@lenne.tech/nest-server 11.6.2 → 11.7.1

package/dist/core/modules/better-auth/core-better-auth.controller.d.ts

@@ -0,0 +1,67 @@
+import { Logger } from '@nestjs/common';
+import { Request, Response } from 'express';
+import { ConfigService } from '../../common/services/config.service';
+import { BetterAuthSessionUser, BetterAuthUserMapper } from './better-auth-user.mapper';
+import { BetterAuthService } from './better-auth.service';
+export declare class BetterAuthSessionInfo {
+    expiresAt: string;
+    id: string;
+}
+export declare class BetterAuthUserResponse {
+    email: string;
+    emailVerified: boolean;
+    id: string;
+    name: string;
+    twoFactorEnabled?: boolean;
+}
+export declare class BetterAuthResponse {
+    error?: string;
+    requiresTwoFactor?: boolean;
+    session?: BetterAuthSessionInfo;
+    success: boolean;
+    token?: string;
+    user?: BetterAuthUserResponse;
+}
+export declare class BetterAuthSignInInput {
+    email: string;
+    password: string;
+}
+export declare class BetterAuthSignUpInput {
+    email: string;
+    name?: string;
+    password: string;
+}
+export declare class BetterAuthTwoFactorInput {
+    code: string;
+}
+export declare class BetterAuthTwoFactorSetupResponse {
+    backupCodes: string[];
+    success: boolean;
+    totpSecret: string;
+    totpUri: string;
+}
+export declare class CoreBetterAuthController {
+    protected readonly betterAuthService: BetterAuthService;
+    protected readonly userMapper: BetterAuthUserMapper;
+    protected readonly configService: ConfigService;
+    protected readonly logger: Logger;
+    constructor(betterAuthService: BetterAuthService, userMapper: BetterAuthUserMapper, configService: ConfigService);
+    signIn(res: Response, input: BetterAuthSignInInput): Promise<BetterAuthResponse>;
+    private attemptSignIn;
+    signUp(res: Response, input: BetterAuthSignUpInput): Promise<BetterAuthResponse>;
+    signOut(req: Request, res: Response): Promise<BetterAuthResponse>;
+    getSession(req: Request): Promise<BetterAuthResponse>;
+    enableTwoFactor(req: Request): Promise<BetterAuthResponse | BetterAuthTwoFactorSetupResponse>;
+    verifyTwoFactor(req: Request, res: Response, input: BetterAuthTwoFactorInput): Promise<BetterAuthResponse>;
+    disableTwoFactor(req: Request): Promise<BetterAuthResponse>;
+    protected ensureEnabled(): void;
+    protected extractSessionToken(req: Request): null | string;
+    protected extractHeaders(req: Request): Headers;
+    protected mapSession(session: null | undefined | {
+        expiresAt: Date;
+        id: string;
+    }): BetterAuthSessionInfo | undefined;
+    protected mapUser(sessionUser: BetterAuthSessionUser, _mappedUser: any): BetterAuthUserResponse;
+    protected processCookies(res: Response, result: BetterAuthResponse): BetterAuthResponse;
+    protected clearAuthCookies(res: Response): void;
+}

package/dist/core/modules/better-auth/core-better-auth.controller.js

@@ -0,0 +1,504 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var CoreBetterAuthController_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CoreBetterAuthController = exports.BetterAuthTwoFactorSetupResponse = exports.BetterAuthTwoFactorInput = exports.BetterAuthSignUpInput = exports.BetterAuthSignInInput = exports.BetterAuthResponse = exports.BetterAuthUserResponse = exports.BetterAuthSessionInfo = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const roles_decorator_1 = require("../../common/decorators/roles.decorator");
+const role_enum_1 = require("../../common/enums/role.enum");
+const config_service_1 = require("../../common/services/config.service");
+const better_auth_user_mapper_1 = require("./better-auth-user.mapper");
+const better_auth_service_1 = require("./better-auth.service");
+const better_auth_types_1 = require("./better-auth.types");
+class BetterAuthSessionInfo {
+}
+exports.BetterAuthSessionInfo = BetterAuthSessionInfo;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Session expiration time' }),
+    __metadata("design:type", String)
+], BetterAuthSessionInfo.prototype, "expiresAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Session ID' }),
+    __metadata("design:type", String)
+], BetterAuthSessionInfo.prototype, "id", void 0);
+class BetterAuthUserResponse {
+}
+exports.BetterAuthUserResponse = BetterAuthUserResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'User email address' }),
+    __metadata("design:type", String)
+], BetterAuthUserResponse.prototype, "email", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Whether email is verified' }),
+    __metadata("design:type", Boolean)
+], BetterAuthUserResponse.prototype, "emailVerified", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'User ID from Better-Auth' }),
+    __metadata("design:type", String)
+], BetterAuthUserResponse.prototype, "id", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'User display name' }),
