@nauth-toolkit/mfa-email 0.1.13 → 0.1.17

package/dist/src/email-mfa-provider.service.js

@@ -1,38 +1,95 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.EmailMFAProviderService = void 0;
+// Public API imports
 const core_1 = require("@nauth-toolkit/core");
+// Internal API imports (for provider implementations)
 const internal_1 = require("@nauth-toolkit/core/internal");
+/**
+ * Email MFA Provider Service
+ *
+ * Implements Email-based MFA method.
+ * Extends BaseMFAProviderService to provide Email-specific functionality.
+ *
+ * This service handles:
+ * - Email code sending during setup and authentication
+ * - Email code verification
+ * - MFA device creation for Email
+ *
+ * Requires EmailVerificationService from core (available when email provider is configured).
+ *
+ * @example
+ * ```typescript
+ * @Module({
+ *   imports: [EmailMFAModule],
+ * })
+ * export class AppModule {}
+ * ```
+ */
 class EmailMFAProviderService extends internal_1.BaseMFAProviderService {
     emailVerificationService;
     methodName = core_1.MFAMethod.EMAIL;
-    constructor(mfaDeviceRepository, userRepository, config, logger, passwordService, emailVerificationService, challengeService, auditService, clientInfoService) {
+    constructor(mfaDeviceRepository, userRepository, config, logger, passwordService, emailVerificationService, challengeService, // ChallengeService (optional)
+    auditService, // AuthAuditService (optional)
+    clientInfoService) {
         super(mfaDeviceRepository, userRepository, config, logger, passwordService, challengeService, auditService, clientInfoService);
         this.emailVerificationService = emailVerificationService;
     }
+    /**
+     * Setup Email MFA for user
+     *
+     * Sends verification code to email address, or auto-completes setup if email is already verified.
+     * User must verify code to complete setup (unless email is already verified).
+     *
+     * @param user - User setting up Email MFA
+     * @param setupData - Setup data (must be SetupEmailMFADTO)
+     * @returns Setup result with deviceId if auto-completed, or maskedEmail if code was sent
+     * @throws {NAuthException} If Email is not enabled or email verification service unavailable
+     *
+     * @example
+     * ```typescript
+     * const result = await provider.setup(user, {
+     *   email: 'user@example.com',
+     *   deviceName: 'My Email'
+     * });
+     * // If email verified: { deviceId: 123, autoCompleted: true }
+     * // If email not verified: { maskedEmail: 'u***r@example.com' } (Email code sent)
+     * ```
+     */
     async setup(user, setupData) {
         this.logger?.log?.(`Setting up Email MFA for user: ${user.sub}`);
+        // Check if Email is allowed
         if (!this.isMethodAllowed()) {
             throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Email MFA is not enabled', { feature: 'email-mfa' });
         }
         const dto = setupData;
         const userEntity = user;
         const isEmailVerified = userEntity.isEmailVerified || false;
+        // Get email address from setupData or user object
         const email = dto?.email || userEntity.email;
         if (!email) {
             throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Email address is required for Email MFA setup. Please provide an email address.');
         }
+        // ============================================================================
+        // Special case: If email is already verified, auto-complete MFA setup
+        // No Email code needed - create device directly
+        // ============================================================================
         if (isEmailVerified) {
             this.logger?.log?.(`Email already verified for user ${user.sub}, auto-completing Email MFA setup`);
+            // Auto-create MFA device without code verification
             const deviceId = await this.verifySetup(user, {
                 email,
-                code: '',
+                code: '', // Code not needed when email is verified
             }, dto?.deviceName);
             return { deviceId, autoCompleted: true };
         }
+        // Email not verified - send Email verification code
+        // Check if email verification service is available
         if (!this.emailVerificationService) {
             throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Email verification service is not available. Email provider must be configured.');
         }
+        // Send Email verification code (email not verified, so code is required)
+        // Link verification token to challenge session if provided in setupData
         const sendDto = new core_1.SendVerificationEmailDTO();
         sendDto.sub = user.sub;
         const setupDataWithSession = setupData;
@@ -42,8 +99,34 @@ class EmailMFAProviderService extends internal_1.BaseMFAProviderService {
         await this.emailVerificationService.sendVerificationEmail(sendDto);
         const maskedEmail = this.maskEmail(email);
         this.logger?.log?.(`Email MFA code sent to: ${maskedEmail}`);
+        // Return masked email for frontend display
         return { maskedEmail };
     }
+    /**
+     * Verify and complete Email MFA setup
+     *
+     * Validates the Email code and stores the device if valid.
