@aranzatech/aranza-auth 0.1.0

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/decorators/current-user.decorator.ts","../src/guards/jwt-auth.guard.ts","../src/controllers/auth.controller.ts","../src/hooks/default-auth.hooks.ts","../src/utils/duplicate-key.util.ts","../src/utils/token.util.ts","../src/services/auth.service.ts","../src/services/token.service.ts","../src/strategies/jwt.strategy.ts","../src/auth.module.ts","../src/dto/auth-tokens.dto.ts","../src/dto/forgot-password.dto.ts","../src/dto/login.dto.ts","../src/dto/refresh-token.dto.ts","../src/dto/register-ack.dto.ts","../src/dto/register.dto.ts","../src/dto/reset-password.dto.ts","../src/dto/verify-email.dto.ts"],"names":["Injectable","bcrypt2","hash","Inject","UnauthorizedException","IsString","IsNotEmpty","IsOptional","Length"],"mappings":";;;;;;;;;;AAIO,IAAM,WAAA,GAAc,oBAAA;AAAA,EACzB,CAAC,OAAgB,GAAA,KAA0C;AACzD,IAAA,MAAM,OAAA,GAAU,GAAA,CAAI,YAAA,EAAa,CAAE,UAAA,EAAqC;AACxE,IAAA,OAAO,OAAA,CAAQ,IAAA;AAAA,EACjB;AACF;ACLO,IAAM,YAAA,GAAN,cAA2B,SAAA,CAAU,KAAK,CAAA,CAAE;AAAC;AAAvC,YAAA,GAAN,eAAA,CAAA;AAAA,EADN,UAAA;AAAW,CAAA,EACC,YAAA,CAAA;;;ACoBN,IAAM,iBAAN,MAAqB;AAAA,EAC1B,YAA6B,WAAA,EAA0B;AAA1B,IAAA,IAAA,CAAA,WAAA,GAAA,WAAA;AAAA,EAA2B;AAAA,EAGxD,SAAiB,GAAA,EAA2C;AAC1D,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,QAAA,CAAS,GAAG,CAAA;AAAA,EACtC;AAAA,EAGA,MAAc,GAAA,EAAuC;AACnD,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,KAAA,CAAM,GAAG,CAAA;AAAA,EACnC;AAAA,EAIA,QAAgB,GAAA,EAA8C;AAC5D,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,OAAA,CAAQ,GAAA,CAAI,YAAY,CAAA;AAAA,EAClD;AAAA,EAKA,OAAsB,IAAA,EAAoD;AACxE,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA;AAAA,EACzC;AAAA,EAIA,GAAkB,IAAA,EAAwD;AACxE,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,EAAA,CAAG,IAAA,CAAK,GAAG,CAAA;AAAA,EACrC;AAAA,EAKA,YAAoB,GAAA,EAAkD;AACpE,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,WAAA,CAAY,GAAA,CAAI,KAAK,CAAA;AAAA,EAC/C;AAAA,EAKA,eAAuB,GAAA,EAAiD;AACtE,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,cAAA,CAAe,GAAA,CAAI,KAAK,CAAA;AAAA,EAClD;AAAA,EAKA,cAAsB,GAAA,EAAiD;AACrE,IAAA,OAAO,KAAK,WAAA,CAAY,aAAA,CAAc,GAAA,CAAI,KAAA,EAAO,IAAI,WAAW,CAAA;AAAA,EAClE;AACF,CAAA;AAhDE,eAAA,CAAA;AAAA,EADC,KAAK,UAAU,CAAA;AAAA,EACN,eAAA,CAAA,CAAA,EAAA,IAAA,EAAK;AAAA,CAAA,EAJJ,cAAA,CAIX,SAAA,EAAA,UAAA,EAAA,CAAA,CAAA;AAKA,eAAA,CAAA;AAAA,EADC,KAAK,OAAO,CAAA;AAAA,EACN,eAAA,CAAA,CAAA,EAAA,IAAA,EAAK;AAAA,CAAA,EATD,cAAA,CASX,SAAA,EAAA,OAAA,EAAA,CAAA,CAAA;AAMA,eAAA,CAAA;AAAA,EAFC,KAAK,SAAS,CAAA;AAAA,EACd,QAAA,CAAS,WAAW,EAAE,CAAA;AAAA,EACd,eAAA,CAAA,CAAA,EAAA,IAAA,EAAK;AAAA,CAAA,EAfH,cAAA,CAeX,SAAA,EAAA,SAAA,EAAA,CAAA,CAAA;AAOA,eAAA,CAAA;AAAA,EAHC,KAAK,QAAQ,CAAA;AAAA,EACb,UAAU,YAAY,CAAA;AAAA,EACtB,QAAA,CAAS,WAAW,EAAE,CAAA;AAAA,EACf,eAAA,CAAA,CAAA,EAAA,WAAA,EAAY;AAAA,CAAA,EAtBT,cAAA,CAsBX,SAAA,EAAA,QAAA,EAAA,CAAA,CAAA;AAMA,eAAA,CAAA;AAAA,EAFC,IAAI,IAAI,CAAA;AAAA,EACR,UAAU,YAAY,CAAA;AAAA,EACnB,eAAA,CAAA,CAAA,EAAA,WAAA,EAAY;AAAA,CAAA,EA5BL,cAAA,CA4BX,SAAA,EAAA,IAAA,EAAA,CAAA,CAAA;AAOA,eAAA,CAAA;AAAA,EAFC,KAAK,cAAc,CAAA;AAAA,EACnB,QAAA,CAAS,WAAW,EAAE,CAAA;AAAA,EACV,eAAA,CAAA,CAAA,EAAA,IAAA,EAAK;AAAA,CAAA,EAnCP,cAAA,CAmCX,SAAA,EAAA,aAAA,EAAA,CAAA,CAAA;AAOA,eAAA,CAAA;AAAA,EAFC,KAAK,iBAAiB,CAAA;AAAA,EACtB,QAAA,CAAS,WAAW,EAAE,CAAA;AAAA,EACP,eAAA,CAAA,CAAA,EAAA,IAAA,EAAK;AAAA,CAAA,EA1CV,cAAA,CA0CX,SAAA,EAAA,gBAAA,EAAA,CAAA,CAAA;AAOA,eAAA,CAAA;AAAA,EAFC,KAAK,gBAAgB,CAAA;AAAA,EACrB,QAAA,CAAS,WAAW,EAAE,CAAA;AAAA,EACR,eAAA,CAAA,CAAA,EAAA,IAAA,EAAK;AAAA,CAAA,EAjDT,cAAA,CAiDX,SAAA,EAAA,eAAA,EAAA,CAAA,CAAA;AAjDW,cAAA,GAAN,eAAA,CAAA;AAAA,EADN,WAAW,MAAM;AAAA,CAAA,EACL,cAAA,CAAA;ACfN,IAAM,mBAAN,MAA4C;AAAA,EACjD,MAAM,gBACJ,OAAA,EACkC;AAClC,IAAA,OAAO;AAAA,MACL,KAAK,OAAA,CAAQ,EAAA;AAAA,MACb,GAAI,QAAQ,KAAA,IAAS,IAAA,GAAO,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI,EAAC;AAAA,MACxD,GAAI,QAAQ,QAAA,IAAY,IAAA,GAAO,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,EAAS,GAAI;AAAC,KACnE;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,OAAA,EAA4D;AACzE,IAAA,OAAO;AAAA,MACL,IAAI,OAAA,CAAQ,EAAA;AAAA,MACZ,OAAO,OAAA,CAAQ,KAAA;AAAA,MACf,UAAU,OAAA,CAAQ,QAAA;AAAA,MAClB,eAAe,OAAA,CAAQ,aAAA;AAAA,MACvB,UAAU,OAAA,CAAQ;AAAA,KACpB;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,MAAA,EAAsC;AAC3D,IAAA;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,QAAA,EAA0C;AAC9D,IAAA;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,QAAA,EAA0C;AAC3D,IAAA;AAAA,EACF;AACF;AAhCa,gBAAA,GAAN,eAAA,CAAA;AAAA,EADNA,UAAAA;AAAW,CAAA,EACC,gBAAA,CAAA;;;ACTN,SAAS,oBAAoB,KAAA,EAAyB;AAC3D,EAAA,OACE,CAAC,CAAC,KAAA,IACF,OAAO,UAAU,QAAA,IACjB,MAAA,IAAU,KAAA,IACT,KAAA,CAA2B,IAAA,KAAS,IAAA;AAEzC;ACLO,SAAS,gBAAA,CAAiB,aAAa,EAAA,EAAY;AACxD,EAAA,OAAO,WAAA,CAAY,UAAU,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA;AAC/C;AAEO,SAAS,UAAU,KAAA,EAAuB;AAC/C,EAAA,OAAO,WAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AACxD;AAEO,SAAS,mBAAmB,KAAA,EAAqB;AACtD,EAAA,OAAO,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,KAAQ,KAAK,CAAA;AACpC;AAGO,IAAM,iCAAA,GAAoC,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAA;AAGzD,IAAM,6BAAA,GAAgC,KAAK,EAAA,GAAK,GAAA;;;ACuBhD,IAAM,cAAN,MAAkB;AAAA,EACvB,WAAA,CAEmB,cAAA,EAEA,OAAA,EAEA,KAAA,EACA,YAAA,EACjB;AANiB,IAAA,IAAA,CAAA,cAAA,GAAA,cAAA;AAEA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAEA,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AACA,IAAA,IAAA,CAAA,YAAA,GAAA,YAAA;AAAA,EAChB;AAAA,EAEH,IAAY,eAAA,GAAkB;AAC5B,IAAA,OAAO,IAAA,CAAK,QAAQ,eAAA,IAAmB,OAAA;AAAA,EACzC;AAAA,EAEA,IAAY,wBAAA,GAA2B;AACrC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,QAAA,EAAU,iBAAA,KAAsB,IAAA;AAAA,EACtD;AAAA,EAEA,IAAY,oBAAA,GAAuB;AACjC,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,QAAA,EAAU,aAAA,KAAkB,IAAA;AAAA,EAClD;AAAA,EAEA,IAAY,kBAAA,GAAqB;AAC/B,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,QAAA,EAAU,oBAAA,KAAyB,KAAA;AAAA,EACzD;AAAA,EAEQ,uBAAuB,GAAA,EAAuB;AACpD,IAAA,MAAM,QACJ,IAAA,CAAK,eAAA,KAAoB,OAAA,GAAU,GAAA,CAAI,QAAQ,GAAA,CAAI,QAAA;AACrD,IAAA,IAAI,KAAA,IAAS,IAAA,IAAQ,KAAA,CAAM,IAAA,OAAW,EAAA,EAAI;AACxC,MAAA,MAAM,IAAI,mBAAA;AAAA,QACR,CAAA,EAAG,KAAK,eAAe,CAAA,sBAAA;AAAA,OACzB;AAAA,IACF;AACA,IAAA,OAAO,oBAAoB,KAAK,CAAA;AAAA,EAClC;AAAA,EAEA,MAAM,SAAS,GAAA,EAAiD;AAC9D,IAAA,IAAA,CAAK,sCAAA,EAAuC;AAE5C,IAAA,MAAM,KAAA,GAAuB,EAAE,QAAA,EAAU,GAAA,CAAI,QAAA,EAAS;AACtD,IAAA,IAAI,GAAA,CAAI,KAAA,IAAS,IAAA,EAAM,KAAA,CAAM,QAAQ,GAAA,CAAI,KAAA;AACzC,IAAA,IAAI,GAAA,CAAI,QAAA,IAAY,IAAA,EAAM,KAAA,CAAM,WAAW,GAAA,CAAI,QAAA;AAE/C,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,gBAAA,GAAmB,KAAK,CAAA;AAEzC,IAAA,yBAAA,CAA0B,KAAA,EAAO,KAAK,eAAe,CAAA;AACrD,IAAA,IAAA,CAAK,2CAA2C,KAAK,CAAA;AAErD,IAAA,MAAM,YAAA,GAAe,MAAa,MAAA,CAAA,IAAA,CAAK,GAAA,CAAI,UAAU,EAAE,CAAA;AAEvD,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,cAAA,CAAe,MAAA,CAAO;AAAA,QAC/C,GAAG,KAAA;AAAA,QACH,YAAA;AAAA,QACA,aAAA,EAAe,CAAC,IAAA,CAAK;AAAA,OACtB,CAAA;AAED,MAAA,MAAM,IAAA,CAAK,KAAA,CAAM,eAAA,GAAkB,OAAO,CAAA;AAE1C,MAAA,IAAI,KAAK,wBAAA,EAA0B;AACjC,QAAA,MAAM,IAAA,CAAK,sBAAsB,OAAO,CAAA;AAAA,MAC1C;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,mBAAA,CAAoB,KAAK,CAAA,EAAG;AAC9B,QAAA,MAAM,IAAI,qBAAA,CAAsB,CAAA,EAAG,IAAA,CAAK,eAAe,CAAA,eAAA,CAAiB,CAAA;AAAA,MAC1E;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,OAAO,EAAE,YAAY,IAAA,EAAK;AAAA,EAC5B;AAAA,EAEA,MAAM,MAAM,GAAA,EAAoC;AAC9C,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,sBAAA,CAAuB,GAAG,CAAA;AAClD,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,cAAA,CAAe,2BAAA;AAAA,MACxC;AAAA,KACF;AAEA,IAAA,IAAI,OAAA,EAAS,gBAAgB,IAAA,EAAM;AACjC,MAAA,MAAM,IAAI,sBAAsB,qBAAqB,CAAA;AAAA,IACvD;AAEA,IAAA,IAAA,CAAK,oBAAoB,OAAO,CAAA;AAEhC,IAAA,MAAM,kBAAkB,MAAa,MAAA,CAAA,OAAA;AAAA,MACnC,GAAA,CAAI,QAAA;AAAA,MACJ,OAAA,CAAQ;AAAA,KACV;AACA,IAAA,IAAI,CAAC,eAAA,EAAiB;AACpB,MAAA,MAAM,IAAI,sBAAsB,qBAAqB,CAAA;AAAA,IACvD;AAEA,IAAA,OAAO,IAAA,CAAK,YAAY,OAAO,CAAA;AAAA,EACjC;AAAA,EAEA,MAAM,QAAQ,YAAA,EAA2C;AACvD,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AACF,MAAA,OAAA,GAAU,MAAM,IAAA,CAAK,YAAA,CAAa,kBAAA,CAAmB,YAAY,CAAA;AAAA,IACnE,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,sBAAsB,uBAAuB,CAAA;AAAA,IACzD;AAEA,IAAA,MAAM,UAAU,MAAM,IAAA,CAAK,cAAA,CAAe,mBAAA,CAAoB,QAAQ,GAAG,CAAA;AACzE,IAAA,IAAI,OAAA,EAAS,oBAAoB,IAAA,EAAM;AACrC,MAAA,MAAM,IAAI,sBAAsB,uBAAuB,CAAA;AAAA,IACzD;AAEA,IAAA,IAAA,CAAK,oBAAoB,OAAO,CAAA;AAEhC,IAAA,MAAM,YAAA,GAAe,MAAM,IAAA,CAAK,YAAA,CAAa,mBAAA;AAAA,MAC3C,YAAA;AAAA,MACA,OAAA,CAAQ;AAAA,KACV;AACA,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,IAAI,sBAAsB,uBAAuB,CAAA;AAAA,IACzD;AAEA,IAAA,OAAO,IAAA,CAAK,YAAY,OAAO,CAAA;AAAA,EACjC;AAAA,EAEA,MAAM,OAAO,MAAA,EAA8C;AACzD,IAAA,MAAM,IAAA,CAAK,cAAA,CAAe,sBAAA,CAAuB,MAAA,EAAQ,IAAI,CAAA;AAC7D,IAAA,OAAO,EAAE,WAAW,IAAA,EAAK;AAAA,EAC3B;AAAA,EAEA,MAAM,GAAG,MAAA,EAAkD;AACzD,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,cAAA,CAAe,SAAS,MAAM,CAAA;AACzD,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,MAAM,IAAI,sBAAsB,mBAAmB,CAAA;AAAA,IACrD;AAEA,IAAA,IAAI,IAAA,CAAK,KAAA,CAAM,QAAA,IAAY,IAAA,EAAM;AAC/B,MAAA,OAAO,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,OAAO,CAAA;AAAA,IACpC;AAEA,IAAA,OAAO,IAAI,gBAAA,EAAiB,CAAE,QAAA,CAAS,OAAO,CAAA;AAAA,EAChD;AAAA,EAEA,MAAM,YAAY,KAAA,EAA4C;AAC5D,IAAA,IAAA,CAAK,8BAAA,EAA+B;AAEpC,IAAA,MAAM,SAAA,GAAY,UAAU,KAAK,CAAA;AACjC,IAAA,MAAM,OAAA,GACJ,MAAM,IAAA,CAAK,cAAA,CAAe,iCAAiC,SAAS,CAAA;AACtE,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,MAAM,IAAI,oBAAoB,0BAA0B,CAAA;AAAA,IAC1D;AAEA,IAAA,MAAM,IAAA,CAAK,cAAA,CAAe,iBAAA,CAAkB,OAAA,CAAQ,EAAE,CAAA;AACtD,IAAA,OAAO,EAAE,UAAU,IAAA,EAAK;AAAA,EAC1B;AAAA,EAEA,MAAM,eAAe,KAAA,EAAwC;AAC3D,IAAA,IAAA,CAAK,0BAAA,EAA2B;AAChC,IAAA,IAAA,CAAK,uCAAA,EAAwC;AAE7C,IAAA,MAAM,eAAA,GAAkB,oBAAoB,KAAK,CAAA;AACjD,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,cAAA,CAAe,YAAY,eAAe,CAAA;AAErE,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,MAAM,WAAW,gBAAA,EAAiB;AAClC,MAAA,MAAM,SAAA,GAAY,UAAU,QAAQ,CAAA;AACpC,MAAA,MAAM,SAAA,GAAY,kBAAA;AAAA,QAChB,IAAA,CAAK,QAAQ,uBAAA,IAA2B;AAAA,OAC1C;AAEA,MAAA,MAAM,KAAK,cAAA,CAAe,aAAA,CAAc,OAAA,CAAQ,EAAA,EAAI,WAAW,SAAS,CAAA;AACxE,MAAA,MAAM,IAAA,CAAK,KAAA,CAAM,SAAA,CAAW,OAAA,EAAS,iBAAiB,QAAQ,CAAA;AAAA,IAChE;AAEA,IAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,EACtB;AAAA,EAEA,MAAM,aAAA,CACJ,KAAA,EACA,WAAA,EAC0B;AAC1B,IAAA,IAAA,CAAK,0BAAA,EAA2B;AAEhC,IAAA,MAAM,SAAA,GAAY,UAAU,KAAK,CAAA;AACjC,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,cAAA,CAAe,qBAAqB,SAAS,CAAA;AACxE,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,MAAM,IAAI,oBAAoB,0BAA0B,CAAA;AAAA,IAC1D;AAEA,IAAA,MAAM,YAAA,GAAe,MAAa,MAAA,CAAA,IAAA,CAAK,WAAA,EAAa,EAAE,CAAA;AACtD,IAAA,MAAM,IAAA,CAAK,cAAA,CAAe,kBAAA,CAAmB,OAAA,CAAQ,IAAI,YAAY,CAAA;AACrE,IAAA,MAAM,IAAA,CAAK,cAAA,CAAe,eAAA,CAAgB,OAAA,CAAQ,EAAE,CAAA;AACpD,IAAA,MAAM,IAAA,CAAK,cAAA,CAAe,sBAAA,CAAuB,OAAA,CAAQ,IAAI,IAAI,CAAA;AAEjE,IAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,EACvB;AAAA,EAEQ,oBAAoB,OAAA,EAAgC;AAC1D,IAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,MAAA,MAAM,IAAI,sBAAsB,kBAAkB,CAAA;AAAA,IACpD;AAEA,IAAA,IAAI,IAAA,CAAK,wBAAA,IAA4B,CAAC,OAAA,CAAQ,aAAA,EAAe;AAC3D,MAAA,MAAM,IAAI,sBAAsB,oBAAoB,CAAA;AAAA,IACtD;AAAA,EACF;AAAA,EAEA,MAAc,YAAY,OAAA,EAA+C;AACvE,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,KAAA,CAAM,gBAAgB,OAAO,CAAA;AACxD,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,YAAA,CAAa,UAAA,CAAW;AAAA,MAChD,GAAG,OAAA;AAAA,MACH,KAAK,OAAA,CAAQ;AAAA,KACd,CAAA;AAED,IAAA,IAAI,KAAK,kBAAA,EAAoB;AAC3B,MAAA,MAAM,gBAAA,GAAmB,MAAM,IAAA,CAAK,YAAA,CAAa,gBAAA;AAAA,QAC/C,MAAA,CAAO;AAAA,OACT;AACA,MAAA,MAAM,KAAK,cAAA,CAAe,sBAAA;AAAA,QACxB,OAAA,CAAQ,EAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,YAAA,GAAe,OAAO,CAAA;AACvC,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,MAAc,sBAAsB,OAAA,EAAyC;AAC3E,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,mBAAA,CAAoB,OAAO,CAAA;AAC9C,IAAA,IAAI,SAAS,IAAA,EAAM;AAEnB,IAAA,MAAM,WAAW,gBAAA,EAAiB;AAClC,IAAA,MAAM,SAAA,GAAY,UAAU,QAAQ,CAAA;AACpC,IAAA,MAAM,SAAA,GAAY,kBAAA;AAAA,MAChB,IAAA,CAAK,QAAQ,2BAAA,IACX;AAAA,KACJ;AAEA,IAAA,MAAM,KAAK,cAAA,CAAe,yBAAA;AAAA,MACxB,OAAA,CAAQ,EAAA;AAAA,MACR,SAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,MAAM,IAAA,CAAK,KAAA,CAAM,SAAA,CAAW,QAAA,EAAU,OAAO,QAAQ,CAAA;AAAA,EACvD;AAAA,EAEQ,oBAAoB,OAAA,EAAyC;AACnE,IAAA,IAAI,QAAQ,KAAA,IAAS,IAAA,IAAQ,QAAQ,KAAA,CAAM,IAAA,OAAW,EAAA,EAAI;AACxD,MAAA,OAAO,mBAAA,CAAoB,QAAQ,KAAK,CAAA;AAAA,IAC1C;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEQ,2CAA2C,KAAA,EAA4B;AAC7E,IAAA,IAAI,CAAC,KAAK,wBAAA,EAA0B;AAEpC,IAAA,MAAM,KAAA,GACJ,IAAA,CAAK,eAAA,KAAoB,OAAA,GACrB,0BAA0B,KAAA,EAAO,OAAO,CAAA,GACxC,KAAA,CAAM,KAAA,IAAS,IAAA,GACb,mBAAA,CAAoB,KAAA,CAAM,KAAK,CAAA,GAC/B,IAAA;AAER,IAAA,IAAI,KAAA,IAAS,IAAA,IAAQ,KAAA,CAAM,IAAA,OAAW,EAAA,EAAI;AACxC,MAAA,MAAM,IAAI,mBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,sCAAA,GAA+C;AACrD,IAAA,IAAI,IAAA,CAAK,wBAAA,IAA4B,IAAA,CAAK,KAAA,CAAM,aAAa,IAAA,EAAM;AACjE,MAAA,MAAM,IAAI,mBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,uCAAA,GAAgD;AACtD,IAAA,IAAI,IAAA,CAAK,oBAAA,IAAwB,IAAA,CAAK,KAAA,CAAM,aAAa,IAAA,EAAM;AAC7D,MAAA,MAAM,IAAI,mBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,8BAAA,GAAuC;AAC7C,IAAA,IAAI,CAAC,KAAK,wBAAA,EAA0B;AAClC,MAAA,MAAM,IAAI,iBAAA,EAAkB;AAAA,IAC9B;AAAA,EACF;AAAA,EAEQ,0BAAA,GAAmC;AACzC,IAAA,IAAI,CAAC,KAAK,oBAAA,EAAsB;AAC9B,MAAA,MAAM,IAAI,iBAAA,EAAkB;AAAA,IAC9B;AAAA,EACF;AAAA,EAEA,wBAAwB,OAAA,EAA8C;AACpE,IAAA,OAAO,qBAAA,CAAsB,OAAA,EAAS,IAAA,CAAK,eAAe,CAAA;AAAA,EAC5D;AACF;AA7Sa,WAAA,GAAN,eAAA,CAAA;AAAA,EADNA,UAAAA,EAAW;AAAA,EAGP,0BAAO,eAAe,CAAA,CAAA;AAAA,EAEtB,0BAAO,mBAAmB,CAAA,CAAA;AAAA,EAE1B,0BAAO,UAAU,CAAA;AAAA,CAAA,EANT,WAAA,CAAA;AC/BN,IAAM,eAAN,MAAmB;AAAA,EACxB,WAAA,CACmB,YAEA,OAAA,EACjB;AAHiB,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAEA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAChB;AAAA,EAEH,MAAM,WAAW,OAAA,EAA8C;AAC7D,IAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,OAAA,CAAQ,SAAA,IAAa,IAAA;AAClD,IAAA,MAAM,gBAAA,GAAmB,IAAA,CAAK,OAAA,CAAQ,gBAAA,IAAoB,IAAA;AAE1D,IAAA,MAAM,CAAC,WAAA,EAAa,YAAY,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,MACpD,KAAK,UAAA,CAAW,SAAA;AAAA,QACd,OAAA;AAAA,QACA;AAAA,UACE,MAAA,EAAQ,KAAK,OAAA,CAAQ,MAAA;AAAA,UACrB,SAAA,EAAW;AAAA;AACb,OACF;AAAA,MACA,KAAK,UAAA,CAAW,SAAA;AAAA,QACd,OAAA;AAAA,QACA;AAAA,UACE,MAAA,EAAQ,KAAK,OAAA,CAAQ,aAAA;AAAA,UACrB,SAAA,EAAW;AAAA;AACb;AACF,KACD,CAAA;AAED,IAAA,OAAO,EAAE,aAAa,YAAA,EAAa;AAAA,EACrC;AAAA,EAEA,MAAM,mBAAmB,YAAA,EAA+C;AACtE,IAAA,OAAO,IAAA,CAAK,UAAA,CAAW,WAAA,CAA4B,YAAA,EAAc;AAAA,MAC/D,MAAA,EAAQ,KAAK,OAAA,CAAQ;AAAA,KACtB,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,iBAAiB,YAAA,EAAuC;AAC5D,IAAA,OAAcC,MAAA,CAAA,IAAA,CAAK,cAAc,EAAE,CAAA;AAAA,EACrC;AAAA,EAEA,MAAM,mBAAA,CACJ,YAAA,EACAC,KAAAA,EACkB;AAClB,IAAA,OAAcD,MAAA,CAAA,OAAA,CAAQ,cAAcC,KAAI,CAAA;AAAA,EAC1C;AACF;AA/Ca,YAAA,GAAN,eAAA,CAAA;AAAA,EADNF,UAAAA,EAAW;AAAA,EAIP,eAAA,CAAA,CAAA,EAAAG,OAAO,mBAAmB,CAAA;AAAA,CAAA,EAHlB,YAAA,CAAA;ACAN,IAAM,WAAA,GAAN,cAA0B,gBAAA,CAAiB,QAAQ,CAAA,CAAE;AAAA,EAC1D,WAAA,CAEE,SAEiB,cAAA,EACjB;AACA,IAAA,KAAA,CAAM;AAAA,MACJ,cAAA,EAAgB,WAAW,2BAAA,EAA4B;AAAA,MACvD,gBAAA,EAAkB,KAAA;AAAA,MAClB,aAAa,OAAA,CAAQ;AAAA,KACtB,CAAA;AANgB,IAAA,IAAA,CAAA,cAAA,GAAA,cAAA;AAAA,EAOnB;AAAA,EAEA,MAAM,SAAS,OAAA,EAAkD;AAC/D,IAAA,MAAM,UAAU,MAAM,IAAA,CAAK,cAAA,CAAe,QAAA,CAAS,QAAQ,GAAG,CAAA;AAC9D,IAAA,IAAI,OAAA,IAAW,IAAA,IAAQ,OAAA,CAAQ,QAAA,EAAU;AACvC,MAAA,MAAM,IAAIC,sBAAsB,+BAA+B,CAAA;AAAA,IACjE;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AACF,CAAA;AArBa,WAAA,GAAN,eAAA,CAAA;AAAA,EADNJ,UAAAA,EAAW;AAAA,EAGP,eAAA,CAAA,CAAA,EAAAG,OAAO,mBAAmB,CAAA,CAAA;AAAA,EAE1B,eAAA,CAAA,CAAA,EAAAA,OAAO,eAAe,CAAA;AAAA,CAAA,EAJd,WAAA,CAAA;;;ACQb,SAAS,oBAAoB,OAAA,EAAwC;AACnE,EAAA,OAAO;AAAA,IACL;AAAA,MACE,OAAA,EAAS,mBAAA;AAAA,MACT,QAAA,EAAU;AAAA,KACZ;AAAA,IACA;AAAA,MACE,OAAA,EAAS,UAAA;AAAA,MACT,MAAA,EAAQ,CAAC,mBAAmB,CAAA;AAAA,MAC5B,UAAA,EAAY,CAAC,IAAA,KAA4B;AACvC,QAAA,MAAM,UAAA,GAAa,KAAK,KAAA,IAAS,gBAAA;AACjC,QAAA,OAAO,IAAI,UAAA,EAAW;AAAA,MACxB;AAAA,KACF;AAAA,IACA,WAAA;AAAA,IACA,YAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,SAAS,iBAAA,GAAmC;AAC1C,EAAA,OAAO;AAAA,IACL,cAAA,CAAe,QAAA,CAAS,EAAE,eAAA,EAAiB,OAAO,CAAA;AAAA,IAClD,UAAU,aAAA,CAAc;AAAA,MACtB,MAAA,EAAQ,CAAC,mBAAmB,CAAA;AAAA,MAC5B,UAAA,EAAY,CAAC,IAAA,MACV;AAAA,QACC,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,WAAA,EAAa,EAAE,SAAA,EAAW,IAAA,CAAK,aAAa,IAAA;AAAK,OACnD;AAAA,KACH;AAAA,GACH;AACF;AAEA,SAAS,aAAa,WAAA,EAAsC;AAC1D,EAAA,MAAM,MAAA,GAAwB,CAAC,GAAG,iBAAA,EAAmB,CAAA;AACrD,EAAA,IAAI,eAAe,IAAA,EAAM;AACvB,IAAA,MAAA,CAAO,OAAA,CAAQ,GAAI,WAA6B,CAAA;AAAA,EAClD;AACA,EAAA,OAAO,MAAA;AACT;AAGO,IAAM,aAAN,MAAiB;AAAA,EACtB,OAAO,QAAQ,OAAA,EAA2C;AACxD,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,UAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,SAAS,iBAAA,EAAkB;AAAA,MAC3B,WAAA,EAAa,CAAC,cAAc,CAAA;AAAA,MAC5B,SAAA,EAAW,oBAAoB,OAAO,CAAA;AAAA,MACtC,OAAA,EAAS;AAAA,QACP,mBAAA;AAAA,QACA,UAAA;AAAA,QACA,WAAA;AAAA,QACA,YAAA;AAAA,QACA,YAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF;AAAA,EAEA,OAAO,aAAa,OAAA,EAAgD;AAClE,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,UAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,YAAA,CAAa,OAAA,CAAQ,OAAO,CAAA;AAAA,MACrC,WAAA,EAAa,CAAC,cAAc,CAAA;AAAA,MAC5B,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAAS,mBAAA;AAAA,UACT,MAAA,EAAS,OAAA,CAAQ,MAAA,IAAU,EAAC;AAAA,UAC5B,YAAY,OAAA,CAAQ;AAAA,SACtB;AAAA,QACA;AAAA,UACE,OAAA,EAAS,UAAA;AAAA,UACT,MAAA,EAAQ,CAAC,mBAAmB,CAAA;AAAA,UAC5B,UAAA,EAAY,CAAC,IAAA,KAA4B;AACvC,YAAA,MAAM,UAAA,GAAa,KAAK,KAAA,IAAS,gBAAA;AACjC,YAAA,OAAO,IAAI,UAAA,EAAW;AAAA,UACxB;AAAA,SACF;AAAA,QACA,WAAA;AAAA,QACA,YAAA;AAAA,QACA,WAAA;AAAA,QACA;AAAA,OACF;AAAA,MACA,OAAA,EAAS;AAAA,QACP,mBAAA;AAAA,QACA,UAAA;AAAA,QACA,WAAA;AAAA,QACA,YAAA;AAAA,QACA,YAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF;AACF;AAxDa,UAAA,GAAN,eAAA,CAAA;AAAA,EADN,MAAA,CAAO,EAAE;AAAA,CAAA,EACG,UAAA,CAAA;;;AC9DN,IAAM,gBAAN,MAAoB;AAG3B;ACDO,IAAM,oBAAN,MAAwB;AAG/B;AADE,eAAA,CAAA;AAAA,EADC,OAAA;AAAQ,CAAA,EADE,iBAAA,CAEX,SAAA,EAAA,OAAA,EAAA,CAAA,CAAA;ACFK,IAAM,WAAN,MAAe;AAetB;AAXE,eAAA,CAAA;AAAA,EAHC,UAAA,EAAW;AAAA,EACX,QAAA,EAAS;AAAA,EACT,MAAA,CAAO,GAAG,GAAG;AAAA,CAAA,EAHH,QAAA,CAIX,SAAA,EAAA,OAAA,EAAA,CAAA,CAAA;AAKA,eAAA,CAAA;AAAA,EAHC,UAAA,EAAW;AAAA,EACX,QAAA,EAAS;AAAA,EACT,MAAA,CAAO,GAAG,EAAE;AAAA,CAAA,EARF,QAAA,CASX,SAAA,EAAA,UAAA,EAAA,CAAA,CAAA;AAKA,eAAA,CAAA;AAAA,EAHC,QAAA,EAAS;AAAA,EACT,UAAA,EAAW;AAAA,EACX,MAAA,CAAO,GAAG,GAAG;AAAA,CAAA,EAbH,QAAA,CAcX,SAAA,EAAA,UAAA,EAAA,CAAA,CAAA;ACdK,IAAM,kBAAN,MAAsB;AAI7B;AADE,eAAA,CAAA;AAAA,EAFCE,QAAAA,EAAS;AAAA,EACTC,UAAAA;AAAW,CAAA,EAFD,eAAA,CAGX,SAAA,EAAA,cAAA,EAAA,CAAA,CAAA;;;ACLK,IAAM,iBAAN,MAAqB;AAE5B;ACAO,IAAM,cAAN,MAAkB;AAgBzB;AAZE,eAAA,CAAA;AAAA,EAHCC,UAAAA,EAAW;AAAA,EACXF,QAAAA,EAAS;AAAA,EACTG,MAAAA,CAAO,GAAG,GAAG;AAAA,CAAA,EAHH,WAAA,CAIX,SAAA,EAAA,OAAA,EAAA,CAAA,CAAA;AAMA,eAAA,CAAA;AAAA,EAJCD,UAAAA,EAAW;AAAA,EACXF,QAAAA,EAAS;AAAA,EACTG,MAAAA,CAAO,GAAG,EAAE,CAAA;AAAA,EACZ,QAAQ,mBAAmB;AAAA,CAAA,EATjB,WAAA,CAUX,SAAA,EAAA,UAAA,EAAA,CAAA,CAAA;AAKA,eAAA,CAAA;AAAA,EAHCH,QAAAA,EAAS;AAAA,EACTC,UAAAA,EAAW;AAAA,EACXE,MAAAA,CAAO,GAAG,GAAG;AAAA,CAAA,EAdH,WAAA,CAeX,SAAA,EAAA,UAAA,EAAA,CAAA,CAAA;ACfK,IAAM,mBAAN,MAAuB;AAS9B;AANE,eAAA,CAAA;AAAA,EAFCH,QAAAA,EAAS;AAAA,EACTC,UAAAA;AAAW,CAAA,EAFD,gBAAA,CAGX,SAAA,EAAA,OAAA,EAAA,CAAA,CAAA;AAKA,eAAA,CAAA;AAAA,EAHCD,QAAAA,EAAS;AAAA,EACTC,UAAAA,EAAW;AAAA,EACXE,MAAAA,CAAO,GAAG,GAAG;AAAA,CAAA,EAPH,gBAAA,CAQX,SAAA,EAAA,aAAA,EAAA,CAAA,CAAA;ACRK,IAAM,iBAAN,MAAqB;AAI5B;AADE,eAAA,CAAA;AAAA,EAFCH,QAAAA,EAAS;AAAA,EACTC,UAAAA;AAAW,CAAA,EAFD,cAAA,CAGX,SAAA,EAAA,OAAA,EAAA,CAAA,CAAA","file":"index.js","sourcesContent":["import { createParamDecorator, type ExecutionContext } from \"@nestjs/common\";\n\nimport type { AuthJwtPayload } from \"../interfaces/jwt-payload.interface\";\n\nexport const CurrentUser = createParamDecorator(\n  (_data: unknown, ctx: ExecutionContext): AuthJwtPayload => {\n    const request = ctx.switchToHttp().getRequest<{ user: AuthJwtPayload }>();\n    return request.user;\n  },\n);\n","import { Injectable } from \"@nestjs/common\";\nimport { AuthGuard } from \"@nestjs/passport\";\n\n@Injectable()\nexport class JwtAuthGuard extends AuthGuard(\"jwt\") {}\n","import {\n  Body,\n  Controller,\n  Get,\n  HttpCode,\n  HttpStatus,\n  