@carlonicora/nestjs-neo4jsonapi 1.39.0 → 1.40.0

package/dist/foundations/two-factor/repositories/passkey.repository.js

@@ -0,0 +1,159 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasskeyRepository = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_cls_1 = require("nestjs-cls");
+const abstract_repository_1 = require("../../../core/neo4j/abstracts/abstract.repository");
+const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
+const security_service_1 = require("../../../core/security/services/security.service");
+const passkey_1 = require("../entities/passkey");
+let PasskeyRepository = class PasskeyRepository extends abstract_repository_1.AbstractRepository {
+    constructor(neo4j, securityService, clsService) {
+        super(neo4j, securityService, clsService);
+        this.descriptor = passkey_1.PasskeyDescriptor;
+    }
+    async findByUserId(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_PASSKEY]->(${nodeName}:${labelName})
+      RETURN ${nodeName}
+      ORDER BY ${nodeName}.createdAt DESC
+    `;
+        return this.neo4j.readMany(query);
+    }
+    async findByIdForUser(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { passkeyId: params.passkeyId };
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $passkeyId})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.readOne(query);
+    }
+    async findByCredentialId(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { credentialId: params.credentialId };
+        query.query = `
+      MATCH (${nodeName}:${labelName} {credentialId: $credentialId})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.readOne(query);
+    }
+    /**
+     * Returns full data including credentialId and publicKey for WebAuthn operations.
+     * Note: Passkey type includes all fields - excludeFromJsonApi only affects API responses.
+     */
+    async findAllByUserIdWithCredentials(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_PASSKEY]->(${nodeName}:${labelName})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.readMany(query);
+    }
+    async createForUser(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = {
+            passkeyId: params.passkeyId,
+            userId: params.userId,
+            name: params.name,
+            credentialId: params.credentialId,
+            publicKey: params.publicKey,
+            counter: params.counter,
+            transports: JSON.stringify(params.transports),
+            backedUp: params.backedUp,
+        };
+        query.query = `
+      MATCH (user:User {id: $userId})
+      CREATE (${nodeName}:${labelName} {
+        id: $passkeyId,
+        name: $name,
+        credentialId: $credentialId,
+        publicKey: $publicKey,
+        counter: $counter,
+        transports: $transports,
+        backedUp: $backedUp,
+        createdAt: datetime(),
+        updatedAt: datetime()
+      })
+      CREATE (user)-[:HAS_PASSKEY]->(${nodeName})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.writeOne(query);
+    }
+    async updatePasskey(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        const setClauses = [`${nodeName}.updatedAt = datetime()`];
+        query.queryParams = { passkeyId: params.passkeyId };
+        if (params.name !== undefined) {
+            setClauses.push(`${nodeName}.name = $name`);
+            query.queryParams.name = params.name;
+        }
+        if (params.counter !== undefined) {
+            setClauses.push(`${nodeName}.counter = $counter`);
+            query.queryParams.counter = params.counter;
+        }
+        if (params.lastUsedAt !== undefined) {
+            setClauses.push(`${nodeName}.lastUsedAt = datetime($lastUsedAt)`);
+            query.queryParams.lastUsedAt = params.lastUsedAt.toISOString();
+        }
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $passkeyId})
+      SET ${setClauses.join(", ")}
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.writeOne(query);
+    }
+    async deletePasskey(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery();
+        query.queryParams = { passkeyId: params.passkeyId };
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $passkeyId})
+      DETACH DELETE ${nodeName}
+    `;
+        await this.neo4j.writeOne(query);
+    }
+    async deleteAllByUserId(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery();
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_PASSKEY]->(${nodeName}:${labelName})
+      DETACH DELETE ${nodeName}
+    `;
+        await this.neo4j.writeOne(query);
+    }
+    async countByUserId(params) {
+        const { labelName } = this.descriptor.model;
+        const result = await this.neo4j.read(`MATCH (user:User {id: $userId})-[:HAS_PASSKEY]->(passkey:${labelName})
+       RETURN count(passkey) as count`, { userId: params.userId });
+        if (result.records.length === 0)
+            return 0;
+        const count = result.records[0].get("count");
+        return count?.toNumber ? count.toNumber() : Number(count) || 0;
+    }
+};
+exports.PasskeyRepository = PasskeyRepository;
+exports.PasskeyRepository = PasskeyRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, security_service_1.SecurityService, nestjs_cls_1.ClsService])
+], PasskeyRepository);
+//# sourceMappingURL=passkey.repository.js.map

