@breadstone/archipel-platform-authentication 0.0.8 → 0.0.9

package/package.json

@@ -1,23 +1,26 @@
 {
   "name": "@breadstone/archipel-platform-authentication",
-  "version": "0.0.8",
+  "version": "0.0.9",
   "description": "JWT and OAuth authentication, MFA, session management, and email verification for NestJS applications.",
   "type": "commonjs",
   "main": "./src/index.js",
   "types": "./src/index.d.ts",
   "typesVersions": {
     "*": {
-      "apple": [
-        "./src/apple/index.d.ts"
+      "connectors/apple": [
+        "./src/connectors/apple/index.d.ts"
       ],
-      "github": [
-        "./src/github/index.d.ts"
+      "connectors/github": [
+        "./src/connectors/github/index.d.ts"
       ],
-      "google": [
-        "./src/google/index.d.ts"
+      "connectors/google": [
+        "./src/connectors/google/index.d.ts"
       ],
-      "microsoft": [
-        "./src/microsoft/index.d.ts"
+      "connectors/microsoft": [
+        "./src/connectors/microsoft/index.d.ts"
+      ],
+      "mfa/totp": [
+        "./src/mfa/totp/index.d.ts"
       ]
     }
   },
@@ -26,27 +29,32 @@
       "types": "./src/index.d.ts",
       "default": "./src/index.js"
     },
-    "./apple": {
-      "types": "./src/apple/index.d.ts",
-      "default": "./src/apple/index.js"
+    "./connectors/apple": {
+      "types": "./src/connectors/apple/index.d.ts",
+      "default": "./src/connectors/apple/index.js"
+    },
+    "./connectors/github": {
+      "types": "./src/connectors/github/index.d.ts",
+      "default": "./src/connectors/github/index.js"
     },
-    "./github": {
-      "types": "./src/github/index.d.ts",
-      "default": "./src/github/index.js"
+    "./connectors/google": {
+      "types": "./src/connectors/google/index.d.ts",
+      "default": "./src/connectors/google/index.js"
     },
-    "./google": {
-      "types": "./src/google/index.d.ts",
-      "default": "./src/google/index.js"
+    "./connectors/microsoft": {
+      "types": "./src/connectors/microsoft/index.d.ts",
+      "default": "./src/connectors/microsoft/index.js"
     },
-    "./microsoft": {
-      "types": "./src/microsoft/index.d.ts",
-      "default": "./src/microsoft/index.js"
+    "./mfa/totp": {
+      "types": "./src/mfa/totp/index.d.ts",
+      "default": "./src/mfa/totp/index.js"
     },
     "./package.json": "./package.json",
-    "./apple/index": "./src/apple/index.js",
-    "./github/index": "./src/github/index.js",
-    "./google/index": "./src/google/index.js",
-    "./microsoft/index": "./src/microsoft/index.js"
+    "./connectors/apple/index": "./src/connectors/apple/index.js",
+    "./connectors/github/index": "./src/connectors/github/index.js",
+    "./connectors/google/index": "./src/connectors/google/index.js",
+    "./connectors/microsoft/index": "./src/connectors/microsoft/index.js",
+    "./mfa/totp/index": "./src/mfa/totp/index.js"
   },
   "license": "MIT",
   "repository": {
@@ -73,8 +81,8 @@
     "README.md"
   ],
   "dependencies": {
-    "@breadstone/archipel-platform-core": "0.0.8",
-    "@breadstone/archipel-platform-cryptography": "0.0.8",
+    "@breadstone/archipel-platform-core": "0.0.9",
+    "@breadstone/archipel-platform-cryptography": "0.0.9",
     "passport": "0.7.0",
     "passport-custom": "1.1.1",
     "passport-jwt": "4.0.1",

