@os.io/nest-kit 0.0.1-alpha.0 → 0.0.1-alpha.1

package/dist/auth/auth.module.js

@@ -1,344 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var AuthModule_1;
-import { Module, Logger } from '@nestjs/common';
-import { AUTH_MODULE_OPTIONS, AUTH_STRATEGIES, CACHE_SERVICE, USER_SERVICE, } from './auth.constants';
-import { AuthService } from './auth.service';
-import { AuthGuard } from './auth.guard';
-import { PasswordService } from './password/password.service';
-import { JwtService } from './session/jwt.service';
-import { TokenBlacklistService } from './session/token-blacklist.service';
-import { DeviceSessionService } from './session/device-session.service';
-import { ThrottleService } from './throttling/throttle.service';
-import { CredentialsStrategy } from './strategies/credentials/credentials.strategy';
-import { OAuthStrategy, OAuthProviderRegistry } from './strategies/oauth/index';
-import { TotpStrategy } from './strategies/totp/totp.strategy';
-import { AnonymousStrategy } from './strategies/anonymous/anonymous.strategy';
-import { MagicLinkStrategy } from './strategies/magic-link/magic-link.strategy';
-import { OtpStrategy } from './strategies/otp/otp.strategy';
-import { PasskeyStrategy } from './strategies/passkey/passkey.strategy';
-import { OneTapStrategy } from './strategies/onetap/onetap.strategy';
-import { SsoStrategy } from './strategies/sso/sso.strategy';
-import { RbacService, RbacGuard } from './authorization/rbac';
-import { PbacService, PbacGuard } from './authorization/pbac';
-const logger = new Logger('AuthModule');
-let AuthModule = AuthModule_1 = class AuthModule {
-    /**
-     * Configure the auth module synchronously.
-     */
-    static forRoot(options, extraProviders = []) {
-        return AuthModule_1.buildModule(options, extraProviders);
-    }
-    /**
-     * Configure the auth module asynchronously.
-     */
-    static forRootAsync(options) {
-        const asyncProviders = AuthModule_1.createAsyncProviders(options);
-        const strategyProviders = AuthModule_1.createStrategyProviders(true);
-        const coreProviders = AuthModule_1.createCoreProviders();
-        const authzProviders = AuthModule_1.createAuthzProviders();
-        const enabledStrategiesProvider = AuthModule_1.createEnabledStrategiesProvider();
-        return {
-            module: AuthModule_1,
-            global: options.global ?? true,
-            imports: options.imports ?? [],
-            providers: [
-                ...asyncProviders,
-                ...strategyProviders,
-                ...coreProviders,
-                ...authzProviders,
-                enabledStrategiesProvider,
-                ...(options.extraProviders ?? []),
-            ],
-            exports: AuthModule_1.getExports(),
-        };
-    }
-    static buildModule(options, extraProviders) {
-        const providers = [
-            { provide: AUTH_MODULE_OPTIONS, useValue: options },
-            ...AuthModule_1.createStrategyProviders(false),
-            ...AuthModule_1.createCoreProviders(),
-            ...AuthModule_1.createAuthzProviders(),
-            AuthModule_1.createEnabledStrategiesProvider(),
-            ...extraProviders,
-        ];
-        if (!options.cacheServiceToken) {
-            logger.warn('You must register a provider under the "CACHE_SERVICE" injection token. ' +
-                'See AuthModuleOptions.cacheServiceToken.');
-        }
-        return {
-            module: AuthModule_1,
-            global: options.global ?? true,
-            providers,
-            exports: AuthModule_1.getExports(),
-        };
-    }
-    static createAsyncProviders(options) {
-        return [
-            {
-                provide: AUTH_MODULE_OPTIONS,
-                useFactory: options.useFactory,
-                inject: options.inject ?? [],
-            },
-        ];
-    }
-    /**
-     * Conditionally register strategy classes based on config.
-     * Only enabled strategies are registered as providers.
