@nauth-toolkit/core 0.1.18 → 0.1.21

package/dist/services/social-auth-base.service.js

@@ -1,40 +1,6 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BaseSocialAuthProviderService = void 0;
-const crypto = __importStar(require("crypto"));
 const auth_audit_event_type_enum_1 = require("../enums/auth-audit-event-type.enum");
 const nauth_exception_1 = require("../exceptions/nauth.exception");
 const error_codes_enum_1 = require("../enums/error-codes.enum");
@@ -91,7 +57,7 @@ class BaseSocialAuthProviderService {
     auditService;
     trustedDeviceService;
     constructor(config, logger, authService, socialAuthService, jwtService, sessionService, challengeHelper, clientInfoService, 
-    // State store for CSRF protection - shared across all providers
+    // State store for OAuth CSRF protection - MUST be shared across instances (StorageAdapter-backed)
     stateStore, 
     // User repository for creating social users
     userRepository, 
@@ -141,7 +107,7 @@ class BaseSocialAuthProviderService {
             throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.SOCIAL_CONFIG_MISSING, `Provider configuration not found: ${this.providerName}`);
         }
         // Validate state (basic CSRF protection)
-        this.validateState(state);
+        await this.validateState(state);
         try {
             // Get user profile from provider
             const profile = await this.getOAuthProfile(code, state);
@@ -201,7 +167,7 @@ class BaseSocialAuthProviderService {
             throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.SOCIAL_CONFIG_MISSING, `Provider configuration not found: ${this.providerName}`);
         }
         // Validate state
-        this.validateState(state);
+        await this.validateState(state);
         try {
             // Get user profile from provider
             const profile = await this.getOAuthProfile(code, state);
@@ -288,32 +254,18 @@ class BaseSocialAuthProviderService {
     /**
      * Validate state parameter for CSRF protection
      */
-    validateState(state) {
-        const stateData = this.stateStore.get(state);
-        if (!stateData) {
-            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'Invalid state parameter', { field: 'state' });
-        }
-        if (stateData.provider !== this.providerName) {
-            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'State provider mismatch', { field: 'state' });
-        }
-        // Check if state is not too old (5 minutes)
-        if (Date.now() - stateData.timestamp > 5 * 60 * 1000) {
-            this.stateStore.delete(state);
-            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.CHALLENGE_EXPIRED, 'State parameter expired');
-        }
-        // Clean up used state
-        this.stateStore.delete(state);
+    async validateState(state) {
+        // ========================================================================
+        // ⚠️ SECURITY: CSRF state MUST be one-time use
+        // ========================================================================
+        // The store enforces single-use semantics in a multi-server safe way.
+        await this.stateStore.validateAndConsumeCsrfState(this.providerName, state);
     }
     /**
      * Generate random state for CSRF protection
      */
-    generateState() {
-        const state = crypto.randomBytes(32).toString('hex');
-        this.stateStore.set(state, {
-            timestamp: Date.now(),
-            provider: this.providerName,
-        });
-        return state;
+    async generateState() {
+        return await this.stateStore.createCsrfState(this.providerName);
     }
     /**
      * Find existing user or create new one

