@nauth-toolkit/core 0.1.14 → 0.1.18

package/dist/services/auth.service.d.ts

@@ -58,39 +58,435 @@ export declare class AuthService {
     private readonly mfaDeviceRepository?;
     private readonly trustedDeviceService?;
     private readonly passwordResetService?;
-    constructor(userRepository: Repository<BaseUser>, loginAttemptRepository: Repository<BaseLoginAttempt>, passwordService: PasswordService, jwtService: JwtService, sessionService: SessionService, challengeService: ChallengeService, challengeHelper: AuthChallengeHelperService, emailVerificationService: EmailVerificationService, clientInfoService: ClientInfoService, accountLockoutStorage: AccountLockoutStorageService, config: NAuthConfig, logger: NAuthLogger, auditService?: AuthAuditService | undefined, phoneVerificationService?: PhoneVerificationService | undefined, mfaService?: MFAService | undefined, mfaDeviceRepository?: Repository<BaseMFADevice> | undefined, trustedDeviceService?: TrustedDeviceService | undefined, passwordResetService?: PasswordResetService | undefined);
+    constructor(userRepository: Repository<BaseUser>, loginAttemptRepository: Repository<BaseLoginAttempt>, passwordService: PasswordService, jwtService: JwtService, sessionService: SessionService, challengeService: ChallengeService, challengeHelper: AuthChallengeHelperService, emailVerificationService: EmailVerificationService, clientInfoService: ClientInfoService, accountLockoutStorage: AccountLockoutStorageService, config: NAuthConfig, logger: NAuthLogger, auditService?: AuthAuditService | undefined, // Optional - audit trail service (enabled via config.auditLogs.enabled)
+    phoneVerificationService?: PhoneVerificationService | undefined, // Optional - only available when SMS provider is configured
+    mfaService?: MFAService | undefined, // Optional - available when MFA modules are imported
+    mfaDeviceRepository?: Repository<BaseMFADevice> | undefined, // Optional - available when MFA modules are imported
+    trustedDeviceService?: TrustedDeviceService | undefined, // Optional - only available when rememberDevices is not 'never'
+    passwordResetService?: PasswordResetService | undefined);
+    /**
+     * Register a new user.
+     *
+     * Checks for duplicates (email, username, phone), validates password, hashes it,
+     * creates the user, and returns tokens or a challenge if verification is required.
+     *
+     * @param dto - Signup payload
+     * @returns Auth response with tokens or a verification challenge
+     * @throws {NAuthException} If user exists, password is invalid, or signup is disabled
+     *
+     * @example
+     * ```typescript
+     * const result = await authService.signup({
+     *   email: 'user@example.com',
+     *   password: 'Password123!',
+     *   username: 'johndoe',
+     * });
+     * ```
+     */
     signup(dto: SignupDTO): Promise<AuthResponseDTO>;
+    /**
+     * Log in a user with identifier (email, username, or phone) and password.
+     *
+     * Handles client/device context, login hooks, lockout checks, audit logging, password verification,
+     * and challenge flow (MFA/verification) if required.
+     *
+     * @param dto - Login credentials (identifier and password)
+     * @returns Authentication response containing challenge details if required, or tokens on success
+     * @throws {NAuthException} On login failure, forbidden access, or account lockout
+     *
+     * @example
+     * ```typescript
+     * const res = await authService.login({ identifier: 'user@email.com', password: 'Pass123!' });
+     * if (res.challengeName) {
+     *   // prompt user for verification code
+     * }
+     * ```
+     */
     login(dto: LoginDTO): Promise<AuthResponseDTO>;
+    /**
+     * Complete an authentication challenge using the provided response data.
+     *
+     * Handles all challenge types (email verification, phone verification, MFA, password change, MFA setup).
+     * Validates the session, challenge type, and parameters, and returns the result (tokens or next challenge).
