@carlonicora/nestjs-neo4jsonapi 1.39.0 → 1.40.0

package/dist/foundations/two-factor/entities/two-factor-verification.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TwoFactorVerificationDescriptor = void 0;
+const common_1 = require("../../../common");
+const two_factor_verification_meta_1 = require("./two-factor-verification.meta");
+/**
+ * TwoFactorVerification Entity Descriptor
+ *
+ * Used for serializing 2FA verification response to JSON:API format.
+ */
+exports.TwoFactorVerificationDescriptor = (0, common_1.defineEntity)()({
+    ...two_factor_verification_meta_1.twoFactorVerificationMeta,
+    isCompanyScoped: false,
+    fields: {
+        success: { type: "boolean", required: true },
+        userId: { type: "string" },
+    },
+    relationships: {},
+});
+//# sourceMappingURL=two-factor-verification.js.map

package/dist/foundations/two-factor/entities/two-factor-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-verification.js","sourceRoot":"","sources":["../../../../src/foundations/two-factor/entities/two-factor-verification.ts"],"names":[],"mappings":";;;AAAA,4CAAuD;AACvD,iFAA2E;AAa3E;;;;GAIG;AACU,QAAA,+BAA+B,GAAG,IAAA,qBAAY,GAAyB,CAAC;IACnF,GAAG,wDAAyB;IAE5B,eAAe,EAAE,KAAK;IAEtB,MAAM,EAAE;QACN,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC3B;IAED,aAAa,EAAE,EAAE;CAClB,CAAC,CAAC"}

package/dist/foundations/two-factor/entities/two-factor-verification.meta.d.ts

@@ -0,0 +1,3 @@
+import { DataMeta } from "../../../common/interfaces/datamodel.interface";
+export declare const twoFactorVerificationMeta: DataMeta;
+//# sourceMappingURL=two-factor-verification.meta.d.ts.map

package/dist/foundations/two-factor/entities/two-factor-verification.meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-verification.meta.d.ts","sourceRoot":"","sources":["../../../../src/foundations/two-factor/entities/two-factor-verification.meta.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gDAAgD,CAAC;AAE1E,eAAO,MAAM,yBAAyB,EAAE,QAKvC,CAAC"}

package/dist/foundations/two-factor/entities/two-factor-verification.meta.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.twoFactorVerificationMeta = void 0;
+exports.twoFactorVerificationMeta = {
+    type: "two-factor-verification",
+    endpoint: "two-factor-verification",
+    nodeName: "twofactorverification",
+    labelName: "TwoFactorVerification",
+};
+//# sourceMappingURL=two-factor-verification.meta.js.map

package/dist/foundations/two-factor/entities/two-factor-verification.meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-verification.meta.js","sourceRoot":"","sources":["../../../../src/foundations/two-factor/entities/two-factor-verification.meta.ts"],"names":[],"mappings":";;;AAEa,QAAA,yBAAyB,GAAa;IACjD,IAAI,EAAE,yBAAyB;IAC/B,QAAQ,EAAE,yBAAyB;IACnC,QAAQ,EAAE,uBAAuB;IACjC,SAAS,EAAE,uBAAuB;CACnC,CAAC"}

package/dist/foundations/two-factor/guards/pending-auth.guard.d.ts

@@ -0,0 +1,35 @@
+import { CanActivate, ExecutionContext } from "@nestjs/common";
+import { JwtService } from "@nestjs/jwt";
+/**
+ * Decoded pending JWT payload structure.
+ * This token is issued after password validation but before 2FA verification.
+ */
+export interface PendingAuthPayload {
+    userId: string;
+    pendingId: string;
+    type: "pending_2fa";
+    exp: number;
+}
+/**
+ * Guard for two-factor verification endpoints.
+ *
+ * This guard validates pending 2FA tokens that are issued after password validation.
+ * Pending tokens have limited scope and cannot access protected endpoints.
+ * They are only valid for 2FA verification endpoints.
+ *
+ * The guard:
+ * 1. Extracts the Bearer token from Authorization header
+ * 2. Verifies the JWT signature
+ * 3. Validates that the token type is "pending_2fa"
+ * 4. Attaches the decoded payload to request.pendingAuth
+ */
+export declare class PendingAuthGuard implements CanActivate {
+    private readonly jwtService;
+    constructor(jwtService: JwtService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    /**
+     * Check if the decoded token is a valid pending 2FA token.
+     */
+    private isPendingToken;
+}
+//# sourceMappingURL=pending-auth.guard.d.ts.map

package/dist/foundations/two-factor/guards/pending-auth.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-auth.guard.d.ts","sourceRoot":"","sources":["../../../../src/foundations/two-factor/guards/pending-auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAqC,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,aAAa,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;;;;;GAYG;AACH,qBACa,gBAAiB,YAAW,WAAW;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAE7C,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IA2B9D;;OAEG;IACH,OAAO,CAAC,cAAc;CASvB"}

package/dist/foundations/two-factor/guards/pending-auth.guard.js

@@ -0,0 +1,70 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PendingAuthGuard = void 0;
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+/**
+ * Guard for two-factor verification endpoints.
+ *
+ * This guard validates pending 2FA tokens that are issued after password validation.
+ * Pending tokens have limited scope and cannot access protected endpoints.
+ * They are only valid for 2FA verification endpoints.
+ *
+ * The guard:
+ * 1. Extracts the Bearer token from Authorization header
+ * 2. Verifies the JWT signature
+ * 3. Validates that the token type is "pending_2fa"
+ * 4. Attaches the decoded payload to request.pendingAuth
+ */
+let PendingAuthGuard = class PendingAuthGuard {
+    constructor(jwtService) {
+        this.jwtService = jwtService;
+    }
+    async canActivate(context) {
+        const request = context.switchToHttp().getRequest();
+        const authHeader = request.headers.authorization;
+        if (!authHeader?.startsWith("Bearer ")) {
+            throw new common_1.UnauthorizedException("Missing authorization header");
+        }
+        const token = authHeader.slice(7);
+        try {
+            const decoded = this.jwtService.verify(token);
+            if (!this.isPendingToken(decoded)) {
+                throw new common_1.UnauthorizedException("Invalid token type - expected pending 2FA token");
+            }
+            request.pendingAuth = decoded;
+            return true;
+        }
+        catch (error) {
+            if (error instanceof common_1.UnauthorizedException) {
+                throw error;
+            }
+            throw new common_1.UnauthorizedException("Invalid or expired pending token");
+        }
+    }
+    /**
+     * Check if the decoded token is a valid pending 2FA token.
+     */
+    isPendingToken(decoded) {
+        return (decoded &&
+            typeof decoded === "object" &&
+            decoded.type === "pending_2fa" &&
+            typeof decoded.userId === "string" &&
+            typeof decoded.pendingId === "string");
+    }
+};
+exports.PendingAuthGuard = PendingAuthGuard;
+exports.PendingAuthGuard = PendingAuthGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [jwt_1.JwtService])
+], PendingAuthGuard);
+//# sourceMappingURL=pending-auth.guard.js.map

