@os.io/nest-kit 0.0.1-alpha.0 → 0.0.1-alpha.2

package/dist/auth/strategies/onetap/onetap.strategy.d.ts

@@ -1,24 +0,0 @@
-import type { ExecutionContext } from '@nestjs/common';
-import { AuthMethod, type IAuthResult } from '../../interfaces';
-import type { IUserService } from '../../interfaces';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * Google & Apple OneTap sign-in strategy.
- *
- * OneTap provides a streamlined sign-in experience where users
- * authenticate with a single tap using their Google or Apple ID.
- */
-export declare class OneTapStrategy extends BaseStrategy {
-    private readonly userService;
-    private readonly jwtService;
-    readonly type = AuthMethod.ONETAP;
-    readonly name = "onetap";
-    constructor(userService: IUserService, jwtService: JwtService);
-    /**
-     * Authenticate using a OneTap credential token.
-     * Expects `provider` ('google' | 'apple') and `credential` (ID token).
-     */
-    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
-}
-//# sourceMappingURL=onetap.strategy.d.ts.map

package/dist/auth/strategies/onetap/onetap.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"onetap.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/onetap/onetap.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AACH,qBACa,cAAe,SAAQ,YAAY;IAM5C,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAN7B,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,IAAI,YAAY;gBAIN,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,UAAU;IAKzC;;;OAGG;IACY,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;CAyCxB"}

package/dist/auth/strategies/onetap/onetap.strategy.js

@@ -1,77 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from '@nestjs/common';
-import { AuthMethod } from '../../interfaces';
-import { USER_SERVICE } from '../../auth.constants';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * Google & Apple OneTap sign-in strategy.
- *
- * OneTap provides a streamlined sign-in experience where users
- * authenticate with a single tap using their Google or Apple ID.
- */
-let OneTapStrategy = class OneTapStrategy extends BaseStrategy {
-    userService;
-    jwtService;
-    type = AuthMethod.ONETAP;
-    name = 'onetap';
-    constructor(userService, jwtService) {
-        super();
-        this.userService = userService;
-        this.jwtService = jwtService;
-    }
-    /**
-     * Authenticate using a OneTap credential token.
-     * Expects `provider` ('google' | 'apple') and `credential` (ID token).
-     */
-    async authenticate(payload, _context) {
-        const provider = payload.provider;
-        const credential = payload.credential;
-        if (!provider || !credential) {
-            throw new Error('provider and credential are required');
-        }
-        if (!['google', 'apple'].includes(provider)) {
-            throw new Error(`Unsupported OneTap provider: ${provider}`);
-        }
-        // In production, verify the credential (ID token) using the provider's
-        // public keys (JWKS). Extract email, name, sub from the decoded token.
-        //
-        // For Google: use google-auth-library or manually verify the JWT
-        // For Apple: fetch Apple's public keys and verify the JWT
-        //
-        // const payload = await verifyGoogleIdToken(credential, clientId);
-        const sub = payload.sub;
-        const email = payload.email;
-        const name = payload.name;
-        const socialId = `${provider}:${sub}`;
-        let user = await this.userService.findBySocialId(provider, socialId);
-        if (!user) {
-            user = await this.userService.create({
-                email,
-                username: name,
-            });
-        }
-        user.roles = await this.userService.getRoles(user.id);
-        user.permissions = await this.userService.getPermissions(user.id);
-        const tokens = await this.jwtService.signTokens(user);
-        return { user, tokens, isNewUser: !user.email };
-    }
-};
-OneTapStrategy = __decorate([
-    Injectable(),
-    __param(0, Inject(USER_SERVICE)),
-    __metadata("design:paramtypes", [Object, JwtService])
-], OneTapStrategy);
-export { OneTapStrategy };
-//# sourceMappingURL=onetap.strategy.js.map

