@ciscode/authentication-kit 1.1.5 → 1.2.0

package/dist/controllers/auth.controller.js

@@ -17,58 +17,38 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthController = void 0;
 const common_1 = require("@nestjs/common");
-const passport_config_1 = __importDefault(require("../config/passport.config"));
-const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
-const bcryptjs_1 = __importDefault(require("bcryptjs"));
-const jwks_rsa_1 = __importDefault(require("jwks-rsa"));
-const axios_1 = __importDefault(require("axios"));
-const user_model_1 = __importDefault(require("../models/user.model"));
-const client_model_1 = __importDefault(require("../models/client.model"));
-const role_model_1 = __importDefault(require("../models/role.model"));
+const auth_service_1 = require("../services/auth.service");
+const login_dto_1 = require("../dtos/auth/login.dto");
+const register_dto_1 = require("../dtos/auth/register.dto");
+const refresh_token_dto_1 = require("../dtos/auth/refresh-token.dto");
+const verify_email_dto_1 = require("../dtos/auth/verify-email.dto");
+const resend_verification_dto_1 = require("../dtos/auth/resend-verification.dto");
+const forgot_password_dto_1 = require("../dtos/auth/forgot-password.dto");
+const reset_password_dto_1 = require("../dtos/auth/reset-password.dto");
 const helper_1 = require("../utils/helper");
-const MSAL_MOBILE_CLIENT_ID = process.env.MSAL_MOBILE_CLIENT_ID;
-const resolveJwtExpiry = (value, fallback) => (value || fallback);
-const msJwks = (0, jwks_rsa_1.default)({
-    jwksUri: 'https://login.microsoftonline.com/common/discovery/v2.0/keys',
-    cache: true,
-    rateLimit: true,
-    jwksRequestsPerMinute: 5,
-});
-function verifyMicrosoftIdToken(idToken) {
-    return new Promise((resolve, reject) => {
-        const getKey = (header, cb) => {
-            msJwks
-                .getSigningKey(header.kid)
-                .then((k) => cb(null, k.getPublicKey()))
-                .catch(cb);
-        };
-        jsonwebtoken_1.default.verify(idToken, getKey, { algorithms: ['RS256'], audience: MSAL_MOBILE_CLIENT_ID }, (err, payload) => (err ? reject(err) : resolve(payload)));
-    });
-}
+const oauth_service_1 = require("../services/oauth.service");
+const passport_config_1 = __importDefault(require("../config/passport.config"));
+const authenticate_guard_1 = require("../middleware/authenticate.guard");
 let AuthController = class AuthController {
-    async issueTokensAndRespond(principal, res) {
-        const roleDocs = await role_model_1.default.find({ _id: { $in: principal.roles } })
-            .select('name permissions -_id')
-            .lean();
-        const roles = roleDocs.map((r) => r.name);
-        const permissions = Array.from(new Set(roleDocs.flatMap((r) => r.permissions)));
-        const accessTTL = resolveJwtExpiry(process.env.JWT_ACCESS_TOKEN_EXPIRES_IN, '15m');
-        const refreshTTL = resolveJwtExpiry(process.env.JWT_REFRESH_TOKEN_EXPIRES_IN, '7d');
-        const payload = {
-            id: principal._id,
-            email: principal.email,
-            roles,
-            permissions,
-        };
-        const accessToken = jsonwebtoken_1.default.sign(payload, process.env.JWT_SECRET, { expiresIn: accessTTL });
-        const refreshToken = jsonwebtoken_1.default.sign({ id: principal._id }, process.env.JWT_REFRESH_SECRET, { expiresIn: refreshTTL });
-        principal.refreshToken = refreshToken;
-        try {
-            await principal.save();
-        }
-        catch (e) {
-            console.error('Error saving refreshToken:', e);
-        }
+    constructor(auth, oauth) {
+        this.auth = auth;
+        this.oauth = oauth;
+    }
+    async register(dto, res) {
+        const result = await this.auth.register(dto);
+        return res.status(201).json(result);
+    }
+    async verifyEmail(dto, res) {
+        const result = await this.auth.verifyEmail(dto.token);
+        return res.status(200).json(result);
+    }
+    async resendVerification(dto, res) {
+        const result = await this.auth.resendVerification(dto.email);
+        return res.status(200).json(result);
+    }
+    async login(dto, res) {
+        const { accessToken, refreshToken } = await this.auth.login(dto);
+        const refreshTTL = process.env.JWT_REFRESH_TOKEN_EXPIRES_IN || '7d';
         const isProd = process.env.NODE_ENV === 'production';
         res.cookie('refreshToken', refreshToken, {
             httpOnly: true,
@@ -77,48 +57,15 @@ let AuthController = class AuthController {
