@brightchain/brightchain-api-lib 0.18.2 → 0.21.0

package/src/lib/controllers/api/user.d.ts

@@ -1,22 +1,19 @@
 import { CoreLanguageCode } from '@digitaldefiance/i18n-lib';
 import { PlatformID } from '@digitaldefiance/node-ecies-lib';
-import { ApiErrorResponse, ApiRequestHandler, IApiMessageResponse, TypedHandlers } from '@digitaldefiance/node-express-suite';
+import { ApiErrorResponse, DecoratorBaseController, IApiMessageResponse, IStatusCodeResponse } from '@digitaldefiance/node-express-suite';
+import type { NextFunction, Request, Response } from 'express';
 import { IBrightChainApplication } from '../../interfaces/application';
 import { DefaultBackendIdType } from '../../shared-types';
-import { BaseController } from '../base';
-interface IUserHandlers extends TypedHandlers {
-    register: ApiRequestHandler<IApiMessageResponse | ApiErrorResponse>;
-    login: ApiRequestHandler<IApiMessageResponse | ApiErrorResponse>;
-    profile: ApiRequestHandler<IApiMessageResponse | ApiErrorResponse>;
-    updateProfile: ApiRequestHandler<IApiMessageResponse | ApiErrorResponse>;
-}
-export declare class UserController<TID extends PlatformID = DefaultBackendIdType> extends BaseController<TID, IApiMessageResponse | ApiErrorResponse, IUserHandlers, CoreLanguageCode> {
+export declare class UserController<TID extends PlatformID = DefaultBackendIdType> extends DecoratorBaseController<CoreLanguageCode, TID, IBrightChainApplication<TID>> {
     constructor(application: IBrightChainApplication<TID>);
-    protected initRouteDefinitions(): void;
-    private handleRegister;
-    private handleLogin;
-    private handleProfile;
-    private handleUpdateProfile;
+    register(req: Request, _res: Response, _next: NextFunction): Promise<IStatusCodeResponse<IApiMessageResponse | ApiErrorResponse>>;
+    login(req: Request, _res: Response, _next: NextFunction): Promise<IStatusCodeResponse<IApiMessageResponse | ApiErrorResponse>>;
+    getProfile(req: Request, _res: Response, _next: NextFunction): Promise<IStatusCodeResponse<IApiMessageResponse | ApiErrorResponse>>;
+    updateProfile(req: Request, _res: Response, _next: NextFunction): Promise<IStatusCodeResponse<IApiMessageResponse | ApiErrorResponse>>;
+    changePassword(req: Request, _res: Response, _next: NextFunction): Promise<IStatusCodeResponse<IApiMessageResponse | ApiErrorResponse>>;
+    generateBackupCodes(req: Request, _res: Response, _next: NextFunction): Promise<IStatusCodeResponse<IApiMessageResponse | ApiErrorResponse>>;
+    getBackupCodeCount(req: Request, _res: Response, _next: NextFunction): Promise<IStatusCodeResponse<IApiMessageResponse | ApiErrorResponse>>;
+    recover(req: Request, _res: Response, _next: NextFunction): Promise<IStatusCodeResponse<IApiMessageResponse | ApiErrorResponse>>;
+    logout(req: Request, _res: Response, _next: NextFunction): Promise<IStatusCodeResponse<IApiMessageResponse | ApiErrorResponse>>;
 }
-export {};
 //# sourceMappingURL=user.d.ts.map

package/src/lib/controllers/api/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/controllers/api/user.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EAEnB,aAAa,EAEd,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAMvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAK1D,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,UAAU,aAAc,SAAQ,aAAa;IAC3C,QAAQ,EAAE,iBAAiB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IACpE,KAAK,EAAE,iBAAiB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IACjE,OAAO,EAAE,iBAAiB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IACnE,aAAa,EAAE,iBAAiB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;CAC1E;AAWD,qBAAa,cAAc,CACzB,GAAG,SAAS,UAAU,GAAG,oBAAoB,CAC7C,SAAQ,cAAc,CACtB,GAAG,EACH,mBAAmB,GAAG,gBAAgB,EACtC,aAAa,EACb,gBAAgB,CACjB;gBACa,WAAW,EAAE,uBAAuB,CAAC,GAAG,CAAC;IAIrD,SAAS,CAAC,oBAAoB,IAAI,IAAI;YAgCxB,cAAc;YAsDd,WAAW;YAmDX,aAAa;YA8Fb,mBAAmB;CA2GlC"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-api-lib/src/lib/controllers/api/user.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,gBAAgB,EAAmB,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAEhB,uBAAuB,EAEvB,mBAAmB,EACnB,mBAAmB,EAGpB,MAAM,qCAAqC,CAAC;AAK7C,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAgBvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAiB1D,qBACa,cAAc,CACzB,GAAG,SAAS,UAAU,GAAG,oBAAoB,CAC7C,SAAQ,uBAAuB,CAC/B,gBAAgB,EAChB,GAAG,EACH,uBAAuB,CAAC,GAAG,CAAC,CAC7B;gBACa,WAAW,EAAE,uBAAuB,CAAC,GAAG,CAAC;IAK/C,QAAQ,CACZ,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IAwDjE,KAAK,CACT,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IAoDjE,UAAU,CACd,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IA6FjE,aAAa,CACjB,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IA4GjE,cAAc,CAClB,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IAiFjE,mBAAmB,CACvB,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IAiDjE,kBAAkB,CACtB,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IAiDjE,OAAO,CACX,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;IAsEjE,MAAM,CACV,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,mBAAmB,CAAC,mBAAmB,GAAG,gBAAgB,CAAC,CAAC;CA+DxE"}