package/dist/foundations/two-factor/repositories/passkey.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.repository.js","sourceRoot":"","sources":["../../../../src/foundations/two-factor/repositories/passkey.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAAwC;AACxC,2FAAuF;AACvF,8EAA0E;AAC1E,uFAAmF;AACnF,iDAAiE;AAG1D,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,wCAAmE;IAGxG,YAAY,KAAmB,EAAE,eAAgC,EAAE,UAAsB;QACvF,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QAHzB,eAAU,GAAG,2BAAiB,CAAC;IAIlD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA0B;QAC3C,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;yDACuC,QAAQ,IAAI,SAAS;eAC/D,QAAQ;iBACN,QAAQ;KACpB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAA6B;QACjD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;eACrB,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAgC;QACvD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;QAC1D,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;eACrB,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,8BAA8B,CAAC,MAA0B;QAC7D,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;yDACuC,QAAQ,IAAI,SAAS;eAC/D,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MASnB;QACC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG;YAClB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;YAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;QACF,KAAK,CAAC,KAAK,GAAG;;gBAEF,QAAQ,IAAI,SAAS;;;;;;;;;;;uCAWE,QAAQ;eAChC,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAKnB;QACC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAa,CAAC,GAAG,QAAQ,yBAAyB,CAAC,CAAC;QACpE,KAAK,CAAC,WAAW,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAEpD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,eAAe,CAAC,CAAC;YAC5C,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,qBAAqB,CAAC,CAAC;YAClD,KAAK,CAAC,WAAW,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC7C,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,qCAAqC,CAAC,CAAC;YAClE,KAAK,CAAC,WAAW,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QACjE,CAAC;QAED,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;YACxB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;eAClB,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA6B;QAC/C,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;sBACd,QAAQ;KACzB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAA0B;QAChD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;yDACuC,QAAQ,IAAI,SAAS;sBACxD,QAAQ;KACzB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA0B;QAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC,4DAA4D,SAAS;sCACrC,EAChC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;CACF,CAAA;AAnKY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAIQ,4BAAY,EAAmB,kCAAe,EAAc,uBAAU;GAH9E,iBAAiB,CAmK7B"}

package/dist/foundations/two-factor/repositories/pending-two-factor.repository.d.ts

@@ -0,0 +1,47 @@
+import { ClsService } from "nestjs-cls";
+import { AbstractRepository } from "../../../core/neo4j/abstracts/abstract.repository";
+import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
+import { SecurityService } from "../../../core/security/services/security.service";
+import { PendingTwoFactor, PendingTwoFactorDescriptor } from "../entities/pending-two-factor";
+export declare class PendingTwoFactorRepository extends AbstractRepository<PendingTwoFactor, typeof PendingTwoFactorDescriptor.relationships> {
+    protected readonly descriptor: import("../../..").EntityDescriptor<PendingTwoFactor, {}>;
+    constructor(neo4j: Neo4jService, securityService: SecurityService, clsService: ClsService);
+    findByUserId(params: {
+        userId: string;
+    }): Promise<PendingTwoFactor | null>;
+    findByIdForUser(params: {
+        pendingId: string;
+    }): Promise<PendingTwoFactor | null>;
+    findByIdWithUser(params: {
+        pendingId: string;
+    }): Promise<{
+        pending: PendingTwoFactor;
+        userId: string;
+    } | null>;
+    /**
+     * Creates a new pending two-factor challenge.
+     * Automatically deletes any existing pending challenge for the user first.
+     */
+    createForUser(params: {
+        pendingId: string;
+        userId: string;
+        challenge: string;
+        challengeType: string;
+        expiration: Date;
+    }): Promise<PendingTwoFactor>;
+    incrementAttemptCount(params: {
+        pendingId: string;
+    }): Promise<number>;
+    deletePending(params: {
+        pendingId: string;
+    }): Promise<void>;
+    deleteByUserId(params: {
+        userId: string;
+    }): Promise<void>;
+    /**
+     * Deletes all expired pending two-factor challenges.
+     * Returns the count of deleted records.
+     */
+    deleteExpired(): Promise<number>;
+}
+//# sourceMappingURL=pending-two-factor.repository.d.ts.map

