@nauth-toolkit/core 0.1.29 → 0.1.30

package/dist/dto/index.d.ts

@@ -52,4 +52,5 @@ export * from './admin-set-password.dto';
 export * from './trust-device-response.dto';
 export * from './is-trusted-device-response.dto';
 export * from './social-auth.dto';
+export * from './social-redirect.dto';
 //# sourceMappingURL=index.d.ts.map

package/dist/dto/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sCAAsC,CAAC;AACrD,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yCAAyC,CAAC;AACxD,cAAc,0BAA0B,CAAC;AAEzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AAEjD,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sCAAsC,CAAC;AACrD,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yCAAyC,CAAC;AACxD,cAAc,0BAA0B,CAAC;AAEzC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AAEjD,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC"}

package/dist/dto/index.js

@@ -70,6 +70,7 @@ __exportStar(require("./admin-set-password.dto"), exports);
 __exportStar(require("./trust-device-response.dto"), exports);
 __exportStar(require("./is-trusted-device-response.dto"), exports);
 __exportStar(require("./social-auth.dto"), exports);
+__exportStar(require("./social-redirect.dto"), exports);
 // Note: Social and MFA DTOs moved to their respective packages
 // - social-login.dto → @nauth-toolkit/social-*
 // - mfa.dto → @nauth-toolkit/mfa-*

package/dist/dto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iBAAiB;AACjB,+CAA6B;AAC7B,qDAAmC;AACnC,8CAA4B;AAC5B,wDAAsC;AACtC,gEAA8C;AAC9C,iEAA+C;AAC/C,sDAAoC;AACpC,oDAAkC;AAClC,uEAAqD;AACrD,qDAAmC;AACnC,qDAAmC;AACnC,4DAA0C;AAC1C,uDAAqC;AACrC,wDAAsC;AACtC,gEAA8C;AAC9C,sDAAoC;AACpC,sDAAoC;AACpC,uDAAqC;AACrC,2DAAyC;AACzC,0DAAwC;AACxC,uDAAqC;AACrC,gEAA8C;AAC9C,2DAAyC;AACzC,oEAAkD;AAClD,8DAA4C;AAC5C,uDAAqC;AACrC,yDAAuC;AACvC,qDAAmC;AACnC,gEAA8C;AAC9C,uDAAqC;AACrC,0DAAwC;AACxC,6DAA2C;AAC3C,kDAAgC;AAChC,wDAAsC;AACtC,wDAAsC;AACtC,gEAA8C;AAC9C,gEAA8C;AAC9C,kEAAgD;AAChD,gEAA8C;AAC9C,oDAAkC;AAClC,6DAA2C;AAC3C,0DAAwC;AACxC,uDAAqC;AACrC,0DAAwC;AACxC,+CAA6B;AAC7B,wDAAsC;AACtC,mDAAiC;AACjC,4DAA0C;AAC1C,iEAA+C;AAC/C,0EAAwD;AACxD,2DAAyC;AACzC,+EAA+E;AAC/E,8DAA4C;AAC5C,mEAAiD;AAEjD,oDAAkC;AAElC,+DAA+D;AAC/D,+CAA+C;AAC/C,mCAAmC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iBAAiB;AACjB,+CAA6B;AAC7B,qDAAmC;AACnC,8CAA4B;AAC5B,wDAAsC;AACtC,gEAA8C;AAC9C,iEAA+C;AAC/C,sDAAoC;AACpC,oDAAkC;AAClC,uEAAqD;AACrD,qDAAmC;AACnC,qDAAmC;AACnC,4DAA0C;AAC1C,uDAAqC;AACrC,wDAAsC;AACtC,gEAA8C;AAC9C,sDAAoC;AACpC,sDAAoC;AACpC,uDAAqC;AACrC,2DAAyC;AACzC,0DAAwC;AACxC,uDAAqC;AACrC,gEAA8C;AAC9C,2DAAyC;AACzC,oEAAkD;AAClD,8DAA4C;AAC5C,uDAAqC;AACrC,yDAAuC;AACvC,qDAAmC;AACnC,gEAA8C;AAC9C,uDAAqC;AACrC,0DAAwC;AACxC,6DAA2C;AAC3C,kDAAgC;AAChC,wDAAsC;AACtC,wDAAsC;AACtC,gEAA8C;AAC9C,gEAA8C;AAC9C,kEAAgD;AAChD,gEAA8C;AAC9C,oDAAkC;AAClC,6DAA2C;AAC3C,0DAAwC;AACxC,uDAAqC;AACrC,0DAAwC;AACxC,+CAA6B;AAC7B,wDAAsC;AACtC,mDAAiC;AACjC,4DAA0C;AAC1C,iEAA+C;AAC/C,0EAAwD;AACxD,2DAAyC;AACzC,+EAA+E;AAC/E,8DAA4C;AAC5C,mEAAiD;AAEjD,oDAAkC;AAClC,wDAAsC;AAEtC,+DAA+D;AAC/D,+CAA+C;AAC/C,mCAAmC"}

