@odysseon/whoami-core 0.2.0

package/dist/adapters/security/jose-token-signer.adapter.d.ts

@@ -0,0 +1,15 @@
+import type { ITokenSigner } from "../../interfaces/ports/security/token-signer.port.js";
+import type { IJwtPayload } from "../../interfaces/models/jwt-payload.interface.js";
+export interface JoseSignerConfig {
+    secret: string;
+    issuer?: string;
+    audience?: string;
+}
+export declare class JoseTokenSigner implements ITokenSigner {
+    private readonly config;
+    private readonly encodedSecret;
+    constructor(config: JoseSignerConfig);
+    sign(payload: IJwtPayload, expiresInSeconds: number): Promise<string>;
+    verify(token: string): Promise<IJwtPayload>;
+}
+//# sourceMappingURL=jose-token-signer.adapter.d.ts.map

package/dist/adapters/security/jose-token-signer.adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jose-token-signer.adapter.d.ts","sourceRoot":"","sources":["../../../src/adapters/security/jose-token-signer.adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sDAAsD,CAAC;AACzF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kDAAkD,CAAC;AAGpF,MAAM,WAAW,gBAAgB;IAE/B,MAAM,EAAE,MAAM,CAAC;IAEf,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,eAAgB,YAAW,YAAY;IAGtC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAa;gBAEd,MAAM,EAAE,gBAAgB;IAUxC,IAAI,CACf,OAAO,EAAE,WAAW,EACpB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC;IAkBL,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAiDzD"}

package/dist/adapters/security/jose-token-signer.adapter.js

@@ -0,0 +1,54 @@
+import { SignJWT, jwtVerify, errors } from "jose";
+import { WhoamiError } from "../../errors/whoami-error.js";
+export class JoseTokenSigner {
+    config;
+    encodedSecret;
+    constructor(config) {
+        this.config = config;
+        if (!config.secret || config.secret.length < 32) {
+            throw new Error("JoseTokenSigner requires a secret of at least 32 characters for adequate security.");
+        }
+        this.encodedSecret = new TextEncoder().encode(config.secret);
+    }
+    async sign(payload, expiresInSeconds) {
+        let jwt = new SignJWT(payload)
+            .setProtectedHeader({ alg: "HS256", typ: "JWT" })
+            .setIssuedAt()
+            .setExpirationTime(`${expiresInSeconds}s`);
+        if (this.config.issuer) {
+            jwt = jwt.setIssuer(this.config.issuer);
+        }
+        if (this.config.audience) {
+            jwt = jwt.setAudience(this.config.audience);
+        }
+        return await jwt.sign(this.encodedSecret);
+    }
+    async verify(token) {
+        try {
+            const { payload } = await jwtVerify(token, this.encodedSecret, {
+                issuer: this.config.issuer,
+                audience: this.config.audience,
+            });
+            if (typeof payload.sub !== "string" || payload.sub.trim().length === 0) {
+                throw new WhoamiError("TOKEN_MALFORMED", "Token payload is missing a valid subject (sub) claim.");
+            }
+            return payload;
+        }
+        catch (error) {
+            if (error instanceof WhoamiError) {
+                throw error;
+            }
+            if (error instanceof errors.JWTExpired) {
+                throw new WhoamiError("TOKEN_EXPIRED", "The provided access token has expired.");
+            }
+            if (error instanceof errors.JWTInvalid ||
+                error instanceof errors.JWSInvalid ||
+                error instanceof errors.JWSSignatureVerificationFailed ||
+                error instanceof errors.JWTClaimValidationFailed) {
+                throw new WhoamiError("TOKEN_MALFORMED", "The provided token is malformed, tampered with, or invalid.");
+            }
+            throw new WhoamiError("TOKEN_MALFORMED", "Failed to verify token.");
+        }
+    }
+}
+//# sourceMappingURL=jose-token-signer.adapter.js.map