package/dist/foundations/two-factor/repositories/pending-two-factor.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-two-factor.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/two-factor/repositories/pending-two-factor.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAE9F,qBACa,0BAA2B,SAAQ,kBAAkB,CAChE,gBAAgB,EAChB,OAAO,0BAA0B,CAAC,aAAa,CAChD;IACC,SAAS,CAAC,QAAQ,CAAC,UAAU,4DAA8B;gBAE/C,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU;IAInF,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAW1E,eAAe,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAWhF,gBAAgB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,gBAAgB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IA4BpH;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,IAAI,CAAC;KAClB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA6BvB,qBAAqB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAarE,aAAa,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAW3D,cAAc,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAW/D;;;OAGG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;CA2BvC"}

package/dist/foundations/two-factor/repositories/pending-two-factor.repository.js

@@ -0,0 +1,159 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PendingTwoFactorRepository = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_cls_1 = require("nestjs-cls");
+const abstract_repository_1 = require("../../../core/neo4j/abstracts/abstract.repository");
+const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
+const security_service_1 = require("../../../core/security/services/security.service");
+const pending_two_factor_1 = require("../entities/pending-two-factor");
+let PendingTwoFactorRepository = class PendingTwoFactorRepository extends abstract_repository_1.AbstractRepository {
+    constructor(neo4j, securityService, clsService) {
+        super(neo4j, securityService, clsService);
+        this.descriptor = pending_two_factor_1.PendingTwoFactorDescriptor;
+    }
+    async findByUserId(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_PENDING_TWO_FACTOR]->(${nodeName}:${labelName})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.readOne(query);
+    }
+    async findByIdForUser(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { pendingId: params.pendingId };
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $pendingId})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.readOne(query);
+    }
+    async findByIdWithUser(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const result = await this.neo4j.read(`MATCH (user:User)-[:HAS_PENDING_TWO_FACTOR]->(${nodeName}:${labelName} {id: $pendingId})
+       RETURN ${nodeName}, user.id as userId`, { pendingId: params.pendingId });
+        if (result.records.length === 0)
+            return null;
+        const record = result.records[0];
+        const pendingData = record.get(nodeName).properties;
+        const userId = record.get("userId");
+        return {
+            pending: {
+                ...pendingData,
+                id: pendingData.id,
+                type: this.descriptor.model.type,
+                createdAt: pendingData.createdAt ? new Date(pendingData.createdAt) : new Date(),
+                updatedAt: pendingData.updatedAt ? new Date(pendingData.updatedAt) : new Date(),
+                expiration: pendingData.expiration ? new Date(pendingData.expiration) : new Date(),
+                attemptCount: pendingData.attemptCount?.toNumber?.() ?? pendingData.attemptCount ?? 0,
+            },
+            userId,
+        };
+    }
+    /**
+     * Creates a new pending two-factor challenge.
+     * Automatically deletes any existing pending challenge for the user first.
+     */
+    async createForUser(params) {
+        // First delete any existing pending for this user
+        await this.deleteByUserId({ userId: params.userId });
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = {
+            pendingId: params.pendingId,
+            userId: params.userId,
+            challenge: params.challenge,
+            challengeType: params.challengeType,
+            expiration: params.expiration.toISOString(),
+        };
+        query.query = `
+      MATCH (user:User {id: $userId})
+      CREATE (${nodeName}:${labelName} {
+        id: $pendingId,
+        challenge: $challenge,
+        challengeType: $challengeType,
+        expiration: datetime($expiration),
+        attemptCount: 0,
+        createdAt: datetime()
+      })
+      CREATE (user)-[:HAS_PENDING_TWO_FACTOR]->(${nodeName})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.writeOne(query);
+    }
+    async incrementAttemptCount(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { pendingId: params.pendingId };
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $pendingId})
+      SET ${nodeName}.attemptCount = ${nodeName}.attemptCount + 1
+      RETURN ${nodeName}
+    `;
+        const result = await this.neo4j.writeOne(query);
+        return result?.attemptCount ?? 0;
+    }
+    async deletePending(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery();
+        query.queryParams = { pendingId: params.pendingId };
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $pendingId})
+      DETACH DELETE ${nodeName}
+    `;
+        await this.neo4j.writeOne(query);
+    }
+    async deleteByUserId(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery();
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_PENDING_TWO_FACTOR]->(${nodeName}:${labelName})
+      DETACH DELETE ${nodeName}
+    `;
+        await this.neo4j.writeOne(query);
+    }
+    /**
+     * Deletes all expired pending two-factor challenges.
+     * Returns the count of deleted records.
+     */
+    async deleteExpired() {
+        const { labelName } = this.descriptor.model;
+        // First count expired records
+        const countResult = await this.neo4j.read(`MATCH (p:${labelName})
+       WHERE p.expiration < datetime()
+       RETURN count(p) as deletedCount`, {});
+        const count = countResult.records[0]?.get("deletedCount");
+        const deletedCount = count?.toNumber ? count.toNumber() : Number(count) || 0;
+        if (deletedCount === 0)
+            return 0;
+        // Delete expired records
+        const deleteQuery = this.neo4j.initQuery();
+        deleteQuery.query = `
+      MATCH (p:${labelName})
+      WHERE p.expiration < datetime()
+      DETACH DELETE p
+    `;
+        await this.neo4j.writeOne(deleteQuery);
+        return deletedCount;
+    }
+};
+exports.PendingTwoFactorRepository = PendingTwoFactorRepository;
+exports.PendingTwoFactorRepository = PendingTwoFactorRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, security_service_1.SecurityService, nestjs_cls_1.ClsService])
+], PendingTwoFactorRepository);
+//# sourceMappingURL=pending-two-factor.repository.js.map

