@hed-hog/core 0.0.387 → 0.0.390

package/dist/auth/auth.controller.js

@@ -61,20 +61,20 @@ let AuthController = AuthController_1 = class AuthController {
     }
     // Rate-limit contra brute-force de credenciais: 10 tentativas/min por IP
     // (ajustável; valor acomoda a suíte E2E de auth que faz vários logins seguidos).
-    async login(locale, data, ipAddress, userAgent, browserId, res) {
-        return this.service.loginWithEmailAndPassword(res, locale, ipAddress, userAgent, data, browserId || null);
+    async login(locale, data, ipAddress, userAgent, browserId, origin, res) {
+        return this.service.loginWithEmailAndPassword(res, locale, ipAddress, userAgent, data, browserId || null, origin);
     }
-    async emailVerificationLogin(locale, { token, code }, ipAddress, userAgent, browserId, res) {
-        return this.service.emailVerificationLogin(locale, token, code, ipAddress, userAgent, res, browserId || null);
+    async emailVerificationLogin(locale, { token, code }, ipAddress, userAgent, browserId, origin, res) {
+        return this.service.emailVerificationLogin(locale, token, code, ipAddress, userAgent, res, browserId || null, origin);
     }
-    async emailVerificationLoginResend(locale, { token }) {
-        return this.service.emailVerificationLoginResend(locale, token);
+    async emailVerificationLoginResend(locale, { token }, origin) {
+        return this.service.emailVerificationLoginResend(locale, token, origin);
     }
     async registerWithEmailAndPassword(locale, data) {
         return this.user.createWithEmailAndPassword(locale, data);
     }
-    async loginCode(locale, { token, code, methodType }, ipAddress, userAgent, browserId, res) {
-        const { accessToken, refreshToken, session, requiresPasswordReset } = await this.service.verifyMfaCode(locale, token, code, ipAddress, userAgent, methodType, browserId || null);
+    async loginCode(locale, { token, code, methodType }, ipAddress, userAgent, browserId, origin, res) {
+        const { accessToken, refreshToken, session, requiresPasswordReset } = await this.service.verifyMfaCode(locale, token, code, ipAddress, userAgent, methodType, browserId || null, origin);
         await this.token.setRefreshTokenCookie(locale, res, refreshToken, session.expires_at);
         return { accessToken, refreshToken, requiresPasswordReset };
     }
@@ -83,8 +83,8 @@ let AuthController = AuthController_1 = class AuthController {
         await this.token.setRefreshTokenCookie(locale, res, refreshToken, session.expires_at);
         return { accessToken, refreshToken, requiresPasswordReset };
     }
-    async resendMfaCode(locale, { token }) {
-        return this.service.resendMfaCode(locale, token);
+    async resendMfaCode(locale, { token }, origin) {
+        return this.service.resendMfaCode(locale, token, origin);
     }
     async generateWebAuthnOptions(locale, { mfaToken }, origin) {
         return this.service.generateWebAuthnAuthenticationOptions(locale, mfaToken, origin);
@@ -105,8 +105,8 @@ let AuthController = AuthController_1 = class AuthController {
         await this.service.logout(res, req, refreshToken);
         return { success: true };
     }
-    async forgotReset(locale, { password, code }, ipAddress, userAgent) {
-        return this.service.forgotResetPassword(locale, password, code, ipAddress, userAgent);
+    async forgotReset(locale, { password, code }, ipAddress, userAgent, origin) {
+        return this.service.forgotResetPassword(locale, password, code, ipAddress, userAgent, origin);
     }
     async verifyAccountInvite(locale, { code }) {
         return this.service.verifyAccountInvite(locale, code);
@@ -114,6 +114,9 @@ let AuthController = AuthController_1 = class AuthController {
     async completeAccount(locale, { password, code, name }, ipAddress, userAgent) {
         return this.service.completeAccount(locale, { password, code, name }, ipAddress, userAgent);
     }
+    async authorizeAccountInvite(locale, { code }, ipAddress, userAgent) {
+        return this.service.authorizeAccountInvite(locale, code, ipAddress, userAgent);
+    }
 };
 exports.AuthController = AuthController;
 __decorate([
@@ -169,9 +172,10 @@ __decorate([
     __param(2, (0, common_1.Ip)()),
     __param(3, (0, common_1.Headers)('user-agent')),
     __param(4, (0, common_1.Headers)('x-browser-id')),
-    __param(5, (0, common_1.Res)({ passthrough: true })),
+    __param(5, (0, common_1.Headers)('origin')),
+    __param(6, (0, common_1.Res)({ passthrough: true })),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, login_dto_1.LoginDTO, String, String, String, Object]),
+    __metadata("design:paramtypes", [String, login_dto_1.LoginDTO, String, String, String, String, Object]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "login", null);
 __decorate([
@@ -184,18 +188,22 @@ __decorate([
     __param(2, (0, common_1.Ip)()),
     __param(3, (0, common_1.Headers)('user-agent')),
     __param(4, (0, common_1.Headers)('x-browser-id')),
-    __param(5, (0, common_1.Res)({ passthrough: true })),
+    __param(5, (0, common_1.Headers)('origin')),
+    __param(6, (0, common_1.Res)({ passthrough: true })),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, login_email_verification_dto_1.LoginEmailVerificationDTO, String, String, String, Object]),
+    __metadata("design:paramtypes", [String, login_email_verification_dto_1.LoginEmailVerificationDTO, String, String, String, String, Object]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "emailVerificationLogin", null);
 __decorate([
     (0, api_1.Public)(),
+    (0, common_1.UseGuards)(throttler_1.ThrottlerGuard),