package/src/AuthModule.d.ts

@@ -1,5 +1,5 @@
 import { type IConfigRegistryEntry } from '@breadstone/archipel-platform-core';
-import { DynamicModule, MiddlewareConsumer, Type } from '@nestjs/common';
+import { DynamicModule, MiddlewareConsumer, Type, type Provider } from '@nestjs/common';
 import { AuthSubjectPort } from './contracts/AuthSubjectPort';
 import { MfaSubjectPort } from './contracts/MfaSubjectPort';
 import { SessionPersistencePort } from './contracts/SessionPersistencePort';
@@ -13,7 +13,7 @@ import { VerificationSubjectPort } from './contracts/VerificationSubjectPort';
  */
 export interface IAuthModuleOptions {
     /**
-     * Implementation of the auth subject port (user lookup for JWT/Local/Anonymous strategies).
+     * Implementation of the auth subject port (user lookup for JWT/Local/Anonymous connectors).
      */
     authSubject: Type<AuthSubjectPort>;
     /**
@@ -29,21 +29,21 @@ export interface IAuthModuleOptions {
      */
     verificationSubject: Type<VerificationSubjectPort>;
     /**
-     * Optional implementation of the social auth port (OAuth strategies).
-     * When provided together with `socialStrategies`, the social auth flow is enabled.
+     * Optional implementation of the social auth port (OAuth connectors).
+     * When provided together with `socialConnectors`, the social auth flow is enabled.
      */
     socialAuth?: Type<SocialAuthPort>;
     /**
-     * Optional array of social strategy types to register (e.g. `AppleStrategy`, `GithubStrategy`).
+     * Optional array of social connector types to register (e.g. `AppleConnector`, `GithubConnector`).
      * Import them from the provider-specific sub-paths
-     * (e.g. `@breadstone/archipel-platform-authentication/apple`).
+     * (e.g. `@breadstone/archipel-platform-authentication/connectors/apple`).
      * Requires `socialAuth` to be set.
      */
-    socialStrategies?: Array<Type>;
+    socialConnectors?: Array<Type>;
     /**
      * Optional additional configuration entries to register (e.g. provider-specific OAuth keys).
      * Import them from the provider-specific sub-paths
-     * (e.g. `APPLE_AUTH_CONFIG_ENTRIES` from `@breadstone/archipel-platform-authentication/apple`).
+     * (e.g. `APPLE_AUTH_CONFIG_ENTRIES` from `@breadstone/archipel-platform-authentication/connectors/apple`).
      */
     additionalConfigEntries?: ReadonlyArray<Omit<IConfigRegistryEntry, 'module'>>;
     /**
@@ -51,6 +51,20 @@ export interface IAuthModuleOptions {
      * When provided, additional claims are added to JWT tokens.
      */
     tokenEnricher?: Type<TokenEnricherPort>;
+    /**
+     * Optional array of additional MFA channel types to register (e.g. `TotpMfaChannel`).
+     * Import them from the provider-specific sub-paths
+     * (e.g. `@breadstone/archipel-platform-authentication/mfa/totp`).
+     *
+     * Built-in channels (SMS, Email, Push) are always registered.
+     */
+    mfaChannels?: Array<Type>;
+    /**
+     * Optional additional providers required by optional features (e.g. TOTP MFA).
+     * Import them from the provider-specific sub-paths
+     * (e.g. `TOTP_MFA_PROVIDERS` from `@breadstone/archipel-platform-authentication/mfa/totp`).
+     */
+    additionalProviders?: Array<Provider>;
 }
 /**
  * The `AuthModule` handles JWT-based authentication,