package/dist/services/social-auth-base.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"social-auth-base.service.js","sourceRoot":"","sources":["../../src/services/social-auth-base.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AAajC,oFAAyE;AAMzE,mEAA+D;AAC/D,gEAA0D;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAsB,6BAA6B;IAI5B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IAEA;IAEA;IAEA;IACA;IACA;IAhBrB,YACqB,MAAmB,EACnB,MAAmB,EACnB,WAAwB,EACxB,iBAAoC,EACpC,UAAsB,EACtB,cAA8B,EAC9B,eAA2C,EAC3C,iBAAoC;IACvD,gEAAgE;IAC7C,UAAgE;IACnF,4CAA4C;IACzB,cAAoC;IACvD,yFAAyF;IACtE,wBAAmD,EACnD,YAA+B,EAAE,wEAAwE;IACzG,oBAA2C;QAf3C,WAAM,GAAN,MAAM,CAAa;QACnB,WAAM,GAAN,MAAM,CAAa;QACnB,gBAAW,GAAX,WAAW,CAAa;QACxB,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,oBAAe,GAAf,eAAe,CAA4B;QAC3C,sBAAiB,GAAjB,iBAAiB,CAAmB;QAEpC,eAAU,GAAV,UAAU,CAAsD;QAEhE,mBAAc,GAAd,cAAc,CAAsB;QAEpC,6BAAwB,GAAxB,wBAAwB,CAA2B;QACnD,iBAAY,GAAZ,YAAY,CAAmB;QAC/B,yBAAoB,GAApB,oBAAoB,CAAuB;IAC7D,CAAC;IAEJ;;;;;;;;OAQG;IACO,iBAAiB;QACzB,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACxC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,+DAA+D;QAC/D,MAAM,cAAc,GAAI,YAAiE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7G,OAAO,cAAc,IAAI,IAAI,CAAC;IAChC,CAAC;IA2CD;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,KAAa;QAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,gCAAc,CACtB,gCAAa,CAAC,qBAAqB,EACnC,qCAAqC,IAAI,CAAC,YAAY,EAAE,CACzD,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE1B,IAAI,CAAC;YACH,iCAAiC;YACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,IAAI,CAAC,YAAY,gCAAgC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAErG,sBAAsB;YACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAElE,kCAAkC;YAClC,MAAM,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAEtD,kCAAkC;YAClC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gCAAc,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,oBAAoB,EAAE,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjH,CAAC;YACD,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,oBAAoB,EAAE,6CAA6C,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAe,EACf,WAAoB,EACpB,WAAqC;QAErC,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACvD,MAAM,IAAI,gCAAc,CACtB,gCAAa,CAAC,qBAAqB,EACnC,aAAa,IAAI,CAAC,YAAY,oCAAoC,CACnE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,+BAA+B;YAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;YAEhF,sBAAsB;YACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAElE,kCAAkC;YAClC,MAAM,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAEtD,kCAAkC;YAClC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,wCAAwC,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC,CAAC;YACnG,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,oBAAoB,EAAE,8BAA8B,YAAY,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,KAAa;QAC3D,2DAA2D;QAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAiB,CAAC;QAC7F,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,gCAAc,CACtB,gCAAa,CAAC,qBAAqB,EACnC,qCAAqC,IAAI,CAAC,YAAY,EAAE,CACzD,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAE1B,IAAI,CAAC;YACH,iCAAiC;YACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAExD,qCAAqC;YACrC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAEhH,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,IAAI,gCAAc,CACtB,gCAAa,CAAC,qBAAqB,EACnC,uDAAuD,CACxD,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,MAAM,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CACtD,IAAI,CAAC,EAAY,EACjB,IAAI,CAAC,YAAY,EACjB,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,GAAG,CACZ,CAAC;YAEF,+EAA+E;YAC/E,oCAAoC;YACpC,+EAA+E;YAC/E,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;oBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,SAAS,EAAE,+CAAkB,CAAC,qBAAqB;oBACnD,WAAW,EAAE,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,YAAY;oBAC7B,kDAAkD;oBAClD,QAAQ,EAAE;wBACR,QAAQ,EAAE,IAAI,CAAC,YAAY;wBAC3B,aAAa,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;qBACrC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,iCAAiC;gBACjC,MAAM,YAAY,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBACxF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,uDAAuD,YAAY,EAAE,EAAE;oBAC1F,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,+EAA+E;YAC/E,oCAAoC;YACpC,+EAA+E;YAC/E,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;oBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,SAAS,EAAE,+CAAkB,CAAC,qBAAqB;oBACnD,WAAW,EAAE,SAAS;oBACtB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;oBAC3C,kDAAkD;oBAClD,QAAQ,EAAE;wBACR,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;wBACzC,aAAa,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;qBACrC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,iCAAiC;gBACjC,MAAM,YAAY,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBACxF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,uDAAuD,YAAY,EAAE,EAAE;oBAC1F,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,8BAA8B,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gCAAc,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,oBAAoB,EAAE,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,oBAAoB,EAAE,8CAA8C,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,0BAA0B,CAAC,IAAY,EAAE,KAAa;QAC1D,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,+EAA+E;IAC/E,2BAA2B;IAC3B,+EAA+E;IAE/E;;OAEG;IACO,aAAa,CAAC,KAAa;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,IAAI,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,4CAA4C;QAC5C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACrD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;QACvF,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACO,aAAa;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,IAAI,CAAC,YAAY;SAC5B,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,gBAAgB,CAAC,OAAyB,EAAE,cAAoC;QAC9F,4CAA4C;QAC5C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAE9G,IAAI,aAAa,EAAE,CAAC;YAClB,OAAQ,aAA6C,CAAC,IAAa,CAAC;QACtE,CAAC;QAED,gDAAgD;QAChD,IAAI,cAAc,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACtD,2DAA2D;YAC3D,MAAM,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBACtD,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE;aACvD,CAAC,CAAiB,CAAC;YAEpB,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,cAAc,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAChB,qCAAqC,OAAO,CAAC,KAAK,qBAAqB,OAAO,CAAC,QAAQ,IAAI,KAAK,EAAE,CACnG,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3C,OAAO,CAAC,KAAK,IAAI,EAAE,EACnB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,QAAQ,IAAI,KAAK,EACzB,IAAI,CAAC,YAAY,CAClB,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAChB,oCAAoC,SAAS,CAAC,KAAK,qBAAqB,SAAS,CAAC,eAAe,EAAE,CACpG,CAAC;YAEF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,eAAe,EAAE,uCAAuC,CAAC,CAAC;IACnG,CAAC;IAED;;;;;;;;;;OAUG;IACO,KAAK,CAAC,gBAAgB,CAC9B,KAAa,EACb,SAAyB,EACzB,QAAwB,EACxB,kBAA2B,IAAI,EAC/B,cAAuB;QAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YACtC,KAAK;YACL,SAAS,EAAE,SAAS,IAAI,IAAI;YAC5B,QAAQ,EAAE,QAAQ,IAAI,IAAI;YAC1B,eAAe;YACf,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;YACzD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAqB,CAAC;QAC7E,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,wBAAwB,KAAK,UAAU,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,2BAA2B,CAAC,IAAW,EAAE,OAAyB;QAChF,MAAM,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CACtD,IAAI,CAAC,EAAY,EACjB,IAAI,CAAC,YAAY,EACjB,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,GAAG,CACZ,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,kBAAkB,CAAC,IAAW,EAAE,WAA6B;QAC3E,4DAA4D;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC;QAEhD,+EAA+E;QAC/E,wDAAwD;QACxD,+EAA+E;QAC/E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;gBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,+CAAkB,CAAC,aAAa;gBAC3C,WAAW,EAAE,MAAM;gBACnB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;gBAC3C,WAAW,EAAE,GAAG,IAAI,CAAC,YAAY,wBAAwB;aAC1D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,iCAAiC;YACjC,MAAM,YAAY,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACxF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,gEAAgE,YAAY,EAAE,EAAE;gBACnG,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,+EAA+E;QAC/E,wDAAwD;QACxD,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,qBAAqB,CAAC;YAChE,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,aAAa,EAAE,IAAI;YACnB,mBAAmB,EAAE,KAAK;YAC1B,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,sCAAsC;SACtF,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,2CAA2C,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACrG,4DAA4D;YAC5D,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;oBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,SAAS,EAAE,+CAAkB,CAAC,YAAY;oBAC1C,WAAW,EAAE,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;oBAC3C,QAAQ,EAAE;wBACR,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;wBACzC,iBAAiB,EAAE,QAAQ,CAAC,aAAa;qBAC1C;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,MAAM,YAAY,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBACxF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,0DAA0D,YAAY,EAAE,EAAE;oBAC7F,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,+EAA+E;QAC/E,2EAA2E;QAC3E,+DAA+D;QAC/D,+EAA+E;QAC/E,+EAA+E;QAC/E,2EAA2E;QAC3E,+DAA+D;QAC/D,+EAA+E;QAE/E,mDAAmD;QACnD,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IACE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe;YAChC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO;YAC5C,IAAI,CAAC,oBAAoB;YACzB,UAAU,CAAC,WAAW,EACtB,CAAC;YACD,IAAI,CAAC;gBACH,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACrG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iCAAiC;gBACjC,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBAC9E,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,oDAAoD,YAAY,EAAE,EAAE;oBACtF,KAAK;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;gBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,+CAAkB,CAAC,YAAY;gBAC1C,WAAW,EAAE,SAAS;gBACtB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;gBAC3C,QAAQ,EAAE;oBACR,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;oBACzC,aAAa,EAAE,eAAe;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,iCAAiC;YACjC,MAAM,YAAY,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACxF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,8CAA8C,YAAY,EAAE,EAAE;gBACjF,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,uFAAuF;QACvF,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AA7gBD,sEA6gBC"}
+{"version":3,"file":"social-auth-base.service.js","sourceRoot":"","sources":["../../src/services/social-auth-base.service.ts"],"names":[],"mappings":";;;AAYA,oFAAyE;AAOzE,mEAA+D;AAC/D,gEAA0D;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAsB,6BAA6B;IAI5B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IAEA;IAEA;IAEA;IACA;IACA;IAhBrB,YACqB,MAAmB,EACnB,MAAmB,EACnB,WAAwB,EACxB,iBAAoC,EACpC,UAAsB,EACtB,cAA8B,EAC9B,eAA2C,EAC3C,iBAAoC;IACvD,kGAAkG;IAC/E,UAAiC;IACpD,4CAA4C;IACzB,cAAoC;IACvD,yFAAyF;IACtE,wBAAmD,EACnD,YAA+B,EAAE,wEAAwE;IACzG,oBAA2C;QAf3C,WAAM,GAAN,MAAM,CAAa;QACnB,WAAM,GAAN,MAAM,CAAa;QACnB,gBAAW,GAAX,WAAW,CAAa;QACxB,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;QAC9B,oBAAe,GAAf,eAAe,CAA4B;QAC3C,sBAAiB,GAAjB,iBAAiB,CAAmB;QAEpC,eAAU,GAAV,UAAU,CAAuB;QAEjC,mBAAc,GAAd,cAAc,CAAsB;QAEpC,6BAAwB,GAAxB,wBAAwB,CAA2B;QACnD,iBAAY,GAAZ,YAAY,CAAmB;QAC/B,yBAAoB,GAApB,oBAAoB,CAAuB;IAC7D,CAAC;IAEJ;;;;;;;;OAQG;IACO,iBAAiB;QACzB,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACxC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,+DAA+D;QAC/D,MAAM,cAAc,GAAI,YAAiE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7G,OAAO,cAAc,IAAI,IAAI,CAAC;IAChC,CAAC;IA2CD;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,KAAa;QAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,gCAAc,CACtB,gCAAa,CAAC,qBAAqB,EACnC,qCAAqC,IAAI,CAAC,YAAY,EAAE,CACzD,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,iCAAiC;YACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,IAAI,CAAC,YAAY,gCAAgC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAErG,sBAAsB;YACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAElE,kCAAkC;YAClC,MAAM,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAEtD,kCAAkC;YAClC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gCAAc,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,oBAAoB,EAAE,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjH,CAAC;YACD,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,oBAAoB,EAAE,6CAA6C,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAe,EACf,WAAoB,EACpB,WAAqC;QAErC,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACvD,MAAM,IAAI,gCAAc,CACtB,gCAAa,CAAC,qBAAqB,EACnC,aAAa,IAAI,CAAC,YAAY,oCAAoC,CACnE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,+BAA+B;YAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;YAEhF,sBAAsB;YACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAElE,kCAAkC;YAClC,MAAM,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAEtD,kCAAkC;YAClC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,wCAAwC,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC,CAAC;YACnG,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,oBAAoB,EAAE,8BAA8B,YAAY,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,KAAa;QAC3D,2DAA2D;QAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAiB,CAAC;QAC7F,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,gCAAc,CACtB,gCAAa,CAAC,qBAAqB,EACnC,qCAAqC,IAAI,CAAC,YAAY,EAAE,CACzD,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAEhC,IAAI,CAAC;YACH,iCAAiC;YACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAExD,qCAAqC;YACrC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAEhH,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,IAAI,gCAAc,CACtB,gCAAa,CAAC,qBAAqB,EACnC,uDAAuD,CACxD,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