@nauth-toolkit/social-apple 0.1.13 → 0.1.17

package/dist/src/apple-social-auth.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"apple-social-auth.service.js","sourceRoot":"","sources":["../../src/apple-social-auth.service.ts"],"names":[],"mappings":";;;AACA,8CAa6B;AAE7B,2DAOsC;AAEtC,6DAAwD;AACxD,qEAA6F;AAiC7F,MAAa,sBAAuB,SAAQ,wCAA6B;IAC9D,YAAY,GAAG,OAAO,CAAC;IACf,WAAW,CAA0B;IACrC,aAAa,CAA+B;IAE7D,YACE,MAAmB,EACnB,MAAmB,EACnB,WAAwB,EACxB,iBAAoC,EACpC,UAAsB,EACtB,cAA8B,EAC9B,eAA2C,EAC3C,iBAAoC,EAEpC,UAAgE,EAChE,cAAoC,EAEpC,wBAAmD,EAEnD,YAA+B,EAE/B,oBAA2C,EAE3C,aAAqC;QAErC,KAAK,CACH,MAAM,EACN,MAAM,EACN,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,wBAAwB,EACxB,YAAY,EACZ,oBAAoB,CACrB,CAAC;QAGF,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC/C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;QAClH,IAAI,CAAC,WAAW,EAAE,CAAC;YAEjB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,OAAO;QACT,CAAC;QAID,IAAI,CAAC,WAAW,GAAG,IAAI,qCAAgB,CAAC;YACtC,QAAQ,EAAE,WAAW;YACrB,YAAY,EAAE,cAAc,CAAC,YAAY,IAAI,EAAE;YAC/C,WAAW,EAAE,cAAc,CAAC,WAAW,IAAI,EAAE;YAC7C,MAAM,EAAE,cAAc,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;SACnD,CAAC,CAAC;QAGH,IAAI,CAAC,aAAa;YAChB,aAAa;gBACb,IAAI,6CAAyB,CAAC,MAAM,CAAC;gBACpC,IAAI,CAAC,MAAoD,CAAC,aAAa;gBACxE,IAAI,CAAC;QAEP,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,oCAAoC,CAAC,CAAC;IAC7D,CAAC;IAQD,KAAK,CAAC,UAAU,CAAC,KAAc;QAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IAYS,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,MAAc;QAC1D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,4CAA4C,CAAC,CAAC;QAC9G,CAAC;QAGD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,IAAI,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;QAG7F,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnE,CAAC;IAWS,KAAK,CAAC,iBAAiB,CAC/B,OAAe,EACf,YAAqB,EACrB,WAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,IAAI,EAAE,CAAC;QACrH,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC;YACzC,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;QACzG,CAAC;QAGD,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAA8B,CAAC;QAC7G,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,6BAA6B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAGpE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAChD,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,kDAAkD,CAAC,CAAC;QACpH,CAAC;QAGD,MAAM,gBAAgB,GAAG,WAAoE,CAAC;QAC9F,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,GAAG;YAChB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,gBAAgB,EAAE,SAAS,IAAI,IAAI;YAC9C,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,IAAI,IAAI;YAC5C,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,QAAQ,CAAC,cAAc;YACjC,GAAG,EAAE;gBACH,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;aACN;SACxC,CAAC;IACJ,CAAC;CACF;AA1KD,wDA0KC"}