package/src/AuthModule.js

@@ -9,6 +9,9 @@ const archipel_platform_cryptography_1 = require("@breadstone/archipel-platform-
 const common_1 = require("@nestjs/common");
 const jwt_1 = require("@nestjs/jwt");
 const passport_1 = require("@nestjs/passport");
+const AnonymousConnector_1 = require("./connectors/AnonymousConnector");
+const JwtConnector_1 = require("./connectors/JwtConnector");
+const LocalConnector_1 = require("./connectors/LocalConnector");
 const AuthSubjectPort_1 = require("./contracts/AuthSubjectPort");
 const MfaSubjectPort_1 = require("./contracts/MfaSubjectPort");
 const SessionPersistencePort_1 = require("./contracts/SessionPersistencePort");
@@ -22,22 +25,18 @@ const JwtAuthGuard_1 = require("./guards/JwtAuthGuard");
 const LocalAuthGuard_1 = require("./guards/LocalAuthGuard");
 const RolesGuard_1 = require("./guards/RolesGuard");
 const SessionMappingProfile_1 = require("./mappers/SessionMappingProfile");
+const EmailOtpMfaChannel_1 = require("./mfa/channels/EmailOtpMfaChannel");
+const PushMfaChannel_1 = require("./mfa/channels/PushMfaChannel");
+const SmsMfaChannel_1 = require("./mfa/channels/SmsMfaChannel");
+const MfaEncryptionService_1 = require("./mfa/MfaEncryptionService");
+const MfaService_1 = require("./mfa/MfaService");
+const MfaTokens_1 = require("./mfa/MfaTokens");
 const middlewares_1 = require("./middlewares");
 const SessionSerializer_1 = require("./serializer/SessionSerializer");
 const AuthTokenService_1 = require("./services/AuthTokenService");
 const ChallengeService_1 = require("./services/ChallengeService");
-const EmailOtpMfaChannel_1 = require("./services/mfa/channels/EmailOtpMfaChannel");
-const PushMfaChannel_1 = require("./services/mfa/channels/PushMfaChannel");
-const SmsMfaChannel_1 = require("./services/mfa/channels/SmsMfaChannel");
-const TotpMfaChannel_1 = require("./services/mfa/channels/TotpMfaChannel");
-const MfaEncryptionService_1 = require("./services/mfa/MfaEncryptionService");
-const MfaTokens_1 = require("./services/mfa/MfaTokens");
-const MfaService_1 = require("./services/MfaService");
 const SessionService_1 = require("./services/SessionService");
 const VerificationService_1 = require("./services/VerificationService");
-const AnonymousStrategy_1 = require("./strategies/AnonymousStrategy");
-const JwtStrategy_1 = require("./strategies/JwtStrategy");
-const LocalStrategy_1 = require("./strategies/LocalStrategy");
 /**
  * The `AuthModule` handles JWT-based authentication,
  * including token creation and validation.
@@ -66,10 +65,12 @@ let AuthModule = AuthModule_1 = class AuthModule {
         if (options.tokenEnricher) {
             portProviders.push({ provide: TokenEnricherPort_1.TokenEnricherPort, useClass: options.tokenEnricher });
         }
-        const strategies = [JwtStrategy_1.JwtStrategy, LocalStrategy_1.LocalStrategy, AnonymousStrategy_1.AnonymousStrategy];
-        if (options.socialStrategies) {
-            strategies.push(...options.socialStrategies);
+        const connectors = [JwtConnector_1.JwtConnector, LocalConnector_1.LocalConnector, AnonymousConnector_1.AnonymousConnector];
+        if (options.socialConnectors) {
+            connectors.push(...options.socialConnectors);
         }
+        const builtInMfaChannels = [SmsMfaChannel_1.SmsMfaChannel, EmailOtpMfaChannel_1.EmailOtpMfaChannel, PushMfaChannel_1.PushMfaChannel];
+        const allMfaChannels = [...builtInMfaChannels, ...(options.mfaChannels ?? [])];
         const configEntries = [
             ...env_1.PLATFORM_AUTHENTICATION_CONFIG_ENTRIES,
             ...(options.additionalConfigEntries ?? []),
@@ -95,7 +96,9 @@ let AuthModule = AuthModule_1 = class AuthModule {
             ],
             providers: [
                 ...portProviders,
-                ...strategies,
+                ...connectors,
+                ...(options.additionalProviders ?? []),
+                ...allMfaChannels,
                 SessionSerializer_1.SessionSerializer,
                 JwtAuthGuard_1.JwtAuthGuard,
                 LocalAuthGuard_1.LocalAuthGuard,
@@ -107,19 +110,11 @@ let AuthModule = AuthModule_1 = class AuthModule {
                 SessionService_1.SessionService,
                 MfaService_1.MfaService,
                 ChallengeService_1.ChallengeService,
-                TotpMfaChannel_1.TotpMfaChannel,
-                SmsMfaChannel_1.SmsMfaChannel,
-                EmailOtpMfaChannel_1.EmailOtpMfaChannel,
-                PushMfaChannel_1.PushMfaChannel,
                 MfaEncryptionService_1.MfaEncryptionService,
-                {
-                    provide: archipel_platform_cryptography_1.OTP_SERVICE_TOKEN,
-                    useClass: archipel_platform_cryptography_1.OtpService,
-                },
                 {
                     provide: MfaTokens_1.MFA_CHANNELS,
-                    useFactory: (totpChannel, smsChannel, emailChannel, pushChannel) => [totpChannel, smsChannel, emailChannel, pushChannel],
-                    inject: [TotpMfaChannel_1.TotpMfaChannel, SmsMfaChannel_1.SmsMfaChannel, EmailOtpMfaChannel_1.EmailOtpMfaChannel, PushMfaChannel_1.PushMfaChannel],
+                    useFactory: (...channels) => channels,
+                    inject: allMfaChannels,
                 },
                 archipel_platform_core_1.DeviceParserService,
                 middlewares_1.LastActiveMiddleware,