+    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
     (0, common_1.Post)('login-email-verification-resend'),
     __param(0, (0, api_locale_1.Locale)()),
     __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Headers)('origin')),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, login_email_verification_resend_dto_1.LoginEmailVerificationResendDTO]),
+    __metadata("design:paramtypes", [String, login_email_verification_resend_dto_1.LoginEmailVerificationResendDTO, String]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "emailVerificationLoginResend", null);
 __decorate([
@@ -217,9 +225,10 @@ __decorate([
     __param(2, (0, common_1.Ip)()),
     __param(3, (0, common_1.Headers)('user-agent')),
     __param(4, (0, common_1.Headers)('x-browser-id')),
-    __param(5, (0, common_1.Res)({ passthrough: true })),
+    __param(5, (0, common_1.Headers)('origin')),
+    __param(6, (0, common_1.Res)({ passthrough: true })),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, login_with_code_dto_1.LoginWithCodeDTO, String, String, String, Object]),
+    __metadata("design:paramtypes", [String, login_with_code_dto_1.LoginWithCodeDTO, String, String, String, String, Object]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "loginCode", null);
 __decorate([
@@ -239,15 +248,20 @@ __decorate([
 ], AuthController.prototype, "loginRecoveryCode", null);
 __decorate([
     (0, api_1.Public)(),
+    (0, common_1.UseGuards)(throttler_1.ThrottlerGuard),
+    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
     (0, common_1.Post)('resend-mfa-code'),
     __param(0, (0, api_locale_1.Locale)()),
     __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Headers)('origin')),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, resend_mfa_code_dto_1.ResendMfaCodeDTO]),
+    __metadata("design:paramtypes", [String, resend_mfa_code_dto_1.ResendMfaCodeDTO, String]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "resendMfaCode", null);
 __decorate([
     (0, api_1.Public)(),
+    (0, common_1.UseGuards)(throttler_1.ThrottlerGuard),
+    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
     (0, common_1.Post)('webauthn/generate'),
     __param(0, (0, api_locale_1.Locale)()),
     __param(1, (0, common_1.Body)()),
@@ -258,6 +272,8 @@ __decorate([
 ], AuthController.prototype, "generateWebAuthnOptions", null);
 __decorate([
     (0, api_1.Public)(),
+    (0, common_1.UseGuards)(throttler_1.ThrottlerGuard),
+    (0, throttler_1.Throttle)({ default: { limit: 10, ttl: 60000 } }),
     (0, common_1.Post)('webauthn/verify'),
     __param(0, (0, api_locale_1.Locale)()),
     __param(1, (0, common_1.Body)()),
@@ -295,8 +311,9 @@ __decorate([
     __param(1, (0, common_1.Body)()),
     __param(2, (0, common_1.Ip)()),
     __param(3, (0, common_1.Headers)('user-agent')),
+    __param(4, (0, common_1.Headers)('origin')),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, reset_dto_1.ResetDTO, String, String]),
+    __metadata("design:paramtypes", [String, reset_dto_1.ResetDTO, String, String, String]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "forgotReset", null);
 __decorate([
@@ -319,6 +336,17 @@ __decorate([
     __metadata("design:paramtypes", [String, complete_account_dto_1.CompleteAccountDTO, String, String]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "completeAccount", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('complete-account/authorize'),
+    __param(0, (0, api_locale_1.Locale)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Ip)()),
+    __param(3, (0, common_1.Headers)('user-agent')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, complete_account_dto_1.VerifyAccountInviteDTO, String, String]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "authorizeAccountInvite", null);
 exports.AuthController = AuthController = AuthController_1 = __decorate([
     (0, common_1.Controller)('auth'),
     __param(0, (0, common_1.Inject)((0, common_1.forwardRef)(() => auth_service_1.AuthService))),

package/dist/auth/auth.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../src/auth/auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sCAAkE;AAClE,oDAA6C;AAC7C,2CAcwB;AACxB,iDAA6D;AAE7D,0DAAsD;AACtD,uGAA+F;AAC/F,uDAAmD;AACnD,iDAA6C;AAC7C,iDAA6C;AAC7C,mGAA4F;AAC5F,qFAA+E;AAC/E,mEAA6D;AAC7D,6EAA0E;AAC1E,+CAA2C;AAC3C,mEAA6D;AAC7D,+CAA2C;AAC3C,qEAAwF;AAGjF,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YAEE,OAAqC,EAErC,KAAoC,EAEpC,IAAkC;QAJjB,YAAO,GAAP,OAAO,CAAa;QAEpB,UAAK,GAAL,KAAK,CAAc;QAEnB,SAAI,GAAJ,IAAI,CAAa;QARnB,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAStD,CAAC;IAIC,AAAN,KAAK,CAAC,MAAM,CAAS,EAAE,EAAE,EAAE,EAAY,MAAc;QACnD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAIK,AAAN,KAAK,CAAC,YAAY,CACR,EAAE,EAAE,EAAE,EACJ,MAAc,EAClB,SAAiB,EACA,SAAiB;QAExC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC1E,CAAC;IAIK,AAAN,KAAK,CAAC,KAAK,CAAiB,IAAI,EAAY,MAAc;QACxD,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CACD,MAAc,EACjB,GAAG,EACkB,GAAG,EACT,oBAA4B,EAC3B,SAAiB,EACf,SAAiB,EACpC,SAAiB;QAEvB,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,WAAW,OAAO,SAAS,EAAE,CAAC,CAAC;QACpG,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC;QACtE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;QAC3J,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAEtF,OAAO;YACL,WAAW;YACX,YAAY;SACb,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,iFAAiF;IAK3E,AAAN,KAAK,CAAC,KAAK,CACC,MAAc,EAChB,IAAc,EAChB,SAAiB,EACA,SAAiB,EACf,SAAiB,EACd,GAAG;QAE/B,OAAO,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;IAC5G,CAAC;IAMK,AAAN,KAAK,CAAC,sBAAsB,CAChB,MAAc,EAChB,EAAC,KAAK,EAAE,IAAI,EAA4B,EAC1C,SAAiB,EACA,SAAiB,EACf,SAAiB,EACd,GAAG;QAE/B,OAAO,