+     *
+     * @param responseData - Data for responding to the challenge
+     * @returns The authentication response (tokens or next challenge requirement)
+     * @throws {NAuthException} If validation fails or the challenge type is unknown
+     *
+     * @example
+     * ```typescript
+     * // Example for email verification:
+     * const dto = Object.assign(new RespondChallengeDTO(), {
+     *   session: 'session-token',
+     *   type: 'VERIFY_EMAIL',
+     *   code: '123456',
+     * });
+     * await authService.respondToChallenge(dto);
+     * ```
+     */
     respondToChallenge(dto: RespondChallengeDTO): Promise<AuthResponseDTO>;
+    /**
+     * Validate that response type matches expected challenge type
+     */
     private validateChallengeTypeMatch;
+    /**
+     * Validate parameters for challenge type
+     *
+     * Service-level validation ensures Express/other frameworks get same validation as NestJS.
+     * This is critical for non-DTO-based applications.
+     */
     private validateChallengeParams;
+    /**
+     * Handle VERIFY_EMAIL challenge
+     */
     private handleVerifyEmail;
+    /**
+     * Handle VERIFY_PHONE challenge
+     */
     private handleVerifyPhone;
+    /**
+     * Handle MFA_REQUIRED challenge
+     */
     private handleMFAVerification;
+    /**
+     * Handle FORCE_CHANGE_PASSWORD challenge
+     */
     private handleForceChangePassword;
+    /**
+     * Handle MFA_SETUP_REQUIRED challenge
+     */
     private handleMFASetup;
+    /**
+     * Resend verification code for current challenge
+     *
+     * Determines the challenge type from the session and resends the appropriate code:
+     * - VERIFY_EMAIL: Resends email verification code
+     * - VERIFY_PHONE: Resends SMS verification code
+     * - MFA_REQUIRED: Resends MFA code (for SMS MFA)
+     *
+     * Rate limits are enforced internally by the verification services.
+     *
+     * @param session - Challenge session token
+     * @returns Destination info (masked email/phone)
+     * @throws {NAuthException} INVALID_CHALLENGE_SESSION | RATE_LIMIT_* | VALIDATION_FAILED
+     *
+     * @example
+     * ```typescript
+     * const result = await authService.resendCode(session);
+     * // Returns: { destination: 'u***r@example.com' }
+     * ```
+     */
     resendCode(dto: ResendCodeDTO): Promise<ResendCodeResponseDTO>;
+    /**
+     * Mask email for display (helper method)
+     */
     private maskEmail;
+    /**
+     * Mask phone number for display (helper method)
+     */
     private maskPhone;
+    /**
+     * Registers the current device as trusted for the user (opt-in).
+     *
+     * Only available when rememberDevices is set to 'user_opt_in'. Generates and returns a trusted device token for the device associated with the current authenticated session.
+     *
+     * Session ID is automatically extracted from the JWT token context (via ClientInfoService), similar to how IP address and user agent are handled.
+     *
+     * @returns Object containing the new device token
+     * @throws {NAuthException} If the feature is unavailable, service is not enabled, or session ID is not available
+     *
+     * @example
+     * ```typescript
+     * const result = await authService.trustDevice();
+     * // { deviceToken: 'abc123' }
+     * ```
+     */
     trustDevice(): Promise<TrustDeviceResponseDTO>;
+    /**
+     * Check if the current device is trusted
+     *
+     * Returns whether the device associated with the current authenticated session
+     * is trusted. Works for both cookies mode (reads from httpOnly cookie) and
+     * JSON mode (reads from X-Device-Token header).
+     *
+     * This endpoint validates the device token on the server side and checks:
+     * - Device token exists and is valid
+     * - Device token matches a trusted device record in the database
+     * - Trust has not expired
+     *
+     * @returns Object containing the trusted status
+     * @throws {NAuthException} If the session is not found or user is not authenticated
+     *
+     * @example
+     * ```typescript
+     * const result = await authService.isTrustedDevice();
+     * // { trusted: true }
+     * ```
+     */
     isTrustedDevice(): Promise<IsTrustedDeviceResponseDTO>;
+    /**
+     * Refresh the access token using a refresh token.
+     *
+     * Handles secure token rotation with distributed locking, reuse detection,
+     * and family revocation to prevent race conditions and replay attacks.