package/dist/auth/strategies/onetap/onetap.strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"onetap.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/onetap/onetap.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,YAAY;IAM3B;IACA;IANV,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC;IACzB,IAAI,GAAG,QAAQ,CAAC;IAEzB,YAEmB,WAAyB,EACzB,UAAsB;QAEvC,KAAK,EAAE,CAAC;QAHS,gBAAW,GAAX,WAAW,CAAc;QACzB,eAAU,GAAV,UAAU,CAAY;IAGzC,CAAC;IAED;;;OAGG;IACM,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAkB,CAAC;QAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAoB,CAAC;QAEhD,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,uEAAuE;QACvE,uEAAuE;QACvE,EAAE;QACF,iEAAiE;QACjE,0DAA0D;QAC1D,EAAE;QACF,mEAAmE;QAEnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAa,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAA2B,CAAC;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAA0B,CAAC;QAEhD,MAAM,QAAQ,GAAG,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;QACtC,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAErE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBACnC,KAAK;gBACL,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;CACF,CAAA;AA5DY,cAAc;IAD1B,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;6CAEQ,UAAU;GAP9B,cAAc,CA4D1B"}

package/dist/auth/strategies/otp/otp.strategy.d.ts

@@ -1,31 +0,0 @@
-import type { ExecutionContext } from '@nestjs/common';
-import { AuthMethod, type IAuthResult, type ICacheService } from '../../interfaces';
-import type { IUserService } from '../../interfaces';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * One-Time Password (OTP) authentication via email or phone.
- *
- * Flow:
- *   1. User enters email/phone → a numeric code is generated and stored in cache
- *   2. Code is dispatched via email or SMS (consumer's responsibility)
- *   3. User submits code → validated → signed in
- */
-export declare class OtpStrategy extends BaseStrategy {
-    private readonly cache;
-    private readonly userService;
-    private readonly jwtService;
-    readonly type = AuthMethod.OTP;
-    readonly name = "otp";
-    constructor(cache: ICacheService, userService: IUserService, jwtService: JwtService);
-    /**
-     * Request an OTP code for the given email or phone.
-     * Returns the plaintext code (in production, dispatch via email/SMS).
-     */
-    requestOtp(identifier: string, digits?: number, expiresIn?: number): Promise<string>;
-    /**
-     * Authenticate using an email/phone + OTP code.
-     */
-    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
-}
-//# sourceMappingURL=otp.strategy.d.ts.map

package/dist/auth/strategies/otp/otp.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"otp.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/otp/otp.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD;;;;;;;GAOG;AACH,qBACa,WAAY,SAAQ,YAAY;IAMzC,OAAO,CAAC,QAAQ,CAAC,KAAK;IAEtB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAR7B,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,IAAI,SAAS;gBAIH,KAAK,EAAE,aAAa,EAEpB,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,UAAU;IAKzC;;;OAGG;IACG,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,SAAI,EAAE,SAAS,SAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWlF;;OAEG;IACY,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;CA8CxB"}

