@hed-hog/core 0.0.387 → 0.0.393

package/dist/auth/auth.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gDAAiE;AACjE,oDAAkE;AAClE,yCAA2C;AAC3C,2CAAgF;AAChF,2CAA8C;AAC9C,uCAAoD;AACpD,qCAAwC;AACxC,kEAAyC;AACzC,oEAAgE;AAChE,sEAAkE;AAClE,oEAA+D;AAC/D,qDAAiD;AACjD,iEAA6D;AAC7D,8DAA0D;AAC1D,8DAA0D;AAC1D,wDAAoD;AACpD,0DAAsD;AACtD,qDAAiD;AACjD,uDAAmD;AACnD,iDAA6C;AAC7C,oDAAgD;AA2EzC,IAAM,UAAU,GAAhB,MAAM,UAAU;IACrB,SAAS,CAAC,QAA4B;QACpC,QAAQ;aACL,KAAK,CAAC,IAAA,uBAAY,GAAE,CAAC;aACrB,SAAS,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;CACF,CAAA;AANY,gCAAU;qBAAV,UAAU;IAzEtB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,IAAA,mBAAU,EAAC,GAAG,EAAE,CACd,eAAS,CAAC,aAAa,CAAC;gBACtB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,CAAC,yBAAY,CAAC;gBACvB,MAAM,EAAE,CAAC,0BAAa,CAAC;gBACvB,UAAU,EAAE,KAAK,EAAE,MAAqB,EAAE,EAAE;oBAC1C,IAAI,CAAC;wBACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;4BACjD,KAAK,EAAE;gCACL,IAAI,EAAE;oCACJ,EAAE,EAAE;wCACF,iCAAiC;qCAClC;iCACF;6BACF;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,IAAI;gCACV,KAAK,EAAE,IAAI;6BACZ;yBACF,CAAC,CAAC;wBAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;wBAE3C,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;4BACnC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC5C,CAAC;wBAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;wBAC1E,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;wBAErF,OAAO;4BACL,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;4BACtC,MAAM,EAAE,IAAI;4BACZ,WAAW,EAAE;gCACX,SAAS,EAAE,aAAa;6BACzB;yBACF,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;wBAClE,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;aACF,CAAC,CACH;YACD,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,yBAAY,CAAC;YAC9B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC;YAC/B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,iCAAc,CAAC;YAChC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,qBAAc,CAAC;YAChC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,gCAAc,CAAC;YAChC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC;YAC7B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,kCAAe,CAAC;YACjC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC;YAC/B,qBAAY;YACZ,kBAAU;SACX;QACD,WAAW,EAAE,CAAC,gCAAc,CAAC;QAC7B,SAAS,EAAE;YACT,gBAAS;YACT,0BAAW;YACX,4BAAY;YACZ,oCAAgB;YAChB;gBACE,OAAO,EAAE,gBAAS;gBAClB,QAAQ,EAAE,sBAAS;aACpB;SACF;QACD,OAAO,EAAE,CAAC,0BAAW,CAAC;KACvB,CAAC;GACW,UAAU,CAMtB"}
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gDAAiE;AACjE,oDAAkE;AAClE,yCAA2C;AAC3C,2CAAgF;AAChF,2CAA8C;AAC9C,uCAAoD;AACpD,qCAAwC;AACxC,kEAAyC;AACzC,oEAAgE;AAChE,sEAAkE;AAClE,oEAA+D;AAC/D,qDAAiD;AACjD,iEAA6D;AAC7D,8DAA0D;AAC1D,8DAA0D;AAC1D,wDAAoD;AACpD,0DAAsD;AACtD,0EAAqE;AACrE,qDAAiD;AACjD,uDAAmD;AACnD,iDAA6C;AAC7C,oDAAgD;AA4EzC,IAAM,UAAU,GAAhB,MAAM,UAAU;IACrB,SAAS,CAAC,QAA4B;QACpC,QAAQ;aACL,KAAK,CAAC,IAAA,uBAAY,GAAE,CAAC;aACrB,SAAS,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;CACF,CAAA;AANY,gCAAU;qBAAV,UAAU;IA1EtB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,IAAA,mBAAU,EAAC,GAAG,EAAE,CACd,eAAS,CAAC,aAAa,CAAC;gBACtB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,CAAC,yBAAY,CAAC;gBACvB,MAAM,EAAE,CAAC,0BAAa,CAAC;gBACvB,UAAU,EAAE,KAAK,EAAE,MAAqB,EAAE,EAAE;oBAC1C,IAAI,CAAC;wBACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;4BACjD,KAAK,EAAE;gCACL,IAAI,EAAE;oCACJ,EAAE,EAAE;wCACF,iCAAiC;qCAClC;iCACF;6BACF;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,IAAI;gCACV,KAAK,EAAE,IAAI;6BACZ;yBACF,CAAC,CAAC;wBAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;wBAE3C,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;4BACnC