+     *
+     * @param refreshToken - The refresh token issued to the client
+     * @returns Newly generated access and refresh tokens
+     * @throws {NAuthException} If the session is not found, revoked, or refresh is abused
+     *
+     * @example
+     * ```typescript
+     * const tokens = await authService.refreshToken(refreshToken);
+     * ```
+     */
     refreshToken(dto: RefreshTokenDTO): Promise<TokenResponse>;
+    /**
+     * Logout user (revoke session)
+     *
+     * Session ID is automatically extracted from the JWT token context (via ClientInfoService), similar to how IP address and user agent are handled.
+     *
+     * @param dto - Logout options (forgetMe flag)
+     * @returns Success status
+     * @throws {NAuthException} If session ID is not available in request context
+     */
     logout(dto: LogoutDTO): Promise<LogoutResponseDTO>;
+    /**
+     * Clear authentication cookies from response
+     *
+     * @param response - HTTP response object with clearCookie method
+     * @param forgetDevice - Whether to also clear device token cookie
+     * @private
+     */
     private clearAuthCookies;
+    /**
+     * Global signout (revoke all user sessions)
+     * @param sub - External user identifier (sub/UUID)
+     * @returns Number of sessions revoked
+     */
     logoutAll(dto: LogoutAllDTO): Promise<LogoutAllResponseDTO>;
+    /**
+     * Change the password for an existing user.
+     *
+     * Verifies the current password, validates the new password,
+     * checks password reuse policy, and updates the user's password hash and history.
+     * Executes configured pre-change hooks if provided.
+     *
+     * @param sub - External user identifier (sub/UUID)
+     * @param dto - ChangePasswordDTO containing old and new password
+     * @returns void
+     * @throws {NAuthException} If the user is not found, current password is incorrect, the new password is weak, password reuse is detected, or password change is disallowed by hooks.
+     *
+     * @example
+     * ```typescript
+     * await authService.changePassword('user-uuid', {
+     *   oldPassword: 'currentPass123!',
+     *   newPassword: 'newStr0ngPass!@#',
+     * });
+     * ```
+     */
     changePassword(dto: ChangePasswordRequestDTO): Promise<ChangePasswordResponseDTO>;
+    /**
+     * Update user profile attributes.
+     *
+     * Updates user fields (name, email, phone, username, metadata) and enforces unique constraints and verification rules.
+     *
+     * @param sub - User sub/UUID
+     * @param updateData - User fields to update
+     * @returns Updated user object
+     * @throws {NAuthException} If user not found or unique constraint violated
+     *
+     * @example
+     * await authService.updateUserAttributes(sub, { email: 'test@example.com' });
+     */
     updateUserAttributes(dto: UpdateUserAttributesRequestDTO): Promise<UserResponseDto>;
+    /**
+     * Ensures email, phone, and username are unique for other users before update.
+     *
+     * Throws if another user already has the specified email, phone, or username.
+     *
+     * @param userId - Internal numeric user ID (excluded from check)
+     * @param updateData - User fields to check for uniqueness
+     * @throws {NAuthException} If a unique constraint is violated for email, phone, or username
+     *
+     * @example
+     * ```typescript
+     * await authService.validateUniquenessConstraints(1, { email: "test@example.com" });
+     * ```
+     */
     private validateUniquenessConstraints;
+    /**
+     * Checks if the login identifier matches the specified allowed type.
+     *
+     * Determines if the given identifier is a valid email, username, phone, or allowed hybrid,
+     * according to the configured identifier type restriction.
+     *
+     * @param identifier - The login identifier to check (email, username, or phone)
+     * @param allowedType - The permitted identifier type ('email', 'username', 'phone', or 'email_or_username')
+     * @returns True if the identifier conforms to the allowed type, otherwise false
+     *
+     * @example
+     * ```typescript
+     * // Email check
+     * const valid = this.validateIdentifierType('user@example.com', 'email'); // true
+     *
+     * // Username check
+     * const valid = this.validateIdentifierType('johndoe', 'username'); // true
+     * ```
+     */
     private validateIdentifierType;
+    /**
+     * Retrieves a user entity by login identifier.
+     *
+     * Performs a lookup for a user by email, username, or phone number.