package/dist/auth/strategies/otp/otp.strategy.js

@@ -1,93 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from '@nestjs/common';
-import { AuthMethod } from '../../interfaces';
-import { CACHE_SERVICE, OTP_PREFIX, USER_SERVICE } from '../../auth.constants';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-import { randomInt } from 'node:crypto';
-/**
- * One-Time Password (OTP) authentication via email or phone.
- *
- * Flow:
- *   1. User enters email/phone → a numeric code is generated and stored in cache
- *   2. Code is dispatched via email or SMS (consumer's responsibility)
- *   3. User submits code → validated → signed in
- */
-let OtpStrategy = class OtpStrategy extends BaseStrategy {
-    cache;
-    userService;
-    jwtService;
-    type = AuthMethod.OTP;
-    name = 'otp';
-    constructor(cache, userService, jwtService) {
-        super();
-        this.cache = cache;
-        this.userService = userService;
-        this.jwtService = jwtService;
-    }
-    /**
-     * Request an OTP code for the given email or phone.
-     * Returns the plaintext code (in production, dispatch via email/SMS).
-     */
-    async requestOtp(identifier, digits = 6, expiresIn = 300) {
-        const min = Math.pow(10, digits - 1);
-        const max = Math.pow(10, digits) - 1;
-        const code = randomInt(min, max).toString();
-        const data = { code, attempts: 0, identifier };
-        await this.cache.set(`${OTP_PREFIX}${identifier}`, data, expiresIn);
-        return code;
-    }
-    /**
-     * Authenticate using an email/phone + OTP code.
-     */
-    async authenticate(payload, _context) {
-        const identifier = payload.identifier;
-        const code = payload.code;
-        if (!identifier || !code) {
-            throw new Error('identifier and code are required');
-        }
-        const data = await this.cache.get(`${OTP_PREFIX}${identifier}`);
-        if (!data) {
-            throw new Error('OTP not found or expired');
-        }
-        if (data.attempts >= 3) {
-            await this.cache.del(`${OTP_PREFIX}${identifier}`);
-            throw new Error('Too many failed OTP attempts');
-        }
-        if (data.code !== code) {
-            data.attempts += 1;
-            await this.cache.set(`${OTP_PREFIX}${identifier}`, data, 300);
-            throw new Error('Invalid OTP code');
-        }
-        // Code is valid — clean up
-        await this.cache.del(`${OTP_PREFIX}${identifier}`);
-        const isEmail = identifier.includes('@');
-        let user = isEmail ? await this.userService.findByEmail(identifier) : null;
-        if (!user) {
-            user = await this.userService.create(isEmail ? { email: identifier } : { phone: identifier });
-        }
-        user.roles = await this.userService.getRoles(user.id);
-        user.permissions = await this.userService.getPermissions(user.id);
-        const tokens = await this.jwtService.signTokens(user);
-        return { user, tokens, isNewUser: !user.email };
-    }
-};
-OtpStrategy = __decorate([
-    Injectable(),
-    __param(0, Inject(CACHE_SERVICE)),
-    __param(1, Inject(USER_SERVICE)),
-    __metadata("design:paramtypes", [Object, Object, JwtService])
-], OtpStrategy);
-export { OtpStrategy };
-//# sourceMappingURL=otp.strategy.js.map

package/dist/auth/strategies/otp/otp.strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"otp.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/otp/otp.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAwC,MAAM,kBAAkB,CAAC;AAEpF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;;;;GAOG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,YAAY;IAMxB;IAEA;IACA;IARV,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC;IACtB,IAAI,GAAG,KAAK,CAAC;IAEtB,YAEmB,KAAoB,EAEpB,WAAyB,EACzB,UAAsB;QAEvC,KAAK,EAAE,CAAC;QALS,UAAK,GAAL,KAAK,CAAe;QAEpB,gBAAW,GAAX,WAAW,CAAc;QACzB,eAAU,GAAV,UAAU,CAAY;IAGzC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,MAAM,GAAG,CAAC,EAAE,SAAS,GAAG,GAAG;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAE5C,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;QAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAEpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAoB,CAAC;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAc,CAAC;QAEpC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAI9B,GAAG,UAAU,GAAG,UAAU,EAAE,CAAC,CAAC;QAEjC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,UAAU,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,UAAU,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QAED,2BAA2B;QAC3B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,UAAU,EAAE,CAAC,CAAC;QAEnD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE3E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;CACF,CAAA;AAjFY,WAAW;IADvB,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,aAAa,CAAC,CAAA;IAErB,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;qDAEQ,UAAU;GAT9B,WAAW,CAiFvB"}