package/src/connectors/AnonymousConnector.d.ts

@@ -0,0 +1,42 @@
+import { ConfigService } from '@breadstone/archipel-platform-core';
+import { AuthSubjectPort } from '../contracts/AuthSubjectPort';
+import type { IAuthSubject } from '../contracts/IAuthSubject';
+declare const AnonymousConnector_base: (abstract new (...args: any[]) => {
+    [x: string]: any;
+    validate(...args: unknown[]): Promise<unknown>;
+}) & {
+    apply(this: Function, thisArg: any, argArray?: any): any;
+    call(this: Function, thisArg: any, ...argArray: any[]): any;
+    bind(this: Function, thisArg: any, ...argArray: any[]): any;
+    toString(): string;
+    readonly length: number;
+    arguments: any;
+    caller: Function;
+    readonly name: string;
+    [Symbol.hasInstance](value: any): boolean;
+};
+/**
+ * Anonymous connector for temporary user login.
+ *
+ * @public
+ */
+export declare class AnonymousConnector extends AnonymousConnector_base {
+    private readonly _authSubject;
+    private readonly _configService;
+    /**
+     * Constructs a new instance of the `AnonymousConnector` class.
+     *
+     * @public
+     * @param authSubject Auth subject port instance.
+     * @param configService Configuration service instance.
+     */
+    constructor(authSubject: AuthSubjectPort, configService: ConfigService);
+    /**
+     * Validates the authentication credentials.
+     *
+     * @public
+     * @returns The authenticated user and this is also later available in the request.user object
+     */
+    validate(): Promise<IAuthSubject>;
+}
+export {};

