@nauth-toolkit/mfa-passkey 0.1.14 → 0.1.18

package/dist/src/passkey-mfa-provider.service.d.ts

@@ -3,13 +3,115 @@ import { BaseMFADevice, BaseUser, IUser, NAuthConfig, NAuthLogger, MFAMethod } f
 import { BaseMFAProviderService } from '@nauth-toolkit/core/internal';
 import { PasskeyService } from './passkey.service';
 import { SetupPasskeyResponseDTO, GetPasskeyChallengeResponseDTO } from './dto/mfa.dto';
+/**
+ * Passkey MFA Provider Service
+ *
+ * Implements Passkey/WebAuthn as a Multi-Factor Authentication (MFA) method.
+ * Extends BaseMFAProviderService to provide Passkey-specific functionality.
+ *
+ * Note: Passkeys are currently implemented exclusively as MFA (secondary factor
+ * after password authentication). Users can enroll multiple passkey devices
+ * (e.g., phone biometric, browser-based, hardware security keys) for redundancy.
+ * Passwordless passkey login is planned for a future release.
+ *
+ * This service handles:
+ * - WebAuthn registration (passkey setup) - supports multiple devices per user
+ * - WebAuthn authentication (passkey verification) - works with any registered device
+ * - Challenge generation for setup and authentication
+ * - MFA device creation for Passkeys
+ *
+ * @example
+ * ```typescript
+ * @Module({
+ *   imports: [PasskeyMFAModule],
+ * })
+ * export class AppModule {}
+ * ```
+ */
 export declare class PasskeyMFAProviderService extends BaseMFAProviderService {
     private readonly passkeyService;
     readonly methodName = MFAMethod.PASSKEY;
-    constructor(mfaDeviceRepository: Repository<BaseMFADevice>, userRepository: Repository<BaseUser>, config: NAuthConfig, logger: NAuthLogger, passwordService: unknown, passkeyService: PasskeyService, challengeService?: unknown, auditService?: unknown, clientInfoService?: unknown);
+    constructor(mfaDeviceRepository: Repository<BaseMFADevice>, userRepository: Repository<BaseUser>, config: NAuthConfig, logger: NAuthLogger, passwordService: unknown, passkeyService: PasskeyService, challengeService?: unknown, // ChallengeService (optional)
+    auditService?: unknown, // AuthAuditService (optional)
+    clientInfoService?: unknown);
+    /**
+     * Setup Passkey for user
+     *
+     * Generates WebAuthn registration options.
+     * Client must pass these to navigator.credentials.create().
+     *
+     * @param user - User setting up Passkey
+     * @param _setupData - Not used for Passkey
+     * @returns WebAuthn registration options
+     * @throws {NAuthException} If Passkey is not enabled
+     *
+     * @example
+     * ```typescript
+     * const options = await provider.setup(user);
+     * // Client calls navigator.credentials.create({ publicKey: options.options })
+     * ```
+     */
     setup(user: IUser, _setupData?: unknown): Promise<SetupPasskeyResponseDTO>;
+    /**
+     * Verify and complete Passkey setup
+     *
+     * Validates the WebAuthn credential and stores the device if valid.
+     *
+     * **Race Condition Safety:**
+     * Device creation uses transaction with pessimistic locking to prevent duplicates.
+     * If device already exists (e.g., from concurrent request), returns existing device.
+     * Database unique constraint (userId, type) provides final safety net.
+     *
+     * @param user - User completing Passkey setup
+     * @param verificationData - Verification data (must be { credential: VerifyPasskeySetupDTO, expectedChallenge: string })
+     * @param deviceName - Optional device name override
+     * @returns MFA device ID (created or existing)
+     * @throws {NAuthException} If verification fails
+     *
+     * @example
+     * ```typescript
+     * const deviceId = await provider.verifySetup(user, {
+     *   credential: { credential: webAuthnCredential, expectedChallenge: challenge }
+     * }, 'iPhone 15 Pro');
+     * ```
+     */
     verifySetup(user: IUser, verificationData: unknown, deviceName?: string): Promise<number>;
+    /**
+     * Verify Passkey during authentication
+     *
+     * Validates WebAuthn assertion against stored public key.
