@lenne.tech/nest-server 11.6.2 → 11.7.1

package/dist/core/modules/auth/services/legacy-auth-rate-limiter.service.d.ts

@@ -0,0 +1,31 @@
+import { OnModuleInit } from '@nestjs/common';
+import { IAuthRateLimit } from '../../../common/interfaces/server-options.interface';
+interface RateLimitResult {
+    allowed: boolean;
+    current: number;
+    limit: number;
+    remaining: number;
+    resetIn: number;
+}
+export declare class LegacyAuthRateLimiter implements OnModuleInit {
+    private readonly logger;
+    private readonly store;
+    private config;
+    private cleanupInterval;
+    constructor();
+    onModuleInit(): void;
+    configure(config: IAuthRateLimit | null | undefined): void;
+    check(ip: string, endpoint: string): RateLimitResult;
+    getMessage(): string;
+    isEnabled(): boolean;
+    reset(ip: string): void;
+    clear(): void;
+    getStats(): {
+        activeEntries: number;
+        enabled: boolean;
+    };
+    onModuleDestroy(): void;
+    private maskIp;
+    private startCleanup;
+}
+export {};

package/dist/core/modules/auth/services/legacy-auth-rate-limiter.service.js

@@ -0,0 +1,153 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var LegacyAuthRateLimiter_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LegacyAuthRateLimiter = void 0;
+const common_1 = require("@nestjs/common");
+const config_service_1 = require("../../../common/services/config.service");
+const DEFAULT_CONFIG = {
+    enabled: false,
+    max: 10,
+    message: 'Too many requests, please try again later.',
+    windowSeconds: 60,
+};
+let LegacyAuthRateLimiter = LegacyAuthRateLimiter_1 = class LegacyAuthRateLimiter {
+    constructor() {
+        this.logger = new common_1.Logger(LegacyAuthRateLimiter_1.name);
+        this.store = new Map();
+        this.config = DEFAULT_CONFIG;
+        this.cleanupInterval = null;
+        this.startCleanup();
+    }
+    onModuleInit() {
+        const rateLimitConfig = config_service_1.ConfigService.getFastButReadOnly('auth.rateLimit');
+        if (rateLimitConfig) {
+            this.configure(rateLimitConfig);
+        }
+    }
+    configure(config) {
+        if (config === undefined || config === null) {
+            return;
+        }
+        const enabled = config.enabled !== false;
+        this.config = {
+            ...DEFAULT_CONFIG,
+            ...config,
+            enabled,
+        };
+        if (this.config.enabled) {
+            this.logger.log(`Legacy Auth rate limiting enabled: ${this.config.max} requests per ${this.config.windowSeconds}s`);
+        }
+    }
+    check(ip, endpoint) {
+        if (!this.config.enabled) {
+            return {
+                allowed: true,
+                current: 0,
+                limit: Infinity,
+                remaining: Infinity,
+                resetIn: 0,
+            };
+        }
+        const limit = this.config.max;
+        const key = `${ip}:${endpoint}`;
+        const now = Date.now();
+        let entry = this.store.get(key);
+        if (!entry || now >= entry.resetTime) {
+            entry = {
+                count: 1,
+                resetTime: now + this.config.windowSeconds * 1000,
+            };
+            this.store.set(key, entry);
+            return {
+                allowed: true,
+                current: 1,
+                limit,
+                remaining: limit - 1,
+                resetIn: this.config.windowSeconds,
+            };
+        }
+        entry.count++;
+        const resetIn = Math.ceil((entry.resetTime - now) / 1000);
+        const allowed = entry.count <= limit;
+        const remaining = Math.max(0, limit - entry.count);
+        if (!allowed) {
+            this.logger.warn(`Rate limit exceeded for IP ${this.maskIp(ip)} on ${endpoint}: ${entry.count}/${limit}`);
+        }
+        return {
+            allowed,
+            current: entry.count,
+            limit,
+            remaining,
+            resetIn,
+        };
+    }
+    getMessage() {
+        return this.config.message;
+    }
+    isEnabled() {
+        return this.config.enabled;
+    }
+    reset(ip) {
+        for (const key of this.store.keys()) {
+            if (key.startsWith(`${ip}:`)) {
+                this.store.delete(key);
+            }
+        }
+    }
+    clear() {
+        this.store.clear();
+    }
+    getStats() {
+        return {
+            activeEntries: this.store.size,
+            enabled: this.config.enabled,
+        };
+    }
+    onModuleDestroy() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+        }
+    }
+    maskIp(ip) {
+        if (ip.includes('.')) {
+            const parts = ip.split('.');
+            return `${parts[0]}.${parts[1]}.*.*`;
+        }
+        const parts = ip.split(':');
+        return `${parts[0]}:****`;
+    }
+    startCleanup() {
+        this.cleanupInterval = setInterval(() => {
+            const now = Date.now();
+            let cleaned = 0;
+            for (const [key, entry] of this.store.entries()) {
+                if (now >= entry.resetTime) {
+                    this.store.delete(key);
+                    cleaned++;
+                }
+            }
+            if (cleaned > 0) {
+                this.logger.debug(`Cleaned up ${cleaned} expired rate limit entries`);
+            }
+        }, 5 * 60 * 1000);
+        if (this.cleanupInterval.unref) {
+            this.cleanupInterval.unref();
+        }
+    }
+};
+exports.LegacyAuthRateLimiter = LegacyAuthRateLimiter;
+exports.LegacyAuthRateLimiter = LegacyAuthRateLimiter = LegacyAuthRateLimiter_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], LegacyAuthRateLimiter);
+//# sourceMappingURL=legacy-auth-rate-limiter.service.js.map