Post,\n  UseGuards,\n} from \"@nestjs/common\";\n\nimport { AuthTokensDto } from \"../dto/auth-tokens.dto\";\nimport { ForgotPasswordDto } from \"../dto/forgot-password.dto\";\nimport { LoginDto } from \"../dto/login.dto\";\nimport { RefreshTokenDto } from \"../dto/refresh-token.dto\";\nimport { RegisterAckDto } from \"../dto/register-ack.dto\";\nimport { RegisterDto } from \"../dto/register.dto\";\nimport { ResetPasswordDto } from \"../dto/reset-password.dto\";\nimport { VerifyEmailDto } from \"../dto/verify-email.dto\";\nimport { CurrentUser } from \"../decorators/current-user.decorator\";\nimport { JwtAuthGuard } from \"../guards/jwt-auth.guard\";\nimport type { AuthJwtPayload } from \"../interfaces/jwt-payload.interface\";\nimport { AuthService } from \"../services/auth.service\";\n\n@Controller(\"auth\")\nexport class AuthController {\n  constructor(private readonly authService: AuthService) {}\n\n  @Post(\"register\")\n  register(@Body() dto: RegisterDto): Promise<RegisterAckDto> {\n    return this.authService.register(dto);\n  }\n\n  @Post(\"login\")\n  login(@Body() dto: LoginDto): Promise<AuthTokensDto> {\n    return this.authService.login(dto);\n  }\n\n  @Post(\"refresh\")\n  @HttpCode(HttpStatus.OK)\n  refresh(@Body() dto: RefreshTokenDto): Promise<AuthTokensDto> {\n    return this.authService.refresh(dto.refreshToken);\n  }\n\n  @Post(\"logout\")\n  @UseGuards(JwtAuthGuard)\n  @HttpCode(HttpStatus.OK)\n  logout(@CurrentUser() user: AuthJwtPayload): Promise<{ loggedOut: true }> {\n    return this.authService.logout(user.sub);\n  }\n\n  @Get(\"me\")\n  @UseGuards(JwtAuthGuard)\n  me(@CurrentUser() user: AuthJwtPayload): Promise<Record<string, unknown>> {\n    return this.authService.me(user.sub);\n  }\n\n  /** Available only when `features.emailVerification` is enabled. */\n  @Post(\"verify-email\")\n  @HttpCode(HttpStatus.OK)\n  verifyEmail(@Body() dto: VerifyEmailDto): Promise<{ verified: true }> {\n    return this.authService.verifyEmail(dto.token);\n  }\n\n  /** Available only when `features.passwordReset` is enabled. */\n  @Post(\"forgot-password\")\n  @HttpCode(HttpStatus.OK)\n  forgotPassword(@Body() dto: ForgotPasswordDto): Promise<{ sent: true }> {\n    return this.authService.forgotPassword(dto.email);\n  }\n\n  /** Available only when `features.passwordReset` is enabled. */\n  @Post(\"reset-password\")\n  @HttpCode(HttpStatus.OK)\n  resetPassword(@Body() dto: ResetPasswordDto): Promise<{ reset: true }> {\n    return this.authService.resetPassword(dto.token, dto.newPassword);\n  }\n}\n","import { Injectable } from \"@nestjs/common\";\n\nimport type {\n  AuthHooks,\n  BaseAuthAccount,\n  RegisterInput,\n} from \"../interfaces/auth-hooks.interface\";\n\n@Injectable()\nexport class DefaultAuthHooks implements AuthHooks {\n  async buildJwtPayload(\n    account: BaseAuthAccount,\n  ): Promise<Record<string, unknown>> {\n    return {\n      sub: account.id,\n      ...(account.email != null ? { email: account.email } : {}),\n      ...(account.username != null ? { username: account.username } : {}),\n    };\n  }\n\n  async enrichMe(account: BaseAuthAccount): Promise<Record<string, unknown>> {\n    return {\n      id: account.id,\n      email: account.email,\n      username: account.username,\n      emailVerified: account.emailVerified,\n      disabled: account.disabled,\n    };\n  }\n\n  async onBeforeRegister(_input: RegisterInput): Promise<void> {\n    return;\n  }\n\n  async onAfterRegister(_account: BaseAuthAccount): Promise<void> {\n    return;\n  }\n\n  async onAfterLogin(_account: BaseAuthAccount): Promise<void> {\n    return;\n  }\n}\n","export function isDuplicateKeyError(error: unknown): boolean {\n  return (\n    !!error &&\n    typeof error === \"object\" &&\n    \"code\" in error &&\n    (error as { code: number }).code === 11000\n  );\n}\n","import { createHash, randomBytes } from \"crypto\";\n\nexport function generateRawToken(byteLength = 32): string {\n  return randomBytes(byteLength).toString(\"hex\");\n}\n\nexport function hashToken(token: string): string {\n  return createHash(\"sha256\").update(token).digest(\"hex\");\n}\n\nexport function expiresAtFromTtlMs(ttlMs: number): Date {\n  return new Date(Date.now() + ttlMs);\n}\n\n/** Default: 24 hours */\nexport const DEFAULT_EMAIL_VERIFICATION_TTL_MS = 24 * 60 * 60 * 1000;\n\n/** Default: 15 minutes */\nexport const DEFAULT_PASSWORD_RESET_TTL_MS = 15 * 60 * 1000;\n","import {\n  BadRequestException,\n  Inject,\n  Injectable,\n  NotFoundException,\n  UnauthorizedException,\n} from \"@nestjs/common\";\nimport * as bcrypt from \"bcryptjs\";\n\nimport {\n  AUTH_HOOKS,\n  AUTH_MODULE_OPTIONS,\n  AUTH_REPOSITORY,\n} from \"../constants/tokens\";\nimport type { LoginDto } from \"../dto/login.dto\";\nimport type { RegisterDto } from \"../dto/register.dto\";\nimport { DefaultAuthHooks } from \"../hooks/default-auth.hooks\";\nimport type { AuthModuleOptions } from \"../interfaces/auth-config.interface\";\nimport type {\n  AuthHooks,\n  AuthTokens,\n  BaseAuthAccount,\n  RegisterInput,\n} from \"../interfaces/auth-hooks.interface\";\nimport type { IAuthRepository } from \"../interfaces/auth-repository.interface\";\nimport { isDuplicateKeyError } from \"../utils/duplicate-key.util\";\nimport {\n  normalizeIdentifier,\n  readAccountIdentifier,\n  resolveRegisterIdentifier,\n} from \"../utils/identifier.util\";\nimport {\n  DEFAULT_EMAIL_VERIFICATION_TTL_MS,\n  DEFAULT_PASSWORD_RESET_TTL_MS,\n  expiresAtFromTtlMs,\n  generateRawToken,\n  hashToken,\n} from \"../utils/token.util\";\nimport { TokenService } from \"./token.service\";\n\n@Injectable()\nexport class AuthService {\n  constructor(\n    @Inject(AUTH_REPOSITORY)\n    private readonly authRepository: IAuthRepository,\n    @Inject(AUTH_MODULE_OPTIONS)\n    private readonly options: AuthModuleOptions,\n    @Inject(AUTH_HOOKS)\n    private readonly hooks: AuthHooks,\n    private readonly tokenService: TokenService,\n  ) {}\n\n  private get identifierField() {\n    return this.options.identifierField ?? \"email\";\n  }\n\n  private get emailVerificationEnabled() {\n    return this.options.features?.emailVerification === true;\n  }\n\n  private get passwordResetEnabled() {\n    return this.options.features?.passwordReset === true;\n  }\n\n  private get rotateRefreshToken() {\n    return this.options.features?.refreshTokenRotation !== false;\n  }\n\n  private resolveLoginIdentifier(dto: LoginDto): string {\n    const value =\n      this.identifierField === \"email\" ? dto.email : dto.username;\n    if (value == null || value.trim() === \"\") {\n      throw new BadRequestException(\n        `${this.identifierField} is required for login`,\n      );\n    }\n    return normalizeIdentifier(value);\n  }\n\n  async register(dto: RegisterDto): Promise<{ registered: true }> {\n    this.assertEmailHookWhenVerificationEnabled();\n\n    const input: RegisterInput = { password: dto.password };\n    if (dto.email != null) input.email = dto.email;\n    if (dto.username != null) input.username = dto.username;\n\n    await this.hooks.onBeforeRegister?.(input);\n\n    resolveRegisterIdentifier(input, this.identifierField);\n    this.assertRegisterEmailWhenVerificationEnabled(input);\n\n    const passwordHash = await bcrypt.hash(dto.password, 10);\n\n    try {\n      const account = await this.authRepository.create({\n        ...input,\n        passwordHash,\n        emailVerified: !this.emailVerificationEnabled,\n      });\n\n      await this.hooks.onAfterRegister?.(account);\n\n      if (this.emailVerificationEnabled) {\n        await this.sendVerificationEmail(account);\n      }\n    } catch (error) {\n      if (isDuplicateKeyError(error)) {\n        throw new UnauthorizedException(`${this.identifierField} already exists`);\n      }\n      throw error;\n    }\n\n    return { registered: true };\n  }\n\n  async login(dto: LoginDto): Promise<AuthTokens> {\n    const identifier = this.resolveLoginIdentifier(dto);\n    const account = await this.authRepository.findByIdentifierWithSecrets(\n      identifier,\n    );\n\n    if (account?.passwordHash == null) {\n      throw new UnauthorizedException(\"Invalid credentials\");\n    }\n\n    this.assertAccountActive(account);\n\n    const passwordMatches = await bcrypt.compare(\n      dto.password,\n      account.passwordHash,\n    );\n    if (!passwordMatches) {\n      throw new UnauthorizedException(\"Invalid credentials\");\n    }\n\n    return this.issueTokens(account);\n  }\n\n  async refresh(refreshToken: string): Promise<AuthTokens> {\n    let payload;\n    try {\n      payload = await this.tokenService.verifyRefreshToken(refreshToken);\n    } catch {\n      throw new UnauthorizedException(\"Invalid refresh token\");\n    }\n\n    const account = await this.authRepository.findByIdWithSecrets(payload.sub);\n    if (account?.refreshTokenHash == null) {\n      throw new UnauthorizedException(\"Invalid refresh token\");\n    }\n\n    this.assertAccountActive(account);\n\n    const tokenMatches = await this.tokenService.compareRefreshToken(\n      refreshToken,\n      account.refreshTokenHash,\n    );\n    if (!tokenMatches) {\n      throw new UnauthorizedException(\"Invalid refresh token\");\n    }\n\n    return this.issueTokens(account);\n  }\n\n  async logout(authId: string): Promise<{ loggedOut: true }> {\n    await this.authRepository.updateRefreshTokenHash(authId, null);\n    return { loggedOut: true };\n  }\n\n  async me(authId: string): Promise<Record<string, unknown>> {\n    const account = await this.authRepository.findById(authId);\n    if (account == null) {\n      throw new UnauthorizedException(\"Account not found\");\n    }\n\n    if (this.hooks.enrichMe != null) {\n      return this.hooks.enrichMe(account);\n    }\n\n    return new DefaultAuthHooks().enrichMe(account);\n  }\n\n  async verifyEmail(token: string): Promise<{ verified: true }> {\n    this.assertEmailVerificationEnabled();\n\n    const tokenHash = hashToken(token);\n    const account =\n      await this.authRepository.findByEmailVerificationTokenHash(tokenHash);\n    if (account == null) {\n      throw new BadRequestException(\"TOKEN_INVALID_OR_EXPIRED\");\n    }\n\n    await this.authRepository.markEmailVerified(account.id);\n    return { verified: true };\n  }\n\n  async forgotPassword(email: string): Promise<{ sent: true }> {\n    this.assertPasswordResetEnabled();\n    this.assertEmailHookWhenPasswordResetEnabled();\n\n    const normalizedEmail = normalizeIdentifier(email);\n    const account = await this.authRepository.findByEmail(normalizedEmail);\n\n    if (account != null) {\n      const rawToken = generateRawToken();\n      const tokenHash = hashToken(rawToken);\n      const expiresAt = expiresAtFromTtlMs(\n        this.options.passwordResetTokenTtlMs ?? DEFAULT_PASSWORD_RESET_TTL_MS,\n      );\n\n      await this.authRepository.setResetToken(account.id, tokenHash, expiresAt);\n      await this.hooks.sendEmail!