package/dist/foundations/two-factor/guards/pending-auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-auth.guard.js","sourceRoot":"","sources":["../../../../src/foundations/two-factor/guards/pending-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAkG;AAClG,qCAAyC;AAazC;;;;;;;;;;;;GAYG;AAEI,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC3B,YAA6B,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAEvD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAEjD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,8BAAqB,CAAC,8BAA8B,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAqB,KAAK,CAAC,CAAC;YAElE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,8BAAqB,CAAC,iDAAiD,CAAC,CAAC;YACrF,CAAC;YAED,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,8BAAqB,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,OAAY;QACjC,OAAO,CACL,OAAO;YACP,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,CAAC,IAAI,KAAK,aAAa;YAC9B,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;YAClC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CACtC,CAAC;IACJ,CAAC;CACF,CAAA;AA1CY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAE8B,gBAAU;GADxC,gBAAgB,CA0C5B"}

package/dist/foundations/two-factor/index.d.ts

@@ -0,0 +1,47 @@
+export { BackupCode, BackupCodeDescriptor, BackupCodeDescriptorType } from "./entities/backup-code";
+export { backupCodeMeta } from "./entities/backup-code.meta";
+export { BackupCodesCount, BackupCodesCountDescriptor, BackupCodesCountDescriptorType, } from "./entities/backup-codes-count";
+export { backupCodesCountMeta } from "./entities/backup-codes-count.meta";
+export { BackupCodesGeneration, BackupCodesGenerationDescriptor, BackupCodesGenerationDescriptorType, } from "./entities/backup-codes-generation";
+export { backupCodesGenerationMeta } from "./entities/backup-codes-generation.meta";
+export { Passkey, PasskeyDescriptor, PasskeyDescriptorType } from "./entities/passkey";
+export { passkeyMeta } from "./entities/passkey.meta";
+export { PasskeyAuthenticationOptions, PasskeyAuthenticationOptionsDescriptor, PasskeyAuthenticationOptionsDescriptorType, } from "./entities/passkey-authentication-options";
+export { passkeyAuthenticationOptionsMeta } from "./entities/passkey-authentication-options.meta";
+export { PasskeyRegistrationOptions, PasskeyRegistrationOptionsDescriptor, PasskeyRegistrationOptionsDescriptorType, } from "./entities/passkey-registration-options";
+export { passkeyRegistrationOptionsMeta } from "./entities/passkey-registration-options.meta";
+export { PendingTwoFactor, PendingTwoFactorDescriptor, PendingTwoFactorDescriptorType, } from "./entities/pending-two-factor";
+export { pendingTwoFactorMeta } from "./entities/pending-two-factor.meta";
+export { TotpAuthenticator, TotpAuthenticatorDescriptor, TotpAuthenticatorDescriptorType, } from "./entities/totp-authenticator";
+export { totpAuthenticatorMeta } from "./entities/totp-authenticator.meta";
+export { TotpSetup, TotpSetupDescriptor, TotpSetupDescriptorType } from "./entities/totp-setup";
+export { totpSetupMeta } from "./entities/totp-setup.meta";
+export { TwoFactorChallenge, TwoFactorChallengeDescriptor, TwoFactorChallengeDescriptorType, } from "./entities/two-factor-challenge";
+export { twoFactorChallengeMeta } from "./entities/two-factor-challenge.meta";
+export { TwoFactorConfig, TwoFactorConfigDescriptor, TwoFactorConfigDescriptorType, } from "./entities/two-factor-config";
+export { twoFactorConfigMeta } from "./entities/two-factor-config.meta";
+export { TwoFactorStatus, TwoFactorStatusDescriptor, TwoFactorStatusDescriptorType, } from "./entities/two-factor-status";
+export { twoFactorStatusMeta } from "./entities/two-factor-status.meta";
+export { TwoFactorVerification, TwoFactorVerificationDescriptor, TwoFactorVerificationDescriptorType, } from "./entities/two-factor-verification";
+export { twoFactorVerificationMeta } from "./entities/two-factor-verification.meta";
+export { BackupCodeRepository } from "./repositories/backup-code.repository";
+export { PasskeyRepository } from "./repositories/passkey.repository";
+export { PendingTwoFactorRepository } from "./repositories/pending-two-factor.repository";
+export { TotpAuthenticatorRepository } from "./repositories/totp-authenticator.repository";
+export { TwoFactorConfigRepository } from "./repositories/two-factor-config.repository";
+export { BackupCodeGenerationResult, BackupCodeService } from "./services/backup-code.service";
+export { PasskeyService } from "./services/passkey.service";
+export { TotpEncryptionService } from "./services/totp-encryption.service";
+export { TotpAuthenticatorInfo, TotpService, TotpSetupResponse } from "./services/totp.service";
+export { PendingSession, TwoFactorMethod, TwoFactorService, VerificationResult } from "./services/two-factor.service";
+export { PendingAuthGuard, PendingAuthPayload } from "./guards/pending-auth.guard";
+export { TotpSetupAttributesDTO, TotpSetupDataDTO, TotpSetupDTO } from "./dtos/totp-setup.dto";
+export { TotpSetupVerifyAttributesDTO, TotpSetupVerifyDataDTO, TotpSetupVerifyDTO, TotpVerifyAttributesDTO, TotpVerifyDataDTO, TotpVerifyDTO, } from "./dtos/totp-verify.dto";
+export { PasskeyAuthenticationOptionsDTO, PasskeyRegistrationOptionsAttributesDTO, PasskeyRegistrationOptionsDataDTO, PasskeyRegistrationOptionsDTO, } from "./dtos/passkey-options.dto";
+export { PasskeyAuthenticationVerifyAttributesDTO, PasskeyAuthenticationVerifyDataDTO, PasskeyAuthenticationVerifyDTO, PasskeyRegistrationVerifyAttributesDTO, PasskeyRegistrationVerifyDataDTO, PasskeyRegistrationVerifyDTO, PasskeyRenameAttributesDTO, PasskeyRenameDataDTO, PasskeyRenameDTO, WebAuthnAuthenticationResponseDTO, WebAuthnRegistrationResponseDTO, } from "./dtos/passkey-verify.dto";
+export { BackupCodeVerifyAttributesDTO, BackupCodeVerifyDataDTO, BackupCodeVerifyDTO, TwoFactorChallengeAttributesDTO, TwoFactorChallengeDataDTO, TwoFactorChallengeDTO, TwoFactorEnableAttributesDTO, TwoFactorEnableDataDTO, TwoFactorEnableDTO, } from "./dtos/two-factor-verify.dto";
+export { PasskeyController } from "./controllers/passkey.controller";
+export { TotpController } from "./controllers/totp.controller";
+export { TwoFactorController } from "./controllers/two-factor.controller";
+export { TwoFactorModule } from "./two-factor.module";
+//# sourceMappingURL=index.d.ts.map