+     *
+     * @param user - User being authenticated
+     * @param code - Verification data (must be { credential: AuthenticationResponseJSON, expectedChallenge: string })
+     * @param deviceId - Optional device ID to verify against
+     * @returns True if verification succeeds
+     * @throws {NAuthException} If device not found or verification fails
+     *
+     * @example
+     * ```typescript
+     * const isValid = await provider.verify(user, {
+     *   credential: webAuthnCredential,
+     *   expectedChallenge: challenge
+     * });
+     * ```
+     */
     verify(user: IUser, code: unknown, deviceId?: number): Promise<boolean>;
+    /**
+     * Send Passkey challenge for MFA verification
+     *
+     * Generates WebAuthn authentication options for login.
+     * Client must pass these to navigator.credentials.get().
+     *
+     * @param user - User requesting Passkey challenge
+     * @returns WebAuthn authentication options
+     * @throws {NAuthException} If no Passkey device registered
+     *
+     * @example
+     * ```typescript
+     * const options = await provider.sendChallenge(user);
+     * // Client calls navigator.credentials.get({ publicKey: options.options })
+     * ```
+     */
     sendChallenge(user: IUser): Promise<GetPasskeyChallengeResponseDTO>;
 }
 //# sourceMappingURL=passkey-mfa-provider.service.d.ts.map

package/dist/src/passkey-mfa-provider.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"passkey-mfa-provider.service.d.ts","sourceRoot":"","sources":["../../src/passkey-mfa-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACL,aAAa,EACb,QAAQ,EACR,KAAK,EAEL,WAAW,EACX,WAAW,EAGX,SAAS,EACV,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAyB,8BAA8B,EAAE,MAAM,eAAe,CAAC;AA6B/G,qBAAa,yBAA0B,SAAQ,sBAAsB;IASjE,OAAO,CAAC,QAAQ,CAAC,cAAc;IARjC,QAAQ,CAAC,UAAU,qBAAqB;gBAGtC,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC,EAC9C,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,EACpC,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,WAAW,EACnB,eAAe,EAAE,OAAO,EACP,cAAc,EAAE,cAAc,EAC/C,gBAAgB,CAAC,EAAE,OAAO,EAC1B,YAAY,CAAC,EAAE,OAAO,EACtB,iBAAiB,CAAC,EAAE,OAAO;IA+BvB,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAiD1E,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAyHzF,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgFvE,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,8BAA8B,CAAC;CAoB1E"}
+{"version":3,"file":"passkey-mfa-provider.service.d.ts","sourceRoot":"","sources":["../../src/passkey-mfa-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACL,aAAa,EACb,QAAQ,EACR,KAAK,EAEL,WAAW,EACX,WAAW,EAGX,SAAS,EACV,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAyB,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAG/G;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,qBAAa,yBAA0B,SAAQ,sBAAsB;IASjE,OAAO,CAAC,QAAQ,CAAC,cAAc;IARjC,QAAQ,CAAC,UAAU,qBAAqB;gBAGtC,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC,EAC9C,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,EACpC,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,WAAW,EACnB,eAAe,EAAE,OAAO,EACP,cAAc,EAAE,cAAc,EAC/C,gBAAgB,CAAC,EAAE,OAAO,EAAE,8BAA8B;IAC1D,YAAY,CAAC,EAAE,OAAO,EAAE,8BAA8B;IACtD,iBAAiB,CAAC,EAAE,OAAO;IAc7B;;;;;;;;;;;;;;;;OAgBG;IACG,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA0BhF;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAsG/F;;;;;;;;;;;;;;;;;;OAkBG;IACG,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgE7E;;;;;;;;;;;;;;;OAeG;IACG,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,8BAA8B,CAAC;CAoB1E"}

package/dist/src/passkey-mfa-provider.service.js

@@ -1,29 +1,103 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PasskeyMFAProviderService = void 0;
+// Public API imports
 const core_1 = require("@nauth-toolkit/core");
+// Internal API imports (for provider implementations)
 const internal_1 = require("@nauth-toolkit/core/internal");
+/**
+ * Passkey MFA Provider Service
+ *
+ * Implements Passkey/WebAuthn as a Multi-Factor Authentication (MFA) method.
+ * Extends BaseMFAProviderService to provide Passkey-specific functionality.
+ *
+ * Note: Passkeys are currently implemented exclusively as MFA (secondary factor
+ * after password authentication). Users can enroll multiple passkey devices
+ * (e.g., phone biometric, browser-based, hardware security keys) for redundancy.
+ * Passwordless passkey login is planned for a future release.