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC5C,CAAC;wBAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;wBAC1E,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;wBAErF,OAAO;4BACL,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;4BACtC,MAAM,EAAE,IAAI;4BACZ,WAAW,EAAE;gCACX,SAAS,EAAE,aAAa;6BACzB;yBACF,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;wBAClE,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;aACF,CAAC,CACH;YACD,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,yBAAY,CAAC;YAC9B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC;YAC/B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,iCAAc,CAAC;YAChC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,qBAAc,CAAC;YAChC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,gCAAc,CAAC;YAChC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC;YAC7B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,kCAAe,CAAC;YACjC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC;YAC/B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,qCAAgB,CAAC;YAClC,qBAAY;YACZ,kBAAU;SACX;QACD,WAAW,EAAE,CAAC,gCAAc,CAAC;QAC7B,SAAS,EAAE;YACT,gBAAS;YACT,0BAAW;YACX,4BAAY;YACZ,oCAAgB;YAChB;gBACE,OAAO,EAAE,gBAAS;gBAClB,QAAQ,EAAE,sBAAS;aACpB;SACF;QACD,OAAO,EAAE,CAAC,0BAAW,CAAC;KACvB,CAAC;GACW,UAAU,CAMtB"}

package/dist/auth/auth.service.d.ts

@@ -6,6 +6,8 @@ import { SecurityService } from '../security/security.service';
 import { SessionService } from '../session/session.service';
 import { SettingService } from '../setting/setting.service';
 import { TokenService } from '../token/token.service';
+import { UserDeviceService } from '../user-device/user-device.service';
+import { CreateWithEmailAndPasswordDTO } from '../user/dto/create-with-email-and-password.dto';
 import { UserService } from '../user/user.service';
 import { ForgetDTO } from './dto/forget.dto';
 import { LoginDTO } from './dto/login.dto';
@@ -18,8 +20,9 @@ export declare class AuthService {
     private readonly session;
     private readonly user;
     private readonly challenge;
+    private readonly userDevice;
     private readonly logger;
-    constructor(prisma: PrismaService, mail: MailManagerService, setting: SettingService, security: SecurityService, token: TokenService, session: SessionService, user: UserService, challenge: ChallengeService);
+    constructor(prisma: PrismaService, mail: MailManagerService, setting: SettingService, security: SecurityService, token: TokenService, session: SessionService, user: UserService, challenge: ChallengeService, userDevice: UserDeviceService);
     getAuthenticationPayload(locale: string, userId: number, ipAddress: string, userAgent: string, browserId?: string | null): Promise<{
         accessToken: string;
         refreshToken: string;
@@ -28,30 +31,43 @@ export declare class AuthService {
             user_id: number;
             user_agent: string;
             created_at: Date;
+            impersonator_user_id: number | null;
             updated_at: Date;
             hash: string;
             ip_address: string;
             revoked_at: Date | null;
             expires_at: Date;
             browser_id: string | null;
+            impersonation_reason: string | null;
         };
     }>;
-    issueDesktopToken(locale: string, userId: number, ipAddress: string, userAgent: string): Promise<{
+    /**
+     * Adota o idioma do cliente como preferencia do usuario - uma unica vez.
+     *
+     * Escrita write-once de proposito: sobrescrever a cada login faria um acesso
+     * de aparelho emprestado, ou de um navegador em outro idioma, apagar a
+     * escolha que o usuario fez na tela de preferencias.