package/dist/adapters/security/jose-token-signer.adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jose-token-signer.adapter.js","sourceRoot":"","sources":["../../../src/adapters/security/jose-token-signer.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAGlD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAW3D,MAAM,OAAO,eAAe;IAGG;IAFZ,aAAa,CAAa;IAE3C,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;QACnD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAEM,KAAK,CAAC,IAAI,CACf,OAAoB,EACpB,gBAAwB;QAIxB,IAAI,GAAG,GAAG,IAAI,OAAO,CAAC,OAAkC,CAAC;aACtD,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aAChD,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,gBAAgB,GAAG,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAa;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE;gBAC7D,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAC1B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;aAC/B,CAAC,CAAC;YAKH,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,WAAW,CACnB,iBAAiB,EACjB,uDAAuD,CACxD,CAAC;YACJ,CAAC;YAED,OAAO,OAAiC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACjC,MAAM,KAAK,CAAC;YACd,CAAC;YAKD,IAAI,KAAK,YAAY,MAAM,CAAC,UAAU,EAAE,CAAC;gBACvC,MAAM,IAAI,WAAW,CACnB,eAAe,EACf,wCAAwC,CACzC,CAAC;YACJ,CAAC;YAED,IACE,KAAK,YAAY,MAAM,CAAC,UAAU;gBAClC,KAAK,YAAY,MAAM,CAAC,UAAU;gBAClC,KAAK,YAAY,MAAM,CAAC,8BAA8B;gBACtD,KAAK,YAAY,MAAM,CAAC,wBAAwB,EAChD,CAAC;gBACD,MAAM,IAAI,WAAW,CACnB,iBAAiB,EACjB,6DAA6D,CAC9D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;CACF"}

package/dist/adapters/security/webcrypto-token-hasher.adapter.d.ts

@@ -0,0 +1,6 @@
+import type { IDeterministicTokenHasher } from "../../interfaces/ports/security/deterministic-token-hasher.port.js";
+export declare class WebCryptoTokenHasher implements IDeterministicTokenHasher {
+    hash(token: string): Promise<string>;
+    verify(hash: string, token: string): Promise<boolean>;
+}
+//# sourceMappingURL=webcrypto-token-hasher.adapter.d.ts.map

package/dist/adapters/security/webcrypto-token-hasher.adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webcrypto-token-hasher.adapter.d.ts","sourceRoot":"","sources":["../../../src/adapters/security/webcrypto-token-hasher.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oEAAoE,CAAC;AAEpH,qBAAa,oBAAqB,YAAW,yBAAyB;IACvD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAcpC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAqBnE"}

package/dist/adapters/security/webcrypto-token-hasher.adapter.js

@@ -0,0 +1,26 @@
+export class WebCryptoTokenHasher {
+    async hash(token) {
+        if (!token) {
+            throw new Error("Cannot hash an empty token.");
+        }
+        const data = new TextEncoder().encode(token);
+        const hashBuffer = await globalThis.crypto.subtle.digest("SHA-256", data);
+        const hashArray = Array.from(new Uint8Array(hashBuffer));
+        return hashArray.map((b) => b.toString(16).padStart(2, "0")).join("");
+    }
+    async verify(hash, token) {
+        if (!hash ||
+            hash.length !== 64 ||
+            !/^[0-9a-fA-F]{64}$/.test(hash) ||
+            !token) {
+            return false;
+        }
+        const computedHash = await this.hash(token);
+        let mismatch = 0;
+        for (let i = 0; i < 64; i++) {
+            mismatch |= hash.charCodeAt(i) ^ computedHash.charCodeAt(i);
+        }
+        return mismatch === 0;
+    }
+}
+//# sourceMappingURL=webcrypto-token-hasher.adapter.js.map

package/dist/adapters/security/webcrypto-token-hasher.adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webcrypto-token-hasher.adapter.js","sourceRoot":"","sources":["../../../src/adapters/security/webcrypto-token-hasher.adapter.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,oBAAoB;IACxB,KAAK,CAAC,IAAI,CAAC,KAAa;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE7C,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAG1E,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,KAAa;QAE7C,IACE,CAAC,IAAI;YACL,IAAI,CAAC,MAAM,KAAK,EAAE;YAClB,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,CAAC,KAAK,EACN,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAG5C,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,QAAQ,KAAK,CAAC,CAAC;IACxB,CAAC;CACF"}

package/dist/core/whoami.service.d.ts

@@ -0,0 +1,28 @@
+import type { IEmailUserRepository } from "../interfaces/ports/repositories/user-repository.port.js";
+import type { IRefreshTokenRepository } from "../interfaces/ports/repositories/refresh-token-repository.port.js";
+import type { IPasswordHasher } from "../interfaces/ports/security/password-hasher.port.js";
+import type { ITokenSigner } from "../interfaces/ports/security/token-signer.port.js";
+import type { ILogger } from "../interfaces/ports/utilities/logger.port.js";
+import type { IUserWithEmail } from "../interfaces/models/user.interface.js";
+import type { IJwtPayload } from "../interfaces/models/jwt-payload.interface.js";
+import type { IAuthTokens } from "../interfaces/operation-contracts/auth-tokens.interface.js";
+import type { IEmailPasswordCredentials } from "../interfaces/operation-contracts/login-credentials.interface.js";
+import type { IRegisterWithEmailData } from "../interfaces/operation-contracts/register-data.interface.js";
+import { IDeterministicTokenHasher } from "../interfaces/ports/security/deterministic-token-hasher.port.js";
+export interface WhoamiServiceDependencies {
+    userRepository: IEmailUserRepository;
+    refreshTokenRepository: IRefreshTokenRepository;
+    passwordHasher: IPasswordHasher;
+    tokenHasher: IDeterministicTokenHasher;
+    tokenSigner: ITokenSigner;
+    logger: ILogger;
+}
+export declare class WhoamiService {
+    private readonly deps;
+    constructor(deps: WhoamiServiceDependencies);
+    registerWithEmail(data: IRegisterWithEmailData): Promise<IUserWithEmail>;
+    loginWithEmail(credentials: IEmailPasswordCredentials): Promise<IAuthTokens>;
+    refreshTokens(rawRefreshTokenString: string): Promise<IAuthTokens>;
+    verifyAccessToken(accessToken: string): Promise<IJwtPayload>;
+}
+//# sourceMappingURL=whoami.service.d.ts.map

