@lenne.tech/nest-server 11.7.0 → 11.7.1

package/dist/core/modules/auth/services/core-auth.service.js

@@ -8,6 +8,10 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var CoreAuthService_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CoreAuthService = void 0;
 const common_1 = require("@nestjs/common");
@@ -18,13 +22,18 @@ const js_sha256_1 = require("js-sha256");
 const db_helper_1 = require("../../../common/helpers/db.helper");
 const service_helper_1 = require("../../../common/helpers/service.helper");
 const config_service_1 = require("../../../common/services/config.service");
+const better_auth_user_mapper_1 = require("../../better-auth/better-auth-user.mapper");
+const better_auth_service_1 = require("../../better-auth/better-auth.service");
 const core_auth_model_1 = require("../core-auth.model");
 const core_auth_user_service_1 = require("./core-auth-user.service");
-let CoreAuthService = class CoreAuthService {
-    constructor(userService, jwtService, configService) {
+let CoreAuthService = CoreAuthService_1 = class CoreAuthService {
+    constructor(userService, jwtService, configService, betterAuthService, betterAuthUserMapper) {
         this.userService = userService;
         this.jwtService = jwtService;
         this.configService = configService;
+        this.betterAuthService = betterAuthService;
+        this.betterAuthUserMapper = betterAuthUserMapper;
+        this.logger = new common_1.Logger(CoreAuthService_1.name);
     }
     decodeJwt(token) {
         return this.jwtService.decode(token);
@@ -61,17 +70,43 @@ let CoreAuthService = class CoreAuthService {
         if (!input) {
             throw new common_1.BadRequestException('Missing input');
         }
+        const preventUserEnumeration = this.configService.getFastButReadOnly('auth.preventUserEnumeration', false);
         const serviceOptionsForUserService = (0, service_helper_1.prepareServiceOptions)(serviceOptions, {
             prepareOutput: null,
             subFieldSelection: 'user',
         });
         const { deviceDescription, deviceId, email, password } = input;
-        const user = await this.userService.getViaEmail(email, serviceOptionsForUserService);
+        let user;
+        try {
+            user = await this.userService.getViaEmail(email, serviceOptionsForUserService);
+        }
+        catch (error) {
+            if (error instanceof common_1.NotFoundException) {
+                throw new common_1.UnauthorizedException(preventUserEnumeration ? 'Invalid credentials' : 'Unknown email');
+            }
+            throw error;
+        }
         if (!user) {
-            throw new common_1.UnauthorizedException('Unknown email');
+            throw new common_1.UnauthorizedException(preventUserEnumeration ? 'Invalid credentials' : 'Unknown email');
         }
-        if (!((await bcrypt.compare(password, user.password)) || (await bcrypt.compare((0, js_sha256_1.sha256)(password), user.password)))) {
-            throw new common_1.UnauthorizedException('Wrong password');
+        const iamEnabled = this.isIamEnabled();
+        if (iamEnabled && user.iamId) {
+            const iamVerified = await this.verifyPasswordViaIam(email, password);
+            if (!iamVerified) {
+                throw new common_1.UnauthorizedException(preventUserEnumeration ? 'Invalid credentials' : 'Wrong password');
+            }
+            this.logger.debug(`User ${email} authenticated via IAM (already migrated)`);
+        }
+        else {
+            if (!user.password) {
+                throw new common_1.UnauthorizedException(preventUserEnumeration ? 'Invalid credentials' : 'No password set for this account');
+            }
+            if (!((await bcrypt.compare(password, user.password)) || (await bcrypt.compare((0, js_sha256_1.sha256)(password), user.password)))) {
+                throw new common_1.UnauthorizedException(preventUserEnumeration ? 'Invalid credentials' : 'Wrong password');
+            }
+            if (iamEnabled && !user.iamId) {
+                await this.migrateUserToIam(user, email, password);
+            }
         }
         return this.getResult(user, {
             data: { deviceDescription, deviceId },
@@ -83,7 +118,14 @@ let CoreAuthService = class CoreAuthService {
             subFieldSelection: 'user',
         });
         try {
-            const user = await this.userService.create(input, serviceOptionsForUserService);
+            const iamEnabled = this.isIamEnabled();
+            let user;
+            if (iamEnabled) {
+                user = await this.createUserViaIam(input, serviceOptionsForUserService);
+            }