+ *
+ * This service handles:
+ * - WebAuthn registration (passkey setup) - supports multiple devices per user
+ * - WebAuthn authentication (passkey verification) - works with any registered device
+ * - Challenge generation for setup and authentication
+ * - MFA device creation for Passkeys
+ *
+ * @example
+ * ```typescript
+ * @Module({
+ *   imports: [PasskeyMFAModule],
+ * })
+ * export class AppModule {}
+ * ```
+ */
 class PasskeyMFAProviderService extends internal_1.BaseMFAProviderService {
     passkeyService;
     methodName = core_1.MFAMethod.PASSKEY;
-    constructor(mfaDeviceRepository, userRepository, config, logger, passwordService, passkeyService, challengeService, auditService, clientInfoService) {
+    constructor(mfaDeviceRepository, userRepository, config, logger, passwordService, passkeyService, challengeService, // ChallengeService (optional)
+    auditService, // AuthAuditService (optional)
+    clientInfoService) {
         super(mfaDeviceRepository, userRepository, config, logger, passwordService, challengeService, auditService, clientInfoService);
         this.passkeyService = passkeyService;
     }
+    /**
+     * Setup Passkey for user
+     *
+     * Generates WebAuthn registration options.
+     * Client must pass these to navigator.credentials.create().
+     *
+     * @param user - User setting up Passkey
+     * @param _setupData - Not used for Passkey
+     * @returns WebAuthn registration options
+     * @throws {NAuthException} If Passkey is not enabled
+     *
+     * @example
+     * ```typescript
+     * const options = await provider.setup(user);
+     * // Client calls navigator.credentials.create({ publicKey: options.options })
+     * ```
+     */
     async setup(user, _setupData) {
         this.logger?.log?.(`Setting up passkey for user: ${user.sub}`);
+        // Check if passkey is allowed
         if (!this.isMethodAllowed()) {
             throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Passkey is not enabled', { feature: 'passkey' });
         }
+        // Get existing passkeys to exclude
         const userEntity = user;
         const userId = userEntity.id;
         const existingDevices = await this.getUserDevices(userId);
+        // Generate registration options
         const options = await this.passkeyService.generateRegistrationOptions(user.sub, user.email, `${userEntity.firstName || ''} ${userEntity.lastName || ''}`.trim() || user.email, existingDevices);
         this.logger?.log?.(`Passkey registration options generated for user: ${user.sub}`);
         return options;
     }
+    /**
+     * Verify and complete Passkey setup
+     *
+     * Validates the WebAuthn credential and stores the device if valid.
+     *
+     * **Race Condition Safety:**
+     * Device creation uses transaction with pessimistic locking to prevent duplicates.
+     * If device already exists (e.g., from concurrent request), returns existing device.
+     * Database unique constraint (userId, type) provides final safety net.
+     *
+     * @param user - User completing Passkey setup
+     * @param verificationData - Verification data (must be { credential: VerifyPasskeySetupDTO, expectedChallenge: string })
+     * @param deviceName - Optional device name override
+     * @returns MFA device ID (created or existing)
+     * @throws {NAuthException} If verification fails
+     *
+     * @example
+     * ```typescript
+     * const deviceId = await provider.verifySetup(user, {
+     *   credential: { credential: webAuthnCredential, expectedChallenge: challenge }
+     * }, 'iPhone 15 Pro');
+     * ```
+     */
     async verifySetup(user, verificationData, deviceName) {
         this.logger?.log?.(`Verifying passkey setup for user: ${user.sub}`);
+        // Extract credential and challenge from verificationData
+        // verificationData should be { credential: VerifyPasskeySetupDTO, expectedChallenge: string }
         let dto;
         let expectedChallenge;
         let transports;
@@ -31,13 +105,16 @@ class PasskeyMFAProviderService extends internal_1.BaseMFAProviderService {
             typeof verificationData === 'object' &&
             'credential' in verificationData &&
             'expectedChallenge' in verificationData) {
+            // Wrapped with challenge and optional transports
             const wrapped = verificationData;
             dto = wrapped.credential;
             expectedChallenge = wrapped.expectedChallenge;
             transports = wrapped.transports;
+            // Validate challenge is present
             if (!expectedChallenge || typeof expectedChallenge !== 'string' || expectedChallenge.trim().length === 0) {
                 throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Expected challenge is required and must be a non-empty string');
             }
+            // Validate credential structure