+     *
+     * Nunca lanca. Idioma e acabamento; login que falha por causa dele seria uma
+     * troca pessima.
+     */
+    private persistDetectedLanguage;
+    issueDesktopToken(locale: string, userId: number, ipAddress: string, userAgent: string, isImpersonating?: boolean): Promise<{
         accessToken: string;
         refreshToken: string;
     }>;
     private hasPendingPasswordReset;
     private getRequiresPasswordResetByUserId;
-    requiresMfaForLogin(locale: string, email: string, user: any): Promise<{
+    requiresMfaForLogin(locale: string, email: string, user: any, origin?: string): Promise<{
         requiresMfa: boolean;
         token: string;
     }>;
-    requiresEmailVerificationForLogin(locale: string, email: string, user: any): Promise<{
+    requiresEmailVerificationForLogin(locale: string, email: string, user: any, origin?: string): Promise<{
         requiresEmailVerification: boolean;
         token: string;
     }>;
-    emailVerificationLoginResend(locale: string, token: string): any;
-    emailVerificationLogin(locale: string, token: string, code: string, ipAddress: string, userAgent: string, res: any, browserId?: string | null): Promise<{
+    emailVerificationLoginResend(locale: string, token: string, origin?: string): any;
+    emailVerificationLogin(locale: string, token: string, code: string, ipAddress: string, userAgent: string, res: any, browserId?: string | null, origin?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         requiresPasswordReset: boolean;
@@ -60,8 +76,16 @@ export declare class AuthService {
         requiresPasswordReset: boolean;
         refreshToken?: undefined;
     }>;
+    /**
+     * Dispara o alerta de acesso de dispositivo desconhecido.
+     *
+     * O `await` aqui cobre so a resolucao do app (leitura de setting memoizada);
+     * o envio em si continua sem await de proposito, para nao somar a latencia do
+     * SMTP ao tempo de resposta do login.
+     */
+    private sendNewDeviceLoginMail;
     private login;
-    loginWithEmailAndPassword(res: any, locale: string, ipAddress: string, userAgent: string, { email, password }: LoginDTO, browserId?: string | null): Promise<{
+    loginWithEmailAndPassword(res: any, locale: string, ipAddress: string, userAgent: string, { email, password }: LoginDTO, browserId?: string | null, origin?: string): Promise<{
         requiresMfa: boolean;
         token: string;
     } | {
@@ -83,11 +107,77 @@ export declare class AuthService {
             id: number;
         }[];
     }>;
+    /**
+     * Cadastro por e-mail e senha.
+     *
+     * Com `require-email-verification` desligada (o default), a conta já nasce
+     * utilizável e o e-mail de confirmação é apenas informativo — devolver a
+     * pessoa para a tela de login só a obrigaria a digitar de novo o que acabou
+     * de digitar, então o cadastro já termina com a sessão emitida.
+     *
+     * Com a setting ligada, `loginWithEmailAndPassword` barraria o acesso logo em
+     * seguida; nesse caso não emitimos sessão e devolvemos `hasChallenge` para o
+     * app mandar a pessoa confirmar o endereço antes.