+            else {
+                user = await this.userService.create(input, serviceOptionsForUserService);
+            }
             if (!user) {
                 throw new common_1.BadRequestException('Email address already in use');
             }
@@ -201,12 +243,102 @@ let CoreAuthService = class CoreAuthService {
         }, { force: true });
         return newRefreshToken;
     }
+    isIamEnabled() {
+        return !!(this.betterAuthService?.isEnabled() && this.betterAuthUserMapper);
+    }
+    async verifyPasswordViaIam(email, password) {
+        if (!this.betterAuthService) {
+            return false;
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            return false;
+        }
+        try {
+            const response = await api.signInEmail({
+                body: { email, password },
+            });
+            return !!(response && 'user' in response && response.user);
+        }
+        catch (error) {
+            this.logger.debug(`IAM password verification failed for ${email}: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return false;
+        }
+    }
+    async migrateUserToIam(user, email, plainPassword) {
+        if (!this.betterAuthUserMapper) {
+            return;
+        }
+        try {
+            const migrated = await this.betterAuthUserMapper.migrateAccountToIam(email, plainPassword);
+            if (migrated) {
+                this.logger.log(`Migrated Legacy user ${email} to IAM`);
+                const updatedUser = await this.userService.getViaEmail(email, { force: true });
+                if (updatedUser?.iamId) {
+                    user.iamId = updatedUser.iamId;
+                }
+            }
+        }
+        catch (error) {
+            this.logger.warn(`Failed to migrate user ${email} to IAM: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+    }
+    async createUserViaIam(input, serviceOptions) {
+        if (!this.betterAuthService || !this.betterAuthUserMapper) {
+            throw new common_1.BadRequestException('IAM service not available');
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            throw new common_1.BadRequestException('IAM API not available');
+        }
+        try {
+            const inputAny = input;
+            const name = [inputAny.firstName, inputAny.lastName].filter(Boolean).join(' ') || input.email.split('@')[0];
+            const response = await api.signUpEmail({
+                body: {
+                    email: input.email,
+                    name,
+                    password: input.password,
+                },
+            });
+            if (!response || !('user' in response) || !response.user) {
+                throw new common_1.BadRequestException('Email address already in use');
+            }
+            const iamUser = response.user;
+            const syncedUser = await this.betterAuthUserMapper.linkOrCreateUser(iamUser, {
+                firstName: inputAny.firstName,
+                lastName: inputAny.lastName,
+            });
+            if (!syncedUser) {
+                throw new common_1.BadRequestException('Failed to create user');
+            }
+            await this.betterAuthUserMapper.syncPasswordToLegacy(iamUser.id, input.email, input.password);
+            this.logger.log(`Created user ${input.email} via IAM`);
+            const user = await this.userService.getViaEmail(input.email, serviceOptions);
+            if (!user) {
+                throw new common_1.BadRequestException('Failed to retrieve created user');
+            }
+            return user;
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            this.logger.debug(`IAM sign-up error for ${input.email}: ${errorMessage}`);
+            if (errorMessage.includes('already exists') || errorMessage.includes('already in use')) {
+                throw new common_1.BadRequestException('Email address already in use');
+            }
+            throw error;
+        }
+    }
 };
 exports.CoreAuthService = CoreAuthService;
-exports.CoreAuthService = CoreAuthService = __decorate([
+exports.CoreAuthService = CoreAuthService = CoreAuthService_1 = __decorate([
     (0, common_1.Injectable)(),
+    __param(3, (0, common_1.Optional)()),
+    __param(4, (0, common_1.Optional)()),
     __metadata("design:paramtypes", [core_auth_user_service_1.CoreAuthUserService,
         jwt_1.JwtService,
-        config_service_1.ConfigService])
+        config_service_1.ConfigService,
+        better_auth_service_1.BetterAuthService,
+        better_auth_user_mapper_1.BetterAuthUserMapper])
 ], CoreAuthService);
 //# sourceMappingURL=core-auth.service.js.map