+{"version":3,"file":"apple-social-auth.service.js","sourceRoot":"","sources":["../../src/apple-social-auth.service.ts"],"names":[],"mappings":";;;AAAA,qBAAqB;AACrB,8CAa6B;AAC7B,sDAAsD;AACtD,2DAOsC;AAEtC,6DAAwD;AACxD,qEAA6F;AAG7F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAa,sBAAuB,SAAQ,wCAA6B;IAC9D,YAAY,GAAG,OAAO,CAAC;IACf,WAAW,CAA0B;IACrC,aAAa,CAA+B;IAE7D,YACE,MAAmB,EACnB,MAAmB,EACnB,WAAwB,EACxB,iBAAoC,EACpC,UAAsB,EACtB,cAA8B,EAC9B,eAA2C,EAC3C,iBAAoC;IACpC,0CAA0C;IAC1C,UAAgE,EAChE,cAAoC;IACpC,yFAAyF;IACzF,wBAAmD;IACnD,2EAA2E;IAC3E,YAA+B;IAC/B,qFAAqF;IACrF,oBAA2C;IAC3C,uEAAuE;IACvE,aAAqC;QAErC,KAAK,CACH,MAAM,EACN,MAAM,EACN,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,wBAAwB,EACxB,YAAY,EACZ,oBAAoB,CACrB,CAAC;QAEF,gCAAgC;QAChC,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC/C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,OAAO,CAAC,qCAAqC;QAC/C,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;QAClH,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,6DAA6D;YAC7D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,mFAAmF;QACnF,yEAAyE;QACzE,IAAI,CAAC,WAAW,GAAG,IAAI,qCAAgB,CAAC;YACtC,QAAQ,EAAE,WAAW;YACrB,YAAY,EAAE,cAAc,CAAC,YAAY,IAAI,EAAE;YAC/C,WAAW,EAAE,cAAc,CAAC,WAAW,IAAI,EAAE;YAC7C,MAAM,EAAE,cAAc,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;SACnD,CAAC,CAAC;QAEH,oDAAoD;QACpD,IAAI,CAAC,aAAa;YAChB,aAAa;gBACb,IAAI,6CAAyB,CAAC,MAAM,CAAC;gBACpC,IAAI,CAAC,MAAoD,CAAC,aAAa;gBACxE,IAAI,CAAC;QAEP,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,oCAAoC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,KAAc;QAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;;;OASG;IACO,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,MAAc;QAC1D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,4CAA4C,CAAC,CAAC;QAC9G,CAAC;QAED,iCAAiC;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,IAAI,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;QAE7F,8BAA8B;QAC9B,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;;;OAQG;IACO,KAAK,CAAC,iBAAiB,CAC/B,OAAe,EACf,YAAqB,EACrB,WAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,4BAA4B,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,IAAI,EAAE,CAAC;QACrH,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC;YACzC,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;QACzG,CAAC;QAED,gDAAgD;QAChD,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAA8B,CAAC;QAC7G,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,6BAA6B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAEpE,+DAA+D;QAC/D,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAChD,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,qBAAqB,EAAE,kDAAkD,CAAC,CAAC;QACpH,CAAC;QAED,sFAAsF;QACtF,MAAM,gBAAgB,GAAG,WAAoE,CAAC;QAC9F,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,GAAG;YAChB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,gBAAgB,EAAE,SAAS,IAAI,IAAI;YAC9C,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,IAAI,IAAI;YAC5C,OAAO,EAAE,IAAI,EAAE,yCAAyC;YACxD,QAAQ,EAAE,QAAQ,CAAC,cAAc;YACjC,GAAG,EAAE;gBACH,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;aACN;SACxC,CAAC;IACJ,CAAC;CACF;AA1KD,wDA0KC"}