package/dist/core/modules/auth/services/legacy-auth-rate-limiter.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-auth-rate-limiter.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/auth/services/legacy-auth-rate-limiter.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAkE;AAGlE,4EAAwE;AAgCxE,MAAM,cAAc,GAA6B;IAC/C,OAAO,EAAE,KAAK;IACd,GAAG,EAAE,EAAE;IACP,OAAO,EAAE,4CAA4C;IACrD,aAAa,EAAE,EAAE;CAClB,CAAC;AA6BK,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAMhC;QALiB,WAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;QAChD,UAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;QACnD,WAAM,GAA6B,cAAc,CAAC;QAClD,oBAAe,GAA0B,IAAI,CAAC;QAIpD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAKD,YAAY;QACV,MAAM,eAAe,GAAG,8BAAa,CAAC,kBAAkB,CAAiB,gBAAgB,CAAC,CAAC;QAC3F,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAYD,SAAS,CAAC,MAAyC;QAEjD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAGD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC;QAEzC,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,cAAc;YACjB,GAAG,MAAM;YACT,OAAO;SACR,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,sCAAsC,IAAI,CAAC,MAAM,CAAC,GAAG,iBAAiB,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;IASD,KAAK,CAAC,EAAU,EAAE,QAAgB;QAEhC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,CAAC;aACX,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAGvB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEhC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAErC,KAAK,GAAG;gBACN,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI;aAClD,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAE3B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;gBACV,KAAK;gBACL,SAAS,EAAE,KAAK,GAAG,CAAC;gBACpB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;aACnC,CAAC;QACJ,CAAC;QAGD,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,QAAQ,KAAK,KAAK,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;QAC5G,CAAC;QAED,OAAO;YACL,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,KAAK;YACpB,KAAK;YACL,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;IAKD,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAOD,KAAK,CAAC,EAAU;QACd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAKD,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAKD,QAAQ;QACN,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YAC9B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;SAC7B,CAAC;IACJ,CAAC;IAKD,eAAe;QACb,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAKO,MAAM,CAAC,EAAU;QACvB,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAErB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvC,CAAC;QAED,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5B,CAAC;IAKO,YAAY;QAElB,IAAI,CAAC,eAAe,GAAG,WAAW,CAChC,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,GAAG,CAAC,CAAC;YAEhB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChD,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACvB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,OAAO,6BAA6B,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;QAGF,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;CACF,CAAA;AArNY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;;GACA,qBAAqB,CAqNjC"}

package/dist/core/modules/better-auth/better-auth-migration-status.model.d.ts

@@ -0,0 +1,10 @@
+export declare class BetterAuthMigrationStatusModel {
+    totalUsers: number;
+    usersWithIamId: number;
+    usersWithIamAccount: number;
+    fullyMigratedUsers: number;
+    pendingMigrationUsers: number;
+    migrationPercentage: number;
+    canDisableLegacyAuth: boolean;
+    pendingUserEmails?: string[];
+}