-     */
-    static createStrategyProviders(async) {
-        const providers = [];
-        // Credentials — enabled by default (unless explicitly false)
-        providers.push({
-            provide: CredentialsStrategy,
-            useFactory: (...args) => {
-                const options = args[0];
-                if (options.credentials === false) {
-                    return AuthModule_1.createDisabledStrategy(AuthModule_1.nameFor('credentials'));
-                }
-                return new CredentialsStrategy(args[1], args[2], args[3]);
-            },
-            inject: async
-                ? [AUTH_MODULE_OPTIONS, USER_SERVICE, PasswordService, JwtService]
-                : [AUTH_MODULE_OPTIONS, USER_SERVICE, PasswordService, JwtService],
-        });
-        // OAuth — enabled when config provided
-        providers.push({
-            provide: OAuthStrategy,
-            useFactory: (...args) => {
-                const options = args[0];
-                if (!options.oauth) {
-                    return AuthModule_1.createDisabledStrategy(AuthModule_1.nameFor('oauth'));
-                }
-                const registry = new OAuthProviderRegistry();
-                const oauthOpts = options.oauth;
-                for (const [provider, cfg] of Object.entries(oauthOpts)) {
-                    if (typeof cfg === 'object' && cfg !== null) {
-                        registry.register(provider, cfg);
-                    }
-                }
-                return new OAuthStrategy(args[1], args[2], registry);
-            },
-            inject: async
-                ? [AUTH_MODULE_OPTIONS, USER_SERVICE, JwtService]
-                : [AUTH_MODULE_OPTIONS, USER_SERVICE, JwtService],
-        });
-        // TOTP — enabled when config provided
-        providers.push({
-            provide: TotpStrategy,
-            useFactory: (...args) => {
-                const options = args[0];
-                if (!options.totp) {
-                    return AuthModule_1.createDisabledStrategy(AuthModule_1.nameFor('totp'));
-                }
-                return new TotpStrategy(args[1], args[2]);
-            },
-            inject: async
-                ? [AUTH_MODULE_OPTIONS, USER_SERVICE, JwtService]
-                : [AUTH_MODULE_OPTIONS, USER_SERVICE, JwtService],
-        });
-        // Anonymous — enabled when config provided
-        providers.push({
-            provide: AnonymousStrategy,
-            useFactory: (...args) => {
-                const options = args[0];
-                if (!options.anonymous) {
-                    return AuthModule_1.createDisabledStrategy(AuthModule_1.nameFor('anonymous'));
-                }
-                return new AnonymousStrategy(args[1]);
-            },
-            inject: async
-                ? [AUTH_MODULE_OPTIONS, JwtService]
-                : [AUTH_MODULE_OPTIONS, JwtService],
-        });
-        // Magic Link — enabled when config provided
-        providers.push({
-            provide: MagicLinkStrategy,
-            useFactory: (...args) => {
-                const options = args[0];
-                if (!options.magicLink) {
-                    return AuthModule_1.createDisabledStrategy(AuthModule_1.nameFor('magic-link'));
-                }
-                return new MagicLinkStrategy(args[1], args[2], args[3]);
-            },
-            inject: async
-                ? [AUTH_MODULE_OPTIONS, CACHE_SERVICE, USER_SERVICE, JwtService]
-                : [AUTH_MODULE_OPTIONS, CACHE_SERVICE, USER_SERVICE, JwtService],
-        });
-        // OTP — enabled when config provided
-        providers.push({
-            provide: OtpStrategy,
-            useFactory: (...args) => {
-                const options = args[0];
-                if (!options.otp) {
-                    return AuthModule_1.createDisabledStrategy(AuthModule_1.nameFor('otp'));
-                }
-                return new OtpStrategy(args[1], args[2], args[3]);
-            },
-            inject: async
-                ? [AUTH_MODULE_OPTIONS, CACHE_SERVICE, USER_SERVICE, JwtService]