             if (!dto.credential || typeof dto.credential !== 'object') {
                 throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Credential is required and must be an object');
             }
@@ -53,13 +130,23 @@ class PasskeyMFAProviderService extends internal_1.BaseMFAProviderService {
         else {
             throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Passkey verification requires { credential, expectedChallenge }. Use MFAService.verifySetup or provide both.');
         }
+        // Verify passkey registration with transports (if provided)
+        // VerifyPasskeySetupDTO.credential should match RegistrationResponseJSON
+        // Transports help identify authenticator type (platform vs cross-platform)
         const verified = await this.passkeyService.verifyRegistration(dto.credential, expectedChallenge, transports);
         if (!verified.verified) {
             throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Passkey verification failed');
         }
+        // Get user entity for MFA status check
         const userEntity = user;
         const userId = userEntity.id;
         const userMfaEnabled = userEntity.mfaEnabled || false;
+        // ============================================================================
+        // Create MFA device (transaction-safe with duplicate prevention)
+        // ============================================================================
+        // createDevice() uses pessimistic locking to prevent race conditions
+        // If device already exists, returns existing device instead of creating duplicate
+        // Database unique constraint (userId, type) provides additional safety
         const device = await this.createDevice(userId, {
             name: deviceName || dto.deviceName || 'Passkey Device',
             credentialId: verified.credentialId,
@@ -67,14 +154,35 @@ class PasskeyMFAProviderService extends internal_1.BaseMFAProviderService {
             counter: verified.counter,
             transports: verified.transports,
             isActive: true,
-            isPrimary: !userMfaEnabled,
+            isPrimary: !userMfaEnabled, // First device becomes primary
         });
+        // Enable MFA if not already enabled
         await this.enableMFAForUser(user);
         this.logger?.log?.(`Passkey setup completed for user: ${user.sub}`);
         return device.id;
     }
+    /**
+     * Verify Passkey during authentication
+     *
+     * Validates WebAuthn assertion against stored public key.
+     *
+     * @param user - User being authenticated
+     * @param code - Verification data (must be { credential: AuthenticationResponseJSON, expectedChallenge: string })
+     * @param deviceId - Optional device ID to verify against
+     * @returns True if verification succeeds
+     * @throws {NAuthException} If device not found or verification fails
+     *
+     * @example
+     * ```typescript
+     * const isValid = await provider.verify(user, {
+     *   credential: webAuthnCredential,
+     *   expectedChallenge: challenge
+     * });
+     * ```
+     */
     async verify(user, code, deviceId) {
         this.logger?.log?.(`Verifying passkey for user: ${user.sub}`);
+        // Extract credential and challenge
         let credential;
         let expectedChallenge;
         if (code && typeof code === 'object' && 'credential' in code && 'expectedChallenge' in code) {
@@ -86,8 +194,10 @@ class PasskeyMFAProviderService extends internal_1.BaseMFAProviderService {
             this.logger?.warn?.('Invalid passkey verification data format');
             return false;
         }
+        // Get user entity
         const userEntity = user;
         const userId = userEntity.id;
+        // Find device by credential ID
         const device = deviceId
             ? await this.findDevice(userId, deviceId)
             : await this.mfaDeviceRepository.findOne({
@@ -103,8 +213,11 @@ class PasskeyMFAProviderService extends internal_1.BaseMFAProviderService {
             return false;
         }
         try {
+            // Verify passkey
+            // Cast device to IMFADevice since it came from repository and matches interface structure
             const result = await this.passkeyService.verifyAuthentication(credential, expectedChallenge, device);
             if (result.verified) {
+                // Update device counter and usage
                 const deviceEntity = device;
                 deviceEntity.counter = result.newCounter;
                 deviceEntity.lastUsedAt = new Date();
@@ -119,8 +232,25 @@ class PasskeyMFAProviderService extends internal_1.BaseMFAProviderService {
         }
         return false;
     }
+    /**
+     * Send Passkey challenge for MFA verification
+     *
+     * Generates WebAuthn authentication options for login.
+     * Client must pass these to navigator.credentials.get().