package/dist/src/dto/social-login.dto.d.ts

@@ -1,32 +1,229 @@
+/**
+ * Social provider enum
+ */
 export declare enum SocialProvider {
     GOOGLE = "google",
     APPLE = "apple",
     FACEBOOK = "facebook"
 }
+/**
+ * DTO for initiating social login
+ * Used to generate OAuth URLs for social providers
+ *
+ * @example
+ * ```typescript
+ * // Generate Google OAuth URL
+ * const dto = new SocialLoginDTO();
+ * dto.provider = 'google';
+ * dto.state = 'random-state-string';
+ * ```
+ */
 export declare class SocialLoginDTO {
+    /**
+     * Social provider name
+     * Must be one of the configured providers
+     *
+     * Validation:
+     * - Must be a valid SocialProvider enum value
+     */
     provider: SocialProvider;
+    /**
+     * Optional state parameter for OAuth flow
+     * Used to prevent CSRF attacks and maintain state
+     * If not provided, a random state will be generated
+     *
+     * Validation:
+     * - Must be a string if present
+     * - Max 500 characters (typical OAuth state length)
+     */
     state?: string;
 }
+/**
+ * DTO for handling OAuth callback
+ * Used to process the authorization code from OAuth providers
+ *
+ * @example
+ * ```typescript
+ * // Handle Google OAuth callback
+ * const dto = new SocialCallbackDTO();
+ * dto.provider = 'google';
+ * dto.code = 'authorization-code-from-google';
+ * dto.state = 'state-from-initial-request';
+ * ```
+ */
 export declare class SocialCallbackDTO {
+    /**
+     * Social provider name
+     * Must match the provider used in the initial request
+     *
+     * Validation:
+     * - Must be a valid SocialProvider enum value
+     */
     provider: SocialProvider;
+    /**
+     * Authorization code from OAuth provider
+     * This code is exchanged for access token and user info
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 1000 characters (typical OAuth code length)
+     */
     code: string;
+    /**
+     * State parameter from OAuth flow
+     * Must match the state sent in the initial request
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 500 characters (typical OAuth state length)
+     */
     state: string;
+    /**
+     * Optional error parameter from OAuth provider
+     * Used when user denies permission or other errors occur
+     *
+     * Validation:
+     * - Must be a string if present
+     * - Max 100 characters
+     */
     error?: string;
+    /**
+     * Optional error description from OAuth provider
+     * Provides more details about the error
+     *
+     * Validation:
+     * - Must be a string if present
+     * - Max 500 characters
+     */
     error_description?: string;
 }
+/**
+ * DTO for linking social account to existing user
+ * Used when an authenticated user wants to link a social provider
+ *
+ * @example
+ * ```typescript
+ * // Link Google account to current user
+ * const dto = new LinkSocialAccountDTO();
+ * dto.provider = 'google';
+ * dto.code = 'authorization-code-from-google';
+ * dto.state = 'state-from-initial-request';
+ * ```
+ */
 export declare class LinkSocialAccountDTO {
+    /**
+     * Social provider name
+     * Must be one of the configured providers
+     *
+     * Validation:
+     * - Must be a valid SocialProvider enum value
+     */
     provider: SocialProvider;
+    /**
+     * Authorization code from OAuth provider
+     * This code is exchanged for access token and user info
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 1000 characters (typical OAuth code length)
+     */
     code: string;
+    /**
+     * State parameter from OAuth flow
+     * Must match the state sent in the initial request
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 500 characters (typical OAuth state length)
+     */
     state: string;
 }
+/**
+ * DTO for unlinking social account
+ * Used when an authenticated user wants to remove a social provider
+ *
+ * @example
+ * ```typescript
+ * // Unlink Google account from current user
+ * const dto = new UnlinkSocialAccountDTO();
+ * dto.provider = 'google';
+ * ```
+ */
 export declare class UnlinkSocialAccountDTO {
+    /**
+     * Social provider name to unlink
+     * Must be one of the currently linked providers
+     *
+     * Validation:
+     * - Must be a valid SocialProvider enum value
+     */
     provider: SocialProvider;
 }
+/**
+ * Response DTO for social login
+ * Contains authentication tokens and user information
+ *
+ * @example
+ * ```typescript
+ * // Response after successful social login
+ * {
+ *   "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
+ *   "refreshToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
+ *   "expiresIn": 900,
+ *   "user": {
+ *     "sub": "user-uuid",
+ *     "email": "user@example.com",
+ *     "firstName": "John",
+ *     "lastName": "Doe",
+ *     "isEmailVerified": true,
+ *     "socialProviders": ["google"]
+ *   }
+ * }
+ * ```
+ */
 export declare class SocialLoginResponseDTO {
+    /**
+     * JWT access token for API authentication
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 2048 characters (typical JWT length)
+     */
     accessToken: string;
+    /**
+     * JWT refresh token for token renewal
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 2048 characters (typical JWT length)
+     */
     refreshToken: string;
+    /**
+     * Access token expiration timestamp (Unix timestamp in seconds)
+     *
+     * Validation:
+     * - Must be a number
+     */
     accessTokenExpiresAt: number;
+    /**
+     * Refresh token expiration timestamp (Unix timestamp in seconds)
+     *
+     * Validation:
+     * - Must be a number
+     */
     refreshTokenExpiresAt: number;
+    /**
+     * User information
+     *
+     * Validation:
+     * - Nested fields validated in service layer:
+     *   - sub: UUID v4 format, max 36 chars
+     *   - email: Valid email format, max 255 chars
+     *   - firstName: String, max 100 chars
+     *   - lastName: String, max 100 chars
+     *   - isEmailVerified: Boolean
+     *   - socialProviders: Array of strings, each max 50 chars
+     */
     user: {
         sub: string;
         email: string;
@@ -36,7 +233,29 @@ export declare class SocialLoginResponseDTO {
         socialProviders?: string[];
     };
 }
+/**
+ * Response DTO for social account information
+ * Contains details about linked social accounts
+ *
+ * @example
+ * ```typescript
+ * // Response for user's linked social accounts
+ * {
+ *   "accounts": [
+ *     {
+ *       "provider": "google",
+ *       "providerEmail": "user@gmail.com",
+ *       "linkedAt": "2023-01-01T00:00:00Z",
+ *       "lastUsedAt": "2023-01-15T12:00:00Z"
+ *     }
+ *   ]
+ * }
+ * ```
+ */
 export declare class SocialAccountsResponseDTO {
+    /**
+     * Array of linked social accounts
+     */
     accounts: Array<{
         provider: string;
         providerEmail?: string;

