,SAAgB,6BAA6B,CAC3C,KAA2B,EAC3B,KAA2B;IAE3B,MAAM,eAAe,GAAG,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC;IAC9D,MAAM,iBAAiB,GAAG,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC;IAEhE,IAAI,eAAe,IAAI,iBAAiB,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC"}