package/dist/dto/social-redirect.dto.d.ts

@@ -0,0 +1,302 @@
+/**
+ * DTO for starting the redirect-first social login flow
+ *
+ * Used when initiating a backend-first OAuth redirect flow where the provider
+ * redirects back to the backend callback endpoint.
+ *
+ * @example
+ * ```typescript
+ * // GET /auth/social/google/redirect?returnTo=/auth/callback&appState=12345&action=login
+ * ```
+ */
+export declare class StartSocialRedirectQueryDTO {
+    /**
+     * Frontend path or absolute URL to redirect to after authentication completes
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2048 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     *
+     * @example '/auth/callback'
+     * @example 'https://myapp.com/auth/callback'
+     */
+    returnTo?: string;
+    /**
+     * Opaque, non-secret state to round-trip back to the frontend
+     *
+     * This value is stored during the OAuth flow and returned to the frontend
+     * after authentication completes. Use it to maintain UI state across the redirect.
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     *
+     * @example '12345'
+     * @example 'page=dashboard&mode=dark'
+     */
+    appState?: string;
+    /**
+     * Redirect action type
+     *
+     * - `login`: Standard social login/signup (default)
+     * - `link`: Link social account to existing authenticated user
+     *
+     * Validation:
+     * - Optional field
+     * - Must be either 'login' or 'link'
+     *
+     * @example 'login'
+     * @example 'link'
+     */
+    action?: 'login' | 'link';
+}
+/**
+ * DTO for OAuth callbacks via GET query parameters
+ *
+ * Used by providers that redirect with query params (Google, Facebook).
+ * This DTO handles both successful callbacks and error scenarios.
+ *
+ * @example
+ * ```typescript
+ * // Successful callback
+ * // GET /auth/social/google/callback?code=ABC123&state=xyz789
+ *
+ * // Error callback
+ * // GET /auth/social/google/callback?error=access_denied&error_description=User+cancelled
+ * ```
+ */
+export declare class SocialCallbackQueryDTO {
+    /**
+     * OAuth authorization code from provider
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    code?: string;
+    /**
+     * OAuth state parameter for CSRF protection
+     *
+     * Validation:
+     * - Optional field
+     * - Max 500 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    state?: string;
+    /**
+     * Provider error code (if user cancels or error occurs)
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     *
+     * @example 'access_denied'
+     */
+    error?: string;
+    /**
+     * Provider error description
+     *
+     * Validation:
+     * - Optional field
+     * - Max 4000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     *
+     * @example 'User cancelled the authentication request'
+     */
+    error_description?: string;
+    /**
+     * Google-specific: OAuth scope parameter
+     *
+     * Google often includes this in the callback. Explicitly allowed to avoid
+     * validation errors when using whitelist + forbidNonWhitelisted validation.
+     *
+     * Validation:
+     * - Optional field
+     * - Max 4000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    scope?: string;
+    /**
+     * Google-specific: Authenticated user index
+     *
+     * Validation:
+     * - Optional field
+     * - Max 50 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    authuser?: string;
+    /**
+     * Google-specific: Hosted domain parameter
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    hd?: string;
+    /**
+     * Google-specific: Prompt parameter
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    prompt?: string;
+    /**
+     * Provider-specific: Session state parameter
+     *
+     * Some providers include this for session management.
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    session_state?: string;
+    /**
+     * Provider-specific: Error URI parameter
+     *
+     * Some providers include a URI with more error details.
+     *
+     * Validation:
+     * - Optional field
+     * - Max 4000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    error_uri?: string;
+}
+/**
+ * DTO for Apple form_post OAuth callbacks
+ *
+ * Apple uses POST form_post response mode instead of query parameters.
+ * This DTO handles the form data sent to the callback endpoint.
+ *
+ * @example
+ * ```typescript
+ * // POST /auth/social/apple/callback
+ * // Content-Type: application/x-www-form-urlencoded
+ * // code=ABC123&state=xyz789
+ * ```
+ */
+export declare class SocialCallbackFormDTO {
+    /**
+     * OAuth authorization code from provider
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    code?: string;
+    /**
+     * OAuth state parameter for CSRF protection
+     *
+     * Validation:
+     * - Optional field
+     * - Max 500 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    state?: string;
+    /**
+     * Provider error code (if user cancels or error occurs)
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    error?: string;
+    /**
+     * Provider error description
+     *
+     * Validation:
+     * - Optional field
+     * - Max 4000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    error_description?: string;
+    /**
+     * Provider callback extras (for validation compatibility)
+     *
+     * Included for parity with GET callback DTO to avoid strict validation issues.
+     *
+     * Validation:
+     * - Optional field
+     * - Max 4000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    scope?: string;
+    /**
+     * Provider-specific parameter
+     *
+     * Validation:
+     * - Optional field
+     * - Max 50 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    authuser?: string;
+    /**
+     * Provider-specific parameter
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    hd?: string;
+    /**
+     * Provider-specific parameter
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    prompt?: string;
+}
+//# sourceMappingURL=social-redirect.dto.d.ts.map