,MAAM,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CACtD,IAAI,CAAC,EAAY,EACjB,IAAI,CAAC,YAAY,EACjB,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,GAAG,CACZ,CAAC;YAEF,+EAA+E;YAC/E,oCAAoC;YACpC,+EAA+E;YAC/E,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;oBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,SAAS,EAAE,+CAAkB,CAAC,qBAAqB;oBACnD,WAAW,EAAE,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,YAAY;oBAC7B,kDAAkD;oBAClD,QAAQ,EAAE;wBACR,QAAQ,EAAE,IAAI,CAAC,YAAY;wBAC3B,aAAa,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;qBACrC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,iCAAiC;gBACjC,MAAM,YAAY,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBACxF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,uDAAuD,YAAY,EAAE,EAAE;oBAC1F,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,+EAA+E;YAC/E,oCAAoC;YACpC,+EAA+E;YAC/E,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;oBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,SAAS,EAAE,+CAAkB,CAAC,qBAAqB;oBACnD,WAAW,EAAE,SAAS;oBACtB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;oBAC3C,kDAAkD;oBAClD,QAAQ,EAAE;wBACR,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;wBACzC,aAAa,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;qBACrC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,iCAAiC;gBACjC,MAAM,YAAY,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBACxF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,uDAAuD,YAAY,EAAE,EAAE;oBAC1F,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,8BAA8B,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gCAAc,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,oBAAoB,EAAE,kCAAkC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,oBAAoB,EAAE,8CAA8C,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,0BAA0B,CAAC,IAAY,EAAE,KAAa;QAC1D,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,+EAA+E;IAC/E,2BAA2B;IAC3B,+EAA+E;IAE/E;;OAEG;IACO,KAAK,CAAC,aAAa,CAAC,KAAa;QACzC,2EAA2E;QAC3E,+CAA+C;QAC/C,2EAA2E;QAC3E,sEAAsE;QACtE,MAAM,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,aAAa;QAC3B,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,gBAAgB,CAAC,OAAyB,EAAE,cAAoC;QAC9F,4CAA4C;QAC5C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAE9G,IAAI,aAAa,EAAE,CAAC;YAClB,OAAQ,aAA6C,CAAC,IAAa,CAAC;QACtE,CAAC;QAED,gDAAgD;QAChD,IAAI,cAAc,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACtD,2DAA2D;YAC3D,MAAM,YAAY,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBACtD,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE;aACvD,CAAC,CAAiB,CAAC;YAEpB,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,cAAc,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAChB,qCAAqC,OAAO,CAAC,KAAK,qBAAqB,OAAO,CAAC,QAAQ,IAAI,KAAK,EAAE,CACnG,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAC3C,OAAO,CAAC,KAAK,IAAI,EAAE,EACnB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,QAAQ,IAAI,KAAK,EACzB,IAAI,CAAC,YAAY,CAClB,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAChB,oCAAoC,SAAS,CAAC,KAAK,qBAAqB,SAAS,CAAC,eAAe,EAAE,CACpG,CAAC;YAEF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,eAAe,EAAE,uCAAuC,CAAC,CAAC;IACnG,CAAC;IAED;;;;;;;;;;OAUG;IACO,KAAK,CAAC,gBAAgB,CAC9B,KAAa,EACb,SAAyB,EACzB,QAAwB,EACxB,kBAA2B,IAAI,EAC/B,cAAuB;QAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YACtC,KAAK;YACL,SAAS,EAAE,SAAS,IAAI,IAAI;YAC5B,QAAQ,EAAE,QAAQ,IAAI,IAAI;YAC1B,eAAe;YACf,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;YACzD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAqB,CAAC;QAC7E,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,wBAAwB,KAAK,UAAU,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,2BAA2B,CAAC,IAAW,EAAE,OAAyB;QAChF,MAAM,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CACtD,IAAI,CAAC,EAAY,EACjB,IAAI,CAAC,YAAY,EACjB,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,GAAG,CACZ,CAAC;IACJ,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,kBAAkB,CAAC,IAAW,EAAE,WAA6B;QAC3E,4DAA4D;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC;QAEhD,+EAA+E;QAC/E,wDAAwD;QACxD,+EAA+E;QAC/E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;gBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,+CAAkB,CAAC,aAAa;gBAC3C,WAAW,EAAE,MAAM;gBACnB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;gBAC3C,WAAW,EAAE,GAAG,IAAI,CAAC,YAAY,wBAAwB;aAC1D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,iCAAiC;YACjC,MAAM,YAAY,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACxF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,gEAAgE,YAAY,EAAE,EAAE;gBACnG,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,+EAA+E;QAC/E,wDAAwD;QACxD,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,qBAAqB,CAAC;YAChE,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,aAAa,EAAE,IAAI;YACnB,mBAAmB,EAAE,KAAK;YAC1B,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,sCAAsC;SACtF,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,2CAA2C,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACrG,4DAA4D;YAC5D,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;oBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,SAAS,EAAE,+CAAkB,CAAC,YAAY;oBAC1C,WAAW,EAAE,MAAM;oBACnB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;oBAC3C,QAAQ,EAAE;wBACR,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;wBACzC,iBAAiB,EAAE,QAAQ,CAAC,aAAa;qBAC1C;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,MAAM,YAAY,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBACxF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,0DAA0D,YAAY,EAAE,EAAE;oBAC7F,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,+EAA+E;QAC/E,2EAA2E;QAC3E,+DAA+D;QAC/D,+EAA+E;QAC/E,+EAA+E;QAC/E,2EAA2E;QAC3E,+DAA+D;QAC/D,+EAA+E;QAE/E,mDAAmD;QACnD,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IACE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe;YAChC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO;YAC5C,IAAI,CAAC,oBAAoB;YACzB,UAAU,CAAC,WAAW,EACtB,CAAC;YACD,IAAI,CAAC;gBACH,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACrG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iCAAiC;gBACjC,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBAC9E,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,oDAAoD,YAAY,EAAE,EAAE;oBACtF,KAAK;oBACL,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;gBACnC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,+CAAkB,CAAC,YAAY;gBAC1C,WAAW,EAAE,SAAS;gBACtB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;gBAC3C,QAAQ,EAAE;oBACR,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;oBACzC,aAAa,EAAE,eAAe;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,iCAAiC;YACjC,MAAM,YAAY,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACxF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,8CAA8C,YAAY,EAAE,EAAE;gBACjF,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,YAAY;aAC5B,CAAC,CAAC;QACL,CAAC;QAED,uFAAuF;QACvF,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AA5fD,sEA4fC"}