+     */
+    signupWithEmailAndPassword(res: any, locale: string, ipAddress: string, userAgent: string, data: CreateWithEmailAndPasswordDTO, browserId?: string | null, origin?: string): Promise<{
+        user: {
+            id: number;
+            created_at: Date;
+            name: string;
+            photo_id: number | null;
+            suspended_until: Date | null;
+            last_login_at: Date | null;
+            suspended_reason: string | null;
+            deactivated_at: Date | null;
+            updated_at: Date;
+        };
+        hasChallenge: boolean;
+    } | {
+        accessToken: string;
+        refreshToken: string;
+        requiresPasswordReset: boolean;
+        user: {
+            id: number;
+            created_at: Date;
+            name: string;
+            photo_id: number | null;
+            suspended_until: Date | null;
+            last_login_at: Date | null;
+            suspended_reason: string | null;
+            deactivated_at: Date | null;
+            updated_at: Date;
+        };
+        hasChallenge: boolean;
+    } | {
+        accessToken: string;
+        requiresPasswordReset: boolean;
+        refreshToken?: undefined;
+        user: {
+            id: number;
+            created_at: Date;
+            name: string;
+            photo_id: number | null;
+            suspended_until: Date | null;
+            last_login_at: Date | null;
+            suspended_reason: string | null;
+            deactivated_at: Date | null;
+            updated_at: Date;
+        };
+        hasChallenge: boolean;
+    }>;
     verifyRoles(_locale: string, userId: number): Promise<{
         slug: string;
     }[]>;
-    verifyUser(locale: string, userId: number): Promise<{
+    verifyUser(locale: string, userId: number, sessionId?: number | null): Promise<{
         requires_password_reset: boolean;
+        impersonation: {
+            by: {
+                id: number;
+                name: string;
+            };
+            reason: string;
+            expires_at: string;
+        };
         role_user: ({
             role: {
                 id: number;
@@ -119,6 +209,7 @@ export declare class AuthService {
             user_id: number;
             created_at: Date;
             updated_at: Date;
+            actor_user_id: number | null;
             action: string;
         }[];
         user_credential: {
@@ -147,12 +238,14 @@ export declare class AuthService {
             user_id: number;
             user_agent: string;
             created_at: Date;
+            impersonator_user_id: number | null;
             updated_at: Date;
             hash: string;
             ip_address: string;
             revoked_at: Date | null;
             expires_at: Date;
             browser_id: string | null;
+            impersonation_reason: string | null;
         }[];
         id: number;
         created_at: Date;
@@ -164,6 +257,7 @@ export declare class AuthService {
         deactivated_at: Date | null;
         updated_at: Date;
     }>;
+    private describeImpersonation;
     refreshAccessToken(locale: string, refreshToken: string, ipAddress: string, userAgent: string, browserId?: string | null): Promise<{
         accessToken: string;
         refreshToken: string;
@@ -172,12 +266,14 @@ export declare class AuthService {
             user_id: number;
             user_agent: string;
             created_at: Date;
+            impersonator_user_id: number | null;
             updated_at: Date;
             hash: string;
             ip_address: string;
             revoked_at: Date | null;
             expires_at: Date;
             browser_id: string | null;
+            impersonation_reason: string | null;
         };
     }>;
     forgotPassword(locale: string, { email, app }: ForgetDTO): Promise<{
@@ -186,7 +282,7 @@ export declare class AuthService {
     logout(res: any, req: any, refreshToken: string): Promise<{
         success: boolean;
     }>;
-    forgotResetPassword(locale: string, password: string, code: string, ipAddress: string, userAgent: string): Promise<{
+    forgotResetPassword(locale: string, password: string, code: string, ipAddress: string, userAgent: string, origin?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         session: {
@@ -194,12 +290,14 @@ export declare class AuthService {
             user_id: number;
             user_agent: string;
             created_at: Date;
+            impersonator_user_id: number | null;
             updated_at: Date;
             hash: string;
             ip_address: string;
             revoked_at: Date | null;
             expires_at: Date;
             browser_id: string | null;
+            impersonation_reason: string | null;
         };
     }>;
     /**
@@ -218,14 +316,65 @@ export declare class AuthService {
         token: string;
         hasPassword: boolean;
     }>;
+    /**
+     * Confirma o e-mail a partir do link enviado no cadastro. Não emite sessão: o
+     * link só prova o controle da caixa, quem quiser entrar passa pelo login.
+     *
+     * Idempotente de propósito — clientes de e-mail fazem pré-fetch do link e o
+     * usuário costuma clicar de novo depois, e nesses casos ver "link inválido"
+     * assusta mais do que ajuda.
+     */
+    confirmEmail(locale: string, token: string): Promise<{
+        confirmed: boolean;
+        alreadyConfirmed: boolean;
+        email: string;
+        name: string;
+    }>;
+    /**
+     * Reenvia o link de confirmação do cadastro.
+     *
+     * Responde `{ sent: true }` mesmo quando o e-mail não existe ou já está
+     * confirmado: qualquer diferença na resposta transformaria a rota num
+     * oráculo para descobrir quais endereços têm conta.
