@breadstone/archipel-platform-authentication 0.0.7 → 0.0.9

package/src/{services/mfa → mfa}/channels/EmailOtpMfaChannel.js

@@ -5,9 +5,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.EmailOtpMfaChannel = void 0;
 const tslib_1 = require("tslib");
 const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_cryptography_1 = require("@breadstone/archipel-platform-cryptography");
 const common_1 = require("@nestjs/common");
 const node_crypto_1 = require("node:crypto");
-const MfaSubjectPort_1 = require("../../../contracts/MfaSubjectPort");
+const MfaSubjectPort_1 = require("../../contracts/MfaSubjectPort");
+const env_1 = require("../../env");
 const MfaState_1 = require("../MfaState");
 // #endregion
 let EmailOtpMfaChannel = EmailOtpMfaChannel_1 = class EmailOtpMfaChannel {
@@ -17,8 +19,8 @@ let EmailOtpMfaChannel = EmailOtpMfaChannel_1 = class EmailOtpMfaChannel {
         this._mfaSubject = mfaSubject;
         this._configService = configService;
         this._bcryptService = bcryptService;
-        this._ttlMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet('AUTH_MFA_EMAIL_CODE_TTL', '10m'));
-        this._minResendMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet('AUTH_MFA_EMAIL_MIN_RESEND', '30s'));
+        this._ttlMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet(env_1.AUTH_MFA_EMAIL_CODE_TTL.key, '10m'));
+        this._minResendMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet(env_1.AUTH_MFA_EMAIL_MIN_RESEND.key, '30s'));
     }
     async initSetup(userId, context) {
         const user = await this._mfaSubject.findById(userId);
@@ -147,6 +149,6 @@ let EmailOtpMfaChannel = EmailOtpMfaChannel_1 = class EmailOtpMfaChannel {
 exports.EmailOtpMfaChannel = EmailOtpMfaChannel;
 exports.EmailOtpMfaChannel = EmailOtpMfaChannel = EmailOtpMfaChannel_1 = tslib_1.__decorate([
     (0, common_1.Injectable)(),
-    tslib_1.__metadata("design:paramtypes", [MfaSubjectPort_1.MfaSubjectPort, archipel_platform_core_1.ConfigService, archipel_platform_core_1.BcryptService])
+    tslib_1.__metadata("design:paramtypes", [MfaSubjectPort_1.MfaSubjectPort, archipel_platform_core_1.ConfigService, archipel_platform_cryptography_1.BcryptService])
 ], EmailOtpMfaChannel);
 //# sourceMappingURL=EmailOtpMfaChannel.js.map

package/src/{services/mfa → mfa}/channels/PushMfaChannel.d.ts

@@ -1,6 +1,7 @@
-import { BcryptService, ConfigService } from '@breadstone/archipel-platform-core';
-import { MfaSubjectPort } from '../../../contracts/MfaSubjectPort';
-import { IMfaSetup } from '../../../models';
+import { ConfigService } from '@breadstone/archipel-platform-core';
+import { BcryptService } from '@breadstone/archipel-platform-cryptography';
+import { MfaSubjectPort } from '../../contracts/MfaSubjectPort';
+import { IMfaSetup } from '../../models';
 import { IMfaChannel } from '../IMfaChannel';
 import { IMfaSetupContext } from '../MfaState';
 /**