(\"reset\", normalizedEmail, rawToken);\n    }\n\n    return { sent: true };\n  }\n\n  async resetPassword(\n    token: string,\n    newPassword: string,\n  ): Promise<{ reset: true }> {\n    this.assertPasswordResetEnabled();\n\n    const tokenHash = hashToken(token);\n    const account = await this.authRepository.findByResetTokenHash(tokenHash);\n    if (account == null) {\n      throw new BadRequestException(\"TOKEN_INVALID_OR_EXPIRED\");\n    }\n\n    const passwordHash = await bcrypt.hash(newPassword, 10);\n    await this.authRepository.updatePasswordHash(account.id, passwordHash);\n    await this.authRepository.clearResetToken(account.id);\n    await this.authRepository.updateRefreshTokenHash(account.id, null);\n\n    return { reset: true };\n  }\n\n  private assertAccountActive(account: BaseAuthAccount): void {\n    if (account.disabled) {\n      throw new UnauthorizedException(\"ACCOUNT_DISABLED\");\n    }\n\n    if (this.emailVerificationEnabled && !account.emailVerified) {\n      throw new UnauthorizedException(\"EMAIL_NOT_VERIFIED\");\n    }\n  }\n\n  private async issueTokens(account: BaseAuthAccount): Promise<AuthTokens> {\n    const payload = await this.hooks.buildJwtPayload(account);\n    const tokens = await this.tokenService.signTokens({\n      ...payload,\n      sub: account.id,\n    });\n\n    if (this.rotateRefreshToken) {\n      const refreshTokenHash = await this.tokenService.hashRefreshToken(\n        tokens.refreshToken,\n      );\n      await this.authRepository.updateRefreshTokenHash(\n        account.id,\n        refreshTokenHash,\n      );\n    }\n\n    await this.hooks.onAfterLogin?.(account);\n    return tokens;\n  }\n\n  private async sendVerificationEmail(account: BaseAuthAccount): Promise<void> {\n    const email = this.resolveAccountEmail(account);\n    if (email == null) return;\n\n    const rawToken = generateRawToken();\n    const tokenHash = hashToken(rawToken);\n    const expiresAt = expiresAtFromTtlMs(\n      this.options.emailVerificationTokenTtlMs ??\n        DEFAULT_EMAIL_VERIFICATION_TTL_MS,\n    );\n\n    await this.authRepository.setEmailVerificationToken(\n      account.id,\n      tokenHash,\n      expiresAt,\n    );\n    await this.hooks.sendEmail!(\"verify\", email, rawToken);\n  }\n\n  private resolveAccountEmail(account: BaseAuthAccount): string | null {\n    if (account.email != null && account.email.trim() !== \"\") {\n      return normalizeIdentifier(account.email);\n    }\n    return null;\n  }\n\n  private assertRegisterEmailWhenVerificationEnabled(input: RegisterInput): void {\n    if (!this.emailVerificationEnabled) return;\n\n    const email =\n      this.identifierField === \"email\"\n        ? resolveRegisterIdentifier(input, \"email\")\n        : input.email != null\n          ? normalizeIdentifier(input.email)\n          : null;\n\n    if (email == null || email.trim() === \"\") {\n      throw new BadRequestException(\n        \"email is required when emailVerification feature is enabled\",\n      );\n    }\n  }\n\n  private assertEmailHookWhenVerificationEnabled(): void {\n    if (this.emailVerificationEnabled && this.hooks.sendEmail == null) {\n      throw new BadRequestException(\n        \"emailVerification is enabled but AuthHooks.sendEmail is not implemented\",\n      );\n    }\n  }\n\n  private assertEmailHookWhenPasswordResetEnabled(): void {\n    if (this.passwordResetEnabled && this.hooks.sendEmail == null) {\n      throw new BadRequestException(\n        \"passwordReset is enabled but AuthHooks.sendEmail is not implemented\",\n      );\n    }\n  }\n\n  private assertEmailVerificationEnabled(): void {\n    if (!this.emailVerificationEnabled) {\n      throw new NotFoundException();\n    }\n  }\n\n  private assertPasswordResetEnabled(): void {\n    if (!this.passwordResetEnabled) {\n      throw new NotFoundException();\n    }\n  }\n\n  getIdentifierForAccount(account: BaseAuthAccount): string | undefined {\n    return readAccountIdentifier(account, this.identifierField);\n  }\n}\n","import { Inject, Injectable } from \"@nestjs/common\";\nimport { JwtService, type JwtSignOptions } from \"@nestjs/jwt\";\nimport * as bcrypt from \"bcryptjs\";\n\nimport { AUTH_MODULE_OPTIONS } from \"../constants/tokens\";\nimport type { AuthModuleOptions } from \"../interfaces/auth-config.interface\";\nimport type { AuthTokens } from \"../interfaces/auth-hooks.interface\";\nimport type { AuthJwtPayload } from \"../interfaces/jwt-payload.interface\";\n\n@Injectable()\nexport class TokenService {\n  constructor(\n    private readonly jwtService: JwtService,\n    @Inject(AUTH_MODULE_OPTIONS)\n    private readonly options: AuthModuleOptions,\n  ) {}\n\n  async signTokens(payload: AuthJwtPayload): Promise<AuthTokens> {\n    const accessExpiresIn = this.options.expiresIn ?? \"1h\";\n    const refreshExpiresIn = this.options.refreshExpiresIn ?? \"7d\";\n\n    const [accessToken, refreshToken] = await Promise.all([\n      this.jwtService.signAsync(\n        payload as Record<string, unknown>,\n        {\n          secret: this.options.secret,\n          expiresIn: accessExpiresIn,\n        } as JwtSignOptions,\n      ),\n      this.jwtService.signAsync(\n        payload as Record<string, unknown>,\n        {\n          secret: this.options.refreshSecret,\n          expiresIn: refreshExpiresIn,\n        } as JwtSignOptions,\n      ),\n    ]);\n\n    return { accessToken, refreshToken };\n  }\n\n  async verifyRefreshToken(refreshToken: string): Promise<AuthJwtPayload> {\n    return this.jwtService.verifyAsync<AuthJwtPayload>(refreshToken, {\n      secret: this.options.refreshSecret,\n    });\n  }\n\n  async hashRefreshToken(refreshToken: string): Promise<string> {\n    return bcrypt.hash(refreshToken, 10);\n  }\n\n  async compareRefreshToken(\n    refreshToken: string,\n    hash: string,\n  ): Promise<boolean> {\n    return bcrypt.compare(refreshToken, hash);\n  }\n}\n","import { Inject, Injectable, UnauthorizedException } from \"@nestjs/common\";\nimport { PassportStrategy } from \"@nestjs/passport\";\nimport { ExtractJwt, Strategy } from \"passport-jwt\";\n\nimport { AUTH_MODULE_OPTIONS, AUTH_REPOSITORY } from \"../constants/tokens\";\nimport type { AuthModuleOptions } from \"../interfaces/auth-config.interface\";\nimport type { IAuthRepository } from \"../interfaces/auth-repository.interface\";\nimport type { AuthJwtPayload } from \"../interfaces/jwt-payload.interface\";\n\n@Injectable()\nexport class JwtStrategy extends PassportStrategy(Strategy) {\n  constructor(\n    @Inject(AUTH_MODULE_OPTIONS)\n    options: AuthModuleOptions,\n    @Inject(AUTH_REPOSITORY)\n    private readonly authRepository: IAuthRepository,\n  ) {\n    super({\n      jwtFromRequest: ExtractJwt.fromAuthHeaderAsBearerToken(),\n      ignoreExpiration: false,\n      secretOrKey: options.secret,\n    });\n  }\n\n  async validate(payload: AuthJwtPayload): Promise<AuthJwtPayload> {\n    const account = await this.authRepository.findById(payload.sub);\n    if (account == null || account.disabled) {\n      throw new UnauthorizedException(\"Account not found or inactive\");\n    }\n    return payload;\n  }\n}\n","import { DynamicModule, Module, Provider } from \"@nestjs/common\";\nimport { JwtModule, type JwtModuleOptions } from \"@nestjs/jwt\";\nimport { PassportModule } from \"@nestjs/passport\";\n\nimport { AuthController } from \"./controllers/auth.controller\";\nimport { AUTH_HOOKS, AUTH_MODULE_OPTIONS } from \"./constants/tokens\";\nimport { DefaultAuthHooks } from \"./hooks/default-auth.hooks\";\nimport type {\n  AuthModuleAsyncOptions,\n  AuthModuleOptions,\n} from \"./interfaces/auth-config.interface\";\nimport { AuthService } from \"./services/auth.service\";\nimport { TokenService } from \"./services/token.service\";\nimport { JwtAuthGuard } from \"./guards/jwt-auth.guard\";\nimport { JwtStrategy } from \"./strategies/jwt.strategy\";\n\ntype ModuleImports = NonNullable<DynamicModule[\"imports\"]>;\n\nfunction createAuthProviders(options: AuthModuleOptions): Provider[] {\n  return [\n    {\n      provide: AUTH_MODULE_OPTIONS,\n      useValue: options,\n    },\n    {\n      provide: AUTH_HOOKS,\n      inject: [AUTH_MODULE_OPTIONS],\n      useFactory: (opts: AuthModuleOptions) => {\n        const HooksClass = opts.hooks ?? DefaultAuthHooks;\n        return new HooksClass();\n      },\n    },\n    AuthService,\n    TokenService,\n    JwtStrategy,\n    JwtAuthGuard,\n  ];\n}\n\nfunction createAuthImports(): ModuleImports {\n  return [\n    PassportModule.register({ defaultStrategy: \"jwt\" }),\n    JwtModule.registerAsync({\n      inject: [AUTH_MODULE_OPTIONS],\n      useFactory: (opts: AuthModuleOptions) =>\n        ({\n          secret: opts.secret,\n          signOptions: { expiresIn: opts.expiresIn ?? \"1h\" },\n        }) as JwtModuleOptions,\n    }),\n  ];\n}\n\nfunction mergeImports(userImports?: unknown): ModuleImports {\n  const merged: ModuleImports = [...createAuthImports()];\n  if (userImports != null) {\n    merged.unshift(...