package/src/lib/controllers/api/user.js

@@ -1,59 +1,29 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UserController = void 0;
+const tslib_1 = require("tslib");
 const brightchain_lib_1 = require("@brightchain/brightchain-lib");
 const ecies_lib_1 = require("@digitaldefiance/ecies-lib");
+const i18n_lib_1 = require("@digitaldefiance/i18n-lib");
 const node_express_suite_1 = require("@digitaldefiance/node-express-suite");
+const suite_core_lib_1 = require("@digitaldefiance/suite-core-lib");
 const userValidation_1 = require("../../validation/userValidation");
-const base_1 = require("../base");
-class UserController extends base_1.BaseController {
+let UserController = class UserController extends node_express_suite_1.DecoratorBaseController {
     constructor(application) {
         super(application);
     }
-    initRouteDefinitions() {
-        this.routeDefinitions = [
-            (0, node_express_suite_1.routeConfig)('post', '/register', {
-                handlerKey: 'register',
-                useAuthentication: false,
-                useCryptoAuthentication: false,
-            }),
-            (0, node_express_suite_1.routeConfig)('post', '/login', {
-                handlerKey: 'login',
-                useAuthentication: false,
-                useCryptoAuthentication: false,
-            }),
-            (0, node_express_suite_1.routeConfig)('get', '/profile', {
-                handlerKey: 'profile',
-                useAuthentication: true,
-                useCryptoAuthentication: false,
-            }),
-            (0, node_express_suite_1.routeConfig)('put', '/profile', {
-                handlerKey: 'updateProfile',
-                useAuthentication: true,
-                useCryptoAuthentication: false,
-            }),
-        ];
-        this.handlers = {
-            register: this.handleRegister.bind(this),
-            login: this.handleLogin.bind(this),
-            profile: this.handleProfile.bind(this),
-            updateProfile: this.handleUpdateProfile.bind(this),
-        };
-    }
-    async handleRegister(req) {
-        // Validate request body before processing
+    async register(req, _res, _next) {
         const validation = (0, userValidation_1.validateRegistration)(req.body);
         if (!validation.valid) {
             return {
                 statusCode: 400,
                 response: {
-                    message: 'Validation failed',
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_MissingValidatedData),
                     errors: validation.errors,
                 },
             };
         }
         try {
-            // Validation already confirmed these fields exist and are valid strings
             const { username, email, password } = req.body;
             const authService = this.application.services.get('auth');
             const result = await authService.register(username, email, new ecies_lib_1.SecureString(password));
@@ -65,35 +35,36 @@ class UserController extends base_1.BaseController {
             return {
                 statusCode: 201,
                 response: {
-                    message: 'Registration successful',
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Registration_Success),
                     data: authResponse,
                 },
             };
         }
         catch (error) {
+            const errorMessage = error instanceof Error
+                ? error.message
+                : (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError);
             return {
                 statusCode: 400,
                 response: {
-                    message: error instanceof Error ? error.message : 'Registration failed',
-                    error: error instanceof Error ? error.message : 'Registration failed',
+                    message: errorMessage,
+                    error: errorMessage,
                 },
             };
         }
     }
-    async handleLogin(req) {
-        // Validate request body before processing
+    async login(req, _res, _next) {
         const validation = (0, userValidation_1.validateLogin)(req.body);
         if (!validation.valid) {
             return {
                 statusCode: 400,
                 response: {
-                    message: 'Validation failed',
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_MissingValidatedData),
                     errors: validation.errors,
                 },
             };
         }
         try {
-            // Validation already confirmed these fields exist and are valid strings
             const { username, password } = req.body;
             const authService = this.application.services.get('auth');
             const result = await authService.login({
@@ -108,7 +79,7 @@ class UserController extends base_1.BaseController {