package/dist/foundations/two-factor/repositories/pending-two-factor.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-two-factor.repository.js","sourceRoot":"","sources":["../../../../src/foundations/two-factor/repositories/pending-two-factor.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAAwC;AACxC,2FAAuF;AACvF,8EAA0E;AAC1E,uFAAmF;AACnF,uEAA8F;AAGvF,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,wCAG/C;IAGC,YAAY,KAAmB,EAAE,eAAgC,EAAE,UAAsB;QACvF,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QAHzB,eAAU,GAAG,+CAA0B,CAAC;IAI3D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAA0B;QAC3C,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;oEACkD,QAAQ,IAAI,SAAS;eAC1E,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAA6B;QACjD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;eACrB,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAA6B;QAClD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC,iDAAiD,QAAQ,IAAI,SAAS;gBAC5D,QAAQ,qBAAqB,EACvC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAChC,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEpC,OAAO;YACL,OAAO,EAAE;gBACP,GAAG,WAAW;gBACd,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI;gBAChC,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;gBAC/E,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;gBAC/E,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;gBAClF,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,IAAI,WAAW,CAAC,YAAY,IAAI,CAAC;aAClE;YACrB,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,MAMnB;QACC,kDAAkD;QAClD,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAErD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG;YAClB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE;SAC5C,CAAC;QACF,KAAK,CAAC,KAAK,GAAG;;gBAEF,QAAQ,IAAI,SAAS;;;;;;;;kDAQa,QAAQ;eAC3C,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAA6B;QACvD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;YACxB,QAAQ,mBAAmB,QAAQ;eAChC,QAAQ;KAClB,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,MAAM,EAAE,YAAY,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAA6B;QAC/C,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;sBACd,QAAQ;KACzB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA0B;QAC7C,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;oEACkD,QAAQ,IAAI,SAAS;sBACnE,QAAQ;KACzB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAE5C,8BAA8B;QAC9B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACvC,YAAY,SAAS;;uCAEY,EACjC,EAAE,CACH,CAAC;QAEF,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE7E,IAAI,YAAY,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEjC,yBAAyB;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3C,WAAW,CAAC,KAAK,GAAG;iBACP,SAAS;;;KAGrB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEvC,OAAO,YAAY,CAAC;IACtB,CAAC;CACF,CAAA;AArKY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;qCAOQ,4BAAY,EAAmB,kCAAe,EAAc,uBAAU;GAN9E,0BAA0B,CAqKtC"}

package/dist/foundations/two-factor/repositories/totp-authenticator.repository.d.ts

