@os.io/nest-kit 0.0.1-alpha.0 → 0.0.1-alpha.1

package/dist/auth/session/token-blacklist.service.js

@@ -1,70 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from '@nestjs/common';
-import { CACHE_SERVICE, TOKEN_BLACKLIST_PREFIX, REFRESH_TOKEN_FAMILY_PREFIX, } from '../auth.constants';
-/**
- * Redis-backed token blacklist that enables immediate token revocation.
- *
- * Tokens are stored with a TTL matching the token's remaining lifespan
- * so the blacklist does not grow unbounded.
- */
-let TokenBlacklistService = class TokenBlacklistService {
-    cache;
-    constructor(cache) {
-        this.cache = cache;
-    }
-    /**
-     * Blacklist an access token (by its `jti`) until its natural expiry.
-     *
-     * @param jti        Token ID (unique per token)
-     * @param ttlSeconds Seconds until the token would have expired
-     */
-    async blacklistAccess(jti, ttlSeconds) {
-        await this.cache.set(`${TOKEN_BLACKLIST_PREFIX}${jti}`, true, ttlSeconds);
-    }
-    /**
-     * Check whether an access token has been blacklisted.
-     */
-    async isBlacklisted(jti) {
-        const result = await this.cache.get(`${TOKEN_BLACKLIST_PREFIX}${jti}`);
-        return result === true;
-    }
-    /**
-     * Flag a refresh token family as revoked.
-     * When rotation detects a reused old refresh token, the entire
-     * family is revoked to prevent token theft.
-     */
-    async revokeFamily(familyId, ttlSeconds) {
-        await this.cache.set(`${REFRESH_TOKEN_FAMILY_PREFIX}${familyId}`, true, ttlSeconds);
-    }
-    /**
-     * Check whether a refresh token family has been revoked.
-     */
-    async isFamilyRevoked(familyId) {
-        const result = await this.cache.get(`${REFRESH_TOKEN_FAMILY_PREFIX}${familyId}`);
-        return result === true;
-    }
-    /**
-     * Remove a specific token from the blacklist (used during cleanup).
-     */
-    async remove(jti) {
-        await this.cache.del(`${TOKEN_BLACKLIST_PREFIX}${jti}`);
-    }
-};
-TokenBlacklistService = __decorate([
-    Injectable(),
-    __param(0, Inject(CACHE_SERVICE)),
-    __metadata("design:paramtypes", [Object])
-], TokenBlacklistService);
-export { TokenBlacklistService };
-//# sourceMappingURL=token-blacklist.service.js.map

package/dist/auth/session/token-blacklist.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"token-blacklist.service.js","sourceRoot":"","sources":["../../../packages/auth/session/token-blacklist.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAGb;IAFnB,YAEmB,KAAoB;QAApB,UAAK,GAAL,KAAK,CAAe;IACpC,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,GAAW,EAAE,UAAkB;QACnD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,sBAAsB,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,GAAW;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAU,GAAG,sBAAsB,GAAG,GAAG,EAAE,CAAC,CAAC;QAChF,OAAO,MAAM,KAAK,IAAI,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,UAAkB;QACrD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,2BAA2B,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACtF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAU,GAAG,2BAA2B,GAAG,QAAQ,EAAE,CAAC,CAAC;QAC1F,OAAO,MAAM,KAAK,IAAI,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,sBAAsB,GAAG,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF,CAAA;AA/CY,qBAAqB;IADjC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,aAAa,CAAC,CAAA;;GAFb,qBAAqB,CA+CjC"}

package/dist/auth/strategies/anonymous/anonymous.strategy.d.ts

@@ -1,19 +0,0 @@
-import type { ExecutionContext } from '@nestjs/common';
-import { AuthMethod, type IAuthResult } from '../../interfaces';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * Anonymous session strategy.
- *
- * Creates a temporary identity without requiring credentials.
- * These sessions can later be converted to permanent accounts.
- */
-export declare class AnonymousStrategy extends BaseStrategy {
-    private readonly jwtService;
-    readonly type = AuthMethod.ANONYMOUS;
-    readonly name = "anonymous";
-    private counter;
-    constructor(jwtService: JwtService);
-    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
-}
-//# sourceMappingURL=anonymous.strategy.d.ts.map