-                : [AUTH_MODULE_OPTIONS, CACHE_SERVICE, USER_SERVICE, JwtService],
-        });
-        // Passkey — enabled when config provided
-        providers.push({
-            provide: PasskeyStrategy,
-            useFactory: (...args) => {
-                const options = args[0];
-                if (!options.passkey) {
-                    return AuthModule_1.createDisabledStrategy(AuthModule_1.nameFor('passkey'));
-                }
-                return new PasskeyStrategy(args[1], args[2]);
-            },
-            inject: async
-                ? [AUTH_MODULE_OPTIONS, USER_SERVICE, JwtService]
-                : [AUTH_MODULE_OPTIONS, USER_SERVICE, JwtService],
-        });
-        // OneTap — enabled when config provided
-        providers.push({
-            provide: OneTapStrategy,
-            useFactory: (...args) => {
-                const options = args[0];
-                if (!options.onetap) {
-                    return AuthModule_1.createDisabledStrategy(AuthModule_1.nameFor('onetap'));
-                }
-                return new OneTapStrategy(args[1], args[2]);
-            },
-            inject: async
-                ? [AUTH_MODULE_OPTIONS, USER_SERVICE, JwtService]
-                : [AUTH_MODULE_OPTIONS, USER_SERVICE, JwtService],
-        });
-        // SSO — enabled when config provided
-        providers.push({
-            provide: SsoStrategy,
-            useFactory: (...args) => {
-                const options = args[0];
-                if (!options.sso) {
-                    return AuthModule_1.createDisabledStrategy(AuthModule_1.nameFor('sso'));
-                }
-                return new SsoStrategy(args[1], args[2]);
-            },
-            inject: async
-                ? [AUTH_MODULE_OPTIONS, USER_SERVICE, JwtService]
-                : [AUTH_MODULE_OPTIONS, USER_SERVICE, JwtService],
-        });
-        return providers;
-    }
-    static createCoreProviders() {
-        return [
-            AuthService,
-            AuthGuard,
-            PasswordService,
-            JwtService,
-            TokenBlacklistService,
-            DeviceSessionService,
-            ThrottleService,
-        ];
-    }
-    static createAuthzProviders() {
-        return [
-            RbacGuard,
-            {
-                provide: RbacService,
-                useFactory: (cache) => {
-                    return new RbacService(cache);
-                },
-                inject: [CACHE_SERVICE],
-            },
-            {
-                provide: PbacGuard,
-                useFactory: (reflector, pbacService) => {
-                    return new PbacGuard(reflector, pbacService);
-                },
-                inject: ['Reflector', PbacService],
-            },
-            {
-                provide: PbacService,
-                useFactory: (cache) => {
-                    return new PbacService(cache);
-                },
-                inject: [CACHE_SERVICE],
-            },
-        ];
-    }
-    static createEnabledStrategiesProvider() {
-        return {
-            provide: AUTH_STRATEGIES,
-            useFactory: (credentials, oauth, totp, anonymous, magicLink, otp, passkey, onetap, sso) => {
-                const all = [
-                    credentials,
-                    oauth,
-                    totp,
-                    anonymous,
-                    magicLink,
-                    otp,
-                    passkey,
-                    onetap,
-                    sso,
-                ];
-                return all.filter((s) => !s._disabled);
-            },
-            inject: [
-                CredentialsStrategy,
-                OAuthStrategy,
-                TotpStrategy,
-                AnonymousStrategy,
-                MagicLinkStrategy,
-                OtpStrategy,
-                PasskeyStrategy,
-                OneTapStrategy,
-                SsoStrategy,
-            ],
-        };
-    }
-    static getExports() {
-        return [
-            AuthService,
-            AuthGuard,