package/dist/dto/social-redirect.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-redirect.dto.d.ts","sourceRoot":"","sources":["../../src/dto/social-redirect.dto.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,qBAAa,2BAA2B;IACtC;;;;;;;;;;;;OAYG;IAKH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;;;;;;;;;OAeG;IAKH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;;;;;;OAYG;IAGH,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,sBAAsB;IACjC;;;;;;;;;OASG;IAKH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;;;;;;OASG;IAKH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;;;;;;;;OAWG;IAKH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;;;;;;;;OAWG;IAKH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;;;;;;;;OAYG;IAKH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;;;;;;OASG;IAKH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;;;OASG;IAKH,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ;;;;;;;;;OASG;IAKH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;;;;;;;OAWG;IAKH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;;;;;;;;OAWG;IAKH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAqB;IAChC;;;;;;;;;OASG;IAKH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;;;;;;OASG;IAKH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;;;;;;OASG;IAKH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;;;;;;OASG;IAKH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;;;;;;;OAWG;IAKH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;;;;;;OASG;IAKH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;;;OASG;IAKH,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ;;;;;;;;;OASG;IAKH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/dto/social-redirect.dto.js

@@ -0,0 +1,464 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SocialCallbackFormDTO = exports.SocialCallbackQueryDTO = exports.StartSocialRedirectQueryDTO = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+/**
+ * DTO for starting the redirect-first social login flow
+ *
+ * Used when initiating a backend-first OAuth redirect flow where the provider
+ * redirects back to the backend callback endpoint.
+ *
+ * @example
+ * ```typescript
+ * // GET /auth/social/google/redirect?returnTo=/auth/callback&appState=12345&action=login
+ * ```
+ */
+class StartSocialRedirectQueryDTO {
+    /**
+     * Frontend path or absolute URL to redirect to after authentication completes
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2048 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     *
+     * @example '/auth/callback'
+     * @example 'https://myapp.com/auth/callback'
+     */
+    returnTo;
+    /**
+     * Opaque, non-secret state to round-trip back to the frontend
+     *
+     * This value is stored during the OAuth flow and returned to the frontend
+     * after authentication completes. Use it to maintain UI state across the redirect.
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     *
+     * @example '12345'
+     * @example 'page=dashboard&mode=dark'
+     */
+    appState;
+    /**
+     * Redirect action type
+     *
+     * - `login`: Standard social login/signup (default)
+     * - `link`: Link social account to existing authenticated user
+     *
+     * Validation:
+     * - Optional field
+     * - Must be either 'login' or 'link'
+     *
+     * @example 'login'
+     * @example 'link'
+     */
+    action;
+}
+exports.StartSocialRedirectQueryDTO = StartSocialRedirectQueryDTO;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2048),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], StartSocialRedirectQueryDTO.prototype, "returnTo", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], StartSocialRedirectQueryDTO.prototype, "appState", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(['login', 'link']),
+    __metadata("design:type", String)
+], StartSocialRedirectQueryDTO.prototype, "action", void 0);
+/**
+ * DTO for OAuth callbacks via GET query parameters
+ *
+ * Used by providers that redirect with query params (Google, Facebook).
+ * This DTO handles both successful callbacks and error scenarios.
+ *
+ * @example
+ * ```typescript
+ * // Successful callback
+ * // GET /auth/social/google/callback?code=ABC123&state=xyz789
+ *
+ * // Error callback
+ * // GET /auth/social/google/callback?error=access_denied&error_description=User+cancelled
+ * ```
+ */
+class SocialCallbackQueryDTO {
+    /**
+     * OAuth authorization code from provider
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    code;
+    /**
+     * OAuth state parameter for CSRF protection
+     *
+     * Validation:
+     * - Optional field
+     * - Max 500 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    state;
+    /**
+     * Provider error code (if user cancels or error occurs)
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     *
+     * @example 'access_denied'
+     */
+    error;
+    /**
+     * Provider error description
+     *
+     * Validation:
+     * - Optional field
+     * - Max 4000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     *
+     * @example 'User cancelled the authentication request'
+     */
+    error_description;
+    /**
+     * Google-specific: OAuth scope parameter
+     *
+     * Google often includes this in the callback. Explicitly allowed to avoid