package/dist/core/modules/auth/services/core-auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-auth.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/auth/services/core-auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAwF;AACxF,qCAAyC;AACzC,iCAAkC;AAClC,mCAAoC;AACpC,yCAAmC;AAEnC,iEAAiE;AACjE,2EAA+E;AAE/E,4EAAwE;AACxE,wDAAmD;AAKnD,qEAA+D;AAkBxD,IAAM,eAAe,GAArB,MAAM,eAAe;IAI1B,YACqB,WAAgC,EAChC,UAAsB,EACtB,aAA4B;QAF5B,gBAAW,GAAX,WAAW,CAAqB;QAChC,eAAU,GAAV,UAAU,CAAY;QACtB,kBAAa,GAAb,aAAa,CAAe;IAC9C,CAAC;IAKJ,SAAS,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAe,CAAC;IACrD,CAAC;IAKD,KAAK,CAAC,MAAM,CACV,mBAA2B,EAC3B,cAAyD;QAGzD,MAAM,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAClC,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC;QAC/D,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAGD,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC;IACd,CAAC;IAKD,KAAK,CAAC,aAAa,CAAC,IAAmB,EAAE,mBAA2B,EAAE,cAA+B;QAEnG,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAGpG,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;YAC1B,mBAAmB;YACnB,IAAI,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE;YACrC,cAAc,EAAE,EAAE,GAAG,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,KAA0B,EAAE,cAA+B;QAEtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,4BAAmB,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC;QAGD,MAAM,4BAA4B,GAAG,IAAA,sCAAqB,EAAC,cAAc,EAAE;YAEzE,aAAa,EAAE,IAAI;YAGnB,iBAAiB,EAAE,MAAM;SAC1B,CAAC,CAAC;QAGH,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAG/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAA,kBAAM,EAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAClH,MAAM,IAAI,8BAAqB,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QAGD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;YAC1B,IAAI,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE;YACrC,cAAc,EAAE,EAAE,GAAG,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,KAA0B,EAAE,cAA+B;QAEtE,MAAM,4BAA4B,GAAG,IAAA,sCAAqB,EAAC,cAAc,EAAE;YAEzE,iBAAiB,EAAE,MAAM;SAC1B,CAAC,CAAC;QAGH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;YAChF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,CAAC,CAAC;YAChE,CAAC;YAGD,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;YAG9C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;gBAC1B,IAAI,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE;gBACrC,cAAc,EAAE,EAAE,GAAG,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE;aACzD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,EAAE,OAAO,KAAK,sBAAsB,EAAE,CAAC;gBAC5C,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,YAAY,CAAC,OAAmB;QAEpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAGpD,MAAM,MAAM,GAAG,IAAI,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,OAAO,IAAI,CAAC;IACd,CAAC;IAeS,KAAK,CAAC,SAAS,CAAC,IAAmB,EAAE,OAA0B;QACvE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAGpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAGtD,MAAM,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAI1G,OAAO,+BAAa,CAAC,GAAG,CAAC;YACvB,GAAG,MAAM;YACT,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC;SACjE,CAAC,CAAC;IACL,CAAC;IAKS,mBAAmB,CAAC,OAAiB;QAC7C,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,UAAU,CAAC;QACrB,CAAC;QACD,OAAO,CACL,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,GAAG,IAAI,uBAAuB,CAAC;YACrE,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,GAAG,IAAI,mCAAmC,CAAC;YACjF,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,GAAG,IAAI,SAAS,CAAC;YACvD,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,GAAG,IAAI,qBAAqB,CAAC,CACpE,CAAC;IACJ,CAAC;IAKS,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,IAAgD;QAE3F,MAAM,iBAAiB,GAAW,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;QACpG,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,IAAA,mBAAU,GAAE,CAAC;QAGhD,IAAI,OAAO,GAAW,IAAA,mBAAU,GAAE,CAAC;QACnC,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,IAAI,GAAkB,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChF,MAAM,SAAS,GAAG,IAAI,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,SAAS,IAAI,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,iBAAiB,EAAE,CAAC;gBACtG,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAA0E;YACrF,GAAG,IAAI;YACP,QAAQ;YACR,EAAE,EAAE,MAAM;YACV,OAAO;SACR,CAAC;QACF,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE;gBACjC,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;gBACvC,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,EAAE,CAAC;aAClE,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE;gBACjC,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;gBACtC,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,2BAA2B,EAAE,EAAE,CAAC;aAC1E,CAAC;SACH,CAAC,CAAC;QACH,OAAO;YACL,YAAY;YACZ,KAAK;SACN,CAAC;IACJ,CAAC;IAKS,KAAK,CAAC,kBAAkB,CAChC,IAAmB,EACnB,mBAA2B,EAC3B,eAAuB,EACvB,IAA0B;QAG1B,IAAI,QAAgB,CAAC;QACrB,IAAI,mBAAmB,EAAE,CAAC;YACxB,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC;YACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAElE,OAAO,mBAAmB,CAAC;YAC7B,CAAC;QACH,CAAC;QAGD,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;QAGD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG;YAC7B,GAAG,IAAI;YACP,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,iBAAiB;YACtE,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACpG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAC3B,IAAA,wBAAY,EAAC,IAAI,CAAC,EAClB;YACE,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,KAAK,EAAE,IAAI,EAAE,CAChB,CAAC;QAGF,OAAO,eAAe,CAAC;IACzB,CAAC;CACF,CAAA;AA7SY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;qCAMuB,4CAAmB;QACpB,gBAAU;QACP,8BAAa;GAPtC,eAAe,CA6S3B"}