(userImports as ModuleImports));\n  }\n  return merged;\n}\n\n@Module({})\nexport class AuthModule {\n  static forRoot(options: AuthModuleOptions): DynamicModule {\n    return {\n      module: AuthModule,\n      global: true,\n      imports: createAuthImports(),\n      controllers: [AuthController],\n      providers: createAuthProviders(options),\n      exports: [\n        AUTH_MODULE_OPTIONS,\n        AUTH_HOOKS,\n        AuthService,\n        TokenService,\n        JwtAuthGuard,\n        JwtModule,\n        PassportModule,\n      ],\n    };\n  }\n\n  static forRootAsync(options: AuthModuleAsyncOptions): DynamicModule {\n    return {\n      module: AuthModule,\n      global: true,\n      imports: mergeImports(options.imports),\n      controllers: [AuthController],\n      providers: [\n        {\n          provide: AUTH_MODULE_OPTIONS,\n          inject: (options.inject ?? []) as never[],\n          useFactory: options.useFactory,\n        },\n        {\n          provide: AUTH_HOOKS,\n          inject: [AUTH_MODULE_OPTIONS],\n          useFactory: (opts: AuthModuleOptions) => {\n            const HooksClass = opts.hooks ?? DefaultAuthHooks;\n            return new HooksClass();\n          },\n        },\n        AuthService,\n        TokenService,\n        JwtStrategy,\n        JwtAuthGuard,\n      ],\n      exports: [\n        AUTH_MODULE_OPTIONS,\n        AUTH_HOOKS,\n        AuthService,\n        TokenService,\n        JwtAuthGuard,\n        JwtModule,\n        PassportModule,\n      ],\n    };\n  }\n}\n","export class AuthTokensDto {\n  accessToken!: string;\n  refreshToken!: string;\n}\n","import { IsEmail } from \"class-validator\";\n\nexport class ForgotPasswordDto {\n  @IsEmail()\n  email!: string;\n}\n","import { IsNotEmpty, IsOptional, IsString, Length } from \"class-validator\";\n\nexport class LoginDto {\n  @IsOptional()\n  @IsString()\n  @Length(3, 255)\n  email?: string;\n\n  @IsOptional()\n  @IsString()\n  @Length(3, 50)\n  username?: string;\n\n  @IsString()\n  @IsNotEmpty()\n  @Length(8, 128)\n  password!: string;\n}\n","import { IsNotEmpty, IsString } from \"class-validator\";\n\nexport class RefreshTokenDto {\n  @IsString()\n  @IsNotEmpty()\n  refreshToken!: string;\n}\n","export class RegisterAckDto {\n  registered!: true;\n}\n","import { IsNotEmpty, IsOptional, IsString, Length, Matches } from \"class-validator\";\n\nexport class RegisterDto {\n  @IsOptional()\n  @IsString()\n  @Length(3, 255)\n  email?: string;\n\n  @IsOptional()\n  @IsString()\n  @Length(3, 50)\n  @Matches(/^[a-zA-Z0-9._-]+$/)\n  username?: string;\n\n  @IsString()\n  @IsNotEmpty()\n  @Length(8, 128)\n  password!: string;\n}\n","import { IsNotEmpty, IsString, Length } from \"class-validator\";\n\nexport class ResetPasswordDto {\n  @IsString()\n  @IsNotEmpty()\n  token!: string;\n\n  @IsString()\n  @IsNotEmpty()\n  @Length(8, 128)\n  newPassword!: string;\n}\n","import { IsNotEmpty, IsString } from \"class-validator\";\n\nexport class VerifyEmailDto {\n  @IsString()\n  @IsNotEmpty()\n  token!: string;\n}\n"]}

package/dist/mongo/index.cjs

@@ -0,0 +1,256 @@
+'use strict';
+
+var common = require('@nestjs/common');
+var mongoose = require('@nestjs/mongoose');
+var mongoose$1 = require('mongoose');
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __decorateClass = (decorators, target, key, kind) => {
+  var result = kind > 1 ? void 0 : kind ? __getOwnPropDesc(target, key) : target;
+  for (var i = decorators.length - 1, decorator; i >= 0; i--)
+    if (decorator = decorators[i])
+      result = (kind ? decorator(target, key, result) : decorator(result)) || result;
+  if (kind && result) __defProp(target, key, result);
+  return result;
+};
+
+// src/constants/tokens.ts
+var AUTH_MODULE_OPTIONS = /* @__PURE__ */ Symbol("AUTH_MODULE_OPTIONS");
+var AUTH_REPOSITORY = /* @__PURE__ */ Symbol("AUTH_REPOSITORY");
+
+// src/utils/identifier.util.ts
+function normalizeIdentifier(value) {
+  return value.trim().toLowerCase();
+}
+function resolveRegisterIdentifier(input, field) {
+  const value = field === "email" ? input.email : input.username;
+  if (value == null || value.trim() === "") {
+    throw new Error(`Register input requires ${field}`);
+  }
+  return normalizeIdentifier(value);
+}
+
+// src/mongo/mongo-auth.repository.ts
+function toAccount(doc) {
+  return {
+    id: doc._id.toString(),
+    ...doc.email != null ? { email: doc.email } : {},
+    ...doc.username != null ? { username: doc.username } : {},
+    emailVerified: doc.emailVerified,
+    disabled: doc.disabled,
+    createdAt: doc.createdAt,
+    updatedAt: doc.updatedAt
+  };
+}
+function toAccountWithSecrets(doc) {
+  return {
+    ...toAccount(doc),
+    passwordHash: doc.passwordHash,
+    refreshTokenHash: doc.refreshTokenHash ?? null
+  };
+}
+exports.MongoAuthRepository = class MongoAuthRepository {
+  constructor(authModel, identifierField = "email") {
+    this.authModel = authModel;
+    this.identifierField = identifierField;
+  }
+  async create(data) {
+    const identifier = resolveRegisterIdentifier(
+      data,
+      this.identifierField
+    );
+    const created = new this.authModel({
+      email: this.identifierField === "email" ? identifier : data.email != null ? normalizeIdentifier(data.email) : void 0,
+      username: this.identifierField === "username" ? identifier : data.username != null ? normalizeIdentifier(data.username) : void 0,
+      passwordHash: data.passwordHash,
+      emailVerified: data.emailVerified ?? false,
+      disabled: false
+    });
+    const saved = await created.save();
+    return toAccount(saved);
+  }
+  async findByEmail(email) {
+    const doc = await this.authModel.findOne({ email: normalizeIdentifier(email) }).exec();
+    return doc != null ? toAccount(doc) : null;
+  }
+  async findByIdentifier(identifier) {
+    const doc = await this.authModel.findOne(this.identifierQuery(identifier)).exec();
+    return doc != null ? toAccount(doc) : null;
+  }
+  async findByIdentifierWithSecrets(identifier) {
+    const doc = await this.authModel.findOne(this.identifierQuery(identifier)).select("+passwordHash +refreshTokenHash").exec();
+    return doc != null ? toAccountWithSecrets(doc) : null;
+  }
+  async findById(id) {
+    if (!mongoose$1.Types.ObjectId.isValid(id)) return null;
+    const doc = await this.authModel.findById(id).exec();
+    return doc != null ? toAccount(doc) : null;
+  }
+  async findByIdWithSecrets(id) {
+    if (!mongoose$1.Types.ObjectId.isValid(id)) return null;
+    const doc = await this.authModel.findById(id).select("+passwordHash +refreshTokenHash").exec();
+    return doc != null ? toAccountWithSecrets(doc) : null;
+  }
+  async updateRefreshTokenHash(id, hash) {
+    if (!mongoose$1.Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne({ _id: id }, { $set: { refreshTokenHash: hash } }).exec();
+  }
+  async updatePasswordHash(id, passwordHash) {
+    if (!mongoose$1.Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne({ _id: id }, { $set: { passwordHash } }).exec();
+  }
+  async setEmailVerificationToken(id, tokenHash, expiresAt) {
+    if (!mongoose$1.Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne(
+      { _id: id },
+      {
+        $set: {
+          emailVerificationTokenHash: tokenHash,
+          emailVerificationExpiresAt: expiresAt
+        }
+      }
+    ).exec();
+  }
+  async findByEmailVerificationTokenHash(tokenHash) {
+    const doc = await this.authModel.findOne({
+      emailVerificationTokenHash: tokenHash,
+      emailVerificationExpiresAt: { $gt: /* @__PURE__ */ new Date() }
+    }).select("+emailVerificationTokenHash").exec();
+    return doc != null ? toAccount(doc) : null;
+  }
+  async markEmailVerified(id) {
+    if (!mongoose$1.Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne(
+      { _id: id },
+      {
+        $set: { emailVerified: true },
+        $unset: {
+          emailVerificationTokenHash: "",
+          emailVerificationExpiresAt: ""
+        }
+      }
+    ).exec();
+  }
+  async setResetToken(id, tokenHash, expiresAt) {
+    if (!mongoose$1.Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne(
+      { _id: id },
+      { $set: { resetTokenHash: tokenHash, resetTokenExpiresAt: expiresAt } }
+    ).exec();
+  }
+  async findByResetTokenHash(tokenHash) {
+    const doc = await this.authModel.findOne({
+      resetTokenHash: tokenHash,
+      resetTokenExpiresAt: { $gt: /* @__PURE__ */ new Date() }
+    }).select("+passwordHash +resetTokenHash").exec();
+    return doc != null ? toAccountWithSecrets(doc) : null;
+  }
+  async clearResetToken(id) {
+    if (!mongoose$1.Types.ObjectId.isValid(id)) return;
+    await this.authModel.updateOne(
+      { _id: id },
+      { $unset: { resetTokenHash: "", resetTokenExpiresAt: "" } }
+    ).exec();
+  }
+  identifierQuery(identifier) {
+    const normalized = normalizeIdentifier(identifier);
+    return this.identifierField === "email" ? { email: normalized } : { username: normalized };
+  }
+};
+exports.MongoAuthRepository = __decorateClass([
+  common.Injectable()
+], exports.MongoAuthRepository);
+var BASE_AUTH_ACCOUNT_MODEL = "AuthAccount";
+exports.BaseAuthAccountSchema = class BaseAuthAccountSchema {
+};
+__decorateClass([
+  mongoose.Prop({ required: false, trim: true, lowercase: true, index: true })
+], exports.BaseAuthAccountSchema.prototype, "email", 2);
+__decorateClass([
+  mongoose.Prop({ required: false, trim: true, lowercase: true, index: true })
+], exports.BaseAuthAccountSchema.prototype, "username", 2);
+__decorateClass([
+  mongoose.Prop({ required: true, select: false })
+], exports.BaseAuthAccountSchema.prototype, "passwordHash", 2);
+__decorateClass([
+  mongoose.Prop({ required: false, select: false })
+], exports.BaseAuthAccountSchema.prototype, "refreshTokenHash", 2);
+__decorateClass([
+  mongoose.Prop({ type: Boolean, default: false })
+], exports.BaseAuthAccountSchema.prototype, "emailVerified", 2);
+__decorateClass([
+  mongoose.Prop({ type: Boolean, default: false })