package/dist/core/whoami.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.service.d.ts","sourceRoot":"","sources":["../../src/core/whoami.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0DAA0D,CAAC;AACrG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mEAAmE,CAAC;AACjH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AAC5F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mDAAmD,CAAC;AACtF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,8CAA8C,CAAC;AAE5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+CAA+C,CAAC;AACjF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4DAA4D,CAAC;AAC9F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kEAAkE,CAAC;AAClH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8DAA8D,CAAC;AAG3G,OAAO,EAAE,yBAAyB,EAAE,MAAM,iEAAiE,CAAC;AAK5G,MAAM,WAAW,yBAAyB;IACxC,cAAc,EAAE,oBAAoB,CAAC;IACrC,sBAAsB,EAAE,uBAAuB,CAAC;IAChD,cAAc,EAAE,eAAe,CAAC;IAChC,WAAW,EAAE,yBAAyB,CAAC;IACvC,WAAW,EAAE,YAAY,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,yBAAyB;IAE/C,iBAAiB,CAC5B,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,cAAc,CAAC;IA8Bb,cAAc,CACzB,WAAW,EAAE,yBAAyB,GACrC,OAAO,CAAC,WAAW,CAAC;IAsDV,aAAa,CACxB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,WAAW,CAAC;IAmGV,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAK1E"}

