@nauth-toolkit/core 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/adapters/database-columns.d.ts +10 -0
- package/dist/adapters/database-columns.d.ts.map +1 -0
- package/dist/adapters/database-columns.js +85 -0
- package/dist/adapters/database-columns.js.map +1 -0
- package/dist/adapters/express.adapter.d.ts +41 -0
- package/dist/adapters/express.adapter.d.ts.map +1 -0
- package/dist/adapters/express.adapter.js +188 -0
- package/dist/adapters/express.adapter.js.map +1 -0
- package/dist/adapters/fastify.adapter.d.ts +33 -0
- package/dist/adapters/fastify.adapter.d.ts.map +1 -0
- package/dist/adapters/fastify.adapter.js +223 -0
- package/dist/adapters/fastify.adapter.js.map +1 -0
- package/dist/adapters/index.d.ts +5 -0
- package/dist/adapters/index.d.ts.map +1 -0
- package/dist/adapters/index.js +25 -0
- package/dist/adapters/index.js.map +1 -0
- package/dist/adapters/storage.factory.d.ts +7 -0
- package/dist/adapters/storage.factory.d.ts.map +1 -0
- package/dist/adapters/storage.factory.js +24 -0
- package/dist/adapters/storage.factory.js.map +1 -0
- package/dist/bootstrap.d.ts +41 -0
- package/dist/bootstrap.d.ts.map +1 -0
- package/dist/bootstrap.js +113 -0
- package/dist/bootstrap.js.map +1 -0
- package/dist/dto/auth-challenge.dto.d.ts +19 -0
- package/dist/dto/auth-challenge.dto.d.ts.map +1 -0
- package/dist/dto/auth-challenge.dto.js +86 -0
- package/dist/dto/auth-challenge.dto.js.map +1 -0
- package/dist/dto/auth-response.dto.d.ts +31 -0
- package/dist/dto/auth-response.dto.d.ts.map +1 -0
- package/dist/dto/auth-response.dto.js +18 -0
- package/dist/dto/auth-response.dto.js.map +1 -0
- package/dist/dto/challenge-response.dto.d.ts +36 -0
- package/dist/dto/challenge-response.dto.d.ts.map +1 -0
- package/dist/dto/challenge-response.dto.js +3 -0
- package/dist/dto/challenge-response.dto.js.map +1 -0
- package/dist/dto/change-password-request.dto.d.ts +5 -0
- package/dist/dto/change-password-request.dto.d.ts.map +1 -0
- package/dist/dto/change-password-request.dto.js +30 -0
- package/dist/dto/change-password-request.dto.js.map +1 -0
- package/dist/dto/change-password-response.dto.d.ts +4 -0
- package/dist/dto/change-password-response.dto.d.ts.map +1 -0
- package/dist/dto/change-password-response.dto.js +8 -0
- package/dist/dto/change-password-response.dto.js.map +1 -0
- package/dist/dto/change-password.dto.d.ts +5 -0
- package/dist/dto/change-password.dto.d.ts.map +1 -0
- package/dist/dto/change-password.dto.js +29 -0
- package/dist/dto/change-password.dto.js.map +1 -0
- package/dist/dto/error-response.dto.d.ts +9 -0
- package/dist/dto/error-response.dto.d.ts.map +1 -0
- package/dist/dto/error-response.dto.js +59 -0
- package/dist/dto/error-response.dto.js.map +1 -0
- package/dist/dto/get-available-methods.dto.d.ts +7 -0
- package/dist/dto/get-available-methods.dto.d.ts.map +1 -0
- package/dist/dto/get-available-methods.dto.js +33 -0
- package/dist/dto/get-available-methods.dto.js.map +1 -0
- package/dist/dto/get-challenge-data-response.dto.d.ts +4 -0
- package/dist/dto/get-challenge-data-response.dto.d.ts.map +1 -0
- package/dist/dto/get-challenge-data-response.dto.js +8 -0
- package/dist/dto/get-challenge-data-response.dto.js.map +1 -0
- package/dist/dto/get-challenge-data.dto.d.ts +8 -0
- package/dist/dto/get-challenge-data.dto.d.ts.map +1 -0
- package/dist/dto/get-challenge-data.dto.js +40 -0
- package/dist/dto/get-challenge-data.dto.js.map +1 -0
- package/dist/dto/get-client-info.dto.d.ts +17 -0
- package/dist/dto/get-client-info.dto.d.ts.map +1 -0
- package/dist/dto/get-client-info.dto.js +20 -0
- package/dist/dto/get-client-info.dto.js.map +1 -0
- package/dist/dto/get-device-token-response.dto.d.ts +4 -0
- package/dist/dto/get-device-token-response.dto.d.ts.map +1 -0
- package/dist/dto/get-device-token-response.dto.js +8 -0
- package/dist/dto/get-device-token-response.dto.js.map +1 -0
- package/dist/dto/get-events-by-type.dto.d.ts +17 -0
- package/dist/dto/get-events-by-type.dto.d.ts.map +1 -0
- package/dist/dto/get-events-by-type.dto.js +20 -0
- package/dist/dto/get-events-by-type.dto.js.map +1 -0
- package/dist/dto/get-ip-address-response.dto.d.ts +4 -0
- package/dist/dto/get-ip-address-response.dto.d.ts.map +1 -0
- package/dist/dto/get-ip-address-response.dto.js +8 -0
- package/dist/dto/get-ip-address-response.dto.js.map +1 -0
- package/dist/dto/get-mfa-status.dto.d.ts +16 -0
- package/dist/dto/get-mfa-status.dto.d.ts.map +1 -0
- package/dist/dto/get-mfa-status.dto.js +41 -0
- package/dist/dto/get-mfa-status.dto.js.map +1 -0
- package/dist/dto/get-risk-assessment-history.dto.d.ts +9 -0
- package/dist/dto/get-risk-assessment-history.dto.d.ts.map +1 -0
- package/dist/dto/get-risk-assessment-history.dto.js +13 -0
- package/dist/dto/get-risk-assessment-history.dto.js.map +1 -0
- package/dist/dto/get-session-id-response.dto.d.ts +4 -0
- package/dist/dto/get-session-id-response.dto.d.ts.map +1 -0
- package/dist/dto/get-session-id-response.dto.js +8 -0
- package/dist/dto/get-session-id-response.dto.js.map +1 -0
- package/dist/dto/get-setup-data-response.dto.d.ts +4 -0
- package/dist/dto/get-setup-data-response.dto.d.ts.map +1 -0
- package/dist/dto/get-setup-data-response.dto.js +8 -0
- package/dist/dto/get-setup-data-response.dto.js.map +1 -0
- package/dist/dto/get-setup-data.dto.d.ts +7 -0
- package/dist/dto/get-setup-data.dto.d.ts.map +1 -0
- package/dist/dto/get-setup-data.dto.js +43 -0
- package/dist/dto/get-setup-data.dto.js.map +1 -0
- package/dist/dto/get-suspicious-activity.dto.d.ts +9 -0
- package/dist/dto/get-suspicious-activity.dto.d.ts.map +1 -0
- package/dist/dto/get-suspicious-activity.dto.js +13 -0
- package/dist/dto/get-suspicious-activity.dto.js.map +1 -0
- package/dist/dto/get-user-agent-response.dto.d.ts +4 -0
- package/dist/dto/get-user-agent-response.dto.d.ts.map +1 -0
- package/dist/dto/get-user-agent-response.dto.js +8 -0
- package/dist/dto/get-user-agent-response.dto.js.map +1 -0
- package/dist/dto/get-user-auth-history.dto.d.ts +20 -0
- package/dist/dto/get-user-auth-history.dto.d.ts.map +1 -0
- package/dist/dto/get-user-auth-history.dto.js +22 -0
- package/dist/dto/get-user-auth-history.dto.js.map +1 -0
- package/dist/dto/get-user-by-email.dto.d.ts +5 -0
- package/dist/dto/get-user-by-email.dto.d.ts.map +1 -0
- package/dist/dto/get-user-by-email.dto.js +36 -0
- package/dist/dto/get-user-by-email.dto.js.map +1 -0
- package/dist/dto/get-user-by-id.dto.d.ts +4 -0
- package/dist/dto/get-user-by-id.dto.d.ts.map +1 -0
- package/dist/dto/get-user-by-id.dto.js +29 -0
- package/dist/dto/get-user-by-id.dto.js.map +1 -0
- package/dist/dto/get-user-devices.dto.d.ts +8 -0
- package/dist/dto/get-user-devices.dto.d.ts.map +1 -0
- package/dist/dto/get-user-devices.dto.js +33 -0
- package/dist/dto/get-user-devices.dto.js.map +1 -0
- package/dist/dto/get-user-response.dto.d.ts +2 -0
- package/dist/dto/get-user-response.dto.d.ts.map +1 -0
- package/dist/dto/get-user-response.dto.js +6 -0
- package/dist/dto/get-user-response.dto.js.map +1 -0
- package/dist/dto/has-provider.dto.d.ts +7 -0
- package/dist/dto/has-provider.dto.d.ts.map +1 -0
- package/dist/dto/has-provider.dto.js +38 -0
- package/dist/dto/has-provider.dto.js.map +1 -0
- package/dist/dto/index.d.ts +51 -0
- package/dist/dto/index.d.ts.map +1 -0
- package/dist/dto/index.js +67 -0
- package/dist/dto/index.js.map +1 -0
- package/dist/dto/is-trusted-device-response.dto.d.ts +4 -0
- package/dist/dto/is-trusted-device-response.dto.d.ts.map +1 -0
- package/dist/dto/is-trusted-device-response.dto.js +8 -0
- package/dist/dto/is-trusted-device-response.dto.js.map +1 -0
- package/dist/dto/list-providers-response.dto.d.ts +4 -0
- package/dist/dto/list-providers-response.dto.d.ts.map +1 -0
- package/dist/dto/list-providers-response.dto.js +8 -0
- package/dist/dto/list-providers-response.dto.js.map +1 -0
- package/dist/dto/login.dto.d.ts +7 -0
- package/dist/dto/login.dto.d.ts.map +1 -0
- package/dist/dto/login.dto.js +68 -0
- package/dist/dto/login.dto.js.map +1 -0
- package/dist/dto/logout-all-response.dto.d.ts +4 -0
- package/dist/dto/logout-all-response.dto.d.ts.map +1 -0
- package/dist/dto/logout-all-response.dto.js +8 -0
- package/dist/dto/logout-all-response.dto.js.map +1 -0
- package/dist/dto/logout-all.dto.d.ts +5 -0
- package/dist/dto/logout-all.dto.d.ts.map +1 -0
- package/dist/dto/logout-all.dto.js +42 -0
- package/dist/dto/logout-all.dto.js.map +1 -0
- package/dist/dto/logout-response.dto.d.ts +4 -0
- package/dist/dto/logout-response.dto.d.ts.map +1 -0
- package/dist/dto/logout-response.dto.js +8 -0
- package/dist/dto/logout-response.dto.js.map +1 -0
- package/dist/dto/logout.dto.d.ts +5 -0
- package/dist/dto/logout.dto.d.ts.map +1 -0
- package/dist/dto/logout.dto.js +36 -0
- package/dist/dto/logout.dto.js.map +1 -0
- package/dist/dto/refresh-token.dto.d.ts +4 -0
- package/dist/dto/refresh-token.dto.d.ts.map +1 -0
- package/dist/dto/refresh-token.dto.js +24 -0
- package/dist/dto/refresh-token.dto.js.map +1 -0
- package/dist/dto/remove-devices.dto.d.ts +9 -0
- package/dist/dto/remove-devices.dto.d.ts.map +1 -0
- package/dist/dto/remove-devices.dto.js +50 -0
- package/dist/dto/remove-devices.dto.js.map +1 -0
- package/dist/dto/resend-code-response.dto.d.ts +4 -0
- package/dist/dto/resend-code-response.dto.d.ts.map +1 -0
- package/dist/dto/resend-code-response.dto.js +8 -0
- package/dist/dto/resend-code-response.dto.js.map +1 -0
- package/dist/dto/resend-code.dto.d.ts +4 -0
- package/dist/dto/resend-code.dto.d.ts.map +1 -0
- package/dist/dto/resend-code.dto.js +29 -0
- package/dist/dto/resend-code.dto.js.map +1 -0
- package/dist/dto/reset-password.dto.d.ts +8 -0
- package/dist/dto/reset-password.dto.d.ts.map +1 -0
- package/dist/dto/reset-password.dto.js +61 -0
- package/dist/dto/reset-password.dto.js.map +1 -0
- package/dist/dto/respond-challenge.dto.d.ts +33 -0
- package/dist/dto/respond-challenge.dto.d.ts.map +1 -0
- package/dist/dto/respond-challenge.dto.js +131 -0
- package/dist/dto/respond-challenge.dto.js.map +1 -0
- package/dist/dto/set-mfa-exemption.dto.d.ts +12 -0
- package/dist/dto/set-mfa-exemption.dto.d.ts.map +1 -0
- package/dist/dto/set-mfa-exemption.dto.js +66 -0
- package/dist/dto/set-mfa-exemption.dto.js.map +1 -0
- package/dist/dto/set-must-change-password-response.dto.d.ts +4 -0
- package/dist/dto/set-must-change-password-response.dto.d.ts.map +1 -0
- package/dist/dto/set-must-change-password-response.dto.js +8 -0
- package/dist/dto/set-must-change-password-response.dto.js.map +1 -0
- package/dist/dto/set-must-change-password.dto.d.ts +4 -0
- package/dist/dto/set-must-change-password.dto.d.ts.map +1 -0
- package/dist/dto/set-must-change-password.dto.js +29 -0
- package/dist/dto/set-must-change-password.dto.js.map +1 -0
- package/dist/dto/set-preferred-method.dto.d.ts +8 -0
- package/dist/dto/set-preferred-method.dto.d.ts.map +1 -0
- package/dist/dto/set-preferred-method.dto.js +49 -0
- package/dist/dto/set-preferred-method.dto.js.map +1 -0
- package/dist/dto/setup-mfa.dto.d.ts +9 -0
- package/dist/dto/setup-mfa.dto.d.ts.map +1 -0
- package/dist/dto/setup-mfa.dto.js +55 -0
- package/dist/dto/setup-mfa.dto.js.map +1 -0
- package/dist/dto/signup.dto.d.ts +10 -0
- package/dist/dto/signup.dto.d.ts.map +1 -0
- package/dist/dto/signup.dto.js +109 -0
- package/dist/dto/signup.dto.js.map +1 -0
- package/dist/dto/social-auth.dto.d.ts +54 -0
- package/dist/dto/social-auth.dto.d.ts.map +1 -0