+    __metadata("design:type", String)
+], BetterAuthUserResponse.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Whether 2FA is enabled', required: false }),
+    __metadata("design:type", Boolean)
+], BetterAuthUserResponse.prototype, "twoFactorEnabled", void 0);
+class BetterAuthResponse {
+}
+exports.BetterAuthResponse = BetterAuthResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Error message if failed', required: false }),
+    __metadata("design:type", String)
+], BetterAuthResponse.prototype, "error", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Whether 2FA is required', required: false }),
+    __metadata("design:type", Boolean)
+], BetterAuthResponse.prototype, "requiresTwoFactor", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Session information', required: false, type: BetterAuthSessionInfo }),
+    __metadata("design:type", BetterAuthSessionInfo)
+], BetterAuthResponse.prototype, "session", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Whether operation succeeded' }),
+    __metadata("design:type", Boolean)
+], BetterAuthResponse.prototype, "success", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'JWT token (if JWT plugin enabled)', required: false }),
+    __metadata("design:type", String)
+], BetterAuthResponse.prototype, "token", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'User information', required: false, type: BetterAuthUserResponse }),
+    __metadata("design:type", BetterAuthUserResponse)
+], BetterAuthResponse.prototype, "user", void 0);
+class BetterAuthSignInInput {
+}
+exports.BetterAuthSignInInput = BetterAuthSignInInput;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'User email address', example: 'user@example.com' }),
+    __metadata("design:type", String)
+], BetterAuthSignInInput.prototype, "email", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'User password' }),
+    __metadata("design:type", String)
+], BetterAuthSignInInput.prototype, "password", void 0);
+class BetterAuthSignUpInput {
+}
+exports.BetterAuthSignUpInput = BetterAuthSignUpInput;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'User email address', example: 'user@example.com' }),
+    __metadata("design:type", String)
+], BetterAuthSignUpInput.prototype, "email", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Display name', example: 'John Doe', required: false }),
+    __metadata("design:type", String)
+], BetterAuthSignUpInput.prototype, "name", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'User password (min 8 characters)' }),
+    __metadata("design:type", String)
+], BetterAuthSignUpInput.prototype, "password", void 0);
+class BetterAuthTwoFactorInput {
+}
+exports.BetterAuthTwoFactorInput = BetterAuthTwoFactorInput;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'TOTP code from authenticator app', example: '123456' }),
+    __metadata("design:type", String)
+], BetterAuthTwoFactorInput.prototype, "code", void 0);
+class BetterAuthTwoFactorSetupResponse {
+}
+exports.BetterAuthTwoFactorSetupResponse = BetterAuthTwoFactorSetupResponse;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Backup codes for recovery' }),
+    __metadata("design:type", Array)
+], BetterAuthTwoFactorSetupResponse.prototype, "backupCodes", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Whether operation succeeded' }),
+    __metadata("design:type", Boolean)
+], BetterAuthTwoFactorSetupResponse.prototype, "success", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'TOTP secret for manual entry' }),
+    __metadata("design:type", String)
+], BetterAuthTwoFactorSetupResponse.prototype, "totpSecret", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'QR code URI for authenticator apps' }),
+    __metadata("design:type", String)
+], BetterAuthTwoFactorSetupResponse.prototype, "totpUri", void 0);
+let CoreBetterAuthController = CoreBetterAuthController_1 = class CoreBetterAuthController {
+    constructor(betterAuthService, userMapper, configService) {
+        this.betterAuthService = betterAuthService;
+        this.userMapper = userMapper;
+        this.configService = configService;
+        this.logger = new common_1.Logger(CoreBetterAuthController_1.name);
+    }
+    async signIn(res, input) {
+        this.ensureEnabled();
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            throw new common_1.BadRequestException('Better-Auth API not available');
+        }
+        return this.attemptSignIn(res, input, api, true);
+    }
+    async attemptSignIn(res, input, api, allowMigration) {
+        const normalizedPassword = this.userMapper.normalizePasswordForIam(input.password);
+        try {
+            const response = await api.signInEmail({
+                body: { email: input.email, password: normalizedPassword },
+            });
+            if (!response) {
+                throw new common_1.UnauthorizedException('Invalid credentials');
+            }