package/dist/core/whoami.service.js

@@ -0,0 +1,113 @@
+import { WhoamiError } from "../errors/whoami-error.js";
+export class WhoamiService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async registerWithEmail(data) {
+        const existingUser = await this.deps.userRepository.findByEmail(data.email);
+        if (existingUser) {
+            this.deps.logger.warn("Registration attempt with existing email", {
+                email: data.email,
+            });
+            throw new WhoamiError("USER_ALREADY_EXISTS", "An identity with this email already exists.");
+        }
+        const passwordHash = await this.deps.passwordHasher.hash(data.password);
+        const newUser = await this.deps.userRepository.create({
+            email: data.email,
+            passwordHash,
+        });
+        this.deps.logger.info("New identity registered via email", {
+            userId: newUser.id,
+        });
+        return newUser;
+    }
+    async loginWithEmail(credentials) {
+        const genericError = new WhoamiError("INVALID_CREDENTIALS", "Invalid email or password.");
+        const user = await this.deps.userRepository.findByEmail(credentials.email);
+        if (!user) {
+            this.deps.logger.warn("Failed login attempt: User not found", {
+                email: credentials.email,
+            });
+            throw genericError;
+        }
+        const isValidPassword = await this.deps.passwordHasher.verify(user.passwordHash, credentials.password);
+        if (!isValidPassword) {
+            this.deps.logger.warn("Failed login attempt: Invalid password", {
+                userId: user.id,
+            });
+            throw genericError;
+        }
+        const accessToken = await this.deps.tokenSigner.sign({ sub: user.id }, 900);
+        const rawRefreshToken = crypto.randomUUID();
+        const hashedRefreshToken = await this.deps.tokenHasher.hash(rawRefreshToken);
+        const expirationDate = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000);
+        await this.deps.refreshTokenRepository.store({
+            userId: user.id,
+            tokenHash: hashedRefreshToken,
+            expiresAt: expirationDate,
+            isRevoked: false,
+        });
+        this.deps.logger.info("Successful login", { userId: user.id });
+        return {
+            accessToken,
+            refreshToken: rawRefreshToken,
+        };
+    }
+    async refreshTokens(rawRefreshTokenString) {
+        if (!rawRefreshTokenString || rawRefreshTokenString.trim() === "") {
+            this.deps.logger.warn("Token refresh failed: Empty token provided");
+            throw new WhoamiError("INVALID_CREDENTIALS", "Invalid or expired refresh token.");
+        }
+        const oldTokenHash = await this.deps.tokenHasher.hash(rawRefreshTokenString);
+        const tokenRecord = await this.deps.refreshTokenRepository.findByHash(oldTokenHash);
+        if (!tokenRecord) {
+            this.deps.logger.warn("Token refresh failed: Token not found");
+            throw new WhoamiError("INVALID_CREDENTIALS", "Invalid or expired refresh token.");
+        }
+        if (tokenRecord.isRevoked) {
+            this.deps.logger.error("SECURITY ALERT: Attempted use of revoked refresh token", undefined, {
+                userId: tokenRecord.userId,
+            });
+            await this.deps.refreshTokenRepository.revokeAllForUser(tokenRecord.userId);
+            throw new WhoamiError("INVALID_CREDENTIALS", "Token has been revoked.");
+        }
+        if (tokenRecord.expiresAt < new Date()) {
+            this.deps.logger.warn("Token refresh failed: Token expired", {
+                userId: tokenRecord.userId,
+            });
+            throw new WhoamiError("TOKEN_EXPIRED", "Refresh token has expired.");
+        }
+        const user = await this.deps.userRepository.findById(tokenRecord.userId);
+        if (!user) {
+            this.deps.logger.warn("Token refresh failed: User no longer exists", {
+                userId: tokenRecord.userId,
+            });
+            throw new WhoamiError("USER_NOT_FOUND", "User no longer exists.");
+        }
+        const newAccessToken = await this.deps.tokenSigner.sign({ sub: user.id }, 900);
+        const newRawRefreshToken = crypto.randomUUID();
+        const newHashedRefreshToken = await this.deps.tokenHasher.hash(newRawRefreshToken);
+        const expirationDate = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000);
+        const rotated = await this.deps.refreshTokenRepository.rotate(oldTokenHash, {
+            userId: user.id,
+            tokenHash: newHashedRefreshToken,
+            expiresAt: expirationDate,
+            isRevoked: false,
+        });
+        if (!rotated) {
+            this.deps.logger.error("SECURITY ALERT: Token reuse detected during atomic rotation", undefined, { userId: user.id });
+            await this.deps.refreshTokenRepository.revokeAllForUser(user.id);
+            throw new WhoamiError("INVALID_CREDENTIALS", "Token reuse detected.");
+        }
+        this.deps.logger.info("Tokens rotated successfully", { userId: user.id });
+        return {
+            accessToken: newAccessToken,
+            refreshToken: newRawRefreshToken,
+        };
+    }
+    async verifyAccessToken(accessToken) {
+        return await this.deps.tokenSigner.verify(accessToken);
+    }
+}
+//# sourceMappingURL=whoami.service.js.map

package/dist/core/whoami.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.service.js","sourceRoot":"","sources":["../../src/core/whoami.service.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAexD,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,IAA+B;QAA/B,SAAI,GAAJ,IAAI,CAA2B;IAAG,CAAC;IAEzD,KAAK,CAAC,iBAAiB,CAC5B,IAA4B;QAG5B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBAChE,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QAGD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAGxE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YACpD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY;SACb,CAAC,CAAC;QAGH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;YACzD,MAAM,EAAE,OAAO,CAAC,EAAE;SACnB,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,WAAsC;QAEtC,MAAM,YAAY,GAAG,IAAI,WAAW,CAClC,qBAAqB,EACrB,4BAA4B,CAC7B,CAAC;QAGF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBAC5D,KAAK,EAAE,WAAW,CAAC,KAAK;aACzB,CAAC,CAAC;YACH,MAAM,YAAY,CAAC;QACrB,CAAC;QAGD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAC3D,IAAI,CAAC,YAAY,EACjB,WAAW,CAAC,QAAQ,CACrB,CAAC;QACF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;gBAC9D,MAAM,EAAE,IAAI,CAAC,EAAE;aAChB,CAAC,CAAC;YACH,MAAM,YAAY,CAAC;QACrB,CAAC;QAGD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAG5E,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,kBAAkB,GACtB,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAEpD,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAGtE,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;YAC3C,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,kBAAkB;YAC7B,SAAS,EAAE,cAAc;YACzB,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAG/D,OAAO;YACL,WAAW;YACX,YAAY,EAAE,eAAe;SAC9B,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,aAAa,CACxB,qBAA6B;QAG7B,IAAI,CAAC,qBAAqB,IAAI,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YACpE,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,mCAAmC,CACpC,CAAC;QACJ,CAAC;QAGD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CACnD,qBAAqB,CACtB,CAAC;QAGF,MAAM,WAAW,GACf,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YAC/D,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,mCAAmC,CACpC,CAAC;QACJ,CAAC;QAGD,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CACpB,wDAAwD,EACxD,SAAS,EACT;gBACE,MAAM,EAAE,WAAW,CAAC,MAAM;aAC3B,CACF,CAAC;YACF,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CACrD,WAAW,CAAC,MAAM,CACnB,CAAC;YACF,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,yBAAyB,CAAC,CAAC;QAC1E,CAAC;QAGD,IAAI,WAAW,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;gBAC3D,MAAM,EAAE,WAAW,CAAC,MAAM;aAC3B,CAAC,CAAC;YACH,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;QACvE,CAAC;QAGD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;gBACnE,MAAM,EAAE,WAAW,CAAC,MAAM;aAC3B,CAAC,CAAC;YACH,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;QACpE,CAAC;QAGD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CACrD,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,EAChB,GAAG,CACJ,CAAC;QACF,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/C,MAAM,qBAAqB,GACzB,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEvD,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAGtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAC3D,YAAY,EACZ;YACE,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,qBAAqB;YAChC,SAAS,EAAE,cAAc;YACzB,SAAS,EAAE,KAAK;SACjB,CACF,CAAC;QAGF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CACpB,6DAA6D,EAC7D,SAAS,EACT,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CACpB,CAAC;YACF,MAAM,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAE1E,OAAO;YACL,WAAW,EAAE,cAAc;YAC3B,YAAY,EAAE,kBAAkB;SACjC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QAGhD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/errors/whoami-error.d.ts