+     */
+    resendEmailConfirmation(locale: string, email: string, app?: string, origin?: string): Promise<{
+        sent: boolean;
+    }>;
     /**
      * Valida (sem consumir) um token de convite de criação de conta e retorna os
      * dados básicos para pré-preencher o formulário no app de treinamentos.
+     * `hasAccount` diz se esse usuário já tem um jeito de entrar (senha ativa ou
+     * provedor externo vinculado) — usado pelo app para decidir entre mostrar o
+     * formulário de criação de conta ou uma tela de autorização de acesso.
      */
     verifyAccountInvite(locale: string, code: string): Promise<{
         valid: boolean;
         name: string;
         email: string;
+        hasAccount: boolean;
+    }>;
+    /**
+     * Conclui um convite de acesso para quem já tem conta (senha ou provedor
+     * externo): não define senha nenhuma, só prova controle do e-mail (mesmo
+     * nível de confiança do link de reset de senha) e autentica o usuário.
+     */
+    authorizeAccountInvite(locale: string, code: string, ipAddress: string, userAgent: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        session: {
+            id: number;
+            user_id: number;
+            user_agent: string;
+            created_at: Date;
+            impersonator_user_id: number | null;
+            updated_at: Date;
+            hash: string;
+            ip_address: string;
+            revoked_at: Date | null;
+            expires_at: Date;
+            browser_id: string | null;
+            impersonation_reason: string | null;
+        };
     }>;
     /**
      * Conclui a criação de conta a partir de um token de convite: cria/atualiza a
@@ -244,15 +393,17 @@ export declare class AuthService {
             user_id: number;
             user_agent: string;
             created_at: Date;
+            impersonator_user_id: number | null;
             updated_at: Date;
             hash: string;
             ip_address: string;
             revoked_at: Date | null;
             expires_at: Date;
             browser_id: string | null;
+            impersonation_reason: string | null;
         };
     }>;
-    verifyMfaCode(locale: string, mfaToken: string, code: string, ipAddress: string, userAgent: string, methodType?: 'totp' | 'email' | 'recovery', browserId?: string | null): Promise<{
+    verifyMfaCode(locale: string, mfaToken: string, code: string, ipAddress: string, userAgent: string, methodType?: 'totp' | 'email' | 'recovery', browserId?: string | null, origin?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         session: {
@@ -260,16 +411,18 @@ export declare class AuthService {
             user_id: number;
             user_agent: string;
             created_at: Date;
+            impersonator_user_id: number | null;
             updated_at: Date;
             hash: string;
             ip_address: string;
             revoked_at: Date | null;
             expires_at: Date;
             browser_id: string | null;
+            impersonation_reason: string | null;
         };
         requiresPasswordReset: boolean;
     }>;
-    verifyMfaRecoveryCode(locale: string, mfaToken: string, recoveryCode: string, ipAddress: string, userAgent: string, browserId?: string | null): Promise<{
+    verifyMfaRecoveryCode(locale: string, mfaToken: string, recoveryCode: string, ipAddress: string, userAgent: string, browserId?: string | null, origin?: string): Promise<{
         accessToken: string;
         refreshToken: string;
         session: {
@@ -277,16 +430,18 @@ export declare class AuthService {
             user_id: number;
             user_agent: string;
             created_at: Date;
+            impersonator_user_id: number | null;
             updated_at: Date;
             hash: string;
             ip_address: string;
             revoked_at: Date | null;
             expires_at: Date;
             browser_id: string | null;
+            impersonation_reason: string | null;
         };
         requiresPasswordReset: boolean;
     }>;
-    resendMfaCode(locale: string, mfaToken: string): Promise<{
+    resendMfaCode(locale: string, mfaToken: string, origin?: string): Promise<{
         success: boolean;
         hasEmailMfa: boolean;
     }>;
@@ -299,12 +454,14 @@ export declare class AuthService {
             user_id: number;
             user_agent: string;
             created_at: Date;
+            impersonator_user_id: number | null;
             updated_at: Date;
             hash: string;
             ip_address: string;
             revoked_at: Date | null;
             expires_at: Date;
             browser_id: string | null;
+            impersonation_reason: string | null;
         };
         requiresPasswordReset: boolean;
     }>;