             path: '/',
             maxAge: (0, helper_1.getMillisecondsFromExpiry)(refreshTTL),
         });
-        return res.status(200).json({ accessToken, refreshToken, profileIncomplete: !principal.email });
+        return res.status(200).json({ accessToken, refreshToken });
     }
-    async respondWebOrMobile(req, res, principal) {
-        const roleDocs = await role_model_1.default.find({ _id: { $in: principal.roles } })
-            .select('name permissions -_id')
-            .lean();
-        const roles = roleDocs.map((r) => r.name);
-        const permissions = Array.from(new Set(roleDocs.flatMap((r) => r.permissions)));
-        const accessTTL = resolveJwtExpiry(process.env.JWT_ACCESS_TOKEN_EXPIRES_IN, '15m');
-        const refreshTTL = resolveJwtExpiry(process.env.JWT_REFRESH_TOKEN_EXPIRES_IN, '7d');
-        const payload = {
-            id: principal._id,
-            email: principal.email,
-            roles,
-            permissions,
-        };
-        const accessToken = jsonwebtoken_1.default.sign(payload, process.env.JWT_SECRET, { expiresIn: accessTTL });
-        const refreshToken = jsonwebtoken_1.default.sign({ id: principal._id }, process.env.JWT_REFRESH_SECRET, { expiresIn: refreshTTL });
-        principal.refreshToken = refreshToken;
-        try {
-            await principal.save();
-        }
-        catch (e) {
-            console.error('Saving refreshToken failed:', e);
-        }
-        let mobileRedirect;
-        if (req.query.state) {
-            try {
-                const decoded = JSON.parse(Buffer.from(req.query.state, 'base64url').toString('utf8'));
-                mobileRedirect = decoded.redirect;
-            }
-            catch (_) {
-                // ignore
-            }
-        }
-        if (mobileRedirect) {
-            const url = new URL(mobileRedirect);
-            url.searchParams.set('accessToken', accessToken);
-            url.searchParams.set('refreshToken', refreshToken);
-            url.searchParams.set('profileIncomplete', (!principal.email).toString());
-            return res.redirect(302, url.toString());
-        }
+    async refresh(dto, req, res) {
+        var _a;
+        const token = dto.refreshToken || ((_a = req.cookies) === null || _a === void 0 ? void 0 : _a.refreshToken);
+        if (!token)
+            return res.status(401).json({ message: 'Refresh token missing.' });
+        const { accessToken, refreshToken } = await this.auth.refresh(token);
+        const refreshTTL = process.env.JWT_REFRESH_TOKEN_EXPIRES_IN || '7d';
         const isProd = process.env.NODE_ENV === 'production';
         res.cookie('refreshToken', refreshToken, {
             httpOnly: true,
@@ -127,502 +74,222 @@ let AuthController = class AuthController {
             path: '/',
             maxAge: (0, helper_1.getMillisecondsFromExpiry)(refreshTTL),
         });
-        return res.status(200).json({ accessToken, refreshToken, profileIncomplete: !principal.email });
+        return res.status(200).json({ accessToken, refreshToken });
     }
-    async registerClient(req, res) {
-        try {
-            const { email, password, name, roles = [] } = req.body;
-            if (!email || !password) {
-                return res.status(400).json({ message: 'Email and password are required.' });
-            }
-            if (await client_model_1.default.findOne({ email })) {
-                return res.status(409).json({ message: 'Email already in use.' });
-            }
-            const salt = await bcryptjs_1.default.genSalt(10);
-            const hashed = await bcryptjs_1.default.hash(password, salt);
-            const client = new client_model_1.default({ email, password: hashed, name, roles });
-            await client.save();
-            return res.status(201).json({
-                id: client._id,
-                email: client.email,
-                name: client.name,
-                roles: client.roles,
-            });
-        }
-        catch (err) {
-            console.error('registerClient error:', err);
-            return res.status(500).json({ message: 'Server error.' });
-        }
+    async forgotPassword(dto, res) {
+        const result = await this.auth.forgotPassword(dto.email);
+        return res.status(200).json(result);
     }
-    async clientLogin(req, res) {
-        try {
-            const { email, password } = req.body;
-            if (!email || !password) {
-                return res.status(400).json({ message: 'Email and password are required.' });