- package/dist/dto/social-auth.dto.js +232 -0
- package/dist/dto/social-auth.dto.js.map +1 -0
- package/dist/dto/trust-device-response.dto.d.ts +4 -0
- package/dist/dto/trust-device-response.dto.d.ts.map +1 -0
- package/dist/dto/trust-device-response.dto.js +8 -0
- package/dist/dto/trust-device-response.dto.js.map +1 -0
- package/dist/dto/trust-device.dto.d.ts +1 -0
- package/dist/dto/trust-device.dto.d.ts.map +1 -0
- package/dist/dto/trust-device.dto.js +2 -0
- package/dist/dto/trust-device.dto.js.map +1 -0
- package/dist/dto/update-user-attributes-request.dto.d.ts +5 -0
- package/dist/dto/update-user-attributes-request.dto.d.ts.map +1 -0
- package/dist/dto/update-user-attributes-request.dto.js +30 -0
- package/dist/dto/update-user-attributes-request.dto.js.map +1 -0
- package/dist/dto/user-response.dto.d.ts +20 -0
- package/dist/dto/user-response.dto.d.ts.map +1 -0
- package/dist/dto/user-response.dto.js +42 -0
- package/dist/dto/user-response.dto.js.map +1 -0
- package/dist/dto/user-update.dto.d.ts +12 -0
- package/dist/dto/user-update.dto.d.ts.map +1 -0
- package/dist/dto/user-update.dto.js +119 -0
- package/dist/dto/user-update.dto.js.map +1 -0
- package/dist/dto/verify-email.dto.d.ts +29 -0
- package/dist/dto/verify-email.dto.d.ts.map +1 -0
- package/dist/dto/verify-email.dto.js +161 -0
- package/dist/dto/verify-email.dto.js.map +1 -0
- package/dist/dto/verify-mfa-code.dto.d.ts +10 -0
- package/dist/dto/verify-mfa-code.dto.d.ts.map +1 -0
- package/dist/dto/verify-mfa-code.dto.js +56 -0
- package/dist/dto/verify-mfa-code.dto.js.map +1 -0
- package/dist/dto/verify-phone-by-sub.dto.d.ts +6 -0
- package/dist/dto/verify-phone-by-sub.dto.d.ts.map +1 -0
- package/dist/dto/verify-phone-by-sub.dto.js +49 -0
- package/dist/dto/verify-phone-by-sub.dto.js.map +1 -0
- package/dist/dto/verify-phone.dto.d.ts +24 -0
- package/dist/dto/verify-phone.dto.d.ts.map +1 -0
- package/dist/dto/verify-phone.dto.js +124 -0
- package/dist/dto/verify-phone.dto.js.map +1 -0
- package/dist/entities/auth-audit.entity.d.ts +31 -0
- package/dist/entities/auth-audit.entity.d.ts.map +1 -0
- package/dist/entities/auth-audit.entity.js +33 -0
- package/dist/entities/auth-audit.entity.js.map +1 -0
- package/dist/entities/challenge-session.entity.d.ts +17 -0
- package/dist/entities/challenge-session.entity.d.ts.map +1 -0
- package/dist/entities/challenge-session.entity.js +21 -0
- package/dist/entities/challenge-session.entity.js.map +1 -0
- package/dist/entities/index.d.ts +12 -0
- package/dist/entities/index.d.ts.map +1 -0
- package/dist/entities/index.js +26 -0
- package/dist/entities/index.js.map +1 -0
- package/dist/entities/login-attempt.entity.d.ts +13 -0
- package/dist/entities/login-attempt.entity.d.ts.map +1 -0
- package/dist/entities/login-attempt.entity.js +17 -0
- package/dist/entities/login-attempt.entity.js.map +1 -0
- package/dist/entities/mfa-device.entity.d.ts +22 -0
- package/dist/entities/mfa-device.entity.d.ts.map +1 -0
- package/dist/entities/mfa-device.entity.js +25 -0
- package/dist/entities/mfa-device.entity.js.map +1 -0
- package/dist/entities/rate-limit.entity.d.ts +9 -0
- package/dist/entities/rate-limit.entity.d.ts.map +1 -0
- package/dist/entities/rate-limit.entity.js +13 -0
- package/dist/entities/rate-limit.entity.js.map +1 -0
- package/dist/entities/session.entity.d.ts +32 -0
- package/dist/entities/session.entity.d.ts.map +1 -0
- package/dist/entities/session.entity.js +36 -0
- package/dist/entities/session.entity.js.map +1 -0
- package/dist/entities/social-account.entity.d.ts +13 -0
- package/dist/entities/social-account.entity.d.ts.map +1 -0
- package/dist/entities/social-account.entity.js +17 -0
- package/dist/entities/social-account.entity.js.map +1 -0
- package/dist/entities/storage-lock.entity.d.ts +8 -0
- package/dist/entities/storage-lock.entity.d.ts.map +1 -0
- package/dist/entities/storage-lock.entity.js +12 -0
- package/dist/entities/storage-lock.entity.js.map +1 -0
- package/dist/entities/trusted-device.entity.d.ts +17 -0
- package/dist/entities/trusted-device.entity.d.ts.map +1 -0
- package/dist/entities/trusted-device.entity.js +21 -0
- package/dist/entities/trusted-device.entity.js.map +1 -0
- package/dist/entities/user.entity.d.ts +41 -0
- package/dist/entities/user.entity.d.ts.map +1 -0
- package/dist/entities/user.entity.js +45 -0
- package/dist/entities/user.entity.js.map +1 -0
- package/dist/entities/verification-token.entity.d.ts +19 -0
- package/dist/entities/verification-token.entity.d.ts.map +1 -0
- package/dist/entities/verification-token.entity.js +29 -0
- package/dist/entities/verification-token.entity.js.map +1 -0
- package/dist/enums/auth-audit-event-type.enum.d.ts +55 -0
- package/dist/enums/auth-audit-event-type.enum.d.ts.map +1 -0
- package/dist/enums/auth-audit-event-type.enum.js +59 -0
- package/dist/enums/auth-audit-event-type.enum.js.map +1 -0
- package/dist/enums/error-codes.enum.d.ts +53 -0
- package/dist/enums/error-codes.enum.d.ts.map +1 -0
- package/dist/enums/error-codes.enum.js +57 -0
- package/dist/enums/error-codes.enum.js.map +1 -0
- package/dist/enums/mfa-method.enum.d.ts +11 -0
- package/dist/enums/mfa-method.enum.d.ts.map +1 -0
- package/dist/enums/mfa-method.enum.js +18 -0
- package/dist/enums/mfa-method.enum.js.map +1 -0
- package/dist/enums/risk-factor.enum.d.ts +14 -0
- package/dist/enums/risk-factor.enum.d.ts.map +1 -0
- package/dist/enums/risk-factor.enum.js +18 -0
- package/dist/enums/risk-factor.enum.js.map +1 -0
- package/dist/exceptions/nauth.exception.d.ts +18 -0
- package/dist/exceptions/nauth.exception.d.ts.map +1 -0
- package/dist/exceptions/nauth.exception.js +64 -0
- package/dist/exceptions/nauth.exception.js.map +1 -0
- package/dist/handlers/auth.handler.d.ts +18 -0
- package/dist/handlers/auth.handler.d.ts.map +1 -0
- package/dist/handlers/auth.handler.js +173 -0
- package/dist/handlers/auth.handler.js.map +1 -0
- package/dist/handlers/client-info.handler.d.ts +12 -0
- package/dist/handlers/client-info.handler.d.ts.map +1 -0
- package/dist/handlers/client-info.handler.js +61 -0
- package/dist/handlers/client-info.handler.js.map +1 -0
- package/dist/handlers/csrf.handler.d.ts +13 -0
- package/dist/handlers/csrf.handler.d.ts.map +1 -0
- package/dist/handlers/csrf.handler.js +84 -0
- package/dist/handlers/csrf.handler.js.map +1 -0
- package/dist/handlers/token-delivery.handler.d.ts +12 -0
- package/dist/handlers/token-delivery.handler.d.ts.map +1 -0
- package/dist/handlers/token-delivery.handler.js +86 -0
- package/dist/handlers/token-delivery.handler.js.map +1 -0
- package/dist/index.d.ts +27 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +51 -0
- package/dist/index.js.map +1 -0
- package/dist/interfaces/client-info.interface.d.ts +16 -0
- package/dist/interfaces/client-info.interface.d.ts.map +1 -0
- package/dist/interfaces/client-info.interface.js +3 -0
- package/dist/interfaces/client-info.interface.js.map +1 -0
- package/dist/interfaces/config.interface.d.ts +279 -0
- package/dist/interfaces/config.interface.d.ts.map +1 -0
- package/dist/interfaces/config.interface.js +3 -0
- package/dist/interfaces/config.interface.js.map +1 -0
- package/dist/interfaces/entities.interface.d.ts +169 -0
- package/dist/interfaces/entities.interface.d.ts.map +1 -0
- package/dist/interfaces/entities.interface.js +3 -0
- package/dist/interfaces/entities.interface.js.map +1 -0
- package/dist/interfaces/index.d.ts +11 -0
- package/dist/interfaces/index.d.ts.map +1 -0
- package/dist/interfaces/index.js +27 -0
- package/dist/interfaces/index.js.map +1 -0
- package/dist/interfaces/logger.interface.d.ts +43 -0
- package/dist/interfaces/logger.interface.d.ts.map +1 -0
- package/dist/interfaces/logger.interface.js +12 -0
- package/dist/interfaces/logger.interface.js.map +1 -0
- package/dist/interfaces/mfa-provider.interface.d.ts +12 -0
- package/dist/interfaces/mfa-provider.interface.d.ts.map +1 -0
- package/dist/interfaces/mfa-provider.interface.js +3 -0
- package/dist/interfaces/mfa-provider.interface.js.map +1 -0
- package/dist/interfaces/oauth.interface.d.ts +24 -0
- package/dist/interfaces/oauth.interface.d.ts.map +1 -0
- package/dist/interfaces/oauth.interface.js +3 -0
- package/dist/interfaces/oauth.interface.js.map +1 -0
- package/dist/interfaces/provider.interface.d.ts +12 -0
- package/dist/interfaces/provider.interface.d.ts.map +1 -0
- package/dist/interfaces/provider.interface.js +3 -0
- package/dist/interfaces/provider.interface.js.map +1 -0
- package/dist/interfaces/social-auth-provider.interface.d.ts +13 -0
- package/dist/interfaces/social-auth-provider.interface.d.ts.map +1 -0
- package/dist/interfaces/social-auth-provider.interface.js +3 -0
- package/dist/interfaces/social-auth-provider.interface.js.map +1 -0
- package/dist/interfaces/storage-adapter.interface.d.ts +39 -0
- package/dist/interfaces/storage-adapter.interface.d.ts.map +1 -0
- package/dist/interfaces/storage-adapter.interface.js +3 -0
- package/dist/interfaces/storage-adapter.interface.js.map +1 -0
- package/dist/interfaces/template.interface.d.ts +99 -0
- package/dist/interfaces/template.interface.d.ts.map +1 -0
- package/dist/interfaces/template.interface.js +15 -0
- package/dist/interfaces/template.interface.js.map +1 -0
- package/dist/interfaces/token-verifier.interface.d.ts +7 -0
- package/dist/interfaces/token-verifier.interface.d.ts.map +1 -0
- package/dist/interfaces/token-verifier.interface.js +3 -0
- package/dist/interfaces/token-verifier.interface.js.map +1 -0
- package/dist/internal.d.ts +20 -0
- package/dist/internal.d.ts.map +1 -0
- package/dist/internal.js +53 -0
- package/dist/internal.js.map +1 -0
- package/dist/platform/interfaces.d.ts +56 -0
- package/dist/platform/interfaces.d.ts.map +1 -0
- package/dist/platform/interfaces.js +3 -0
- package/dist/platform/interfaces.js.map +1 -0
- package/dist/schemas/auth-config.schema.d.ts +3411 -0
- package/dist/schemas/auth-config.schema.d.ts.map +1 -0
- package/dist/schemas/auth-config.schema.js +428 -0
- package/dist/schemas/auth-config.schema.js.map +1 -0
- package/dist/services/adaptive-mfa-decision.service.d.ts +39 -0
- package/dist/services/adaptive-mfa-decision.service.d.ts.map +1 -0
- package/dist/services/adaptive-mfa-decision.service.js +223 -0
- package/dist/services/adaptive-mfa-decision.service.js.map +1 -0
- package/dist/services/auth-audit.service.d.ts +44 -0
- package/dist/services/auth-audit.service.d.ts.map +1 -0
- package/dist/services/auth-audit.service.js +241 -0
- package/dist/services/auth-audit.service.js.map +1 -0
- package/dist/services/auth-challenge-helper.service.d.ts +48 -0
- package/dist/services/auth-challenge-helper.service.d.ts.map +1 -0
- package/dist/services/auth-challenge-helper.service.js +425 -0
- package/dist/services/auth-challenge-helper.service.js.map +1 -0
- package/dist/services/auth-flow-context-builder.service.d.ts +31 -0
- package/dist/services/auth-flow-context-builder.service.d.ts.map +1 -0
- package/dist/services/auth-flow-context-builder.service.js +253 -0
- package/dist/services/auth-flow-context-builder.service.js.map +1 -0
- package/dist/services/auth-flow-rules.d.ts +18 -0
- package/dist/services/auth-flow-rules.d.ts.map +1 -0
- package/dist/services/auth-flow-rules.js +55 -0
- package/dist/services/auth-flow-rules.js.map +1 -0
- package/dist/services/auth-flow-state-definitions.d.ts +5 -0