package/src/connectors/AnonymousConnector.js

@@ -0,0 +1,54 @@
+"use strict";
+// #region Imports
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AnonymousConnector = void 0;
+const tslib_1 = require("tslib");
+const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const common_1 = require("@nestjs/common");
+const passport_custom_1 = require("passport-custom");
+const AuthSubjectPort_1 = require("../contracts/AuthSubjectPort");
+const env_1 = require("../env");
+const ConnectorBase_1 = require("./ConnectorBase");
+// #endregion
+/**
+ * Anonymous connector for temporary user login.
+ *
+ * @public
+ */
+let AnonymousConnector = class AnonymousConnector extends (0, ConnectorBase_1.ConnectorBase)(passport_custom_1.Strategy, 'anonymous') {
+    // #endregion
+    // #region Ctor
+    /**
+     * Constructs a new instance of the `AnonymousConnector` class.
+     *
+     * @public
+     * @param authSubject Auth subject port instance.
+     * @param configService Configuration service instance.
+     */
+    constructor(authSubject, configService) {
+        super();
+        this._authSubject = authSubject;
+        this._configService = configService;
+    }
+    // #endregion
+    // #region Methods
+    /**
+     * Validates the authentication credentials.
+     *
+     * @public
+     * @returns The authenticated user and this is also later available in the request.user object
+     */
+    async validate() {
+        const user = await this._authSubject.findAnonymous(this._configService.get(env_1.SEED_ANONYMOUS_USERNAME.key));
+        if (!user) {
+            throw new common_1.NotFoundException('User not found');
+        }
+        return user;
+    }
+};
+exports.AnonymousConnector = AnonymousConnector;
+exports.AnonymousConnector = AnonymousConnector = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [AuthSubjectPort_1.AuthSubjectPort, archipel_platform_core_1.ConfigService])
+], AnonymousConnector);
+//# sourceMappingURL=AnonymousConnector.js.map

package/src/{strategies/AppleStrategy.d.ts → connectors/AppleConnector.d.ts}

@@ -5,18 +5,29 @@ import { SocialAuthPort } from '../contracts/SocialAuthPort';
 type IAppleProfile = PassportProfile & {
     email?: string;
 };
-declare const AppleStrategy_base: new (...args: [options: import("passport-apple").AuthenticateOptionsWithRequest] | [options: import("passport-apple").AuthenticateOptions]) => import("passport-apple") & {
-    validate(...args: any[]): unknown;
+declare const AppleConnector_base: (abstract new (...args: any[]) => {
+    [x: string]: any;
+    validate(...args: unknown[]): Promise<unknown>;
+}) & {
+    apply(this: Function, thisArg: any, argArray?: any): any;
+    call(this: Function, thisArg: any, ...argArray: any[]): any;
+    bind(this: Function, thisArg: any, ...argArray: any[]): any;
+    toString(): string;
+    readonly length: number;
+    arguments: any;
+    caller: Function;
+    readonly name: string;
+    [Symbol.hasInstance](value: any): boolean;
 };
 /**
- * The `AppleStrategy` integrates Apple Sign In authentication.
+ * The `AppleConnector` integrates Apple Sign In authentication.
  *
  * @public
  */
-export declare class AppleStrategy extends AppleStrategy_base {
+export declare class AppleConnector extends AppleConnector_base {
     private readonly _socialAuth;
     /**
-     * Initializes a new instance of the `AppleStrategy` class.
+     * Initializes a new instance of the `AppleConnector` class.
      *
      * @public
      * @param socialAuth Social auth port instance.