@@ -0,0 +1,6 @@
+export type WhoamiErrorCode = "USER_NOT_FOUND" | "USER_ALREADY_EXISTS" | "INVALID_CREDENTIALS" | "TOKEN_EXPIRED" | "TOKEN_MALFORMED" | "TOKEN_REUSED" | "MISSING_TOKEN" | "UNSUPPORTED_AUTH_METHOD";
+export declare class WhoamiError extends Error {
+    readonly code: WhoamiErrorCode;
+    constructor(code: WhoamiErrorCode, message: string);
+}
+//# sourceMappingURL=whoami-error.d.ts.map

package/dist/errors/whoami-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami-error.d.ts","sourceRoot":"","sources":["../../src/errors/whoami-error.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,qBAAqB,GACrB,qBAAqB,GACrB,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,eAAe,GACf,yBAAyB,CAAC;AAE9B,qBAAa,WAAY,SAAQ,KAAK;IACpC,SAAgB,IAAI,EAAE,eAAe,CAAC;gBAE1B,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM;CAUnD"}

package/dist/errors/whoami-error.js

@@ -0,0 +1,12 @@
+export class WhoamiError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = "WhoamiError";
+        this.code = code;
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, WhoamiError);
+        }
+    }
+}
+//# sourceMappingURL=whoami-error.js.map

package/dist/errors/whoami-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami-error.js","sourceRoot":"","sources":["../../src/errors/whoami-error.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpB,IAAI,CAAkB;IAEtC,YAAY,IAAqB,EAAE,OAAe;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAGjB,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,21 @@
+export declare const VERSION = "0.1.0";
+export * from "./errors/whoami-error.js";
+export type * from "./interfaces/models/user.interface.js";
+export type * from "./interfaces/models/refresh-token.interface.js";
+export type * from "./interfaces/models/jwt-payload.interface.js";
+export type * from "./interfaces/ports/security/password-hasher.port.js";
+export type * from "./interfaces/ports/security/deterministic-token-hasher.port.js";
+export type * from "./interfaces/ports/security/token-signer.port.js";
+export type * from "./interfaces/ports/repositories/user-repository.port.js";
+export type * from "./interfaces/ports/repositories/refresh-token-repository.port.js";
+export type * from "./interfaces/ports/utilities/token-extractor.port.js";
+export type * from "./interfaces/ports/utilities/logger.port.js";
+export type * from "./interfaces/operation-contracts/auth-tokens.interface.js";
+export type * from "./interfaces/operation-contracts/login-credentials.interface.js";
+export type * from "./interfaces/operation-contracts/register-data.interface.js";
+export { WhoamiService } from "./core/whoami.service.js";
+export type { WhoamiServiceDependencies } from "./core/whoami.service.js";
+export { JoseTokenSigner } from "./adapters/security/jose-token-signer.adapter.js";
+export type { JoseSignerConfig } from "./adapters/security/jose-token-signer.adapter.js";
+export { WebCryptoTokenHasher } from "./adapters/security/webcrypto-token-hasher.adapter.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B,cAAc,0BAA0B,CAAC;AAGzC,mBAAmB,uCAAuC,CAAC;AAC3D,mBAAmB,gDAAgD,CAAC;AACpE,mBAAmB,8CAA8C,CAAC;AAGlE,mBAAmB,qDAAqD,CAAC;AACzE,mBAAmB,gEAAgE,CAAC;AACpF,mBAAmB,kDAAkD,CAAC;AAGtE,mBAAmB,yDAAyD,CAAC;AAC7E,mBAAmB,kEAAkE,CAAC;AAGtF,mBAAmB,sDAAsD,CAAC;AAC1E,mBAAmB,6CAA6C,CAAC;AAGjE,mBAAmB,2DAA2D,CAAC;AAC/E,mBAAmB,iEAAiE,CAAC;AACrF,mBAAmB,6DAA6D,CAAC;AAGjF,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,YAAY,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAG1E,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,YAAY,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export const VERSION = "0.1.0";
+export * from "./errors/whoami-error.js";
+export { WhoamiService } from "./core/whoami.service.js";
+export { JoseTokenSigner } from "./adapters/security/jose-token-signer.adapter.js";
+export { WebCryptoTokenHasher } from "./adapters/security/webcrypto-token-hasher.adapter.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B,cAAc,0BAA0B,CAAC;AA0BzC,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAIzD,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AAEnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC"}