package/src/{services/mfa → mfa}/channels/PushMfaChannel.js

@@ -5,9 +5,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.PushMfaChannel = void 0;
 const tslib_1 = require("tslib");
 const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_cryptography_1 = require("@breadstone/archipel-platform-cryptography");
 const common_1 = require("@nestjs/common");
 const node_crypto_1 = require("node:crypto");
-const MfaSubjectPort_1 = require("../../../contracts/MfaSubjectPort");
+const MfaSubjectPort_1 = require("../../contracts/MfaSubjectPort");
+const env_1 = require("../../env");
 const MfaState_1 = require("../MfaState");
 // #endregion
 /**
@@ -24,8 +26,8 @@ let PushMfaChannel = PushMfaChannel_1 = class PushMfaChannel {
         this._mfaSubject = mfaSubject;
         this._configService = configService;
         this._bcryptService = bcryptService;
-        this._ttlMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet('AUTH_MFA_PUSH_CODE_TTL', '10m'));
-        this._minResendMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet('AUTH_MFA_PUSH_MIN_RESEND', '30s'));
+        this._ttlMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet(env_1.AUTH_MFA_PUSH_CODE_TTL.key, '10m'));
+        this._minResendMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet(env_1.AUTH_MFA_PUSH_MIN_RESEND.key, '30s'));
     }
     // #endregion
     // #region Methods
@@ -145,6 +147,6 @@ let PushMfaChannel = PushMfaChannel_1 = class PushMfaChannel {
 exports.PushMfaChannel = PushMfaChannel;
 exports.PushMfaChannel = PushMfaChannel = PushMfaChannel_1 = tslib_1.__decorate([
     (0, common_1.Injectable)(),
-    tslib_1.__metadata("design:paramtypes", [MfaSubjectPort_1.MfaSubjectPort, archipel_platform_core_1.ConfigService, archipel_platform_core_1.BcryptService])
+    tslib_1.__metadata("design:paramtypes", [MfaSubjectPort_1.MfaSubjectPort, archipel_platform_core_1.ConfigService, archipel_platform_cryptography_1.BcryptService])
 ], PushMfaChannel);
 //# sourceMappingURL=PushMfaChannel.js.map

package/src/{services/mfa → mfa}/channels/SmsMfaChannel.d.ts

@@ -1,6 +1,7 @@
-import { BcryptService, ConfigService } from '@breadstone/archipel-platform-core';
-import { MfaSubjectPort } from '../../../contracts/MfaSubjectPort';
-import { IMfaSetup } from '../../../models';
+import { ConfigService } from '@breadstone/archipel-platform-core';
+import { BcryptService } from '@breadstone/archipel-platform-cryptography';
+import { MfaSubjectPort } from '../../contracts/MfaSubjectPort';
+import { IMfaSetup } from '../../models';
 import { IMfaChannel } from '../IMfaChannel';
 import { IMfaSetupContext } from '../MfaState';
 export declare class SmsMfaChannel implements IMfaChannel {

package/src/{services/mfa → mfa}/channels/SmsMfaChannel.js

@@ -5,9 +5,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SmsMfaChannel = void 0;
 const tslib_1 = require("tslib");
 const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_cryptography_1 = require("@breadstone/archipel-platform-cryptography");
 const common_1 = require("@nestjs/common");
 const node_crypto_1 = require("node:crypto");
-const MfaSubjectPort_1 = require("../../../contracts/MfaSubjectPort");
+const MfaSubjectPort_1 = require("../../contracts/MfaSubjectPort");
+const env_1 = require("../../env");
 const MfaState_1 = require("../MfaState");
 // #endregion
 let SmsMfaChannel = SmsMfaChannel_1 = class SmsMfaChannel {
@@ -20,8 +22,8 @@ let SmsMfaChannel = SmsMfaChannel_1 = class SmsMfaChannel {
         this._mfaSubject = mfaSubject;
         this._configService = configService;
         this._bcryptService = bcryptService;
-        this._ttlMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet('AUTH_MFA_SMS_CODE_TTL', '10m'));
-        this._minResendMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet('AUTH_MFA_SMS_MIN_RESEND', '30s'));
+        this._ttlMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet(env_1.AUTH_MFA_SMS_CODE_TTL.key, '10m'));
+        this._minResendMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(this._configService.tryGet(env_1.AUTH_MFA_SMS_MIN_RESEND.key, '30s'));
     }
     // #endregion
     // #region Methods
@@ -153,6 +155,6 @@ let SmsMfaChannel = SmsMfaChannel_1 = class SmsMfaChannel {
 exports.SmsMfaChannel = SmsMfaChannel;
 exports.SmsMfaChannel = SmsMfaChannel = SmsMfaChannel_1 = tslib_1.__decorate([
     (0, common_1.Injectable)(),
-    tslib_1.__metadata("design:paramtypes", [MfaSubjectPort_1.MfaSubjectPort, archipel_platform_core_1.ConfigService, archipel_platform_core_1.BcryptService])
+    tslib_1.__metadata("design:paramtypes", [MfaSubjectPort_1.MfaSubjectPort, archipel_platform_core_1.ConfigService, archipel_platform_cryptography_1.BcryptService])
 ], SmsMfaChannel);
 //# sourceMappingURL=SmsMfaChannel.js.map