package/dist/core/modules/better-auth/better-auth-migration-status.model.js

@@ -0,0 +1,57 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BetterAuthMigrationStatusModel = void 0;
+const graphql_1 = require("@nestjs/graphql");
+let BetterAuthMigrationStatusModel = class BetterAuthMigrationStatusModel {
+};
+exports.BetterAuthMigrationStatusModel = BetterAuthMigrationStatusModel;
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { description: 'Total number of users in the system' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "totalUsers", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { description: 'Number of users with iamId (linked to IAM)' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "usersWithIamId", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { description: 'Number of users with IAM credential account' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "usersWithIamAccount", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { description: 'Number of users fully migrated (iamId + credential account)' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "fullyMigratedUsers", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { description: 'Number of users not yet migrated' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "pendingMigrationUsers", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => Number, { description: 'Percentage of users fully migrated (0-100)' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "migrationPercentage", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => Boolean, {
+        description: 'Whether all users are migrated (Legacy Auth could be disabled if CoreModule supported it)',
+    }),
+    __metadata("design:type", Boolean)
+], BetterAuthMigrationStatusModel.prototype, "canDisableLegacyAuth", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => [String], {
+        description: 'Emails of users pending migration (max 100)',
+        nullable: true,
+    }),
+    __metadata("design:type", Array)
+], BetterAuthMigrationStatusModel.prototype, "pendingUserEmails", void 0);
+exports.BetterAuthMigrationStatusModel = BetterAuthMigrationStatusModel = __decorate([
+    (0, graphql_1.ObjectType)({ description: 'Migration status from Legacy Auth to Better-Auth (IAM)' })
+], BetterAuthMigrationStatusModel);
+//# sourceMappingURL=better-auth-migration-status.model.js.map

package/dist/core/modules/better-auth/better-auth-migration-status.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-migration-status.model.js","sourceRoot":"","sources":["../../../../src/core/modules/better-auth/better-auth-migration-status.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAyD;AAUlD,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;CA8D1C,CAAA;AA9DY,wEAA8B;AAKzC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;;kEACtD;AAOnB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC;;sEACzD;AAOvB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;;2EACrD;AAM5B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,WAAW,EAAE,6DAA6D,EAAE,CAAC;;0EACtE;AAO3B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;;6EACxC;AAM9B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC;;2EACvD;AAa5B;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE;QACpB,WAAW,EAAE,2FAA2F;KACzG,CAAC;;4EAC4B;AAU9B;IAJC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;QACrB,WAAW,EAAE,6CAA6C;QAC1D,QAAQ,EAAE,IAAI;KACf,CAAC;;yEAC2B;yCA7DlB,8BAA8B;IAD1C,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;GACzE,8BAA8B,CA8D1C"}

package/dist/core/modules/better-auth/better-auth-models.d.ts

@@ -39,6 +39,5 @@ export declare class BetterAuthFeaturesModel {
     jwt: boolean;
     twoFactor: boolean;
     passkey: boolean;
-    legacyPassword: boolean;
     socialProviders: string[];
 }

package/dist/core/modules/better-auth/better-auth-models.js

@@ -170,10 +170,6 @@ __decorate([
     (0, graphql_1.Field)(() => Boolean, { description: 'Whether Passkey is enabled' }),
     __metadata("design:type", Boolean)
 ], BetterAuthFeaturesModel.prototype, "passkey", void 0);
-__decorate([
-    (0, graphql_1.Field)(() => Boolean, { description: 'Whether legacy password handling is enabled' }),
-    __metadata("design:type", Boolean)
-], BetterAuthFeaturesModel.prototype, "legacyPassword", void 0);
 __decorate([
     (0, graphql_1.Field)(() => [String], { description: 'List of enabled social providers' }),
     __metadata("design:type", Array)