+], exports.BaseAuthAccountSchema.prototype, "disabled", 2);
+__decorateClass([
+  mongoose.Prop({ required: false, select: false })
+], exports.BaseAuthAccountSchema.prototype, "emailVerificationTokenHash", 2);
+__decorateClass([
+  mongoose.Prop({ required: false })
+], exports.BaseAuthAccountSchema.prototype, "emailVerificationExpiresAt", 2);
+__decorateClass([
+  mongoose.Prop({ required: false, select: false })
+], exports.BaseAuthAccountSchema.prototype, "resetTokenHash", 2);
+__decorateClass([
+  mongoose.Prop({ required: false })
+], exports.BaseAuthAccountSchema.prototype, "resetTokenExpiresAt", 2);
+exports.BaseAuthAccountSchema = __decorateClass([
+  mongoose.Schema({
+    timestamps: true,
+    collection: "auth_accounts"
+  })
+], exports.BaseAuthAccountSchema);
+var baseAuthAccountSchema = mongoose.SchemaFactory.createForClass(exports.BaseAuthAccountSchema);
+baseAuthAccountSchema.index(
+  { email: 1 },
+  {
+    unique: true,
+    partialFilterExpression: { email: { $type: "string" } }
+  }
+);
+baseAuthAccountSchema.index(
+  { username: 1 },
+  {
+    unique: true,
+    partialFilterExpression: { username: { $type: "string" } }
+  }
+);
+
+// src/mongo/mongo-auth.module.ts
+exports.MongoAuthModule = class MongoAuthModule {
+  static forFeature(options) {
+    const name = options?.name ?? BASE_AUTH_ACCOUNT_MODEL;
+    const schema = options?.schema ?? baseAuthAccountSchema;
+    const identifierField = options?.identifierField ?? "email";
+    return {
+      module: exports.MongoAuthModule,
+      imports: [mongoose.MongooseModule.forFeature([{ name, schema }])],
+      providers: [
+        {
+          provide: exports.MongoAuthRepository,
+          useFactory: (model, authOptions) => new exports.MongoAuthRepository(
+            model,
+            authOptions?.identifierField ?? identifierField
+          ),
+          inject: [
+            mongoose.getModelToken(name),
+            { token: AUTH_MODULE_OPTIONS, optional: true }
+          ]
+        },
+        {
+          provide: AUTH_REPOSITORY,
+          useExisting: exports.MongoAuthRepository
+        }
+      ],
+      exports: [AUTH_REPOSITORY, mongoose.MongooseModule]
+    };
+  }
+};
+exports.MongoAuthModule = __decorateClass([
+  common.Module({})
+], exports.MongoAuthModule);
+
+exports.BASE_AUTH_ACCOUNT_MODEL = BASE_AUTH_ACCOUNT_MODEL;
+exports.baseAuthAccountSchema = baseAuthAccountSchema;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/mongo/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/constants/tokens.ts","../../src/utils/identifier.util.ts","../../src/mongo/mongo-auth.repository.ts","../../src/mongo/schemas/base-auth-account.schema.ts","../../src/mongo/mongo-auth.module.ts"],"names":["MongoAuthRepository","Types","Injectable","BaseAuthAccountSchema","Prop","Schema","SchemaFactory","MongoAuthModule","MongooseModule","getModelToken","Module"],"mappings":";;;;;;;;;;;;;;;;;;AAAO,IAAM,mBAAA,0BAA6B,qBAAqB,CAAA;AAExD,IAAM,eAAA,0BAAyB,iBAAiB,CAAA;;;ACChD,SAAS,oBAAoB,KAAA,EAAuB;AACzD,EAAA,OAAO,KAAA,CAAM,IAAA,EAAK,CAAE,WAAA,EAAY;AAClC;AAEO,SAAS,yBAAA,CACd,OACA,KAAA,EACQ;AACR,EAAA,MAAM,KAAA,GAAQ,KAAA,KAAU,OAAA,GAAU,KAAA,CAAM,QAAQ,KAAA,CAAM,QAAA;AACtD,EAAA,IAAI,KAAA,IAAS,IAAA,IAAQ,KAAA,CAAM,IAAA,OAAW,EAAA,EAAI;AACxC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,KAAK,CAAA,CAAE,CAAA;AAAA,EACpD;AACA,EAAA,OAAO,oBAAoB,KAAK,CAAA;AAClC;;;ACEA,SAAS,UAAU,GAAA,EAA+C;AAChE,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,GAAA,CAAI,GAAA,CAAI,QAAA,EAAS;AAAA,IACrB,GAAI,IAAI,KAAA,IAAS,IAAA,GAAO,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAC;AAAA,IAChD,GAAI,IAAI,QAAA,IAAY,IAAA,GAAO,EAAE,QAAA,EAAU,GAAA,CAAI,QAAA,EAAS,GAAI,EAAC;AAAA,IACzD,eAAe,GAAA,CAAI,aAAA;AAAA,IACnB,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,WAAW,GAAA,CAAI,SAAA;AAAA,IACf,WAAW,GAAA,CAAI;AAAA,GACjB;AACF;AAEA,SAAS,qBACP,GAAA,EACwB;AACxB,EAAA,OAAO;AAAA,IACL,GAAG,UAAU,GAAG,CAAA;AAAA,IAChB,cAAc,GAAA,CAAI,YAAA;AAAA,IAClB,gBAAA,EAAkB,IAAI,gBAAA,IAAoB;AAAA,GAC5C;AACF;AAGaA,8BAAN,yBAAA,CAAqD;AAAA,EAC1D,WAAA,CACmB,SAAA,EACA,eAAA,GAAuC,OAAA,EACxD;AAFiB,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AACA,IAAA,IAAA,CAAA,eAAA,GAAA,eAAA;AAAA,EAChB;AAAA,EAEH,MAAM,OAAO,IAAA,EAAmD;AAC9D,IAAA,MAAM,UAAA,GAAa,yBAAA;AAAA,MACjB,IAAA;AAAA,MACA,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,OAAA,GAAU,IAAI,IAAA,CAAK,SAAA,CAAU;AAAA,MACjC,KAAA,EACE,IAAA,CAAK,eAAA,KAAoB,OAAA,GACrB,UAAA,GACA,IAAA,CAAK,KAAA,IAAS,IAAA,GACZ,mBAAA,CAAoB,IAAA,CAAK,KAAK,CAAA,GAC9B,MAAA;AAAA,MACR,QAAA,EACE,IAAA,CAAK,eAAA,KAAoB,UAAA,GACrB,UAAA,GACA,IAAA,CAAK,QAAA,IAAY,IAAA,GACf,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,GACjC,MAAA;AAAA,MACR,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,aAAA,EAAe,KAAK,aAAA,IAAiB,KAAA;AAAA,MACrC,QAAA,EAAU;AAAA,KACX,CAAA;AAED,IAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,IAAA,EAAK;AACjC,IAAA,OAAO,UAAU,KAAK,CAAA;AAAA,EACxB;AAAA,EAEA,MAAM,YAAY,KAAA,EAAgD;AAChE,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,OAAA,CAAQ,EAAE,KAAA,EAAO,mBAAA,CAAoB,KAAK,CAAA,EAAG,CAAA,CAC7C,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,SAAA,CAAU,GAAG,CAAA,GAAI,IAAA;AAAA,EACxC;AAAA,EAEA,MAAM,iBAAiB,UAAA,EAAqD;AAC1E,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,OAAA,CAAQ,KAAK,eAAA,CAAgB,UAAU,CAAC,CAAA,CACxC,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,SAAA,CAAU,GAAG,CAAA,GAAI,IAAA;AAAA,EACxC;AAAA,EAEA,MAAM,4BACJ,UAAA,EACwC;AACxC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,OAAA,CAAQ,IAAA,CAAK,eAAA,CAAgB,UAAU,CAAC,CAAA,CACxC,MAAA,CAAO,iCAAiC,EACxC,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,oBAAA,CAAqB,GAAG,CAAA,GAAI,IAAA;AAAA,EACnD;AAAA,EAEA,MAAM,SAAS,EAAA,EAA6C;AAC1D,IAAA,IAAI,CAACC,gBAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,GAAG,OAAO,IAAA;AACxC,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,UAAU,QAAA,CAAS,EAAE,EAAE,IAAA,EAAK;AACnD,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,SAAA,CAAU,GAAG,CAAA,GAAI,IAAA;AAAA,EACxC;AAAA,EAEA,MAAM,oBAAoB,EAAA,EAAoD;AAC5E,IAAA,IAAI,CAACA,gBAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,GAAG,OAAO,IAAA;AACxC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,QAAA,CAAS,EAAE,CAAA,CACX,MAAA,CAAO,iCAAiC,CAAA,CACxC,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,oBAAA,CAAqB,GAAG,CAAA,GAAI,IAAA;AAAA,EACnD;AAAA,EAEA,MAAM,sBAAA,CACJ,EAAA,EACA,IAAA,EACe;AACf,IAAA,IAAI,CAACA,gBAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,IAAA,CAAK,SAAA,CACR,SAAA,CAAU,EAAE,KAAK,EAAA,EAAG,EAAG,EAAE,IAAA,EAAM,EAAE,gBAAA,EAAkB,IAAA,EAAK,EAAG,EAC3D,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,kBAAA,CAAmB,EAAA,EAAY,YAAA,EAAqC;AACxE,IAAA,IAAI,CAACA,gBAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,IAAA,CAAK,SAAA,CACR,SAAA,CAAU,EAAE,KAAK,EAAA,EAAG,EAAG,EAAE,IAAA,EAAM,EAAE,YAAA,EAAa,EAAG,EACjD,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,yBAAA,CACJ,EAAA,EACA,SAAA,EACA,SAAA,EACe;AACf,IAAA,IAAI,CAACA,gBAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,KAAK,SAAA,CACR,SAAA;AAAA,MACC,EAAE,KAAK,EAAA,EAAG;AAAA,MACV;AAAA,QACE,IAAA,EAAM;AAAA,UACJ,0BAAA,EAA4B,SAAA;AAAA,UAC5B,0BAAA,EAA4B;AAAA;AAC9B;AACF,MAED,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,iCACJ,SAAA,EACiC;AACjC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,OAAA,CAAQ;AAAA,MACP,0BAAA,EAA4B,SAAA;AAAA,MAC5B,0BAAA,EAA4B,EAAE,GAAA,kBAAK,IAAI,MAAK;AAAE,KAC/C,CAAA,CACA,MAAA,CAAO,6BAA6B,EACpC,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,SAAA,CAAU,GAAG,CAAA,GAAI,IAAA;AAAA,EACxC;AAAA,EAEA,MAAM,kBAAkB,EAAA,EAA2B;AACjD,IAAA,IAAI,CAACA,gBAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,KAAK,SAAA,CACR,SAAA;AAAA,MACC,EAAE,KAAK,EAAA,EAAG;AAAA,MACV;AAAA,QACE,IAAA,EAAM,EAAE,aAAA,EAAe,IAAA,EAAK;AAAA,QAC5B,MAAA,EAAQ;AAAA,UACN,0BAAA,EAA4B,EAAA;AAAA,UAC5B,0BAAA,EAA4B;AAAA;AAC9B;AACF,MAED,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,aAAA,CACJ,EAAA,EACA,SAAA,EACA,SAAA,EACe;AACf,IAAA,IAAI,CAACA,gBAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,KAAK,SAAA,CACR,SAAA;AAAA,MACC,EAAE,KAAK,EAAA,EAAG;AAAA,MACV,EAAE,IAAA,EAAM,EAAE,gBAAgB,SAAA,EAAW,mBAAA,EAAqB,WAAU;AAAE,MAEvE,IAAA,EAAK;AAAA,EACV;AAAA,EAEA,MAAM,qBACJ,SAAA,EACwC;AACxC,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,SAAA,CACpB,OAAA,CAAQ;AAAA,MACP,cAAA,EAAgB,SAAA;AAAA,MAChB,mBAAA,EAAqB,EAAE,GAAA,kBAAK,IAAI,MAAK;AAAE,KACxC,CAAA,CACA,MAAA,CAAO,+BAA+B,EACtC,IAAA,EAAK;AACR,IAAA,OAAO,GAAA,IAAO,IAAA,GAAO,oBAAA,CAAqB,GAAG,CAAA,GAAI,IAAA;AAAA,EACnD;AAAA,EAEA,MAAM,gBAAgB,EAAA,EAA2B;AAC/C,IAAA,IAAI,CAACA,gBAAA,CAAM,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AACjC,IAAA,MAAM,KAAK,SAAA,CACR,SAAA;AAAA,MACC,EAAE,KAAK,EAAA,EAAG;AAAA,MACV,EAAE,MAAA,EAAQ,EAAE,gBAAgB,EAAA,EAAI,mBAAA,EAAqB,IAAG;AAAE,MAE3D,IAAA,EAAK;AAAA,EACV;AAAA,EAEQ,gBAAgB,UAAA,EAAoB;AAC1C,IAAA,MAAM,UAAA,GAAa,oBAAoB,UAAU,CAAA;AACjD,IAAA,OAAO,IAAA,CAAK,oBAAoB,OAAA,GAC5B,EAAE,OAAO,UAAA,EAAW,GACpB,EAAE,QAAA,EAAU,UAAA,EAAW;AAAA,EAC7B;AACF;AArLaD,2BAAA,GAAN,eAAA,CAAA;AAAA,EADNE,iBAAA;AAAW,CAAA,EACCF,2BAAA,CAAA;ACtCN,IAAM,uBAAA,GAA0B;AAM1BG,gCAAN,2BAAA,CAA4B;AAiCnC;AA/BE,eAAA,CAAA;AAAA,EADCC,aAAA,CAAK,EAAE,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,MAAM,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM;AAAA,CAAA,EADxDD,6BAAA,CAEX,SAAA,EAAA,OAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADCC,aAAA,CAAK,EAAE,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,MAAM,SAAA,EAAW,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM;AAAA,CAAA,EAJxDD,6BAAA,CAKX,SAAA,EAAA,UAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADCC,cAAK,EAAE,QAAA,EAAU,IAAA,EAAM,MAAA,EAAQ,OAAO;AAAA,CAAA,EAP5BD,6BAAA,CAQX,SAAA,EAAA,cAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADCC,cAAK,EAAE,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,OAAO;AAAA,CAAA,EAV7BD,6BAAA,CAWX,SAAA,EAAA,kBAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADCC,cAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,OAAO;AAAA,CAAA,EAb5BD,6BAAA,CAcX,SAAA,EAAA,eAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADCC,cAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,