package/src/{services/mfa → mfa}/channels/TotpMfaChannel.d.ts

@@ -1,6 +1,7 @@
-import { ConfigService, IOtpService } from '@breadstone/archipel-platform-core';
-import { MfaSubjectPort } from '../../../contracts/MfaSubjectPort';
-import { IMfaSetup } from '../../../models';
+import { ConfigService } from '@breadstone/archipel-platform-core';
+import { IOtpService } from '@breadstone/archipel-platform-cryptography/otp';
+import { MfaSubjectPort } from '../../contracts/MfaSubjectPort';
+import { IMfaSetup } from '../../models';
 import { IMfaChannel } from '../IMfaChannel';
 import { MfaEncryptionService } from '../MfaEncryptionService';
 import { IMfaSetupContext } from '../MfaState';

package/src/{services/mfa → mfa}/channels/TotpMfaChannel.js

@@ -4,8 +4,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.TotpMfaChannel = void 0;
 const tslib_1 = require("tslib");
 const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const otp_1 = require("@breadstone/archipel-platform-cryptography/otp");
 const common_1 = require("@nestjs/common");
-const MfaSubjectPort_1 = require("../../../contracts/MfaSubjectPort");
+const MfaSubjectPort_1 = require("../../contracts/MfaSubjectPort");
+const env_1 = require("../../env");
 const MfaEncryptionService_1 = require("../MfaEncryptionService");
 const MfaState_1 = require("../MfaState");
 // #endregion
@@ -19,7 +21,7 @@ let TotpMfaChannel = class TotpMfaChannel {
         this._configService = configService;
         this._encryptionService = encryptionService;
         this._otpService = otpService;
-        this._issuer = this._configService.tryGet('AUTH_MFA_ISSUER', 'Strivio');
+        this._issuer = this._configService.get(env_1.AUTH_MFA_ISSUER.key);
     }
     // #endregion
     // #region Methods
@@ -92,7 +94,7 @@ let TotpMfaChannel = class TotpMfaChannel {
 exports.TotpMfaChannel = TotpMfaChannel;
 exports.TotpMfaChannel = TotpMfaChannel = tslib_1.__decorate([
     (0, common_1.Injectable)(),
-    tslib_1.__param(3, (0, common_1.Inject)(archipel_platform_core_1.OTP_SERVICE_TOKEN)),
+    tslib_1.__param(3, (0, common_1.Inject)(otp_1.OTP_SERVICE_TOKEN)),
     tslib_1.__metadata("design:paramtypes", [MfaSubjectPort_1.MfaSubjectPort,
         archipel_platform_core_1.ConfigService,
         MfaEncryptionService_1.MfaEncryptionService, Object])

package/src/mfa/totp/index.d.ts

@@ -0,0 +1,22 @@
+import type { Provider } from '@nestjs/common';
+/**
+ * Providers required by the {@link TotpMfaChannel}.
+ *
+ * Spread these into the `additionalProviders` option of `AuthModule.register()`
+ * when enabling TOTP-based MFA.
+ *
+ * @example
+ * ```typescript
+ * import { TotpMfaChannel, TOTP_MFA_PROVIDERS } from '@breadstone/archipel-platform-authentication/mfa/totp';
+ *
+ * AuthModule.register({
+ *   mfaChannels: [TotpMfaChannel],
+ *   additionalProviders: [...TOTP_MFA_PROVIDERS],
+ *   // ...
+ * });
+ * ```
+ *
+ * @public
+ */
+export declare const TOTP_MFA_PROVIDERS: ReadonlyArray<Provider>;
+export { TotpMfaChannel } from '../channels/TotpMfaChannel';

package/src/mfa/totp/index.js

@@ -0,0 +1,29 @@
+"use strict";
+//#region Imports
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TotpMfaChannel = exports.TOTP_MFA_PROVIDERS = void 0;
+const otp_1 = require("@breadstone/archipel-platform-cryptography/otp");
+//#endregion
+/**
+ * Providers required by the {@link TotpMfaChannel}.
+ *
+ * Spread these into the `additionalProviders` option of `AuthModule.register()`
+ * when enabling TOTP-based MFA.
+ *
+ * @example
+ * ```typescript
+ * import { TotpMfaChannel, TOTP_MFA_PROVIDERS } from '@breadstone/archipel-platform-authentication/mfa/totp';
+ *
+ * AuthModule.register({
+ *   mfaChannels: [TotpMfaChannel],
+ *   additionalProviders: [...TOTP_MFA_PROVIDERS],
+ *   // ...
+ * });
+ * ```
+ *
+ * @public
+ */
+exports.TOTP_MFA_PROVIDERS = [{ provide: otp_1.OTP_SERVICE_TOKEN, useClass: otp_1.OtpService }];
+var TotpMfaChannel_1 = require("../channels/TotpMfaChannel");
+Object.defineProperty(exports, "TotpMfaChannel", { enumerable: true, get: function () { return TotpMfaChannel_1.TotpMfaChannel; } });
+//# sourceMappingURL=index.js.map