-            RbacService,
-            RbacGuard,
-            PbacService,
-            PbacGuard,
-            PasswordService,
-            JwtService,
-            TokenBlacklistService,
-            DeviceSessionService,
-            ThrottleService,
-            CredentialsStrategy,
-            OAuthStrategy,
-            OAuthProviderRegistry,
-            TotpStrategy,
-            AnonymousStrategy,
-            MagicLinkStrategy,
-            OtpStrategy,
-            PasskeyStrategy,
-            OneTapStrategy,
-            SsoStrategy,
-        ];
-    }
-    static createDisabledStrategy(name) {
-        const s = new DisabledStrategy();
-        s._name = name;
-        return s;
-    }
-    static nameFor(method) {
-        return method;
-    }
-};
-AuthModule = AuthModule_1 = __decorate([
-    Module({})
-], AuthModule);
-export { AuthModule };
-class DisabledStrategy {
-    _disabled = true;
-    _name = 'disabled';
-    type = '';
-    name = 'disabled';
-    authenticate() {
-        throw new Error(`Strategy "${this._name}" is not enabled`);
-    }
-}
-//# sourceMappingURL=auth.module.js.map

package/dist/auth/auth.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../packages/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,EAAqC,MAAM,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAEnF,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,YAAY,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAG9D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;AAGjC,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,OAA0B,EAAE,iBAA6B,EAAE;QACxE,OAAO,YAAU,CAAC,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,OAA+B;QACjD,MAAM,cAAc,GAAG,YAAU,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,iBAAiB,GAAG,YAAU,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,aAAa,GAAG,YAAU,CAAC,mBAAmB,EAAE,CAAC;QACvD,MAAM,cAAc,GAAG,YAAU,CAAC,oBAAoB,EAAE,CAAC;QACzD,MAAM,yBAAyB,GAAG,YAAU,CAAC,+BAA+B,EAAE,CAAC;QAE/E,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,SAAS,EAAE;gBACT,GAAG,cAAc;gBACjB,GAAG,iBAAiB;gBACpB,GAAG,aAAa;gBAChB,GAAG,cAAc;gBACjB,yBAAyB;gBACzB,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;aAClC;YACD,OAAO,EAAE,YAAU,CAAC,UAAU,EAAE;SACjC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,WAAW,CACxB,OAA0B,EAC1B,cAA0B;QAE1B,MAAM,SAAS,GAAe;YAC5B,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE;YACnD,GAAG,YAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC;YAC5C,GAAG,YAAU,CAAC,mBAAmB,EAAE;YACnC,GAAG,YAAU,CAAC,oBAAoB,EAAE;YACpC,YAAU,CAAC,+BAA+B,EAAE;YAC5C,GAAG,cAAc;SAClB,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CACT,0EAA0E;gBACxE,0CAA0C,CAC7C,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;YAC9B,SAAS;YACT,OAAO,EAAE,YAAU,CAAC,UAAU,EAAE;SACjC,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,oBAAoB,CAAC,OAA+B;QACjE,OAAO;YACL;gBACE,OAAO,EAAE,mBAAmB;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;aAC7B;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,uBAAuB,CAAC,KAAc;QACnD,MAAM,SAAS,GAAe,EAAE,CAAC;QAEjC,6DAA6D;QAC7D,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAsB,CAAC;gBAC7C,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;oBAClC,OAAO,YAAU,CAAC,sBAAsB,CAAC,YAAU,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC9E,CAAC;gBACD,OAAO,IAAI,mBAAmB,CAC5B,IAAI,CAAC,CAAC,CAAiB,EACvB,IAAI,CAAC,CAAC,CAAoB,EAC1B,IAAI,CAAC,CAAC,CAAe,CACtB,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,KAAK;gBACX,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,CAAW;gBAC7E,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,CAAW;SAChF,CAAC,CAAC;QAEH,uCAAuC;QACvC,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,aAAa;YACtB,UAAU,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAsB,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO,YAAU,CAAC,sBAAsB,CAAC,YAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,qBAAqB,EAAE,CAAC;gBAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAgC,CAAC;gBAC3D,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;wBAC5C,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAY,CAAC,CAAC;oBAC5C,