package/dist/src/dto/social-login.dto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"social-login.dto.d.ts","sourceRoot":"","sources":["../../../src/dto/social-login.dto.ts"],"names":[],"mappings":"AAKA,oBAAY,cAAc;IACxB,MAAM,WAAW;IACjB,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAcD,qBAAa,cAAc;IASzB,QAAQ,EAAG,cAAc,CAAC;IAc1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAeD,qBAAa,iBAAiB;IAS5B,QAAQ,EAAG,cAAc,CAAC;IAa1B,IAAI,EAAG,MAAM,CAAC;IAad,KAAK,EAAG,MAAM,CAAC;IAaf,KAAK,CAAC,EAAE,MAAM,CAAC;IAaf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAeD,qBAAa,oBAAoB;IAS/B,QAAQ,EAAG,cAAc,CAAC;IAa1B,IAAI,EAAG,MAAM,CAAC;IAad,KAAK,EAAG,MAAM,CAAC;CAChB;AAaD,qBAAa,sBAAsB;IASjC,QAAQ,EAAG,cAAc,CAAC;CAC3B;AAwBD,qBAAa,sBAAsB;IAUjC,WAAW,EAAG,MAAM,CAAC;IAWrB,YAAY,EAAG,MAAM,CAAC;IAStB,oBAAoB,EAAG,MAAM,CAAC;IAS9B,qBAAqB,EAAG,MAAM,CAAC;IAc/B,IAAI,EAAG;QACL,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,OAAO,CAAC;QACzB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5B,CAAC;CACH;AAqBD,qBAAa,yBAAyB;IAIpC,QAAQ,EAAG,KAAK,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,IAAI,CAAC;QACf,UAAU,CAAC,EAAE,IAAI,CAAC;KACnB,CAAC,CAAC;CACJ"}
+{"version":3,"file":"social-login.dto.d.ts","sourceRoot":"","sources":["../../../src/dto/social-login.dto.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,oBAAY,cAAc;IACxB,MAAM,WAAW;IACjB,KAAK,UAAU;IACf,QAAQ,aAAa;CACtB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,cAAc;IACzB;;;;;;OAMG;IAEH,QAAQ,EAAG,cAAc,CAAC;IAE1B;;;;;;;;OAQG;IAIH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAiB;IAC5B;;;;;;OAMG;IAEH,QAAQ,EAAG,cAAc,CAAC;IAE1B;;;;;;;OAOG;IAIH,IAAI,EAAG,MAAM,CAAC;IAEd;;;;;;;OAOG;IAIH,KAAK,EAAG,MAAM,CAAC;IAEf;;;;;;;OAOG;IAIH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;;;;OAOG;IAIH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,oBAAoB;IAC/B;;;;;;OAMG;IAEH,QAAQ,EAAG,cAAc,CAAC;IAE1B;;;;;;;OAOG;IAIH,IAAI,EAAG,MAAM,CAAC;IAEd;;;;;;;OAOG;IAIH,KAAK,EAAG,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,sBAAsB;IACjC;;;;;;OAMG;IAEH,QAAQ,EAAG,cAAc,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,sBAAsB;IACjC;;;;;;OAMG;IAGH,WAAW,EAAG,MAAM,CAAC;IAErB;;;;;;OAMG;IAGH,YAAY,EAAG,MAAM,CAAC;IAEtB;;;;;OAKG;IAEH,oBAAoB,EAAG,MAAM,CAAC;IAE9B;;;;;OAKG;IAEH,qBAAqB,EAAG,MAAM,CAAC;IAE/B;;;;;;;;;;;OAWG;IACH,IAAI,EAAG;QACL,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,OAAO,CAAC;QACzB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5B,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,yBAAyB;IACpC;;OAEG;IACH,QAAQ,EAAG,KAAK,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,IAAI,CAAC;QACf,UAAU,CAAC,EAAE,IAAI,CAAC;KACnB,CAAC,CAAC;CACJ"}