+{"version":3,"file":"core-auth.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/auth/services/core-auth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAOwB;AACxB,qCAAyC;AACzC,iCAAkC;AAClC,mCAAoC;AACpC,yCAAmC;AAEnC,iEAAiE;AACjE,2EAA+E;AAE/E,4EAAwE;AACxE,uFAAiF;AACjF,+EAA0E;AAC1E,wDAAmD;AAKnD,qEAA+D;AA8BxD,IAAM,eAAe,uBAArB,MAAM,eAAe;IAM1B,YACqB,WAAgC,EAChC,UAAsB,EACtB,aAA4B,EACnC,iBAAwD,EACxD,oBAA8D;QAJvD,gBAAW,GAAX,WAAW,CAAqB;QAChC,eAAU,GAAV,UAAU,CAAY;QACtB,kBAAa,GAAb,aAAa,CAAe;QAChB,sBAAiB,GAAjB,iBAAiB,CAAoB;QACrC,yBAAoB,GAApB,oBAAoB,CAAuB;QAV3D,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IAWxD,CAAC;IAKJ,SAAS,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAe,CAAC;IACrD,CAAC;IAKD,KAAK,CAAC,MAAM,CACV,mBAA2B,EAC3B,cAAyD;QAGzD,MAAM,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAClC,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC;QAC/D,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAGD,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC;IACd,CAAC;IAKD,KAAK,CAAC,aAAa,CAAC,IAAmB,EAAE,mBAA2B,EAAE,cAA+B;QAEnG,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAGpG,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;YAC1B,mBAAmB;YACnB,IAAI,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE;YACrC,cAAc,EAAE,EAAE,GAAG,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAaD,KAAK,CAAC,MAAM,CAAC,KAA0B,EAAE,cAA+B;QAEtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,4BAAmB,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC;QAGD,MAAM,sBAAsB,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QAG3G,MAAM,4BAA4B,GAAG,IAAA,sCAAqB,EAAC,cAAc,EAAE;YAEzE,aAAa,EAAE,IAAI;YAGnB,iBAAiB,EAAE,MAAM;SAC1B,CAAC,CAAC;QAGH,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAG/D,IAAI,IAAmB,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,0BAAiB,EAAE,CAAC;gBACvC,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACpG,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACpG,CAAC;QAGD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAEvC,IAAI,UAAU,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAE7B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACrE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACrG,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,2CAA2C,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YAGN,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,8BAAqB,CAC7B,sBAAsB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,kCAAkC,CACpF,CAAC;YACJ,CAAC;YACD,IACE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAA,kBAAM,EAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAC7G,CAAC;gBACD,MAAM,IAAI,8BAAqB,CAAC,sBAAsB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACrG,CAAC;YAGD,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAGD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;YAC1B,IAAI,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE;YACrC,cAAc,EAAE,EAAE,GAAG,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE;SACzD,CAAC,CAAC;IACL,CAAC;IAYD,KAAK,CAAC,MAAM,CAAC,KAA0B,EAAE,cAA+B;QAEtE,MAAM,4BAA4B,GAAG,IAAA,sCAAqB,EAAC,cAAc,EAAE;YAEzE,iBAAiB,EAAE,MAAM;SAC1B,CAAC,CAAC;QAGH,IAAI,CAAC;YAEH,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAEvC,IAAI,IAAmB,CAAC;YAExB,IAAI,UAAU,EAAE,CAAC;gBAEf,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBAEN,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;YAC5E,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,CAAC,CAAC;YAChE,CAAC;YAGD,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;YAG9C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;gBAC1B,IAAI,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE;gBACrC,cAAc,EAAE,EAAE,GAAG,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE;aACzD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,EAAE,OAAO,KAAK,sBAAsB,EAAE,CAAC;gBAC5C,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,YAAY,CAAC,OAAmB;QAEpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAGpD,MAAM,MAAM,GAAG,IAAI,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,OAAO,IAAI,CAAC;IACd,CAAC;IAeS,KAAK,CAAC,SAAS,CAAC,IAAmB,EAAE,OAA0B;QACvE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAGpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAGtD,MAAM,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAI1G,OAAO,+BAAa,CAAC,GAAG,CAAC;YACvB,GAAG,MAAM;YACT,IAAI,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC;SACjE,CAAC,CAAC;IACL,CAAC;IAKS,mBAAmB,CAAC,OAAiB;QAC7C,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,UAAU,CAAC;QACrB,CAAC;QACD,OAAO,CACL,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,GAAG,IAAI,uBAAuB,CAAC;YACrE,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,GAAG,IAAI,mCAAmC,CAAC;YACjF,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,GAAG,IAAI,SAAS,CAAC;YACvD,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,GAAG,IAAI,qBAAqB,CAAC,CACpE,CAAC;IACJ,CAAC;IAKS,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,IAAgD;QAE3F,MAAM,iBAAiB,GAAW,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;QACpG,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,IAAA,mBAAU,GAAE,CAAC;QAGhD,IAAI,OAAO,GAAW,IAAA,mBAAU,GAAE,CAAC;QACnC,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,IAAI,GAAkB,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChF,MAAM,SAAS,GAAG,IAAI,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,SAAS,IAAI,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,iBAAiB,EAAE,CAAC;gBACtG,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAA0E;YACrF,GAAG,IAAI;YACP,QAAQ;YACR,EAAE,EAAE,MAAM;YACV,OAAO;SACR,CAAC;QACF,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE;gBACjC,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;gBACvC,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,EAAE,CAAC;aAClE,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE;gBACjC,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;gBACtC,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,2BAA2B,EAAE,EAAE,CAAC;aAC1E,CAAC;SACH,CAAC,CAAC;QACH,OAAO;YACL,YAAY;YACZ,KAAK;SACN,CAAC;IACJ,CAAC;IAKS,KAAK,CAAC,kBAAkB,CAChC,IAAmB,EACnB,mBAA2B,EAC3B,eAAuB,EACvB,IAA0B;QAG1B,IAAI,QAAgB,CAAC;QACrB,IAAI,mBAAmB,EAAE,CAAC;YACxB,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,QAAQ,CAAC;YACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAElE,OAAO,mBAAmB,CAAC;YAC7B,CAAC;QACH,CAAC;QAGD,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnD,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;QAGD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,8BAAqB,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG;YAC7B,GAAG,IAAI;YACP,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC,iBAAiB;YACtE,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACpG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAC3B,IAAA,wBAAY,EAAC,IAAI,CAAC,EAClB;YACE,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,KAAK,EAAE,IAAI,EAAE,CAChB,CAAC;QAGF,OAAO,eAAe,CAAC;IACzB,CAAC;IASS,YAAY;QACpB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC9E,CAAC;IASS,KAAK,CAAC,oBAAoB,CAAC,KAAa,EAAE,QAAgB;QAClE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC;gBACrC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;aAC1B,CAAC,CAAC;YAGH,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,wCAAwC,KAAK,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAC7G,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAYS,KAAK,CAAC,gBAAgB,CAAC,IAAmB,EAAE,KAAa,EAAE,aAAqB;QACxF,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAE3F,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,KAAK,SAAS,CAAC,CAAC;gBAGxD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/E,IAAI,WAAW,EAAE,KAAK,EAAE,CAAC;oBAEtB,IAAY,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0BAA0B,KAAK,YAAY,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IASS,KAAK,CAAC,gBAAgB,CAAC,KAA0B,EAAE,cAA8B;QACzF,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1D,MAAM,IAAI,4BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC;YAGH,MAAM,QAAQ,GAAG,KAAY,CAAC;YAC9B,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5G,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC;gBACrC,IAAI,EAAE;oBACJ,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,IAAI;oBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACzD,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,CAAC,CAAC;YAChE,CAAC;YAGD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAoD,CAAC;YAC9E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,OAAc,EAAE;gBAClF,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,4BAAmB,CAAC,uBAAuB,CAAC,CAAC;YACzD,CAAC;YAID,MAAM,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAE9F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,KAAK,UAAU,CAAC,CAAC;YAGvD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YAC7E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,4BAAmB,CAAC,iCAAiC,CAAC,CAAC;YACnE,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC,CAAC;YAE3E,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACvF,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAvgBY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAWR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCAJqB,4CAAmB;QACpB,gBAAU;QACP,8BAAa;QACI,uCAAiB;QACd,8CAAoB;GAXjE,eAAe,CAugB3B"}