package/dist/auth/auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/auth/auth.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,wBAAwB,CAAC;AAUpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,qBACa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAErB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAEzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAEtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAErB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAlB5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAIpC,MAAM,EAAE,aAAa,EAErB,IAAI,EAAE,kBAAkB,EAExB,OAAO,EAAE,cAAc,EAEvB,QAAQ,EAAE,eAAe,EAEzB,KAAK,EAAE,YAAY,EAEnB,OAAO,EAAE,cAAc,EAEvB,IAAI,EAAE,WAAW,EAEjB,SAAS,EAAE,gBAAgB;IAGxC,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;IAexH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;;;;IAK5F,OAAO,CAAC,uBAAuB;YAWjB,gCAAgC;IAcxC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG;;;;IAmF5D,iCAAiC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG;;;;IA0D1E,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAwC1D,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;YA4DrI,KAAK;IAqDb,yBAAyB,CAC7B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;IAoErB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;IAe3C,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAUzC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;IA2BxH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,SAAS;;;IASxD,MAAM,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,YAAY,EAAE,MAAM;;;IAWrC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;IA6B9G;;;;;;OAMG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,EACd,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;IAgD5E;;;OAGG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;;IAStD;;;;OAIG;IACG,eAAe,CACnB,MAAM,EAAE,MAAM,EACd,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAC3E,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;IAsDb,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;IA6HzK,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;IA2C7I,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;;IA+B9C,qCAAqC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qCAAqC,CAAC;IA4C/I,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;CAwFrL"}
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/auth/auth.service.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,wBAAwB,CAAC;AAWpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,WAAW,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,qBACa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAEvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAErB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAEzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAEtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAErB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAE1B,OAAO,CAAC,QAAQ,CAAC,UAAU;IApB7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;gBAIpC,MAAM,EAAE,aAAa,EAErB,IAAI,EAAE,kBAAkB,EAExB,OAAO,EAAE,cAAc,EAEvB,QAAQ,EAAE,eAAe,EAEzB,KAAK,EAAE,YAAY,EAEnB,OAAO,EAAE,cAAc,EAEvB,IAAI,EAAE,WAAW,EAEjB,SAAS,EAAE,gBAAgB,EAE3B,UAAU,EAAE,iBAAiB;IAG1C,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;IA2B9H;;;;;;;;;OASG;YACW,uBAAuB;IAmC/B,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,UAAQ;;;;IAmBrH,OAAO,CAAC,uBAAuB;YAIjB,gCAAgC;IAcxC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM;;;;IAoF7E,iCAAiC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM;;;;IA2D3F,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAwC3E,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;;;;IA+DpK;;;;;;OAMG;YACW,sBAAsB;YAiCtB,KAAK;IA2Db,yBAAyB,CAC7B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;IAoEjB;;;;;;;;;;;OAWG;IACG,0BAA0B,CAC9B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,6BAA6B,EACnC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA6BX,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;;;IAe3C,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAa5D,qBAAqB;IA8B7B,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;IA2BxH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,SAAS;;;IASxD,MAAM,CAAC,GAAG,KAAA,EAAE,GAAG,KAAA,EAAE,YAAY,EAAE,MAAM;;;IAsBrC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;IA8B/H;;;;;;OAMG;IACG,oBAAoB,CACxB,MAAM,EAAE,MAAM,EACd,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;IAgD5E;;;;;;;OAOG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;;;;;IA6ChD;;;;;;OAMG;IACG,uBAAuB,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,GAAG,CAAC,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM;;;IA0BjB;;;;;;OAMG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;;;;;;IAmBtD;;;;OAIG;IACG,sBAAsB,CAC1B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;;;IA6BnB;;;;OAIG;IACG,eAAe,CACnB,MAAM,EAAE,MAAM,EACd,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAC3E,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;;;;IAsDb,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;IAqH1L,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;IAmD9J,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;;;;IA+B/D,qCAAqC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qCAAqC,CAAC;IA4C/I,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;CAgFrL"}