package/dist/foundations/two-factor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/foundations/two-factor/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,+BAA+B,EAC/B,mCAAmC,GACpC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,4BAA4B,EAC5B,sCAAsC,EACtC,0CAA0C,GAC3C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AAClG,OAAO,EACL,0BAA0B,EAC1B,oCAAoC,EACpC,wCAAwC,GACzC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,8BAA8B,EAAE,MAAM,8CAA8C,CAAC;AAC9F,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EACL,iBAAiB,EACjB,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EACL,kBAAkB,EAClB,4BAA4B,EAC5B,gCAAgC,GACjC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EACL,qBAAqB,EACrB,+BAA+B,EAC/B,mCAAmC,GACpC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAGpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,8CAA8C,CAAC;AAC3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAGxF,OAAO,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGtH,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAGnF,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,+BAA+B,EAC/B,uCAAuC,EACvC,iCAAiC,EACjC,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,wCAAwC,EACxC,kCAAkC,EAClC,8BAA8B,EAC9B,sCAAsC,EACtC,gCAAgC,EAChC,4BAA4B,EAC5B,0BAA0B,EAC1B,oBAAoB,EACpB,gBAAgB,EAChB,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,mBAAmB,EACnB,+BAA+B,EAC/B,yBAAyB,EACzB,qBAAqB,EACrB,4BAA4B,EAC5B,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAG1E,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/foundations/two-factor/index.js