-            }
-            const client = await client_model_1.default.findOne({ email })
-                .select('+password')
-                .populate('roles', 'name permissions');
-            if (!client) {
-                return res.status(400).json({ message: 'Incorrect email.' });
-            }
-            const match = await bcryptjs_1.default.compare(password, client.password);
-            if (!match) {
-                return res.status(400).json({ message: 'Incorrect password.' });
-            }
-            return this.issueTokensAndRespond(client, res);
-        }
-        catch (err) {
-            console.error('clientLogin error:', err);
-            return res.status(500).json({ message: 'Server error.' });
-        }
+    async resetPassword(dto, res) {
+        const result = await this.auth.resetPassword(dto.token, dto.newPassword);
+        return res.status(200).json(result);
     }
-    localLogin(req, res, next) {
-        return passport_config_1.default.authenticate('local', { session: false }, async (err, user, info) => {
-            if (err)
-                return next(err);
-            if (!user)
-                return res.status(400).json({ message: (info === null || info === void 0 ? void 0 : info.message) || 'Invalid credentials.' });
-            try {
-                return this.issueTokensAndRespond(user, res);
-            }
-            catch (e) {
-                console.error('localLogin error:', e);
-                return res.status(500).json({ message: 'Server error.' });
-            }
-        })(req, res, next);
-    }
-    microsoftLogin(req, res, next) {
-        const redirect = req.query.redirect;
-        const state = redirect ? Buffer.from(JSON.stringify({ redirect }), 'utf8').toString('base64url') : undefined;
-        return passport_config_1.default.authenticate('azure_ad_oauth2', {
-            session: false,
-            state,
-        })(req, res, next);
+    async deleteAccount(req, res) {
+        var _a;
+        const userId = (_a = req.user) === null || _a === void 0 ? void 0 : _a.sub;
+        if (!userId)
+            return res.status(401).json({ message: 'Unauthorized.' });
+        const result = await this.auth.deleteAccount(userId);
+        return res.status(200).json(result);
     }
-    microsoftCallback(req, res, next) {
-        passport_config_1.default.authenticate('azure_ad_oauth2', { session: false }, async (err, user) => {
-            if (err) {
-                console.error('Microsoft OAuth error:', err);
-                return res.status(500).json({ message: 'Microsoft auth failed', error: (err === null || err === void 0 ? void 0 : err.message) || err });
-            }
-            if (!user)
-                return res.status(400).json({ message: 'Microsoft authentication failed.' });
-            return this.respondWebOrMobile(req, res, user);
-        })(req, res, next);
+    // Mobile exchange
+    async microsoftExchange(body, res) {
+        const { accessToken, refreshToken } = await this.oauth.loginWithMicrosoft(body.idToken);
+        return res.status(200).json({ accessToken, refreshToken });
     }
-    async microsoftExchange(req, res) {
-        try {
-            if (!MSAL_MOBILE_CLIENT_ID) {
-                console.error('MSAL_MOBILE_CLIENT_ID is not set in environment.');
-                return res.status(500).json({ message: 'Server misconfiguration.' });
-            }
-            const { idToken } = req.body || {};
-            if (!idToken) {
-                return res.status(400).json({ message: 'idToken is required.' });
-            }
-            let ms;
-            try {
-                ms = await verifyMicrosoftIdToken(idToken);
-            }
-            catch (e) {
-                console.error('ID token verify failed:', e.message || e);
-                return res.status(401).json({ message: 'Invalid Microsoft ID token.' });
-            }
-            const microsoftId = ms.oid || ms.sub;
-            const email = ms.preferred_username || ms.upn || ms.email;
-            const name = ms.name;
-            const match = [{ microsoftId }];
-            if (email)
-                match.push({ email });
-            let user = await user_model_1.default.findOne({ $or: match });
-            if (!user) {
-                user = new user_model_1.default({
-                    email,
-                    name,
-                    microsoftId,
-                    roles: [],