package/dist/interfaces/models/jwt-payload.interface.d.ts

@@ -0,0 +1,10 @@
+export interface IJwtPayload {
+    sub: string;
+    jti?: string;
+    iat?: number;
+    exp?: number;
+    iss?: string;
+    aud?: string | string[];
+    [key: string]: unknown;
+}
+//# sourceMappingURL=jwt-payload.interface.d.ts.map

package/dist/interfaces/models/jwt-payload.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-payload.interface.d.ts","sourceRoot":"","sources":["../../../src/interfaces/models/jwt-payload.interface.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAGxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB"}

package/dist/interfaces/models/jwt-payload.interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=jwt-payload.interface.js.map

package/dist/interfaces/models/jwt-payload.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-payload.interface.js","sourceRoot":"","sources":["../../../src/interfaces/models/jwt-payload.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/models/refresh-token.interface.d.ts

@@ -0,0 +1,9 @@
+export interface IRefreshToken {
+    id: string;
+    userId: string;
+    tokenHash: string;
+    expiresAt: Date;
+    isRevoked: boolean;
+}
+export type IStoreRefreshToken = Omit<IRefreshToken, "id">;
+//# sourceMappingURL=refresh-token.interface.d.ts.map

package/dist/interfaces/models/refresh-token.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.interface.d.ts","sourceRoot":"","sources":["../../../src/interfaces/models/refresh-token.interface.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC"}

package/dist/interfaces/models/refresh-token.interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=refresh-token.interface.js.map

package/dist/interfaces/models/refresh-token.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.interface.js","sourceRoot":"","sources":["../../../src/interfaces/models/refresh-token.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/models/user.interface.d.ts

@@ -0,0 +1,10 @@
+export interface IUser {
+    id: string;
+}
+export interface IUserWithEmail extends IUser {
+    email: string;
+}
+export interface IUserWithPassword extends IUserWithEmail {
+    passwordHash: string;
+}
+//# sourceMappingURL=user.interface.d.ts.map

package/dist/interfaces/models/user.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.interface.d.ts","sourceRoot":"","sources":["../../../src/interfaces/models/user.interface.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;CACZ;AAMD,MAAM,WAAW,cAAe,SAAQ,KAAK;IAC3C,KAAK,EAAE,MAAM,CAAC;CACf;AAMD,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/dist/interfaces/models/user.interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=user.interface.js.map

package/dist/interfaces/models/user.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.interface.js","sourceRoot":"","sources":["../../../src/interfaces/models/user.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/operation-contracts/auth-tokens.interface.d.ts

@@ -0,0 +1,5 @@
+export interface IAuthTokens {
+    accessToken: string;
+    refreshToken: string;
+}
+//# sourceMappingURL=auth-tokens.interface.d.ts.map

package/dist/interfaces/operation-contracts/auth-tokens.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-tokens.interface.d.ts","sourceRoot":"","sources":["../../../src/interfaces/operation-contracts/auth-tokens.interface.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/dist/interfaces/operation-contracts/auth-tokens.interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth-tokens.interface.js.map

package/dist/interfaces/operation-contracts/auth-tokens.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-tokens.interface.js","sourceRoot":"","sources":["../../../src/interfaces/operation-contracts/auth-tokens.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/operation-contracts/login-credentials.interface.d.ts