package/dist/services/social-auth-state-store.service.d.ts

@@ -0,0 +1,58 @@
+import { ISocialAuthStateStore, SocialAuthRedirectContext } from '../interfaces/social-auth-state-store.interface';
+import { StorageAdapter } from '../interfaces/storage-adapter.interface';
+import { NAuthLogger } from '../utils/nauth-logger';
+/**
+ * StorageAdapter-backed social OAuth state store
+ *
+ * Replaces in-memory `Map` usage for OAuth CSRF state to support multi-server deployments.
+ *
+ * This implementation stores:
+ * - CSRF state record (provider + createdAt) under a short TTL
+ * - Redirect context record (returnTo/appState/action) under the same TTL (optional)
+ *
+ * Replay protection:
+ * - Uses a separate `used` marker key with `{ nx: true }` so both Redis and Database adapters
+ *   can enforce one-time consumption without requiring special atomic commands.
+ *
+ * @example
+ * ```typescript
+ * const store = new SocialAuthStateStore(storageAdapter, logger);
+ * const state = await store.createCsrfState('google');
+ * await store.setRedirectContext(state, { returnTo: '/auth/callback', appState: '12345', action: 'login' });
+ * // later during callback:
+ * await store.validateAndConsumeCsrfState('google', state);
+ * const ctx = await store.consumeRedirectContext(state);
+ * ```
+ */
+export declare class SocialAuthStateStore implements ISocialAuthStateStore {
+    private readonly storage;
+    private readonly logger?;
+    private readonly ttlSeconds;
+    constructor(storage: StorageAdapter, logger?: NAuthLogger | undefined, ttlSeconds?: number);
+    /**
+     * Create a CSRF state token and persist it for one-time validation.
+     */
+    createCsrfState(provider: string): Promise<string>;
+    /**
+     * Validate and consume CSRF state (one-time).
+     */
+    validateAndConsumeCsrfState(provider: string, state: string): Promise<void>;
+    /**
+     * Persist redirect context for a CSRF state token.
+     */
+    setRedirectContext(state: string, context: SocialAuthRedirectContext): Promise<void>;
+    /**
+     * Consume redirect context (read + delete).
+     */
+    consumeRedirectContext(state: string): Promise<SocialAuthRedirectContext | null>;
+    private getCsrfKey;
+    private getUsedKey;
+    private getRedirectKey;
+    private normalizeProvider;
+    private normalizeState;
+    private normalizeReturnTo;
+    private safeParseCsrfRecord;
+    private safeParseRedirectRecord;
+    private safeParseJsonObject;
+}
+//# sourceMappingURL=social-auth-state-store.service.d.ts.map

package/dist/services/social-auth-state-store.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-auth-state-store.service.d.ts","sourceRoot":"","sources":["../../src/services/social-auth-state-store.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AACnH,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,oBAAqB,YAAW,qBAAqB;IAI9D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAJ1B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAGjB,OAAO,EAAE,cAAc,EACvB,MAAM,CAAC,EAAE,WAAW,YAAA,EACrC,UAAU,GAAE,MAAe;IAK7B;;OAEG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAcxD;;OAEG;IACG,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCjF;;OAEG;IACG,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB1F;;OAEG;IACG,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC;IA6BtF,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,cAAc;IActB,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,mBAAmB;IAc3B,OAAO,CAAC,uBAAuB;IAgC/B,OAAO,CAAC,mBAAmB;CAa5B"}