package/dist/src/dto/social-login.dto.js

@@ -11,14 +11,45 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SocialAccountsResponseDTO = exports.SocialLoginResponseDTO = exports.UnlinkSocialAccountDTO = exports.LinkSocialAccountDTO = exports.SocialCallbackDTO = exports.SocialLoginDTO = exports.SocialProvider = void 0;
 const class_validator_1 = require("class-validator");
+/**
+ * Social provider enum
+ */
 var SocialProvider;
 (function (SocialProvider) {
     SocialProvider["GOOGLE"] = "google";
     SocialProvider["APPLE"] = "apple";
     SocialProvider["FACEBOOK"] = "facebook";
 })(SocialProvider || (exports.SocialProvider = SocialProvider = {}));
+/**
+ * DTO for initiating social login
+ * Used to generate OAuth URLs for social providers
+ *
+ * @example
+ * ```typescript
+ * // Generate Google OAuth URL
+ * const dto = new SocialLoginDTO();
+ * dto.provider = 'google';
+ * dto.state = 'random-state-string';
+ * ```
+ */
 class SocialLoginDTO {
+    /**
+     * Social provider name
+     * Must be one of the configured providers
+     *
+     * Validation:
+     * - Must be a valid SocialProvider enum value
+     */
     provider;
+    /**
+     * Optional state parameter for OAuth flow
+     * Used to prevent CSRF attacks and maintain state
+     * If not provided, a random state will be generated
+     *
+     * Validation:
+     * - Must be a string if present
+     * - Max 500 characters (typical OAuth state length)
+     */
     state;
 }
 exports.SocialLoginDTO = SocialLoginDTO;
@@ -32,11 +63,63 @@ __decorate([
     (0, class_validator_1.MaxLength)(500, { message: 'State must not exceed 500 characters' }),
     __metadata("design:type", String)
 ], SocialLoginDTO.prototype, "state", void 0);
+/**
+ * DTO for handling OAuth callback
+ * Used to process the authorization code from OAuth providers
+ *
+ * @example
+ * ```typescript
+ * // Handle Google OAuth callback
+ * const dto = new SocialCallbackDTO();
+ * dto.provider = 'google';
+ * dto.code = 'authorization-code-from-google';
+ * dto.state = 'state-from-initial-request';
+ * ```
+ */
 class SocialCallbackDTO {
+    /**
+     * Social provider name
+     * Must match the provider used in the initial request
+     *
+     * Validation:
+     * - Must be a valid SocialProvider enum value
+     */
     provider;
+    /**
+     * Authorization code from OAuth provider
+     * This code is exchanged for access token and user info
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 1000 characters (typical OAuth code length)
+     */
     code;
+    /**
+     * State parameter from OAuth flow
+     * Must match the state sent in the initial request
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 500 characters (typical OAuth state length)
+     */
     state;
+    /**
+     * Optional error parameter from OAuth provider
+     * Used when user denies permission or other errors occur
+     *
+     * Validation:
+     * - Must be a string if present
+     * - Max 100 characters
+     */
     error;
+    /**
+     * Optional error description from OAuth provider
+     * Provides more details about the error
+     *
+     * Validation:
+     * - Must be a string if present
+     * - Max 500 characters
+     */
     error_description;
 }
 exports.SocialCallbackDTO = SocialCallbackDTO;
@@ -68,9 +151,45 @@ __decorate([
     (0, class_validator_1.MaxLength)(500, { message: 'Error description must not exceed 500 characters' }),
     __metadata("design:type", String)
 ], SocialCallbackDTO.prototype, "error_description", void 0);
+/**
+ * DTO for linking social account to existing user
+ * Used when an authenticated user wants to link a social provider
+ *
+ * @example
+ * ```typescript
+ * // Link Google account to current user
+ * const dto = new LinkSocialAccountDTO();
+ * dto.provider = 'google';
+ * dto.code = 'authorization-code-from-google';
+ * dto.state = 'state-from-initial-request';
+ * ```
+ */
 class LinkSocialAccountDTO {
+    /**
+     * Social provider name
+     * Must be one of the configured providers
+     *
+     * Validation:
+     * - Must be a valid SocialProvider enum value
+     */
     provider;
+    /**