@@ -0,0 +1,134 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasskeyRegistrationOptionsDTO = exports.PasskeyRegistrationOptionsDataDTO = exports.PasskeyRegistrationOptionsAttributesDTO = exports.PasskeyAuthenticationOptionsDTO = exports.TotpVerifyDTO = exports.TotpVerifyDataDTO = exports.TotpVerifyAttributesDTO = exports.TotpSetupVerifyDTO = exports.TotpSetupVerifyDataDTO = exports.TotpSetupVerifyAttributesDTO = exports.TotpSetupDTO = exports.TotpSetupDataDTO = exports.TotpSetupAttributesDTO = exports.PendingAuthGuard = exports.TwoFactorService = exports.TotpService = exports.TotpEncryptionService = exports.PasskeyService = exports.BackupCodeService = exports.TwoFactorConfigRepository = exports.TotpAuthenticatorRepository = exports.PendingTwoFactorRepository = exports.PasskeyRepository = exports.BackupCodeRepository = exports.twoFactorVerificationMeta = exports.TwoFactorVerificationDescriptor = exports.twoFactorStatusMeta = exports.TwoFactorStatusDescriptor = exports.twoFactorConfigMeta = exports.TwoFactorConfigDescriptor = exports.twoFactorChallengeMeta = exports.TwoFactorChallengeDescriptor = exports.totpSetupMeta = exports.TotpSetupDescriptor = exports.totpAuthenticatorMeta = exports.TotpAuthenticatorDescriptor = exports.pendingTwoFactorMeta = exports.PendingTwoFactorDescriptor = exports.passkeyRegistrationOptionsMeta = exports.PasskeyRegistrationOptionsDescriptor = exports.passkeyAuthenticationOptionsMeta = exports.PasskeyAuthenticationOptionsDescriptor = exports.passkeyMeta = exports.PasskeyDescriptor = exports.backupCodesGenerationMeta = exports.BackupCodesGenerationDescriptor = exports.backupCodesCountMeta = exports.BackupCodesCountDescriptor = exports.backupCodeMeta = exports.BackupCodeDescriptor = void 0;
+exports.TwoFactorModule = exports.TwoFactorController = exports.TotpController = exports.PasskeyController = exports.TwoFactorEnableDTO = exports.TwoFactorEnableDataDTO = exports.TwoFactorEnableAttributesDTO = exports.TwoFactorChallengeDTO = exports.TwoFactorChallengeDataDTO = exports.TwoFactorChallengeAttributesDTO = exports.BackupCodeVerifyDTO = exports.BackupCodeVerifyDataDTO = exports.BackupCodeVerifyAttributesDTO = exports.WebAuthnRegistrationResponseDTO = exports.WebAuthnAuthenticationResponseDTO = exports.PasskeyRenameDTO = exports.PasskeyRenameDataDTO = exports.PasskeyRenameAttributesDTO = exports.PasskeyRegistrationVerifyDTO = exports.PasskeyRegistrationVerifyDataDTO = exports.PasskeyRegistrationVerifyAttributesDTO = exports.PasskeyAuthenticationVerifyDTO = exports.PasskeyAuthenticationVerifyDataDTO = exports.PasskeyAuthenticationVerifyAttributesDTO = void 0;
+// Entities
+var backup_code_1 = require("./entities/backup-code");
+Object.defineProperty(exports, "BackupCodeDescriptor", { enumerable: true, get: function () { return backup_code_1.BackupCodeDescriptor; } });
+var backup_code_meta_1 = require("./entities/backup-code.meta");
+Object.defineProperty(exports, "backupCodeMeta", { enumerable: true, get: function () { return backup_code_meta_1.backupCodeMeta; } });
+var backup_codes_count_1 = require("./entities/backup-codes-count");
+Object.defineProperty(exports, "BackupCodesCountDescriptor", { enumerable: true, get: function () { return backup_codes_count_1.BackupCodesCountDescriptor; } });
+var backup_codes_count_meta_1 = require("./entities/backup-codes-count.meta");
+Object.defineProperty(exports, "backupCodesCountMeta", { enumerable: true, get: function () { return backup_codes_count_meta_1.backupCodesCountMeta; } });
+var backup_codes_generation_1 = require("./entities/backup-codes-generation");
+Object.defineProperty(exports, "BackupCodesGenerationDescriptor", { enumerable: true, get: function () { return backup_codes_generation_1.BackupCodesGenerationDescriptor; } });
+var backup_codes_generation_meta_1 = require("./entities/backup-codes-generation.meta");
+Object.defineProperty(exports, "backupCodesGenerationMeta", { enumerable: true, get: function () { return backup_codes_generation_meta_1.backupCodesGenerationMeta; } });
+var passkey_1 = require("./entities/passkey");
+Object.defineProperty(exports, "PasskeyDescriptor", { enumerable: true, get: function () { return passkey_1.PasskeyDescriptor; } });
+var passkey_meta_1 = require("./entities/passkey.meta");
+Object.defineProperty(exports, "passkeyMeta", { enumerable: true, get: function () { return passkey_meta_1.passkeyMeta; } });
+var passkey_authentication_options_1 = require("./entities/passkey-authentication-options");
+Object.defineProperty(exports, "PasskeyAuthenticationOptionsDescriptor", { enumerable: true, get: function () { return passkey_authentication_options_1.PasskeyAuthenticationOptionsDescriptor; } });
+var passkey_authentication_options_meta_1 = require("./entities/passkey-authentication-options.meta");
+Object.defineProperty(exports, "passkeyAuthenticationOptionsMeta", { enumerable: true, get: function () { return passkey_authentication_options_meta_1.passkeyAuthenticationOptionsMeta; } });
+var passkey_registration_options_1 = require("./entities/passkey-registration-options");
+Object.defineProperty(exports, "PasskeyRegistrationOptionsDescriptor", { enumerable: true, get: function () { return passkey_registration_options_1.PasskeyRegistrationOptionsDescriptor; } });
+var passkey_registration_options_meta_1 = require("./entities/passkey-registration-options.meta");
+Object.defineProperty(exports, "passkeyRegistrationOptionsMeta", { enumerable: true, get: function () { return passkey_registration_options_meta_1.passkeyRegistrationOptionsMeta; } });
+var pending_two_factor_1 = require("./entities/pending-two-factor");
+Object.defineProperty(exports, "PendingTwoFactorDescriptor", { enumerable: true, get: function () { return pending_two_factor_1.PendingTwoFactorDescriptor; } });
+var pending_two_factor_meta_1 = require("./entities/pending-two-factor.meta");
+Object.defineProperty(exports, "pendingTwoFactorMeta", { enumerable: true, get: function () { return pending_two_factor_meta_1.pendingTwoFactorMeta; } });
+var totp_authenticator_1 = require("./entities/totp-authenticator");
+Object.defineProperty(exports, "TotpAuthenticatorDescriptor", { enumerable: true, get: function () { return totp_authenticator_1.TotpAuthenticatorDescriptor; } });
+var totp_authenticator_meta_1 = require("./entities/totp-authenticator.meta");
+Object.defineProperty(exports, "totpAuthenticatorMeta", { enumerable: true, get: function () { return totp_authenticator_meta_1.totpAuthenticatorMeta; } });
+var totp_setup_1 = require("./entities/totp-setup");
+Object.defineProperty(exports, "TotpSetupDescriptor", { enumerable: true, get: function () { return totp_setup_1.TotpSetupDescriptor; } });
+var totp_setup_meta_1 = require("./entities/totp-setup.meta");
+Object.defineProperty(exports, "totpSetupMeta", { enumerable: true, get: function () { return totp_setup_meta_1.totpSetupMeta; } });
+var two_factor_challenge_1 = require("./entities/two-factor-challenge");
+Object.defineProperty(exports, "TwoFactorChallengeDescriptor", { enumerable: true, get: function () { return two_factor_challenge_1.TwoFactorChallengeDescriptor; } });
+var two_factor_challenge_meta_1 = require("./entities/two-factor-challenge.meta");
+Object.defineProperty(exports, "twoFactorChallengeMeta", { enumerable: true, get: function () { return two_factor_challenge_meta_1.twoFactorChallengeMeta; } });
+var two_factor_config_1 = require("./entities/two-factor-config");
+Object.defineProperty(exports, "TwoFactorConfigDescriptor", { enumerable: true, get: function () { return two_factor_config_1.TwoFactorConfigDescriptor; } });
+var two_factor_config_meta_1 = require("./entities/two-factor-config.meta");
+Object.defineProperty(exports, "twoFactorConfigMeta", { enumerable: true, get: function () { return two_factor_config_meta_1.twoFactorConfigMeta; } });
+var two_factor_status_1 = require("./entities/two-factor-status");
+Object.defineProperty(exports, "TwoFactorStatusDescriptor", { enumerable: true, get: function () { return two_factor_status_1.TwoFactorStatusDescriptor; } });
+var two_factor_status_meta_1 = require("./entities/two-factor-status.meta");
+Object.defineProperty(exports, "twoFactorStatusMeta", { enumerable: true, get: function () { return two_factor_status_meta_1.twoFactorStatusMeta; } });
+var two_factor_verification_1 = require("./entities/two-factor-verification");
+Object.defineProperty(exports, "TwoFactorVerificationDescriptor", { enumerable: true, get: function () { return two_factor_verification_1.TwoFactorVerificationDescriptor; } });
+var two_factor_verification_meta_1 = require("./entities/two-factor-verification.meta");
+Object.defineProperty(exports, "twoFactorVerificationMeta", { enumerable: true, get: function () { return two_factor_verification_meta_1.twoFactorVerificationMeta; } });
+// Repositories
+var backup_code_repository_1 = require("./repositories/backup-code.repository");