+            if ((0, better_auth_types_1.requires2FA)(response)) {
+                return { requiresTwoFactor: true, success: false };
+            }
+            if ((0, better_auth_types_1.hasUser)(response)) {
+                const mappedUser = await this.userMapper.mapSessionUser(response.user);
+                const token = this.betterAuthService.isJwtEnabled() ? response.token : undefined;
+                const result = {
+                    requiresTwoFactor: false,
+                    session: (0, better_auth_types_1.hasSession)(response) ? this.mapSession(response.session) : undefined,
+                    success: true,
+                    token,
+                    user: mappedUser ? this.mapUser(response.user, mappedUser) : undefined,
+                };
+                return this.processCookies(res, result);
+            }
+            throw new common_1.UnauthorizedException('Invalid credentials');
+        }
+        catch (error) {
+            this.logger.debug(`Sign-in error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            if (allowMigration) {
+                const migrated = await this.userMapper.migrateAccountToIam(input.email, input.password);
+                if (migrated) {
+                    this.logger.debug(`Migrated legacy user ${input.email} to IAM, retrying sign-in`);
+                    return this.attemptSignIn(res, input, api, false);
+                }
+            }
+            throw new common_1.UnauthorizedException('Invalid credentials');
+        }
+    }
+    async signUp(res, input) {
+        this.ensureEnabled();
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            throw new common_1.BadRequestException('Better-Auth API not available');
+        }
+        const normalizedPassword = this.userMapper.normalizePasswordForIam(input.password);
+        try {
+            const response = await api.signUpEmail({
+                body: {
+                    email: input.email,
+                    name: input.name || input.email.split('@')[0],
+                    password: normalizedPassword,
+                },
+            });
+            if (!response) {
+                throw new common_1.BadRequestException('Sign-up failed');
+            }
+            if ((0, better_auth_types_1.hasUser)(response)) {
+                await this.userMapper.linkOrCreateUser(response.user);
+                await this.userMapper.syncPasswordToLegacy(response.user.id, response.user.email, input.password);
+                const mappedUser = await this.userMapper.mapSessionUser(response.user);
+                const result = {
+                    requiresTwoFactor: false,
+                    session: (0, better_auth_types_1.hasSession)(response) ? this.mapSession(response.session) : undefined,
+                    success: true,
+                    user: mappedUser ? this.mapUser(response.user, mappedUser) : undefined,
+                };
+                return this.processCookies(res, result);
+            }
+            throw new common_1.BadRequestException('Sign-up failed');
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            this.logger.debug(`Sign-up error: ${errorMessage}`);
+            if (errorMessage.includes('already exists')) {
+                throw new common_1.BadRequestException('User with this email already exists');
+            }
+            throw new common_1.BadRequestException('Sign-up failed');
+        }
+    }
+    async signOut(req, res) {
+        if (!this.betterAuthService.isEnabled()) {
+            return { success: true };
+        }
+        try {
+            const sessionToken = this.extractSessionToken(req);
+            if (sessionToken) {
+                await this.betterAuthService.revokeSession(sessionToken);
+            }
+            this.clearAuthCookies(res);
+            return { success: true };
+        }
+        catch (error) {
+            this.logger.debug(`Sign-out error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            this.clearAuthCookies(res);
+            return { success: true };
+        }
+    }
+    async getSession(req) {
+        if (!this.betterAuthService.isEnabled()) {
+            return { error: 'Better-Auth is disabled', success: false };
+        }
+        try {
+            const { session, user } = await this.betterAuthService.getSession(req);
+            if (!session || !user) {
+                return { success: false };
+            }
+            const mappedUser = await this.userMapper.mapSessionUser(user);
+            return {
+                session: this.mapSession(session),
+                success: true,
+                user: mappedUser ? this.mapUser(user, mappedUser) : undefined,
+            };
+        }
+        catch (error) {
+            this.logger.debug(`Get session error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return { success: false };