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;IAChH,CAAC;IAIK,AAAN,KAAK,CAAC,4BAA4B,CACtB,MAAc,EAChB,EAAC,KAAK,EAAkC;QAEhD,OAAO,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAIK,AAAN,KAAK,CAAC,4BAA4B,CACtB,MAAc,EAChB,IAAmC;QAE3C,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAMK,AAAN,KAAK,CAAC,SAAS,CACH,MAAc,EAChB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAoB,EAC/C,SAAiB,EACA,SAAiB,EACf,SAAiB,EACd,GAAG;QAE/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,qBAAqB,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CACpG,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,IAAI,IAAI,CAClB,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAC9D,CAAC;IAMK,AAAN,KAAK,CAAC,iBAAiB,CACX,MAAc,EAChB,EAAE,KAAK,EAAE,IAAI,EAA4B,EAC3C,SAAiB,EACA,SAAiB,EACf,SAAiB,EACd,GAAG;QAE/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,qBAAqB,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAC5G,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EACT,SAAS,EACT,SAAS,IAAI,IAAI,CAClB,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAC9D,CAAC;IAIK,AAAN,KAAK,CAAC,aAAa,CACP,MAAc,EAChB,EAAE,KAAK,EAAoB;QAEnC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAIK,AAAN,KAAK,CAAC,uBAAuB,CACjB,MAAc,EAChB,EAAE,QAAQ,EAAwB,EACvB,MAAc;QAEjC,OAAO,IAAI,CAAC,OAAO,CAAC,qCAAqC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtF,CAAC;IAIK,AAAN,KAAK,CAAC,cAAc,CACR,MAAc,EAChB,EAAE,QAAQ,EAAE,iBAAiB,EAAgD,EAC/E,SAAiB,EACA,SAAiB,EACrB,MAAc,EACL,GAAG;QAE/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,qBAAqB,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,4BAA4B,CACnH,MAAM,EACN,QAAQ,EACR,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,SAAS,EACT,MAAM,CACP,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAC9D,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CACA,MAAc,EAExB,IAAe;QAEf,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CACH,GAAG,EACkB,GAAG,EACT,oBAA4B;QAElD,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC;QAC/D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAIK,AAAN,KAAK,CAAC,WAAW,CACL,MAAc,EAChB,EAAE,QAAQ,EAAE,IAAI,EAAY,EAC9B,SAAiB,EACA,SAAiB;QAExC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAIK,AAAN,KAAK,CAAC,mBAAmB,CACb,MAAc,EAChB,EAAE,IAAI,EAA0B;QAExC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CACT,MAAc,EAChB,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAsB,EAC9C,SAAiB,EACA,SAAiB;QAExC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9F,CAAC;CACF,CAAA;AAnQY,wCAAc;AAcnB;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,YAAG,EAAC,QAAQ,CAAC;IACA,WAAA,IAAA,UAAI,GAAE,CAAA;IAAU,WAAA,IAAA,mBAAM,GAAE,CAAA;;;;4CAErC;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,YAAG,EAAC,eAAe,CAAC;IAElB,WAAA,IAAA,UAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;;;;kDAGvB;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,YAAG,EAAC,OAAO,CAAC;IACA,WAAA,IAAA,kBAAY,GAAE,CAAA;IAAQ,WAAA,IAAA,mBAAM,GAAE,CAAA;;;;2CAG1C;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,SAAS,CAAC;IAEb,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,EAAC,cAAc,CAAC,CAAA;IACpB,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,cAAc,CAAC,CAAA;IACvB,WAAA,IAAA,WAAE,GAAE,CAAA;;;;6CAYN;AAQK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,OAAO,CAAC;IAEX,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,cAAc,CAAC,CAAA;IACvB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CAJb,oBAAQ;;2CAOvB;AAMK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,0BAA0B,CAAC;IAE9B,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,cAAc,CAAC,CAAA;IACvB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CAJJ,wDAAyB;;4DAOjD;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,iCAAiC,CAAC;IAErC,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAU,qEAA+B;;kEAGjD;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAO,kEAA6B;;kEAG5C;AAMK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,YAAY,CAAC;IAEhB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,cAAc,CAAC,CAAA;IACvB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CAJU,sCAAgB;;+CAkBtD;AAMK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,qBAAqB,CAAC;IAEzB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,cAAc,CAAC,CAAA;IACvB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CAJF,mDAAwB;;uDAiBlD;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,iBAAiB,CAAC;IAErB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAY,sCAAgB;;mDAGpC;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,mBAAmB,CAAC;IAEvB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gBAAO,EAAC,QAAQ,CAAC,CAAA;;;;6DAGnB;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,iBAAiB,CAAC;IAErB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,QAAQ,CAAC,CAAA;IACjB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;oDAc5B;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CACD,sBAAS;;4CAGhB;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,EAAC,cAAc,CAAC,CAAA;;;;4CAStB;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,cAAc,CAAC;IAElB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;;6CAFM,oBAAQ;;iDAKrC;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,yBAAyB,CAAC;IAE7B,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAW,6CAAsB;;yDAGzC;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,kBAAkB,CAAC;IAEtB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;;6CAFY,yCAAkB;;qDAKrD;yBAlQU,cAAc;IAD1B,IAAA,mBAAU,EAAC,MAAM,CAAC;IAKd,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC,CAAC,CAAA;IAErC,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,4BAAY,CAAC,CAAC,CAAA;IAEtC,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC,CAAC,CAAA;qCAHZ,0BAAW;QAEb,4BAAY;QAEb,0BAAW;GATzB,cAAc,CAmQ1B"}