OAAO;AAAA,CAAA,EAhB5BD,6BAAA,CAiBX,SAAA,EAAA,UAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADCC,cAAK,EAAE,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,OAAO;AAAA,CAAA,EAnB7BD,6BAAA,CAoBX,SAAA,EAAA,4BAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADCC,aAAA,CAAK,EAAE,QAAA,EAAU,KAAA,EAAO;AAAA,CAAA,EAtBdD,6BAAA,CAuBX,SAAA,EAAA,4BAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADCC,cAAK,EAAE,QAAA,EAAU,KAAA,EAAO,MAAA,EAAQ,OAAO;AAAA,CAAA,EAzB7BD,6BAAA,CA0BX,SAAA,EAAA,gBAAA,EAAA,CAAA,CAAA;AAGA,eAAA,CAAA;AAAA,EADCC,aAAA,CAAK,EAAE,QAAA,EAAU,KAAA,EAAO;AAAA,CAAA,EA5BdD,6BAAA,CA6BX,SAAA,EAAA,qBAAA,EAAA,CAAA,CAAA;AA7BWA,6BAAA,GAAN,eAAA,CAAA;AAAA,EAJNE,eAAA,CAAO;AAAA,IACN,UAAA,EAAY,IAAA;AAAA,IACZ,UAAA,EAAY;AAAA,GACb;AAAA,CAAA,EACYF,6BAAA,CAAA;AAqCN,IAAM,qBAAA,GACXG,sBAAA,CAAc,cAAA,CAAeH,6BAAqB;AAEpD,qBAAA,CAAsB,KAAA;AAAA,EACpB,EAAE,OAAO,CAAA,EAAE;AAAA,EACX;AAAA,IACE,MAAA,EAAQ,IAAA;AAAA,IACR,yBAAyB,EAAE,KAAA,EAAO,EAAE,KAAA,EAAO,UAAS;AAAE;AAE1D,CAAA;AAEA,qBAAA,CAAsB,KAAA;AAAA,EACpB,EAAE,UAAU,CAAA,EAAE;AAAA,EACd;AAAA,IACE,MAAA,EAAQ,IAAA;AAAA,IACR,yBAAyB,EAAE,QAAA,EAAU,EAAE,KAAA,EAAO,UAAS;AAAE;AAE7D,CAAA;;;ACtCaI,0BAAN,qBAAA,CAAsB;AAAA,EAC3B,OAAO,WAAW,OAAA,EAAkD;AAClE,IAAA,MAAM,IAAA,GAAO,SAAS,IAAA,IAAQ,uBAAA;AAC9B,IAAA,MAAM,MAAA,GAAS,SAAS,MAAA,IAAU,qBAAA;AAClC,IAAA,MAAM,eAAA,GAAkB,SAAS,eAAA,IAAmB,OAAA;AAEpD,IAAA,OAAO;AAAA,MACL,MAAA,EAAQA,uBAAA;AAAA,MACR,OAAA,EAAS,CAACC,uBAAA,CAAe,UAAA,CAAW,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,CAAC,CAAC,CAAA;AAAA,MACvD,SAAA,EAAW;AAAA,QACT;AAAA,UACE,OAAA,EAASR,2BAAA;AAAA,UACT,UAAA,EAAY,CACV,KAAA,EACA,WAAA,KAEA,IAAIA,2BAAA;AAAA,YACF,KAAA;AAAA,YACA,aAAa,eAAA,IAAmB;AAAA,WAClC;AAAA,UACF,MAAA,EAAQ;AAAA,YACNS,uBAAc,IAAI,CAAA;AAAA,YAClB,EAAE,KAAA,EAAO,mBAAA,EAAqB,QAAA,EAAU,IAAA;AAAK;AAC/C,SACF;AAAA,QACA;AAAA,UACE,OAAA,EAAS,eAAA;AAAA,UACT,WAAA,EAAaT;AAAA;AACf,OACF;AAAA,MACA,OAAA,EAAS,CAAC,eAAA,EAAiBQ,uBAAc;AAAA,KAC3C;AAAA,EACF;AACF;AAjCaD,uBAAA,GAAN,eAAA,CAAA;AAAA,EADNG,aAAA,CAAO,EAAE;AAAA,CAAA,EACGH,uBAAA,CAAA","file":"index.cjs","sourcesContent":["export const AUTH_MODULE_OPTIONS = Symbol(\"AUTH_MODULE_OPTIONS\");\nexport const AUTH_HOOKS = Symbol(\"AUTH_HOOKS\");\nexport const AUTH_REPOSITORY = Symbol(\"AUTH_REPOSITORY\");\n","import type { AuthIdentifierField } from \"../interfaces/auth-config.interface\";\nimport type { BaseAuthAccount, RegisterInput } from \"../interfaces/auth-hooks.interface\";\n\nexport function normalizeIdentifier(value: string): string {\n  return value.trim().toLowerCase();\n}\n\nexport function resolveRegisterIdentifier(\n  input: RegisterInput,\n  field: AuthIdentifierField,\n): string {\n  const value = field === \"email\" ? input.email : input.username;\n  if (value == null || value.trim() === \"\") {\n    throw new Error(`Register input requires ${field}`);\n  }\n  return normalizeIdentifier(value);\n}\n\nexport function readAccountIdentifier(\n  account: BaseAuthAccount,\n  field: AuthIdentifierField,\n): string | undefined {\n  const value = field === \"email\" ? account.email : account.username;\n  return value != null ? normalizeIdentifier(value) : undefined;\n}\n","import { Injectable } from \"@nestjs/common\";\nimport { Types, type Model } from \"mongoose\";\n\nimport type { AuthIdentifierField } from \"../interfaces/auth-config.interface\";\nimport type {\n  AuthAccountWithSecrets,\n  BaseAuthAccount,\n} from \"../interfaces/auth-hooks.interface\";\nimport type {\n  CreateAccountData,\n  IAuthRepository,\n} from \"../interfaces/auth-repository.interface\";\nimport {\n  normalizeIdentifier,\n  resolveRegisterIdentifier,\n} from \"../utils/identifier.util\";\nimport type { BaseAuthAccountDocument } from \"./schemas/base-auth-account.schema\";\n\nfunction toAccount(doc: BaseAuthAccountDocument): BaseAuthAccount {\n  return {\n    id: doc._id.toString(),\n    ...(doc.email != null ? { email: doc.email } : {}),\n    ...(doc.username != null ? { username: doc.username } : {}),\n    emailVerified: doc.emailVerified,\n    disabled: doc.disabled,\n    createdAt: doc.createdAt,\n    updatedAt: doc.updatedAt,\n  };\n}\n\nfunction toAccountWithSecrets(\n  doc: BaseAuthAccountDocument,\n): AuthAccountWithSecrets {\n  return {\n    ...toAccount(doc),\n    passwordHash: doc.passwordHash,\n    refreshTokenHash: doc.refreshTokenHash ?? null,\n  };\n}\n\n@Injectable()\nexport class MongoAuthRepository implements IAuthRepository {\n  constructor(\n    private readonly authModel: Model<BaseAuthAccountDocument>,\n    private readonly identifierField: AuthIdentifierField = \"email\",\n  ) {}\n\n  async create(data: CreateAccountData): Promise<BaseAuthAccount> {\n    const identifier = resolveRegisterIdentifier(\n      data,\n      this.identifierField,\n    );\n\n    const created = new this.authModel({\n      email:\n        this.identifierField === \"email\"\n          ? identifier\n          : data.email != null\n            ? normalizeIdentifier(data.email)\n            : undefined,\n      username:\n        this.identifierField === \"username\"\n          ? identifier\n          : data.username != null\n            ? normalizeIdentifier(data.username)\n            : undefined,\n      passwordHash: data.passwordHash,\n      emailVerified: data.emailVerified ?? false,\n      disabled: false,\n    });\n\n    const saved = await created.save();\n    return toAccount(saved);\n  }\n\n  async findByEmail(email: string): Promise<BaseAuthAccount | null> {\n    const doc = await this.authModel\n      .findOne({ email: normalizeIdentifier(email) })\n      .exec();\n    return doc != null ? toAccount(doc) : null;\n  }\n\n  async findByIdentifier(identifier: string): Promise<BaseAuthAccount | null> {\n    const doc = await this.authModel\n      .findOne(this.identifierQuery(identifier))\n      .exec();\n    return doc != null ? toAccount(doc) : null;\n  }\n\n  async findByIdentifierWithSecrets(\n    identifier: string,\n  ): Promise<AuthAccountWithSecrets | null> {\n    const doc = await this.authModel\n      .findOne(this.identifierQuery(identifier))\n      .select(\"+passwordHash +refreshTokenHash\")\n      .exec();\n    return doc != null ? toAccountWithSecrets(doc) : null;\n  }\n\n  async findById(id: string): Promise<BaseAuthAccount | null> {\n    if (!Types.ObjectId.isValid(id)) return null;\n    const doc = await this.authModel.findById(id).exec();\n    return doc != null ? toAccount(doc) : null;\n  }\n\n  async findByIdWithSecrets(id: string): Promise<AuthAccountWithSecrets | null> {\n    if (!Types.ObjectId.isValid(id)) return null;\n    const doc = await this.authModel\n      .findById(id)\n      .select(\"+passwordHash +refreshTokenHash\")\n      .exec();\n    return doc != null ? toAccountWithSecrets(doc) : null;\n  }\n\n  async updateRefreshTokenHash(\n    id: string,\n    hash: string | null,\n  ): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne({ _id: id }, { $set: { refreshTokenHash: hash } })\n      .exec();\n  }\n\n  async updatePasswordHash(id: string, passwordHash: string): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne({ _id: id }, { $set: { passwordHash } })\n      .exec();\n  }\n\n  async setEmailVerificationToken(\n    id: string,\n    tokenHash: string,\n    expiresAt: Date,\n  ): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne(\n        { _id: id },\n        {\n          $set: {\n            emailVerificationTokenHash: tokenHash,\n            emailVerificationExpiresAt: expiresAt,\n          },\n        },\n      )\n      .exec();\n  }\n\n  async findByEmailVerificationTokenHash(\n    tokenHash: string,\n  ): Promise<BaseAuthAccount | null> {\n    const doc = await this.authModel\n      .findOne({\n        emailVerificationTokenHash: tokenHash,\n        emailVerificationExpiresAt: { $gt: new Date() },\n      })\n      .select(\"+emailVerificationTokenHash\")\n      .exec();\n    return doc != null ? toAccount(doc) : null;\n  }\n\n  async markEmailVerified(id: string): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne(\n        { _id: id },\n        {\n          $set: { emailVerified: true },\n          $unset: {\n            emailVerificationTokenHash: \"\",\n            emailVerificationExpiresAt: \"\",\n          },\n        },\n      )\n      .exec();\n  }\n\n  async setResetToken(\n    id: string,\n    tokenHash: string,\n    expiresAt: Date,\n  ): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne(\n        { _id: id },\n        { $set: { resetTokenHash: tokenHash, resetTokenExpiresAt: expiresAt } },\n      )\n      .exec();\n  }\n\n  async findByResetTokenHash(\n    tokenHash: string,\n  ): Promise<AuthAccountWithSecrets | null> {\n    const doc = await this.authModel\n      .findOne({\n        resetTokenHash: tokenHash,\n        resetTokenExpiresAt: { $gt: new Date() },\n      })\n      .select(\"+passwordHash +resetTokenHash\")\n      .exec();\n    return doc != null ? toAccountWithSecrets(doc) : null;\n  }\n\n  async clearResetToken(id: string): Promise<void> {\n    if (!Types.ObjectId.isValid(id)) return;\n    await this.authModel\n      .updateOne(\n        { _id: id },\n        { $unset: { resetTokenHash: \"\", resetTokenExpiresAt: \"\" } },\n      )\n      .exec();\n  }\n\n  private identifierQuery(identifier: string) {\n    const normalized = normalizeIdentifier(identifier);\n    return this.identifierField === \"email\"\n      ? { email: normalized }\n      : { username: normalized };\n  }\n}\n","import { Prop, Schema, SchemaFactory } from \"@nestjs/mongoose\";\nimport type { HydratedDocument } from \"mongoose\";\n\nexport const BASE_AUTH_ACCOUNT_MODEL = \"AuthAccount\";\n\n@Schema({\n  timestamps: true,\n  collection: \"auth_accounts\",\n})\nexport class BaseAuthAccountSchema {\n  @Prop({ required: false, trim: true, lowercase: true, index: true })\n  email?: string;\n\n  @Prop({ required: false, trim: true, lowercase: true, index: true })\n  username?: string;\n\n  @Prop({ required: true, select: false })\n  passwordHash!: string;\n\n  @Prop({ required: false, select: false })\n  