- package/dist/services/auth-flow-state-definitions.d.ts.map +1 -0
- package/dist/services/auth-flow-state-definitions.js +87 -0
- package/dist/services/auth-flow-state-definitions.js.map +1 -0
- package/dist/services/auth-flow-state-machine.service.d.ts +17 -0
- package/dist/services/auth-flow-state-machine.service.d.ts.map +1 -0
- package/dist/services/auth-flow-state-machine.service.js +91 -0
- package/dist/services/auth-flow-state-machine.service.js.map +1 -0
- package/dist/services/auth-flow-state-machine.types.d.ts +55 -0
- package/dist/services/auth-flow-state-machine.types.d.ts.map +1 -0
- package/dist/services/auth-flow-state-machine.types.js +16 -0
- package/dist/services/auth-flow-state-machine.types.js.map +1 -0
- package/dist/services/auth.service.d.ts +87 -0
- package/dist/services/auth.service.d.ts.map +1 -0
- package/dist/services/auth.service.js +2356 -0
- package/dist/services/auth.service.js.map +1 -0
- package/dist/services/challenge.service.d.ts +32 -0
- package/dist/services/challenge.service.d.ts.map +1 -0
- package/dist/services/challenge.service.js +293 -0
- package/dist/services/challenge.service.js.map +1 -0
- package/dist/services/client-info.service.d.ts +20 -0
- package/dist/services/client-info.service.d.ts.map +1 -0
- package/dist/services/client-info.service.js +202 -0
- package/dist/services/client-info.service.js.map +1 -0
- package/dist/services/csrf.service.d.ts +13 -0
- package/dist/services/csrf.service.d.ts.map +1 -0
- package/dist/services/csrf.service.js +67 -0
- package/dist/services/csrf.service.js.map +1 -0
- package/dist/services/email-verification.service.d.ts +30 -0
- package/dist/services/email-verification.service.d.ts.map +1 -0
- package/dist/services/email-verification.service.js +373 -0
- package/dist/services/email-verification.service.js.map +1 -0
- package/dist/services/geo-location.service.d.ts +85 -0
- package/dist/services/geo-location.service.d.ts.map +1 -0
- package/dist/services/geo-location.service.js +338 -0
- package/dist/services/geo-location.service.js.map +1 -0
- package/dist/services/index.d.ts +14 -0
- package/dist/services/index.d.ts.map +1 -0
- package/dist/services/index.js +30 -0
- package/dist/services/index.js.map +1 -0
- package/dist/services/jwt.service.d.ts +62 -0
- package/dist/services/jwt.service.d.ts.map +1 -0
- package/dist/services/jwt.service.js +261 -0
- package/dist/services/jwt.service.js.map +1 -0
- package/dist/services/mfa-base.service.d.ts +37 -0
- package/dist/services/mfa-base.service.d.ts.map +1 -0
- package/dist/services/mfa-base.service.js +297 -0
- package/dist/services/mfa-base.service.js.map +1 -0
- package/dist/services/mfa.service.d.ts +35 -0
- package/dist/services/mfa.service.d.ts.map +1 -0
- package/dist/services/mfa.service.js +449 -0
- package/dist/services/mfa.service.js.map +1 -0
- package/dist/services/password.service.d.ts +19 -0
- package/dist/services/password.service.d.ts.map +1 -0
- package/dist/services/password.service.js +150 -0
- package/dist/services/password.service.js.map +1 -0
- package/dist/services/phone-verification.service.d.ts +32 -0
- package/dist/services/phone-verification.service.d.ts.map +1 -0
- package/dist/services/phone-verification.service.js +474 -0
- package/dist/services/phone-verification.service.js.map +1 -0
- package/dist/services/risk-detection.service.d.ts +30 -0
- package/dist/services/risk-detection.service.d.ts.map +1 -0
- package/dist/services/risk-detection.service.js +518 -0
- package/dist/services/risk-detection.service.js.map +1 -0
- package/dist/services/risk-scoring.service.d.ts +12 -0
- package/dist/services/risk-scoring.service.d.ts.map +1 -0
- package/dist/services/risk-scoring.service.js +44 -0
- package/dist/services/risk-scoring.service.js.map +1 -0
- package/dist/services/session.service.d.ts +64 -0
- package/dist/services/session.service.d.ts.map +1 -0
- package/dist/services/session.service.js +455 -0
- package/dist/services/session.service.js.map +1 -0
- package/dist/services/social-auth-base.service.d.ts +57 -0
- package/dist/services/social-auth-base.service.d.ts.map +1 -0
- package/dist/services/social-auth-base.service.js +340 -0
- package/dist/services/social-auth-base.service.js.map +1 -0
- package/dist/services/social-auth.service.d.ts +31 -0
- package/dist/services/social-auth.service.d.ts.map +1 -0
- package/dist/services/social-auth.service.js +172 -0
- package/dist/services/social-auth.service.js.map +1 -0
- package/dist/services/social-provider-registry.service.d.ts +9 -0
- package/dist/services/social-provider-registry.service.d.ts.map +1 -0
- package/dist/services/social-provider-registry.service.js +30 -0
- package/dist/services/social-provider-registry.service.js.map +1 -0
- package/dist/services/trusted-device.service.d.ts +29 -0
- package/dist/services/trusted-device.service.d.ts.map +1 -0
- package/dist/services/trusted-device.service.js +190 -0
- package/dist/services/trusted-device.service.js.map +1 -0
- package/dist/storage/account-lockout-storage.service.d.ts +16 -0
- package/dist/storage/account-lockout-storage.service.d.ts.map +1 -0
- package/dist/storage/account-lockout-storage.service.js +50 -0
- package/dist/storage/account-lockout-storage.service.js.map +1 -0
- package/dist/storage/index.d.ts +4 -0
- package/dist/storage/index.d.ts.map +1 -0
- package/dist/storage/index.js +20 -0
- package/dist/storage/index.js.map +1 -0
- package/dist/storage/memory-storage.adapter.d.ts +33 -0
- package/dist/storage/memory-storage.adapter.d.ts.map +1 -0
- package/dist/storage/memory-storage.adapter.js +195 -0
- package/dist/storage/memory-storage.adapter.js.map +1 -0
- package/dist/storage/rate-limit-storage.service.d.ts +11 -0
- package/dist/storage/rate-limit-storage.service.d.ts.map +1 -0
- package/dist/storage/rate-limit-storage.service.js +33 -0
- package/dist/storage/rate-limit-storage.service.js.map +1 -0
- package/dist/templates/html-template.engine.d.ts +16 -0
- package/dist/templates/html-template.engine.d.ts.map +1 -0
- package/dist/templates/html-template.engine.js +502 -0
- package/dist/templates/html-template.engine.js.map +1 -0
- package/dist/templates/index.d.ts +2 -0
- package/dist/templates/index.d.ts.map +1 -0
- package/dist/templates/index.js +18 -0
- package/dist/templates/index.js.map +1 -0
- package/dist/utils/common-passwords.d.ts +4 -0
- package/dist/utils/common-passwords.d.ts.map +1 -0
- package/dist/utils/common-passwords.js +108 -0
- package/dist/utils/common-passwords.js.map +1 -0
- package/dist/utils/context-storage.d.ts +13 -0
- package/dist/utils/context-storage.d.ts.map +1 -0
- package/dist/utils/context-storage.js +54 -0
- package/dist/utils/context-storage.js.map +1 -0
- package/dist/utils/cookie-names.util.d.ts +7 -0
- package/dist/utils/cookie-names.util.d.ts.map +1 -0
- package/dist/utils/cookie-names.util.js +30 -0
- package/dist/utils/cookie-names.util.js.map +1 -0
- package/dist/utils/cookies.util.d.ts +12 -0
- package/dist/utils/cookies.util.d.ts.map +1 -0
- package/dist/utils/cookies.util.js +48 -0
- package/dist/utils/cookies.util.js.map +1 -0
- package/dist/utils/index.d.ts +8 -0
- package/dist/utils/index.d.ts.map +1 -0
- package/dist/utils/index.js +24 -0
- package/dist/utils/index.js.map +1 -0
- package/dist/utils/ip-extractor.d.ts +12 -0
- package/dist/utils/ip-extractor.d.ts.map +1 -0
- package/dist/utils/ip-extractor.js +88 -0
- package/dist/utils/ip-extractor.js.map +1 -0
- package/dist/utils/nauth-logger.d.ts +20 -0
- package/dist/utils/nauth-logger.d.ts.map +1 -0
- package/dist/utils/nauth-logger.js +129 -0
- package/dist/utils/nauth-logger.js.map +1 -0
- package/dist/utils/pii-redactor.d.ts +16 -0
- package/dist/utils/pii-redactor.d.ts.map +1 -0
- package/dist/utils/pii-redactor.js +147 -0
- package/dist/utils/pii-redactor.js.map +1 -0
- package/dist/utils/setup/get-repositories.d.ts +16 -0
- package/dist/utils/setup/get-repositories.d.ts.map +1 -0
- package/dist/utils/setup/get-repositories.js +36 -0
- package/dist/utils/setup/get-repositories.js.map +1 -0
- package/dist/utils/setup/init-services.d.ts +41 -0
- package/dist/utils/setup/init-services.d.ts.map +1 -0
- package/dist/utils/setup/init-services.js +107 -0
- package/dist/utils/setup/init-services.js.map +1 -0
- package/dist/utils/setup/init-social.d.ts +13 -0
- package/dist/utils/setup/init-social.d.ts.map +1 -0
- package/dist/utils/setup/init-social.js +77 -0
- package/dist/utils/setup/init-social.js.map +1 -0
- package/dist/utils/setup/init-storage.d.ts +4 -0
- package/dist/utils/setup/init-storage.d.ts.map +1 -0
- package/dist/utils/setup/init-storage.js +79 -0
- package/dist/utils/setup/init-storage.js.map +1 -0
- package/dist/utils/setup/register-mfa.d.ts +5 -0
- package/dist/utils/setup/register-mfa.d.ts.map +1 -0
- package/dist/utils/setup/register-mfa.js +85 -0
- package/dist/utils/setup/register-mfa.js.map +1 -0
- package/dist/utils/setup/run-nauth-migrations.d.ts +5 -0
- package/dist/utils/setup/run-nauth-migrations.d.ts.map +1 -0
- package/dist/utils/setup/run-nauth-migrations.js +67 -0
- package/dist/utils/setup/run-nauth-migrations.js.map +1 -0
- package/dist/utils/token-delivery-policy.d.ts +6 -0
- package/dist/utils/token-delivery-policy.d.ts.map +1 -0
- package/dist/utils/token-delivery-policy.js +15 -0
- package/dist/utils/token-delivery-policy.js.map +1 -0
- package/dist/validators/template.validator.d.ts +7 -0
- package/dist/validators/template.validator.d.ts.map +1 -0
- package/dist/validators/template.validator.js +95 -0
- package/dist/validators/template.validator.js.map +1 -0
- package/jest.config.js +15 -0
- package/jest.setup.ts +6 -0
- package/package.json +73 -0
- package/src/adapters/database-columns.ts +165 -0
- package/src/adapters/express.adapter.ts +385 -0
- package/src/adapters/fastify.adapter.ts +416 -0
- package/src/adapters/index.ts +16 -0
- package/src/adapters/storage.factory.ts +143 -0
- package/src/bootstrap.ts +374 -0
- package/src/dto/auth-challenge.dto.ts +231 -0
- package/src/dto/auth-response.dto.ts +253 -0
- package/src/dto/challenge-response.dto.ts +234 -0
- package/src/dto/change-password-request.dto.ts +50 -0
- package/src/dto/change-password-response.dto.ts +29 -0
- package/src/dto/change-password.dto.ts +57 -0
- package/src/dto/error-response.dto.ts +136 -0
- package/src/dto/get-available-methods.dto.ts +55 -0
- package/src/dto/get-challenge-data-response.dto.ts +28 -0
- package/src/dto/get-challenge-data.dto.ts +69 -0
- package/src/dto/get-client-info.dto.ts +104 -0
- package/src/dto/get-device-token-response.dto.ts +25 -0
- package/src/dto/get-events-by-type.dto.ts +76 -0
- package/src/dto/get-ip-address-response.dto.ts +24 -0
- package/src/dto/get-mfa-status.dto.ts +94 -0
- package/src/dto/get-risk-assessment-history.dto.ts +39 -0
- package/src/dto/get-session-id-response.dto.ts +25 -0
- package/src/dto/get-setup-data-response.dto.ts +31 -0
- package/src/dto/get-setup-data.dto.ts +75 -0
- package/src/dto/get-suspicious-activity.dto.ts +42 -0
- package/src/dto/get-user-agent-response.dto.ts +23 -0
- package/src/dto/get-user-auth-history.dto.ts +95 -0
- package/src/dto/get-user-by-email.dto.ts +61 -0
- package/src/dto/get-user-by-id.dto.ts +46 -0
- package/src/dto/get-user-devices.dto.ts +53 -0
- package/src/dto/get-user-response.dto.ts +17 -0
- package/src/dto/has-provider.dto.ts +56 -0
- package/src/dto/index.ts +57 -0