+Object.defineProperty(exports, "BackupCodeRepository", { enumerable: true, get: function () { return backup_code_repository_1.BackupCodeRepository; } });
+var passkey_repository_1 = require("./repositories/passkey.repository");
+Object.defineProperty(exports, "PasskeyRepository", { enumerable: true, get: function () { return passkey_repository_1.PasskeyRepository; } });
+var pending_two_factor_repository_1 = require("./repositories/pending-two-factor.repository");
+Object.defineProperty(exports, "PendingTwoFactorRepository", { enumerable: true, get: function () { return pending_two_factor_repository_1.PendingTwoFactorRepository; } });
+var totp_authenticator_repository_1 = require("./repositories/totp-authenticator.repository");
+Object.defineProperty(exports, "TotpAuthenticatorRepository", { enumerable: true, get: function () { return totp_authenticator_repository_1.TotpAuthenticatorRepository; } });
+var two_factor_config_repository_1 = require("./repositories/two-factor-config.repository");
+Object.defineProperty(exports, "TwoFactorConfigRepository", { enumerable: true, get: function () { return two_factor_config_repository_1.TwoFactorConfigRepository; } });
+// Services
+var backup_code_service_1 = require("./services/backup-code.service");
+Object.defineProperty(exports, "BackupCodeService", { enumerable: true, get: function () { return backup_code_service_1.BackupCodeService; } });
+var passkey_service_1 = require("./services/passkey.service");
+Object.defineProperty(exports, "PasskeyService", { enumerable: true, get: function () { return passkey_service_1.PasskeyService; } });
+var totp_encryption_service_1 = require("./services/totp-encryption.service");
+Object.defineProperty(exports, "TotpEncryptionService", { enumerable: true, get: function () { return totp_encryption_service_1.TotpEncryptionService; } });
+var totp_service_1 = require("./services/totp.service");
+Object.defineProperty(exports, "TotpService", { enumerable: true, get: function () { return totp_service_1.TotpService; } });
+var two_factor_service_1 = require("./services/two-factor.service");
+Object.defineProperty(exports, "TwoFactorService", { enumerable: true, get: function () { return two_factor_service_1.TwoFactorService; } });
+// Guards
+var pending_auth_guard_1 = require("./guards/pending-auth.guard");
+Object.defineProperty(exports, "PendingAuthGuard", { enumerable: true, get: function () { return pending_auth_guard_1.PendingAuthGuard; } });
+// DTOs - TOTP
+var totp_setup_dto_1 = require("./dtos/totp-setup.dto");
+Object.defineProperty(exports, "TotpSetupAttributesDTO", { enumerable: true, get: function () { return totp_setup_dto_1.TotpSetupAttributesDTO; } });
+Object.defineProperty(exports, "TotpSetupDataDTO", { enumerable: true, get: function () { return totp_setup_dto_1.TotpSetupDataDTO; } });
+Object.defineProperty(exports, "TotpSetupDTO", { enumerable: true, get: function () { return totp_setup_dto_1.TotpSetupDTO; } });
+var totp_verify_dto_1 = require("./dtos/totp-verify.dto");
+Object.defineProperty(exports, "TotpSetupVerifyAttributesDTO", { enumerable: true, get: function () { return totp_verify_dto_1.TotpSetupVerifyAttributesDTO; } });
+Object.defineProperty(exports, "TotpSetupVerifyDataDTO", { enumerable: true, get: function () { return totp_verify_dto_1.TotpSetupVerifyDataDTO; } });
+Object.defineProperty(exports, "TotpSetupVerifyDTO", { enumerable: true, get: function () { return totp_verify_dto_1.TotpSetupVerifyDTO; } });
+Object.defineProperty(exports, "TotpVerifyAttributesDTO", { enumerable: true, get: function () { return totp_verify_dto_1.TotpVerifyAttributesDTO; } });
+Object.defineProperty(exports, "TotpVerifyDataDTO", { enumerable: true, get: function () { return totp_verify_dto_1.TotpVerifyDataDTO; } });
+Object.defineProperty(exports, "TotpVerifyDTO", { enumerable: true, get: function () { return totp_verify_dto_1.TotpVerifyDTO; } });
+// DTOs - Passkey
+var passkey_options_dto_1 = require("./dtos/passkey-options.dto");
+Object.defineProperty(exports, "PasskeyAuthenticationOptionsDTO", { enumerable: true, get: function () { return passkey_options_dto_1.PasskeyAuthenticationOptionsDTO; } });
+Object.defineProperty(exports, "PasskeyRegistrationOptionsAttributesDTO", { enumerable: true, get: function () { return passkey_options_dto_1.PasskeyRegistrationOptionsAttributesDTO; } });
+Object.defineProperty(exports, "PasskeyRegistrationOptionsDataDTO", { enumerable: true, get: function () { return passkey_options_dto_1.PasskeyRegistrationOptionsDataDTO; } });
+Object.defineProperty(exports, "PasskeyRegistrationOptionsDTO", { enumerable: true, get: function () { return passkey_options_dto_1.PasskeyRegistrationOptionsDTO; } });
+var passkey_verify_dto_1 = require("./dtos/passkey-verify.dto");
+Object.defineProperty(exports, "PasskeyAuthenticationVerifyAttributesDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.PasskeyAuthenticationVerifyAttributesDTO; } });
+Object.defineProperty(exports, "PasskeyAuthenticationVerifyDataDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.PasskeyAuthenticationVerifyDataDTO; } });
+Object.defineProperty(exports, "PasskeyAuthenticationVerifyDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.PasskeyAuthenticationVerifyDTO; } });
+Object.defineProperty(exports, "PasskeyRegistrationVerifyAttributesDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.PasskeyRegistrationVerifyAttributesDTO; } });
+Object.defineProperty(exports, "PasskeyRegistrationVerifyDataDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.PasskeyRegistrationVerifyDataDTO; } });
+Object.defineProperty(exports, "PasskeyRegistrationVerifyDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.PasskeyRegistrationVerifyDTO; } });
+Object.defineProperty(exports, "PasskeyRenameAttributesDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.PasskeyRenameAttributesDTO; } });
+Object.defineProperty(exports, "PasskeyRenameDataDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.PasskeyRenameDataDTO; } });
+Object.defineProperty(exports, "PasskeyRenameDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.PasskeyRenameDTO; } });
+Object.defineProperty(exports, "WebAuthnAuthenticationResponseDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.WebAuthnAuthenticationResponseDTO; } });
+Object.defineProperty(exports, "WebAuthnRegistrationResponseDTO", { enumerable: true, get: function () { return passkey_verify_dto_1.WebAuthnRegistrationResponseDTO; } });
+// DTOs - Two-Factor
+var two_factor_verify_dto_1 = require("./dtos/two-factor-verify.dto");
+Object.defineProperty(exports, "BackupCodeVerifyAttributesDTO", { enumerable: true, get: function () { return two_factor_verify_dto_1.BackupCodeVerifyAttributesDTO; } });
+Object.defineProperty(exports, "BackupCodeVerifyDataDTO", { enumerable: true, get: function () { return two_factor_verify_dto_1.BackupCodeVerifyDataDTO; } });
+Object.defineProperty(exports, "BackupCodeVerifyDTO", { enumerable: true, get: function () { return two_factor_verify_dto_1.BackupCodeVerifyDTO; } });
+Object.defineProperty(exports, "TwoFactorChallengeAttributesDTO", { enumerable: true, get: function () { return two_factor_verify_dto_1.TwoFactorChallengeAttributesDTO; } });
+Object.defineProperty(exports, "TwoFactorChallengeDataDTO", { enumerable: true, get: function () { return two_factor_verify_dto_1.TwoFactorChallengeDataDTO; } });
+Object.defineProperty(exports, "TwoFactorChallengeDTO", { enumerable: true, get: function () { return two_factor_verify_dto_1.TwoFactorChallengeDTO; } });
+Object.defineProperty(exports, "TwoFactorEnableAttributesDTO", { enumerable: true, get: function () { return two_factor_verify_dto_1.TwoFactorEnableAttributesDTO; } });
+Object.defineProperty(exports, "TwoFactorEnableDataDTO", { enumerable: true, get: function () { return two_factor_verify_dto_1.TwoFactorEnableDataDTO; } });
+Object.defineProperty(exports, "TwoFactorEnableDTO", { enumerable: true, get: function () { return two_factor_verify_dto_1.TwoFactorEnableDTO; } });
+// Controllers
+var passkey_controller_1 = require("./controllers/passkey.controller");
+Object.defineProperty(exports, "PasskeyController", { enumerable: true, get: function () { return passkey_controller_1.PasskeyController; } });
+var totp_controller_1 = require("./controllers/totp.controller");
+Object.defineProperty(exports, "TotpController", { enumerable: true, get: function () { return totp_controller_1.TotpController; } });
+var two_factor_controller_1 = require("./controllers/two-factor.controller");
+Object.defineProperty(exports, "TwoFactorController", { enumerable: true, get: function () { return two_factor_controller_1.TwoFactorController; } });
+// Module
+var two_factor_module_1 = require("./two-factor.module");
+Object.defineProperty(exports, "TwoFactorModule", { enumerable: true, get: function () { return two_factor_module_1.TwoFactorModule; } });
+//# sourceMappingURL=index.js.map