+     * The search respects the identifierType restriction when provided, limiting which fields are queried.
+     *
+     * @param identifier - Login credential (email, username, or phone)
+     * @param identifierType - Restricts search to a specific identifier type ('email', 'username', 'phone', or 'email_or_username')
+     * @returns The user entity if found, otherwise null
+     *
+     * @example
+     * ```typescript
+     * const user = await this.findUserByIdentifier('user@example.com');
+     * const user2 = await this.findUserByIdentifier('johndoe', 'username');
+     * ```
+     */
     private findUserByIdentifier;
+    /**
+     * Handles a failed login by recording the attempt, applying IP-based lockout policy,
+     * and invoking relevant hooks.
+     *
+     * @param identifier - User identifier (email/username/phone)
+     * @param reason - Optional reason for failure
+     * @returns Promise<void>
+     *
+     * @example
+     * ```typescript
+     * await authService.handleFailedLogin('user@example.com', 'invalid_credentials');
+     * ```
+     */
     private handleFailedLogin;
+    /**
+     * Records a login attempt with client context.
+     *
+     * @param email - User's email address
+     * @param success - True if login succeeded, false if failed
+     * @param failureReason - Optional reason for failure
+     * @param userId - Optional internal user ID (only for successful logins)
+     * @returns Promise<void>
+     */
     private recordLoginAttempt;
+    /**
+     * Get user by ID (sub)
+     * @param sub - User sub (external identifier)
+     * @returns User entity or null
+     */
     getUserById(dto: GetUserByIdDTO): Promise<UserResponseDto | null>;
+    /**
+     * Get user by email address.
+     *
+     * @param email - User email
+     * @param requireEmailVerified - Only return user if email is verified (default: false)
+     * @returns User entity or null
+     * @internal - For use by social auth providers
+     *
+     * @example
+     * ```typescript
+     * const user = await authService.getUserByEmail('user@example.com', true);
+     * ```
+     */
     getUserByEmail(dto: GetUserByEmailDTO): Promise<UserResponseDto | null>;
+    /**
+     * Require user to change password at next login.
+     *
+     * Throws if user not found or has no password set (e.g. social login only).
+     *
+     * @param userId - User's sub identifier
+     * @returns Resolves when flag is set
+     * @throws {NAuthException} If user is not found or cannot change password
+     *
+     * @example
+     * await authService.setMustChangePassword('user-uuid-123');
+     */
     setMustChangePassword(dto: SetMustChangePasswordDTO): Promise<SetMustChangePasswordResponseDTO>;
+    /**
+     * Admin-only: Reset a user's password by identifier.
+     *
+     * Allows administrators to reset a user's password using any identifier
+     * (email, username, phone, or sub). Automatically revokes sessions and optionally
+     * requires password change on next login using the existing challenge system.
+     *
+     * SECURITY: This is an admin-only operation. Ensure proper authorization
+     * checks are in place before calling this method.
+     *
+     * @param dto - Admin reset password request
+     * @returns Response with success status and session revocation count
+     * @throws {NAuthException} If user not found, user has no password (social-only), or password validation fails
+     *
+     * @example
+     * ```typescript
+     * // Reset with force password change
+     * const result = await authService.adminSetPassword({
+     *   identifier: 'user@example.com',
+     *   newPassword: 'NewSecurePassword123!',
+     *   mustChangePassword: true,
+     *   revokeSessions: true
+     * });
+     *
+     * // Reset without forcing password change
+     * const result = await authService.adminSetPassword({
+     *   identifier: 'a21b654c-2746-4168-acee-c175083a65cd',
+     *   newPassword: 'NewSecurePassword123!',
+     *   mustChangePassword: false
+     * });
+     * ```
+     */
     adminSetPassword(dto: AdminSetPasswordDTO): Promise<AdminSetPasswordResponseDTO>;
+    /**
+     * Request a password reset code for an account.
+     *
+     * Security:
+     * - Avoids account enumeration: returns success even when user is not found.
+     * - Delivery is best-effort; errors are logged but should not reveal account existence.