+     *
+     * @param user - User requesting Passkey challenge
+     * @returns WebAuthn authentication options
+     * @throws {NAuthException} If no Passkey device registered
+     *
+     * @example
+     * ```typescript
+     * const options = await provider.sendChallenge(user);
+     * // Client calls navigator.credentials.get({ publicKey: options.options })
+     * ```
+     */
     async sendChallenge(user) {
         this.logger?.log?.(`Generating passkey challenge for user: ${user.sub}`);
+        // Get user's passkey devices
         const userEntity = user;
         const userId = userEntity.id;
         const devices = await this.getUserDevices(userId);
@@ -128,6 +258,7 @@ class PasskeyMFAProviderService extends internal_1.BaseMFAProviderService {
         if (passkeyDevices.length === 0) {
             throw new core_1.NAuthException(core_1.AuthErrorCode.NOT_FOUND, 'No passkey devices registered', { deviceType: 'passkey' });
         }
+        // Generate authentication options
         const options = await this.passkeyService.generateAuthenticationOptions(passkeyDevices);
         this.logger?.log?.(`Passkey challenge generated for user: ${user.sub}`);
         return options;

package/dist/src/passkey-mfa-provider.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"passkey-mfa-provider.service.js","sourceRoot":"","sources":["../../src/passkey-mfa-provider.service.ts"],"names":[],"mappings":";;;AAEA,8CAU6B;AAE7B,2DAAsE;AA+BtE,MAAa,yBAA0B,SAAQ,iCAAsB;IAShD;IARV,UAAU,GAAG,gBAAS,CAAC,OAAO,CAAC;IAExC,YACE,mBAA8C,EAC9C,cAAoC,EACpC,MAAmB,EACnB,MAAmB,EACnB,eAAwB,EACP,cAA8B,EAC/C,gBAA0B,EAC1B,YAAsB,EACtB,iBAA2B;QAE3B,KAAK,CACH,mBAAmB,EACnB,cAAc,EACd,MAAM,EACN,MAAM,EACN,eAAe,EACf,gBAAuB,EACvB,YAAmB,EACnB,iBAAwB,CACzB,CAAC;QAde,mBAAc,GAAd,cAAc,CAAgB;IAejD,CAAC;IAmBD,KAAK,CAAC,KAAK,CAAC,IAAW,EAAE,UAAoB;QAC3C,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gCAAgC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAG/D,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,wBAAwB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9G,CAAC;QAGD,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QACvC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAG1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,2BAA2B,CACnE,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,GAAI,UAAU,CAAC,SAAoB,IAAI,EAAE,IAAK,UAAU,CAAC,QAAmB,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,EACzG,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,oDAAoD,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnF,OAAO,OAAO,CAAC;IACjB,CAAC;IAyBD,KAAK,CAAC,WAAW,CAAC,IAAW,EAAE,gBAAyB,EAAE,UAAmB;QAC3E,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,qCAAqC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAIpE,IAAI,GAA0B,CAAC;QAC/B,IAAI,iBAAyB,CAAC;QAC9B,IAAI,UAAgC,CAAC;QAErC,IACE,gBAAgB;YAChB,OAAO,gBAAgB,KAAK,QAAQ;YACpC,YAAY,IAAI,gBAAgB;YAChC,mBAAmB,IAAI,gBAAgB,EACvC,CAAC;YAED,MAAM,OAAO,GAAG,gBAIf,CAAC;YACF,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC;YACzB,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAC9C,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAGhC,IAAI,CAAC,iBAAiB,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzG,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,+DAA+D,CAChE,CAAC;YACJ,CAAC;YAGD,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC1D,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,8CAA8C,CAAC,CAAC;YAC5G,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,UAAqC,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9C,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,qDAAqD,CACtD,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAmC,CAAC;YAC1D,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBAC5D,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,8GAA8G,CAC/G,CAAC;QACJ,CAAC;QAKD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAC3D,GAAG,CAAC,UAAiD,EACrD,iBAAiB,EACjB,UAAU,CACX,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;QAC3F,CAAC;QAGD,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QACvC,MAAM,cAAc,GAAI,UAAU,CAAC,UAAsB,IAAI,KAAK,CAAC;QAQnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;YAC7C,IAAI,EAAE,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,gBAAgB;YACtD,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,CAAC,cAAc;SAC3B,CAAC,CAAC;QAGH,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,qCAAqC