package/dist/core/modules/auth/services/legacy-auth-rate-limiter.service.d.ts

@@ -0,0 +1,31 @@
+import { OnModuleInit } from '@nestjs/common';
+import { IAuthRateLimit } from '../../../common/interfaces/server-options.interface';
+interface RateLimitResult {
+    allowed: boolean;
+    current: number;
+    limit: number;
+    remaining: number;
+    resetIn: number;
+}
+export declare class LegacyAuthRateLimiter implements OnModuleInit {
+    private readonly logger;
+    private readonly store;
+    private config;
+    private cleanupInterval;
+    constructor();
+    onModuleInit(): void;
+    configure(config: IAuthRateLimit | null | undefined): void;
+    check(ip: string, endpoint: string): RateLimitResult;
+    getMessage(): string;
+    isEnabled(): boolean;
+    reset(ip: string): void;
+    clear(): void;
+    getStats(): {
+        activeEntries: number;
+        enabled: boolean;
+    };
+    onModuleDestroy(): void;
+    private maskIp;
+    private startCleanup;
+}
+export {};

package/dist/core/modules/auth/services/legacy-auth-rate-limiter.service.js

@@ -0,0 +1,153 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var LegacyAuthRateLimiter_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LegacyAuthRateLimiter = void 0;
+const common_1 = require("@nestjs/common");
+const config_service_1 = require("../../../common/services/config.service");
+const DEFAULT_CONFIG = {
+    enabled: false,
+    max: 10,
+    message: 'Too many requests, please try again later.',
+    windowSeconds: 60,
+};
+let LegacyAuthRateLimiter = LegacyAuthRateLimiter_1 = class LegacyAuthRateLimiter {
+    constructor() {
+        this.logger = new common_1.Logger(LegacyAuthRateLimiter_1.name);
+        this.store = new Map();
+        this.config = DEFAULT_CONFIG;
+        this.cleanupInterval = null;
+        this.startCleanup();
+    }
+    onModuleInit() {
+        const rateLimitConfig = config_service_1.ConfigService.getFastButReadOnly('auth.rateLimit');
+        if (rateLimitConfig) {
+            this.configure(rateLimitConfig);
+        }
+    }
+    configure(config) {
+        if (config === undefined || config === null) {
+            return;
+        }
+        const enabled = config.enabled !== false;
+        this.config = {
+            ...DEFAULT_CONFIG,
+            ...config,
+            enabled,
+        };
+        if (this.config.enabled) {
+            this.logger.log(`Legacy Auth rate limiting enabled: ${this.config.max} requests per ${this.config.windowSeconds}s`);
+        }
+    }
+    check(ip, endpoint) {
+        if (!this.config.enabled) {
+            return {
+                allowed: true,
+                current: 0,
+                limit: Infinity,
+                remaining: Infinity,
+                resetIn: 0,
+            };
+        }
+        const limit = this.config.max;
+        const key = `${ip}:${endpoint}`;
+        const now = Date.now();
+        let entry = this.store.get(key);
+        if (!entry || now >= entry.resetTime) {
+            entry = {
+                count: 1,
+                resetTime: now + this.config.windowSeconds * 1000,
+            };
+            this.store.set(key, entry);
+            return {
+                allowed: true,
+                current: 1,
+                limit,
+                remaining: limit - 1,
+                resetIn: this.config.windowSeconds,
+            };
+        }
+        entry.count++;
+        const resetIn = Math.ceil((entry.resetTime - now) / 1000);
+        const allowed = entry.count <= limit;
+        const remaining = Math.max(0, limit - entry.count);
+        if (!allowed) {
+            this.logger.warn(`Rate limit exceeded for IP ${this.maskIp(ip)} on ${endpoint}: ${entry.count}/${limit}`);
+        }
+        return {
+            allowed,
+            current: entry.count,
+            limit,
+            remaining,
+            resetIn,
+        };
+    }
+    getMessage() {
+        return this.config.message;
+    }
+    isEnabled() {
+        return this.config.enabled;
+    }
+    reset(ip) {
+        for (const key of this.store.keys()) {
+            if (key.startsWith(`${ip}:`)) {
+                this.store.delete(key);
+            }
+        }
+    }
+    clear() {
+        this.store.clear();
+    }
+    getStats() {
+        return {
+            activeEntries: this.store.size,
+            enabled: this.config.enabled,
+        };
+    }
+    onModuleDestroy() {
+        if (this.cleanupInterval) {
+            clearInterval(this.cleanupInterval);
+            this.cleanupInterval = null;
+        }
+    }
+    maskIp(ip) {
+        if (ip.includes('.')) {
+            const parts = ip.split('.');
+            return `${parts[0]}.${parts[1]}.*.*`;
+        }
+        const parts = ip.split(':');
+        return `${parts[0]}:****`;
+    }
+    startCleanup() {
+        this.cleanupInterval = setInterval(() => {
+            const now = Date.now();
+            let cleaned = 0;
+            for (const [key, entry] of this.store.entries()) {
+                if (now >= entry.resetTime) {
+                    this.store.delete(key);
+                    cleaned++;
+                }
+            }
+            if (cleaned > 0) {
+                this.logger.debug(`Cleaned up ${cleaned} expired rate limit entries`);
+            }
+        }, 5 * 60 * 1000);
+        if (this.cleanupInterval.unref) {
+            this.cleanupInterval.unref();
+        }
+    }
+};
+exports.LegacyAuthRateLimiter = LegacyAuthRateLimiter;
+exports.LegacyAuthRateLimiter = LegacyAuthRateLimiter = LegacyAuthRateLimiter_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], LegacyAuthRateLimiter);
+//# sourceMappingURL=legacy-auth-rate-limiter.service.js.map