package/dist/auth/strategies/passkey/passkey.strategy.d.ts

@@ -1,32 +0,0 @@
-import type { ExecutionContext } from '@nestjs/common';
-import { AuthMethod, type IAuthResult } from '../../interfaces';
-import type { IUserService } from '../../interfaces';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * WebAuthn / FIDO2 Passkey authentication strategy.
- *
- * Provides credential registration and assertion ceremonies
- * using the `@simplewebauthn/server` package (loaded dynamically).
- */
-export declare class PasskeyStrategy extends BaseStrategy {
-    private readonly userService;
-    private readonly jwtService;
-    readonly type = AuthMethod.PASSKEY;
-    readonly name = "passkey";
-    constructor(userService: IUserService, jwtService: JwtService);
-    /**
-     * Authenticate using a WebAuthn assertion response.
-     */
-    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
-    /**
-     * Generate registration options for the WebAuthn ceremony.
-     */
-    generateRegistrationOptions(userId: string, userName: string, rpName?: string, rpId?: string): Promise<Record<string, unknown>>;
-    /**
-     * Verify a registration response and return the credential.
-     */
-    verifyRegistrationResponse(credential: Record<string, unknown>, expectedChallenge: string, expectedOrigin: string, expectedRpId: string): Promise<Record<string, unknown>>;
-    private loadWebAuthn;
-}
-//# sourceMappingURL=passkey.strategy.d.ts.map

package/dist/auth/strategies/passkey/passkey.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"passkey.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/passkey/passkey.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AACH,qBACa,eAAgB,SAAQ,YAAY;IAM7C,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAN7B,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,IAAI,aAAa;gBAIP,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,UAAU;IAKzC;;OAEG;IACY,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;IA6BvB;;OAEG;IACG,2BAA2B,CAC/B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,SAAY,EAClB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAcnC;;OAEG;IACG,0BAA0B,CAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,iBAAiB,EAAE,MAAM,EACzB,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAYrB,YAAY;CAS3B"}

package/dist/auth/strategies/passkey/passkey.strategy.js

@@ -1,102 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from '@nestjs/common';
-import { AuthMethod } from '../../interfaces';
-import { USER_SERVICE } from '../../auth.constants';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * WebAuthn / FIDO2 Passkey authentication strategy.
- *
- * Provides credential registration and assertion ceremonies
- * using the `@simplewebauthn/server` package (loaded dynamically).
- */
-let PasskeyStrategy = class PasskeyStrategy extends BaseStrategy {
-    userService;
-    jwtService;
-    type = AuthMethod.PASSKEY;
-    name = 'passkey';
-    constructor(userService, jwtService) {
-        super();
-        this.userService = userService;
-        this.jwtService = jwtService;
-    }
-    /**
-     * Authenticate using a WebAuthn assertion response.
-     */
-    async authenticate(payload, _context) {
-        const userId = payload.userId;
-        const credential = payload.credential;
-        if (!userId || !credential) {
-            throw new Error('userId and credential are required');
-        }
-        const user = await this.userService.findById(userId);
-        if (!user) {
-            throw new Error('User not found');
-        }
-        // In production, use @simplewebauthn/server to verify the assertion.
-        // This requires stored credential records (credentialID, publicKey, counter).
-        //
-        // const verification = await verifyAuthenticationResponse({ ... });
-        //
-        // For now, we assume verification succeeds when the strategy is called.
-        // Consumers should override or extend this behavior.
-        user.roles = await this.userService.getRoles(user.id);
-        user.permissions = await this.userService.getPermissions(user.id);
-        const tokens = await this.jwtService.signTokens(user);
-        return { user, tokens };
-    }
-    /**
-     * Generate registration options for the WebAuthn ceremony.
-     */
-    async generateRegistrationOptions(userId, userName, rpName = 'NestKit', rpId) {
-        const webauthn = await this.loadWebAuthn();
-        const userEncoder = new TextEncoder();
-        const options = webauthn.generateRegistrationOptions({
-            rpName,
-            rpID: rpId ?? 'localhost',
-            userName,
-            userID: userEncoder.encode(userId),
-            attestationType: 'none',
-        });
-        return options;
-    }
-    /**
-     * Verify a registration response and return the credential.
-     */
-    async verifyRegistrationResponse(credential, expectedChallenge, expectedOrigin, expectedRpId) {
-        const webauthn = await this.loadWebAuthn();
-        const verification = await webauthn.verifyRegistrationResponse({
-            response: credential,
-            expectedChallenge,
-            expectedOrigin,
-            expectedRPID: expectedRpId,
-        });
-        return verification;
-    }
-    async loadWebAuthn() {
-        try {
-            return await import('@simplewebauthn/server');
-        }
-        catch {
-            throw new Error('Passkey strategy requires "@simplewebauthn/server". Run: npm install @simplewebauthn/server');
-        }
-    }
-};
-PasskeyStrategy = __decorate([
-    Injectable(),
-    __param(0, Inject(USER_SERVICE)),
-    __metadata("design:paramtypes", [Object, JwtService])
-], PasskeyStrategy);
-export { PasskeyStrategy };
-//# sourceMappingURL=passkey.strategy.js.map