+        }
+    }
+    async enableTwoFactor(req) {
+        this.ensureEnabled();
+        if (!this.betterAuthService.isTwoFactorEnabled()) {
+            throw new common_1.BadRequestException('Two-factor authentication is not enabled');
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api || !('enableTwoFactor' in api)) {
+            throw new common_1.BadRequestException('2FA API not available');
+        }
+        try {
+            const headers = this.extractHeaders(req);
+            const response = await api.enableTwoFactor({ headers });
+            if (!response) {
+                throw new common_1.BadRequestException('Failed to enable 2FA');
+            }
+            return {
+                backupCodes: response.backupCodes || [],
+                success: true,
+                totpSecret: response.totpSecret || '',
+                totpUri: response.totpURI || '',
+            };
+        }
+        catch (error) {
+            this.logger.debug(`Enable 2FA error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            throw new common_1.BadRequestException('Failed to enable 2FA');
+        }
+    }
+    async verifyTwoFactor(req, res, input) {
+        this.ensureEnabled();
+        if (!this.betterAuthService.isTwoFactorEnabled()) {
+            throw new common_1.BadRequestException('Two-factor authentication is not enabled');
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api || !('verifyTOTP' in api)) {
+            throw new common_1.BadRequestException('2FA API not available');
+        }
+        try {
+            const headers = this.extractHeaders(req);
+            const response = await api.verifyTOTP({
+                body: { code: input.code },
+                headers,
+            });
+            if (!response) {
+                throw new common_1.UnauthorizedException('Invalid 2FA code');
+            }
+            if ((0, better_auth_types_1.hasUser)(response)) {
+                const mappedUser = await this.userMapper.mapSessionUser(response.user);
+                const token = this.betterAuthService.isJwtEnabled() ? response.token : undefined;
+                const result = {
+                    session: (0, better_auth_types_1.hasSession)(response) ? this.mapSession(response.session) : undefined,
+                    success: true,
+                    token,
+                    user: mappedUser ? this.mapUser(response.user, mappedUser) : undefined,
+                };
+                return this.processCookies(res, result);
+            }
+            throw new common_1.UnauthorizedException('Invalid 2FA code');
+        }
+        catch (error) {
+            this.logger.debug(`Verify 2FA error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            throw new common_1.UnauthorizedException('Invalid 2FA code');
+        }
+    }
+    async disableTwoFactor(req) {
+        this.ensureEnabled();
+        if (!this.betterAuthService.isTwoFactorEnabled()) {
+            throw new common_1.BadRequestException('Two-factor authentication is not enabled');
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api || !('disableTwoFactor' in api)) {
+            throw new common_1.BadRequestException('2FA API not available');
+        }
+        try {
+            const headers = this.extractHeaders(req);
+            await api.disableTwoFactor({ headers });
+            return { success: true };
+        }
+        catch (error) {
+            this.logger.debug(`Disable 2FA error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            throw new common_1.BadRequestException('Failed to disable 2FA');
+        }
+    }
+    ensureEnabled() {
+        if (!this.betterAuthService.isEnabled()) {
+            throw new common_1.BadRequestException('Better-Auth is not enabled');
+        }
+    }
+    extractSessionToken(req) {
+        const authHeader = req.headers.authorization;
+        if (authHeader?.startsWith('Bearer ')) {
+            return authHeader.substring(7);
+        }
+        const basePath = this.betterAuthService.getBasePath().replace(/^\//, '').replace(/\//g, '.');
+        const cookieName = `${basePath}.session_token`;
+        return req.cookies?.[cookieName] || req.cookies?.['better-auth.session_token'] || null;
+    }
+    extractHeaders(req) {
+        const headers = new Headers();
+        for (const [key, value] of Object.entries(req.headers)) {
+            if (typeof value === 'string') {
+                headers.set(key, value);
+            }
+            else if (Array.isArray(value)) {
+                headers.set(key, value.join(', '));
+            }
+        }
+        return headers;
+    }
+    mapSession(session) {
+        if (!session)
+            return undefined;
+        return {
+            expiresAt: session.expiresAt instanceof Date ? session.expiresAt.toISOString() : String(session.expiresAt),