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,IAAI,CAAC,CAAC,CAAe,EAAE,QAAQ,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,EAAE,KAAK;gBACX,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAW;gBAC5D,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAW;SAC/D,CAAC,CAAC;QAEH,sCAAsC;QACtC,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,YAAY;YACrB,UAAU,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAsB,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBAClB,OAAO,YAAU,CAAC,sBAAsB,CAAC,YAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBACvE,CAAC;gBACD,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,IAAI,CAAC,CAAC,CAAe,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,EAAE,KAAK;gBACX,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAW;gBAC5D,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAW;SAC/D,CAAC,CAAC;QAEH,2CAA2C;QAC3C,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,iBAAiB;YAC1B,UAAU,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAsB,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBACvB,OAAO,YAAU,CAAC,sBAAsB,CAAC,YAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAe,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,EAAE,KAAK;gBACX,CAAC,CAAE,CAAC,mBAAmB,EAAE,UAAU,CAAW;gBAC9C,CAAC,CAAE,CAAC,mBAAmB,EAAE,UAAU,CAAW;SACjD,CAAC,CAAC;QAEH,4CAA4C;QAC5C,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,iBAAiB;YAC1B,UAAU,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAsB,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBACvB,OAAO,YAAU,CAAC,sBAAsB,CAAC,YAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,OAAO,IAAI,iBAAiB,CAC1B,IAAI,CAAC,CAAC,CAAkB,EACxB,IAAI,CAAC,CAAC,CAAiB,EACvB,IAAI,CAAC,CAAC,CAAe,CACtB,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,KAAK;gBACX,CAAC,CAAE,CAAC,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,CAAW;gBAC3E,CAAC,CAAE,CAAC,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,CAAW;SAC9E,CAAC,CAAC;QAEH,qCAAqC;QACrC,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAsB,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;oBACjB,OAAO,YAAU,CAAC,sBAAsB,CAAC,YAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtE,CAAC;gBACD,OAAO,IAAI,WAAW,CACpB,IAAI,CAAC,CAAC,CAAkB,EACxB,IAAI,CAAC,CAAC,CAAiB,EACvB,IAAI,CAAC,CAAC,CAAe,CACtB,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,KAAK;gBACX,CAAC,CAAE,CAAC,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,CAAW;gBAC3E,CAAC,CAAE,CAAC,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,CAAW;SAC9E,CAAC,CAAC;QAEH,yCAAyC;QACzC,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,eAAe;YACxB,UAAU,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAsB,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBACrB,OAAO,YAAU,CAAC,sBAAsB,CAAC,YAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC1E,CAAC;gBACD,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,IAAI,CAAC,CAAC,CAAe,CAAC,CAAC;YAC7E,CAAC;YACD,MAAM,EAAE,KAAK;gBACX,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAW;gBAC5D,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAW;SAC/D,CAAC,CAAC;QAEH,wCAAwC;QACxC,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,cAAc;YACvB,UAAU,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAsB,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,OAAO,YAAU,CAAC,sBAAsB,CAAC,YAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACzE,CAAC;gBACD,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,IAAI,CAAC,CAAC,CAAe,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,EAAE,KAAK;gBACX,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAW;gBAC5D,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAW;SAC/D,CAAC,CAAC;QAEH,qCAAqC;QACrC,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAsB,CAAC;gBAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;oBACjB,OAAO,YAAU,CAAC,sBAAsB,CAAC,YAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtE,CAAC;gBACD,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,IAAI,CAAC,CAAC,CAAe,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,EAAE,KAAK;gBACX,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAW;gBAC5D,CAAC,CAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,UAAU,CAAW;SAC/D,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,mBAAmB;QAChC,OAAO;YACL,WAAW;YACX,SAAS;YACT,eAAe;YACf,UAAU;YACV,qBAAqB;YACrB,oBAAoB;YACpB,eAAe;SAChB,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,oBAAoB;QACjC,OAAO;YACL,SAAS;YACT;gBACE,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,CAAC,KAAoB,EAAE,EAAE;oBACnC,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;gBAChC,CAAC;gBACD,MAAM,EAAE,CAAC,aAAa,CAAC;aACxB;YACD;gBACE,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,CAAC,SAAkB,EAAE,WAAwB,EAAE,EAAE;oBAC3D,OAAO,IAAI,SAAS,CAAC,SAAkB,EAAE,WAAW,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;aACnC;YACD;gBACE,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,CAAC,KAAoB,EAAE,EAAE;oBACnC,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;gBAChC,CAAC;gBACD,MAAM,EAAE,CAAC,aAAa,CAAC;aACxB;SACF,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,+BAA+B;QAC5C,OAAO;YACL,OAAO,EAAE,eAAe;YACxB,UAAU,EAAE,CACV,WAA0B,EAC1B,KAAoB,EACpB,IAAmB,EACnB,SAAwB,EACxB,SAAwB,EACxB,GAAkB,EAClB,OAAsB,EACtB,MAAqB,EACrB,GAAkB,EAClB,EAAE;gBACF,MAAM,GAAG,GAAG;oBACV,WAAW;oBACX,KAAK;oBACL,IAAI;oBACJ,SAAS;oBACT,SAAS;oBACT,GAAG;oBACH,OAAO;oBACP,MAAM;oBACN,GAAG;iBACe,CAAC;gBACrB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,CAAiC,CAAC,SAAS,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,EAAE;gBACN,mBAAmB;gBACnB,aAAa;gBACb,YAAY;gBACZ,iBAAiB;gBACjB,iBAAiB;gBACjB,WAAW;gBACX,eAAe;gBACf,cAAc;gBACd,WAAW;aACZ;SACF,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,UAAU;QACvB,OAAO;YACL,WAAW;YACX,SAAS;YACT,WAAW;YACX,SAAS;YACT,WAAW;YACX,SAAS;YACT,eAAe;YACf,UAAU;YACV,qBAAqB;YACrB,oBAAoB;YACpB,eAAe;YACf,mBAAmB;YACnB,aAAa;YACb,qBAAqB;YACrB,YAAY;YACZ,iBAAiB;YACjB,iBAAiB;YACjB,WAAW;YACX,eAAe;YACf,cAAc;YACd,WAAW;SACZ,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,sBAAsB,CAAC,IAAY;QAChD,MAAM,CAAC,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;QACf,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,MAAM,CAAC,OAAO,CAAC,MAAc;QACnC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AA/VY,UAAU;IADtB,MAAM,CAAC,EAAE,CAAC;GACE,UAAU,CA+VtB;;AAED,MAAM,gBAAgB;IACpB,SAAS,GAAG,IAAI,CAAC;IACjB,KAAK,GAAG,UAAU,CAAC;IACnB,IAAI,GAAG,EAAW,CAAC;IACnB,IAAI,GAAG,UAAU,CAAC;IAElB,YAAY;QACV,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,kBAAkB,CAAC,CAAC;IAC7D,CAAC;CACF"}

package/dist/auth/auth.options.d.ts

@@ -1,179 +0,0 @@
-import type { Provider, DynamicModule, Type } from '@nestjs/common';
-import type { AuthMethod } from './interfaces';
-export interface CredentialsOptions {
-    /** Enable email login (default true) */
-    email?: boolean;
-    /** Enable username login (default false) */
-    username?: boolean;
-    /** Require email verification before login (default false) */
-    requireEmailVerification?: boolean;
-}
-export interface OAuthProviderConfig {
-    clientId: string;
-    clientSecret: string;
-    callbackUrl: string;
-    scopes?: string[];
-    additionalParams?: Record<string, string>;
-}
-export interface OAuthOptions {
-    google?: OAuthProviderConfig;
-    github?: OAuthProviderConfig;
-    facebook?: OAuthProviderConfig;
-    apple?: OAuthProviderConfig;
-    microsoft?: OAuthProviderConfig;
-    discord?: OAuthProviderConfig;
-    custom?: Record<string, OAuthProviderConfig>;
-}
-export interface TOTPOptions {
-    /** Issuer name shown in authenticator apps (default "NestKit") */
-    issuer?: string;
-    /** Number of backup codes to generate (default 8) */
-    backupCodeCount?: number;
-    /** Algorithm: 'sha1' | 'sha256' | 'sha512' (default 'sha1') */
-    algorithm?: 'sha1' | 'sha256' | 'sha512';
-    /** Number of digits (default 6) */
-    digits?: number;
-    /** TOTP step window (seconds, default 30) */
-    period?: number;
-}
-export interface AnonymousOptions {
-    /** Prefix for anonymous user IDs (default "anon_") */
-    idPrefix?: string;
-    /** Whether anonymous sessions can be persisted (default true) */
-    allowConversion?: boolean;
-}
-export interface MagicLinkOptions {