package/dist/auth/strategies/anonymous/anonymous.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"anonymous.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/anonymous/anonymous.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AACH,qBACa,iBAAkB,SAAQ,YAAY;IAMrC,OAAO,CAAC,QAAQ,CAAC,UAAU;IALvC,QAAQ,CAAC,IAAI,wBAAwB;IACrC,QAAQ,CAAC,IAAI,eAAe;IAE5B,OAAO,CAAC,OAAO,CAAK;gBAES,UAAU,EAAE,UAAU;IAIpC,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;CAiBxB"}

package/dist/auth/strategies/anonymous/anonymous.strategy.js

@@ -1,49 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { Injectable } from '@nestjs/common';
-import { AuthMethod } from '../../interfaces';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * Anonymous session strategy.
- *
- * Creates a temporary identity without requiring credentials.
- * These sessions can later be converted to permanent accounts.
- */
-let AnonymousStrategy = class AnonymousStrategy extends BaseStrategy {
-    jwtService;
-    type = AuthMethod.ANONYMOUS;
-    name = 'anonymous';
-    counter = 0;
-    constructor(jwtService) {
-        super();
-        this.jwtService = jwtService;
-    }
-    async authenticate(payload, _context) {
-        this.counter += 1;
-        const idPrefix = payload.idPrefix || 'anon_';
-        const id = `${idPrefix}${Date.now()}_${this.counter}_${Math.random().toString(36).slice(2, 8)}`;
-        const user = {
-            id,
-            username: `Anonymous_${id.slice(-8)}`,
-            isAnonymous: true,
-            roles: [],
-            permissions: [],
-        };
-        const tokens = await this.jwtService.signTokens(user);
-        return { user, tokens, isNewUser: true };
-    }
-};
-AnonymousStrategy = __decorate([
-    Injectable(),
-    __metadata("design:paramtypes", [JwtService])
-], AnonymousStrategy);
-export { AnonymousStrategy };
-//# sourceMappingURL=anonymous.strategy.js.map

package/dist/auth/strategies/anonymous/anonymous.strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"anonymous.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/anonymous/anonymous.strategy.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,YAAY;IAMpB;IALpB,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC;IAC5B,IAAI,GAAG,WAAW,CAAC;IAEpB,OAAO,GAAG,CAAC,CAAC;IAEpB,YAA6B,UAAsB;QACjD,KAAK,EAAE,CAAC;QADmB,eAAU,GAAV,UAAU,CAAY;IAEnD,CAAC;IAEQ,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,MAAM,QAAQ,GAAI,OAAO,CAAC,QAAmB,IAAI,OAAO,CAAC;QACzD,MAAM,EAAE,GAAG,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAEhG,MAAM,IAAI,GAAG;YACX,EAAE;YACF,QAAQ,EAAE,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,EAAc;YACrB,WAAW,EAAE,EAAc;SAC5B,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;CACF,CAAA;AA9BY,iBAAiB;IAD7B,UAAU,EAAE;qCAO8B,UAAU;GANxC,iBAAiB,CA8B7B"}

package/dist/auth/strategies/base/base.strategy.d.ts

@@ -1,11 +0,0 @@
-import type { ExecutionContext } from '@nestjs/common';
-import type { IAuthStrategy, IAuthResult, AuthMethod } from '../../interfaces';
-/**
- * Abstract base strategy providing a common type and name for all strategies.
- */
-export declare abstract class BaseStrategy implements IAuthStrategy {
-    abstract readonly type: AuthMethod;
-    abstract readonly name: string;
-    abstract authenticate(payload: Record<string, unknown>, context?: ExecutionContext): Promise<IAuthResult>;
-}
-//# sourceMappingURL=base.strategy.d.ts.map

package/dist/auth/strategies/base/base.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"base.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/base/base.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE/E;;GAEG;AACH,8BAAsB,YAAa,YAAW,aAAa;IACzD,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,YAAY,CACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,WAAW,CAAC;CACxB"}