package/dist/foundations/two-factor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/foundations/two-factor/index.ts"],"names":[],"mappings":";;;;AAAA,WAAW;AACX,sDAAoG;AAA/E,mHAAA,oBAAoB,OAAA;AACzC,gEAA6D;AAApD,kHAAA,cAAc,OAAA;AACvB,oEAIuC;AAFrC,gIAAA,0BAA0B,OAAA;AAG5B,8EAA0E;AAAjE,+HAAA,oBAAoB,OAAA;AAC7B,8EAI4C;AAF1C,0IAAA,+BAA+B,OAAA;AAGjC,wFAAoF;AAA3E,yIAAA,yBAAyB,OAAA;AAClC,8CAAuF;AAArE,4GAAA,iBAAiB,OAAA;AACnC,wDAAsD;AAA7C,2GAAA,WAAW,OAAA;AACpB,4FAImD;AAFjD,wJAAA,sCAAsC,OAAA;AAGxC,sGAAkG;AAAzF,uJAAA,gCAAgC,OAAA;AACzC,wFAIiD;AAF/C,oJAAA,oCAAoC,OAAA;AAGtC,kGAA8F;AAArF,mJAAA,8BAA8B,OAAA;AACvC,oEAIuC;AAFrC,gIAAA,0BAA0B,OAAA;AAG5B,8EAA0E;AAAjE,+HAAA,oBAAoB,OAAA;AAC7B,oEAIuC;AAFrC,iIAAA,2BAA2B,OAAA;AAG7B,8EAA2E;AAAlE,gIAAA,qBAAqB,OAAA;AAC9B,oDAAgG;AAA5E,iHAAA,mBAAmB,OAAA;AACvC,8DAA2D;AAAlD,gHAAA,aAAa,OAAA;AACtB,wEAIyC;AAFvC,oIAAA,4BAA4B,OAAA;AAG9B,kFAA8E;AAArE,mIAAA,sBAAsB,OAAA;AAC/B,kEAIsC;AAFpC,8HAAA,yBAAyB,OAAA;AAG3B,4EAAwE;AAA/D,6HAAA,mBAAmB,OAAA;AAC5B,kEAIsC;AAFpC,8HAAA,yBAAyB,OAAA;AAG3B,4EAAwE;AAA/D,6HAAA,mBAAmB,OAAA;AAC5B,8EAI4C;AAF1C,0IAAA,+BAA+B,OAAA;AAGjC,wFAAoF;AAA3E,yIAAA,yBAAyB,OAAA;AAElC,eAAe;AACf,gFAA6E;AAApE,8HAAA,oBAAoB,OAAA;AAC7B,wEAAsE;AAA7D,uHAAA,iBAAiB,OAAA;AAC1B,8FAA0F;AAAjF,2IAAA,0BAA0B,OAAA;AACnC,8FAA2F;AAAlF,4IAAA,2BAA2B,OAAA;AACpC,4FAAwF;AAA/E,yIAAA,yBAAyB,OAAA;AAElC,WAAW;AACX,sEAA+F;AAA1D,wHAAA,iBAAiB,OAAA;AACtD,8DAA4D;AAAnD,iHAAA,cAAc,OAAA;AACvB,8EAA2E;AAAlE,gIAAA,qBAAqB,OAAA;AAC9B,wDAAgG;AAAhE,2GAAA,WAAW,OAAA;AAC3C,oEAAsH;AAA5E,sHAAA,gBAAgB,OAAA;AAE1D,SAAS;AACT,kEAAmF;AAA1E,sHAAA,gBAAgB,OAAA;AAEzB,cAAc;AACd,wDAA+F;AAAtF,wHAAA,sBAAsB,OAAA;AAAE,kHAAA,gBAAgB,OAAA;AAAE,8GAAA,YAAY,OAAA;AAC/D,0DAOgC;AAN9B,+HAAA,4BAA4B,OAAA;AAC5B,yHAAA,sBAAsB,OAAA;AACtB,qHAAA,kBAAkB,OAAA;AAClB,0HAAA,uBAAuB,OAAA;AACvB,oHAAA,iBAAiB,OAAA;AACjB,gHAAA,aAAa,OAAA;AAGf,iBAAiB;AACjB,kEAKoC;AAJlC,sIAAA,+BAA+B,OAAA;AAC/B,8IAAA,uCAAuC,OAAA;AACvC,wIAAA,iCAAiC,OAAA;AACjC,oIAAA,6BAA6B,OAAA;AAE/B,gEAYmC;AAXjC,8IAAA,wCAAwC,OAAA;AACxC,wIAAA,kCAAkC,OAAA;AAClC,oIAAA,8BAA8B,OAAA;AAC9B,4IAAA,sCAAsC,OAAA;AACtC,sIAAA,gCAAgC,OAAA;AAChC,kIAAA,4BAA4B,OAAA;AAC5B,gIAAA,0BAA0B,OAAA;AAC1B,0HAAA,oBAAoB,OAAA;AACpB,sHAAA,gBAAgB,OAAA;AAChB,uIAAA,iCAAiC,OAAA;AACjC,qIAAA,+BAA+B,OAAA;AAGjC,oBAAoB;AACpB,sEAUsC;AATpC,sIAAA,6BAA6B,OAAA;AAC7B,gIAAA,uBAAuB,OAAA;AACvB,4HAAA,mBAAmB,OAAA;AACnB,wIAAA,+BAA+B,OAAA;AAC/B,kIAAA,yBAAyB,OAAA;AACzB,8HAAA,qBAAqB,OAAA;AACrB,qIAAA,4BAA4B,OAAA;AAC5B,+HAAA,sBAAsB,OAAA;AACtB,2HAAA,kBAAkB,OAAA;AAGpB,cAAc;AACd,uEAAqE;AAA5D,uHAAA,iBAAiB,OAAA;AAC1B,iEAA+D;AAAtD,iHAAA,cAAc,OAAA;AACvB,6EAA0E;AAAjE,4HAAA,mBAAmB,OAAA;AAE5B,SAAS;AACT,yDAAsD;AAA7C,oHAAA,eAAe,OAAA"}