-    /** Token expiry in seconds (default 900 / 15 min) */
-    tokenExpiresIn?: number;
-    /** Token length in bytes (default 32) */
-    tokenBytes?: number;
-}
-export interface OTPOptions {
-    /** OTP code length (default 6) */
-    digits?: number;
-    /** OTP expiry in seconds (default 300 / 5 min) */
-    expiresIn?: number;
-    /** Max allowed attempts before code is invalidated (default 3) */
-    maxAttempts?: number;
-}
-export interface PasskeyOptions {
-    /** Relying Party name (default "NestKit") */
-    rpName?: string;
-    /** Relying Party ID (default request hostname) */
-    rpId?: string;
-    /** Origin URL(s) allowed (default [request origin]) */
-    origins?: string[];
-    /** Timeout for WebAuthn ceremonies (ms, default 60000) */
-    timeout?: number;
-}
-export interface OneTapOptions {
-    google?: {
-        clientId: string;
-    };
-    apple?: {
-        clientId: string;
-        keyId: string;
-        teamId: string;
-        privateKey: string;
-    };
-}
-export interface SSOOptions {
-    /** SAML providers */
-    saml?: Record<string, SamlProviderConfig>;
-    /** OIDC providers */
-    oidc?: Record<string, OidcProviderConfig>;
-}
-export interface SamlProviderConfig {
-    entryPoint: string;
-    issuer: string;
-    cert?: string;
-    privateKey?: string;
-    callbackUrl: string;
-}
-export interface OidcProviderConfig {
-    issuerUrl: string;
-    clientId: string;
-    clientSecret: string;
-    callbackUrl: string;
-    scopes?: string[];
-}
-export interface RBACOptions {
-    /** Key in JWT payload that holds roles (default "roles") */
-    rolesClaim?: string;
-    /** Whether to require at least one role on protected routes (default true) */
-    requireRole?: boolean;
-}
-export interface PBACOptions {
-    /** Policy evaluation mode (default "deny-unless-permit") */
-    defaultEffect?: 'deny-unless-permit' | 'permit-unless-deny';
-}
-export interface SessionOptions {
-    /** Access token TTL (default "15m") */
-    accessTokenExpiresIn?: string;
-    /** Refresh token TTL (default "7d") */
-    refreshTokenExpiresIn?: string;
-    /** JWT signing algorithm (default "HS256") */
-    algorithm?: 'HS256' | 'RS256' | 'ES256';
-    /** Custom issuer claim */
-    issuer?: string;
-    /** Custom audience claim */
-    audience?: string;
-    /** Blacklist TTL (seconds, default = refresh token TTL) */
-    blacklistTtl?: number;
-    /** Enable refresh token rotation (default true) */
-    rotation?: boolean;
-    /** Enable multi-device tracking (default false) */
-    multiDevice?: boolean;
-}
-export interface ThrottleOptions {
-    /** Max login attempts per window (default 5) */
-    maxAttempts?: number;
-    /** Window duration in seconds (default 900 / 15 min) */
-    windowSeconds?: number;
-}
-export interface AuthModuleOptions {
-    /** JWT secret (required for HS256, ignored for RS256/ES256) */
-    jwtSecret?: string;
-    /** Private key PEM (required for RS256/ES256) */
-    jwtPrivateKey?: string;
-    /** Public key PEM (required for RS256/ES256) */
-    jwtPublicKey?: string;
-    /** Bcrypt cost rounds (default 12) */
-    passwordRounds?: number;
-    /** Injection token for your cache-service provider (default 'CACHE_SERVICE') */
-    cacheServiceToken?: string;
-    /**
-     * Injection token for your user-service provider (default 'USER_SERVICE').
-     * The token must resolve to an object implementing IUserService.
-     */
-    userServiceToken?: string;
-    /** Additional NestJS providers to register (e.g. your own services) */
-    extraProviders?: Provider[];
-    credentials?: boolean | CredentialsOptions;
-    oauth?: boolean | OAuthOptions;
-    totp?: boolean | TOTPOptions;
-    anonymous?: boolean | AnonymousOptions;
-    magicLink?: boolean | MagicLinkOptions;
-    otp?: boolean | OTPOptions;
-    passkey?: boolean | PasskeyOptions;
-    onetap?: boolean | OneTapOptions;
-    sso?: boolean | SSOOptions;
-    /**
-     * Override the default authentication method for routes.
-     * If not set, AuthGuard uses the first enabled strategy.