+     *
+     * Channel selection (per config.signup.verificationMethod):
+     * - 'none': send to email if available; else phone (if available)
+     * - 'email': only send to verified email
+     * - 'phone': only send to verified phone
+     * - 'both': prefer verified email; fallback to verified phone
+     *
+     * @param dto - Forgot password request payload
+     * @returns Delivery metadata (masked destination) when available
+     */
     forgotPassword(dto: ForgotPasswordDTO): Promise<ForgotPasswordResponseDTO>;
+    /**
+     * Confirm a password reset by validating the reset code and setting a new password.
+     *
+     * Security:
+     * - Uses platform-agnostic errors via NAuthException
+     * - Verifies reset code via PasswordResetService
+     * - Enforces password policy and history
+     * - Revokes all sessions upon successful reset
+     *
+     * @param dto - Confirm forgot password payload
+     * @returns Success response
+     * @throws {NAuthException} PASSWORD_RESET_CODE_INVALID | PASSWORD_RESET_CODE_EXPIRED | PASSWORD_RESET_MAX_ATTEMPTS
+     */
     confirmForgotPassword(dto: ConfirmForgotPasswordDTO): Promise<ConfirmForgotPasswordResponseDTO>;
+    /**
+     * Centralized password update flow used by:
+     * - changePassword()
+     * - confirmForgotPassword()
+     * - adminSetPassword()
+     * - FORCE_CHANGE_PASSWORD challenge handler
+     *
+     * WHY:
+     * - Prevent logic drift between different password-changing entrypoints
+     * - Ensure consistent validation, history enforcement, persistence, session revocation, and audit trails
+     *
+     * @param params - Password update parameters
+     * @returns Sessions revoked count (0 when not revoked)
+     * @throws {NAuthException} WEAK_PASSWORD | PASSWORD_REUSED | NOT_FOUND
+     */
     private updateUserPassword;
 }
 //# sourceMappingURL=auth.service.d.ts.map

package/dist/services/auth.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAwB,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,wBAAwB,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAY1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AAChH,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAInF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAkBpD,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IACvC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACtC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;gBAjBrB,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,EACpC,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAAC,EACpD,eAAe,EAAE,eAAe,EAChC,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,cAAc,EAC9B,gBAAgB,EAAE,gBAAgB,EAClC,eAAe,EAAE,0BAA0B,EAC3C,wBAAwB,EAAE,wBAAwB,EAClD,iBAAiB,EAAE,iBAAiB,EACpC,qBAAqB,EAAE,4BAA4B,EACnD,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,WAAW,EACnB,YAAY,CAAC,EAAE,gBAAgB,YAAA,EAC/B,wBAAwB,CAAC,EAAE,wBAAwB,YAAA,EACnD,UAAU,CAAC,EAAE,UAAU,YAAA,EACvB,mBAAmB,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,YAAA,EAC/C,oBAAoB,CAAC,EAAE,oBAAoB,YAAA,EAC3C,oBAAoB,CAAC,EAAE,oBAAoB,YAAA;IA4BxD,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC;IAkNhD,KAAK,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;IAqpB9C,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;IAqD5E,OAAO,CAAC,0BAA0B;IAelC,OAAO,CAAC,uBAAuB;YA6EjB,iBAAiB;YAiEjB,iBAAiB;YAmMjB,qBAAqB;YAuSrB,yBAAyB;YAiHzB,cAAc;IAoJtB,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA4HpE,OAAO,CAAC,SAAS;IAWjB,OAAO,CAAC,SAAS;IAsBX,WAAW,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAsH9C,eAAe,IAAI,OAAO,CAAC,0BAA0B,CAAC;IAwDtD,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;IA6R1D,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAkHxD,OAAO,CAAC,gBAAgB;IAmClB,SAAS,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqJ3D,cAAc,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAwDjF,oBAAoB,CAAC,GAAG,EAAE,8BAA8B,GAAG,OAAO,CAAC,eAAe,CAAC;YA4a3E,6BAA6B;IAkE3C,OAAO,CAAC,sBAAsB;YAyChB,oBAAoB;YAwEpB,iBAAiB;YA0CjB,kBAAkB;IA0B1B,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAkBjE,cAAc,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAoBvE,qBAAqB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,gCAAgC,CAAC;IA0D/F,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA8FhF,cAAc,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA8G1E,qBAAqB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,gCAAgC,CAAC;YAoDvF,kBAAkB;CA2GjC"}