-                    status: 'active',
-                });
-                await user.save();
-            }
-            else {
-                let changed = false;
-                if (!user.microsoftId) {
-                    user.microsoftId = microsoftId;
-                    changed = true;
-                }
-                if (changed)
-                    await user.save();
-            }
-            return this.issueTokensAndRespond(user, res);
-        }
-        catch (e) {
-            console.error('microsoftExchange error:', e);
-            return res.status(500).json({ message: 'Server error.' });
-        }
+    async googleExchange(body, res) {
+        const result = body.idToken
+            ? await this.oauth.loginWithGoogleIdToken(body.idToken)
+            : await this.oauth.loginWithGoogleCode(body.code);
+        return res.status(200).json(result);
     }
-    googleUserLogin(req, res, next) {
-        const redirect = req.query.redirect;
-        const state = redirect ? Buffer.from(JSON.stringify({ redirect }), 'utf8').toString('base64url') : undefined;
-        return passport_config_1.default.authenticate('google-user', { session: false, scope: ['profile', 'email'], state })(req, res, next);
+    async facebookExchange(body, res) {
+        const result = await this.oauth.loginWithFacebook(body.accessToken);
+        return res.status(200).json(result);
     }
-    googleUserCallback(req, res, next) {
-        passport_config_1.default.authenticate('google-user', { session: false }, async (err, user) => {
-            if (err)
-                return next(err);
-            if (!user)
-                return res.status(400).json({ message: 'Google authentication failed.' });
-            return this.respondWebOrMobile(req, res, user);
-        })(req, res, next);
-    }
-    googleClientLogin(req, res, next) {
-        const redirect = req.query.redirect;
-        const state = redirect ? Buffer.from(JSON.stringify({ redirect }), 'utf8').toString('base64url') : undefined;
-        return passport_config_1.default.authenticate('google-client', { session: false, scope: ['profile', 'email'], state })(req, res, next);
+    // Web redirect
+    googleLogin(req, res, next) {
+        return passport_config_1.default.authenticate('google', { scope: ['profile', 'email'], session: false })(req, res, next);
     }
-    googleClientCallback(req, res, next) {
-        passport_config_1.default.authenticate('google-client', { session: false }, async (err, client) => {
-            if (err)
-                return next(err);
-            if (!client)
-                return res.status(400).json({ message: 'Google authentication failed.' });
-            return this.respondWebOrMobile(req, res, client);
+    googleCallback(req, res, next) {
+        passport_config_1.default.authenticate('google', { session: false }, (err, data) => {
+            if (err || !data)
+                return res.status(400).json({ message: 'Google auth failed.' });
+            return res.status(200).json(data);
         })(req, res, next);
     }
-    async googleExchange(req, res) {
-        var _a, _b, _c, _d, _e, _f, _g, _h;
-        try {
-            let { code, idToken, type = 'user' } = req.body || {};
-            if (!['user', 'client'].includes(type)) {
-                return res.status(400).json({ message: 'invalid type; must be "user" or "client"' });
-            }
-            let email;
-            let name;
-            let googleId;
-            if (code) {
-                const tokenResp = await axios_1.default.post('https://oauth2.googleapis.com/token', {
-                    code,
-                    client_id: process.env.GOOGLE_CLIENT_ID,
-                    client_secret: process.env.GOOGLE_CLIENT_SECRET,
-                    redirect_uri: 'postmessage',
-                    grant_type: 'authorization_code',
-                });
-                const { access_token } = tokenResp.data || {};
-                if (!access_token) {
-                    return res.status(401).json({ message: 'Failed to exchange code with Google.' });
-                }
-                const profileResp = await axios_1.default.get('https://www.googleapis.com/oauth2/v2/userinfo', {
-                    headers: { Authorization: `Bearer ${access_token}` },
-                });
-                email = (_a = profileResp.data) === null || _a === void 0 ? void 0 : _a.email;