package/dist/core/modules/better-auth/better-auth-models.js.map

@@ -1 +1 @@
-{"version":3,"file":"better-auth-models.js","sourceRoot":"","sources":["../../../../src/core/modules/better-auth/better-auth-models.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAoD;AAEpD,uFAA0E;AAC1E,4DAAwD;AAOjD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CAqB/B,CAAA;AArBY,kDAAmB;AAE9B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;;+CACrC;AAGX;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,0CAA0C,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDAClF;AAGf;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;;kDACxC;AAGd;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDACvD;AAGd;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DACvD;AAGxB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qDAC3D;AAGnB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDACpD;8BApBN,mBAAmB;IAF/B,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAC/C,IAAA,iCAAU,EAAC,oBAAQ,CAAC,UAAU,CAAC;GACnB,mBAAmB,CAqB/B;AAOM,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;CASlC,CAAA;AATY,wDAAsB;AAEjC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;;kDACxC;AAGX;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;8BACnD,IAAI;yDAAC;AAGhB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;8BAC5D,mBAAmB;oDAAC;iCARf,sBAAsB;IAFlC,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;IAClD,IAAA,iCAAU,EAAC,oBAAQ,CAAC,MAAM,CAAC;GACf,sBAAsB,CASlC;AAOM,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;CAStC,CAAA;AATY,gEAA0B;AAErC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDACvD;AAGZ;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACvD;AAGf;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BAClE,IAAI;6DAAC;qCARN,0BAA0B;IAFtC,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IACvD,IAAA,iCAAU,EAAC,oBAAQ,CAAC,UAAU,CAAC;GACnB,0BAA0B,CAStC;AAOM,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;CAYnC,CAAA;AAZY,0DAAuB;AAElC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;;wDAC7D;AAGjB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDACvE;AAGjB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4DACrE;AAGvB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDACjE;kCAXJ,uBAAuB;IAFnC,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;IACzD,IAAA,iCAAU,EAAC,oBAAQ,CAAC,MAAM,CAAC;GACf,uBAAuB,CAYnC;AAOM,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;CAYlC,CAAA;AAZY,wDAAsB;AAEjC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;;kDACxC;AAGX;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACvD;AAGd;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;;4DACjC;AAGrB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;8BACzC,IAAI;yDAAC;iCAXL,sBAAsB;IAFlC,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;IAClD,IAAA,iCAAU,EAAC,oBAAQ,CAAC,MAAM,CAAC;GACf,sBAAsB,CAYlC;AAOM,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;CAS3C,CAAA;AATY,0EAA+B;AAE1C;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;;gEAC7D;AAGjB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kEAC3D;AAGnB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8DACjE;0CARJ,+BAA+B;IAF3C,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC;IACzE,IAAA,iCAAU,EAAC,oBAAQ,CAAC,MAAM,CAAC;GACf,+BAA+B,CAS3C;AAOM,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;CAkBnC,CAAA;AAlBY,0DAAuB;AAElC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;;wDACvD;AAGjB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;;oDAC1D;AAGb;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;;0DAC7C;AAGnB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;;wDACnD;AAGjB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;;+DAC7D;AAGxB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;;gEACjD;kCAjBf,uBAAuB;IAFnC,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC1D,IAAA,iCAAU,EAAC,oBAAQ,CAAC,UAAU,CAAC;GACnB,uBAAuB,CAkBnC"}
+{"version":3,"file":"better-auth-models.js","sourceRoot":"","sources":["../../../../src/core/modules/better-auth/better-auth-models.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAoD;AAEpD,uFAA0E;AAC1E,4DAAwD;AAOjD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CAqB/B,CAAA;AArBY,kDAAmB;AAE9B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;;+CACrC;AAGX;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,0CAA0C,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDAClF;AAGf;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;;kDACxC;AAGd;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDACvD;AAGd;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DACvD;AAGxB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qDAC3D;AAGnB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDACpD;8BApBN,mBAAmB;IAF/B,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAC/C,IAAA,iCAAU,EAAC,oBAAQ,CAAC,UAAU,CAAC;GACnB,mBAAmB,CAqB/B;AAOM,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;CASlC,CAAA;AATY,wDAAsB;AAEjC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;;kDACxC;AAGX;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;8BACnD,IAAI;yDAAC;AAGhB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,mBAAmB,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;8BAC5D,mBAAmB;oDAAC;iCARf,sBAAsB;IAFlC,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;IAClD,IAAA,iCAAU,EAAC,oBAAQ,CAAC,MAAM,CAAC;GACf,sBAAsB,CASlC;AAOM,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;CAStC,CAAA;AATY,gEAA0B;AAErC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDACvD;AAGZ;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACvD;AAGf;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BAClE,IAAI;6DAAC;qCARN,0BAA0B;IAFtC,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IACvD,IAAA,iCAAU,EAAC,oBAAQ,CAAC,UAAU,CAAC;GACnB,0BAA0B,CAStC;AAOM,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;CAYnC,CAAA;AAZY,0DAAuB;AAElC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;;wDAC7D;AAGjB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDACvE;AAGjB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4DACrE;AAGvB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDACjE;kCAXJ,uBAAuB;IAFnC,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;IACzD,IAAA,iCAAU,EAAC,oBAAQ,CAAC,MAAM,CAAC;GACf,uBAAuB,CAYnC;AAOM,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;CAYlC,CAAA;AAZY,wDAAsB;AAEjC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;;kDACxC;AAGX;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACvD;AAGd;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;;4DACjC;AAGrB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;8BACzC,IAAI;yDAAC;iCAXL,sBAAsB;IAFlC,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;IAClD,IAAA,iCAAU,EAAC,oBAAQ,CAAC,MAAM,CAAC;GACf,sBAAsB,CAYlC;AAOM,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;CAS3C,CAAA;AATY,0EAA+B;AAE1C;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;;gEAC7D;AAGjB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kEAC3D;AAGnB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8DACjE;0CARJ,+BAA+B;IAF3C,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC;IACzE,IAAA,iCAAU,EAAC,oBAAQ,CAAC,MAAM,CAAC;GACf,+BAA+B,CAS3C;AAOM,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;CAenC,CAAA;AAfY,0DAAuB;AAElC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC;;wDACvD;AAGjB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;;oDAC1D;AAGb;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;;0DAC7C;AAGnB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;;wDACnD;AAGjB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;;gEACjD;kCAdf,uBAAuB;IAFnC,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC1D,IAAA,iCAAU,EAAC,oBAAQ,CAAC,UAAU,CAAC;GACnB,uBAAuB,CAenC"}