package/src/services/ChallengeService.js

@@ -3,9 +3,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ChallengeService = void 0;
 const tslib_1 = require("tslib");
-const common_1 = require("@nestjs/common");
 const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const common_1 = require("@nestjs/common");
 const node_crypto_1 = require("node:crypto");
+const env_1 = require("../env");
 /**
  * Stores and validates MFA login challenges.
  *
@@ -15,8 +16,8 @@ let ChallengeService = class ChallengeService {
     // #endregion
     // #region Ctor
     constructor(configService) {
-        this._ttlMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(configService.tryGet('AUTH_MFA_CHALLENGE_EXPIRES_IN', '5m'));
-        this._maxAttempts = Number(configService.tryGet('AUTH_MFA_MAX_ATTEMPTS', '5'));
+        this._ttlMilliseconds = archipel_platform_core_1.DateTimeUtils.parse(configService.tryGet(env_1.AUTH_MFA_CHALLENGE_EXPIRES_IN.key, '5m'));
+        this._maxAttempts = Number(configService.tryGet(env_1.AUTH_MFA_MAX_ATTEMPTS.key, '5'));
         this._challenges = new Map();
     }
     // #endregion

package/src/services/VerificationService.js

@@ -7,6 +7,7 @@ const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
 const common_1 = require("@nestjs/common");
 const jwt_1 = require("@nestjs/jwt");
 const VerificationSubjectPort_1 = require("../contracts/VerificationSubjectPort");
+const env_1 = require("../env");
 // #endregion
 /**
  * Manages email / PIN verification tokens via the {@link VerificationSubjectPort}.
@@ -42,7 +43,7 @@ let VerificationService = class VerificationService {
      */
     exhibitToken(data) {
         return this._jwtService.signAsync(data, {
-            expiresIn: archipel_platform_core_1.DateTimeUtils.parse(this._configService.get('AUTH_VERIFY_JWT_EXPIRES_IN')),
+            expiresIn: archipel_platform_core_1.DateTimeUtils.parse(this._configService.get(env_1.AUTH_VERIFY_JWT_EXPIRES_IN.key)),
         });
     }
     /**

package/src/services/index.d.ts

@@ -1,5 +1,5 @@
 export * from './AuthTokenService';
 export * from './ChallengeService';
-export * from './MfaService';
+export * from '../mfa/MfaService';
 export * from './SessionService';
 export * from './VerificationService';

package/src/services/index.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./AuthTokenService"), exports);
 tslib_1.__exportStar(require("./ChallengeService"), exports);
-tslib_1.__exportStar(require("./MfaService"), exports);
+tslib_1.__exportStar(require("../mfa/MfaService"), exports);
 tslib_1.__exportStar(require("./SessionService"), exports);
 tslib_1.__exportStar(require("./VerificationService"), exports);
 //# sourceMappingURL=index.js.map

package/src/strategies/AnonymousStrategy.js

@@ -8,6 +8,7 @@ const common_1 = require("@nestjs/common");
 const passport_1 = require("@nestjs/passport");
 const passport_custom_1 = require("passport-custom");
 const AuthSubjectPort_1 = require("../contracts/AuthSubjectPort");
+const env_1 = require("../env");
 // #endregion
 /**
  * Anonymous strategy for temporary user login.
@@ -38,7 +39,7 @@ let AnonymousStrategy = class AnonymousStrategy extends (0, passport_1.PassportS
      * @returns The authenticated user and this is also later available in the request.user object
      */
     async validate() {
-        const user = await this._authSubject.findAnonymous(this._configService.get('SEED_ANONYMOUS_USERNAME'));
+        const user = await this._authSubject.findAnonymous(this._configService.get(env_1.SEED_ANONYMOUS_USERNAME.key));
         if (!user) {
             throw new common_1.NotFoundException('User not found');
         }

package/src/apple/index.d.ts

@@ -1,2 +0,0 @@
-export { AppleStrategy } from '../strategies/AppleStrategy';
-export { APPLE_AUTH_CONFIG_ENTRIES } from './env';