- package/src/dto/is-trusted-device-response.dto.ts +34 -0
- package/src/dto/list-providers-response.dto.ts +23 -0
- package/src/dto/login.dto.ts +95 -0
- package/src/dto/logout-all-response.dto.ts +24 -0
- package/src/dto/logout-all.dto.ts +65 -0
- package/src/dto/logout-response.dto.ts +25 -0
- package/src/dto/logout.dto.ts +64 -0
- package/src/dto/refresh-token.dto.ts +36 -0
- package/src/dto/remove-devices.dto.ts +85 -0
- package/src/dto/resend-code-response.dto.ts +32 -0
- package/src/dto/resend-code.dto.ts +51 -0
- package/src/dto/reset-password.dto.ts +115 -0
- package/src/dto/respond-challenge.dto.ts +272 -0
- package/src/dto/set-mfa-exemption.dto.ts +112 -0
- package/src/dto/set-must-change-password-response.dto.ts +27 -0
- package/src/dto/set-must-change-password.dto.ts +46 -0
- package/src/dto/set-preferred-method.dto.ts +80 -0
- package/src/dto/setup-mfa.dto.ts +98 -0
- package/src/dto/signup.dto.ts +174 -0
- package/src/dto/social-auth.dto.ts +422 -0
- package/src/dto/trust-device-response.dto.ts +30 -0
- package/src/dto/trust-device.dto.ts +9 -0
- package/src/dto/update-user-attributes-request.dto.ts +51 -0
- package/src/dto/user-response.dto.ts +138 -0
- package/src/dto/user-update.dto.ts +222 -0
- package/src/dto/verify-email.dto.ts +313 -0
- package/src/dto/verify-mfa-code.dto.ts +103 -0
- package/src/dto/verify-phone-by-sub.dto.ts +78 -0
- package/src/dto/verify-phone.dto.ts +245 -0
- package/src/entities/auth-audit.entity.ts +232 -0
- package/src/entities/challenge-session.entity.ts +116 -0
- package/src/entities/index.ts +29 -0
- package/src/entities/login-attempt.entity.ts +64 -0
- package/src/entities/mfa-device.entity.ts +151 -0
- package/src/entities/rate-limit.entity.ts +44 -0
- package/src/entities/session.entity.ts +180 -0
- package/src/entities/social-account.entity.ts +96 -0
- package/src/entities/storage-lock.entity.ts +39 -0
- package/src/entities/trusted-device.entity.ts +112 -0
- package/src/entities/user.entity.ts +243 -0
- package/src/entities/verification-token.entity.ts +141 -0
- package/src/enums/auth-audit-event-type.enum.ts +360 -0
- package/src/enums/error-codes.enum.ts +420 -0
- package/src/enums/mfa-method.enum.ts +97 -0
- package/src/enums/risk-factor.enum.ts +111 -0
- package/src/exceptions/nauth.exception.ts +231 -0
- package/src/handlers/auth.handler.ts +260 -0
- package/src/handlers/client-info.handler.ts +101 -0
- package/src/handlers/csrf.handler.ts +156 -0
- package/src/handlers/token-delivery.handler.ts +118 -0
- package/src/index.ts +118 -0
- package/src/interfaces/client-info.interface.ts +85 -0
- package/src/interfaces/config.interface.ts +2135 -0
- package/src/interfaces/entities.interface.ts +226 -0
- package/src/interfaces/index.ts +15 -0
- package/src/interfaces/logger.interface.ts +283 -0
- package/src/interfaces/mfa-provider.interface.ts +154 -0
- package/src/interfaces/oauth.interface.ts +148 -0
- package/src/interfaces/provider.interface.ts +47 -0
- package/src/interfaces/social-auth-provider.interface.ts +131 -0
- package/src/interfaces/storage-adapter.interface.ts +82 -0
- package/src/interfaces/template.interface.ts +510 -0
- package/src/interfaces/token-verifier.interface.ts +110 -0
- package/src/internal.ts +178 -0
- package/src/platform/interfaces.ts +299 -0
- package/src/schemas/auth-config.schema.ts +646 -0
- package/src/services/adaptive-mfa-decision.service.spec.ts +1058 -0
- package/src/services/adaptive-mfa-decision.service.ts +457 -0
- package/src/services/auth-audit.service.spec.ts +675 -0
- package/src/services/auth-audit.service.ts +558 -0
- package/src/services/auth-challenge-helper.service.spec.ts +3227 -0
- package/src/services/auth-challenge-helper.service.ts +825 -0
- package/src/services/auth-flow-context-builder.service.ts +520 -0
- package/src/services/auth-flow-rules.ts +202 -0
- package/src/services/auth-flow-state-definitions.ts +190 -0
- package/src/services/auth-flow-state-machine.service.ts +207 -0
- package/src/services/auth-flow-state-machine.types.ts +316 -0
- package/src/services/auth.service.spec.ts +4195 -0
- package/src/services/auth.service.ts +3727 -0
- package/src/services/challenge.service.spec.ts +1363 -0
- package/src/services/challenge.service.ts +696 -0
- package/src/services/client-info.service.spec.ts +572 -0
- package/src/services/client-info.service.ts +374 -0
- package/src/services/csrf.service.ts +54 -0
- package/src/services/email-verification.service.spec.ts +1229 -0
- package/src/services/email-verification.service.ts +578 -0
- package/src/services/geo-location.service.spec.ts +603 -0
- package/src/services/geo-location.service.ts +599 -0
- package/src/services/index.ts +13 -0
- package/src/services/jwt.service.spec.ts +882 -0
- package/src/services/jwt.service.ts +621 -0
- package/src/services/mfa-base.service.spec.ts +246 -0
- package/src/services/mfa-base.service.ts +611 -0
- package/src/services/mfa.service.spec.ts +693 -0
- package/src/services/mfa.service.ts +960 -0
- package/src/services/password.service.spec.ts +166 -0
- package/src/services/password.service.ts +309 -0
- package/src/services/phone-verification.service.spec.ts +1120 -0
- package/src/services/phone-verification.service.ts +751 -0
- package/src/services/risk-detection.service.spec.ts +1292 -0
- package/src/services/risk-detection.service.ts +1012 -0
- package/src/services/risk-scoring.service.spec.ts +204 -0
- package/src/services/risk-scoring.service.ts +131 -0
- package/src/services/session.service.spec.ts +1293 -0
- package/src/services/session.service.ts +803 -0
- package/src/services/social-account.service.spec.ts +725 -0
- package/src/services/social-auth-base.service.spec.ts +418 -0
- package/src/services/social-auth-base.service.ts +581 -0
- package/src/services/social-auth.service.spec.ts +238 -0
- package/src/services/social-auth.service.ts +436 -0
- package/src/services/social-provider-registry.service.spec.ts +238 -0
- package/src/services/social-provider-registry.service.ts +122 -0
- package/src/services/trusted-device.service.spec.ts +505 -0
- package/src/services/trusted-device.service.ts +339 -0
- package/src/storage/account-lockout-storage.service.spec.ts +310 -0
- package/src/storage/account-lockout-storage.service.ts +89 -0
- package/src/storage/index.ts +3 -0
- package/src/storage/memory-storage.adapter.ts +443 -0
- package/src/storage/rate-limit-storage.service.spec.ts +247 -0
- package/src/storage/rate-limit-storage.service.ts +38 -0
- package/src/templates/html-template.engine.spec.ts +161 -0
- package/src/templates/html-template.engine.ts +688 -0
- package/src/templates/index.ts +7 -0
- package/src/utils/common-passwords.spec.ts +230 -0
- package/src/utils/common-passwords.ts +170 -0
- package/src/utils/context-storage.ts +188 -0
- package/src/utils/cookie-names.util.ts +67 -0
- package/src/utils/cookies.util.ts +94 -0
- package/src/utils/index.ts +12 -0
- package/src/utils/ip-extractor.spec.ts +330 -0
- package/src/utils/ip-extractor.ts +220 -0
- package/src/utils/nauth-logger.spec.ts +388 -0
- package/src/utils/nauth-logger.ts +215 -0
- package/src/utils/pii-redactor.spec.ts +130 -0
- package/src/utils/pii-redactor.ts +288 -0
- package/src/utils/setup/get-repositories.ts +140 -0
- package/src/utils/setup/init-services.ts +422 -0
- package/src/utils/setup/init-social.ts +189 -0
- package/src/utils/setup/init-storage.ts +94 -0
- package/src/utils/setup/register-mfa.ts +165 -0
- package/src/utils/setup/run-nauth-migrations.ts +61 -0
- package/src/utils/token-delivery-policy.ts +38 -0
- package/src/validators/template.validator.ts +219 -0
- package/tsconfig.json +37 -0
- package/tsconfig.lint.json +6 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"pii-redactor.d.ts","sourceRoot":"","sources":["../../src/utils/pii-redactor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAuBlF,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAgC;gBAOnC,OAAO,CAAC,EAAE,mBAAmB;IAoBzC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IA0CtC,cAAc,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,SAAS;IAoC/D,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,eAAe;IAoBvB,OAAO,CAAC,YAAY;IAiBpB,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,WAAW;IA2BnB,OAAO,CAAC,eAAe;IAiBvB,OAAO,CAAC,YAAY;CAqCrB"}
|
|
@@ -0,0 +1,147 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.PiiRedactor = void 0;
|
|
4
|
+
class PiiRedactor {
|
|
5
|
+
options;
|
|
6
|
+
constructor(options) {
|
|
7
|
+
this.options = {
|
|
8
|
+
redactEmails: true,
|
|
9
|
+
redactIpAddresses: true,
|
|
10
|
+
redactTokens: true,
|
|
11
|
+
redactPasswords: true,
|
|
12
|
+
redactPhoneNumbers: true,
|
|
13
|
+
redactNames: true,
|
|
14
|
+
customRedactionFields: ['ssn', 'creditCard', 'bankAccount'],
|
|
15
|
+
...options,
|
|
16
|
+
};
|
|
17
|
+
}
|
|
18
|
+
redactMessage(message) {
|
|
19
|
+
let redacted = message;
|
|
20
|
+
if (this.options.redactEmails) {
|
|
21
|
+
redacted = this.redactEmails(redacted);
|
|
22
|
+
}
|
|
23
|
+
if (this.options.redactIpAddresses) {
|
|
24
|
+
redacted = this.redactIpAddresses(redacted);
|
|
25
|
+
}
|
|
26
|
+
if (this.options.redactTokens) {
|
|
27
|
+
redacted = this.redactTokens(redacted);
|
|
28
|
+
}
|
|
29
|
+
if (this.options.redactPhoneNumbers) {
|
|
30
|
+
redacted = this.redactPhoneNumbers(redacted);
|
|
31
|
+
}
|
|
32
|
+
if (this.options.redactNames) {
|
|
33
|
+
redacted = this.redactNames(redacted);
|
|
34
|
+
}
|
|
35
|
+
if (this.options.redactPasswords) {
|
|
36
|
+
redacted = this.redactPasswords(redacted);
|
|
37
|
+
}
|
|
38
|
+
return redacted;
|
|
39
|
+
}
|
|
40
|
+
redactMetadata(metadata) {
|
|
41
|
+
if (!metadata) {
|
|
42
|
+
return undefined;
|
|
43
|
+
}
|
|
44
|
+
const redacted = { ...metadata };
|
|
45
|
+
if (redacted.ipAddress && this.options.redactIpAddresses) {
|
|
46
|
+
redacted.ipAddress = this.redactIpAddress(redacted.ipAddress);
|
|
47
|
+
}
|
|
48
|
+
for (const field of this.options.customRedactionFields) {
|
|
49
|
+
if (field in redacted) {
|
|
50
|
+
redacted[field] = '[REDACTED]';
|
|
51
|
+
}
|
|
52
|
+
}
|
|
53
|
+
for (const [key, value] of Object.entries(redacted)) {
|
|
54
|
+
if (typeof value === 'string') {
|
|
55
|
+
redacted[key] = this.redactMessage(value);
|
|
56
|
+
}
|
|
57
|
+
else if (typeof value === 'object' && value !== null && !(value instanceof Error)) {
|
|
58
|
+
redacted[key] = this.redactObject(value);
|
|
59
|
+
}
|
|
60
|
+
}
|
|
61
|
+
return redacted;
|
|
62
|
+
}
|
|
63
|
+
redactEmails(text) {
|
|
64
|
+
return text.replace(/\b([a-zA-Z0-9])([a-zA-Z0-9._-]+)@([a-zA-Z0-9.-]+)\.([a-zA-Z]{2,})\b/g, (_match, first, _local, _domain, tld) => {
|
|
65
|
+
return `${first}***@***.${tld}`;
|
|
66
|
+
});
|
|
67
|
+
}
|
|
68
|
+
redactIpAddresses(text) {
|
|
69
|
+
let redacted = text.replace(/\b(\d{1,3}\.\d{1,3}\.\d{1,3}\.)\d{1,3}\b/g, '$1***');
|
|
70
|
+
redacted = redacted.replace(/\b([0-9a-fA-F:]+):([0-9a-fA-F]+):([0-9a-fA-F]+):([0-9a-fA-F]+)\b/g, '$1:***:***:***');
|
|
71
|
+
return redacted;
|
|
72
|
+
}
|
|
73
|
+
redactIpAddress(ip) {
|
|
74
|
+
if (/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(ip)) {
|
|
75
|
+
const parts = ip.split('.');
|
|
76
|
+
return `${parts[0]}.${parts[1]}.${parts[2]}.***`;
|
|
77
|
+
}
|
|
78
|
+
if (ip.includes(':')) {
|
|
79
|
+
const parts = ip.split(':');
|
|
80
|
+
return `${parts.slice(0, 4).join(':')}:***:***:***`;
|
|
81
|
+
}
|