package/dist/core/modules/better-auth/better-auth-user.mapper.d.ts

@@ -1,3 +1,4 @@
+import { ObjectId } from 'mongodb';
 import { Connection } from 'mongoose';
 export interface BetterAuthSessionUser {
     createdAt?: Date;
@@ -20,6 +21,16 @@ export interface MappedUser {
     roles: string[];
     verified?: boolean;
 }
+export interface MigrationStatus {
+    canDisableLegacyAuth: boolean;
+    fullyMigratedUsers: number;
+    migrationPercentage: number;
+    pendingMigrationUsers: number;
+    pendingUserEmails: string[];
+    totalUsers: number;
+    usersWithIamAccount: number;
+    usersWithIamId: number;
+}
 export interface SyncedUserDocument {
     _id: any;
     avatar?: string;
@@ -39,5 +50,27 @@ export declare class BetterAuthUserMapper {
     constructor(connection?: Connection);
     mapSessionUser(sessionUser: BetterAuthSessionUser): Promise<MappedUser | null>;
     private createMappedUser;
+    syncPasswordToLegacy(iamUserId: string, userEmail: string, plainPassword?: string): Promise<boolean>;
+    syncPasswordChangeToIam(userEmail: string, plainPassword: string): Promise<boolean>;
+    migrateAccountToIam(userEmail: string, plainPassword?: string): Promise<boolean>;
+    private generateId;
+    normalizePasswordForIam(password: string): string;
+    private hashPasswordForBetterAuth;
+    private bytesToHex;
     linkOrCreateUser(sessionUser: BetterAuthSessionUser, additionalData?: Record<string, any>): Promise<null | SyncedUserDocument>;
+    syncEmailChangeFromLegacy(oldEmail: string, newEmail: string): Promise<boolean>;
+    syncEmailChangeFromIam(userId: string, newEmail: string): Promise<boolean>;
+    deleteUserFromBothSystems(userIdentifier: string): Promise<{
+        accountsDeleted: number;
+        sessionsDeleted: number;
+        success: boolean;
+        userDeleted: boolean;
+    }>;
+    cleanupIamDataForDeletedUser(userId: ObjectId | string): Promise<{
+        accountsDeleted: number;
+        sessionsDeleted: number;
+        success: boolean;
+    }>;
+    cleanupLegacyDataForDeletedIamUser(iamUserId: string): Promise<boolean>;
+    getMigrationStatus(): Promise<MigrationStatus>;
 }