package/dist/foundations/two-factor/repositories/backup-code.repository.d.ts

@@ -0,0 +1,34 @@
+import { ClsService } from "nestjs-cls";
+import { AbstractRepository } from "../../../core/neo4j/abstracts/abstract.repository";
+import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
+import { SecurityService } from "../../../core/security/services/security.service";
+import { BackupCode, BackupCodeDescriptor } from "../entities/backup-code";
+export declare class BackupCodeRepository extends AbstractRepository<BackupCode, typeof BackupCodeDescriptor.relationships> {
+    protected readonly descriptor: import("../../..").EntityDescriptor<BackupCode, {}>;
+    constructor(neo4j: Neo4jService, securityService: SecurityService, clsService: ClsService);
+    findByUserId(params: {
+        userId: string;
+    }): Promise<BackupCode[]>;
+    /**
+     * Returns all backup codes with their hashes for internal verification.
+     * Note: BackupCode type includes codeHash - excludeFromJsonApi only affects API responses.
+     */
+    findUnusedByUserId(params: {
+        userId: string;
+    }): Promise<BackupCode[]>;
+    findUnusedCount(params: {
+        userId: string;
+    }): Promise<number>;
+    createForUser(params: {
+        codeId: string;
+        userId: string;
+        codeHash: string;
+    }): Promise<BackupCode>;
+    markUsed(params: {
+        codeId: string;
+    }): Promise<BackupCode>;
+    deleteAllByUserId(params: {
+        userId: string;
+    }): Promise<void>;
+}
+//# sourceMappingURL=backup-code.repository.d.ts.map

package/dist/foundations/two-factor/repositories/backup-code.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-code.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/two-factor/repositories/backup-code.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE3E,qBACa,oBAAqB,SAAQ,kBAAkB,CAAC,UAAU,EAAE,OAAO,oBAAoB,CAAC,aAAa,CAAC;IACjH,SAAS,CAAC,QAAQ,CAAC,UAAU,sDAAwB;gBAEzC,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU;IAInF,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAYrE;;;OAGG;IACG,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAYrE,eAAe,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAc5D,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAqBhG,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAYzD,iBAAiB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAUnE"}