package/src/{strategies/AppleStrategy.js → connectors/AppleConnector.js}

@@ -1,41 +1,42 @@
 "use strict";
 // #region Imports
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AppleStrategy = void 0;
+exports.AppleConnector = void 0;
 const tslib_1 = require("tslib");
 const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
 const common_1 = require("@nestjs/common");
-const passport_1 = require("@nestjs/passport");
 const passport_apple_1 = require("passport-apple");
 const SocialAuthPort_1 = require("../contracts/SocialAuthPort");
+const env_1 = require("../env");
+const ConnectorBase_1 = require("./ConnectorBase");
 /**
- * The `AppleStrategy` integrates Apple Sign In authentication.
+ * The `AppleConnector` integrates Apple Sign In authentication.
  *
  * @public
  */
-let AppleStrategy = class AppleStrategy extends (0, passport_1.PassportStrategy)(passport_apple_1.Strategy, 'apple') {
+let AppleConnector = class AppleConnector extends (0, ConnectorBase_1.ConnectorBase)(passport_apple_1.Strategy, 'apple') {
     // #endregion
     // #region Ctor
     /**
-     * Initializes a new instance of the `AppleStrategy` class.
+     * Initializes a new instance of the `AppleConnector` class.
      *
      * @public
      * @param socialAuth Social auth port instance.
      * @param configService Configuration service instance.
      */
     constructor(socialAuth, configService) {
-        const rawPrivateKey = configService.get('AUTH_APPLE_PRIVATE_KEY');
+        const rawPrivateKey = configService.get(env_1.AUTH_APPLE_PRIVATE_KEY.key);
         const normalizedPrivateKey = rawPrivateKey.replace(/\r/g, '').replace(/\\n/g, '\n');
         const scope = configService
-            .tryGet('AUTH_APPLE_SCOPE', 'name,email')
+            .tryGet(env_1.AUTH_APPLE_SCOPE.key, 'name,email')
             .split(',')
             .map((s) => s.trim())
             .filter(Boolean);
         super({
-            clientID: configService.get('AUTH_APPLE_CLIENT_ID'),
-            teamID: configService.get('AUTH_APPLE_TEAM_ID'),
-            keyID: configService.get('AUTH_APPLE_KEY_ID'),
-            callbackURL: configService.tryGet('AUTH_APPLE_CALLBACK_URL', '/auth/apple/callback'),
+            clientID: configService.get(env_1.AUTH_APPLE_CLIENT_ID.key),
+            teamID: configService.get(env_1.AUTH_APPLE_TEAM_ID.key),
+            keyID: configService.get(env_1.AUTH_APPLE_KEY_ID.key),
+            callbackURL: configService.tryGet(env_1.AUTH_APPLE_CALLBACK_URL.key, '/auth/apple/callback'),
             privateKeyString: normalizedPrivateKey,
             scope,
             state: true,
@@ -76,9 +77,9 @@ let AppleStrategy = class AppleStrategy extends (0, passport_1.PassportStrategy)
         return user;
     }
 };
-exports.AppleStrategy = AppleStrategy;
-exports.AppleStrategy = AppleStrategy = tslib_1.__decorate([
+exports.AppleConnector = AppleConnector;
+exports.AppleConnector = AppleConnector = tslib_1.__decorate([
     (0, common_1.Injectable)(),
     tslib_1.__metadata("design:paramtypes", [SocialAuthPort_1.SocialAuthPort, archipel_platform_core_1.ConfigService])
-], AppleStrategy);
-//# sourceMappingURL=AppleStrategy.js.map
+], AppleConnector);
+//# sourceMappingURL=AppleConnector.js.map

package/src/connectors/ConnectorBase.d.ts

@@ -0,0 +1,39 @@
+import type { Type } from '@nestjs/common';
+/**
+ * Creates an abstract connector base class for authentication providers.
+ *
+ * Extend this to implement a custom authentication connector with a required `validate` method.
+ *
+ * @public
+ * @param strategy - The underlying authentication strategy constructor.
+ * @param name - Optional connector identifier (e.g. `'google'`, `'jwt'`).
+ * @returns An abstract class with a required `validate` method.
+ *
+ * @example
+ * ```typescript
+ * import { ConnectorBase } from '@breadstone/archipel-platform-authentication';
+ *
+ * export class MyConnector extends ConnectorBase(Strategy, 'my-provider') {
+ *     public async validate(): Promise<IAuthSubject> { ... }
+ * }
+ * ```
+ */
+export declare function ConnectorBase<T extends Type<any>>(strategy: T, name?: string): (abstract new (...args: any[]) => {
+    [x: string]: any;
+    /**
+     * Validates the authentication attempt and returns the authenticated subject.
+     *
+     * @public
+     */
+    validate(...args: unknown[]): Promise<unknown>;
+}) & {
+    apply(this: Function, thisArg: any, argArray?: any): any;
+    call(this: Function, thisArg: any, ...argArray: any[]): any;
+    bind(this: Function, thisArg: any, ...argArray: any[]): any;
+    toString(): string;
+    readonly length: number;
+    arguments: any;
+    caller: Function;
+    readonly name: string;
+    [Symbol.hasInstance](value: any): boolean;
+};