+            id: session.id,
+        };
+    }
+    mapUser(sessionUser, _mappedUser) {
+        return {
+            email: sessionUser.email,
+            emailVerified: sessionUser.emailVerified || false,
+            id: sessionUser.id,
+            name: sessionUser.name || sessionUser.email.split('@')[0],
+        };
+    }
+    processCookies(res, result) {
+        if (this.configService.getFastButReadOnly('cookies')) {
+            const cookieOptions = { httpOnly: true, sameSite: 'lax', secure: process.env.NODE_ENV === 'production' };
+            if (result.token) {
+                res.cookie('token', result.token, cookieOptions);
+                delete result.token;
+            }
+            if (result.session) {
+                res.cookie('session', result.session.id, cookieOptions);
+            }
+        }
+        return result;
+    }
+    clearAuthCookies(res) {
+        const cookieOptions = { httpOnly: true, sameSite: 'lax' };
+        res.cookie('token', '', { ...cookieOptions, maxAge: 0 });
+        res.cookie('session', '', { ...cookieOptions, maxAge: 0 });
+        res.cookie('better-auth.session_token', '', { ...cookieOptions, maxAge: 0 });
+    }
+};
+exports.CoreBetterAuthController = CoreBetterAuthController;
+__decorate([
+    (0, swagger_1.ApiBody)({ type: BetterAuthSignInInput }),
+    (0, swagger_1.ApiCreatedResponse)({ description: 'Signed in successfully', type: BetterAuthResponse }),
+    (0, swagger_1.ApiOperation)({ description: 'Sign in via Better-Auth with email and password', summary: 'Sign In' }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, common_1.Post)('sign-in/email'),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __param(0, (0, common_1.Res)({ passthrough: true })),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, BetterAuthSignInInput]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthController.prototype, "signIn", null);
+__decorate([
+    (0, swagger_1.ApiBody)({ type: BetterAuthSignUpInput }),
+    (0, swagger_1.ApiCreatedResponse)({ description: 'Signed up successfully', type: BetterAuthResponse }),
+    (0, swagger_1.ApiOperation)({ description: 'Sign up via Better-Auth with email and password', summary: 'Sign Up' }),
+    (0, common_1.Post)('sign-up/email'),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __param(0, (0, common_1.Res)({ passthrough: true })),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, BetterAuthSignUpInput]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthController.prototype, "signUp", null);
+__decorate([
+    (0, swagger_1.ApiOkResponse)({ description: 'Signed out successfully', type: BetterAuthResponse }),
+    (0, swagger_1.ApiOperation)({ description: 'Sign out from Better-Auth', summary: 'Sign Out' }),
+    (0, common_1.Get)('sign-out'),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)({ passthrough: true })),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthController.prototype, "signOut", null);
+__decorate([
+    (0, swagger_1.ApiOkResponse)({ description: 'Current session', type: BetterAuthResponse }),
+    (0, swagger_1.ApiOperation)({ description: 'Get current session from Better-Auth', summary: 'Get Session' }),
+    (0, common_1.Get)('session'),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __param(0, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthController.prototype, "getSession", null);
+__decorate([
+    (0, swagger_1.ApiOkResponse)({ description: '2FA setup information', type: BetterAuthTwoFactorSetupResponse }),
+    (0, swagger_1.ApiOperation)({ description: 'Enable Two-Factor Authentication', summary: 'Enable 2FA' }),
+    (0, common_1.Post)('two-factor/enable'),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_USER),
+    __param(0, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthController.prototype, "enableTwoFactor", null);
+__decorate([
+    (0, swagger_1.ApiBody)({ type: BetterAuthTwoFactorInput }),
+    (0, swagger_1.ApiOkResponse)({ description: 'Verification result', type: BetterAuthResponse }),
+    (0, swagger_1.ApiOperation)({ description: 'Verify Two-Factor Authentication code', summary: 'Verify 2FA' }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, common_1.Post)('two-factor/verify'),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)({ passthrough: true })),
+    __param(2, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, BetterAuthTwoFactorInput]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthController.prototype, "verifyTwoFactor", null);
+__decorate([
+    (0, swagger_1.ApiOkResponse)({ description: 'Disable result', type: BetterAuthResponse }),
+    (0, swagger_1.ApiOperation)({ description: 'Disable Two-Factor Authentication', summary: 'Disable 2FA' }),
+    (0, common_1.Post)('two-factor/disable'),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_USER),
+    __param(0, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthController.prototype, "disableTwoFactor", null);