+     * validation errors when using whitelist + forbidNonWhitelisted validation.
+     *
+     * Validation:
+     * - Optional field
+     * - Max 4000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    scope;
+    /**
+     * Google-specific: Authenticated user index
+     *
+     * Validation:
+     * - Optional field
+     * - Max 50 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    authuser;
+    /**
+     * Google-specific: Hosted domain parameter
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    hd;
+    /**
+     * Google-specific: Prompt parameter
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    prompt;
+    /**
+     * Provider-specific: Session state parameter
+     *
+     * Some providers include this for session management.
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    session_state;
+    /**
+     * Provider-specific: Error URI parameter
+     *
+     * Some providers include a URI with more error details.
+     *
+     * Validation:
+     * - Optional field
+     * - Max 4000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    error_uri;
+}
+exports.SocialCallbackQueryDTO = SocialCallbackQueryDTO;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackQueryDTO.prototype, "code", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(500),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackQueryDTO.prototype, "state", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackQueryDTO.prototype, "error", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(4000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackQueryDTO.prototype, "error_description", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(4000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackQueryDTO.prototype, "scope", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(50),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackQueryDTO.prototype, "authuser", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackQueryDTO.prototype, "hd", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackQueryDTO.prototype, "prompt", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackQueryDTO.prototype, "session_state", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(4000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackQueryDTO.prototype, "error_uri", void 0);
+/**
+ * DTO for Apple form_post OAuth callbacks
+ *
+ * Apple uses POST form_post response mode instead of query parameters.
+ * This DTO handles the form data sent to the callback endpoint.
+ *
+ * @example
+ * ```typescript
+ * // POST /auth/social/apple/callback
+ * // Content-Type: application/x-www-form-urlencoded
+ * // code=ABC123&state=xyz789
+ * ```
+ */
+class SocialCallbackFormDTO {
+    /**
+     * OAuth authorization code from provider
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    code;
+    /**
+     * OAuth state parameter for CSRF protection
+     *
+     * Validation:
+     * - Optional field
+     * - Max 500 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    state;
+    /**
+     * Provider error code (if user cancels or error occurs)
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    error;
+    /**
+     * Provider error description
+     *
+     * Validation:
+     * - Optional field
+     * - Max 4000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    error_description;
+    /**
+     * Provider callback extras (for validation compatibility)
+     *
+     * Included for parity with GET callback DTO to avoid strict validation issues.
+     *
+     * Validation:
+     * - Optional field
+     * - Max 4000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    scope;
+    /**
+     * Provider-specific parameter
+     *
+     * Validation:
+     * - Optional field
+     * - Max 50 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    authuser;
+    /**
+     * Provider-specific parameter
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    hd;
+    /**
+     * Provider-specific parameter
+     *
+     * Validation:
+     * - Optional field
+     * - Max 2000 characters
+     *
+     * Sanitization:
+     * - Trimmed
+     */
+    prompt;
+}
+exports.SocialCallbackFormDTO = SocialCallbackFormDTO;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackFormDTO.prototype, "code", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(500),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackFormDTO.prototype, "state", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackFormDTO.prototype, "error", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(4000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackFormDTO.prototype, "error_description", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(4000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackFormDTO.prototype, "scope", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(50),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackFormDTO.prototype, "authuser", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackFormDTO.prototype, "hd", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(2000),
+    (0, class_transformer_1.Transform)(({ value }) => (typeof value === 'string' ? value.trim() : value)),
+    __metadata("design:type", String)
+], SocialCallbackFormDTO.prototype, "prompt", void 0);
+//# sourceMappingURL=social-redirect.dto.js.map