@@ -0,0 +1,51 @@
+import { ClsService } from "nestjs-cls";
+import { AbstractRepository } from "../../../core/neo4j/abstracts/abstract.repository";
+import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
+import { SecurityService } from "../../../core/security/services/security.service";
+import { TotpAuthenticator, TotpAuthenticatorDescriptor } from "../entities/totp-authenticator";
+export declare class TotpAuthenticatorRepository extends AbstractRepository<TotpAuthenticator, typeof TotpAuthenticatorDescriptor.relationships> {
+    protected readonly descriptor: import("../../..").EntityDescriptor<TotpAuthenticator, {}>;
+    constructor(neo4j: Neo4jService, securityService: SecurityService, clsService: ClsService);
+    findVerifiedByUserId(params: {
+        userId: string;
+    }): Promise<TotpAuthenticator[]>;
+    findByIdForUser(params: {
+        authenticatorId: string;
+    }): Promise<TotpAuthenticator | null>;
+    /**
+     * Returns authenticator with secret for internal TOTP validation.
+     * Note: TotpAuthenticator type includes secret - excludeFromJsonApi only affects API responses.
+     */
+    findByIdWithSecret(params: {
+        authenticatorId: string;
+    }): Promise<TotpAuthenticator | null>;
+    /**
+     * Returns all verified authenticators with secrets for internal TOTP validation.
+     * Note: TotpAuthenticator type includes secret - excludeFromJsonApi only affects API responses.
+     */
+    findAllByUserIdWithSecrets(params: {
+        userId: string;
+    }): Promise<TotpAuthenticator[]>;
+    createForUser(params: {
+        authenticatorId: string;
+        userId: string;
+        name: string;
+        secret: string;
+        verified?: boolean;
+    }): Promise<TotpAuthenticator>;
+    updateAuthenticator(params: {
+        authenticatorId: string;
+        verified?: boolean;
+        lastUsedAt?: Date;
+    }): Promise<TotpAuthenticator>;
+    deleteAuthenticator(params: {
+        authenticatorId: string;
+    }): Promise<void>;
+    deleteAllByUserId(params: {
+        userId: string;
+    }): Promise<void>;
+    countVerifiedByUserId(params: {
+        userId: string;
+    }): Promise<number>;
+}
+//# sourceMappingURL=totp-authenticator.repository.d.ts.map

package/dist/foundations/two-factor/repositories/totp-authenticator.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp-authenticator.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/two-factor/repositories/totp-authenticator.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAEhG,qBACa,2BAA4B,SAAQ,kBAAkB,CACjE,iBAAiB,EACjB,OAAO,2BAA2B,CAAC,aAAa,CACjD;IACC,SAAS,CAAC,QAAQ,CAAC,UAAU,6DAA+B;gBAEhD,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU;IAInF,oBAAoB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAa9E,eAAe,CAAC,MAAM,EAAE;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAW7F;;;OAGG;IACG,kBAAkB,CAAC,MAAM,EAAE;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAWhG;;;OAGG;IACG,0BAA0B,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAYpF,aAAa,CAAC,MAAM,EAAE;QAC1B,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0BxB,mBAAmB,CAAC,MAAM,EAAE;QAChC,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,UAAU,CAAC,EAAE,IAAI,CAAC;KACnB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAuBxB,mBAAmB,CAAC,MAAM,EAAE;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvE,iBAAiB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAW5D,qBAAqB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;CAazE"}

package/dist/foundations/two-factor/repositories/totp-authenticator.repository.js