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEpE,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAqBD,KAAK,CAAC,MAAM,CAAC,IAAW,EAAE,IAAa,EAAE,QAAiB;QACxD,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,+BAA+B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAG9D,IAAI,UAAsC,CAAC;QAC3C,IAAI,iBAAyB,CAAC;QAE9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,YAAY,IAAI,IAAI,IAAI,mBAAmB,IAAI,IAAI,EAAE,CAAC;YAC5F,MAAM,IAAI,GAAG,IAA6E,CAAC;YAC3F,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YAC7B,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,0CAA0C,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QAGvC,MAAM,MAAM,GAAG,QAAQ;YACrB,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;YACzC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;gBACrC,KAAK,EAAE;oBACL,MAAM;oBACN,IAAI,EAAE,gBAAS,CAAC,OAAO;oBACvB,YAAY,EAAE,UAAU,CAAC,EAAE;oBAC3B,QAAQ,EAAE,IAAI;iBACf;aACyB,CAAC,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YAGH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAC3D,UAAU,EACV,iBAAiB,EACjB,MAA+B,CAChC,CAAC;YAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAEpB,MAAM,YAAY,GAAG,MAA4C,CAAC;gBAClE,YAAY,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;gBACzC,YAAY,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;gBACrC,YAAY,CAAC,UAAU,GAAG,CAAE,YAAY,CAAC,UAAqB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzE,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAuC,CAAC,CAAC;gBAE7E,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,2CAA2C,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC1E,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAkBD,KAAK,CAAC,aAAa,CAAC,IAAW;QAC7B,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,0CAA0C,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAGzE,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAS,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEzF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,SAAS,EAAE,+BAA+B,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAChH,CAAC;QAGD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,6BAA6B,CAAC,cAAc,CAAC,CAAC;QAExF,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,yCAAyC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAExE,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAzTD,8DAyTC"}
+{"version":3,"file":"passkey-mfa-provider.service.js","sourceRoot":"","sources":["../../src/passkey-mfa-provider.service.ts"],"names":[],"mappings":";;;AACA,qBAAqB;AACrB,8CAU6B;AAC7B,sDAAsD;AACtD,2DAAsE;AAKtE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAa,yBAA0B,SAAQ,iCAAsB;IAShD;IARV,UAAU,GAAG,gBAAS,CAAC,OAAO,CAAC;IAExC,YACE,mBAA8C,EAC9C,cAAoC,EACpC,MAAmB,EACnB,MAAmB,EACnB,eAAwB,EACP,cAA8B,EAC/C,gBAA0B,EAAE,8BAA8B;IAC1D,YAAsB,EAAE,8BAA8B;IACtD,iBAA2B;QAE3B,KAAK,CACH,mBAAmB,EACnB,cAAc,EACd,MAAM,EACN,MAAM,EACN,eAAe,EACf,gBAAuB,EACvB,YAAmB,EACnB,iBAAwB,CACzB,CAAC;QAde,mBAAc,GAAd,cAAc,CAAgB;IAejD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,KAAK,CAAC,IAAW,EAAE,UAAoB;QAC3C,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gCAAgC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAE/D,8BAA8B;QAC9B,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,wBAAwB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9G,CAAC;QAED,mCAAmC;QACnC,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QACvC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAE1D,gCAAgC;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,2BAA2B,CACnE,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,KAAK,EACV,GAAI,UAAU,CAAC,SAAoB,IAAI,EAAE,IAAK,UAAU,CAAC,QAAmB,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,EACzG,eAAe,CAChB,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,oDAAoD,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,CAAC,WAAW,CAAC,IAAW,EAAE,gBAAyB,EAAE,UAAmB;QAC3E,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,qCAAqC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEpE,yDAAyD;QACzD,8FAA8F;QAC9F,IAAI,GAA0B,CAAC;QAC/B,IAAI,iBAAyB,CAAC;QAC9B,IAAI,UAAgC,CAAC;QAErC,IACE,gBAAgB;YAChB,OAAO,gBAAgB,KAAK,QAAQ;YACpC,YAAY,IAAI,gBAAgB;YAChC,mBAAmB,IAAI,gBAAgB,EACvC,CAAC;YACD,iDAAiD;YACjD,MAAM,OAAO,GAAG,gBAIf,CAAC;YACF,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC;YACzB,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAC9C,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YAEhC,gCAAgC;YAChC,IAAI,CAAC,iBAAiB,