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../src/auth/auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sCAAkE;AAClE,oDAA6C;AAC7C,2CAcwB;AACxB,iDAA6D;AAE7D,0DAAsD;AACtD,uGAA+F;AAC/F,uDAAmD;AACnD,iDAA6C;AAC7C,iDAA6C;AAC7C,mGAA4F;AAC5F,qFAA+E;AAC/E,mEAA6D;AAC7D,6EAA0E;AAC1E,+CAA2C;AAC3C,mEAA6D;AAC7D,+CAA2C;AAC3C,qEAAwF;AAGjF,IAAM,cAAc,sBAApB,MAAM,cAAc;IAGzB,YAEE,OAAqC,EAErC,KAAoC,EAEpC,IAAkC;QAJjB,YAAO,GAAP,OAAO,CAAa;QAEpB,UAAK,GAAL,KAAK,CAAc;QAEnB,SAAI,GAAJ,IAAI,CAAa;QARnB,WAAM,GAAG,IAAI,eAAM,CAAC,gBAAc,CAAC,IAAI,CAAC,CAAC;IAStD,CAAC;IAIC,AAAN,KAAK,CAAC,MAAM,CAAS,EAAE,EAAE,EAAE,EAAY,MAAc;QACnD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAIK,AAAN,KAAK,CAAC,YAAY,CACR,EAAE,EAAE,EAAE,EACJ,MAAc,EAClB,SAAiB,EACA,SAAiB;QAExC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC1E,CAAC;IAIK,AAAN,KAAK,CAAC,KAAK,CAAiB,IAAI,EAAY,MAAc;QACxD,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CACD,MAAc,EACjB,GAAG,EACkB,GAAG,EACT,oBAA4B,EAC3B,SAAiB,EACf,SAAiB,EACpC,SAAiB;QAEvB,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,WAAW,OAAO,SAAS,EAAE,CAAC,CAAC;QACpG,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC;QACtE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;QAC3J,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAEtF,OAAO;YACL,WAAW;YACX,YAAY;SACb,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,iFAAiF;IAK3E,AAAN,KAAK,CAAC,KAAK,CACC,MAAc,EAChB,IAAc,EAChB,SAAiB,EACA,SAAiB,EACf,SAAiB,EACvB,MAAc,EACL,GAAG;QAE/B,OAAO,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;IACpH,CAAC;IAMK,AAAN,KAAK,CAAC,sBAAsB,CAChB,MAAc,EAChB,EAAC,KAAK,EAAE,IAAI,EAA4B,EAC1C,SAAiB,EACA,SAAiB,EACf,SAAiB,EACvB,MAAc,EACL,GAAG;QAE/B,OAAO,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;IACxH,CAAC;IAMK,AAAN,KAAK,CAAC,4BAA4B,CACtB,MAAc,EAChB,EAAC,KAAK,EAAkC,EAC7B,MAAc;QAEjC,OAAO,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAIK,AAAN,KAAK,CAAC,4BAA4B,CACtB,MAAc,EAChB,IAAmC;QAE3C,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAMK,AAAN,KAAK,CAAC,SAAS,CACH,MAAc,EAChB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAoB,EAC/C,SAAiB,EACA,SAAiB,EACf,SAAiB,EACvB,MAAc,EACL,GAAG;QAE/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,qBAAqB,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CACpG,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,IAAI,IAAI,EACjB,MAAM,CACP,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAC9D,CAAC;IAMK,AAAN,KAAK,CAAC,iBAAiB,CACX,MAAc,EAChB,EAAE,KAAK,EAAE,IAAI,EAA4B,EAC3C,SAAiB,EACA,SAAiB,EACf,SAAiB,EACd,GAAG;QAE/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,qBAAqB,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAC5G,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EACT,SAAS,EACT,SAAS,IAAI,IAAI,CAClB,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAC9D,CAAC;IAMK,AAAN,KAAK,CAAC,aAAa,CACP,MAAc,EAChB,EAAE,KAAK,EAAoB,EAChB,MAAc;QAEjC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAMK,AAAN,KAAK,CAAC,uBAAuB,CACjB,MAAc,EAChB,EAAE,QAAQ,EAAwB,EACvB,MAAc;QAEjC,OAAO,IAAI,CAAC,OAAO,CAAC,qCAAqC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtF,CAAC;IAMK,AAAN,KAAK,CAAC,cAAc,CACR,MAAc,EAChB,EAAE,QAAQ,EAAE,iBAAiB,EAAgD,EAC/E,SAAiB,EACA,SAAiB,EACrB,MAAc,EACL,GAAG;QAE/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,qBAAqB,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,4BAA4B,CACnH,MAAM,EACN,QAAQ,EACR,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,SAAS,EACT,MAAM,CACP,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAC9D,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CACA,MAAc,EAExB,IAAe;QAEf,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CACH,GAAG,EACkB,GAAG,EACT,oBAA4B;QAElD,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC;QAC/D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,8BAAqB,CAAC,4BAA4B,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAIK,AAAN,KAAK,CAAC,WAAW,CACL,MAAc,EAChB,EAAE,QAAQ,EAAE,IAAI,EAAY,EAC9B,SAAiB,EACA,SAAiB,EACrB,MAAc;QAEjC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAChG,CAAC;IAIK,AAAN,KAAK,CAAC,mBAAmB,CACb,MAAc,EAChB,EAAE,IAAI,EAA0B;QAExC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CACT,MAAc,EAChB,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAsB,EAC9C,SAAiB,EACA,SAAiB;QAExC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9F,CAAC;IAIK,AAAN,KAAK,CAAC,sBAAsB,CAChB,MAAc,EAChB,EAAE,IAAI,EAA0B,EAClC,SAAiB,EACA,SAAiB;QAExC,OAAO,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACjF,CAAC;CACF,CAAA;AA7RY,wCAAc;AAcnB;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,YAAG,EAAC,QAAQ,CAAC;IACA,WAAA,IAAA,UAAI,GAAE,CAAA;IAAU,WAAA,IAAA,mBAAM,GAAE,CAAA;;;;4CAErC;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,YAAG,EAAC,eAAe,CAAC;IAElB,WAAA,IAAA,UAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;;;;kDAGvB;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,YAAG,EAAC,OAAO,CAAC;IACA,WAAA,IAAA,kBAAY,GAAE,CAAA;IAAQ,WAAA,IAAA,mBAAM,GAAE,CAAA;;;;2CAG1C;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,SAAS,CAAC;IAEb,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,EAAC,cAAc,CAAC,CAAA;IACpB,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,cAAc,CAAC,CAAA;IACvB,WAAA,IAAA,WAAE,GAAE,CAAA;;;;6CAYN;AAQK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,OAAO,CAAC;IAEX,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,cAAc,CAAC,CAAA;IACvB,WAAA,IAAA,gBAAO,EAAC,QAAQ,CAAC,CAAA;IACjB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CALb,oBAAQ;;2CAQvB;AAMK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,0BAA0B,CAAC;IAE9B,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,cAAc,CAAC,CAAA;IACvB,WAAA,IAAA,gBAAO,EAAC,QAAQ,CAAC,CAAA;IACjB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