@@ -0,0 +1,156 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TotpAuthenticatorRepository = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_cls_1 = require("nestjs-cls");
+const abstract_repository_1 = require("../../../core/neo4j/abstracts/abstract.repository");
+const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
+const security_service_1 = require("../../../core/security/services/security.service");
+const totp_authenticator_1 = require("../entities/totp-authenticator");
+let TotpAuthenticatorRepository = class TotpAuthenticatorRepository extends abstract_repository_1.AbstractRepository {
+    constructor(neo4j, securityService, clsService) {
+        super(neo4j, securityService, clsService);
+        this.descriptor = totp_authenticator_1.TotpAuthenticatorDescriptor;
+    }
+    async findVerifiedByUserId(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_TOTP_AUTHENTICATOR]->(${nodeName}:${labelName})
+      WHERE ${nodeName}.verified = true
+      RETURN ${nodeName}
+      ORDER BY ${nodeName}.createdAt DESC
+    `;
+        return this.neo4j.readMany(query);
+    }
+    async findByIdForUser(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { authenticatorId: params.authenticatorId };
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $authenticatorId})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.readOne(query);
+    }
+    /**
+     * Returns authenticator with secret for internal TOTP validation.
+     * Note: TotpAuthenticator type includes secret - excludeFromJsonApi only affects API responses.
+     */
+    async findByIdWithSecret(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { authenticatorId: params.authenticatorId };
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $authenticatorId})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.readOne(query);
+    }
+    /**
+     * Returns all verified authenticators with secrets for internal TOTP validation.
+     * Note: TotpAuthenticator type includes secret - excludeFromJsonApi only affects API responses.
+     */
+    async findAllByUserIdWithSecrets(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_TOTP_AUTHENTICATOR]->(${nodeName}:${labelName})
+      WHERE ${nodeName}.verified = true
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.readMany(query);
+    }
+    async createForUser(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        query.queryParams = {
+            authenticatorId: params.authenticatorId,
+            userId: params.userId,
+            name: params.name,
+            secret: params.secret,
+            verified: params.verified ?? false,
+        };
+        query.query = `
+      MATCH (user:User {id: $userId})
+      CREATE (${nodeName}:${labelName} {
+        id: $authenticatorId,
+        name: $name,
+        secret: $secret,
+        verified: $verified,
+        createdAt: datetime(),
+        updatedAt: datetime()
+      })
+      CREATE (user)-[:HAS_TOTP_AUTHENTICATOR]->(${nodeName})
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.writeOne(query);
+    }
+    async updateAuthenticator(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery({ serialiser: this.descriptor.model });
+        const setClauses = [`${nodeName}.updatedAt = datetime()`];
+        query.queryParams = { authenticatorId: params.authenticatorId };
+        if (params.verified !== undefined) {
+            setClauses.push(`${nodeName}.verified = $verified`);
+            query.queryParams.verified = params.verified;
+        }
+        if (params.lastUsedAt !== undefined) {
+            setClauses.push(`${nodeName}.lastUsedAt = datetime($lastUsedAt)`);
+            query.queryParams.lastUsedAt = params.lastUsedAt.toISOString();
+        }
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $authenticatorId})
+      SET ${setClauses.join(", ")}
+      RETURN ${nodeName}
+    `;
+        return this.neo4j.writeOne(query);
+    }
+    async deleteAuthenticator(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery();
+        query.queryParams = { authenticatorId: params.authenticatorId };
+        query.query = `
+      MATCH (${nodeName}:${labelName} {id: $authenticatorId})
+      DETACH DELETE ${nodeName}
+    `;
+        await this.neo4j.writeOne(query);
+    }
+    async deleteAllByUserId(params) {
+        const { nodeName, labelName } = this.descriptor.model;
+        const query = this.neo4j.initQuery();
+        query.queryParams = { userId: params.userId };
+        query.query = `
+      MATCH (user:User {id: $userId})-[:HAS_TOTP_AUTHENTICATOR]->(${nodeName}:${labelName})
+      DETACH DELETE ${nodeName}
+    `;
+        await this.neo4j.writeOne(query);
+    }
+    async countVerifiedByUserId(params) {
+        const { labelName } = this.descriptor.model;
+        const result = await this.neo4j.read(`MATCH (user:User {id: $userId})-[:HAS_TOTP_AUTHENTICATOR]->(t:${labelName})
+       WHERE t.verified = true
+       RETURN count(t) as count`, { userId: params.userId });
+        if (result.records.length === 0)
+            return 0;
+        const count = result.records[0].get("count");
+        return count?.toNumber ? count.toNumber() : Number(count) || 0;
+    }
+};
+exports.TotpAuthenticatorRepository = TotpAuthenticatorRepository;
+exports.TotpAuthenticatorRepository = TotpAuthenticatorRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, security_service_1.SecurityService, nestjs_cls_1.ClsService])
+], TotpAuthenticatorRepository);
+//# sourceMappingURL=totp-authenticator.repository.js.map