-                name = ((_b = profileResp.data) === null || _b === void 0 ? void 0 : _b.name) || ((_c = profileResp.data) === null || _c === void 0 ? void 0 : _c.given_name) || '';
-                googleId = (_d = profileResp.data) === null || _d === void 0 ? void 0 : _d.id;
-            }
-            else if (idToken) {
-                const verifyResp = await axios_1.default.get('https://oauth2.googleapis.com/tokeninfo', {
-                    params: { id_token: idToken },
-                });
-                email = (_e = verifyResp.data) === null || _e === void 0 ? void 0 : _e.email;
-                name = ((_f = verifyResp.data) === null || _f === void 0 ? void 0 : _f.name) || '';
-                googleId = (_g = verifyResp.data) === null || _g === void 0 ? void 0 : _g.sub;
-            }
-            else {
-                return res.status(400).json({ message: 'code or idToken is required' });
-            }
-            if (!email)
-                return res.status(400).json({ message: 'Google profile missing email.' });
-            const Model = type === 'user' ? user_model_1.default : client_model_1.default;
-            let principal = await Model.findOne({ $or: [{ email }, { googleId }] });
-            if (!principal) {
-                principal = new Model(type === 'user'
-                    ? { email, name, googleId, roles: [], status: 'active' }
-                    : { email, name, googleId, roles: [] });
-                await principal.save();
-            }
-            else if (!principal.googleId) {
-                principal.googleId = googleId;
-                await principal.save();
-            }
-            const roleDocs = await role_model_1.default.find({ _id: { $in: principal.roles } })
-                .select('name permissions -_id').lean();
-            const roles = roleDocs.map((r) => r.name);
-            const permissions = Array.from(new Set(roleDocs.flatMap((r) => r.permissions)));
-            const accessTTL = resolveJwtExpiry(process.env.JWT_ACCESS_TOKEN_EXPIRES_IN, '15m');
-            const refreshTTL = resolveJwtExpiry(process.env.JWT_REFRESH_TOKEN_EXPIRES_IN, '7d');
-            const payload = { id: principal._id, email: principal.email, roles, permissions };
-            const accessToken = jsonwebtoken_1.default.sign(payload, process.env.JWT_SECRET, { expiresIn: accessTTL });
-            const refreshToken = jsonwebtoken_1.default.sign({ id: principal._id }, process.env.JWT_REFRESH_SECRET, { expiresIn: refreshTTL });
-            principal.refreshToken = refreshToken;
-            try {
-                await principal.save();
-            }
-            catch (e) {
-                console.error('Saving refreshToken failed:', e);
-            }
-            const isProd = process.env.NODE_ENV === 'production';
-            res.cookie('refreshToken', refreshToken, {
-                httpOnly: true,
-                secure: isProd,
-                sameSite: isProd ? 'none' : 'lax',
-                path: '/',
-                maxAge: (0, helper_1.getMillisecondsFromExpiry)(refreshTTL),
-            });
-            return res.status(200).json({ accessToken, refreshToken, profileIncomplete: !principal.email });
-        }
-        catch (err) {
-            console.error('googleExchange error:', ((_h = err === null || err === void 0 ? void 0 : err.response) === null || _h === void 0 ? void 0 : _h.data) || err.message || err);
-            return res.status(500).json({ message: 'Server error during Google exchange.' });
-        }
-    }
-    facebookUserLogin(req, res, next) {
-        const redirect = req.query.redirect;
-        const state = redirect ? Buffer.from(JSON.stringify({ redirect }), 'utf8').toString('base64url') : undefined;
-        return passport_config_1.default.authenticate('facebook-user', { session: false, scope: ['email'], state })(req, res, next);
-    }
-    facebookUserCallback(req, res, next) {
-        passport_config_1.default.authenticate('facebook-user', { session: false }, async (err, user) => {
-            if (err)
-                return next(err);
-            if (!user)
-                return res.status(400).json({ message: 'Facebook authentication failed.' });
-            return this.respondWebOrMobile(req, res, user);
+    microsoftLogin(req, res, next) {
+        return passport_config_1.default.authenticate('azure_ad_oauth2', {
+            session: false,
+            scope: ['openid', 'profile', 'email', 'User.Read'],
         })(req, res, next);
     }
-    facebookClientLogin(req, res, next) {