             return {
                 statusCode: 200,
                 response: {
-                    message: 'Login successful',
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.LoggedIn_Success),
                     data: authResponse,
                 },
             };
@@ -117,46 +88,40 @@ class UserController extends base_1.BaseController {
             return {
                 statusCode: 401,
                 response: {
-                    message: 'Invalid credentials',
-                    error: 'Invalid credentials',
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidCredentials),
+                    error: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidCredentials),
                 },
             };
         }
     }
-    async handleProfile(req) {
-        const user = req
-            .user;
+    async getProfile(req, _res, _next) {
+        const user = req.user;
         if (!user) {
-            return {
-                statusCode: 401,
-                response: {
-                    message: 'Not authenticated',
-                    error: 'Not authenticated',
-                },
-            };
+            throw new i18n_lib_1.HandleableError(new Error((0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_NoUserOnRequest)), { statusCode: 401 });
         }
         try {
-            // Get energy account for balance and reputation
+            // Deserialize the GUID string back to typed ID (round-trips with idToString)
+            const sp = brightchain_lib_1.ServiceProvider.getInstance();
+            const typedId = sp.idProvider.idFromString(user.id);
+            const idRawBytes = sp.idProvider.toBytes(typedId);
+            const memberChecksum = sp.checksumService.calculateChecksum(idRawBytes);
             const energyStore = this.application.services.get('energyStore');
-            const memberChecksum = brightchain_lib_1.Checksum.fromHex(user.memberId);
             const energyAccount = await energyStore.getOrCreate(memberChecksum);
-            // Try to get member email from MemberStore
             let email = '';
             const memberStore = this.application.services.get('memberStore');
             try {
                 if (memberStore) {
-                    const member = await memberStore.getMember(memberChecksum.toUint8Array());
+                    const member = await memberStore.getMember(typedId);
                     email = member.email.toString();
                 }
             }
             catch {
                 // Member lookup failed, continue with empty email
             }
-            // Try to get member profile metadata from MemberStore if available
             let memberProfile;
             try {
                 if (memberStore) {
-                    const profile = await memberStore.getMemberProfile(memberChecksum.toUint8Array());
+                    const profile = await memberStore.getMemberProfile(typedId);
                     if (profile.publicProfile) {
                         memberProfile = {
                             status: profile.publicProfile.status,
@@ -169,10 +134,10 @@ class UserController extends base_1.BaseController {
                 }
             }
             catch {
-                // MemberStore profile not available, continue without profile metadata
+                // MemberStore profile not available
             }
             const userProfile = {
-                memberId: user.memberId,
+                memberId: user.id,
                 username: user.username,
                 email,
                 energyBalance: energyAccount.balance,
@@ -188,7 +153,7 @@ class UserController extends base_1.BaseController {
             return {
                 statusCode: 200,
                 response: {
-                    message: 'Profile retrieved',
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Settings_RetrievedSuccess),
                     data: userProfile,
                 },
             };
@@ -197,29 +162,24 @@ class UserController extends base_1.BaseController {
             return {
                 statusCode: 500,
                 response: {
-                    message: 'Failed to retrieve profile',
-                    error: 'Failed to retrieve profile',
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError),
+                    error: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError),
                 },
             };
         }
     }
-    async handleUpdateProfile(req) {
-        const user = req
-            .user;
+    async updateProfile(req, _res, _next) {
+        const user = req.user;
         if (!user) {
-            return {
-                statusCode: 401,
-                response: {
-                    message: 'Not authenticated',
-                    error: 'Not authenticated',
-                },
-            };
+            throw new i18n_lib_1.HandleableError(new Error((0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_NoUserOnRequest)), { statusCode: 401 });