package/dist/auth/strategies/base/base.strategy.js

@@ -1,6 +0,0 @@
-/**
- * Abstract base strategy providing a common type and name for all strategies.
- */
-export class BaseStrategy {
-}
-//# sourceMappingURL=base.strategy.js.map

package/dist/auth/strategies/base/base.strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"base.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/base/base.strategy.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,OAAgB,YAAY;CAQjC"}

package/dist/auth/strategies/credentials/credentials.strategy.d.ts

@@ -1,21 +0,0 @@
-import type { ExecutionContext } from '@nestjs/common';
-import { AuthMethod, type IAuthResult } from '../../interfaces';
-import type { IUserService } from '../../interfaces';
-import { PasswordService } from '../../password/password.service';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * Authenticates users via email/username + password.
- *
- * Enabled by default when `AuthModuleOptions.credentials` is `true`
- * (or an object).
- */
-export declare class CredentialsStrategy extends BaseStrategy {
-    private readonly userService;
-    private readonly jwtService;
-    readonly type = AuthMethod.CREDENTIALS;
-    readonly name = "credentials";
-    constructor(userService: IUserService, _passwordService: PasswordService, jwtService: JwtService);
-    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
-}
-//# sourceMappingURL=credentials.strategy.d.ts.map

package/dist/auth/strategies/credentials/credentials.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentials.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/credentials/credentials.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AACH,qBACa,mBAAoB,SAAQ,YAAY;IAMjD,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAP7B,QAAQ,CAAC,IAAI,0BAA0B;IACvC,QAAQ,CAAC,IAAI,iBAAiB;gBAIX,WAAW,EAAE,YAAY,EAC1C,gBAAgB,EAAE,eAAe,EAChB,UAAU,EAAE,UAAU;IAK1B,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;CA+BxB"}

package/dist/auth/strategies/credentials/credentials.strategy.js

@@ -1,67 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from '@nestjs/common';
-import { AuthMethod } from '../../interfaces';
-import { USER_SERVICE } from '../../auth.constants';
-import { PasswordService } from '../../password/password.service';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * Authenticates users via email/username + password.
- *
- * Enabled by default when `AuthModuleOptions.credentials` is `true`
- * (or an object).
- */
-let CredentialsStrategy = class CredentialsStrategy extends BaseStrategy {
-    userService;
-    jwtService;
-    type = AuthMethod.CREDENTIALS;
-    name = 'credentials';
-    constructor(userService, _passwordService, jwtService) {
-        super();
-        this.userService = userService;
-        this.jwtService = jwtService;
-    }
-    async authenticate(payload, _context) {
-        const email = payload.email;
-        const username = payload.username;
-        const password = payload.password;
-        if (!password) {
-            throw new Error('Password is required');
-        }
-        const user = email
-            ? await this.userService.findByEmail(email)
-            : username
-                ? await this.userService.findByUsername(username)
-                : null;
-        if (!user) {
-            throw new Error('Invalid credentials');
-        }
-        const valid = await this.userService.validatePassword(user, password);
-        if (!valid) {
-            throw new Error('Invalid credentials');
-        }
-        user.roles = await this.userService.getRoles(user.id);
-        user.permissions = await this.userService.getPermissions(user.id);
-        const tokens = await this.jwtService.signTokens(user);
-        return { user, tokens };
-    }
-};
-CredentialsStrategy = __decorate([
-    Injectable(),
-    __param(0, Inject(USER_SERVICE)),
-    __metadata("design:paramtypes", [Object, PasswordService,
-        JwtService])
-], CredentialsStrategy);
-export { CredentialsStrategy };
-//# sourceMappingURL=credentials.strategy.js.map