package/dist/core/modules/auth/services/legacy-auth-rate-limiter.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-auth-rate-limiter.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/auth/services/legacy-auth-rate-limiter.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAkE;AAGlE,4EAAwE;AAgCxE,MAAM,cAAc,GAA6B;IAC/C,OAAO,EAAE,KAAK;IACd,GAAG,EAAE,EAAE;IACP,OAAO,EAAE,4CAA4C;IACrD,aAAa,EAAE,EAAE;CAClB,CAAC;AA6BK,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAMhC;QALiB,WAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;QAChD,UAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;QACnD,WAAM,GAA6B,cAAc,CAAC;QAClD,oBAAe,GAA0B,IAAI,CAAC;QAIpD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAKD,YAAY;QACV,MAAM,eAAe,GAAG,8BAAa,CAAC,kBAAkB,CAAiB,gBAAgB,CAAC,CAAC;QAC3F,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAYD,SAAS,CAAC,MAAyC;QAEjD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAGD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC;QAEzC,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,cAAc;YACjB,GAAG,MAAM;YACT,OAAO;SACR,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,sCAAsC,IAAI,CAAC,MAAM,CAAC,GAAG,iBAAiB,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,CACnG,CAAC;QACJ,CAAC;IACH,CAAC;IASD,KAAK,CAAC,EAAU,EAAE,QAAgB;QAEhC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,CAAC;aACX,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAGvB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEhC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAErC,KAAK,GAAG;gBACN,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI;aAClD,CAAC;YACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAE3B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC;gBACV,KAAK;gBACL,SAAS,EAAE,KAAK,GAAG,CAAC;gBACpB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;aACnC,CAAC;QACJ,CAAC;QAGD,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,QAAQ,KAAK,KAAK,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;QAC5G,CAAC;QAED,OAAO;YACL,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,KAAK;YACpB,KAAK;YACL,SAAS;YACT,OAAO;SACR,CAAC;IACJ,CAAC;IAKD,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAOD,KAAK,CAAC,EAAU;QACd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAKD,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAKD,QAAQ;QACN,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YAC9B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;SAC7B,CAAC;IACJ,CAAC;IAKD,eAAe;QACb,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAKO,MAAM,CAAC,EAAU;QACvB,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAErB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvC,CAAC;QAED,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5B,CAAC;IAKO,YAAY;QAElB,IAAI,CAAC,eAAe,GAAG,WAAW,CAChC,GAAG,EAAE;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,OAAO,GAAG,CAAC,CAAC;YAEhB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChD,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACvB,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,OAAO,6BAA6B,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,EACD,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;QAGF,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;CACF,CAAA;AArNY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;;GACA,qBAAqB,CAqNjC"}

package/dist/core/modules/better-auth/better-auth-migration-status.model.d.ts

@@ -0,0 +1,10 @@
+export declare class BetterAuthMigrationStatusModel {
+    totalUsers: number;
+    usersWithIamId: number;
+    usersWithIamAccount: number;
+    fullyMigratedUsers: number;
+    pendingMigrationUsers: number;
+    migrationPercentage: number;
+    canDisableLegacyAuth: boolean;
+    pendingUserEmails?: string[];
+}