|
82
|
+
return ip;
|
|
83
|
+
}
|
|
84
|
+
redactTokens(text) {
|
|
85
|
+
let redacted = text.replace(/eyJ[A-Za-z0-9_-]{10,}/g, '[REDACTED_TOKEN]');
|
|
86
|
+
redacted = redacted.replace(/Bearer\s+[A-Za-z0-9_-]{20,}/gi, 'Bearer [REDACTED_TOKEN]');
|
|
87
|
+
redacted = redacted.replace(/\b[A-Za-z0-9]{40,}\b/g, '[REDACTED_TOKEN]');
|
|
88
|
+
return redacted;
|
|
89
|
+
}
|
|
90
|
+
redactPhoneNumbers(text) {
|
|
91
|
+
return text.replace(/\+?(\d{1,3})(\d{3,})(\d{4})\b/g, (_match, country, _middle, last) => {
|
|
92
|
+
return `+${country}***${last}`;
|
|
93
|
+
});
|
|
94
|
+
}
|
|
95
|
+
redactNames(text) {
|
|
96
|
+
let redacted = text.replace(/(firstName|lastName|first_name|last_name)["\s:=]+([^"'\s,}&]+)/gi, '$1=[REDACTED_NAME]');
|
|
97
|
+
const commonWords = /^(User|Login|Token|Phone|Email|Admin|System|Service|Client|Server|Request|Response|Success|Error|Warning|Info|Debug|Welcome|Hello|Account|Profile|Session|Device)$/i;
|
|
98
|
+
redacted = redacted.replace(/\b([A-Z][a-z]{2,})\s+([A-Z][a-z]{2,})\b/g, (match, first, last) => {
|
|
99
|
+
if (commonWords.test(first)) {
|
|
100
|
+
return match;
|
|
101
|
+
}
|
|
102
|
+
return `${first.charAt(0)}*** ${last.charAt(0)}***`;
|
|
103
|
+
});
|
|
104
|
+
return redacted;
|
|
105
|
+
}
|
|
106
|
+
redactPasswords(text) {
|
|
107
|
+
let redacted = text.replace(/(password|pwd|passwd|secret)["\s:=]+([^"'\s,}&]+)/gi, '$1=[REDACTED]');
|
|
108
|
+
redacted = redacted.replace(/\$argon2[^\s"',}]+/g, '[REDACTED_HASH]');
|
|
109
|
+
redacted = redacted.replace(/\$2[aby]\$\d+\$[./A-Za-z0-9]{53}/g, '[REDACTED_HASH]');
|
|
110
|
+
return redacted;
|
|
111
|
+
}
|
|
112
|
+
redactObject(obj, visited = new WeakSet()) {
|
|
113
|
+
if (typeof obj !== 'object' || obj === null) {
|
|
114
|
+
return obj;
|
|
115
|
+
}
|
|
116
|
+
if (visited.has(obj)) {
|
|
117
|
+
return '[Circular Reference]';
|
|
118
|
+
}
|
|
119
|
+
visited.add(obj);
|
|
120
|
+
try {
|
|
121
|
+
if (Array.isArray(obj)) {
|
|
122
|
+
return obj.map((item) => this.redactObject(item, visited));
|
|
123
|
+
}
|
|
124
|
+
const redacted = {};
|
|
125
|
+
for (const [key, value] of Object.entries(obj)) {
|
|
126
|
+
if (this.options.customRedactionFields.includes(key.toLowerCase())) {
|
|
127
|
+
redacted[key] = '[REDACTED]';
|
|
128
|
+
}
|
|
129
|
+
else if (typeof value === 'string') {
|
|
130
|
+
redacted[key] = this.redactMessage(value);
|
|
131
|
+
}
|
|
132
|
+
else if (typeof value === 'object' && value !== null) {
|
|
133
|
+
redacted[key] = this.redactObject(value, visited);
|
|
134
|
+
}
|
|
135
|
+
else {
|
|
136
|
+
redacted[key] = value;
|
|
137
|
+
}
|
|
138
|
+
}
|
|
139
|
+
return redacted;
|
|
140
|
+
}
|
|
141
|
+
catch {
|
|
142
|
+
return '[Object with circular references]';
|
|
143
|
+
}
|
|
144
|
+
}
|
|
145
|
+
}
|
|
146
|
+
exports.PiiRedactor = PiiRedactor;
|
|
147
|
+
//# sourceMappingURL=pii-redactor.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"pii-redactor.js","sourceRoot":"","sources":["../../src/utils/pii-redactor.ts"],"names":[],"mappings":";;;AAuBA,MAAa,WAAW;IACd,OAAO,CAAgC;IAO/C,YAAY,OAA6B;QAEvC,IAAI,CAAC,OAAO,GAAG;YACb,YAAY,EAAE,IAAI;YAClB,iBAAiB,EAAE,IAAI;YACvB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,IAAI;YACrB,kBAAkB,EAAE,IAAI;YACxB,WAAW,EAAE,IAAI;YACjB,qBAAqB,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,aAAa,CAAC;YAC3D,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAQD,aAAa,CAAC,OAAe;QAC3B,IAAI,QAAQ,GAAG,OAAO,CAAC;QAGvB,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC9B,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAGD,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACnC,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAGD,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC9B,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAGD,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACpC,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAGD,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAC7B,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAGD,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YACjC,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAQD,cAAc,CAAC,QAAsB;QACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAgB,EAAE,GAAG,QAAQ,EAAE,CAAC;QAG9C,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACzD,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC;QAGD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACvD,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACtB,QAAQ,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC;YACjC,CAAC;QACH,CAAC;QAGD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;gBAEpF,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAMO,YAAY,CAAC,IAAY;QAE/B,OAAO,IAAI,CAAC,OAAO,CACjB,sEAAsE,EACtE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAEtC,OAAO,GAAG,KAAK,WAAW,GAAG,EAAE,CAAC;QAClC,CAAC,CACF,CAAC;IACJ,CAAC;IAMO,iBAAiB,CAAC,IAAY;QAEpC,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,2CAA2C,EAAE,OAAO,CAAC,CAAC;QAGlF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,mEAAmE,EAAE,gBAAgB,CAAC,CAAC;QAEnH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAMO,eAAe,CAAC,EAAU;QAEhC,IAAI,sCAAsC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACnD,CAAC;QAGD,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;QACtD,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAMO,YAAY,CAAC,IAAY;QAE/B,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,kBAAkB,CAAC,CAAC;QAG1E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,+BAA+B,EAAE,yBAAyB,CAAC,CAAC;QAGxF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;QAEzE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAMO,kBAAkB,CAAC,IAAY;QAErC,OAAO,IAAI,CAAC,OAAO,CAAC,gCAAgC,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YACvF,OAAO,IAAI,OAAO,MAAM,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAMO,WAAW,CAAC,IAAY;QAE9B,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO,CACzB,kEAAkE,EAClE,oBAAoB,CACrB,CAAC;QAKF,MAAM,WAAW,GACf,qKAAqK,CAAC;QACxK,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,0CAA0C,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAE7F,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAMO,eAAe,CAAC,IAAY;QAElC,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,qDAAqD,EAAE,eAAe,CAAC,CAAC;QAGpG,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;QAGtE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,mCAAmC,EAAE,iBAAiB,CAAC,CAAC;QAEpF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAMO,YAAY,CAAC,GAAY,EAAE,UAAU,IAAI,OAAO,EAAU;QAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,GAAG,CAAC;QACb,CAAC;QAGD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAa,CAAC,EAAE,CAAC;YAC/B,OAAO,sBAAsB,CAAC;QAChC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAa,CAAC,CAAC;QAE3B,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,QAAQ,GAA4B,EAAE,CAAC;YAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAE/C,IAAI,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACnE,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;gBAC/B,CAAC;qBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACrC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC5C,CAAC;qBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACvD,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACpD,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACxB,CAAC;YACH,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YAEP,OAAO,mCAAmC,CAAC;QAC7C,CAAC;IACH,CAAC;CACF;AAxQD,kCAwQC"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import { DataSource, Repository } from 'typeorm';
|
|
2
|
+
import { BaseUser, BaseSession, BaseLoginAttempt, BaseVerificationToken, BaseSocialAccount, BaseChallengeSession, BaseMFADevice, BaseAuthAudit, BaseTrustedDevice, BaseRateLimit, BaseStorageLock } from '../../entities';
|
|
3
|
+
export declare function getRepositories(dataSource: DataSource): {
|
|
4
|
+
userRepository: Repository<BaseUser>;
|
|
5
|
+
sessionRepository: Repository<BaseSession>;
|
|
6
|
+
loginAttemptRepository: Repository<BaseLoginAttempt>;
|
|
7
|
+
verificationTokenRepository: Repository<BaseVerificationToken>;
|
|
8
|
+
socialAccountRepository: Repository<BaseSocialAccount>;
|
|
9
|
+
challengeSessionRepository: Repository<BaseChallengeSession>;
|
|
10
|
+
mfaDeviceRepository: Repository<BaseMFADevice>;
|
|
11
|
+
authAuditRepository: Repository<BaseAuthAudit>;
|
|
12
|
+
trustedDeviceRepository: Repository<BaseTrustedDevice> | null;
|
|
13
|
+
rateLimitRepository: Repository<BaseRateLimit> | null;
|
|
14
|
+
storageLockRepository: Repository<BaseStorageLock> | null;
|
|
15
|
+
};
|
|
16
|
+
//# sourceMappingURL=get-repositories.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"get-repositories.d.ts","sourceRoot":"","sources":["../../../src/utils/setup/get-repositories.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAkB,UAAU,EAAiB,MAAM,SAAS,CAAC;AAEhF,OAAO,EACL,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,eAAe,EAChB,MAAM,gBAAgB,CAAC;AAYxB,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG;IACvD,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,iBAAiB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAC3C,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACrD,2BAA2B,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC/D,uBAAuB,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACvD,0BAA0B,EAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC7D,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC/C,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC/C,uBAAuB,EAAE,UAAU,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC;IAC9D,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IACtD,qBAAqB,EAAE,UAAU,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;CAC3D,CAmCA"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.getRepositories = getRepositories;
|
|
4
|
+
const index_1 = require("../../index");
|
|
5
|
+
function getRepositories(dataSource) {
|
|
6
|
+
return {
|
|
7
|
+
userRepository: getRepository(dataSource, 'User', 'nauth_users', true),
|
|
8
|
+
sessionRepository: getRepository(dataSource, 'Session', 'nauth_sessions', true),
|
|
9
|
+
loginAttemptRepository: getRepository(dataSource, 'LoginAttempt', 'nauth_login_attempts', true),
|
|
10
|
+
verificationTokenRepository: getRepository(dataSource, 'VerificationToken', 'nauth_verification_tokens', true),
|
|
11
|
+
socialAccountRepository: getRepository(dataSource, 'SocialAccount', 'nauth_social_accounts', true),
|
|
12
|
+
challengeSessionRepository: getRepository(dataSource, 'ChallengeSession', 'nauth_challenge_sessions', true),
|
|
13
|
+
mfaDeviceRepository: getRepository(dataSource, 'MFADevice', 'nauth_mfa_devices', true),
|
|
14
|
+
authAuditRepository: getRepository(dataSource, 'AuthAudit', 'nauth_auth_audit', true),
|
|
15
|
+
trustedDeviceRepository: getRepository(dataSource, 'TrustedDevice', 'nauth_trusted_devices', false),
|
|
16
|
+
rateLimitRepository: getRepository(dataSource, 'RateLimit', 'nauth_rate_limits', false),
|
|
17
|
+
storageLockRepository: getRepository(dataSource, 'StorageLock', 'nauth_storage_locks', false),
|
|
18
|
+
};
|
|
19
|
+
}
|
|
20
|
+
function getRepository(dataSource, entityName, tableName, required) {
|
|
21
|
+
const metadataByTable = dataSource.entityMetadatas.find((m) => m.tableName === tableName);
|
|
22
|
+
if (metadataByTable) {
|
|
23
|
+