package/dist/auth/strategies/credentials/credentials.strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentials.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/credentials/credentials.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,YAAY;IAMhC;IAEA;IAPV,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC;IAC9B,IAAI,GAAG,aAAa,CAAC;IAE9B,YAEmB,WAAyB,EAC1C,gBAAiC,EAChB,UAAsB;QAEvC,KAAK,EAAE,CAAC;QAJS,gBAAW,GAAX,WAAW,CAAc;QAEzB,eAAU,GAAV,UAAU,CAAY;IAGzC,CAAC;IAEQ,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAA2B,CAAC;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAA8B,CAAC;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAkB,CAAC;QAE5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG,KAAK;YAChB,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC;YAC3C,CAAC,CAAC,QAAQ;gBACR,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC;gBACjD,CAAC,CAAC,IAAI,CAAC;QAEX,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;CACF,CAAA;AA/CY,mBAAmB;IAD/B,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;6CAEH,eAAe;QACJ,UAAU;GAR9B,mBAAmB,CA+C/B"}

package/dist/auth/strategies/index.d.ts

@@ -1,12 +0,0 @@
-export { BaseStrategy } from './base/base.strategy';
-export { CredentialsStrategy } from './credentials/credentials.strategy';
-export { OAuthProviderRegistry } from './oauth/oauth-provider-registry';
-export { OAuthStrategy } from './oauth/oauth.strategy';
-export { TotpStrategy } from './totp/totp.strategy';
-export { AnonymousStrategy } from './anonymous/anonymous.strategy';
-export { MagicLinkStrategy } from './magic-link/magic-link.strategy';
-export { OtpStrategy } from './otp/otp.strategy';
-export { PasskeyStrategy } from './passkey/passkey.strategy';
-export { OneTapStrategy } from './onetap/onetap.strategy';
-export { SsoStrategy } from './sso/sso.strategy';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/strategies/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../packages/auth/strategies/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/auth/strategies/index.js

@@ -1,12 +0,0 @@
-export { BaseStrategy } from './base/base.strategy';
-export { CredentialsStrategy } from './credentials/credentials.strategy';
-export { OAuthProviderRegistry } from './oauth/oauth-provider-registry';
-export { OAuthStrategy } from './oauth/oauth.strategy';
-export { TotpStrategy } from './totp/totp.strategy';
-export { AnonymousStrategy } from './anonymous/anonymous.strategy';
-export { MagicLinkStrategy } from './magic-link/magic-link.strategy';
-export { OtpStrategy } from './otp/otp.strategy';
-export { PasskeyStrategy } from './passkey/passkey.strategy';
-export { OneTapStrategy } from './onetap/onetap.strategy';
-export { SsoStrategy } from './sso/sso.strategy';
-//# sourceMappingURL=index.js.map

package/dist/auth/strategies/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../packages/auth/strategies/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/auth/strategies/magic-link/magic-link.strategy.d.ts

@@ -1,31 +0,0 @@
-import type { ExecutionContext } from '@nestjs/common';
-import { AuthMethod, type IAuthResult, type ICacheService } from '../../interfaces';
-import type { IUserService } from '../../interfaces';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * Passwordless email login via magic links.
- *
- * Flow:
- *   1. User enters their email → a token is generated and stored in cache
- *   2. Email is sent with a link containing the token
- *   3. User clicks the link → token is validated → user is signed in
- */
-export declare class MagicLinkStrategy extends BaseStrategy {
-    private readonly cache;
-    private readonly userService;
-    private readonly jwtService;
-    readonly type = AuthMethod.MAGIC_LINK;
-    readonly name = "magic-link";
-    constructor(cache: ICacheService, userService: IUserService, jwtService: JwtService);
-    /**
-     * Request a magic link for the given email.
-     * Returns the raw token (in production, send this via email).
-     */
-    requestLink(email: string, expiresIn?: number, tokenBytes?: number): Promise<string>;
-    /**
-     * Authenticate using a magic-link token.
-     */
-    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
-}
-//# sourceMappingURL=magic-link.strategy.d.ts.map

package/dist/auth/strategies/magic-link/magic-link.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"magic-link.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/magic-link/magic-link.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD;;;;;;;GAOG;AACH,qBACa,iBAAkB,SAAQ,YAAY;IAM/C,OAAO,CAAC,QAAQ,CAAC,KAAK;IAEtB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAR7B,QAAQ,CAAC,IAAI,yBAAyB;IACtC,QAAQ,CAAC,IAAI,gBAAgB;gBAIV,KAAK,EAAE,aAAa,EAEpB,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,UAAU;IAKzC;;;OAGG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,SAAM,EAAE,UAAU,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAMnF;;OAEG;IACY,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;CAwCxB"}