package/dist/core/modules/better-auth/better-auth-migration-status.model.js

@@ -0,0 +1,57 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BetterAuthMigrationStatusModel = void 0;
+const graphql_1 = require("@nestjs/graphql");
+let BetterAuthMigrationStatusModel = class BetterAuthMigrationStatusModel {
+};
+exports.BetterAuthMigrationStatusModel = BetterAuthMigrationStatusModel;
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { description: 'Total number of users in the system' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "totalUsers", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { description: 'Number of users with iamId (linked to IAM)' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "usersWithIamId", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { description: 'Number of users with IAM credential account' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "usersWithIamAccount", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { description: 'Number of users fully migrated (iamId + credential account)' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "fullyMigratedUsers", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { description: 'Number of users not yet migrated' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "pendingMigrationUsers", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => Number, { description: 'Percentage of users fully migrated (0-100)' }),
+    __metadata("design:type", Number)
+], BetterAuthMigrationStatusModel.prototype, "migrationPercentage", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => Boolean, {
+        description: 'Whether all users are migrated (Legacy Auth could be disabled if CoreModule supported it)',
+    }),
+    __metadata("design:type", Boolean)
+], BetterAuthMigrationStatusModel.prototype, "canDisableLegacyAuth", void 0);
+__decorate([
+    (0, graphql_1.Field)(() => [String], {
+        description: 'Emails of users pending migration (max 100)',
+        nullable: true,
+    }),
+    __metadata("design:type", Array)
+], BetterAuthMigrationStatusModel.prototype, "pendingUserEmails", void 0);
+exports.BetterAuthMigrationStatusModel = BetterAuthMigrationStatusModel = __decorate([
+    (0, graphql_1.ObjectType)({ description: 'Migration status from Legacy Auth to Better-Auth (IAM)' })
+], BetterAuthMigrationStatusModel);
+//# sourceMappingURL=better-auth-migration-status.model.js.map

package/dist/core/modules/better-auth/better-auth-migration-status.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth-migration-status.model.js","sourceRoot":"","sources":["../../../../src/core/modules/better-auth/better-auth-migration-status.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAyD;AAUlD,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;CA8D1C,CAAA;AA9DY,wEAA8B;AAKzC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,WAAW,EAAE,qCAAqC,EAAE,CAAC;;kEACtD;AAOnB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC;;sEACzD;AAOvB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;;2EACrD;AAM5B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,WAAW,EAAE,6DAA6D,EAAE,CAAC;;0EACtE;AAO3B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;;6EACxC;AAM9B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC;;2EACvD;AAa5B;IAHC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE;QACpB,WAAW,EAAE,2FAA2F;KACzG,CAAC;;4EAC4B;AAU9B;IAJC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;QACrB,WAAW,EAAE,6CAA6C;QAC1D,QAAQ,EAAE,IAAI;KACf,CAAC;;yEAC2B;yCA7DlB,8BAA8B;IAD1C,IAAA,oBAAU,EAAC,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;GACzE,8BAA8B,CA8D1C"}

package/dist/core/modules/better-auth/better-auth-user.mapper.d.ts

@@ -1,3 +1,4 @@
+import { ObjectId } from 'mongodb';
 import { Connection } from 'mongoose';
 export interface BetterAuthSessionUser {
     createdAt?: Date;
@@ -20,6 +21,16 @@ export interface MappedUser {
     roles: string[];
     verified?: boolean;
 }
+export interface MigrationStatus {
+    canDisableLegacyAuth: boolean;
+    fullyMigratedUsers: number;
+    migrationPercentage: number;
+    pendingMigrationUsers: number;
+    pendingUserEmails: string[];
+    totalUsers: number;
+    usersWithIamAccount: number;
+    usersWithIamId: number;
+}
 export interface SyncedUserDocument {
     _id: any;
     avatar?: string;
@@ -39,5 +50,27 @@ export declare class BetterAuthUserMapper {
     constructor(connection?: Connection);
     mapSessionUser(sessionUser: BetterAuthSessionUser): Promise<MappedUser | null>;
     private createMappedUser;
+    syncPasswordToLegacy(iamUserId: string, userEmail: string, plainPassword?: string): Promise<boolean>;
+    syncPasswordChangeToIam(userEmail: string, plainPassword: string): Promise<boolean>;
+    migrateAccountToIam(userEmail: string, plainPassword?: string): Promise<boolean>;
+    private generateId;
+    normalizePasswordForIam(password: string): string;
+    private hashPasswordForBetterAuth;
+    private bytesToHex;
     linkOrCreateUser(sessionUser: BetterAuthSessionUser, additionalData?: Record<string, any>): Promise<null | SyncedUserDocument>;
+    syncEmailChangeFromLegacy(oldEmail: string, newEmail: string): Promise<boolean>;
+    syncEmailChangeFromIam(userId: string, newEmail: string): Promise<boolean>;
+    deleteUserFromBothSystems(userIdentifier: string): Promise<{
+        accountsDeleted: number;
+        sessionsDeleted: number;
+        success: boolean;
+        userDeleted: boolean;
+    }>;
+    cleanupIamDataForDeletedUser(userId: ObjectId | string): Promise<{
+        accountsDeleted: number;
+        sessionsDeleted: number;
+        success: boolean;
+    }>;
+    cleanupLegacyDataForDeletedIamUser(iamUserId: string): Promise<boolean>;
+    getMigrationStatus(): Promise<MigrationStatus>;
 }