return dataSource.getRepository(metadataByTable.target);
|
|
24
|
+
}
|
|
25
|
+
const metadataByName = dataSource.entityMetadatas.find((m) => typeof m.target === 'function' && m.target.name === entityName);
|
|
26
|
+
if (metadataByName && typeof metadataByName.target === 'function') {
|
|
27
|
+
return dataSource.getRepository(metadataByName.target);
|
|
28
|
+
}
|
|
29
|
+
if (required) {
|
|
30
|
+
throw new index_1.NAuthException(index_1.AuthErrorCode.VALIDATION_FAILED, `${entityName} entity not found in DataSource. ` +
|
|
31
|
+
`Make sure entities are registered in DataSource configuration. ` +
|
|
32
|
+
`Expected table name: ${tableName}`);
|
|
33
|
+
}
|
|
34
|
+
return null;
|
|
35
|
+
}
|
|
36
|
+
//# sourceMappingURL=get-repositories.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"get-repositories.js","sourceRoot":"","sources":["../../../src/utils/setup/get-repositories.ts"],"names":[],"mappings":";;AAiCA,0CA+CC;AAxED,uCAA4D;AAyB5D,SAAgB,eAAe,CAAC,UAAsB;IAapD,OAAO;QACL,cAAc,EAAE,aAAa,CAAW,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC;QAChF,iBAAiB,EAAE,aAAa,CAAc,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC;QAC5F,sBAAsB,EAAE,aAAa,CAAmB,UAAU,EAAE,cAAc,EAAE,sBAAsB,EAAE,IAAI,CAAC;QACjH,2BAA2B,EAAE,aAAa,CACxC,UAAU,EACV,mBAAmB,EACnB,2BAA2B,EAC3B,IAAI,CACL;QACD,uBAAuB,EAAE,aAAa,CACpC,UAAU,EACV,eAAe,EACf,uBAAuB,EACvB,IAAI,CACL;QACD,0BAA0B,EAAE,aAAa,CACvC,UAAU,EACV,kBAAkB,EAClB,0BAA0B,EAC1B,IAAI,CACL;QACD,mBAAmB,EAAE,aAAa,CAAgB,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,IAAI,CAAC;QACrG,mBAAmB,EAAE,aAAa,CAAgB,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,CAAC;QAEpG,uBAAuB,EAAE,aAAa,CACpC,UAAU,EACV,eAAe,EACf,uBAAuB,EACvB,KAAK,CACN;QACD,mBAAmB,EAAE,aAAa,CAAgB,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,KAAK,CAAC;QACtG,qBAAqB,EAAE,aAAa,CAAkB,UAAU,EAAE,aAAa,EAAE,qBAAqB,EAAE,KAAK,CAAC;KAC/G,CAAC;AACJ,CAAC;AAyBD,SAAS,aAAa,CACpB,UAAsB,EACtB,UAAkB,EAClB,SAAiB,EACjB,QAAiB;IAGjB,MAAM,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAE1G,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC,aAAa,CAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAGD,MAAM,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC,IAAI,CACpD,CAAC,CAAiB,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CACtF,CAAC;IAEF,IAAI,cAAc,IAAI,OAAO,cAAc,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClE,OAAO,UAAU,CAAC,aAAa,CAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAGD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,sBAAc,CACtB,qBAAa,CAAC,iBAAiB,EAC/B,GAAG,UAAU,mCAAmC;YAC9C,iEAAiE;YACjE,wBAAwB,SAAS,EAAE,CACtC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
|
|
@@ -0,0 +1,41 @@
|
|
|
1
|
+
import { Repository } from 'typeorm';
|
|
2
|
+
import { NAuthConfig, NAuthLogger, StorageAdapter, ClientInfoService, RateLimitStorageService, AccountLockoutStorageService, EmailVerificationService, PhoneVerificationService, MFAService, AuthService, SocialAuthService } from '../../index';
|
|
3
|
+
import { PasswordService, JwtService, SessionService, AuthAuditService, ChallengeService, TrustedDeviceService, AuthFlowContextBuilder, AuthFlowStateMachineService, AuthChallengeHelperService, SocialProviderRegistry, GeoLocationService, RiskDetectionService, RiskScoringService, AdaptiveMFADecisionService } from '../../internal';
|
|
4
|
+
import { BaseUser, BaseSession, BaseLoginAttempt, BaseVerificationToken, BaseSocialAccount, BaseChallengeSession, BaseMFADevice, BaseAuthAudit, BaseTrustedDevice } from '../../entities';
|
|
5
|
+
export interface NAuthServices {
|
|
6
|
+
passwordService: PasswordService;
|
|
7
|
+
jwtService: JwtService;
|
|
8
|
+
clientInfoService: ClientInfoService;
|
|
9
|
+
rateLimitStorageService: RateLimitStorageService;
|
|
10
|
+
accountLockoutStorageService: AccountLockoutStorageService;
|
|
11
|
+
sessionService: SessionService;
|
|
12
|
+
challengeService: ChallengeService;
|
|
13
|
+
emailVerificationService: EmailVerificationService;
|
|
14
|
+
authFlowContextBuilder: AuthFlowContextBuilder;
|
|
15
|
+
authFlowStateMachine: AuthFlowStateMachineService;
|
|
16
|
+
authChallengeHelperService: AuthChallengeHelperService;
|
|
17
|
+
authService: AuthService;
|
|
18
|
+
socialProviderRegistry: SocialProviderRegistry;
|
|
19
|
+
socialAuthService: SocialAuthService;
|
|
20
|
+
auditService?: AuthAuditService;
|
|
21
|
+
phoneVerificationService?: PhoneVerificationService;
|
|
22
|
+
trustedDeviceService?: TrustedDeviceService;
|
|
23
|
+
mfaService?: MFAService;
|
|
24
|
+
geoLocationService?: GeoLocationService;
|
|
25
|
+
riskDetectionService?: RiskDetectionService;
|
|
26
|
+
riskScoringService?: RiskScoringService;
|
|
27
|
+
adaptiveMFADecisionService?: AdaptiveMFADecisionService;
|
|
28
|
+
csrfService?: unknown;
|
|
29
|
+
}
|
|
30
|
+
export declare function initServices(config: NAuthConfig, repositories: {
|
|
31
|
+
userRepository: Repository<BaseUser>;
|
|
32
|
+
sessionRepository: Repository<BaseSession>;
|
|
33
|
+
loginAttemptRepository: Repository<BaseLoginAttempt>;
|
|
34
|
+
verificationTokenRepository: Repository<BaseVerificationToken>;
|
|
35
|
+
socialAccountRepository: Repository<BaseSocialAccount>;
|
|
36
|
+
challengeSessionRepository: Repository<BaseChallengeSession>;
|
|
37
|
+
mfaDeviceRepository: Repository<BaseMFADevice>;
|
|
38
|
+
authAuditRepository: Repository<BaseAuthAudit>;
|
|
39
|
+
trustedDeviceRepository: Repository<BaseTrustedDevice> | null;
|
|
40
|
+
}, storageAdapter: StorageAdapter, logger: NAuthLogger, emailProvider: unknown, smsProvider?: unknown): NAuthServices;
|
|
41
|
+
//# sourceMappingURL=init-services.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"init-services.d.ts","sourceRoot":"","sources":["../../../src/utils/setup/init-services.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACL,WAAW,EACX,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,UAAU,EACV,WAAW,EACX,iBAAiB,EAGlB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,0BAA0B,EAC1B,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,0BAA0B,EAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAKxB,MAAM,WAAW,aAAa;IAE5B,eAAe,EAAE,eAAe,CAAC;IACjC,UAAU,EAAE,UAAU,CAAC;IACvB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,uBAAuB,EAAE,uBAAuB,CAAC;IACjD,4BAA4B,EAAE,4BAA4B,CAAC;IAC3D,cAAc,EAAE,cAAc,CAAC;IAC/B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,wBAAwB,EAAE,wBAAwB,CAAC;IACnD,sBAAsB,EAAE,sBAAsB,CAAC;IAC/C,oBAAoB,EAAE,2BAA2B,CAAC;IAClD,0BAA0B,EAAE,0BAA0B,CAAC;IACvD,WAAW,EAAE,WAAW,CAAC;IACzB,sBAAsB,EAAE,sBAAsB,CAAC;IAC/C,iBAAiB,EAAE,iBAAiB,CAAC;IAGrC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,0BAA0B,CAAC,EAAE,0BAA0B,CAAC;IACxD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AA+BD,wBAAgB,YAAY,CAC1B,MAAM,EAAE,WAAW,EACnB,YAAY,EAAE;IACZ,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,iBAAiB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAC3C,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACrD,2BAA2B,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC/D,uBAAuB,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACvD,0BAA0B,EAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;IAC7D,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC/C,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC/C,uBAAuB,EAAE,UAAU,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC;CAC/D,EACD,cAAc,EAAE,cAAc,EAC9B,MAAM,EAAE,WAAW,EACnB,aAAa,EAAE,OAAO,EACtB,WAAW,CAAC,EAAE,OAAO,GACpB,aAAa,CAkSf"}
|
|
@@ -0,0 +1,107 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.initServices = initServices;
|
|
4
|
+
const index_1 = require("../../index");
|
|
5
|
+
const internal_1 = require("../../internal");
|
|
6
|
+
function initServices(config, repositories, storageAdapter, logger, emailProvider, smsProvider) {
|
|
7
|
+
const passwordService = new internal_1.PasswordService(config.password);
|
|
8
|
+
const jwtService = new internal_1.JwtService(config.jwt);
|
|
9
|
+
const clientInfoService = new index_1.ClientInfoService();
|
|
10
|
+
const auditService = config.auditLogs?.enabled !== false
|
|
11
|
+
? new internal_1.AuthAuditService(repositories.authAuditRepository, repositories.userRepository, logger, clientInfoService)
|
|
12
|
+
: undefined;
|
|
13
|
+
const rateLimitStorageService = new index_1.RateLimitStorageService(storageAdapter);
|
|
14
|
+
const accountLockoutStorageService = new index_1.AccountLockoutStorageService(storageAdapter);
|
|
15
|
+
const sessionService = new internal_1.SessionService(repositories.sessionRepository, storageAdapter, clientInfoService, config, logger, auditService);
|
|
16
|
+
const challengeService = new internal_1.ChallengeService(repositories.challengeSessionRepository, clientInfoService, logger, auditService, config);
|
|
17
|
+
if (!emailProvider) {
|
|
18
|
+
throw new index_1.NAuthException(index_1.AuthErrorCode.VALIDATION_FAILED, 'emailProvider is required. Install and configure an email package:\n' +
|
|
19
|
+
' yarn add @nauth-toolkit/email-console (for dev)\n' +
|
|
20
|
+
' yarn add @nauth-toolkit/email-nodemailer (for production)');
|
|
21
|
+
}
|
|
22
|
+
if (typeof emailProvider.sendVerificationEmail !== 'function') {
|
|
23
|
+
throw new index_1.NAuthException(index_1.AuthErrorCode.VALIDATION_FAILED, 'emailProvider must implement sendVerificationEmail method');
|
|
24
|
+
}
|
|
25
|
+
if (emailProvider && typeof emailProvider.setLogger === 'function') {
|
|
26
|
+
emailProvider.setLogger(logger);
|
|
27
|
+
}
|
|
28
|
+
if (emailProvider && typeof emailProvider.setGlobalVariables === 'function' && config.email) {
|
|
29
|
+
const globalVars = {};
|
|
30
|
+
if (config.email.appName)
|
|
31
|
+
globalVars.appName = config.email.appName;
|
|
32
|
+
if (config.email.companyName)
|
|
33
|
+
globalVars.companyName = config.email.companyName;
|
|
34
|
+
if (config.email.logoUrl)
|
|
35
|
+
globalVars.logoUrl = config.email.logoUrl;
|
|
36
|
+
if (config.email.supportEmail)
|
|
37
|
+
globalVars.supportEmail = config.email.supportEmail;
|
|
38
|
+
if (config.email.dashboardUrl)
|
|
39
|
+
globalVars.dashboardUrl = config.email.dashboardUrl;
|
|
40
|
+
if (config.email.brandColor)
|
|
41
|
+
globalVars.brandColor = config.email.brandColor;
|
|
42
|
+
if (config.email.footerDisclaimer)
|
|
43
|
+
globalVars.footerDisclaimer = config.email.footerDisclaimer;
|
|
44
|
+
const mergedVars = {
|
|
45
|
+
...globalVars,
|
|
46
|
+
...(config.email.templates?.globalVariables || {}),
|
|
47
|
+
};
|
|
48
|
+
emailProvider.setGlobalVariables(mergedVars);
|
|
49
|
+
}
|
|
50
|
+
const emailVerificationService = new index_1.EmailVerificationService(repositories.verificationTokenRepository, repositories.userRepository, emailProvider, storageAdapter, config, clientInfoService, logger, auditService);
|
|
51
|
+
let phoneVerificationService;
|
|
52
|
+
if (smsProvider) {
|
|
53
|
+
if (smsProvider && typeof smsProvider.setLogger === 'function') {
|
|
54
|
+
smsProvider.setLogger(logger);
|
|
55
|
+
}
|
|
56
|
+
phoneVerificationService = new index_1.PhoneVerificationService(repositories.verificationTokenRepository, repositories.userRepository, smsProvider, storageAdapter, config, clientInfoService, logger, auditService);
|
|
57
|
+
}
|
|
58
|
+
const trustedDeviceService = repositories.trustedDeviceRepository
|
|
59
|
+
? new internal_1.TrustedDeviceService(config, logger, repositories.trustedDeviceRepository)
|
|
60
|
+
: undefined;
|
|
61
|
+