+     * Authorization code from OAuth provider
+     * This code is exchanged for access token and user info
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 1000 characters (typical OAuth code length)
+     */
     code;
+    /**
+     * State parameter from OAuth flow
+     * Must match the state sent in the initial request
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 500 characters (typical OAuth state length)
+     */
     state;
 }
 exports.LinkSocialAccountDTO = LinkSocialAccountDTO;
@@ -90,7 +209,25 @@ __decorate([
     (0, class_validator_1.MaxLength)(500, { message: 'State must not exceed 500 characters' }),
     __metadata("design:type", String)
 ], LinkSocialAccountDTO.prototype, "state", void 0);
+/**
+ * DTO for unlinking social account
+ * Used when an authenticated user wants to remove a social provider
+ *
+ * @example
+ * ```typescript
+ * // Unlink Google account from current user
+ * const dto = new UnlinkSocialAccountDTO();
+ * dto.provider = 'google';
+ * ```
+ */
 class UnlinkSocialAccountDTO {
+    /**
+     * Social provider name to unlink
+     * Must be one of the currently linked providers
+     *
+     * Validation:
+     * - Must be a valid SocialProvider enum value
+     */
     provider;
 }
 exports.UnlinkSocialAccountDTO = UnlinkSocialAccountDTO;
@@ -98,11 +235,71 @@ __decorate([
     (0, class_validator_1.IsEnum)(SocialProvider, { message: 'Provider must be one of: google, apple, facebook' }),
     __metadata("design:type", String)
 ], UnlinkSocialAccountDTO.prototype, "provider", void 0);
+/**
+ * Response DTO for social login
+ * Contains authentication tokens and user information
+ *
+ * @example
+ * ```typescript
+ * // Response after successful social login
+ * {
+ *   "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
+ *   "refreshToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
+ *   "expiresIn": 900,
+ *   "user": {
+ *     "sub": "user-uuid",
+ *     "email": "user@example.com",
+ *     "firstName": "John",
+ *     "lastName": "Doe",
+ *     "isEmailVerified": true,
+ *     "socialProviders": ["google"]
+ *   }
+ * }
+ * ```
+ */
 class SocialLoginResponseDTO {
+    /**
+     * JWT access token for API authentication
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 2048 characters (typical JWT length)
+     */
     accessToken;
+    /**
+     * JWT refresh token for token renewal
+     *
+     * Validation:
+     * - Must be a string
+     * - Max 2048 characters (typical JWT length)
+     */
     refreshToken;
+    /**
+     * Access token expiration timestamp (Unix timestamp in seconds)
+     *
+     * Validation:
+     * - Must be a number
+     */
     accessTokenExpiresAt;
+    /**
+     * Refresh token expiration timestamp (Unix timestamp in seconds)
+     *
+     * Validation:
+     * - Must be a number
+     */
     refreshTokenExpiresAt;
+    /**
+     * User information
+     *
+     * Validation:
+     * - Nested fields validated in service layer:
+     *   - sub: UUID v4 format, max 36 chars
+     *   - email: Valid email format, max 255 chars
+     *   - firstName: String, max 100 chars
+     *   - lastName: String, max 100 chars
+     *   - isEmailVerified: Boolean
+     *   - socialProviders: Array of strings, each max 50 chars
+     */
     user;
 }
 exports.SocialLoginResponseDTO = SocialLoginResponseDTO;
@@ -124,7 +321,29 @@ __decorate([
     (0, class_validator_1.IsNumber)({}, { message: 'Refresh token expiration must be a number' }),
     __metadata("design:type", Number)
 ], SocialLoginResponseDTO.prototype, "refreshTokenExpiresAt", void 0);
+/**
+ * Response DTO for social account information
+ * Contains details about linked social accounts
+ *
+ * @example
+ * ```typescript
+ * // Response for user's linked social accounts
+ * {
+ *   "accounts": [
+ *     {
+ *       "provider": "google",
+ *       "providerEmail": "user@gmail.com",
+ *       "linkedAt": "2023-01-01T00:00:00Z",
+ *       "lastUsedAt": "2023-01-15T12:00:00Z"
+ *     }
+ *   ]
+ * }
+ * ```
+ */
 class SocialAccountsResponseDTO {
+    /**
+     * Array of linked social accounts
+     */
     accounts;
 }
 exports.SocialAccountsResponseDTO = SocialAccountsResponseDTO;