+     * Enables MFA for user if this is their first device.
+     *
+     * **Race Condition Safety:**
+     * Device creation uses transaction with pessimistic locking to prevent duplicates.
+     * If device already exists (e.g., from concurrent request), returns existing device.
+     * Database unique constraint (userId, type) provides final safety net.
+     *
+     * @param user - User completing Email MFA setup
+     * @param verificationData - Verification data (must be VerifyEmailMFASetupDTO)
+     * @param deviceName - Optional device name override
+     * @returns MFA device ID (created or existing)
+     * @throws {NAuthException} If code is invalid
+     *
+     * @example
+     * ```typescript
+     * const deviceId = await provider.verifySetup(user, {
+     *   email: 'user@example.com',
+     *   code: '123456'
+     * });
+     * ```
+     */
     async verifySetup(user, verificationData, deviceName) {
         this.logger?.log?.(`Verifying Email MFA setup for user: ${user.sub}`);
         const dto = verificationData;
@@ -51,11 +134,18 @@ class EmailMFAProviderService extends internal_1.BaseMFAProviderService {
         const userId = userEntity.id;
         const userMfaEnabled = userEntity.mfaEnabled || false;
         const isEmailVerified = userEntity.isEmailVerified || false;
+        // Get email address from dto or fall back to user object
+        // This ensures email is always stored in the device, even if dto.email is undefined
         const email = dto.email || userEntity.email;
         if (!email) {
             throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Email address is required for Email MFA setup. Please provide an email address.');
         }
+        // ============================================================================
+        // Special case: If email is already verified, skip code verification
+        // This improves UX by avoiding redundant Email verification after email verification
+        // ============================================================================
         if (!isEmailVerified) {
+            // Email not verified - verify Email code (this will also mark email as verified)
             if (!this.emailVerificationService) {
                 throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Email verification service is not available. Email provider must be configured.');
             }
@@ -63,6 +153,7 @@ class EmailMFAProviderService extends internal_1.BaseMFAProviderService {
                 throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Verification code is required');
             }
             try {
+                // Verify email with code - this will mark email as verified in the database
                 const verifyDto = new core_1.VerifyEmailWithCodeDTO();
                 verifyDto.email = user.email;
                 verifyDto.code = dto.code;
@@ -70,26 +161,52 @@ class EmailMFAProviderService extends internal_1.BaseMFAProviderService {
                 this.logger?.log?.(`Email verified during Email MFA setup for user ${user.sub} - email is now marked as verified in database`);
             }
             catch (error) {
+                // Re-throw with more specific error message
                 const errorMessage = error instanceof Error ? error.message : 'Unknown error';
                 this.logger?.error?.(`Failed to verify email during Email MFA setup for user ${user.sub}: ${errorMessage}`, error);
                 throw new core_1.NAuthException(core_1.AuthErrorCode.VERIFICATION_CODE_INVALID, 'Invalid Email code');
             }
         }
         else {
+            // Email already verified - skip code verification
             this.logger?.log?.(`Email already verified for user ${user.sub}, skipping Email code verification during MFA setup`);
         }
+        // ============================================================================
+        // Create MFA device (transaction-safe with duplicate prevention)
+        // ============================================================================
+        // createDevice() uses pessimistic locking to prevent race conditions
+        // If device already exists, returns existing device instead of creating duplicate
+        // Database unique constraint (userId, type) provides additional safety
         const device = await this.createDevice(userId, {
             name: deviceName || 'Email',
-            email,
+            email, // Use resolved email (dto.email or user.email)
             isActive: true,
-            isPrimary: !userMfaEnabled,
+            isPrimary: !userMfaEnabled, // First device becomes primary
         });
+        // Enable MFA if not already enabled
         await this.enableMFAForUser(user);
         this.logger?.log?.(`Email MFA setup completed for user: ${user.sub}`);
         return device.id;
     }
+    /**
+     * Verify Email code during authentication
+     *
+     * Validates the Email code for an existing device.