package/dist/foundations/two-factor/repositories/totp-authenticator.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp-authenticator.repository.js","sourceRoot":"","sources":["../../../../src/foundations/two-factor/repositories/totp-authenticator.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAAwC;AACxC,2FAAuF;AACvF,8EAA0E;AAC1E,uFAAmF;AACnF,uEAAgG;AAGzF,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,wCAGhD;IAGC,YAAY,KAAmB,EAAE,eAAgC,EAAE,UAAsB;QACvF,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QAHzB,eAAU,GAAG,gDAA2B,CAAC;IAI5D,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAA0B;QACnD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;oEACkD,QAAQ,IAAI,SAAS;cAC3E,QAAQ;eACP,QAAQ;iBACN,QAAQ;KACpB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAmC;QACvD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;QAChE,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;eACrB,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAAmC;QAC1D,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;QAChE,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;eACrB,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,0BAA0B,CAAC,MAA0B;QACzD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;oEACkD,QAAQ,IAAI,SAAS;cAC3E,QAAQ;eACP,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAMnB;QACC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,CAAC,WAAW,GAAG;YAClB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;SACnC,CAAC;QACF,KAAK,CAAC,KAAK,GAAG;;gBAEF,QAAQ,IAAI,SAAS;;;;;;;;kDAQa,QAAQ;eAC3C,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAIzB;QACC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAa,CAAC,GAAG,QAAQ,yBAAyB,CAAC,CAAC;QACpE,KAAK,CAAC,WAAW,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;QAEhE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,uBAAuB,CAAC,CAAC;YACpD,KAAK,CAAC,WAAW,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC/C,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,qCAAqC,CAAC,CAAC;YAClE,KAAK,CAAC,WAAW,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QACjE,CAAC;QAED,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;YACxB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;eAClB,QAAQ;KAClB,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAmC;QAC3D,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;QAChE,KAAK,CAAC,KAAK,GAAG;eACH,QAAQ,IAAI,SAAS;sBACd,QAAQ;KACzB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAA0B;QAChD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,GAAG;oEACkD,QAAQ,IAAI,SAAS;sBACnE,QAAQ;KACzB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAA0B;QACpD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC,iEAAiE,SAAS;;gCAEhD,EAC1B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAC1B,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;CACF,CAAA;AA/JY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;qCAOQ,4BAAY,EAAmB,kCAAe,EAAc,uBAAU;GAN9E,2BAA2B,CA+JvC"}

package/dist/foundations/two-factor/repositories/two-factor-config.repository.d.ts

@@ -0,0 +1,32 @@
+import { ClsService } from "nestjs-cls";
+import { AbstractRepository } from "../../../core/neo4j/abstracts/abstract.repository";
+import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
+import { SecurityService } from "../../../core/security/services/security.service";
+import { TwoFactorConfig, TwoFactorConfigDescriptor } from "../entities/two-factor-config";
+export declare class TwoFactorConfigRepository extends AbstractRepository<TwoFactorConfig, typeof TwoFactorConfigDescriptor.relationships> {
+    protected readonly descriptor: import("../../..").EntityDescriptor<TwoFactorConfig, {}>;
+    constructor(neo4j: Neo4jService, securityService: SecurityService, clsService: ClsService);
+    findByUserId(params: {
+        userId: string;
+    }): Promise<TwoFactorConfig | null>;
+    createForUser(params: {
+        configId: string;
+        userId: string;
+        isEnabled?: boolean;
+        preferredMethod?: string;
+    }): Promise<TwoFactorConfig>;
+    updateByUserId(params: {
+        userId: string;
+        isEnabled?: boolean;
+        preferredMethod?: string;
+        backupCodesCount?: number;
+    }): Promise<TwoFactorConfig>;
+    deleteByUserId(params: {
+        userId: string;
+    }): Promise<void>;
+    getOrCreate(params: {
+        userId: string;
+        configId: string;
+    }): Promise<TwoFactorConfig>;
+}
+//# sourceMappingURL=two-factor-config.repository.d.ts.map