package/dist/auth/strategies/magic-link/magic-link.strategy.js

@@ -1,88 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from '@nestjs/common';
-import { AuthMethod } from '../../interfaces';
-import { CACHE_SERVICE, MAGIC_LINK_PREFIX, USER_SERVICE } from '../../auth.constants';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-import { randomBytes } from 'node:crypto';
-/**
- * Passwordless email login via magic links.
- *
- * Flow:
- *   1. User enters their email → a token is generated and stored in cache
- *   2. Email is sent with a link containing the token
- *   3. User clicks the link → token is validated → user is signed in
- */
-let MagicLinkStrategy = class MagicLinkStrategy extends BaseStrategy {
-    cache;
-    userService;
-    jwtService;
-    type = AuthMethod.MAGIC_LINK;
-    name = 'magic-link';
-    constructor(cache, userService, jwtService) {
-        super();
-        this.cache = cache;
-        this.userService = userService;
-        this.jwtService = jwtService;
-    }
-    /**
-     * Request a magic link for the given email.
-     * Returns the raw token (in production, send this via email).
-     */
-    async requestLink(email, expiresIn = 900, tokenBytes = 32) {
-        const token = randomBytes(tokenBytes).toString('hex');
-        await this.cache.set(`${MAGIC_LINK_PREFIX}${token}`, { email, used: false }, expiresIn);
-        return token;
-    }
-    /**
-     * Authenticate using a magic-link token.
-     */
-    async authenticate(payload, _context) {
-        const token = payload.token;
-        if (!token) {
-            throw new Error('Magic link token is required');
-        }
-        const data = await this.cache.get(`${MAGIC_LINK_PREFIX}${token}`);
-        if (!data) {
-            throw new Error('Invalid or expired magic link');
-        }
-        if (data.used) {
-            throw new Error('Magic link has already been used');
-        }
-        // Mark as used immediately (prevent replay)
-        await this.cache.set(`${MAGIC_LINK_PREFIX}${token}`, { ...data, used: true }, 60);
-        const existingUser = await this.userService.findByEmail(data.email);
-        let finalUser;
-        let isNewUser = false;
-        if (!existingUser) {
-            finalUser = await this.userService.create({ email: data.email });
-            isNewUser = true;
-        }
-        else {
-            finalUser = existingUser;
-        }
-        finalUser.roles = await this.userService.getRoles(finalUser.id);
-        finalUser.permissions = await this.userService.getPermissions(finalUser.id);
-        const tokens = await this.jwtService.signTokens(finalUser);
-        return { user: finalUser, tokens, isNewUser };
-    }
-};
-MagicLinkStrategy = __decorate([
-    Injectable(),
-    __param(0, Inject(CACHE_SERVICE)),
-    __param(1, Inject(USER_SERVICE)),
-    __metadata("design:paramtypes", [Object, Object, JwtService])
-], MagicLinkStrategy);
-export { MagicLinkStrategy };
-//# sourceMappingURL=magic-link.strategy.js.map

package/dist/auth/strategies/magic-link/magic-link.strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"magic-link.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/magic-link/magic-link.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAwC,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;GAOG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,YAAY;IAM9B;IAEA;IACA;IARV,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC;IAC7B,IAAI,GAAG,YAAY,CAAC;IAE7B,YAEmB,KAAoB,EAEpB,WAAyB,EACzB,UAAsB;QAEvC,KAAK,EAAE,CAAC;QALS,UAAK,GAAL,KAAK,CAAe;QAEpB,gBAAW,GAAX,WAAW,CAAc;QACzB,eAAU,GAAV,UAAU,CAAY;IAGzC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,SAAS,GAAG,GAAG,EAAE,UAAU,GAAG,EAAE;QAC/D,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,iBAAiB,GAAG,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAe,CAAC;QAEtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAC/B,GAAG,iBAAiB,GAAG,KAAK,EAAE,CAC/B,CAAC;QAEF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,4CAA4C;QAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,iBAAiB,GAAG,KAAK,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAElF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,SAA+C,CAAC;QACpD,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACjE,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,YAAY,CAAC;QAC3B,CAAC;QAED,SAAS,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAChE,SAAS,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAE3D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;CACF,CAAA;AAtEY,iBAAiB;IAD7B,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,aAAa,CAAC,CAAA;IAErB,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;qDAEQ,UAAU;GAT9B,iBAAiB,CAsE7B"}