@@ -0,0 +1,5 @@
+export interface IEmailPasswordCredentials {
+    email: string;
+    password: string;
+}
+//# sourceMappingURL=login-credentials.interface.d.ts.map

package/dist/interfaces/operation-contracts/login-credentials.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-credentials.interface.d.ts","sourceRoot":"","sources":["../../../src/interfaces/operation-contracts/login-credentials.interface.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/interfaces/operation-contracts/login-credentials.interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=login-credentials.interface.js.map

package/dist/interfaces/operation-contracts/login-credentials.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-credentials.interface.js","sourceRoot":"","sources":["../../../src/interfaces/operation-contracts/login-credentials.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/operation-contracts/register-data.interface.d.ts

@@ -0,0 +1,5 @@
+export interface IRegisterWithEmailData {
+    email: string;
+    password: string;
+}
+//# sourceMappingURL=register-data.interface.d.ts.map

package/dist/interfaces/operation-contracts/register-data.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-data.interface.d.ts","sourceRoot":"","sources":["../../../src/interfaces/operation-contracts/register-data.interface.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/interfaces/operation-contracts/register-data.interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=register-data.interface.js.map

package/dist/interfaces/operation-contracts/register-data.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-data.interface.js","sourceRoot":"","sources":["../../../src/interfaces/operation-contracts/register-data.interface.ts"],"names":[],"mappings":""}

package/dist/interfaces/ports/repositories/refresh-token-repository.port.d.ts

@@ -0,0 +1,8 @@
+import type { IRefreshToken, IStoreRefreshToken } from "../../models/refresh-token.interface.js";
+export interface IRefreshTokenRepository {
+    store(token: IStoreRefreshToken): Promise<void>;
+    findByHash(tokenHash: string): Promise<IRefreshToken | null>;
+    rotate(oldTokenHash: string, newData: IStoreRefreshToken): Promise<boolean>;
+    revokeAllForUser(userId: string): Promise<void>;
+}
+//# sourceMappingURL=refresh-token-repository.port.d.ts.map

package/dist/interfaces/ports/repositories/refresh-token-repository.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token-repository.port.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/ports/repositories/refresh-token-repository.port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,kBAAkB,EACnB,MAAM,yCAAyC,CAAC;AAEjD,MAAM,WAAW,uBAAuB;IAItC,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAMhD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAQ7D,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE5E,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD"}

package/dist/interfaces/ports/repositories/refresh-token-repository.port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=refresh-token-repository.port.js.map

package/dist/interfaces/ports/repositories/refresh-token-repository.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token-repository.port.js","sourceRoot":"","sources":["../../../../src/interfaces/ports/repositories/refresh-token-repository.port.ts"],"names":[],"mappings":""}

package/dist/interfaces/ports/repositories/user-repository.port.d.ts

@@ -0,0 +1,12 @@
+import type { IUser, IUserWithEmail, IUserWithPassword } from "../../models/user.interface.js";
+export interface IUserRepository {
+    findById(id: string): Promise<IUser | null>;
+}
+export interface IEmailUserRepository extends IUserRepository {
+    findByEmail(email: string): Promise<IUserWithPassword | null>;
+    create(data: {
+        email: string;
+        passwordHash: string;
+    }): Promise<IUserWithEmail>;
+}
+//# sourceMappingURL=user-repository.port.d.ts.map

package/dist/interfaces/ports/repositories/user-repository.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-repository.port.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/ports/repositories/user-repository.port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,cAAc,EACd,iBAAiB,EAClB,MAAM,gCAAgC,CAAC;AAKxC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;CAC7C;AAMD,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,EAAE;QACX,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC7B"}

package/dist/interfaces/ports/repositories/user-repository.port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=user-repository.port.js.map

package/dist/interfaces/ports/repositories/user-repository.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-repository.port.js","sourceRoot":"","sources":["../../../../src/interfaces/ports/repositories/user-repository.port.ts"],"names":[],"mappings":""}

package/dist/interfaces/ports/security/deterministic-token-hasher.port.d.ts

@@ -0,0 +1,5 @@
+export interface IDeterministicTokenHasher {
+    hash(token: string): Promise<string>;
+    verify(hash: string, token: string): Promise<boolean>;
+}
+//# sourceMappingURL=deterministic-token-hasher.port.d.ts.map

package/dist/interfaces/ports/security/deterministic-token-hasher.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deterministic-token-hasher.port.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/ports/security/deterministic-token-hasher.port.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD"}

package/dist/interfaces/ports/security/deterministic-token-hasher.port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=deterministic-token-hasher.port.js.map

package/dist/interfaces/ports/security/deterministic-token-hasher.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deterministic-token-hasher.port.js","sourceRoot":"","sources":["../../../../src/interfaces/ports/security/deterministic-token-hasher.port.ts"],"names":[],"mappings":""}