package/dist/services/social-auth-state-store.service.js

@@ -0,0 +1,261 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SocialAuthStateStore = void 0;
+const crypto = __importStar(require("crypto"));
+const error_codes_enum_1 = require("../enums/error-codes.enum");
+const nauth_exception_1 = require("../exceptions/nauth.exception");
+/**
+ * StorageAdapter-backed social OAuth state store
+ *
+ * Replaces in-memory `Map` usage for OAuth CSRF state to support multi-server deployments.
+ *
+ * This implementation stores:
+ * - CSRF state record (provider + createdAt) under a short TTL
+ * - Redirect context record (returnTo/appState/action) under the same TTL (optional)
+ *
+ * Replay protection:
+ * - Uses a separate `used` marker key with `{ nx: true }` so both Redis and Database adapters
+ *   can enforce one-time consumption without requiring special atomic commands.
+ *
+ * @example
+ * ```typescript
+ * const store = new SocialAuthStateStore(storageAdapter, logger);
+ * const state = await store.createCsrfState('google');
+ * await store.setRedirectContext(state, { returnTo: '/auth/callback', appState: '12345', action: 'login' });
+ * // later during callback:
+ * await store.validateAndConsumeCsrfState('google', state);
+ * const ctx = await store.consumeRedirectContext(state);
+ * ```
+ */
+class SocialAuthStateStore {
+    storage;
+    logger;
+    ttlSeconds;
+    constructor(storage, logger, ttlSeconds = 5 * 60) {
+        this.storage = storage;
+        this.logger = logger;
+        this.ttlSeconds = ttlSeconds;
+    }
+    /**
+     * Create a CSRF state token and persist it for one-time validation.
+     */
+    async createCsrfState(provider) {
+        const normalizedProvider = this.normalizeProvider(provider);
+        const state = crypto.randomBytes(32).toString('hex');
+        const key = this.getCsrfKey(state);
+        const value = JSON.stringify({
+            provider: normalizedProvider,
+            createdAt: Date.now(),
+        });
+        await this.storage.set(key, value, this.ttlSeconds);
+        return state;
+    }
+    /**
+     * Validate and consume CSRF state (one-time).
+     */
+    async validateAndConsumeCsrfState(provider, state) {
+        const normalizedProvider = this.normalizeProvider(provider);
+        const normalizedState = this.normalizeState(state);
+        // ============================================================================
+        // Replay protection: mark state as used (NX) before reading record
+        // ============================================================================
+        // This avoids race conditions where two callbacks try to validate the same state.
+        // Both Redis and DB adapters support nx semantics.
+        const usedKey = this.getUsedKey(normalizedState);
+        const usedSetResult = await this.storage.set(usedKey, '1', this.ttlSeconds, { nx: true });
+        if (usedSetResult === null) {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'Invalid state parameter', { field: 'state' });
+        }
+        const key = this.getCsrfKey(normalizedState);
+        const raw = await this.storage.get(key);
+        if (!raw) {
+            // Missing/expired state
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'Invalid state parameter', { field: 'state' });
+        }
+        const parsed = this.safeParseCsrfRecord(raw);
+        if (parsed.provider !== normalizedProvider) {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'State provider mismatch', { field: 'state' });
+        }
+        // TTL should enforce expiry, but we keep an explicit check for DB edge cases
+        if (Date.now() - parsed.createdAt > this.ttlSeconds * 1000) {
+            // Clean up record to reduce storage pressure
+            await this.storage.del(key);
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.CHALLENGE_EXPIRED, 'State parameter expired');
+        }
+        // Consume (one-time): remove the CSRF record
+        await this.storage.del(key);
+    }
+    /**
+     * Persist redirect context for a CSRF state token.
+     */
+    async setRedirectContext(state, context) {
+        const normalizedState = this.normalizeState(state);
+        const key = this.getRedirectKey(normalizedState);
+        const payload = JSON.stringify({
+            returnTo: this.normalizeReturnTo(context.returnTo),
+            appState: context.appState,
+            delivery: context.delivery,
+            action: context.action,
+            createdAt: Date.now(),
+        });
+        await this.storage.set(key, payload, this.ttlSeconds);
+    }
+    /**
+     * Consume redirect context (read + delete).
+     */
+    async consumeRedirectContext(state) {
+        const normalizedState = this.normalizeState(state);
+        const key = this.getRedirectKey(normalizedState);
+        const raw = await this.storage.get(key);
+        if (!raw) {
+            return null;
+        }
+        const parsed = this.safeParseRedirectRecord(raw);
+        // TTL should enforce expiry, but keep explicit check and cleanup
+        if (Date.now() - parsed.createdAt > this.ttlSeconds * 1000) {
+            await this.storage.del(key);
+            return null;
+        }
+        await this.storage.del(key);
+        return {
+            returnTo: parsed.returnTo,
+            appState: parsed.appState,
+            delivery: parsed.delivery,
+            action: parsed.action,
+        };
+    }
+    // ============================================================================
+    // Key helpers
+    // ============================================================================
+    getCsrfKey(state) {
+        return `social:oauth_csrf:${state}`;
+    }
+    getUsedKey(state) {
+        return `social:oauth_csrf_used:${state}`;
+    }
+    getRedirectKey(state) {
+        return `social:oauth_redirect:${state}`;
+    }
+    // ============================================================================
+    // Validation helpers
+    // ============================================================================
+    normalizeProvider(provider) {
+        if (typeof provider !== 'string') {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'Provider must be a string', { field: 'provider' });
+        }
+        const p = provider.trim().toLowerCase();
+        if (!p) {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'Provider is required', { field: 'provider' });
+        }
+        return p;
+    }
+    normalizeState(state) {
+        if (typeof state !== 'string') {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'State must be a string', { field: 'state' });
+        }
+        const s = state.trim();
+        if (!s) {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'State is required', { field: 'state' });
+        }
+        if (s.length > 500) {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'State parameter too long', { field: 'state' });
+        }
+        return s;
+    }
+    normalizeReturnTo(returnTo) {
+        if (typeof returnTo !== 'string') {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'returnTo must be a string', { field: 'returnTo' });
+        }
+        const v = returnTo.trim();
+        if (!v) {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'returnTo is required', { field: 'returnTo' });
+        }
+        // NOTE: Additional open-redirect policy enforcement is implemented at controller level.
+        return v;
+    }
+    safeParseCsrfRecord(raw) {
+        const obj = this.safeParseJsonObject(raw, 'state');
+        const provider = obj.provider;
+        const createdAt = obj.createdAt;
+        if (typeof provider !== 'string' || !provider.trim()) {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'Invalid state parameter', { field: 'state' });
+        }
+        if (typeof createdAt !== 'number' || !Number.isFinite(createdAt) || createdAt <= 0) {
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'Invalid state parameter', { field: 'state' });
+        }
+        return { provider: provider.trim().toLowerCase(), createdAt };
+    }
+    safeParseRedirectRecord(raw) {
+        const obj = this.safeParseJsonObject(raw, 'state');
+        const returnTo = obj.returnTo;
+        const appState = obj.appState;
+        const delivery = obj.delivery;
+        const action = obj.action;
+        const createdAt = obj.createdAt;
+        if (typeof returnTo !== 'string' || !returnTo.trim()) {
+            return { returnTo: '/', action: 'login', createdAt: 0 };
+        }
+        if (action !== 'login' && action !== 'link') {
+            return { returnTo: returnTo.trim(), action: 'login', createdAt: 0 };
+        }
+        if (typeof createdAt !== 'number' || !Number.isFinite(createdAt) || createdAt <= 0) {
+            return { returnTo: returnTo.trim(), action, createdAt: 0 };
+        }
+        if (appState !== undefined && typeof appState !== 'string') {
+            return { returnTo: returnTo.trim(), action, createdAt };
+        }
+        if (delivery !== undefined && delivery !== 'cookies' && delivery !== 'json') {
+            return { returnTo: returnTo.trim(), appState, action, createdAt };
+        }
+        return { returnTo: returnTo.trim(), appState, delivery, action, createdAt };
+    }
+    safeParseJsonObject(raw, field) {
+        try {
+            const parsed = JSON.parse(raw);
+            if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+                throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'Invalid state parameter', { field });
+            }
+            return parsed;
+        }
+        catch (error) {
+            // Don't leak raw payload; only log in debug.
+            this.logger?.debug?.(`[SocialAuthStateStore] Failed to parse ${field} record`, { error });
+            throw new nauth_exception_1.NAuthException(error_codes_enum_1.AuthErrorCode.VALIDATION_FAILED, 'Invalid state parameter', { field });
+        }
+    }
+}
+exports.SocialAuthStateStore = SocialAuthStateStore;
+//# sourceMappingURL=social-auth-state-store.service.js.map