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzG,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,+DAA+D,CAChE,CAAC;YACJ,CAAC;YAED,gCAAgC;YAChC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC1D,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,8CAA8C,CAAC,CAAC;YAC5G,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,UAAqC,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9C,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,qDAAqD,CACtD,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAmC,CAAC;YAC1D,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBAC5D,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,2EAA2E,CAC5E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,8GAA8G,CAC/G,CAAC;QACJ,CAAC;QAED,4DAA4D;QAC5D,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAC3D,GAAG,CAAC,UAAiD,EACrD,iBAAiB,EACjB,UAAU,CACX,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;QAC3F,CAAC;QAED,uCAAuC;QACvC,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QACvC,MAAM,cAAc,GAAI,UAAU,CAAC,UAAsB,IAAI,KAAK,CAAC;QAEnE,+EAA+E;QAC/E,iEAAiE;QACjE,+EAA+E;QAC/E,qEAAqE;QACrE,kFAAkF;QAClF,uEAAuE;QACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;YAC7C,IAAI,EAAE,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,gBAAgB;YACtD,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,CAAC,cAAc,EAAE,+BAA+B;SAC5D,CAAC,CAAC;QAEH,oCAAoC;QACpC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,qCAAqC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEpE,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,MAAM,CAAC,IAAW,EAAE,IAAa,EAAE,QAAiB;QACxD,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,+BAA+B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAE9D,mCAAmC;QACnC,IAAI,UAAsC,CAAC;QAC3C,IAAI,iBAAyB,CAAC;QAE9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,YAAY,IAAI,IAAI,IAAI,mBAAmB,IAAI,IAAI,EAAE,CAAC;YAC5F,MAAM,IAAI,GAAG,IAA6E,CAAC;YAC3F,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YAC7B,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,0CAA0C,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,kBAAkB;QAClB,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QAEvC,+BAA+B;QAC/B,MAAM,MAAM,GAAG,QAAQ;YACrB,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;YACzC,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC;gBACrC,KAAK,EAAE;oBACL,MAAM;oBACN,IAAI,EAAE,gBAAS,CAAC,OAAO;oBACvB,YAAY,EAAE,UAAU,CAAC,EAAE;oBAC3B,QAAQ,EAAE,IAAI;iBACf;aACyB,CAAC,CAAC;QAElC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,iBAAiB;YACjB,0FAA0F;YAC1F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAC3D,UAAU,EACV,iBAAiB,EACjB,MAA+B,CAChC,CAAC;YAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,kCAAkC;gBAClC,MAAM,YAAY,GAAG,MAA4C,CAAC;gBAClE,YAAY,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;gBACzC,YAAY,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;gBACrC,YAAY,CAAC,UAAU,GAAG,CAAE,YAAY,CAAC,UAAqB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzE,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAuC,CAAC,CAAC;gBAE7E,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,2CAA2C,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC1E,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,aAAa,CAAC,IAAW;QAC7B,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,0CAA0C,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAEzE,6BAA6B;QAC7B,MAAM,UAAU,GAAG,IAA0C,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAY,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAS,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEzF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,SAAS,EAAE,+BAA+B,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAChH,CAAC;QAED,kCAAkC;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,6BAA6B,CAAC,cAAc,CAAC,CAAC;QAExF,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,yCAAyC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAExE,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAzTD,8DAyTC"}

package/dist/src/passkey.service.d.ts

@@ -1,13 +1,49 @@
 import type { RegistrationResponseJSON, AuthenticationResponseJSON } from '@simplewebauthn/types';
 import { NAuthConfig, NAuthLogger, IMFADevice } from '@nauth-toolkit/core';
 import { SetupPasskeyResponseDTO, GetPasskeyChallengeResponseDTO } from './dto/mfa.dto';
+/**
+ * Passkey Service (WebAuthn/FIDO2)
+ *
+ * Handles passkey authentication with proper platform authenticator support.