CALJ,wDAAyB;;4DAQjD;AAMK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,iCAAiC,CAAC;IAErC,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gBAAO,EAAC,QAAQ,CAAC,CAAA;;6CADD,qEAA+B;;kEAIjD;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAO,kEAA6B;;kEAG5C;AAMK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,YAAY,CAAC;IAEhB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,cAAc,CAAC,CAAA;IACvB,WAAA,IAAA,gBAAO,EAAC,QAAQ,CAAC,CAAA;IACjB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CALU,sCAAgB;;+CAoBtD;AAMK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,qBAAqB,CAAC;IAEzB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,cAAc,CAAC,CAAA;IACvB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CAJF,mDAAwB;;uDAiBlD;AAMK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,iBAAiB,CAAC;IAErB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gBAAO,EAAC,QAAQ,CAAC,CAAA;;6CADC,sCAAgB;;mDAIpC;AAMK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,mBAAmB,CAAC;IAEvB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,gBAAO,EAAC,QAAQ,CAAC,CAAA;;;;6DAGnB;AAMK;IAJL,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,0BAAc,CAAC;IACzB,IAAA,oBAAQ,EAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAM,EAAE,EAAE,CAAC;IACjD,IAAA,aAAI,EAAC,iBAAiB,CAAC;IAErB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,QAAQ,CAAC,CAAA;IACjB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;oDAc5B;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CACD,sBAAS;;4CAGhB;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,EAAC,cAAc,CAAC,CAAA;;;;4CAStB;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,cAAc,CAAC;IAElB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,gBAAO,EAAC,QAAQ,CAAC,CAAA;;6CAHU,oBAAQ;;iDAMrC;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,yBAAyB,CAAC;IAE7B,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAW,6CAAsB;;yDAGzC;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,kBAAkB,CAAC;IAEtB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;;6CAFY,yCAAkB;;qDAKrD;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,4BAA4B,CAAC;IAEhC,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;;6CAFJ,6CAAsB;;4DAKzC;yBA5RU,cAAc;IAD1B,IAAA,mBAAU,EAAC,MAAM,CAAC;IAKd,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC,CAAC,CAAA;IAErC,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,4BAAY,CAAC,CAAC,CAAA;IAEtC,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC,CAAC,CAAA;qCAHZ,0BAAW;QAEb,4BAAY;QAEb,0BAAW;GATzB,cAAc,CA6R1B"}

package/dist/auth/auth.service.d.ts

@@ -42,16 +42,16 @@ export declare class AuthService {
     }>;
     private hasPendingPasswordReset;
     private getRequiresPasswordResetByUserId;
-    requiresMfaForLogin(locale: string, email: string, user: any): Promise<{
+    requiresMfaForLogin(locale: string, email: string, user: any, origin?: string): Promise<{
         requiresMfa: boolean;
         token: string;
     }>;
-    requiresEmailVerificationForLogin(locale: string, email: string, user: any): Promise<{
+    requiresEmailVerificationForLogin(locale: string, email: string, user: any, origin?: string): Promise<{
         requiresEmailVerification: boolean;
         token: string;
     }>;
-    emailVerificationLoginResend(locale: string, token: string): any;
-    emailVerificationLogin(locale: string, token: string, code: string, ipAddress: string, userAgent: string, res: any, browserId?: string | null): Promise<{
+    emailVerificationLoginResend(locale: string, token: string, origin?: string): any;
+    emailVerificationLogin(locale: string, token: string, code: string, ipAddress: string, userAgent: string, res: any, browserId?: string | null, origin?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         requiresPasswordReset: boolean;
@@ -61,7 +61,7 @@ export declare class AuthService {
         refreshToken?: undefined;
     }>;
     private login;
-    loginWithEmailAndPassword(res: any, locale: string, ipAddress: string, userAgent: string, { email, password }: LoginDTO, browserId?: string | null): Promise<{
+    loginWithEmailAndPassword(res: any, locale: string, ipAddress: string, userAgent: string, { email, password }: LoginDTO, browserId?: string | null, origin?: string): Promise<{
         requiresMfa: boolean;
         token: string;
     } | {
@@ -186,7 +186,7 @@ export declare class AuthService {
     logout(res: any, req: any, refreshToken: string): Promise<{
         success: boolean;
     }>;
-    forgotResetPassword(locale: string, password: string, code: string, ipAddress: string, userAgent: string): Promise<{
+    forgotResetPassword(locale: string, password: string, code: string, ipAddress: string, userAgent: string, origin?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         session: {
@@ -221,11 +221,36 @@ export declare class AuthService {
     /**
      * Valida (sem consumir) um token de convite de criação de conta e retorna os
      * dados básicos para pré-preencher o formulário no app de treinamentos.
+     * `hasAccount` diz se esse usuário já tem um jeito de entrar (senha ativa ou
+     * provedor externo vinculado) — usado pelo app para decidir entre mostrar o
+     * formulário de criação de conta ou uma tela de autorização de acesso.
      */
     verifyAccountInvite(locale: string, code: string): Promise<{
         valid: boolean;
         name: string;
         email: string;
+        hasAccount: boolean;
+    }>;
+    /**
+     * Conclui um convite de acesso para quem já tem conta (senha ou provedor
+     * externo): não define senha nenhuma, só prova controle do e-mail (mesmo
+     * nível de confiança do link de reset de senha) e autentica o usuário.