+{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAwB,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,wBAAwB,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGhE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAY1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AAChH,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAInF,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAkBpD,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IACvC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACtC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;gBAjBrB,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,EACpC,sBAAsB,EAAE,UAAU,CAAC,gBAAgB,CAAC,EACpD,eAAe,EAAE,eAAe,EAChC,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,cAAc,EAC9B,gBAAgB,EAAE,gBAAgB,EAClC,eAAe,EAAE,0BAA0B,EAC3C,wBAAwB,EAAE,wBAAwB,EAClD,iBAAiB,EAAE,iBAAiB,EACpC,qBAAqB,EAAE,4BAA4B,EACnD,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,WAAW,EACnB,YAAY,CAAC,EAAE,gBAAgB,YAAA,EAAE,wEAAwE;IACzG,wBAAwB,CAAC,EAAE,wBAAwB,YAAA,EAAE,4DAA4D;IACjH,UAAU,CAAC,EAAE,UAAU,YAAA,EAAE,qDAAqD;IAC9E,mBAAmB,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,YAAA,EAAE,qDAAqD;IACtG,oBAAoB,CAAC,EAAE,oBAAoB,YAAA,EAAE,gEAAgE;IAC7G,oBAAoB,CAAC,EAAE,oBAAoB,YAAA;IAS9D;;;;;;;;;;;;;;;;;;OAkBG;IACG,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC;IAgMtD;;;;;;;;;;;;;;;;;OAiBG;IACG,KAAK,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;IAgoBpD;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;IAkD5E;;OAEG;IACH,OAAO,CAAC,0BAA0B;IASlC;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IA0E/B;;OAEG;YACW,iBAAiB;IA8D/B;;OAEG;YACW,iBAAiB;IAgM/B;;OAEG;YACW,qBAAqB;IAoSnC;;OAEG;YACW,yBAAyB;IA8GvC;;OAEG;YACW,cAAc;IAgI5B;;;;;;;;;;;;;;;;;;;OAmBG;IACG,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAyHpE;;OAEG;IACH,OAAO,CAAC,SAAS;IAQjB;;OAEG;IACH,OAAO,CAAC,SAAS;IAMjB;;;;;;;;;;;;;;;OAeG;IACG,WAAW,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAiGpD;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,eAAe,IAAI,OAAO,CAAC,0BAA0B,CAAC;IAyC5D;;;;;;;;;;;;;;OAcG;IACG,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC;IAoRhE;;;;;;;;OAQG;IACG,MAAM,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA2GxD;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;IA8BxB;;;;OAIG;IACG,SAAS,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAiIjE;;;;;;;;;;;;;;;;;;;OAmBG;IACG,cAAc,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IA2CvF;;;;;;;;;;;;OAYG;IACG,oBAAoB,CAAC,GAAG,EAAE,8BAA8B,GAAG,OAAO,CAAC,eAAe,CAAC;IA8ZzF;;;;;;;;;;;;;OAaG;YACW,6BAA6B;IA+C3C;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,sBAAsB;IAyB9B;;;;;;;;;;;;;;;OAeG;YACW,oBAAoB;IA2DlC;;;;;;;;;;;;OAYG;YACW,iBAAiB;IAiC/B;;;;;;;;OAQG;YACW,kBAAkB;IAqBhC;;;;OAIG;IACG,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAKvE;;;;;;;;;;;;OAYG;IACG,cAAc,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAQ7E;;;;;;;;;;;OAWG;IACG,qBAAqB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,gCAAgC,CAAC;IA0BrG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACG,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA8EtF;;;;;;;;;;;;;;;OAeG;IACG,cAAc,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAiGhF;;;;;;;;;;;;OAYG;IACG,qBAAqB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAqCrG;;;;;;;;;;;;;;OAcG;YACW,kBAAkB;CA2GjC"}