-        const redirect = req.query.redirect;
-        const state = redirect ? Buffer.from(JSON.stringify({ redirect }), 'utf8').toString('base64url') : undefined;
-        return passport_config_1.default.authenticate('facebook-client', { session: false, scope: ['email'], state })(req, res, next);
-    }
-    facebookClientCallback(req, res, next) {
-        passport_config_1.default.authenticate('facebook-client', { session: false }, async (err, client) => {
+    microsoftCallback(req, res, next) {
+        passport_config_1.default.authenticate('azure_ad_oauth2', { session: false }, (err, data) => {
             if (err)
-                return next(err);
-            if (!client)
-                return res.status(400).json({ message: 'Facebook authentication failed.' });
-            return this.respondWebOrMobile(req, res, client);
+                return res.status(400).json({ message: 'Microsoft auth failed', error: (err === null || err === void 0 ? void 0 : err.message) || err });
+            if (!data)
+                return res.status(400).json({ message: 'Microsoft auth failed', error: 'No data returned' });
+            return res.status(200).json(data);
         })(req, res, next);
     }
-    microsoftClientLogin(req, res, next) {
-        const redirect = req.query.redirect;
-        const state = redirect ? Buffer.from(JSON.stringify({ redirect }), 'utf8').toString('base64url') : undefined;
-        return passport_config_1.default.authenticate('azure_ad_oauth2_client', { session: false, state })(req, res, next);
+    facebookLogin(req, res, next) {
+        return passport_config_1.default.authenticate('facebook', { scope: ['email'], session: false })(req, res, next);
     }
-    microsoftClientCallback(req, res, next) {
-        passport_config_1.default.authenticate('azure_ad_oauth2_client', { session: false }, async (err, client) => {
-            if (err) {
-                console.error('Microsoft Client OAuth error:', err);
-                return res.status(500).json({ message: 'Microsoft auth failed', error: (err === null || err === void 0 ? void 0 : err.message) || err });
-            }
-            if (!client)
-                return res.status(400).json({ message: 'Microsoft authentication failed.' });
-            return this.respondWebOrMobile(req, res, client);
+    facebookCallback(req, res, next) {
+        passport_config_1.default.authenticate('facebook', { session: false }, (err, data) => {
+            if (err || !data)
+                return res.status(400).json({ message: 'Facebook auth failed.' });
+            return res.status(200).json(data);
         })(req, res, next);
     }
-    async refreshToken(req, res) {
-        var _a;
-        try {
-            const refreshToken = ((_a = req.cookies) === null || _a === void 0 ? void 0 : _a.refreshToken) || req.body.refreshToken;
-            if (!refreshToken) {
-                return res.status(401).json({ message: 'Refresh token missing.' });
-            }
-            let decoded;
-            try {
-                decoded = jsonwebtoken_1.default.verify(refreshToken, process.env.JWT_REFRESH_SECRET);
-            }
-            catch (err) {
-                const msg = err.name === 'TokenExpiredError' ? 'Refresh token expired.' : 'Invalid refresh token.';
-                return res.status(401).json({ message: msg });
-            }
-            let principal = await user_model_1.default.findById(decoded.id);
-            let principalType = 'user';
-            if (!principal) {
-                principal = await client_model_1.default.findById(decoded.id);
-                principalType = 'client';
-            }
-            if (!principal)
-                return res.status(401).json({ message: 'Account not found.' });
-            if (principal.refreshToken !== refreshToken) {
-                return res.status(401).json({ message: 'Refresh token mismatch.' });
-            }
-            const roleDocs = await role_model_1.default.find({ _id: { $in: principal.roles } })
-                .select('name permissions -_id').lean();
-            const roles = roleDocs.map((r) => r.name);
-            const permissions = Array.from(new Set(roleDocs.flatMap((r) => r.permissions)));
-            const payload = {
-                id: principal._id,
-                email: principal.email,
-                roles,
-                permissions,
-            };
-            const accessTokenExpiresIn = resolveJwtExpiry(process.env.JWT_ACCESS_TOKEN_EXPIRES_IN, '15m');