+     *
+     * @param user - User being authenticated
+     * @param code - Email code (string)
+     * @param deviceId - Optional device ID to verify against
+     * @returns True if verification succeeds
+     * @throws {NAuthException} If device not found or verification fails
+     *
+     * @example
+     * ```typescript
+     * const isValid = await provider.verify(user, '123456');
+     * ```
+     */
     async verify(user, code, deviceId) {
         this.logger?.log?.(`Verifying Email code for user: ${user.sub}`);
+        // Check if email verification service is available
         if (!this.emailVerificationService) {
             this.logger?.warn?.('Email verification attempted but email verification service is not available');
             return false;
@@ -99,11 +216,21 @@ class EmailMFAProviderService extends internal_1.BaseMFAProviderService {
             this.logger?.warn?.('Invalid Email code format');
             return false;
         }
+        // Get user entity
         const userEntity = user;
         const userId = userEntity.id;
         const isEmailVerified = userEntity.isEmailVerified || false;
+        // Find device (optional - Email verification uses email verification service)
         const device = deviceId ? await this.findDevice(userId, deviceId) : null;
+        // Verify Email code using email verification service
         try {
+            // ============================================================================
+            // MFA Verification: Verify Email code for authentication
+            // Note: verifyEmailWithCode only marks email as verified if not already verified.
+            // This avoids unnecessary database writes and updatedAt timestamp changes.
+            // 1. During MFA setup (verifySetup): We check isEmailVerified first, so it only marks if not verified
+            // 2. During MFA login (verify): If email is already verified, no user table update occurs
+            // ============================================================================
             const verifyDto = new core_1.VerifyEmailWithCodeDTO();
             verifyDto.email = user.email;
             verifyDto.code = emailCode;
@@ -114,6 +241,7 @@ class EmailMFAProviderService extends internal_1.BaseMFAProviderService {
             else {
                 this.logger?.log?.(`Email code verified for MFA (email already verified) for user: ${user.sub}`);
             }
+            // Update device usage if device found
             if (device) {
                 await this.updateDeviceUsage(device.id);
             }
@@ -121,30 +249,56 @@ class EmailMFAProviderService extends internal_1.BaseMFAProviderService {
             return true;
         }
         catch (error) {
+            // Re-throw NAuthException to preserve specific error codes (e.g., VERIFY_TOO_MANY_ATTEMPTS)
+            // This allows the calling code to handle rate limiting and other specific errors correctly
             if (error instanceof core_1.NAuthException) {
                 throw error;
             }
+            // For unexpected errors, log and return false (generic failure)
             const errorMessage = error instanceof Error ? error.message : String(error);
             const errorCode = error?.code || 'UNKNOWN';
             this.logger?.warn?.(`Email code verification failed for user: ${user.sub}, code: ${emailCode}, error: ${errorCode} - ${errorMessage}`);
             return false;
         }
     }
+    /**
+     * Send Email code for MFA verification
+     *
+     * Called during login MFA challenge to send code to registered email.