package/src/connectors/ConnectorBase.js

@@ -0,0 +1,33 @@
+"use strict";
+// #region Imports
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectorBase = ConnectorBase;
+const passport_1 = require("@nestjs/passport");
+// #endregion
+/**
+ * Creates an abstract connector base class for authentication providers.
+ *
+ * Extend this to implement a custom authentication connector with a required `validate` method.
+ *
+ * @public
+ * @param strategy - The underlying authentication strategy constructor.
+ * @param name - Optional connector identifier (e.g. `'google'`, `'jwt'`).
+ * @returns An abstract class with a required `validate` method.
+ *
+ * @example
+ * ```typescript
+ * import { ConnectorBase } from '@breadstone/archipel-platform-authentication';
+ *
+ * export class MyConnector extends ConnectorBase(Strategy, 'my-provider') {
+ *     public async validate(): Promise<IAuthSubject> { ... }
+ * }
+ * ```
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function ConnectorBase(strategy, name) {
+    const Base = (0, passport_1.PassportStrategy)(strategy, name);
+    class _ConnectorBase extends Base {
+    }
+    return _ConnectorBase;
+}
+//# sourceMappingURL=ConnectorBase.js.map

package/src/connectors/GithubConnector.d.ts

@@ -0,0 +1,34 @@
+import { ConfigService } from '@breadstone/archipel-platform-core';
+import { type Profile } from 'passport-github2';
+import type { IAuthSubject } from '../contracts/IAuthSubject';
+import { SocialAuthPort } from '../contracts/SocialAuthPort';
+declare const GithubConnector_base: (abstract new (...args: any[]) => {
+    [x: string]: any;
+    validate(...args: unknown[]): Promise<unknown>;
+}) & {
+    apply(this: Function, thisArg: any, argArray?: any): any;
+    call(this: Function, thisArg: any, ...argArray: any[]): any;
+    bind(this: Function, thisArg: any, ...argArray: any[]): any;
+    toString(): string;
+    readonly length: number;
+    arguments: any;
+    caller: Function;
+    readonly name: string;
+    [Symbol.hasInstance](value: any): boolean;
+};
+export declare class GithubConnector extends GithubConnector_base {
+    private readonly _socialAuth;
+    /**
+     * Constructs a new instance of the `GithubConnector` class.
+     *
+     * @public
+     * @param socialAuth Social auth port instance.
+     * @param configService Configuration service instance.
+     */
+    constructor(socialAuth: SocialAuthPort, configService: ConfigService);
+    /**
+     * @public
+     */
+    validate(_accessToken: string, _refreshToken: string, profile: Profile): Promise<IAuthSubject>;
+}
+export {};