package/dist/interfaces/ports/security/password-hasher.port.d.ts

@@ -0,0 +1,5 @@
+export interface IPasswordHasher {
+    hash(plaintext: string): Promise<string>;
+    verify(hash: string, plaintext: string): Promise<boolean>;
+}
+//# sourceMappingURL=password-hasher.port.d.ts.map

package/dist/interfaces/ports/security/password-hasher.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-hasher.port.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/ports/security/password-hasher.port.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D"}

package/dist/interfaces/ports/security/password-hasher.port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=password-hasher.port.js.map

package/dist/interfaces/ports/security/password-hasher.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-hasher.port.js","sourceRoot":"","sources":["../../../../src/interfaces/ports/security/password-hasher.port.ts"],"names":[],"mappings":""}

package/dist/interfaces/ports/security/token-hasher.port.d.ts

@@ -0,0 +1,5 @@
+export interface ITokenHasher {
+    hash(token: string): Promise<string>;
+    verify(hash: string, token: string): Promise<boolean>;
+}
+//# sourceMappingURL=token-hasher.port.d.ts.map

package/dist/interfaces/ports/security/token-hasher.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-hasher.port.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/ports/security/token-hasher.port.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD"}

package/dist/interfaces/ports/security/token-hasher.port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=token-hasher.port.js.map

package/dist/interfaces/ports/security/token-hasher.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-hasher.port.js","sourceRoot":"","sources":["../../../../src/interfaces/ports/security/token-hasher.port.ts"],"names":[],"mappings":""}

package/dist/interfaces/ports/security/token-signer.port.d.ts

@@ -0,0 +1,6 @@
+import type { IJwtPayload } from "../../models/jwt-payload.interface.js";
+export interface ITokenSigner {
+    sign(payload: IJwtPayload, expiresInSeconds: number): Promise<string>;
+    verify(token: string): Promise<IJwtPayload>;
+}
+//# sourceMappingURL=token-signer.port.d.ts.map

package/dist/interfaces/ports/security/token-signer.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-signer.port.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/ports/security/token-signer.port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AAEzE,MAAM,WAAW,YAAY;IAI3B,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAMtE,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC7C"}

package/dist/interfaces/ports/security/token-signer.port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=token-signer.port.js.map

package/dist/interfaces/ports/security/token-signer.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-signer.port.js","sourceRoot":"","sources":["../../../../src/interfaces/ports/security/token-signer.port.ts"],"names":[],"mappings":""}

package/dist/interfaces/ports/utilities/logger.port.d.ts

@@ -0,0 +1,7 @@
+export interface ILogger {
+    info(message: unknown, ...optionalParams: unknown[]): void;
+    warn(message: unknown, ...optionalParams: unknown[]): void;
+    error(message: unknown, ...optionalParams: unknown[]): void;
+    debug?(message: unknown, ...optionalParams: unknown[]): void;
+}
+//# sourceMappingURL=logger.port.d.ts.map

package/dist/interfaces/ports/utilities/logger.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.port.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/ports/utilities/logger.port.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,OAAO;IACtB,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC3D,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAG3D,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAE5D,KAAK,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAC9D"}

package/dist/interfaces/ports/utilities/logger.port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=logger.port.js.map

package/dist/interfaces/ports/utilities/logger.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.port.js","sourceRoot":"","sources":["../../../../src/interfaces/ports/utilities/logger.port.ts"],"names":[],"mappings":""}

package/dist/interfaces/ports/utilities/token-extractor.port.d.ts

@@ -0,0 +1,4 @@
+export interface ITokenExtractor {
+    extract(request: unknown): string | null;
+}
+//# sourceMappingURL=token-extractor.port.d.ts.map

package/dist/interfaces/ports/utilities/token-extractor.port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-extractor.port.d.ts","sourceRoot":"","sources":["../../../../src/interfaces/ports/utilities/token-extractor.port.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,eAAe;IAM9B,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC;CAC1C"}

package/dist/interfaces/ports/utilities/token-extractor.port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=token-extractor.port.js.map

package/dist/interfaces/ports/utilities/token-extractor.port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-extractor.port.js","sourceRoot":"","sources":["../../../../src/interfaces/ports/utilities/token-extractor.port.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@odysseon/whoami-core",
+  "version": "0.2.0",
+  "description": "Framework-agnostic identity and authentication core",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    }
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "scripts": {
+    "build": "tsc -b tsconfig.build.json",
+    "lint": "eslint \"src/**/*.ts\""
+  },
+  "dependencies": {
+    "jose": "^6.2.2"
+  },
+  "devDependencies": {
+    "typescript": "^5.9.3"
+  }
+}