+     *
+     * @param user - User requesting Email code
+     * @returns Masked email address where code was sent
+     * @throws {NAuthException} If no Email device registered or email verification service unavailable
+     *
+     * @example
+     * ```typescript
+     * const maskedEmail = await provider.sendChallenge(user);
+     * // Returns: 'u***r@example.com'
+     * ```
+     */
     async sendChallenge(user) {
         this.logger?.log?.(`Sending Email MFA code for user: ${user.sub}`);
+        // Get user entity
         const userEntity = user;
         const userId = userEntity.id;
+        // Find active Email device
         const device = await this.findDevice(userId);
         if (!device) {
             throw new core_1.NAuthException(core_1.AuthErrorCode.NOT_FOUND, 'No Email device registered', { deviceType: 'email' });
         }
+        // Get email address from device or fall back to user email
+        // Fallback handles legacy devices where email field might be null
         const emailAddress = device.email || user.email;
         if (!emailAddress) {
             throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'No email address found for Email MFA. Please update your profile or re-setup Email MFA.', { deviceType: 'email' });
         }
+        // Check if email verification service is available
         if (!this.emailVerificationService) {
             throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Email verification service is not available. Email provider must be configured.');
         }
+        // Send Email code for MFA verification
+        // Always send codes for MFA verification (even if email is already verified)
+        // skipAlreadyVerifiedCheck=true because email is already verified but we need MFA code
         const sendDto = new core_1.SendVerificationEmailDTO();
         sendDto.sub = user.sub;
         sendDto.skipAlreadyVerifiedCheck = true;

package/dist/src/email-mfa-provider.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-mfa-provider.service.js","sourceRoot":"","sources":["../../src/email-mfa-provider.service.ts"],"names":[],"mappings":";;;AAEA,8CAY6B;AAE7B,2DAAsE;AAwBtE,MAAa,uBAAwB,SAAQ,iCAAsB;IAS9C;IARV,UAAU,GAAG,gBAAS,CAAC,KAAK,CAAC;IAEtC,YACE,mBAA8C,EAC9C,cAAoC,EACpC,MAAmB,EACnB,MAAmB,EACnB,eAAwB,EACP,wBAAmD,EACpE,gBAA0B,EAC1B,YAAsB,EACtB,iBAA2B;QAE3B,KAAK,CACH,mBAAmB,EACnB,cAAc,EACd,MAAM,EACN,MAAM,EACN,eAAe,EACf,gBAAuB,EACvB,YAAmB,EACnB,iBAAwB,CACzB,CAAC;QAde,6BAAwB,GAAxB,wBAAwB,CAA2B;IAetE,CAAC;IAuBD,KAAK,CAAC,KAAK,CACT,IAAW,EACX,SAAmB;QAEnB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,kCAAkC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAGjE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,0BAA0B,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAClH,CAAC;QAED,MAAM,GAAG,GAAG,SAAyC,CAAC;QACtD,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,eAAe,GAAI,UAAU,CAAC,eAA2B,IAAI,KAAK,CAAC;QAGzE,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,IAAK,UAAU,CAAC,KAA4B,CAAC;QAErE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAMD,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,mCAAmC,IAAI,CAAC,GAAG,mCAAmC,CAAC,CAAC;YAEnG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CACrC,IAAI,EACJ;gBACE,KAAK;gBACL,IAAI,EAAE,EAAE;aACT,EACD,GAAG,EAAE,UAAU,CAChB,CAAC;YACF,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;QAID,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACnC,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAID,MAAM,OAAO,GAAG,IAAI,+BAAwB,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACvB,MAAM,oBAAoB,GAAG,SAA6E,CAAC;QAC3G,IAAI,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;YAC7C,OAAO,CAAC,kBAAkB,GAAG,oBAAoB,CAAC,kBAAkB,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAEnE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC;QAG7D,OAAO,EAAE,WAAW,EAAE,CAAC;IACzB,CAAC;IA2BD,KAAK,CAAC,WAAW,CAAC,IAAW,EAAE,gBAAyB,EAAE,UAAmB;