package/src/apple/index.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.APPLE_AUTH_CONFIG_ENTRIES = exports.AppleStrategy = void 0;
-var AppleStrategy_1 = require("../strategies/AppleStrategy");
-Object.defineProperty(exports, "AppleStrategy", { enumerable: true, get: function () { return AppleStrategy_1.AppleStrategy; } });
-var env_1 = require("./env");
-Object.defineProperty(exports, "APPLE_AUTH_CONFIG_ENTRIES", { enumerable: true, get: function () { return env_1.APPLE_AUTH_CONFIG_ENTRIES; } });
-//# sourceMappingURL=index.js.map

package/src/github/index.d.ts

@@ -1,2 +0,0 @@
-export { GithubStrategy } from '../strategies/GithubStrategy';
-export { GITHUB_AUTH_CONFIG_ENTRIES } from './env';

package/src/github/index.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GITHUB_AUTH_CONFIG_ENTRIES = exports.GithubStrategy = void 0;
-var GithubStrategy_1 = require("../strategies/GithubStrategy");
-Object.defineProperty(exports, "GithubStrategy", { enumerable: true, get: function () { return GithubStrategy_1.GithubStrategy; } });
-var env_1 = require("./env");
-Object.defineProperty(exports, "GITHUB_AUTH_CONFIG_ENTRIES", { enumerable: true, get: function () { return env_1.GITHUB_AUTH_CONFIG_ENTRIES; } });
-//# sourceMappingURL=index.js.map

package/src/google/index.d.ts

@@ -1,2 +0,0 @@
-export { GoogleStrategy } from '../strategies/GoogleStrategy';
-export { GOOGLE_AUTH_CONFIG_ENTRIES } from './env';

package/src/google/index.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GOOGLE_AUTH_CONFIG_ENTRIES = exports.GoogleStrategy = void 0;
-var GoogleStrategy_1 = require("../strategies/GoogleStrategy");
-Object.defineProperty(exports, "GoogleStrategy", { enumerable: true, get: function () { return GoogleStrategy_1.GoogleStrategy; } });
-var env_1 = require("./env");
-Object.defineProperty(exports, "GOOGLE_AUTH_CONFIG_ENTRIES", { enumerable: true, get: function () { return env_1.GOOGLE_AUTH_CONFIG_ENTRIES; } });
-//# sourceMappingURL=index.js.map

package/src/microsoft/index.d.ts

@@ -1,2 +0,0 @@
-export { MicrosoftStrategy } from '../strategies/MicrosoftStrategy';
-export { MICROSOFT_AUTH_CONFIG_ENTRIES } from './env';

package/src/microsoft/index.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MICROSOFT_AUTH_CONFIG_ENTRIES = exports.MicrosoftStrategy = void 0;
-var MicrosoftStrategy_1 = require("../strategies/MicrosoftStrategy");
-Object.defineProperty(exports, "MicrosoftStrategy", { enumerable: true, get: function () { return MicrosoftStrategy_1.MicrosoftStrategy; } });
-var env_1 = require("./env");
-Object.defineProperty(exports, "MICROSOFT_AUTH_CONFIG_ENTRIES", { enumerable: true, get: function () { return env_1.MICROSOFT_AUTH_CONFIG_ENTRIES; } });
-//# sourceMappingURL=index.js.map

package/src/strategies/GithubStrategy.d.ts

@@ -1,23 +0,0 @@
-import { ConfigService } from '@breadstone/archipel-platform-core';
-import { type Profile, Strategy } from 'passport-github2';
-import type { IAuthSubject } from '../contracts/IAuthSubject';
-import { SocialAuthPort } from '../contracts/SocialAuthPort';
-declare const GithubStrategy_base: new (...args: [options: import("passport-github2").StrategyOptionsWithRequest] | [options: import("passport-github2").StrategyOptions]) => Strategy & {
-    validate(...args: any[]): unknown;
-};
-export declare class GithubStrategy extends GithubStrategy_base {
-    private readonly _socialAuth;
-    /**
-     * Constructs a new instance of the `GithubStrategy` class.
-     *
-     * @public
-     * @param socialAuth Social auth port instance.
-     * @param configService Configuration service instance.
-     */
-    constructor(socialAuth: SocialAuthPort, configService: ConfigService);
-    /**
-     * @public
-     */
-    validate(_accessToken: string, _refreshToken: string, profile: Profile): Promise<IAuthSubject>;
-}
-export {};