+ *
+ * @example
+ * ```typescript
+ * const options = await passkeyService.generateRegistrationOptions(user, existingDevices);
+ * const verified = await passkeyService.verifyRegistration(credential, challenge, transports);
+ * ```
+ */
 export declare class PasskeyService {
     private readonly config;
     private readonly logger;
     private readonly defaultConfig;
     constructor(config: NAuthConfig, logger: NAuthLogger);
+    /**
+     * Get passkey configuration with defaults
+     *
+     * @returns Complete passkey configuration
+     * @throws {NAuthException} If required config is missing
+     * @private
+     */
     private getPasskeyConfig;
+    /**
+     * Generate WebAuthn registration options for passkey setup
+     *
+     * @param userId - User ID (will be encoded as user.id)
+     * @param userEmail - User's email
+     * @param userName - User's display name
+     * @param existingDevices - User's existing passkey devices (to exclude from registration)
+     * @returns Registration options for WebAuthn API
+     */
     generateRegistrationOptions(userId: string, userEmail: string, userName: string, existingDevices?: IMFADevice[]): Promise<SetupPasskeyResponseDTO>;
+    /**
+     * Verify passkey registration response
+     *
+     * @param credential - WebAuthn registration response from client
+     * @param expectedChallenge - Expected challenge from registration options
+     * @param transports - Optional transports from client-side credential.getTransports()
+     * @returns Verified credential data for storage
+     * @throws {NAuthException} If verification fails
+     */
     verifyRegistration(credential: RegistrationResponseJSON, expectedChallenge: string, transports?: string[]): Promise<{
         verified: boolean;
         credentialId: string;
@@ -15,12 +51,38 @@ export declare class PasskeyService {
         counter: number;
         transports: string[];
     }>;
+    /**
+     * Generate WebAuthn authentication options for MFA challenge
+     *
+     * @param userDevices - User's registered passkey devices
+     * @returns Authentication options for WebAuthn API
+     */
     generateAuthenticationOptions(userDevices: IMFADevice[]): Promise<GetPasskeyChallengeResponseDTO>;
+    /**
+     * Verify passkey authentication response
+     *
+     * @param credential - WebAuthn authentication response from client
+     * @param expectedChallenge - Expected challenge from authentication options
+     * @param device - MFA device with stored public key and counter
+     * @returns Verification result with new counter
+     * @throws {NAuthException} If verification fails
+     */
     verifyAuthentication(credential: AuthenticationResponseJSON, expectedChallenge: string, device: IMFADevice): Promise<{
         verified: boolean;
         newCounter: number;
     }>;
+    /**
+     * Check if passkey is supported by configuration
+     *
+     * @returns True if passkey is properly configured
+     */
     isSupported(): boolean;
+    /**
+     * Mask credential ID for display
+     *
+     * @param credentialId - Base64url encoded credential ID
+     * @returns Masked credential ID
+     */
     maskCredentialId(credentialId: string): string;
 }
 //# sourceMappingURL=passkey.service.d.ts.map

package/dist/src/passkey.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"passkey.service.d.ts","sourceRoot":"","sources":["../../src/passkey.service.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAE3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,WAAW,EAEX,WAAW,EAIX,UAAU,EACX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAcxF,qBAAa,cAAc;IAOvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPzB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;gBAGiB,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,WAAW;IAUtC,OAAO,CAAC,gBAAgB;IA6BlB,2BAA2B,CAC/B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,eAAe,GAAE,UAAU,EAAO,GACjC,OAAO,CAAC,uBAAuB,CAAC;IA+C7B,kBAAkB,CACtB,UAAU,EAAE,wBAAwB,EACpC,iBAAiB,EAAE,MAAM,EACzB,UAAU,CAAC,EAAE,MAAM,EAAE,GACpB,OAAO,CAAC;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IA8EI,6BAA6B,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAwDjG,oBAAoB,CACxB,UAAU,EAAE,0BAA0B,EACtC,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IA2EF,WAAW,IAAI,OAAO;IAetB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;CAM/C"}
+{"version":3,"file":"passkey.service.d.ts","sourceRoot":"","sources":["../../src/passkey.service.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAE3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,WAAW,EAEX,WAAW,EAIX,UAAU,EACX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAExF;;;;;;;;;;GAUG;AAEH,qBAAa,cAAc;IAOvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPzB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAG5B;gBAGiB,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,WAAW;IAGtC;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;IAoBxB;;;;;;;;OAQG;IACG,2BAA2B,CAC/B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,eAAe,GAAE,UAAU,EAAO,GACjC,OAAO,CAAC,uBAAuB,CAAC;IAsCnC;;;;;;;;OAQG;IACG,kBAAkB,CACtB,UAAU,EAAE,wBAAwB,EACpC,iBAAiB,EAAE,MAAM,EACzB,UAAU,CAAC,EAAE,MAAM,EAAE,GACpB,OAAO,CAAC;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IAwEF;;;;;OAKG;IACG,6BAA6B,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,8BAA8B,CAAC;IA+CvG;;;;;;;;OAQG;IACG,oBAAoB,CACxB,UAAU,EAAE,0BAA0B,EACtC,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IAsEF;;;;OAIG;IACH,WAAW,IAAI,OAAO;IAStB;;;;;OAKG;IACH,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;CAM/C"}