const authFlowContextBuilder = new internal_1.AuthFlowContextBuilder(trustedDeviceService, undefined, clientInfoService, logger);
|
|
62
|
+
const authFlowStateMachine = new internal_1.AuthFlowStateMachineService(authFlowContextBuilder, logger);
|
|
63
|
+
const authChallengeHelperService = new internal_1.AuthChallengeHelperService(challengeService, jwtService, sessionService, repositories.mfaDeviceRepository, logger, authFlowStateMachine, authFlowContextBuilder, clientInfoService, emailVerificationService, phoneVerificationService);
|
|
64
|
+
const mfaService = new index_1.MFAService(repositories.mfaDeviceRepository, repositories.userRepository, challengeService, config, logger, auditService, clientInfoService);
|
|
65
|
+
const authService = new index_1.AuthService(repositories.userRepository, repositories.loginAttemptRepository, passwordService, jwtService, sessionService, challengeService, authChallengeHelperService, emailVerificationService, clientInfoService, accountLockoutStorageService, config, logger, auditService, phoneVerificationService, mfaService, repositories.mfaDeviceRepository, trustedDeviceService);
|
|
66
|
+
const socialProviderRegistry = new internal_1.SocialProviderRegistry();
|
|
67
|
+
const socialAuthService = new index_1.SocialAuthService(socialProviderRegistry, repositories.userRepository, repositories.socialAccountRepository, authService, logger, auditService);
|
|
68
|
+
let geoLocationService;
|
|
69
|
+
if (config.geoLocation?.maxMind) {
|
|
70
|
+
try {
|
|
71
|
+
const maxMindModule = require('@maxmind/geoip2-node');
|
|
72
|
+
geoLocationService = new internal_1.GeoLocationService(config, storageAdapter, maxMindModule, logger);
|
|
73
|
+
}
|
|
74
|
+
catch {
|
|
75
|
+
logger?.warn?.('MaxMind GeoIP2 module not installed. Geolocation features will be disabled.');
|
|
76
|
+
}
|
|
77
|
+
}
|
|
78
|
+
const riskDetectionService = new internal_1.RiskDetectionService(repositories.sessionRepository, repositories.authAuditRepository, config, logger, trustedDeviceService);
|
|
79
|
+
const riskScoringService = new internal_1.RiskScoringService(config, logger);
|
|
80
|
+
const adaptiveMFADecisionService = new internal_1.AdaptiveMFADecisionService(riskDetectionService, riskScoringService, storageAdapter, clientInfoService, config, logger, auditService);
|
|
81
|
+
authFlowContextBuilder.adaptiveMFADecisionService = adaptiveMFADecisionService;
|
|
82
|
+
return {
|
|
83
|
+
passwordService,
|
|
84
|
+
jwtService,
|
|
85
|
+
clientInfoService,
|
|
86
|
+
rateLimitStorageService,
|
|
87
|
+
accountLockoutStorageService,
|
|
88
|
+
sessionService,
|
|
89
|
+
challengeService,
|
|
90
|
+
emailVerificationService,
|
|
91
|
+
authFlowContextBuilder,
|
|
92
|
+
authFlowStateMachine,
|
|
93
|
+
authChallengeHelperService,
|
|
94
|
+
authService,
|
|
95
|
+
socialProviderRegistry,
|
|
96
|
+
socialAuthService,
|
|
97
|
+
auditService,
|
|
98
|
+
phoneVerificationService,
|
|
99
|
+
trustedDeviceService,
|
|
100
|
+
mfaService,
|
|
101
|
+
geoLocationService,
|
|
102
|
+
riskDetectionService,
|
|
103
|
+
riskScoringService,
|
|
104
|
+
adaptiveMFADecisionService,
|
|
105
|
+
};
|
|
106
|
+
}
|
|
107
|
+
//# sourceMappingURL=init-services.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"init-services.js","sourceRoot":"","sources":["../../../src/utils/setup/init-services.ts"],"names":[],"mappings":";;AAkHA,oCAmTC;AA5ZD,uCAcqB;AAErB,6CAewB;AA0ExB,SAAgB,YAAY,CAC1B,MAAmB,EACnB,YAUC,EACD,cAA8B,EAC9B,MAAmB,EACnB,aAAsB,EACtB,WAAqB;IAMrB,MAAM,eAAe,GAAG,IAAI,0BAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,qBAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,IAAI,yBAAiB,EAAE,CAAC;IAMlD,MAAM,YAAY,GAChB,MAAM,CAAC,SAAS,EAAE,OAAO,KAAK,KAAK;QACjC,CAAC,CAAC,IAAI,2BAAgB,CAAC,YAAY,CAAC,mBAAmB,EAAE,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,iBAAiB,CAAC;QAChH,CAAC,CAAC,SAAS,CAAC;IAMhB,MAAM,uBAAuB,GAAG,IAAI,+BAAuB,CAAC,cAAc,CAAC,CAAC;IAC5E,MAAM,4BAA4B,GAAG,IAAI,oCAA4B,CAAC,cAAc,CAAC,CAAC;IAMtF,MAAM,cAAc,GAAG,IAAI,yBAAc,CACvC,YAAY,CAAC,iBAAiB,EAC9B,cAAc,EACd,iBAAiB,EACjB,MAAM,EACN,MAAM,EACN,YAAY,CACb,CAAC;IAMF,MAAM,gBAAgB,GAAG,IAAI,2BAAgB,CAC3C,YAAY,CAAC,0BAA0B,EACvC,iBAAiB,EACjB,MAAM,EACN,YAAY,EACZ,MAAM,CACP,CAAC;IAMF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,sBAAc,CACtB,qBAAa,CAAC,iBAAiB,EAC/B,sEAAsE;YACpE,qDAAqD;YACrD,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAGD,IAAI,OAAQ,aAAqB,CAAC,qBAAqB,KAAK,UAAU,EAAE,CAAC;QACvE,MAAM,IAAI,sBAAc,CACtB,qBAAa,CAAC,iBAAiB,EAC/B,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IAGD,IAAI,aAAa,IAAI,OAAQ,aAAqB,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAC3E,aAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAGD,IAAI,aAAa,IAAI,OAAQ,aAAqB,CAAC,kBAAkB,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACrG,MAAM,UAAU,GAAwB,EAAE,CAAC;QAE3C,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO;YAAE,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QACpE,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW;YAAE,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAChF,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO;YAAE,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QACpE,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY;YAAE,UAAU,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QACnF,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY;YAAE,UAAU,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QACnF,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU;YAAE,UAAU,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7E,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB;YAAE,UAAU,CAAC,gBAAgB,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAE/F,MAAM,UAAU,GAAG;YACjB,GAAG,UAAU;YACb,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,IAAI,EAAE,CAAC;SACnD,CAAC;QACD,aAAqB,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,wBAAwB,GAAG,IAAI,gCAAwB,CAC3D,YAAY,CAAC,2BAA2B,EACxC,YAAY,CAAC,cAAc,EAC3B,aAAoB,EACpB,cAAc,EACd,MAAM,EACN,iBAAiB,EACjB,MAAM,EACN,YAAY,CACb,CAAC;IAMF,IAAI,wBAA8D,CAAC;IAEnE,IAAI,WAAW,EAAE,CAAC;QAEhB,IAAI,WAAW,IAAI,OAAQ,WAAmB,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACvE,WAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,wBAAwB,GAAG,IAAI,gCAAwB,CACrD,YAAY,CAAC,2BAA2B,EACxC,YAAY,CAAC,cAAc,EAC3B,WAAkB,EAClB,cAAc,EACd,MAAM,EACN,iBAAiB,EACjB,MAAM,EACN,YAAY,CACb,CAAC;IACJ,CAAC;IAMD,MAAM,oBAAoB,GAAG,YAAY,CAAC,uBAAuB;QAC/D,CAAC,CAAC,IAAI,+BAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,uBAAuB,CAAC;QAChF,CAAC,CAAC,SAAS,CAAC;IAMd,MAAM,sBAAsB,GAAG,IAAI,iCAAsB,CACvD,oBAAoB,EACpB,SAAS,EACT,iBAAiB,EACjB,MAAM,CACP,CAAC;IAEF,MAAM,oBAAoB,GAAG,IAAI,sCAA2B,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAE7F,MAAM,0BAA0B,GAAG,IAAI,qCAA0B,CAC/D,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,YAAY,CAAC,mBAAmB,EAChC,MAAM,EACN,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,CACzB,CAAC;IAMF,MAAM,UAAU,GAAG,IAAI,kBAAU,CAC/B,YAAY,CAAC,mBAAmB,EAChC,YAAY,CAAC,cAAc,EAC3B,gBAAgB,EAChB,MAAM,EACN,MAAM,EACN,YAAY,EACZ,iBAAiB,CAClB,CAAC;IAMF,MAAM,WAAW,GAAG,IAAI,mBAAW,CACjC,YAAY,CAAC,cAAc,EAC3B,YAAY,CAAC,sBAAsB,EACnC,eAAe,EACf,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,0BAA0B,EAC1B,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,EAC5B,MAAM,EACN,MAAM,EACN,YAAY,EACZ,wBAAwB,EACxB,UAAU,EACV,YAAY,CAAC,mBAAmB,EAChC,oBAAoB,CACrB,CAAC;IAMF,MAAM,sBAAsB,GAAG,IAAI,iCAAsB,EAAE,CAAC;IAE5D,MAAM,iBAAiB,GAAG,IAAI,yBAAiB,CAC7C,sBAAsB,EACtB,YAAY,CAAC,cAAc,EAC3B,YAAY,CAAC,uBAAuB,EACpC,WAAW,EACX,MAAM,EACN,YAAY,CACb,CAAC;IAMF,IAAI,kBAAkD,CAAC;IAEvD,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC;YAEH,MAAM,aAAa,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;YACtD,kBAAkB,GAAG,IAAI,6BAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QAC7F,CAAC;QAAC,MAAM,CAAC;YAEP,MAAM,EAAE,IAAI,EAAE,CAAC,6EAA6E,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAOD,MAAM,oBAAoB,GAAG,IAAI,+BAAoB,CACnD,YAAY,CAAC,iBAAiB,EAC9B,YAAY,CAAC,mBAAmB,EAChC,MAAM,EACN,MAAM,EACN,oBAAoB,CACrB,CAAC;IAEF,MAAM,kBAAkB,GAAG,IAAI,6BAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElE,MAAM,0BAA0B,GAAG,IAAI,qCAA0B,CAC/D,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,MAAM,EACN,MAAM,EACN,YAAY,CACb,CAAC;IAGD,sBAA8B,CAAC,0BAA0B,GAAG,0BAA0B,CAAC;IAMxF,OAAO;QACL,eAAe;QACf,UAAU;QACV,iBAAiB;QACjB,uBAAuB;QACvB,4BAA4B;QAC5B,cAAc;QACd,gBAAgB;QAChB,wBAAwB;QACxB,sBAAsB;QACtB,oBAAoB;QACpB,0BAA0B;QAC1B,WAAW;QACX,sBAAsB;QACtB,iBAAiB;QACjB,YAAY;QACZ,wBAAwB;QACxB,oBAAoB;QACpB,UAAU;QACV,kBAAkB;QAClB,oBAAoB;QACpB,kBAAkB;QAClB,0BAA0B;KAC3B,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
import { NAuthConfig, NAuthLogger, SocialAuthService, AuthService, ClientInfoService, AuthAuditService, PhoneVerificationService, BaseUser } from '../../index';
|
|
2
|
+
import { JwtService, SessionService, AuthChallengeHelperService, SocialProviderRegistry, TrustedDeviceService } from '../../internal';
|
|
3
|
+
import { Repository } from 'typeorm';
|
|
4
|
+
export interface NAuthSocialProviders {
|
|
5
|
+
googleAuth?: any;
|
|
6
|
+
appleAuth?: any;
|
|
7
|
+
facebookAuth?: any;
|
|
8
|
+
}
|
|
9
|
+
export declare function initSocialAuth(config: NAuthConfig, providerRegistry: SocialProviderRegistry, authService: AuthService, socialAuthService: SocialAuthService, jwtService: JwtService, sessionService: SessionService, challengeHelper: AuthChallengeHelperService, clientInfoService: ClientInfoService, logger: NAuthLogger, socialAuthStateStore: Map<string, {
|
|
10
|
+
timestamp: number;
|
|
11
|
+
provider: string;
|
|
12
|
+
}>, userRepository: Repository<BaseUser>, phoneVerificationService?: PhoneVerificationService, auditService?: AuthAuditService, trustedDeviceService?: TrustedDeviceService): Promise<NAuthSocialProviders>;
|
|
13
|
+
//# sourceMappingURL=init-social.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"init-social.d.ts","sourceRoot":"","sources":["../../../src/utils/setup/init-social.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACxB,QAAQ,EACT,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,UAAU,EACV,cAAc,EACd,0BAA0B,EAC1B,sBAAsB,EACtB,oBAAoB,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,YAAY,CAAC,EAAE,GAAG,CAAC;CACpB;AAwBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,WAAW,EACnB,gBAAgB,EAAE,sBAAsB,EACxC,WAAW,EAAE,WAAW,EACxB,iBAAiB,EAAE,iBAAiB,EACpC,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,cAAc,EAC9B,eAAe,EAAE,0BAA0B,EAC3C,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,WAAW,EACnB,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1E,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,EACpC,wBAAwB,CAAC,EAAE,wBAAwB,EACnD,YAAY,CAAC,EAAE,gBAAgB,EAC/B,oBAAoB,CAAC,EAAE,oBAAoB,GAC1C,OAAO,CAAC,oBAAoB,CAAC,CAsH/B"}
|
|
@@ -0,0 +1,77 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.initSocialAuth = initSocialAuth;
|
|
37
|
+
async function initSocialAuth(config, providerRegistry, authService, socialAuthService, jwtService, sessionService, challengeHelper, clientInfoService, logger, socialAuthStateStore, userRepository, phoneVerificationService, auditService, trustedDeviceService) {
|
|
38
|
+
const providers = {};
|
|
39
|
+
if (config.social?.google?.enabled) {
|
|
40
|
+
try {
|
|
41
|
+
const { GoogleSocialAuthService, TokenVerifierService } = await Promise.resolve().then(() => __importStar(require('@nauth-toolkit/social-google')));
|
|
42
|
+
const tokenVerifier = new TokenVerifierService(config);