QAC3E,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,uCAAuC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEtE,MAAM,GAAG,GAAG,gBAA0C,CAAC;QACvD,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QACvC,MAAM,cAAc,GAAI,UAAU,CAAC,UAAsB,IAAI,KAAK,CAAC;QACnE,MAAM,eAAe,GAAI,UAAU,CAAC,eAA2B,IAAI,KAAK,CAAC;QAIzE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAK,UAAU,CAAC,KAA4B,CAAC;QAEpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAMD,IAAI,CAAC,eAAe,EAAE,CAAC;YAErB,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBACnC,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,iFAAiF,CAClF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,+BAA+B,CAAC,CAAC;YAC7F,CAAC;YAED,IAAI,CAAC;gBAEH,MAAM,SAAS,GAAG,IAAI,6BAAsB,EAAE,CAAC;gBAC/C,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;gBAC7B,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;gBAC1B,MAAM,IAAI,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;gBACnE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAChB,kDAAkD,IAAI,CAAC,GAAG,gDAAgD,CAC3G,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAEf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBAC9E,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAClB,0DAA0D,IAAI,CAAC,GAAG,KAAK,YAAY,EAAE,EACrF,KAAK,CACN,CAAC;gBACF,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;aAAM,CAAC;YAEN,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAChB,mCAAmC,IAAI,CAAC,GAAG,qDAAqD,CACjG,CAAC;QACJ,CAAC;QAQD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;YAC7C,IAAI,EAAE,UAAU,IAAI,OAAO;YAC3B,KAAK;YACL,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,CAAC,cAAc;SAC3B,CAAC,CAAC;QAGH,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,uCAAuC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEtE,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAkBD,KAAK,CAAC,MAAM,CAAC,IAAW,EAAE,IAAa,EAAE,QAAiB;QACxD,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,kCAAkC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAGjE,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,8EAA8E,CAAC,CAAC;YACpG,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,IAAc,CAAC;QACjC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QACvC,MAAM,eAAe,GAAI,UAAU,CAAC,eAA2B,IAAI,KAAK,CAAC;QAGzE,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAGzE,IAAI,CAAC;YAQH,MAAM,SAAS,GAAG,IAAI,6BAAsB,EAAE,CAAC;YAC/C,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAC7B,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC;YAC3B,MAAM,IAAI,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAEnE,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,yEAAyE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1G,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,kEAAkE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACnG,CAAC;YAGD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,8CAA8C,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAGf,IAAI,KAAK,YAAY,qBAAc,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YAGD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,SAAS,GAAI,KAAa,EAAE,IAAI,IAAI,SAAS,CAAC;YACpD,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,4CAA4C,IAAI,CAAC,GAAG,WAAW,SAAS,YAAY,SAAS,MAAM,YAAY,EAAE,CAClH,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAiBD,KAAK,CAAC,aAAa,CAAC,IAAW;QAC7B,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,oCAAoC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAGnE,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QAGvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,SAAS,EAAE,4BAA4B,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QAID,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,yFAAyF,EACzF,EAAE,UAAU,EAAE,OAAO,EAAE,CACxB,CAAC;QACJ,CAAC;QAGD,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACnC,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAKD,MAAM,OAAO,GAAG,IAAI,+BAAwB,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;QACxC,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAEnE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,iCAAiC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;CACF;AA9WD,0DA8WC"}