-     */
-    defaultAuthMethod?: AuthMethod;
-    rbac?: boolean | RBACOptions;
-    pbac?: boolean | PBACOptions;
-    session?: SessionOptions;
-    throttle?: ThrottleOptions;
-    global?: boolean;
-}
-export interface AuthModuleAsyncOptions {
-    useFactory: (...args: unknown[]) => Promise<AuthModuleOptions> | AuthModuleOptions;
-    inject?: (Type<unknown> | string | symbol)[];
-    imports?: DynamicModule['imports'];
-    extraProviders?: Provider[];
-    global?: boolean;
-}
-//# sourceMappingURL=auth.options.d.ts.map

package/dist/auth/auth.options.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.options.d.ts","sourceRoot":"","sources":["../../packages/auth/auth.options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI/C,MAAM,WAAW,kBAAkB;IACjC,wCAAwC;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8DAA8D;IAC9D,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,WAAW;IAC1B,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACjF;AAED,MAAM,WAAW,UAAU;IACzB,qBAAqB;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC1C,qBAAqB;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAID,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,aAAa,CAAC,EAAE,oBAAoB,GAAG,oBAAoB,CAAC;CAC7D;AAID,MAAM,WAAW,cAAc;IAC7B,uCAAuC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,8CAA8C;IAC9C,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IACxC,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mDAAmD;IACnD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAID,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IAGxB,gFAAgF;IAChF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,uEAAuE;IACvE,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC;IAG5B,WAAW,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAAC;IAC3C,KAAK,CAAC,EAAE,OAAO,GAAG,YAAY,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;IAC7B,SAAS,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;IACvC,SAAS,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;IACvC,GAAG,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc,CAAC;IACnC,MAAM,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IACjC,GAAG,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAG3B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,UAAU,CAAC;IAG/B,IAAI,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;IAG7B,OAAO,CAAC,EAAE,cAAc,CAAC;IAGzB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAG3B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB,CAAC;IACnF,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC7C,OAAO,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACnC,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB"}

package/dist/auth/auth.options.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=auth.options.js.map

package/dist/auth/auth.options.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.options.js","sourceRoot":"","sources":["../../packages/auth/auth.options.ts"],"names":[],"mappings":""}

package/dist/auth/auth.service.d.ts

@@ -1,57 +0,0 @@
-import { type ExecutionContext } from '@nestjs/common';
-import type { IAuthResult, IAuthStrategy, ICacheService, ITokenPair } from './interfaces';
-import { AuthMethod } from './interfaces';
-import type { AuthModuleOptions } from './auth.options';
-import { JwtService } from './session/jwt.service';
-import { TokenBlacklistService } from './session/token-blacklist.service';
-import { DeviceSessionService } from './session/device-session.service';
-/**
- * Central authentication orchestrator.
- *
- * Delegates to the appropriate strategy based on `AuthMethod`,
- * manages token lifecycle, session tracking, and cache acceleration.
- */
-export declare class AuthService {
-    private readonly options;
-    private readonly cache;
-    private readonly jwtService;
-    private readonly tokenBlacklist;
-    private readonly deviceSession;
-    private readonly strategyMap;
-    constructor(options: AuthModuleOptions, _strategies: IAuthStrategy[], cache: ICacheService, jwtService: JwtService, tokenBlacklist: TokenBlacklistService, deviceSession: DeviceSessionService);
-    /**
-     * Authenticate using the given method.
-     *
-     * @param method  Authentication method (e.g. 'credentials', 'oauth')
-     * @param payload Strategy-specific payload
-     * @param context Optional execution context
-     */
-    authenticate(method: AuthMethod, payload: Record<string, unknown>, context?: ExecutionContext): Promise<IAuthResult>;
-    /**
-     * Validate an access token and return its decoded payload.
-     * Uses cache for fast-path validation when available.
-     *
-     * @param token Raw JWT access token
-     */
-    validateToken(token: string): Promise<Record<string, unknown>>;
-    /**
-     * Refresh an expired access token using a refresh token.
-     * Implements refresh token rotation.
-     */
-    refreshToken(refreshToken: string, deviceId?: string): Promise<ITokenPair>;
-    /**
-     * Logout — blacklist the current access token and optionally
-     * remove a specific device session.
-     */
-    logout(accessToken: string, deviceId?: string): Promise<void>;
-    /**
-     * Logout from all devices — revoke all sessions for a user.
-     */
-    logoutAll(userId: string): Promise<void>;
-    /**
-     * Get all active sessions for a user (multi-device view).
-     */
-    getUserSessions(userId: string): Promise<import("./session").IDeviceInfo[]>;
-    private hash;
-}
-//# sourceMappingURL=auth.service.d.ts.map

package/dist/auth/auth.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../packages/auth/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE;;;;;GAKG;AACH,qBACa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAIxB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAXhC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwC;gBAIjD,OAAO,EAAE,iBAAiB,EAE3C,WAAW,EAAE,aAAa,EAAE,EAEX,KAAK,EAAE,aAAa,EACpB,UAAU,EAAE,UAAU,EACtB,cAAc,EAAE,qBAAqB,EACrC,aAAa,EAAE,oBAAoB;IAOtD;;;;;;OAMG;IACG,YAAY,CAChB,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,WAAW,CAAC;IAsBvB;;;;;OAKG;IACG,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAoBpE;;;OAGG;IACG,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA2ChF;;;OAGG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcnE;;OAEG;IACG,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C;;OAEG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM;IAIpC,OAAO,CAAC,IAAI;CASb"}