         }
         try {
             const updateData = req.body;
-            const memberChecksum = brightchain_lib_1.Checksum.fromHex(user.memberId);
-            const memberIdBytes = memberChecksum.toUint8Array();
-            // Persist settings via MemberStore — let errors propagate to return 500
+            // Deserialize the GUID string back to typed ID (round-trips with idToString)
+            const sp = brightchain_lib_1.ServiceProvider.getInstance();
+            const typedId = sp.idProvider.idFromString(user.id);
+            const idRawBytes = sp.idProvider.toBytes(typedId);
+            const memberChecksum = sp.checksumService.calculateChecksum(idRawBytes);
             const memberStore = this.application.services.get('memberStore');
             if (memberStore && updateData.settings) {
                 const completeSettings = {
@@ -227,32 +187,29 @@ class UserController extends base_1.BaseController {
                     minRedundancy: updateData.settings.minRedundancy ?? 3,
                     preferredRegions: updateData.settings.preferredRegions ?? [],
                 };
-                await memberStore.updateMember(memberIdBytes, {
-                    id: memberIdBytes,
+                await memberStore.updateMember(typedId, {
+                    id: typedId,
                     privateChanges: {
                         settings: completeSettings,
                     },
                 });
             }
-            // Get updated energy account for response
             const energyStore = this.application.services.get('energyStore');
             const energyAccount = await energyStore.getOrCreate(memberChecksum);
-            // Try to get member email from MemberStore
             let email = '';
             try {
                 if (memberStore) {
-                    const member = await memberStore.getMember(memberIdBytes);
+                    const member = await memberStore.getMember(typedId);
                     email = member.email.toString();
                 }
             }
             catch {
-                // Member lookup failed, continue with empty email
+                // Member lookup failed
             }
-            // Try to get member profile metadata from MemberStore
             let memberProfile;
             try {
                 if (memberStore) {
-                    const profile = await memberStore.getMemberProfile(memberIdBytes);
+                    const profile = await memberStore.getMemberProfile(typedId);
                     if (profile.publicProfile) {
                         memberProfile = {
                             status: profile.publicProfile.status,
@@ -265,10 +222,10 @@ class UserController extends base_1.BaseController {
                 }
             }
             catch {
-                // MemberStore profile not available, continue without profile metadata
+                // MemberStore profile not available
             }
             const userProfile = {
-                memberId: user.memberId,
+                memberId: user.id,
                 username: user.username,
                 email,
                 energyBalance: energyAccount.balance,
@@ -284,7 +241,7 @@ class UserController extends base_1.BaseController {
             return {
                 statusCode: 200,
                 response: {
-                    message: 'Profile updated successfully',
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Settings_SaveSuccess),
                     data: userProfile,
                 },
             };
@@ -293,12 +250,273 @@ class UserController extends base_1.BaseController {
             return {
                 statusCode: 500,
                 response: {
-                    message: 'Failed to update profile',
-                    error: 'Failed to update profile',
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError),
+                    error: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError),
+                },
+            };
+        }
+    }
+    async changePassword(req, _res, _next) {
+        const validation = (0, userValidation_1.validatePasswordChange)(req.body);
+        if (!validation.valid) {
+            return {
+                statusCode: 400,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_MissingValidatedData),
+                    errors: validation.errors,
+                },
+            };
+        }
+        const user = req.user;
+        if (!user) {
+            throw new i18n_lib_1.HandleableError(new Error((0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_NoUserOnRequest)), { statusCode: 401 });
+        }
+        try {
+            const { currentPassword, newPassword } = req.body;
+            // Deserialize the GUID string back to typed ID (round-trips with idToString)
+            const sp = brightchain_lib_1.ServiceProvider.getInstance();