+{"version":3,"file":"email-mfa-provider.service.js","sourceRoot":"","sources":["../../src/email-mfa-provider.service.ts"],"names":[],"mappings":";;;AACA,qBAAqB;AACrB,8CAY6B;AAC7B,sDAAsD;AACtD,2DAAsE;AAGtE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAa,uBAAwB,SAAQ,iCAAsB;IAS9C;IARV,UAAU,GAAG,gBAAS,CAAC,KAAK,CAAC;IAEtC,YACE,mBAA8C,EAC9C,cAAoC,EACpC,MAAmB,EACnB,MAAmB,EACnB,eAAwB,EACP,wBAAmD,EACpE,gBAA0B,EAAE,8BAA8B;IAC1D,YAAsB,EAAE,8BAA8B;IACtD,iBAA2B;QAE3B,KAAK,CACH,mBAAmB,EACnB,cAAc,EACd,MAAM,EACN,MAAM,EACN,eAAe,EACf,gBAAuB,EACvB,YAAmB,EACnB,iBAAwB,CACzB,CAAC;QAde,6BAAwB,GAAxB,wBAAwB,CAA2B;IAetE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,KAAK,CACT,IAAW,EACX,SAAmB;QAEnB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,kCAAkC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEjE,4BAA4B;QAC5B,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,0BAA0B,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAClH,CAAC;QAED,MAAM,GAAG,GAAG,SAAyC,CAAC;QACtD,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,eAAe,GAAI,UAAU,CAAC,eAA2B,IAAI,KAAK,CAAC;QAEzE,kDAAkD;QAClD,MAAM,KAAK,GAAG,GAAG,EAAE,KAAK,IAAK,UAAU,CAAC,KAA4B,CAAC;QAErE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,sEAAsE;QACtE,gDAAgD;QAChD,+EAA+E;QAC/E,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,mCAAmC,IAAI,CAAC,GAAG,mCAAmC,CAAC,CAAC;YACnG,mDAAmD;YACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CACrC,IAAI,EACJ;gBACE,KAAK;gBACL,IAAI,EAAE,EAAE,EAAE,yCAAyC;aACpD,EACD,GAAG,EAAE,UAAU,CAChB,CAAC;YACF,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAC3C,CAAC;QAED,oDAAoD;QACpD,mDAAmD;QACnD,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACnC,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,OAAO,GAAG,IAAI,+BAAwB,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACvB,MAAM,oBAAoB,GAAG,SAA6E,CAAC;QAC3G,IAAI,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;YAC7C,OAAO,CAAC,kBAAkB,GAAG,oBAAoB,CAAC,kBAAkB,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAEnE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC;QAE7D,2CAA2C;QAC3C,OAAO,EAAE,WAAW,EAAE,CAAC;IACzB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,WAAW,CAAC,IAAW,EAAE,gBAAyB,EAAE,UAAmB;QAC3E,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,uCAAuC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEtE,MAAM,GAAG,GAAG,gBAA0C,CAAC;QACvD,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QACvC,MAAM,cAAc,GAAI,UAAU,CAAC,UAAsB,IAAI,KAAK,CAAC;QACnE,MAAM,eAAe,GAAI,UAAU,CAAC,eAA2B,IAAI,KAAK,CAAC;QAEzE,yDAAyD;QACzD,oFAAoF;QACpF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAK,UAAU,CAAC,KAA4B,CAAC;QAEpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,qEAAqE;QACrE,qFAAqF;QACrF,+EAA+E;QAC/E,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,iFAAiF;YACjF,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBACnC,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,iFAAiF,CAClF,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,+BAA+B,CAAC,CAAC;YAC7F,CAAC;YAED,IAAI,CAAC;gBACH,4EAA4E;gBAC5E,MAAM,SAAS,GAAG,IAAI,6BAAsB,EAAE,CAAC;gBAC/C,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;gBAC7B,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;gBAC1B,MAAM,IAAI,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;gBACnE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAChB,kDAAkD,IAAI,CAAC,GAAG,gDAAgD,CAC3G,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4CAA4C;gBAC5C,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBAC9E,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAClB,0DAA0D,IAAI,CAAC,GAAG,KAAK,YAAY,EAAE,EACrF,KAAK,CACN,CAAC;gBACF,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;aAAM,CAAC;YACN,kDAAkD;YAClD,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAChB,mCAAmC,IAAI,CAAC,GAAG,qDAAqD