package/dist/src/dto/social-login.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"social-login.dto.js","sourceRoot":"","sources":["../../../src/dto/social-login.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAgG;AAKhG,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,iCAAe,CAAA;IACf,uCAAqB,CAAA;AACvB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AAcD,MAAa,cAAc;IASzB,QAAQ,CAAkB;IAc1B,KAAK,CAAU;CAChB;AAxBD,wCAwBC;AAfC;IADC,IAAA,wBAAM,EAAC,cAAc,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;gDAC9D;AAc1B;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC/C,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;;6CACrD;AAgBjB,MAAa,iBAAiB;IAS5B,QAAQ,CAAkB;IAa1B,IAAI,CAAU;IAad,KAAK,CAAU;IAaf,KAAK,CAAU;IAaf,iBAAiB,CAAU;CAC5B;AA9DD,8CA8DC;AArDC;IADC,IAAA,wBAAM,EAAC,cAAc,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;mDAC9D;AAa1B;IAHC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC5D,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,2BAAS,EAAC,IAAI,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;+CACrE;AAad;IAHC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC5C,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;;gDACrD;AAaf;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC/C,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;;gDACrD;AAaf;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC3D,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;4DACrD;AAgB7B,MAAa,oBAAoB;IAS/B,QAAQ,CAAkB;IAa1B,IAAI,CAAU;IAad,KAAK,CAAU;CAChB;AApCD,oDAoCC;AA3BC;IADC,IAAA,wBAAM,EAAC,cAAc,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;sDAC9D;AAa1B;IAHC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC5D,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,2BAAS,EAAC,IAAI,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;kDACrE;AAad;IAHC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC5C,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;;mDACrD;AAcjB,MAAa,sBAAsB;IASjC,QAAQ,CAAkB;CAC3B;AAVD,wDAUC;AADC;IADC,IAAA,wBAAM,EAAC,cAAc,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;wDAC9D;AAyB5B,MAAa,sBAAsB;IAUjC,WAAW,CAAU;IAWrB,YAAY,CAAU;IAStB,oBAAoB,CAAU;IAS9B,qBAAqB,CAAU;IAc/B,IAAI,CAOF;CACH;AA7DD,wDA6DC;AAnDC;IAFC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IACtD,IAAA,2BAAS,EAAC,IAAI,EAAE,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;;2DACxD;AAWrB;IAFC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACvD,IAAA,2BAAS,EAAC,IAAI,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;;4DACxD;AAStB;IADC,IAAA,0BAAQ,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;;oEACxC;AAS9B;IADC,IAAA,0BAAQ,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;qEACxC;AA2CjC,MAAa,yBAAyB;IAIpC,QAAQ,CAKL;CACJ;AAVD,8DAUC"}
+{"version":3,"file":"social-login.dto.js","sourceRoot":"","sources":["../../../src/dto/social-login.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAgG;AAEhG;;GAEG;AACH,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,iCAAe,CAAA;IACf,uCAAqB,CAAA;AACvB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AAED;;;;;;;;;;;GAWG;AACH,MAAa,cAAc;IACzB;;;;;;OAMG;IAEH,QAAQ,CAAkB;IAE1B;;;;;;;;OAQG;IAIH,KAAK,CAAU;CAChB;AAxBD,wCAwBC;AAfC;IADC,IAAA,wBAAM,EAAC,cAAc,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;gDAC9D;AAc1B;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC/C,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;;6CACrD;AAGjB;;;;;;;;;;;;GAYG;AACH,MAAa,iBAAiB;IAC5B;;;;;;OAMG;IAEH,QAAQ,CAAkB;IAE1B;;;;;;;OAOG;IAIH,IAAI,CAAU;IAEd;;;;;;;OAOG;IAIH,KAAK,CAAU;IAEf;;;;;;;OAOG;IAIH,KAAK,CAAU;IAEf;;;;;;;OAOG;IAIH,iBAAiB,CAAU;CAC5B;AA9DD,8CA8DC;AArDC;IADC,IAAA,wBAAM,EAAC,cAAc,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;mDAC9D;AAa1B;IAHC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC5D,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,2BAAS,EAAC,IAAI,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;+CACrE;AAad;IAHC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC5C,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;;gDACrD;AAaf;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC/C,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;;gDACrD;AAaf;IAHC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC3D,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;4DACrD;AAG7B;;;;;;;;;;;;GAYG;AACH,MAAa,oBAAoB;IAC/B;;;;;;OAMG;IAEH,QAAQ,CAAkB;IAE1B;;;;;;;OAOG;IAIH,IAAI,CAAU;IAEd;;;;;;;OAOG;IAIH,KAAK,CAAU;CAChB;AApCD,oDAoCC;AA3BC;IADC,IAAA,wBAAM,EAAC,cAAc,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;sDAC9D;AAa1B;IAHC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC5D,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACzD,IAAA,2BAAS,EAAC,IAAI,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;kDACrE;AAad;IAHC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC/C,IAAA,4BAAU,EAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC5C,IAAA,2BAAS,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;;mDACrD;AAGjB;;;;;;;;;;GAUG;AACH,MAAa,sBAAsB;IACjC;;;;;;OAMG;IAEH,QAAQ,CAAkB;CAC3B;AAVD,wDAUC;AADC;IADC,IAAA,wBAAM,EAAC,cAAc,EAAE,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;wDAC9D;AAG5B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAa,sBAAsB;IACjC;;;;;;OAMG;IAGH,WAAW,CAAU;IAErB;;;;;;OAMG;IAGH,YAAY,CAAU;IAEtB;;;;;OAKG;IAEH,oBAAoB,CAAU;IAE9B;;;;;OAKG;IAEH,qBAAqB,CAAU;IAE/B;;;;;;;;;;;OAWG;IACH,IAAI,CAOF;CACH;AA7DD,wDA6DC;AAnDC;IAFC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IACtD,IAAA,2BAAS,EAAC,IAAI,EAAE,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;;2DACxD;AAWrB;IAFC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACvD,IAAA,2BAAS,EAAC,IAAI,EAAE,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;;4DACxD;AAStB;IADC,IAAA,0BAAQ,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;;oEACxC;AAS9B;IADC,IAAA,0BAAQ,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;qEACxC;AAwBjC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAa,yBAAyB;IACpC;;OAEG;IACH,QAAQ,CAKL;CACJ;AAVD,8DAUC"}