+            const typedId = sp.idProvider.idFromString(user.id);
+            const authService = this.application.services.get('auth');
+            await authService.changePassword(typedId, currentPassword, newPassword);
+            return {
+                statusCode: 200,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.PasswordChange_Success),
+                    data: {
+                        memberId: user.id,
+                        success: true,
+                    },
+                },
+            };
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error
+                ? error.message
+                : (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Error_PasswordChange);
+            if (errorMessage === 'Invalid credentials') {
+                return {
+                    statusCode: 401,
+                    response: {
+                        message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidCredentials),
+                        error: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidCredentials),
+                    },
+                };
+            }
+            return {
+                statusCode: 500,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Error_PasswordChange),
+                    error: errorMessage,
+                },
+            };
+        }
+    }
+    async generateBackupCodes(req, _res, _next) {
+        const user = req.user;
+        if (!user) {
+            throw new i18n_lib_1.HandleableError(new Error((0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_NoUserOnRequest)), { statusCode: 401 });
+        }
+        try {
+            // Deserialize the GUID string back to typed ID (round-trips with idToString)
+            const sp = brightchain_lib_1.ServiceProvider.getInstance();
+            const typedId = sp.idProvider.idFromString(user.id);
+            const backupCodeService = this.application.services.get('backupCodeService');
+            const codes = await backupCodeService.generateCodes(typedId);
+            return {
+                statusCode: 200,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.BackupCodeRecovery_YourNewCodes),
+                    backupCodes: codes,
+                },
+            };
+        }
+        catch (error) {
+            return {
+                statusCode: 500,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.BackupCodes_FailedToGenerate),
+                    error: error instanceof Error
+                        ? error.message
+                        : (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.BackupCodes_FailedToGenerate),
+                },
+            };
+        }
+    }
+    async getBackupCodeCount(req, _res, _next) {
+        const user = req.user;
+        if (!user) {
+            throw new i18n_lib_1.HandleableError(new Error((0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_NoUserOnRequest)), { statusCode: 401 });
+        }
+        try {
+            // Deserialize the GUID string back to typed ID (round-trips with idToString)
+            const sp = brightchain_lib_1.ServiceProvider.getInstance();
+            const typedId = sp.idProvider.idFromString(user.id);
+            const backupCodeService = this.application.services.get('backupCodeService');
+            const count = await backupCodeService.getCodeCount(typedId);
+            return {
+                statusCode: 200,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.BackupCodes_RetrievedSuccess),
+                    codeCount: count,
+                },
+            };
+        }
+        catch (error) {
+            return {
+                statusCode: 500,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.BackupCodes_FailedToFetch),
+                    error: error instanceof Error
+                        ? error.message
+                        : (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.BackupCodes_FailedToFetch),
+                },
+            };
+        }
+    }
+    async recover(req, _res, _next) {
+        const validation = (0, userValidation_1.validateRecovery)(req.body);
+        if (!validation.valid) {
+            return {
+                statusCode: 400,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_MissingValidatedData),
+                    errors: validation.errors,
+                },
+            };
+        }
+        try {
+            const { email, mnemonic, newPassword } = req.body;
+            const authService = this.application.services.get('auth');
+            const result = await authService.recoverWithMnemonic(email, new ecies_lib_1.SecureString(mnemonic), newPassword);
+            return {
+                statusCode: 200,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.MnemonicRecovery_Success),
+                    data: result,
+                },
+            };
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error
+                ? error.message