package/dist/services/social-auth-state-store.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-auth-state-store.service.js","sourceRoot":"","sources":["../../src/services/social-auth-state-store.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AACjC,gEAA0D;AAC1D,mEAA+D;AAK/D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAa,oBAAoB;IAIZ;IACA;IAJF,UAAU,CAAS;IAEpC,YACmB,OAAuB,EACvB,MAAoB,EACrC,aAAqB,CAAC,GAAG,EAAE;QAFV,YAAO,GAAP,OAAO,CAAgB;QACvB,WAAM,GAAN,MAAM,CAAc;QAGrC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,QAAQ,EAAE,kBAAkB;YAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SAC4B,CAAC,CAAC;QAErD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAAC,QAAgB,EAAE,KAAa;QAC/D,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAEnD,+EAA+E;QAC/E,mEAAmE;QACnE,+EAA+E;QAC/E,kFAAkF;QAClF,mDAAmD;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,wBAAwB;YACxB,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YAC3C,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,6EAA6E;QAC7E,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;YAC3D,6CAA6C;YAC7C,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;QACvF,CAAC;QAED,6CAA6C;QAC7C,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,OAAkC;QACxE,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC;YAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SAOtB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAAC,KAAa;QACxC,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAEjD,iEAAiE;QACjE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;YAC3D,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,cAAc;IACd,+EAA+E;IAEvE,UAAU,CAAC,KAAa;QAC9B,OAAO,qBAAqB,KAAK,EAAE,CAAC;IACtC,CAAC;IAEO,UAAU,CAAC,KAAa;QAC9B,OAAO,0BAA0B,KAAK,EAAE,CAAC;IAC3C,CAAC;IAEO,cAAc,CAAC,KAAa;QAClC,OAAO,yBAAyB,KAAK,EAAE,CAAC;IAC1C,CAAC;IAED,+EAA+E;IAC/E,qBAAqB;IACrB,+EAA+E;IAEvE,iBAAiB,CAAC,QAAgB;QACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,2BAA2B,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,cAAc,CAAC,KAAa;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,wBAAwB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,0BAA0B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,iBAAiB,CAAC,QAAgB;QACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,2BAA2B,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,wFAAwF;QACxF,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,mBAAmB,CAAC,GAAW;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAEhC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IAEO,uBAAuB,CAAC,GAAW;QAOzC,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAEhC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5C,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnF,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC3D,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC1D,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC5E,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACpE,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC9E,CAAC;IAEO,mBAAmB,CAAC,GAAW,EAAE,KAAa;QACpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,OAAO,MAAiC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6CAA6C;YAC7C,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,0CAA0C,KAAK,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1F,MAAM,IAAI,gCAAc,CAAC,gCAAa,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;CACF;AA7OD,oDA6OC"}

package/dist/storage/account-lockout-storage.service.d.ts

@@ -34,12 +34,12 @@ export declare class AccountLockoutStorageService implements AccountLockoutStora
      * @param duration - Lock duration in seconds
      * @param reason - Reason for lockout
      */
-    blockIpAdresss(ipAddress: string, duration: number, reason: string): Promise<void>;
+    lockIpAddress(ipAddress: string, duration: number, reason: string): Promise<void>;
     /**
      * Unlock an IP address and reset failed attempts
      * @param ipAddress - IP address to unlock
      */
-    unblockIPAdress(ipAddress: string): Promise<void>;
+    unlockIpAddress(ipAddress: string): Promise<void>;
     /**
      * Reset failed attempts counter for an IP address
      * @param ipAddress - IP address to reset

package/dist/storage/account-lockout-storage.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-lockout-storage.service.d.ts","sourceRoot":"","sources":["../../src/storage/account-lockout-storage.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEhG;;;;;GAKG;AACH,qBAAa,4BAA6B,YAAW,qBAAqB;IAI5D,OAAO,CAAC,QAAQ,CAAC,cAAc;IAH3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;gBAEvB,cAAc,EAAE,cAAc;IAE3D;;;;OAIG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK7D;;;;OAIG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAM3D;;;;OAIG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK1D;;;;;OAKG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxF;;;OAGG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvD;;;OAGG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3D,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,UAAU;CAGnB"}
+{"version":3,"file":"account-lockout-storage.service.d.ts","sourceRoot":"","sources":["../../src/storage/account-lockout-storage.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAEhG;;;;;GAKG;AACH,qBAAa,4BAA6B,YAAW,qBAAqB;IAI5D,OAAO,CAAC,QAAQ,CAAC,cAAc;IAH3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;gBAEvB,cAAc,EAAE,cAAc;IAE3D;;;;OAIG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK7D;;;;OAIG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAM3D;;;;OAIG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK1D;;;;;OAKG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvF;;;OAGG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvD;;;OAGG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3D,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,UAAU;CAGnB"}