-            const accessToken = jsonwebtoken_1.default.sign(payload, process.env.JWT_SECRET, { expiresIn: accessTokenExpiresIn });
-            return res.status(200).json({ accessToken, type: principalType });
-        }
-        catch (error) {
-            console.error('[Refresh] Unexpected error:', error);
-            return res.status(500).json({ message: 'Server error during token refresh.' });
-        }
-    }
 };
 exports.AuthController = AuthController;
 __decorate([
-    (0, common_1.Post)('clients/register'),
-    __param(0, (0, common_1.Req)()),
+    (0, common_1.Post)('register'),
+    __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Res)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:paramtypes", [register_dto_1.RegisterDto, Object]),
     __metadata("design:returntype", Promise)
-], AuthController.prototype, "registerClient", null);
+], AuthController.prototype, "register", null);
 __decorate([
-    (0, common_1.Post)('clients/login'),
-    __param(0, (0, common_1.Req)()),
+    (0, common_1.Post)('verify-email'),
+    __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Res)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:paramtypes", [verify_email_dto_1.VerifyEmailDto, Object]),
     __metadata("design:returntype", Promise)
-], AuthController.prototype, "clientLogin", null);
+], AuthController.prototype, "verifyEmail", null);
 __decorate([
-    (0, common_1.Post)('login'),
-    __param(0, (0, common_1.Req)()),
+    (0, common_1.Post)('resend-verification'),
+    __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Res)()),
-    __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, Function]),
-    __metadata("design:returntype", void 0)
-], AuthController.prototype, "localLogin", null);
+    __metadata("design:paramtypes", [resend_verification_dto_1.ResendVerificationDto, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "resendVerification", null);
 __decorate([
-    (0, common_1.Get)('microsoft'),
-    __param(0, (0, common_1.Req)()),
+    (0, common_1.Post)('login'),
+    __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Res)()),
-    __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, Function]),
-    __metadata("design:returntype", void 0)
-], AuthController.prototype, "microsoftLogin", null);
+    __metadata("design:paramtypes", [login_dto_1.LoginDto, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "login", null);
 __decorate([
-    (0, common_1.Get)('microsoft/callback'),
-    __param(0, (0, common_1.Req)()),
-    __param(1, (0, common_1.Res)()),
-    __param(2, (0, common_1.Next)()),
+    (0, common_1.Post)('refresh-token'),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, common_1.Req)()),
+    __param(2, (0, common_1.Res)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, Function]),
-    __metadata("design:returntype", void 0)
-], AuthController.prototype, "microsoftCallback", null);
+    __metadata("design:paramtypes", [refresh_token_dto_1.RefreshTokenDto, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "refresh", null);
 __decorate([
-    (0, common_1.Post)('microsoft/exchange'),
-    __param(0, (0, common_1.Req)()),
+    (0, common_1.Post)('forgot-password'),
+    __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Res)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:paramtypes", [forgot_password_dto_1.ForgotPasswordDto, Object]),
     __metadata("design:returntype", Promise)
-], AuthController.prototype, "microsoftExchange", null);
+], AuthController.prototype, "forgotPassword", null);
 __decorate([
-    (0, common_1.Get)('google'),
-    __param(0, (0, common_1.Req)()),
+    (0, common_1.Post)('reset-password'),
+    __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Res)()),
-    __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, Function]),
-    __metadata("design:returntype", void 0)
-], AuthController.prototype, "googleUserLogin", null);
+    __metadata("design:paramtypes", [reset_password_dto_1.ResetPasswordDto, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "resetPassword", null);
 __decorate([
-    (0, common_1.Get)('google/callback'),
+    (0, common_1.Delete)('account'),
+    (0, common_1.UseGuards)(authenticate_guard_1.AuthenticateGuard),
     __param(0, (0, common_1.Req)()),
     __param(1, (0, common_1.Res)()),
-    __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, Function]),
-    __metadata("design:returntype", void 0)
-], AuthController.prototype, "googleUserCallback", null);