package/dist/auth/strategies/passkey/passkey.strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"passkey.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/passkey/passkey.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,YAAY;IAM5B;IACA;IANV,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;IAC1B,IAAI,GAAG,SAAS,CAAC;IAE1B,YAEmB,WAAyB,EACzB,UAAsB;QAEvC,KAAK,EAAE,CAAC;QAHS,gBAAW,GAAX,WAAW,CAAc;QACzB,eAAU,GAAV,UAAU,CAAY;IAGzC,CAAC;IAED;;OAEG;IACM,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAgB,CAAC;QACxC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAqC,CAAC;QAEjE,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpC,CAAC;QAED,qEAAqE;QACrE,8EAA8E;QAC9E,EAAE;QACF,oEAAoE;QACpE,EAAE;QACF,wEAAwE;QACxE,qDAAqD;QAErD,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,2BAA2B,CAC/B,MAAc,EACd,QAAgB,EAChB,MAAM,GAAG,SAAS,EAClB,IAAa;QAEb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,2BAA2B,CAAC;YACnD,MAAM;YACN,IAAI,EAAE,IAAI,IAAI,WAAW;YACzB,QAAQ;YACR,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;YAClC,eAAe,EAAE,MAAM;SACxB,CAAC,CAAC;QAEH,OAAO,OAA6C,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,0BAA0B,CAC9B,UAAmC,EACnC,iBAAyB,EACzB,cAAsB,EACtB,YAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,0BAA0B,CAAC;YAC7D,QAAQ,EAAE,UAAmB;YAC7B,iBAAiB;YACjB,cAAc;YACd,YAAY,EAAE,YAAY;SAC3B,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAlGY,eAAe;IAD3B,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;6CAEQ,UAAU;GAP9B,eAAe,CAkG3B"}

package/dist/auth/strategies/sso/sso.strategy.d.ts

@@ -1,25 +0,0 @@
-import type { ExecutionContext } from '@nestjs/common';
-import { AuthMethod, type IAuthResult } from '../../interfaces';
-import type { IUserService } from '../../interfaces';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * SSO authentication via SAML2 or OpenID Connect.
- *
- * Supports multiple SAML and OIDC providers configured at module init.
- */
-export declare class SsoStrategy extends BaseStrategy {
-    private readonly userService;
-    private readonly jwtService;
-    readonly type = AuthMethod.SSO;
-    readonly name = "sso";
-    constructor(userService: IUserService, jwtService: JwtService);
-    /**
-     * Authenticate using an SSO assertion / token.
-     *
-     * SAML: payload contains `SAMLResponse` (base64-encoded XML assertion)
-     * OIDC: payload contains `idToken` (JWT)
-     */
-    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
-}
-//# sourceMappingURL=sso.strategy.d.ts.map