package/dist/foundations/two-factor/repositories/backup-code.repository.js

@@ -0,0 +1,107 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BackupCodeRepository = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_cls_1 = require("nestjs-cls");
+const abstract_repository_1 = require("../../../core/neo4j/abstracts/abstract.repository");
+const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
+const security_service_1 = require("../../../core/security/services/security.service");
+const backup_code_1 = require("../entities/backup-code");
+let BackupCodeRepository = class BackupCodeRepository extends abstract_repository_1.AbstractRepository {
+    constructor(neo4j, securityService, clsService) {
+        super(neo4j, securityService, clsService);
+        this.descriptor = backup_code_1.BackupCodeDescriptor;
+    }
+    async findByUserId(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_BACKUP_CODE]->(${nodeName}:${labelName})
+      RETURN ${nodeName}
+      ORDER BY ${nodeName}.createdAt
+    `;
+        return this.neo4j.readMany(query);
+    }
+    /**
+     * Returns all backup codes with their hashes for internal verification.
+     * Note: BackupCode type includes codeHash - excludeFromJsonApi only affects API responses.
+     */
+    async findUnusedByUserId(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_BACKUP_CODE]->(${nodeName}:${labelName})
+      WHERE ${nodeName}.usedAt IS NULL
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.readMany(query);
+    }
+    async findUnusedCount(params) {
+        const { labelName } = this.descriptor.model;
+        const result = await this.neo4j.read(`MATCH (user:User {id: $userId})-[:HAS_BACKUP_CODE]->(backupcode:${labelName})
+       WHERE backupcode.usedAt IS NULL
+       RETURN count(backupcode) as count`, { userId: params.userId });
+        if (result.records.length === 0)
+            return 0;
+        const count = result.records[0].get("count");
+        return count?.toNumber ? count.toNumber() : Number(count) || 0;
+    }
+    async createForUser(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = {
+            codeId: params.codeId,
+            userId: params.userId,
+            codeHash: params.codeHash,
+        };
+        query.query = `
+      MATCH (user:User {id: $userId})
+      CREATE (${nodeName}:${labelName} {
+        id: $codeId,
+        codeHash: $codeHash,
+        createdAt: datetime()
+      })
+      CREATE (user)-[:HAS_BACKUP_CODE]->(${nodeName})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.writeOne(query);
+    }
+    async markUsed(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { codeId: params.codeId };
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $codeId})
+      SET ${nodeName}.usedAt = datetime()
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.writeOne(query);
+    }
+    async deleteAllByUserId(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery();
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_BACKUP_CODE]->(${nodeName}:${labelName})
+      DETACH DELETE ${nodeName}
+    `;
+        await this.neo4j.writeOne(query);
+    }
+};
+exports.BackupCodeRepository = BackupCodeRepository;
+exports.BackupCodeRepository = BackupCodeRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, security_service_1.SecurityService, nestjs_cls_1.ClsService])
+], BackupCodeRepository);
+//# sourceMappingURL=backup-code.repository.js.map

package/dist/foundations/two-factor/repositories/backup-code.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-code.repository.js","sourceRoot":"","sources":["../../../../src/foundations/two-factor/repositories/backup-code.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAAwC;AACxC,2FAAuF;AACvF,8EAA0E;AAC1E,uFAAmF;AACnF,yDAA2E;AAGpE,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,wCAAyE;IAGjH,YAAY,KAAmB,EAAE,eAAgC,EAAE,UAAsB;QACvF,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QAHzB,eAAU,GAAG,kCAAoB,CAAC;IAIrD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA0B;QAC3C,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;6DAC2C,QAAQ,IAAI,SAAS;eACnE,QAAQ;iBACN,QAAQ;KACpB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAA0B;QACjD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;6DAC2C,QAAQ,IAAI,SAAS;cACpE,QAAQ;eACP,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAA0B;QAC9C,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC,mEAAmE,SAAS;;yCAEzC,EACnC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA4D;QAC9E,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;QACF,KAAK,CAAC,KAAK,GAAG;;gBAEF,QAAQ,IAAI,SAAS;;;;;2CAKM,QAAQ;eACpC,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAA0B;QACvC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;YACxB,QAAQ;eACL,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAA0B;QAChD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;6DAC2C,QAAQ,IAAI,SAAS;sBAC5D,QAAQ;KACzB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACF,CAAA;AA5FY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAIQ,4BAAY,EAAmB,kCAAe,EAAc,uBAAU;GAH9E,oBAAoB,CA4FhC"}

package/dist/foundations/two-factor/repositories/passkey.repository.d.ts

@@ -0,0 +1,51 @@
+import { ClsService } from "nestjs-cls";
+import { AbstractRepository } from "../../../core/neo4j/abstracts/abstract.repository";
+import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
+import { SecurityService } from "../../../core/security/services/security.service";
+import { Passkey, PasskeyDescriptor } from "../entities/passkey";
+export declare class PasskeyRepository extends AbstractRepository<Passkey, typeof PasskeyDescriptor.relationships> {
+    protected readonly descriptor: import("../../..").EntityDescriptor<Passkey, {}>;
+    constructor(neo4j: Neo4jService, securityService: SecurityService, clsService: ClsService);
+    findByUserId(params: {
+        userId: string;
+    }): Promise<Passkey[]>;
+    findByIdForUser(params: {
+        passkeyId: string;
+    }): Promise<Passkey | null>;
+    findByCredentialId(params: {
+        credentialId: string;
+    }): Promise<Passkey | null>;
+    /**
+     * Returns full data including credentialId and publicKey for WebAuthn operations.
+     * Note: Passkey type includes all fields - excludeFromJsonApi only affects API responses.
+     */
+    findAllByUserIdWithCredentials(params: {
+        userId: string;
+    }): Promise<Passkey[]>;
+    createForUser(params: {
+        passkeyId: string;
+        userId: string;
+        name: string;
+        credentialId: string;
+        publicKey: string;
+        counter: number;
+        transports: string[];
+        backedUp: boolean;
+    }): Promise<Passkey>;
+    updatePasskey(params: {
+        passkeyId: string;
+        name?: string;
+        counter?: number;
+        lastUsedAt?: Date;
+    }): Promise<Passkey>;
+    deletePasskey(params: {
+        passkeyId: string;
+    }): Promise<void>;
+    deleteAllByUserId(params: {
+        userId: string;
+    }): Promise<void>;
+    countByUserId(params: {
+        userId: string;
+    }): Promise<number>;
+}
+//# sourceMappingURL=passkey.repository.d.ts.map

package/dist/foundations/two-factor/repositories/passkey.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/two-factor/repositories/passkey.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEjE,qBACa,iBAAkB,SAAQ,kBAAkB,CAAC,OAAO,EAAE,OAAO,iBAAiB,CAAC,aAAa,CAAC;IACxG,SAAS,CAAC,QAAQ,CAAC,UAAU,mDAAqB;gBAEtC,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU;IAInF,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAY5D,eAAe,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAWvE,kBAAkB,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAWnF;;;OAGG;IACG,8BAA8B,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAW9E,aAAa,CAAC,MAAM,EAAE;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,QAAQ,EAAE,OAAO,CAAC;KACnB,GAAG,OAAO,CAAC,OAAO,CAAC;IAgCd,aAAa,CAAC,MAAM,EAAE;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,IAAI,CAAC;KACnB,GAAG,OAAO,CAAC,OAAO,CAAC;IA2Bd,aAAa,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAW3D,iBAAiB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAW5D,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;CAYjE"}