+     */
+    authorizeAccountInvite(locale: string, code: string, ipAddress: string, userAgent: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        session: {
+            id: number;
+            user_id: number;
+            user_agent: string;
+            created_at: Date;
+            updated_at: Date;
+            hash: string;
+            ip_address: string;
+            revoked_at: Date | null;
+            expires_at: Date;
+            browser_id: string | null;
+        };
     }>;
     /**
      * Conclui a criação de conta a partir de um token de convite: cria/atualiza a
@@ -252,7 +277,7 @@ export declare class AuthService {
             browser_id: string | null;
         };
     }>;
-    verifyMfaCode(locale: string, mfaToken: string, code: string, ipAddress: string, userAgent: string, methodType?: 'totp' | 'email' | 'recovery', browserId?: string | null): Promise<{
+    verifyMfaCode(locale: string, mfaToken: string, code: string, ipAddress: string, userAgent: string, methodType?: 'totp' | 'email' | 'recovery', browserId?: string | null, origin?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         session: {
@@ -286,7 +311,7 @@ export declare class AuthService {
         };
         requiresPasswordReset: boolean;
     }>;
-    resendMfaCode(locale: string, mfaToken: string): Promise<{
+    resendMfaCode(locale: string, mfaToken: string, origin?: string): Promise<{
         success: boolean;
         hasEmailMfa: boolean;
     }>;

package/dist/auth/auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/auth/auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,wBAAwB,CAAC;AAUpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,qBACa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAErB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAEzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAEtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAErB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAlB5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAIpC,MAAM,EAAE,aAAa,EAErB,IAAI,EAAE,kBAAkB,EAExB,OAAO,EAAE,cAAc,EAEvB,QAAQ,EAAE,eAAe,EAEzB,KAAK,EAAE,YAAY,EAEnB,OAAO,EAAE,cAAc,EAEvB,IAAI,EAAE,WAAW,EAEjB,SAAS,EAAE,gBAAgB;IAGxC,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;IAexH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;;;;IAK5F,OAAO,CAAC,uBAAuB;YAWjB,gCAAgC;IAcxC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG;;;;IAmF5D,iCAAiC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG;;;;IA0D1E,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAwC1D,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;YA4DrI,KAAK;IAqDb,yBAAyB,CAC7B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;IAoErB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;IAe3C,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAUzC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;IA2BxH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,SAAS;;;IASxD,MAAM,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,YAAY,EAAE,MAAM;;;IAWrC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;IA6B9G;;;;;;OAMG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,EACd,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;IAgD5E;;;OAGG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;;IAStD;;;;OAIG;IACG,eAAe,CACnB,MAAM,EAAE,MAAM,EACd,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAC3E,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;IAsDb,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;IA6HzK,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;IA2C7I,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;;IA+B9C,qCAAqC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qCAAqC,CAAC;IA4C/I,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;CAwFrL"}
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/auth/auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,wBAAwB,CAAC;AAUpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,qBACa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAErB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAEzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAEtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAErB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAlB5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAIpC,MAAM,EAAE,aAAa,EAErB,IAAI,EAAE,kBAAkB,EAExB,OAAO,EAAE,cAAc,EAEvB,QAAQ,EAAE,eAAe,EAEzB,KAAK,EAAE,YAAY,EAEnB,OAAO,EAAE,cAAc,EAEvB,IAAI,EAAE,WAAW,EAEjB,SAAS,EAAE,gBAAgB;IAGxC,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;IAexH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;;;;IAK5F,OAAO,CAAC,uBAAuB;YAIjB,gCAAgC;IAcxC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM;;;;IAoF7E,iCAAiC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM;;;;IA2D3F,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAwC3E,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;;;;YA4DtJ,KAAK;IAmEb,yBAAyB,CAC7B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;IAoEX,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;IAe3C,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAUzC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;IA2BxH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,SAAS;;;IASxD,MAAM,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,YAAY,EAAE,MAAM;;;IAWrC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;IA8B/H;;;;;;OAMG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,EACd,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;IAgD5E;;;;;;OAMG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;;;IAmBtD;;;;OAIG;IACG,sBAAsB,CAC1B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;IA6BnB;;;;OAIG;IACG,eAAe,CACnB,MAAM,EAAE,MAAM,EACd,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAC3E,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;IAsDb,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;IA8H1L,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;IA2C7I,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;;;;IA+B/D,qCAAqC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qCAAqC,CAAC;IA4C/I,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;CAyFrL"}

package/dist/auth/auth.service.js

@@ -56,6 +56,7 @@ const security_service_1 = require("../security/security.service");
 const session_service_1 = require("../session/session.service");
 const setting_service_1 = require("../setting/setting.service");
 const token_service_1 = require("../token/token.service");
+const user_credential_util_1 = require("../user/user-credential.util");
 const user_service_1 = require("../user/user.service");
 const webauthn_origin_1 = require("../utils/webauthn-origin");
 let AuthService = AuthService_1 = class AuthService {
@@ -87,10 +88,7 @@ let AuthService = AuthService_1 = class AuthService {
         return { accessToken, refreshToken };
     }
     hasPendingPasswordReset(user) {
-        var _a;
-        return Boolean((_a = user === null || user === void 0 ? void 0 : user.user_credential) === null || _a === void 0 ? void 0 : _a.some((credential) => credential.type === 'password' &&
-            credential.requires_reset === true &&
-            !credential.revoked_at));
+        return (0, user_credential_util_1.hasPendingPasswordReset)(user);
     }
     async getRequiresPasswordResetByUserId(userId) {
         const credential = await this.prisma.user_credential.findFirst({
@@ -104,7 +102,7 @@ let AuthService = AuthService_1 = class AuthService {
         });
         return Boolean(credential === null || credential === void 0 ? void 0 : credential.id);
     }
-    async requiresMfaForLogin(locale, email, user) {
+    async requiresMfaForLogin(locale, email, user, origin) {
         const settings = await this.setting.getSettingValues([
             'require-mfa',
             'require-email-verification',
@@ -164,7 +162,8 @@ let AuthService = AuthService_1 = class AuthService {
             variables: {
                 code,
                 name: user.name,
-            }
+            },
+            app: await this.challenge.resolveAppKeyFromOrigin(origin),
         });
         return {
             requiresMfa: true,
@@ -174,7 +173,7 @@ let AuthService = AuthService_1 = class AuthService {