+exports.CoreBetterAuthController = CoreBetterAuthController = CoreBetterAuthController_1 = __decorate([
+    (0, swagger_1.ApiTags)('Better-Auth'),
+    (0, common_1.Controller)('iam'),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.ADMIN),
+    __metadata("design:paramtypes", [better_auth_service_1.BetterAuthService,
+        better_auth_user_mapper_1.BetterAuthUserMapper,
+        config_service_1.ConfigService])
+], CoreBetterAuthController);
+//# sourceMappingURL=core-better-auth.controller.js.map

package/dist/core/modules/better-auth/core-better-auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-better-auth.controller.js","sourceRoot":"","sources":["../../../../src/core/modules/better-auth/core-better-auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAYwB;AACxB,6CAAiH;AAGjH,6EAAgE;AAChE,4DAAwD;AACxD,yEAAqE;AACrE,uEAAwF;AACxF,+DAA0D;AAC1D,2DAAuE;AAgBvE,MAAa,qBAAqB;CAMjC;AAND,sDAMC;AAJC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;;wDACtC;AAGlB;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;;iDAChC;AAMb,MAAa,sBAAsB;CAelC;AAfD,wDAeC;AAbC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;;qDACrC;AAGd;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;;6DACnC;AAGvB;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;;kDAC9C;AAGX;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;;oDACrC;AAGb;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;;gEAC7C;AAM7B,MAAa,kBAAkB;CAkB9B;AAlBD,gDAkBC;AAhBC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;;iDAC1D;AAGf;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;;6DAC7C;AAG5B;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;8BACxF,qBAAqB;mDAAC;AAGhC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;;mDAC3C;AAGjB;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;;iDACpE;AAGf;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;8BACzF,sBAAsB;gDAAC;AAUhC,MAAa,qBAAqB;CAMjC;AAND,sDAMC;AAJC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;;oDAClE;AAGd;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;;uDAC7B;AAMnB,MAAa,qBAAqB;CASjC;AATD,sDASC;AAPC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;;oDAClE;AAGd;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;;mDACrE;AAGd;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;;uDAChD;AAMnB,MAAa,wBAAwB;CAGpC;AAHD,4DAGC;AADC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;;sDACvE;AAMf,MAAa,gCAAgC;CAY5C;AAZD,4EAYC;AAVC;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;;qEACpC;AAGtB;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;;iEAC3C;AAGjB;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;;oEAC1C;AAGnB;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;;iEACnD;AAyCX,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAGnC,YACqB,iBAAoC,EACpC,UAAgC,EAChC,aAA4B;QAF5B,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,eAAU,GAAV,UAAU,CAAsB;QAChC,kBAAa,GAAb,aAAa,CAAe;QAL9B,WAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAMnE,CAAC;IAeE,AAAN,KAAK,CAAC,MAAM,CACkB,GAAa,EACjC,KAA4B;QAEpC,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,4BAAmB,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QAGD,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IASO,KAAK,CAAC,aAAa,CACzB,GAAa,EACb,KAA4B,EAC5B,GAA4C,EAC5C,cAAuB;QAIvB,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEnF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAI,CAAC,WAAW,CAAC;gBACtC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE;aAC3D,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;YACzD,CAAC;YAGD,IAAI,IAAA,+BAAW,EAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACrD,CAAC;YAGD,IAAI,IAAA,2BAAO,EAAC,QAAQ,CAAC,EAAE,CAAC;gBACtB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACvE,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAE,QAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAEpG,MAAM,MAAM,GAAuB;oBACjC,iBAAiB,EAAE,KAAK;oBACxB,OAAO,EAAE,IAAA,8BAAU,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC7E,OAAO,EAAE,IAAI;oBACb,KAAK;oBACL,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;iBACvE,CAAC;gBAEF,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAGhG,IAAI,cAAc,EAAE,CAAC;gBAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACxF,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,KAAK,CAAC,KAAK,2BAA2B,CAAC,CAAC;oBAElF,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAUK,AAAN,KAAK,CAAC,MAAM,CACkB,GAAa,EACjC,KAA4B;QAEpC,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,4BAAmB,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QAGD,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEnF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC;gBACrC,IAAI,EAAE;oBACJ,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC7C,QAAQ,EAAE,kBAAkB;iBAC7B;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,IAAA,2BAAO,EAAC,QAAQ,CAAC,EAAE,CAAC;gBAEtB,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAItD,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAElG,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAEvE,MAAM,MAAM,GAAuB;oBACjC,iBAAiB,EAAE,KAAK;oBACxB,OAAO,EAAE,IAAA,8BAAU,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC7E,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;iBACvE,CAAC;gBAEF,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,YAAY,EAAE,CAAC,CAAC;YACpD,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IASK,AAAN,KAAK,CAAC,OAAO,CAAQ,GAAY,EAA8B,GAAa;QAC1E,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YAEH,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;YAEnD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YAC3D,CAAC;YAGD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAE3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAEjG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IASK,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY;QAClC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAEvE,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAE9D,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBACjC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACpG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAaK,AAAN,KAAK,CAAC,eAAe,CAAQ,GAAY;QACvC,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,iBAAiB,IAAI,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAO,GAAW,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAEjE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,4BAAmB,CAAC,sBAAsB,CAAC,CAAC;YACxD,CAAC;YAED,OAAO;gBACL,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,EAAE;gBACvC,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,EAAE;gBACrC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;aAChC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACnG,MAAM,IAAI,4BAAmB,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAWK,AAAN,KAAK,CAAC,eAAe,CACZ,GAAY,EACS,GAAa,EACjC,KAA+B;QAEvC,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAO,GAAW,CAAC,UAAU,CAAC;gBAC7C,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;gBAC1B,OAAO;aACR,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,8BAAqB,CAAC,kBAAkB,CAAC,CAAC;YACtD,CAAC;YAED,IAAI,IAAA,2BAAO,EAAC,QAAQ,CAAC,EAAE,CAAC;gBACtB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACvE,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAE,QAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAEpG,MAAM,MAAM,GAAuB;oBACjC,OAAO,EAAE,IAAA,8BAAU,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC7E,OAAO,EAAE,IAAI;oBACb,KAAK;oBACL,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;iBACvE,CAAC;gBAEF,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,IAAI,8BAAqB,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACnG,MAAM,IAAI,8BAAqB,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IASK,AAAN,KAAK,CAAC,gBAAgB,CAAQ,GAAY;QACxC,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,kBAAkB,IAAI,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACzC,MAAO,GAAW,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAEjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACpG,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IASS,aAAa;QACrB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAKS,mBAAmB,CAAC,GAAY;QAExC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7F,MAAM,UAAU,GAAG,GAAG,QAAQ,gBAAgB,CAAC;QAC/C,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,2BAA2B,CAAC,IAAI,IAAI,CAAC;IACzF,CAAC;IAKS,cAAc,CAAC,GAAY;QACnC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAKS,UAAU,CAAC,OAA2D;QAC9E,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YAC1G,EAAE,EAAE,OAAO,CAAC,EAAE;SACf,CAAC;IACJ,CAAC;IAQS,OAAO,CAAC,WAAkC,EAAE,WAAgB;QACpE,OAAO;YACL,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,aAAa,EAAE,WAAW,CAAC,aAAa,IAAI,KAAK;YACjD,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC1D,CAAC;IACJ,CAAC;IAKS,cAAc,CAAC,GAAa,EAAE,MAA0B;QAEhE,IAAI,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAc,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAGlH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;gBACjD,OAAO,MAAM,CAAC,KAAK,CAAC;YACtB,CAAC;YAGD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAKS,gBAAgB,CAAC,GAAa;QACtC,MAAM,aAAa,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAc,EAAE,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,2BAA2B,EAAE,EAAE,EAAE,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;CACF,CAAA;AAjdY,4DAAwB;AAsB7B;IANL,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IACxC,IAAA,4BAAkB,EAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACvF,IAAA,sBAAY,EAAC,EAAE,WAAW,EAAE,iDAAiD,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACpG,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,aAAI,EAAC,eAAe,CAAC;IACrB,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;IAExB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAQ,qBAAqB;;sDAWrC;AA4EK;IALL,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IACxC,IAAA,4BAAkB,EAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACvF,IAAA,sBAAY,EAAC,EAAE,WAAW,EAAE,iDAAiD,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACpG,IAAA,aAAI,EAAC,eAAe,CAAC;IACrB,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;IAExB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAQ,qBAAqB;;sDAsDrC;AASK;IAJL,IAAA,uBAAa,EAAC,EAAE,WAAW,EAAE,yBAAyB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACnF,IAAA,sBAAY,EAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC/E,IAAA,YAAG,EAAC,UAAU,CAAC;IACf,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;IACZ,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;uDAuB7D;AASK;IAJL,IAAA,uBAAa,EAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3E,IAAA,sBAAY,EAAC,EAAE,WAAW,EAAE,sCAAsC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAC7F,IAAA,YAAG,EAAC,SAAS,CAAC;IACd,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;IACT,WAAA,IAAA,YAAG,GAAE,CAAA;;;;0DAuBtB;AAaK;IAJL,IAAA,uBAAa,EAAC,EAAE,WAAW,EAAE,uBAAuB,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC;IAC/F,IAAA,sBAAY,EAAC,EAAE,WAAW,EAAE,kCAAkC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IACxF,IAAA,aAAI,EAAC,mBAAmB,CAAC;IACzB,IAAA,uBAAK,EAAC,oBAAQ,CAAC,MAAM,CAAC;IACA,WAAA,IAAA,YAAG,GAAE,CAAA;;;;+DA8B3B;AAWK;IANL,IAAA,iBAAO,EAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IAC3C,IAAA,uBAAa,EAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC/E,IAAA,sBAAY,EAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC7F,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,aAAI,EAAC,mBAAmB,CAAC;IACzB,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;IAExB,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,GAAE,CAAA;;qDAAQ,wBAAwB;;+DA2CxC;AASK;IAJL,IAAA,uBAAa,EAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC1E,IAAA,sBAAY,EAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAC1F,IAAA,aAAI,EAAC,oBAAoB,CAAC;IAC1B,IAAA,uBAAK,EAAC,oBAAQ,CAAC,MAAM,CAAC;IACC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;gEAqB5B;mCAzWU,wBAAwB;IAHpC,IAAA,iBAAO,EAAC,aAAa,CAAC;IACtB,IAAA,mBAAU,EAAC,KAAK,CAAC;IACjB,IAAA,uBAAK,EAAC,oBAAQ,CAAC,KAAK,CAAC;qCAKoB,uCAAiB;QACxB,8CAAoB;QACjB,8BAAa;GANtC,wBAAwB,CAidpC"}

package/dist/core/modules/better-auth/core-better-auth.resolver.d.ts

@@ -0,0 +1,61 @@
+import { Logger } from '@nestjs/common';
+import { Request, Response } from 'express';
+import { BetterAuthAuthModel } from './better-auth-auth.model';
+import { BetterAuthMigrationStatusModel } from './better-auth-migration-status.model';
+import { BetterAuth2FASetupModel, BetterAuthFeaturesModel, BetterAuthPasskeyChallengeModel, BetterAuthPasskeyModel, BetterAuthSessionModel, BetterAuthUserModel } from './better-auth-models';
+import { BetterAuthUserMapper, MappedUser } from './better-auth-user.mapper';
+import { BetterAuthService } from './better-auth.service';
+export declare class CoreBetterAuthResolver {
+    protected readonly betterAuthService: BetterAuthService;
+    protected readonly userMapper: BetterAuthUserMapper;
+    protected readonly logger: Logger;
+    constructor(betterAuthService: BetterAuthService, userMapper: BetterAuthUserMapper);
+    betterAuthSession(ctx: {
+        req: Request;
+    }): Promise<BetterAuthSessionModel | null>;
+    betterAuthEnabled(): boolean;
+    betterAuthFeatures(): BetterAuthFeaturesModel;
+    betterAuthMigrationStatus(): Promise<BetterAuthMigrationStatusModel>;
+    betterAuthSignIn(email: string, password: string, _ctx: {
+        req: Request;
+        res: Response;
+    }): Promise<BetterAuthAuthModel>;
+    betterAuthSignUp(email: string, password: string, name?: string): Promise<BetterAuthAuthModel>;
+    betterAuthSignOut(ctx: {
+        req: Request;
+    }): Promise<boolean>;
+    betterAuthVerify2FA(code: string, ctx: {
+        req: Request;
+    }): Promise<BetterAuthAuthModel>;
+    betterAuthEnable2FA(password: string, ctx: {
+        req: Request;
+    }): Promise<BetterAuth2FASetupModel>;
+    betterAuthDisable2FA(password: string, ctx: {
+        req: Request;
+    }): Promise<boolean>;
+    betterAuthGenerateBackupCodes(ctx: {
+        req: Request;
+    }): Promise<null | string[]>;
+    betterAuthGetPasskeyChallenge(ctx: {
+        req: Request;
+    }): Promise<BetterAuthPasskeyChallengeModel>;
+    betterAuthListPasskeys(ctx: {
+        req: Request;
+    }): Promise<BetterAuthPasskeyModel[] | null>;
+    betterAuthDeletePasskey(passkeyId: string, ctx: {
+        req: Request;
+    }): Promise<boolean>;
+    protected ensureEnabled(): void;
+    protected convertHeaders(headers: Record<string, string | string[] | undefined>): Headers;
+    protected mapSessionInfo(session: {
+        createdAt?: Date;
+        expiresAt?: Date;
+        id?: string;
+        token?: string;
+    }): {
+        expiresAt?: Date;
+        id?: string;
+        token?: string;
+    };
+    protected mapToUserModel(user: MappedUser): BetterAuthUserModel;
+}