package/dist/dto/social-redirect.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-redirect.dto.js","sourceRoot":"","sources":["../../src/dto/social-redirect.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAA8C;AAC9C,qDAAwE;AAExE;;;;;;;;;;GAUG;AACH,MAAa,2BAA2B;IACtC;;;;;;;;;;;;OAYG;IAKH,QAAQ,CAAU;IAElB;;;;;;;;;;;;;;;OAeG;IAKH,QAAQ,CAAU;IAElB;;;;;;;;;;;;OAYG;IAGH,MAAM,CAAoB;CAC3B;AA1DD,kEA0DC;AAxCC;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;6DAC3D;AAsBlB;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;6DAC3D;AAiBlB;IAFC,IAAA,4BAAU,GAAE;IACZ,IAAA,sBAAI,EAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;;2DACE;AAG5B;;;;;;;;;;;;;;GAcG;AACH,MAAa,sBAAsB;IACjC;;;;;;;;;OASG;IAKH,IAAI,CAAU;IAEd;;;;;;;;;OASG;IAKH,KAAK,CAAU;IAEf;;;;;;;;;;;OAWG;IAKH,KAAK,CAAU;IAEf;;;;;;;;;;;OAWG;IAKH,iBAAiB,CAAU;IAE3B;;;;;;;;;;;;OAYG;IAKH,KAAK,CAAU;IAEf;;;;;;;;;OASG;IAKH,QAAQ,CAAU;IAElB;;;;;;;;;OASG;IAKH,EAAE,CAAU;IAEZ;;;;;;;;;OASG;IAKH,MAAM,CAAU;IAEhB;;;;;;;;;;;OAWG;IAKH,aAAa,CAAU;IAEvB;;;;;;;;;;;OAWG;IAKH,SAAS,CAAU;CACpB;AA3KD,wDA2KC;AA5JC;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;oDAC/D;AAgBd;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;qDAC9D;AAkBf;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;qDAC9D;AAkBf;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;iEAClD;AAmB3B;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;qDAC9D;AAgBf;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;IACb,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;wDAC3D;AAgBlB;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;kDACjE;AAgBZ;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;sDAC7D;AAkBhB;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;6DACtD;AAkBvB;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;yDAC1D;AAGrB;;;;;;;;;;;;GAYG;AACH,MAAa,qBAAqB;IAChC;;;;;;;;;OASG;IAKH,IAAI,CAAU;IAEd;;;;;;;;;OASG;IAKH,KAAK,CAAU;IAEf;;;;;;;;;OASG;IAKH,KAAK,CAAU;IAEf;;;;;;;;;OASG;IAKH,iBAAiB,CAAU;IAE3B;;;;;;;;;;;OAWG;IAKH,KAAK,CAAU;IAEf;;;;;;;;;OASG;IAKH,QAAQ,CAAU;IAElB;;;;;;;;;OASG;IAKH,EAAE,CAAU;IAEZ;;;;;;;;;OASG;IAKH,MAAM,CAAU;CACjB;AAlID,sDAkIC;AAnHC;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;mDAC/D;AAgBd;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,GAAG,CAAC;IACd,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;oDAC9D;AAgBf;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;oDAC9D;AAgBf;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;gEAClD;AAkB3B;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;oDAC9D;AAgBf;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;IACb,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;uDAC3D;AAgBlB;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;iDACjE;AAgBZ;IAJC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,IAAI,CAAC;IACf,IAAA,6BAAS,EAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;;qDAC7D"}