|
|
43
|
+
providers.googleAuth = new GoogleSocialAuthService(config, logger, authService, socialAuthService, jwtService, sessionService, challengeHelper, clientInfoService, socialAuthStateStore, userRepository, phoneVerificationService, auditService, trustedDeviceService, tokenVerifier);
|
|
44
|
+
providerRegistry.registerProvider(providers.googleAuth);
|
|
45
|
+
logger?.debug?.('Google OAuth provider initialized');
|
|
46
|
+
}
|
|
47
|
+
catch (error) {
|
|
48
|
+
logger?.warn?.('Google OAuth provider not available. Install @nauth-toolkit/social-google to enable Google authentication.');
|
|
49
|
+
}
|
|
50
|
+
}
|
|
51
|
+
if (config.social?.apple?.enabled) {
|
|
52
|
+
try {
|
|
53
|
+
const { AppleSocialAuthService, TokenVerifierService } = await Promise.resolve().then(() => __importStar(require('@nauth-toolkit/social-apple')));
|
|
54
|
+
const tokenVerifier = new TokenVerifierService(config);
|
|
55
|
+
providers.appleAuth = new AppleSocialAuthService(config, logger, authService, socialAuthService, jwtService, sessionService, challengeHelper, clientInfoService, socialAuthStateStore, userRepository, phoneVerificationService, auditService, trustedDeviceService, tokenVerifier);
|
|
56
|
+
providerRegistry.registerProvider(providers.appleAuth);
|
|
57
|
+
logger?.debug?.('Apple Sign-In provider initialized');
|
|
58
|
+
}
|
|
59
|
+
catch (error) {
|
|
60
|
+
logger?.warn?.('Apple Sign-In provider not available. Install @nauth-toolkit/social-apple to enable Apple authentication.');
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
if (config.social?.facebook?.enabled) {
|
|
64
|
+
try {
|
|
65
|
+
const { FacebookSocialAuthService, TokenVerifierService } = await Promise.resolve().then(() => __importStar(require('@nauth-toolkit/social-facebook')));
|
|
66
|
+
const tokenVerifier = new TokenVerifierService(config);
|
|
67
|
+
providers.facebookAuth = new FacebookSocialAuthService(config, logger, authService, socialAuthService, jwtService, sessionService, challengeHelper, clientInfoService, socialAuthStateStore, userRepository, phoneVerificationService, auditService, trustedDeviceService, tokenVerifier);
|
|
68
|
+
providerRegistry.registerProvider(providers.facebookAuth);
|
|
69
|
+
logger?.debug?.('Facebook OAuth provider initialized');
|
|
70
|
+
}
|
|
71
|
+
catch (error) {
|
|
72
|
+
logger?.warn?.('Facebook OAuth provider not available. Install @nauth-toolkit/social-facebook to enable Facebook authentication.');
|
|
73
|
+
}
|
|
74
|
+
}
|
|
75
|
+
return providers;
|
|
76
|
+
}
|
|
77
|
+
//# sourceMappingURL=init-social.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"init-social.js","sourceRoot":"","sources":["../../../src/utils/setup/init-social.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuDA,wCAqIC;AArIM,KAAK,UAAU,cAAc,CAClC,MAAmB,EACnB,gBAAwC,EACxC,WAAwB,EACxB,iBAAoC,EACpC,UAAsB,EACtB,cAA8B,EAC9B,eAA2C,EAC3C,iBAAoC,EACpC,MAAmB,EACnB,oBAA0E,EAC1E,cAAoC,EACpC,wBAAmD,EACnD,YAA+B,EAC/B,oBAA2C;IAE3C,MAAM,SAAS,GAAyB,EAAE,CAAC;IAK3C,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC;YAEH,MAAM,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,GAAG,wDAAa,8BAA8B,GAAC,CAAC;YAGvG,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAEvD,SAAS,CAAC,UAAU,GAAG,IAAI,uBAAuB,CAChD,MAAM,EACN,MAAM,EACN,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,YAAY,EACZ,oBAAoB,EACpB,aAAa,CACd,CAAC;YAGF,gBAAgB,CAAC,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,IAAI,EAAE,CACZ,4GAA4G,CAC7G,CAAC;QACJ,CAAC;IACH,CAAC;IAKD,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC;YAEH,MAAM,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,GAAG,wDAAa,6BAA6B,GAAC,CAAC;YAGrG,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAEvD,SAAS,CAAC,SAAS,GAAG,IAAI,sBAAsB,CAC9C,MAAM,EACN,MAAM,EACN,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,YAAY,EACZ,oBAAoB,EACpB,aAAa,CACd,CAAC;YAGF,gBAAgB,CAAC,gBAAgB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,EAAE,KAAK,EAAE,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,IAAI,EAAE,CACZ,2GAA2G,CAC5G,CAAC;QACJ,CAAC;IACH,CAAC;IAKD,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC;YAEH,MAAM,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,GAAG,wDAAa,gCAAgC,GAAC,CAAC;YAG3G,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAEvD,SAAS,CAAC,YAAY,GAAG,IAAI,yBAAyB,CACpD,MAAM,EACN,MAAM,EACN,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,YAAY,EACZ,oBAAoB,EACpB,aAAa,CACd,CAAC;YAGF,gBAAgB,CAAC,gBAAgB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,EAAE,KAAK,EAAE,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,IAAI,EAAE,CACZ,kHAAkH,CACnH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
import { Repository } from 'typeorm';
|
|
2
|
+
import { StorageAdapter, LoggerService, NAuthConfig } from '../../index';
|
|
3
|
+
export declare function initStorage(config: NAuthConfig, rateLimitRepo: Repository<any> | null, storageLockRepo: Repository<any> | null, logger: LoggerService): Promise<StorageAdapter>;
|
|
4
|
+
//# sourceMappingURL=init-storage.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"init-storage.d.ts","sourceRoot":"","sources":["../../../src/utils/setup/init-storage.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAiC,MAAM,aAAa,CAAC;AAmBxG,wBAAsB,WAAW,CAC/B,MAAM,EAAE,WAAW,EACnB,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,EACrC,eAAe,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,EACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,cAAc,CAAC,CA8DzB"}
|
|
@@ -0,0 +1,79 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.initStorage = initStorage;
|
|
37
|
+
const index_1 = require("../../index");
|
|
38
|
+
async function initStorage(config, rateLimitRepo, storageLockRepo, logger) {
|
|
39
|
+
if (config.storageAdapter) {
|
|
40
|
+
const adapter = config.storageAdapter;
|
|
41
|
+
if (adapter && typeof adapter.setLogger === 'function') {
|
|
42
|
+
adapter.setLogger(logger);
|
|
43
|
+
}
|
|
44
|
+
if (adapter && typeof adapter.setRepositories === 'function') {
|
|
45
|
+
if (rateLimitRepo && storageLockRepo) {
|
|
46
|
+
adapter.setRepositories(rateLimitRepo, storageLockRepo);
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
await adapter.initialize();
|
|
50
|
+
return adapter;
|
|
51
|
+
}
|
|
52
|
+
if (rateLimitRepo && storageLockRepo) {
|
|
53
|
+
try {
|
|
54
|
+
const { DatabaseStorageAdapter } = await Promise.resolve().then(() => __importStar(require('@nauth-toolkit/storage-database')));
|
|
55
|
+
const adapter = new DatabaseStorageAdapter(null, null, logger);
|
|
56
|
+
adapter.setRepositories(rateLimitRepo, storageLockRepo);
|
|
57
|
+
await adapter.initialize();
|
|
58
|
+
logger?.warn?.('WARNING: Storage adapter not provided. Using DatabaseStorageAdapter as default. ' +
|
|
59
|
+
'For production, explicitly configure storageAdapter in your config.');
|
|
60
|
+
return adapter;
|
|
61
|
+
}
|
|
62
|
+
catch (error) {
|
|
63
|
+
logger?.error?.('Failed to create DatabaseStorageAdapter. Please explicitly configure storageAdapter in your config.', { error });
|
|
64
|
+
}
|
|
65
|
+
}
|
|
66
|
+
throw new index_1.NAuthException(index_1.AuthErrorCode.VALIDATION_FAILED, 'Storage adapter is REQUIRED for production deployments. ' +
|
|
67
|
+
'MemoryStorageAdapter is NOT safe for production (data lost on restart, not shared across instances). ' +
|
|
68
|
+
'Please configure storageAdapter in your NAuthConfig:\n\n' +
|
|
69
|
+
'Option 1: DatabaseStorageAdapter (recommended if you have a database)\n' +
|
|
70
|
+
' import { createDatabaseStorageAdapter } from "@nauth-toolkit/express";\n' +
|
|
71
|
+
' storageAdapter: createDatabaseStorageAdapter()\n\n' +
|
|
72
|
+
'Option 2: RedisStorageAdapter (for high-performance multi-server deployments)\n' +
|
|
73
|
+
' import { createRedisStorageAdapter } from "@nauth-toolkit/express";\n' +
|
|
74
|
+
' storageAdapter: createRedisStorageAdapter(process.env.REDIS_URL)\n\n' +
|
|
75
|
+
'Make sure to include storage entities in your DataSource configuration:\n' +
|
|
76
|
+
' import { getNAuthStorageEntities } from "@nauth-toolkit/database-typeorm-postgres";\n' +
|
|
77
|
+
' entities: [...getNAuthEntities(), ...getNAuthStorageEntities()]');
|
|
78
|
+
}
|
|
79
|
+
//# sourceMappingURL=init-storage.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"init-storage.js","sourceRoot":"","sources":["../../../src/utils/setup/init-storage.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,kCAmEC;AAtFD,uCAAwG;AAmBjG,KAAK,UAAU,WAAW,CAC/B,MAAmB,EACnB,aAAqC,EACrC,eAAuC,EACvC,MAAqB;IAGrB,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC;QAGtC,IAAI,OAAO,IAAI,OAAQ,OAAe,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAC/D,OAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAGD,IAAI,OAAO,IAAI,OAAQ,OAAe,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;YACtE,IAAI,aAAa,IAAI,eAAe,EAAE,CAAC;gBACpC,OAAe,CAAC,eAAe,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAED,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,IAAI,aAAa,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC;YAGH,MAAM,EAAE,sBAAsB,EAAE,GAAG,wDAAa,iCAAiC,GAAC,CAAC;YACnF,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAa,CAAC,CAAC;YACtE,OAAO,CAAC,eAAe,CAAC,aAAoB,EAAE,eAAsB,CAAC,CAAC;YACtE,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAE3B,MAAM,EAAE,IAAI,EAAE,CACZ,kFAAkF;gBAChF,qEAAqE,CACxE,CAAC;YAEF,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,MAAM,EAAE,KAAK,EAAE,CACb,qGAAqG,EACrG,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAGD,MAAM,IAAI,sBAAc,CACtB,qBAAa,CAAC,iBAAiB,EAC/B,0DAA0D;QACxD,uGAAuG;QACvG,0DAA0D;QAC1D,yEAAyE;QACzE,4EAA4E;QAC5E,sDAAsD;QACtD,iFAAiF;QACjF,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,yFAAyF;QACzF,mEAAmE,CACtE,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
import { Repository } from 'typeorm';
|
|
2
|
+
import { NAuthConfig, NAuthLogger, MFAService, BaseMFADevice, BaseUser, PhoneVerificationService, EmailVerificationService, AuthAuditService, ClientInfoService } from '../../index';
|
|
3
|
+
import { PasswordService, ChallengeService } from '../../internal';
|
|
4
|
+
export declare function registerMFAProviders(config: NAuthConfig, mfaService: MFAService, mfaDeviceRepository: Repository<BaseMFADevice>, userRepository: Repository<BaseUser>, logger: NAuthLogger, passwordService: PasswordService, emailVerificationService: EmailVerificationService, phoneVerificationService?: PhoneVerificationService, challengeService?: ChallengeService, auditService?: AuthAuditService, clientInfoService?: ClientInfoService): Promise<void>;
|
|
5
|
+
//# sourceMappingURL=register-mfa.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"register-mfa.d.ts","sourceRoot":"","sources":["../../../src/utils/setup/register-mfa.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACL,WAAW,EACX,WAAW,EACX,UAAU,EACV,aAAa,EACb,QAAQ,EACR,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EAElB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAmBnE,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,UAAU,EACtB,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC,EAC9C,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,EACpC,MAAM,EAAE,WAAW,EACnB,eAAe,EAAE,eAAe,EAChC,wBAAwB,EAAE,wBAAwB,EAClD,wBAAwB,CAAC,EAAE,wBAAwB,EACnD,gBAAgB,CAAC,EAAE,gBAAgB,EACnC,YAAY,CAAC,EAAE,gBAAgB,EAC/B,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,OAAO,CAAC,IAAI,CAAC,CAgHf"}
|