package/dist/src/index.d.ts

@@ -1,3 +1,9 @@
+/**
+ * @nauth-toolkit/social-apple
+ *
+ * Platform-agnostic Apple OAuth provider for nauth-toolkit.
+ * For NestJS integration, use '@nauth-toolkit/social-apple/nestjs'
+ */
 export { AppleOAuthClient } from './apple-oauth.client';
 export { TokenVerifierService } from './token-verifier.service';
 export { AppleSocialAuthService } from './apple-social-auth.service';

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,cAAc,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,cAAc,wBAAwB,CAAC"}

package/dist/src/index.js

@@ -1,4 +1,10 @@
 "use strict";
+/**
+ * @nauth-toolkit/social-apple
+ *
+ * Platform-agnostic Apple OAuth provider for nauth-toolkit.
+ * For NestJS integration, use '@nauth-toolkit/social-apple/nestjs'
+ */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAOA,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAC7B,yEAAqE;AAA5D,mIAAA,sBAAsB,OAAA;AAE/B,yDAAuC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;AAEH,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA;AAC7B,yEAAqE;AAA5D,mIAAA,sBAAsB,OAAA;AAE/B,yDAAuC"}

package/dist/src/token-verifier.service.d.ts

@@ -1,6 +1,30 @@
 import { NAuthConfig, ITokenVerifierService } from '@nauth-toolkit/core';
 import { VerifiedAppleTokenProfile } from './verified-token-profile.interface';
+/**
+ * jose module type (ESM-only dependency).
+ *
+ * IMPORTANT: `jose@6` is ESM-only. This package is compiled to CommonJS by default,
+ * so we load jose via dynamic import to avoid `ERR_REQUIRE_ESM` at runtime.
+ */
 type JoseModule = typeof import('jose');
+/**
+ * Token Verifier Service for Apple OAuth (Platform-Agnostic)
+ *
+ * Handles secure verification of Apple ID tokens using JWKS public keys.
+ * Uses cryptographic signature verification to ensure tokens are authentic.
+ *
+ * Security Features:
+ * - Apple: Verifies JWT signature with Apple's JWKS public keys
+ *
+ * This is a plain TypeScript class with no framework dependencies.
+ *
+ * @example
+ * ```typescript
+ * const verifier = new TokenVerifierService(config);
+ * const profile = await verifier.verifyAppleToken(idToken, clientId);
+ * console.log(profile.email); // Verified email from Apple
+ * ```
+ */
 export declare class TokenVerifierService implements ITokenVerifierService {
     private appleJWKS;
     private readonly logger;
@@ -9,6 +33,27 @@ export declare class TokenVerifierService implements ITokenVerifierService {
     constructor(config: NAuthConfig, loadJose?: () => Promise<JoseModule>);
     private getJose;
     private getAppleJWKS;
+    /**
+     * Verify Apple ID token with JWT signature validation
+     *
+     * Fetches Apple's public keys from their JWKS endpoint and verifies the
+     * JWT signature to ensure authenticity.
+     *
+     * @param idToken - ID token from Apple Sign In
+     * @param clientId - Apple Services ID (client ID) for audience validation
+     * @returns Verified user profile data
+     * @throws {BadRequestException} When token is invalid, expired, or signature fails
+     *
+     * @example
+     * ```typescript
+     * try {
+     *   const profile = await verifier.verifyAppleToken(idToken, 'com.yourapp.service');
+     *   console.log(`Verified email: ${profile.email}`);
+     * } catch (error) {
+     *   console.error('Token verification failed:', error.message);
+     * }
+     * ```
+     */
     verifyAppleToken(idToken: string, clientId: string): Promise<VerifiedAppleTokenProfile>;
 }
 export {};

package/dist/src/token-verifier.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-verifier.service.d.ts","sourceRoot":"","sources":["../../src/token-verifier.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAA8C,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrH,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAQ/E,KAAK,UAAU,GAAG,cAAc,MAAM,CAAC,CAAC;AAoBxC,qBAAa,oBAAqB,YAAW,qBAAqB;IAChE,OAAO,CAAC,SAAS,CAA6D;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,iBAAiB,CAAoC;gBAEjD,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC;YAKvD,OAAO;YAOP,YAAY;IA6BpB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAiC9F"}
+{"version":3,"file":"token-verifier.service.d.ts","sourceRoot":"","sources":["../../src/token-verifier.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAA8C,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrH,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAE/E;;;;;GAKG;AACH,KAAK,UAAU,GAAG,cAAc,MAAM,CAAC,CAAC;AAExC;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,oBAAqB,YAAW,qBAAqB;IAChE,OAAO,CAAC,SAAS,CAA6D;IAC9E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;IACrD,OAAO,CAAC,iBAAiB,CAAoC;gBAEjD,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC;YAKvD,OAAO;YAOP,YAAY;IAQ1B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAiC9F"}