package/dist/schemas/auth-config.schema.d.ts

@@ -2930,6 +2930,9 @@ export declare const authConfigSchema: z.ZodEffects<z.ZodObject<{
         disallowMultipleSessions?: boolean | undefined;
         maxLifetime?: string | number | undefined;
     } | undefined;
+    login?: {
+        identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
+    } | undefined;
     social?: {
         google?: {
             clientSecret?: string | undefined;
@@ -2966,9 +2969,6 @@ export declare const authConfigSchema: z.ZodEffects<z.ZodObject<{
             allowedReturnToOrigins?: string[] | undefined;
         } | undefined;
     } | undefined;
-    login?: {
-        identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
-    } | undefined;
     tablePrefix?: string | undefined;
     signup?: {
         enabled?: boolean | undefined;
@@ -3198,6 +3198,9 @@ export declare const authConfigSchema: z.ZodEffects<z.ZodObject<{
         disallowMultipleSessions?: boolean | undefined;
         maxLifetime?: string | number | undefined;
     } | undefined;
+    login?: {
+        identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
+    } | undefined;
     social?: {
         google?: {
             clientSecret?: string | undefined;
@@ -3234,9 +3237,6 @@ export declare const authConfigSchema: z.ZodEffects<z.ZodObject<{
             allowedReturnToOrigins?: string[] | undefined;
         } | undefined;
     } | undefined;
-    login?: {
-        identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
-    } | undefined;
     tablePrefix?: string | undefined;
     signup?: {
         enabled?: boolean | undefined;
@@ -3466,6 +3466,9 @@ export declare const authConfigSchema: z.ZodEffects<z.ZodObject<{
         disallowMultipleSessions?: boolean | undefined;
         maxLifetime?: string | number | undefined;
     } | undefined;
+    login?: {
+        identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
+    } | undefined;
     social?: {
         google?: {
             clientSecret?: string | undefined;
@@ -3502,9 +3505,6 @@ export declare const authConfigSchema: z.ZodEffects<z.ZodObject<{
             allowedReturnToOrigins?: string[] | undefined;
         } | undefined;
     } | undefined;
-    login?: {
-        identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
-    } | undefined;
     tablePrefix?: string | undefined;
     signup?: {
         enabled?: boolean | undefined;
@@ -3734,6 +3734,9 @@ export declare const authConfigSchema: z.ZodEffects<z.ZodObject<{
         disallowMultipleSessions?: boolean | undefined;
         maxLifetime?: string | number | undefined;
     } | undefined;
+    login?: {
+        identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
+    } | undefined;
     social?: {
         google?: {
             clientSecret?: string | undefined;
@@ -3770,9 +3773,6 @@ export declare const authConfigSchema: z.ZodEffects<z.ZodObject<{
             allowedReturnToOrigins?: string[] | undefined;
         } | undefined;
     } | undefined;
-    login?: {
-        identifierType?: "email" | "phone" | "username" | "email_or_username" | undefined;
-    } | undefined;
     tablePrefix?: string | undefined;
     signup?: {
         enabled?: boolean | undefined;

package/dist/services/index.d.ts

@@ -4,7 +4,6 @@ export * from './session.service';
 export * from './auth.service';
 export * from './email-verification.service';
 export * from './client-info.service';
-export * from './challenge.service';
 export * from './auth-challenge-helper.service';
 export * from './mfa-base.service';
 export * from './mfa.service';

package/dist/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iCAAiC,CAAC;AAChD,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AAEtC,cAAc,iCAAiC,CAAC;AAChD,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC"}

package/dist/services/index.js

@@ -20,7 +20,7 @@ __exportStar(require("./session.service"), exports);
 __exportStar(require("./auth.service"), exports);
 __exportStar(require("./email-verification.service"), exports);
 __exportStar(require("./client-info.service"), exports);
-__exportStar(require("./challenge.service"), exports);
+// ChallengeService is internal - exported from /internal only
 __exportStar(require("./auth-challenge-helper.service"), exports);
 __exportStar(require("./mfa-base.service"), exports);
 __exportStar(require("./mfa.service"), exports);

package/dist/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,gDAA8B;AAC9B,oDAAkC;AAClC,iDAA+B;AAC/B,+DAA6C;AAC7C,wDAAsC;AACtC,sDAAoC;AACpC,kEAAgD;AAChD,qDAAmC;AACnC,gDAA8B;AAC9B,2DAAyC;AACzC,yDAAuC;AACvC,kEAAgD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,gDAA8B;AAC9B,oDAAkC;AAClC,iDAA+B;AAC/B,+DAA6C;AAC7C,wDAAsC;AACtC,8DAA8D;AAC9D,kEAAgD;AAChD,qDAAmC;AACnC,gDAA8B;AAC9B,2DAAyC;AACzC,yDAAuC;AACvC,kEAAgD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nauth-toolkit/core",
-  "version": "0.1.29",
+  "version": "0.1.30",
   "description": "Core authentication toolkit for Node JS",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",