             })
         };
     }
-    async requiresEmailVerificationForLogin(locale, email, user) {
+    async requiresEmailVerificationForLogin(locale, email, user, origin) {
         const settings = await this.setting.getSettingValues([
             'require-mfa',
             'require-email-verification',
@@ -210,7 +209,8 @@ let AuthService = AuthService_1 = class AuthService {
             variables: {
                 code,
                 name: user.name,
-            }
+            },
+            app: await this.challenge.resolveAppKeyFromOrigin(origin),
         });
         return {
             requiresEmailVerification: true,
@@ -220,7 +220,7 @@ let AuthService = AuthService_1 = class AuthService {
             })
         };
     }
-    async emailVerificationLoginResend(locale, token) {
+    async emailVerificationLoginResend(locale, token, origin) {
         var _a;
         try {
             const payload = await this.token.verify(locale, token);
@@ -238,7 +238,7 @@ let AuthService = AuthService_1 = class AuthService {
                 throw new common_1.NotFoundException((0, api_locale_1.getLocaleText)('challengeNotFound', locale, 'Challenge not found.'));
             }
             const user = await this.user.findUserById(locale, challenge.user_identifier.user_id);
-            return await this.requiresEmailVerificationForLogin(locale, payload.email, user);
+            return await this.requiresEmailVerificationForLogin(locale, payload.email, user, origin);
         }
         catch (error) {
             if (((_a = error.message) === null || _a === void 0 ? void 0 : _a.includes('jwt expired')) || error.name === 'TokenExpiredError') {
@@ -247,12 +247,12 @@ let AuthService = AuthService_1 = class AuthService {
                     challengeIdentifierId: expiredPayload.challengeIdentifierId,
                     email: expiredPayload.email
                 });
-                return this.emailVerificationLoginResend(locale, newToken);
+                return this.emailVerificationLoginResend(locale, newToken, origin);
             }
             throw error;
         }
     }
-    async emailVerificationLogin(locale, token, code, ipAddress, userAgent, res, browserId) {
+    async emailVerificationLogin(locale, token, code, ipAddress, userAgent, res, browserId, origin) {
         try {
             const payload = await this.token.verify(locale, token);
             const challenge = await this.prisma.user_identifier_challenge.findUnique({
@@ -294,13 +294,22 @@ let AuthService = AuthService_1 = class AuthService {
                 });
             });
             const user = await this.user.findUserById(locale, challenge.user_identifier.user_id);
-            return this.login(locale, user, ipAddress, userAgent, res, browserId);
+            return this.login(locale, user, ipAddress, userAgent, res, browserId, origin);
         }
         catch (error) {
             throw error;
         }
     }
-    async login(locale, user, ipAddress, userAgent, res, browserId) {
+    async login(locale, user, ipAddress, userAgent, res, browserId, origin) {
+        // Conta excluída pelo próprio usuário: os identificadores já foram
+        // anonimizados, mas a checagem fecha qualquer caminho remanescente.
+        const account = await this.prisma.user.findUnique({
+            where: { id: user.id },
+            select: { deactivated_at: true },
+        });
+        if (account === null || account === void 0 ? void 0 : account.deactivated_at) {
+            throw new common_1.BadRequestException((0, api_locale_1.getLocaleText)('accessDenied', locale, 'Access denied.'));
+        }
         const emails = await this.prisma.user_identifier.findMany({
             where: {
                 user_id: user.id,
@@ -312,6 +321,7 @@ let AuthService = AuthService_1 = class AuthService {
             throw new common_1.BadRequestException((0, api_locale_1.getLocaleText)('accessDenied', locale, 'Access denied.'));
         }
         const { accessToken, refreshToken, session } = await this.getAuthenticationPayload(locale, user.id, ipAddress, userAgent, browserId);
+        const app = await this.challenge.resolveAppKeyFromOrigin(origin);
         for (const emailObj of emails) {
             this.mail.sendTemplatedMail(locale, {
                 email: emailObj.value,
@@ -321,7 +331,8 @@ let AuthService = AuthService_1 = class AuthService {
                     ipAddress,
                     userAgent,
                     location: 'Unknown',
-                }
+                },
+                app,
             });
         }
         await this.user.registerUserActivity(user.id, "login");
@@ -332,7 +343,7 @@ let AuthService = AuthService_1 = class AuthService {
         }
         return { accessToken, requiresPasswordReset };
     }
-    async loginWithEmailAndPassword(res, locale, ipAddress, userAgent, { email, password }, browserId) {
+    async loginWithEmailAndPassword(res, locale, ipAddress, userAgent, { email, password }, browserId, origin) {
         var _a, _b;
         const user = await this.user.findUserByEmail(locale, email);
         if (!user)
@@ -362,7 +373,7 @@ let AuthService = AuthService_1 = class AuthService {
             const emailMfas = mfaMethods.filter(m => m.type === 'email' && m.user_mfa_email && m.user_mfa_email.length > 0);
             if (emailMfas.length > 0) {
                 const emails = emailMfas.map(mfa => mfa.user_mfa_email[0].email);
-                await this.challenge.sendMfaCodeToMultipleEmails(locale, user.id, emails);
+                await this.challenge.sendMfaCodeToMultipleEmails(locale, user.id, emails, origin);
             }
             return {
                 requiresMfa: true,
@@ -377,12 +388,12 @@ let AuthService = AuthService_1 = class AuthService {
             'mfa-challenge-expiration-minutes'
         ]);
         if (settings['require-mfa'] === true && mfaMethods.length === 0) {
-            return this.requiresMfaForLogin(locale, email, user);
+            return this.requiresMfaForLogin(locale, email, user, origin);
         }
         else if (settings['require-email-verification'] === true && (identifier === null || identifier === void 0 ? void 0 : identifier.verified_at) === null) {
-            return this.requiresEmailVerificationForLogin(locale, email, user);
+            return this.requiresEmailVerificationForLogin(locale, email, user, origin);
         }
-        return this.login(locale, user, ipAddress, userAgent, res, browserId);
+        return this.login(locale, user, ipAddress, userAgent, res, browserId, origin);
     }
     async verifyRoles(_locale, userId) {
         return this.prisma.role.findMany({
@@ -434,7 +445,7 @@ let AuthService = AuthService_1 = class AuthService {
         }
         return { success: true };
     }
-    async forgotResetPassword(locale, password, code, ipAddress, userAgent) {
+    async forgotResetPassword(locale, password, code, ipAddress, userAgent, origin) {
         const challenge = await this.challenge.verifyCodePassword(locale, code);
         const userIdentifier = challenge.user_identifier;
         const passwordHash = await this.security.hashArgon2(password);
@@ -450,10 +461,11 @@ let AuthService = AuthService_1 = class AuthService {
             slug: 'auth-forget-password-confirmation',
             variables: {
                 name: userIdentifier.user.name,
-            }
+            },
+            app: await this.challenge.resolveAppKeyFromOrigin(origin),
         });
         const { accessToken, refreshToken, session } = await this.getAuthenticationPayload(locale, userIdentifier.user_id, ipAddress, userAgent);
-        await this.user.registerUserActivity(userIdentifier.id, "resetPassword");
+        await this.user.registerUserActivity(userIdentifier.user_id, "resetPassword");
         return { accessToken, refreshToken, session };
     }
     /**
@@ -508,16 +520,51 @@ let AuthService = AuthService_1 = class AuthService {
     /**
      * Valida (sem consumir) um token de convite de criação de conta e retorna os
      * dados básicos para pré-preencher o formulário no app de treinamentos.