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "deleteAccount", null);
 __decorate([
-    (0, common_1.Get)('client/google'),
-    __param(0, (0, common_1.Req)()),
+    (0, common_1.Post)('oauth/microsoft'),
+    __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Res)()),
-    __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, Function]),
-    __metadata("design:returntype", void 0)
-], AuthController.prototype, "googleClientLogin", null);
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "microsoftExchange", null);
 __decorate([
-    (0, common_1.Get)('client/google/callback'),
-    __param(0, (0, common_1.Req)()),
+    (0, common_1.Post)('oauth/google'),
+    __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Res)()),
-    __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object, Function]),
-    __metadata("design:returntype", void 0)
-], AuthController.prototype, "googleClientCallback", null);
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "googleExchange", null);
 __decorate([
-    (0, common_1.Post)('google/exchange'),
-    __param(0, (0, common_1.Req)()),
+    (0, common_1.Post)('oauth/facebook'),
+    __param(0, (0, common_1.Body)()),
     __param(1, (0, common_1.Res)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object]),
     __metadata("design:returntype", Promise)
-], AuthController.prototype, "googleExchange", null);
+], AuthController.prototype, "facebookExchange", null);
 __decorate([
-    (0, common_1.Get)('facebook'),
+    (0, common_1.Get)('google'),
     __param(0, (0, common_1.Req)()),
     __param(1, (0, common_1.Res)()),
     __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object, Function]),
     __metadata("design:returntype", void 0)
-], AuthController.prototype, "facebookUserLogin", null);
+], AuthController.prototype, "googleLogin", null);
 __decorate([
-    (0, common_1.Get)('facebook/callback'),
+    (0, common_1.Get)('google/callback'),
     __param(0, (0, common_1.Req)()),
     __param(1, (0, common_1.Res)()),
     __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object, Function]),
     __metadata("design:returntype", void 0)
-], AuthController.prototype, "facebookUserCallback", null);
+], AuthController.prototype, "googleCallback", null);
 __decorate([
-    (0, common_1.Get)('client/facebook'),
+    (0, common_1.Get)('microsoft'),
     __param(0, (0, common_1.Req)()),
     __param(1, (0, common_1.Res)()),
     __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object, Function]),
     __metadata("design:returntype", void 0)
-], AuthController.prototype, "facebookClientLogin", null);
+], AuthController.prototype, "microsoftLogin", null);
 __decorate([
-    (0, common_1.Get)('client/facebook/callback'),
+    (0, common_1.Get)('microsoft/callback'),
     __param(0, (0, common_1.Req)()),
     __param(1, (0, common_1.Res)()),
     __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object, Function]),
     __metadata("design:returntype", void 0)
-], AuthController.prototype, "facebookClientCallback", null);
+], AuthController.prototype, "microsoftCallback", null);
 __decorate([
-    (0, common_1.Get)('client/microsoft'),
+    (0, common_1.Get)('facebook'),
     __param(0, (0, common_1.Req)()),
     __param(1, (0, common_1.Res)()),
     __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object, Function]),
     __metadata("design:returntype", void 0)
-], AuthController.prototype, "microsoftClientLogin", null);
+], AuthController.prototype, "facebookLogin", null);
 __decorate([
-    (0, common_1.Get)('client/microsoft/callback'),
+    (0, common_1.Get)('facebook/callback'),
     __param(0, (0, common_1.Req)()),
     __param(1, (0, common_1.Res)()),
     __param(2, (0, common_1.Next)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Object, Object, Function]),
     __metadata("design:returntype", void 0)
-], AuthController.prototype, "microsoftClientCallback", null);
-__decorate([
-    (0, common_1.Post)('refresh-token'),
-    __param(0, (0, common_1.Req)()),
-    __param(1, (0, common_1.Res)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object]),
-    __metadata("design:returntype", Promise)
-], AuthController.prototype, "refreshToken", null);
+], AuthController.prototype, "facebookCallback", null);
 exports.AuthController = AuthController = __decorate([
-    (0, common_1.Controller)('api/auth')
+    (0, common_1.Controller)('api/auth'),
+    __metadata("design:paramtypes", [auth_service_1.AuthService, oauth_service_1.OAuthService])
 ], AuthController);