,CACjG,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,iEAAiE;QACjE,+EAA+E;QAC/E,qEAAqE;QACrE,kFAAkF;QAClF,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;YAC7C,IAAI,EAAE,UAAU,IAAI,OAAO;YAC3B,KAAK,EAAE,+CAA+C;YACtD,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,CAAC,cAAc,EAAE,+BAA+B;SAC5D,CAAC,CAAC;QAEH,oCAAoC;QACpC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,uCAAuC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEtE,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,MAAM,CAAC,IAAW,EAAE,IAAa,EAAE,QAAiB;QACxD,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,kCAAkC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEjE,mDAAmD;QACnD,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,8EAA8E,CAAC,CAAC;YACpG,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,IAAc,CAAC;QACjC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,kBAAkB;QAClB,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QACvC,MAAM,eAAe,GAAI,UAAU,CAAC,eAA2B,IAAI,KAAK,CAAC;QAEzE,8EAA8E;QAC9E,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEzE,qDAAqD;QACrD,IAAI,CAAC;YACH,+EAA+E;YAC/E,yDAAyD;YACzD,kFAAkF;YAClF,2EAA2E;YAC3E,sGAAsG;YACtG,0FAA0F;YAC1F,+EAA+E;YAC/E,MAAM,SAAS,GAAG,IAAI,6BAAsB,EAAE,CAAC;YAC/C,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAC7B,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC;YAC3B,MAAM,IAAI,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAEnE,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,yEAAyE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1G,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,kEAAkE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACnG,CAAC;YAED,sCAAsC;YACtC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,8CAA8C,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4FAA4F;YAC5F,2FAA2F;YAC3F,IAAI,KAAK,YAAY,qBAAc,EAAE,CAAC;gBACpC,MAAM,KAAK,CAAC;YACd,CAAC;YAED,gEAAgE;YAChE,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,SAAS,GAAI,KAAa,EAAE,IAAI,IAAI,SAAS,CAAC;YACpD,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,4CAA4C,IAAI,CAAC,GAAG,WAAW,SAAS,YAAY,SAAS,MAAM,YAAY,EAAE,CAClH,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,aAAa,CAAC,IAAW;QAC7B,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,oCAAoC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,kBAAkB;QAClB,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QAEvC,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,SAAS,EAAE,4BAA4B,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,2DAA2D;QAC3D,kEAAkE;QAClE,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,yFAAyF,EACzF,EAAE,UAAU,EAAE,OAAO,EAAE,CACxB,CAAC;QACJ,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACnC,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,6EAA6E;QAC7E,uFAAuF;QACvF,MAAM,OAAO,GAAG,IAAI,+BAAwB,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACvB,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;QACxC,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAEnE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,iCAAiC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACtC,CAAC;CACF;AA9WD,0DA8WC"}

package/dist/src/index.d.ts

@@ -1,3 +1,9 @@
+/**
+ * @nauth-toolkit/mfa-email
+ *
+ * Platform-agnostic Email MFA provider for nauth-toolkit.
+ * For NestJS integration, use '@nauth-toolkit/mfa-email/nestjs'
+ */
 export { EmailMFAProviderService } from './email-mfa-provider.service';
 export * from './dto/mfa.dto';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,cAAc,eAAe,CAAC"}

package/dist/src/index.js

@@ -1,4 +1,10 @@
 "use strict";
+/**
+ * @nauth-toolkit/mfa-email
+ *
+ * Platform-agnostic Email MFA provider for nauth-toolkit.
+ * For NestJS integration, use '@nauth-toolkit/mfa-email/nestjs'
+ */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAOA,2EAAuE;AAA9D,qIAAA,uBAAuB,OAAA;AAChC,gDAA8B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;AAEH,2EAAuE;AAA9D,qIAAA,uBAAuB,OAAA;AAChC,gDAA8B"}