refreshTokenHash?: string | null;\n\n  @Prop({ type: Boolean, default: false })\n  emailVerified!: boolean;\n\n  @Prop({ type: Boolean, default: false })\n  disabled!: boolean;\n\n  @Prop({ required: false, select: false })\n  emailVerificationTokenHash?: string;\n\n  @Prop({ required: false })\n  emailVerificationExpiresAt?: Date;\n\n  @Prop({ required: false, select: false })\n  resetTokenHash?: string;\n\n  @Prop({ required: false })\n  resetTokenExpiresAt?: Date;\n\n  createdAt!: Date;\n  updatedAt!: Date;\n}\n\nexport type BaseAuthAccountDocument = HydratedDocument<BaseAuthAccountSchema>;\n\nexport const baseAuthAccountSchema =\n  SchemaFactory.createForClass(BaseAuthAccountSchema);\n\nbaseAuthAccountSchema.index(\n  { email: 1 },\n  {\n    unique: true,\n    partialFilterExpression: { email: { $type: \"string\" } },\n  },\n);\n\nbaseAuthAccountSchema.index(\n  { username: 1 },\n  {\n    unique: true,\n    partialFilterExpression: { username: { $type: \"string\" } },\n  },\n);\n","import { DynamicModule, Module } from \"@nestjs/common\";\nimport { getModelToken } from \"@nestjs/mongoose\";\nimport { MongooseModule } from \"@nestjs/mongoose\";\nimport type { Model, Schema } from \"mongoose\";\n\nimport { AUTH_MODULE_OPTIONS, AUTH_REPOSITORY } from \"../constants/tokens\";\nimport type { AuthIdentifierField } from \"../interfaces/auth-config.interface\";\nimport type { AuthModuleOptions } from \"../interfaces/auth-config.interface\";\nimport { MongoAuthRepository } from \"./mongo-auth.repository\";\nimport {\n  BASE_AUTH_ACCOUNT_MODEL,\n  baseAuthAccountSchema,\n  type BaseAuthAccountDocument,\n} from \"./schemas/base-auth-account.schema\";\n\nexport interface MongoAuthFeatureOptions {\n  /** Mongoose model name. Default: `AuthAccount`. */\n  name?: string;\n  /** Custom schema (e.g. extended with orgId, roleId). Default: base auth schema. */\n  schema?: Schema;\n  /** Identifier field when AuthModule options are not yet available. Default: `email`. */\n  identifierField?: AuthIdentifierField;\n}\n\n@Module({})\nexport class MongoAuthModule {\n  static forFeature(options?: MongoAuthFeatureOptions): DynamicModule {\n    const name = options?.name ?? BASE_AUTH_ACCOUNT_MODEL;\n    const schema = options?.schema ?? baseAuthAccountSchema;\n    const identifierField = options?.identifierField ?? \"email\";\n\n    return {\n      module: MongoAuthModule,\n      imports: [MongooseModule.forFeature([{ name, schema }])],\n      providers: [\n        {\n          provide: MongoAuthRepository,\n          useFactory: (\n            model: Model<BaseAuthAccountDocument>,\n            authOptions?: AuthModuleOptions,\n          ) =>\n            new MongoAuthRepository(\n              model,\n              authOptions?.identifierField ?? identifierField,\n            ),\n          inject: [\n            getModelToken(name),\n            { token: AUTH_MODULE_OPTIONS, optional: true },\n          ],\n        },\n        {\n          provide: AUTH_REPOSITORY,\n          useExisting: MongoAuthRepository,\n        },\n      ],\n      exports: [AUTH_REPOSITORY, MongooseModule],\n    };\n  }\n}"]}

package/dist/mongo/index.d.cts

@@ -0,0 +1,65 @@
+import { DynamicModule } from '@nestjs/common';
+import * as mongoose from 'mongoose';
+import { Schema, HydratedDocument, Model } from 'mongoose';
+import { f as AuthIdentifierField, I as IAuthRepository, C as CreateAccountData, B as BaseAuthAccount, d as AuthAccountWithSecrets } from '../auth-repository.interface-BMlJc-98.cjs';
+
+interface MongoAuthFeatureOptions {
+    /** Mongoose model name. Default: `AuthAccount`. */
+    name?: string;
+    /** Custom schema (e.g. extended with orgId, roleId). Default: base auth schema. */
+    schema?: Schema;
+    /** Identifier field when AuthModule options are not yet available. Default: `email`. */
+    identifierField?: AuthIdentifierField;
+}
+declare class MongoAuthModule {
+    static forFeature(options?: MongoAuthFeatureOptions): DynamicModule;
+}
+
+declare const BASE_AUTH_ACCOUNT_MODEL = "AuthAccount";
+declare class BaseAuthAccountSchema {
+    email?: string;
+    username?: string;
+    passwordHash: string;
+    refreshTokenHash?: string | null;
+    emailVerified: boolean;
+    disabled: boolean;
+    emailVerificationTokenHash?: string;
+    emailVerificationExpiresAt?: Date;
+    resetTokenHash?: string;
+    resetTokenExpiresAt?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+}
+type BaseAuthAccountDocument = HydratedDocument<BaseAuthAccountSchema>;
+declare const baseAuthAccountSchema: mongoose.Schema<BaseAuthAccountSchema, mongoose.Model<BaseAuthAccountSchema, any, any, any, mongoose.Document<unknown, any, BaseAuthAccountSchema, any, {}> & BaseAuthAccountSchema & {
+    _id: mongoose.Types.ObjectId;
+} & {
+    __v: number;
+}, any>, {}, {}, {}, {}, mongoose.DefaultSchemaOptions, BaseAuthAccountSchema, mongoose.Document<unknown, {}, mongoose.FlatRecord<BaseAuthAccountSchema>, {}, mongoose.DefaultSchemaOptions> & mongoose.FlatRecord<BaseAuthAccountSchema> & {
+    _id: mongoose.Types.ObjectId;
+} & {
+    __v: number;
+}>;
+
+declare class MongoAuthRepository implements IAuthRepository {
+    private readonly authModel;
+    private readonly identifierField;
+    constructor(authModel: Model<BaseAuthAccountDocument>, identifierField?: AuthIdentifierField);
+    create(data: CreateAccountData): Promise<BaseAuthAccount>;
+    findByEmail(email: string): Promise<BaseAuthAccount | null>;
+    findByIdentifier(identifier: string): Promise<BaseAuthAccount | null>;
+    findByIdentifierWithSecrets(identifier: string): Promise<AuthAccountWithSecrets | null>;
+    findById(id: string): Promise<BaseAuthAccount | null>;
+    findByIdWithSecrets(id: string): Promise<AuthAccountWithSecrets | null>;
+    updateRefreshTokenHash(id: string, hash: string | null): Promise<void>;
+    updatePasswordHash(id: string, passwordHash: string): Promise<void>;
+    setEmailVerificationToken(id: string, tokenHash: string, expiresAt: Date): Promise<void>;
+    findByEmailVerificationTokenHash(tokenHash: string): Promise<BaseAuthAccount | null>;
+    markEmailVerified(id: string): Promise<void>;
+    setResetToken(id: string, tokenHash: string, expiresAt: Date): Promise<void>;
+    findByResetTokenHash(tokenHash: string): Promise<AuthAccountWithSecrets | null>;
+    clearResetToken(id: string): Promise<void>;
+    private identifierQuery;
+}
+
+export { BASE_AUTH_ACCOUNT_MODEL, BaseAuthAccountSchema, type MongoAuthFeatureOptions, MongoAuthModule, MongoAuthRepository, baseAuthAccountSchema };

package/dist/mongo/index.d.ts

@@ -0,0 +1,65 @@
+import { DynamicModule } from '@nestjs/common';
+import * as mongoose from 'mongoose';
+import { Schema, HydratedDocument, Model } from 'mongoose';
+import { f as AuthIdentifierField, I as IAuthRepository, C as CreateAccountData, B as BaseAuthAccount, d as AuthAccountWithSecrets } from '../auth-repository.interface-BMlJc-98.js';
+
+interface MongoAuthFeatureOptions {
+    /** Mongoose model name. Default: `AuthAccount`. */
+    name?: string;
+    /** Custom schema (e.g. extended with orgId, roleId). Default: base auth schema. */
+    schema?: Schema;
+    /** Identifier field when AuthModule options are not yet available. Default: `email`. */
+    identifierField?: AuthIdentifierField;
+}
+declare class MongoAuthModule {
+    static forFeature(options?: MongoAuthFeatureOptions): DynamicModule;
+}
+
+declare const BASE_AUTH_ACCOUNT_MODEL = "AuthAccount";
+declare class BaseAuthAccountSchema {
+    email?: string;
+    username?: string;
+    passwordHash: string;
+    refreshTokenHash?: string | null;
+    emailVerified: boolean;
+    disabled: boolean;
+    emailVerificationTokenHash?: string;
+    emailVerificationExpiresAt?: Date;
+    resetTokenHash?: string;
+    resetTokenExpiresAt?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+}
+type BaseAuthAccountDocument = HydratedDocument<BaseAuthAccountSchema>;
+declare const baseAuthAccountSchema: mongoose.Schema<BaseAuthAccountSchema, mongoose.Model<BaseAuthAccountSchema, any, any, any, mongoose.Document<unknown, any, BaseAuthAccountSchema, any, {}> & BaseAuthAccountSchema & {
+    _id: mongoose.Types.ObjectId;
+} & {
+    __v: number;
+}, any>, {}, {}, {}, {}, mongoose.DefaultSchemaOptions, BaseAuthAccountSchema, mongoose.Document<unknown, {}, mongoose.FlatRecord<BaseAuthAccountSchema>, {}, mongoose.DefaultSchemaOptions> & mongoose.FlatRecord<BaseAuthAccountSchema> & {
+    _id: mongoose.Types.ObjectId;
+} & {
+    __v: number;
+}>;
+
+declare class MongoAuthRepository implements IAuthRepository {
+    private readonly authModel;
+    private readonly identifierField;
+    constructor(authModel: Model<BaseAuthAccountDocument>, identifierField?: AuthIdentifierField);
+    create(data: CreateAccountData): Promise<BaseAuthAccount>;
+    findByEmail(email: string): Promise<BaseAuthAccount | null>;
+    findByIdentifier(identifier: string): Promise<BaseAuthAccount | null>;
+    findByIdentifierWithSecrets(identifier: string): Promise<AuthAccountWithSecrets | null>;
+    findById(id: string): Promise<BaseAuthAccount | null>;
+    findByIdWithSecrets(id: string): Promise<AuthAccountWithSecrets | null>;
+    updateRefreshTokenHash(id: string, hash: string | null): Promise<void>;
+    updatePasswordHash(id: string, passwordHash: string): Promise<void>;
+    setEmailVerificationToken(id: string, tokenHash: string, expiresAt: Date): Promise<void>;
+    findByEmailVerificationTokenHash(tokenHash: string): Promise<BaseAuthAccount | null>;
+    markEmailVerified(id: string): Promise<void>;
+    setResetToken(id: string, tokenHash: string, expiresAt: Date): Promise<void>;
+    findByResetTokenHash(tokenHash: string): Promise<AuthAccountWithSecrets | null>;
+    clearResetToken(id: string): Promise<void>;
+    private identifierQuery;
+}
+
+export { BASE_AUTH_ACCOUNT_MODEL, BaseAuthAccountSchema, type MongoAuthFeatureOptions, MongoAuthModule, MongoAuthRepository, baseAuthAccountSchema };