package/src/{strategies/GithubStrategy.js → connectors/GithubConnector.js}

@@ -1,19 +1,20 @@
 "use strict";
 // #region Imports
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GithubStrategy = void 0;
+exports.GithubConnector = void 0;
 const tslib_1 = require("tslib");
 const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
 const common_1 = require("@nestjs/common");
-const passport_1 = require("@nestjs/passport");
 const passport_github2_1 = require("passport-github2");
 const SocialAuthPort_1 = require("../contracts/SocialAuthPort");
+const env_1 = require("../env");
+const ConnectorBase_1 = require("./ConnectorBase");
 // #endregion
-let GithubStrategy = class GithubStrategy extends (0, passport_1.PassportStrategy)(passport_github2_1.Strategy, 'github') {
+let GithubConnector = class GithubConnector extends (0, ConnectorBase_1.ConnectorBase)(passport_github2_1.Strategy, 'github') {
     // #endregion
     // #region Ctor
     /**
-     * Constructs a new instance of the `GithubStrategy` class.
+     * Constructs a new instance of the `GithubConnector` class.
      *
      * @public
      * @param socialAuth Social auth port instance.
@@ -21,14 +22,14 @@ let GithubStrategy = class GithubStrategy extends (0, passport_1.PassportStrateg
      */
     constructor(socialAuth, configService) {
         const scope = configService
-            .tryGet('AUTH_GITHUB_SCOPE', 'user:email')
+            .tryGet(env_1.AUTH_GITHUB_SCOPE.key, 'user:email')
             .split(',')
             .map((s) => s.trim())
             .filter(Boolean);
         super({
-            clientID: configService.get('AUTH_GITHUB_CLIENT_ID'),
-            clientSecret: configService.get('AUTH_GITHUB_CLIENT_SECRET'),
-            callbackURL: configService.tryGet('AUTH_GITHUB_CALLBACK_URL', '/auth/github/callback'),
+            clientID: configService.get(env_1.AUTH_GITHUB_CLIENT_ID.key),
+            clientSecret: configService.get(env_1.AUTH_GITHUB_CLIENT_SECRET.key),
+            callbackURL: configService.tryGet(env_1.AUTH_GITHUB_CALLBACK_URL.key, '/auth/github/callback'),
             scope,
         });
         this._socialAuth = socialAuth;
@@ -56,9 +57,9 @@ let GithubStrategy = class GithubStrategy extends (0, passport_1.PassportStrateg
         return user;
     }
 };
-exports.GithubStrategy = GithubStrategy;
-exports.GithubStrategy = GithubStrategy = tslib_1.__decorate([
+exports.GithubConnector = GithubConnector;
+exports.GithubConnector = GithubConnector = tslib_1.__decorate([
     (0, common_1.Injectable)(),
     tslib_1.__metadata("design:paramtypes", [SocialAuthPort_1.SocialAuthPort, archipel_platform_core_1.ConfigService])
-], GithubStrategy);
-//# sourceMappingURL=GithubStrategy.js.map
+], GithubConnector);
+//# sourceMappingURL=GithubConnector.js.map

package/src/{strategies/GoogleStrategy.d.ts → connectors/GoogleConnector.d.ts}

@@ -1,19 +1,30 @@
 import { ConfigService } from '@breadstone/archipel-platform-core';
-import { Profile, Strategy } from 'passport-google-oauth20';
+import { Profile } from 'passport-google-oauth20';
 import type { IAuthSubject } from '../contracts/IAuthSubject';
 import { SocialAuthPort } from '../contracts/SocialAuthPort';
-declare const GoogleStrategy_base: new (...args: [options: import("passport-google-oauth20").StrategyOptionsWithRequest] | [options: import("passport-google-oauth20").StrategyOptions] | [options: import("passport-google-oauth20").StrategyOptions] | [options: import("passport-google-oauth20").StrategyOptionsWithRequest]) => Strategy & {
-    validate(...args: any[]): unknown;
+declare const GoogleConnector_base: (abstract new (...args: any[]) => {
+    [x: string]: any;
+    validate(...args: unknown[]): Promise<unknown>;
+}) & {
+    apply(this: Function, thisArg: any, argArray?: any): any;
+    call(this: Function, thisArg: any, ...argArray: any[]): any;
+    bind(this: Function, thisArg: any, ...argArray: any[]): any;
+    toString(): string;
+    readonly length: number;
+    arguments: any;
+    caller: Function;
+    readonly name: string;
+    [Symbol.hasInstance](value: any): boolean;
 };
 /**
- * The `GoogleStrategy` integrates Google OAuth authentication.
+ * The `GoogleConnector` integrates Google OAuth authentication.
  *
  * @public
  */
-export declare class GoogleStrategy extends GoogleStrategy_base {
+export declare class GoogleConnector extends GoogleConnector_base {
     private readonly _socialAuth;
     /**
-     * Initializes a new instance of the `GoogleStrategy` class.
+     * Initializes a new instance of the `GoogleConnector` class.
      *
      * @public
      * @param socialAuth Social auth port instance.