+                : (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError);
+            if (errorMessage === 'Invalid credentials' ||
+                errorMessage === 'Invalid mnemonic') {
+                return {
+                    statusCode: 401,
+                    response: {
+                        message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidCredentials),
+                        error: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_InvalidCredentials),
+                    },
+                };
+            }
+            return {
+                statusCode: 500,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError),
+                    error: errorMessage,
+                },
+            };
+        }
+    }
+    async logout(req, _res, _next) {
+        const user = req.user;
+        if (!user) {
+            throw new i18n_lib_1.HandleableError(new Error((0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_NoUserOnRequest)), { statusCode: 401 });
+        }
+        try {
+            const authHeader = String(req.headers
+                ?.authorization ?? '');
+            if (!authHeader.startsWith('Bearer ')) {
+                return {
+                    statusCode: 401,
+                    response: {
+                        message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_TokenMissing),
+                        error: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Validation_TokenMissing),
+                    },
+                };
+            }
+            const token = authHeader.slice('Bearer '.length);
+            const sessionAdapter = this.application.services.get('sessionAdapter');
+            const session = await sessionAdapter.validateToken(token);
+            if (session) {
+                await sessionAdapter.deleteSession(session.sessionId);
+            }
+            return {
+                statusCode: 200,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_Success),
+                },
+            };
+        }
+        catch {
+            return {
+                statusCode: 500,
+                response: {
+                    message: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError),
+                    error: (0, suite_core_lib_1.getSuiteCoreTranslation)(suite_core_lib_1.SuiteCoreStringKey.Common_UnexpectedError),
                 },
             };
         }
     }
-}
+};
 exports.UserController = UserController;
+tslib_1.__decorate([
+    (0, node_express_suite_1.Post)('/register'),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Function]),
+    tslib_1.__metadata("design:returntype", Promise)
+], UserController.prototype, "register", null);
+tslib_1.__decorate([
+    (0, node_express_suite_1.Post)('/login'),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Function]),
+    tslib_1.__metadata("design:returntype", Promise)
+], UserController.prototype, "login", null);
+tslib_1.__decorate([
+    (0, node_express_suite_1.Get)('/profile', { auth: true }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Function]),
+    tslib_1.__metadata("design:returntype", Promise)
+], UserController.prototype, "getProfile", null);
+tslib_1.__decorate([
+    (0, node_express_suite_1.Put)('/profile', { auth: true }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Function]),
+    tslib_1.__metadata("design:returntype", Promise)
+], UserController.prototype, "updateProfile", null);
+tslib_1.__decorate([
+    (0, node_express_suite_1.Post)('/change-password', { auth: true }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Function]),
+    tslib_1.__metadata("design:returntype", Promise)
+], UserController.prototype, "changePassword", null);
+tslib_1.__decorate([
+    (0, node_express_suite_1.Post)('/backup-codes', { auth: true }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Function]),
+    tslib_1.__metadata("design:returntype", Promise)
+], UserController.prototype, "generateBackupCodes", null);
+tslib_1.__decorate([
+    (0, node_express_suite_1.Get)('/backup-codes', { auth: true }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Function]),
+    tslib_1.__metadata("design:returntype", Promise)
+], UserController.prototype, "getBackupCodeCount", null);
+tslib_1.__decorate([
+    (0, node_express_suite_1.Post)('/recover'),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Function]),
+    tslib_1.__metadata("design:returntype", Promise)
+], UserController.prototype, "recover", null);
+tslib_1.__decorate([
+    (0, node_express_suite_1.Post)('/logout', { auth: true }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Function]),
+    tslib_1.__metadata("design:returntype", Promise)
+], UserController.prototype, "logout", null);
+exports.UserController = UserController = tslib_1.__decorate([
+    (0, node_express_suite_1.Controller)(),
+    tslib_1.__metadata("design:paramtypes", [Object])
+], UserController);
 //# sourceMappingURL=user.js.map