package/dist/auth/strategies/oauth/index.d.ts

@@ -1,3 +0,0 @@
-export { OAuthProviderRegistry } from './oauth-provider-registry';
-export { OAuthStrategy } from './oauth.strategy';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/strategies/oauth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/auth/strategies/oauth/index.js

@@ -1,3 +0,0 @@
-export { OAuthProviderRegistry } from './oauth-provider-registry';
-export { OAuthStrategy } from './oauth.strategy';
-//# sourceMappingURL=index.js.map

package/dist/auth/strategies/oauth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/auth/strategies/oauth/oauth-provider-registry.d.ts

@@ -1,13 +0,0 @@
-import type { OAuthProviderConfig } from '../../auth.options';
-/**
- * Registry of OAuth provider configurations.
- * Populated at runtime from AuthModuleOptions.oauth.
- */
-export declare class OAuthProviderRegistry {
-    private providers;
-    register(provider: string, config: OAuthProviderConfig): void;
-    get(provider: string): OAuthProviderConfig | undefined;
-    has(provider: string): boolean;
-    all(): Map<string, OAuthProviderConfig>;
-}
-//# sourceMappingURL=oauth-provider-registry.d.ts.map

package/dist/auth/strategies/oauth/oauth-provider-registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-provider-registry.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/oauth/oauth-provider-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;GAGG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,SAAS,CAA0C;IAE3D,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,IAAI;IAI7D,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS;IAItD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI9B,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC;CAGxC"}

package/dist/auth/strategies/oauth/oauth-provider-registry.js

@@ -1,20 +0,0 @@
-/**
- * Registry of OAuth provider configurations.
- * Populated at runtime from AuthModuleOptions.oauth.
- */
-export class OAuthProviderRegistry {
-    providers = new Map();
-    register(provider, config) {
-        this.providers.set(provider.toLowerCase(), config);
-    }
-    get(provider) {
-        return this.providers.get(provider.toLowerCase());
-    }
-    has(provider) {
-        return this.providers.has(provider.toLowerCase());
-    }
-    all() {
-        return new Map(this.providers);
-    }
-}
-//# sourceMappingURL=oauth-provider-registry.js.map

package/dist/auth/strategies/oauth/oauth-provider-registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-provider-registry.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/oauth/oauth-provider-registry.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,qBAAqB;IACxB,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE3D,QAAQ,CAAC,QAAgB,EAAE,MAA2B;QACpD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,GAAG;QACD,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/auth/strategies/oauth/oauth.strategy.d.ts

@@ -1,23 +0,0 @@
-import type { ExecutionContext } from '@nestjs/common';
-import { AuthMethod, type IAuthResult } from '../../interfaces';
-import type { IUserService } from '../../interfaces';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-import { OAuthProviderRegistry } from './oauth-provider-registry';
-/**
- * OAuth 2.0 authentication strategy supporting Google, GitHub, Facebook,
- * Apple, Microsoft, Discord, and custom providers.
- *
- * The consumer must provide a handler to exchange the authorization code
- * for user info (or pass an access token directly).
- */
-export declare class OAuthStrategy extends BaseStrategy {
-    private readonly userService;
-    private readonly jwtService;
-    readonly registry: OAuthProviderRegistry;
-    readonly type = AuthMethod.OAUTH;
-    readonly name = "oauth";
-    constructor(userService: IUserService, jwtService: JwtService, registry: OAuthProviderRegistry);
-    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
-}
-//# sourceMappingURL=oauth.strategy.d.ts.map