+     * `hasAccount` diz se esse usuário já tem um jeito de entrar (senha ativa ou
+     * provedor externo vinculado) — usado pelo app para decidir entre mostrar o
+     * formulário de criação de conta ou uma tela de autorização de acesso.
      */
     async verifyAccountInvite(locale, code) {
         var _a, _b;
         const challenge = await this.challenge.verifyCodePassword(locale, code);
+        const userId = challenge.user_identifier.user_id;
+        const [passwordCount, oauthCount] = await Promise.all([
+            this.prisma.user_credential.count({
+                where: { user_id: userId, type: 'password', revoked_at: null },
+            }),
+            this.prisma.user_account.count({ where: { user_id: userId } }),
+        ]);
         return {
             valid: true,
             name: (_b = (_a = challenge.user_identifier.user) === null || _a === void 0 ? void 0 : _a.name) !== null && _b !== void 0 ? _b : null,
             email: challenge.user_identifier.value,
+            hasAccount: passwordCount > 0 || oauthCount > 0,
         };
     }
+    /**
+     * Conclui um convite de acesso para quem já tem conta (senha ou provedor
+     * externo): não define senha nenhuma, só prova controle do e-mail (mesmo
+     * nível de confiança do link de reset de senha) e autentica o usuário.
+     */
+    async authorizeAccountInvite(locale, code, ipAddress, userAgent) {
+        var _a;
+        const challenge = await this.challenge.verifyCodePassword(locale, code);
+        const userIdentifier = challenge.user_identifier;
+        if (!userIdentifier.verified_at || !userIdentifier.enabled) {
+            await this.prisma.user_identifier.update({
+                where: { id: userIdentifier.id },
+                data: { verified_at: (_a = userIdentifier.verified_at) !== null && _a !== void 0 ? _a : new Date(), enabled: true },
+            });
+        }
+        // Consome o challenge para impedir reuso do link.
+        await this.prisma.user_identifier_challenge.updateMany({
+            where: { id: challenge.id },
+            data: { verified_at: new Date(), expires_at: new Date() },
+        });
+        const { accessToken, refreshToken, session } = await this.getAuthenticationPayload(locale, userIdentifier.user_id, ipAddress, userAgent);
+        await this.user.registerUserActivity(userIdentifier.user_id, 'authorizeAccountInvite');
+        return { accessToken, refreshToken, session };
+    }
     /**
      * Conclui a criação de conta a partir de um token de convite: cria/atualiza a
      * credencial de senha, marca o identificador como verificado, atualiza o nome
@@ -561,10 +608,10 @@ let AuthService = AuthService_1 = class AuthService {
             data: { verified_at: new Date(), expires_at: new Date() },
         });
         const { accessToken, refreshToken, session } = await this.getAuthenticationPayload(locale, userIdentifier.user_id, ipAddress, userAgent);
-        await this.user.registerUserActivity(userIdentifier.id, 'completeAccount');
+        await this.user.registerUserActivity(userIdentifier.user_id, 'completeAccount');
         return { accessToken, refreshToken, session };
     }
-    async verifyMfaCode(locale, mfaToken, code, ipAddress, userAgent, methodType, browserId) {
+    async verifyMfaCode(locale, mfaToken, code, ipAddress, userAgent, methodType, browserId, origin) {
         var _a, _b, _c, _d;
         const payload = await this.token.verifyMfaChallengeToken(mfaToken);
         const user = await this.prisma.user.findUnique({
@@ -662,7 +709,8 @@ let AuthService = AuthService_1 = class AuthService {
                 ipAddress,
                 userAgent,
                 location: 'Unknown',
-            }
+            },
+            app: await this.challenge.resolveAppKeyFromOrigin(origin),
         });
         await this.user.registerUserActivity(user.id, "login");
         const requiresPasswordReset = await this.getRequiresPasswordResetByUserId(user.id);
@@ -697,7 +745,7 @@ let AuthService = AuthService_1 = class AuthService {
         const requiresPasswordReset = await this.getRequiresPasswordResetByUserId(user.id);
         return { accessToken, refreshToken, session, requiresPasswordReset };
     }
-    async resendMfaCode(locale, mfaToken) {
+    async resendMfaCode(locale, mfaToken, origin) {
         const payload = await this.token.verifyMfaChallengeToken(mfaToken);
         const mfaMethods = await this.prisma.user_mfa.findMany({
             where: {
@@ -716,7 +764,7 @@ let AuthService = AuthService_1 = class AuthService {
         if (!emailMfa.user_mfa_email || emailMfa.user_mfa_email.length === 0) {
             throw new common_1.BadRequestException((0, api_locale_1.getLocaleText)('noEmailMfaFound', locale, 'No email MFA method found for this user.'));
         }
-        await this.challenge.sendMfaCodeByEmail(locale, payload.userId, emailMfa.user_mfa_email[0].email);
+        await this.challenge.sendMfaCodeByEmail(locale, payload.userId, emailMfa.user_mfa_email[0].email, origin);
         return {
             success: true,
             hasEmailMfa: true
@@ -819,7 +867,8 @@ let AuthService = AuthService_1 = class AuthService {
                 ipAddress,
                 userAgent,
                 location: 'Unknown',
-            }
+            },
+            app: await this.challenge.resolveAppKeyFromOrigin(requestOrigin),
         });
         await this.user.registerUserActivity(userId, 'login');
         const requiresPasswordReset = await this.getRequiresPasswordResetByUserId(userId);