package/dist/storage/account-lockout-storage.service.js

@@ -48,7 +48,7 @@ class AccountLockoutStorageService {
      * @param duration - Lock duration in seconds
      * @param reason - Reason for lockout
      */
-    async blockIpAdresss(ipAddress, duration, reason) {
+    async lockIpAddress(ipAddress, duration, reason) {
         const lockKey = this.getLockKey(ipAddress);
         const lockData = JSON.stringify({
             reason,
@@ -61,7 +61,7 @@ class AccountLockoutStorageService {
      * Unlock an IP address and reset failed attempts
      * @param ipAddress - IP address to unlock
      */
-    async unblockIPAdress(ipAddress) {
+    async unlockIpAddress(ipAddress) {
         const lockKey = this.getLockKey(ipAddress);
         await this.storageAdapter.del(lockKey);
         await this.resetFailedAttempts(ipAddress);

package/dist/storage/account-lockout-storage.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-lockout-storage.service.js","sourceRoot":"","sources":["../../src/storage/account-lockout-storage.service.ts"],"names":[],"mappings":";;;AAEA;;;;;GAKG;AACH,MAAa,4BAA4B;IAIV;IAHZ,SAAS,GAAG,mBAAmB,CAAC;IAChC,aAAa,GAAG,kBAAkB,CAAC;IAEpD,YAA6B,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAE/D;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAAc;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;YAC9B,MAAM;YACN,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SAClE,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAEO,MAAM,CAAC,SAAiB;QAC9B,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,SAAS,EAAE,CAAC;IACzC,CAAC;IAEO,UAAU,CAAC,SAAiB;QAClC,OAAO,GAAG,IAAI,CAAC,aAAa,GAAG,SAAS,EAAE,CAAC;IAC7C,CAAC;CACF;AAhFD,oEAgFC"}
+{"version":3,"file":"account-lockout-storage.service.js","sourceRoot":"","sources":["../../src/storage/account-lockout-storage.service.ts"],"names":[],"mappings":";;;AAEA;;;;;GAKG;AACH,MAAa,4BAA4B;IAIV;IAHZ,SAAS,GAAG,mBAAmB,CAAC;IAChC,aAAa,GAAG,kBAAkB,CAAC;IAEpD,YAA6B,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAE/D;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAAc;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;YAC9B,MAAM;YACN,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SAClE,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CAAC,SAAiB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAEO,MAAM,CAAC,SAAiB;QAC9B,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,SAAS,EAAE,CAAC;IACzC,CAAC;IAEO,UAAU,CAAC,SAAiB;QAClC,OAAO,GAAG,IAAI,CAAC,aAAa,GAAG,SAAS,EAAE,CAAC;IAC7C,CAAC;CACF;AAhFD,oEAgFC"}

package/dist/utils/index.d.ts

@@ -8,4 +8,5 @@ export * from './cookies.util';
 export * from './cookie-names.util';
 export * from './context-storage';
 export * from './token-delivery-policy';
+export * from './password-generator';
 //# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC"}

package/dist/utils/index.js

@@ -24,5 +24,6 @@ __exportStar(require("./cookies.util"), exports);
 __exportStar(require("./cookie-names.util"), exports);
 __exportStar(require("./context-storage"), exports);
 __exportStar(require("./token-delivery-policy"), exports);
+__exportStar(require("./password-generator"), exports);
 // user-agent-parser removed - functionality moved to ClientInfoService.parseUserAgent()
 //# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;AAEH,iDAA+B;AAC/B,iDAA+B;AAC/B,iDAA+B;AAC/B,iDAA+B;AAC/B,sDAAoC;AACpC,oDAAkC;AAClC,0DAAwC;AACxC,wFAAwF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;AAEH,iDAA+B;AAC/B,iDAA+B;AAC/B,iDAA+B;AAC/B,iDAA+B;AAC/B,sDAAoC;AACpC,oDAAkC;AAClC,0DAAwC;AACxC,uDAAqC;AACrC,wFAAwF"}

package/dist/utils/password-generator.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Generate a cryptographically secure random password
+ *
+ * Creates a password with:
+ * - Mixed case letters (a-z, A-Z)
+ * - Numbers (0-9)
+ * - Special characters (!@#$%^&*)
+ * - No ambiguous characters (0, O, l, 1, I) to prevent confusion
+ *
+ * The password is generated using cryptographically secure random number generation
+ * (crypto.randomBytes) to ensure unpredictability.
+ *
+ * @param length - Password length (default: 16)
+ * @returns Secure random password string
+ *
+ * @example
+ * ```typescript
+ * // Generate 16-character password (default)
+ * const password = generateSecurePassword();
+ * // Example output: "Kx9#mP2$vN7@qR4!"
+ *
+ * // Generate 20-character password
+ * const longPassword = generateSecurePassword(20);
+ * ```
+ *
+ * @throws {Error} If length is less than 8 or greater than 128
+ */
+export declare function generateSecurePassword(length?: number): string;
+//# sourceMappingURL=password-generator.d.ts.map

package/dist/utils/password-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-generator.d.ts","sourceRoot":"","sources":["../../src/utils/password-generator.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,GAAE,MAAW,GAAG,MAAM,CAsClE"}