package/dist/auth/strategies/oauth/oauth.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/oauth/oauth.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE;;;;;;GAMG;AACH,qBACa,aAAc,SAAQ,YAAY;IAM3C,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;aACX,QAAQ,EAAE,qBAAqB;IAPjD,QAAQ,CAAC,IAAI,oBAAoB;IACjC,QAAQ,CAAC,IAAI,WAAW;gBAIL,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,UAAU,EACvB,QAAQ,EAAE,qBAAqB;IAKlC,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;CA0CxB"}

package/dist/auth/strategies/oauth/oauth.strategy.js

@@ -1,79 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from '@nestjs/common';
-import { AuthMethod } from '../../interfaces';
-import { USER_SERVICE } from '../../auth.constants';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-import { OAuthProviderRegistry } from './oauth-provider-registry';
-/**
- * OAuth 2.0 authentication strategy supporting Google, GitHub, Facebook,
- * Apple, Microsoft, Discord, and custom providers.
- *
- * The consumer must provide a handler to exchange the authorization code
- * for user info (or pass an access token directly).
- */
-let OAuthStrategy = class OAuthStrategy extends BaseStrategy {
-    userService;
-    jwtService;
-    registry;
-    type = AuthMethod.OAUTH;
-    name = 'oauth';
-    constructor(userService, jwtService, registry) {
-        super();
-        this.userService = userService;
-        this.jwtService = jwtService;
-        this.registry = registry;
-    }
-    async authenticate(payload, _context) {
-        const provider = payload.provider;
-        const code = payload.code;
-        const accessToken = payload.accessToken;
-        if (!provider) {
-            throw new Error('OAuth provider is required');
-        }
-        if (!code && !accessToken) {
-            throw new Error('Either authorization code or access token is required');
-        }
-        if (!this.registry.has(provider)) {
-            throw new Error(`Unsupported OAuth provider: ${provider}`);
-        }
-        // In production, exchange the code for an access token and fetch user info
-        // from the provider's userinfo endpoint. The exact implementation depends
-        // on the provider. Here we delegate to the consumer via a custom handler.
-        //
-        // The consumer should override this by providing their own OAuth handler.
-        const socialId = `${provider}:${(payload.sub || payload.id)}`;
-        const email = payload.email;
-        const name = payload.name;
-        let user = await this.userService.findBySocialId(provider, socialId);
-        if (!user) {
-            user = await this.userService.create({
-                email,
-                username: name,
-            });
-        }
-        user.roles = await this.userService.getRoles(user.id);
-        user.permissions = await this.userService.getPermissions(user.id);
-        const tokens = await this.jwtService.signTokens(user);
-        return { user, tokens, isNewUser: !user.email };
-    }
-};
-OAuthStrategy = __decorate([
-    Injectable(),
-    __param(0, Inject(USER_SERVICE)),
-    __metadata("design:paramtypes", [Object, JwtService,
-        OAuthProviderRegistry])
-], OAuthStrategy);
-export { OAuthStrategy };
-//# sourceMappingURL=oauth.strategy.js.map

package/dist/auth/strategies/oauth/oauth.strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/oauth/oauth.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE;;;;;;GAMG;AAEI,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,YAAY;IAM1B;IACA;IACD;IAPT,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC;IACxB,IAAI,GAAG,OAAO,CAAC;IAExB,YAEmB,WAAyB,EACzB,UAAsB,EACvB,QAA+B;QAE/C,KAAK,EAAE,CAAC;QAJS,gBAAW,GAAX,WAAW,CAAc;QACzB,eAAU,GAAV,UAAU,CAAY;QACvB,aAAQ,GAAR,QAAQ,CAAuB;IAGjD,CAAC;IAEQ,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAkB,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAA0B,CAAC;QAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAiC,CAAC;QAE9D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,EAAE;QACF,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,CAAW,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,OAAO,CAAC,KAA2B,CAAC;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAA0B,CAAC;QAEhD,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAErE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBACnC,KAAK;gBACL,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;CACF,CAAA;AA1DY,aAAa;IADzB,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;6CAEQ,UAAU;QACb,qBAAqB;GARtC,aAAa,CA0DzB"}