package/dist/auth/strategies/sso/sso.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sso.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/sso/sso.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;GAIG;AACH,qBACa,WAAY,SAAQ,YAAY;IAMzC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAN7B,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,IAAI,SAAS;gBAIH,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,UAAU;IAKzC;;;;;OAKG;IACY,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;CA2CxB"}

package/dist/auth/strategies/sso/sso.strategy.js

@@ -1,80 +0,0 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { Inject, Injectable } from '@nestjs/common';
-import { AuthMethod } from '../../interfaces';
-import { USER_SERVICE } from '../../auth.constants';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * SSO authentication via SAML2 or OpenID Connect.
- *
- * Supports multiple SAML and OIDC providers configured at module init.
- */
-let SsoStrategy = class SsoStrategy extends BaseStrategy {
-    userService;
-    jwtService;
-    type = AuthMethod.SSO;
-    name = 'sso';
-    constructor(userService, jwtService) {
-        super();
-        this.userService = userService;
-        this.jwtService = jwtService;
-    }
-    /**
-     * Authenticate using an SSO assertion / token.
-     *
-     * SAML: payload contains `SAMLResponse` (base64-encoded XML assertion)
-     * OIDC: payload contains `idToken` (JWT)
-     */
-    async authenticate(payload, _context) {
-        const provider = payload.provider;
-        const samlResponse = payload.SAMLResponse;
-        const idToken = payload.idToken;
-        if (!provider) {
-            throw new Error('SSO provider is required');
-        }
-        if (!samlResponse && !idToken) {
-            throw new Error('Either SAMLResponse or idToken is required');
-        }
-        // SAML: Parse the assertion, extract attributes (NameID, email, etc.)
-        // OIDC: Verify the ID token JWT, extract claims
-        //
-        // In production, use passport-saml for SAML or manually verify OIDC JWTs.
-        //
-        // const profile = samlResponse
-        //   ? await parseSamlResponse(samlResponse, providerConfig)
-        //   : await verifyOidcToken(idToken, providerConfig);
-        const subject = payload.sub || payload.NameID;
-        const email = payload.email;
-        const name = payload.name;
-        const socialId = `sso:${provider}:${subject}`;
-        let user = await this.userService.findBySocialId(provider, socialId);
-        if (!user) {
-            user = await this.userService.create({
-                email,
-                username: name,
-            });
-        }
-        user.roles = await this.userService.getRoles(user.id);
-        user.permissions = await this.userService.getPermissions(user.id);
-        const tokens = await this.jwtService.signTokens(user);
-        return { user, tokens, isNewUser: !user.email };
-    }
-};
-SsoStrategy = __decorate([
-    Injectable(),
-    __param(0, Inject(USER_SERVICE)),
-    __metadata("design:paramtypes", [Object, JwtService])
-], SsoStrategy);
-export { SsoStrategy };
-//# sourceMappingURL=sso.strategy.js.map

package/dist/auth/strategies/sso/sso.strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sso.strategy.js","sourceRoot":"","sources":["../../../../packages/auth/strategies/sso/sso.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;GAIG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAY,SAAQ,YAAY;IAMxB;IACA;IANV,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC;IACtB,IAAI,GAAG,KAAK,CAAC;IAEtB,YAEmB,WAAyB,EACzB,UAAsB;QAEvC,KAAK,EAAE,CAAC;QAHS,gBAAW,GAAX,WAAW,CAAc;QACzB,eAAU,GAAV,UAAU,CAAY;IAGzC,CAAC;IAED;;;;;OAKG;IACM,KAAK,CAAC,YAAY,CACzB,OAAgC,EAChC,QAA2B;QAE3B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAkB,CAAC;QAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAkC,CAAC;QAChE,MAAM,OAAO,GAAG,OAAO,CAAC,OAA6B,CAAC;QAEtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,sEAAsE;QACtE,gDAAgD;QAChD,EAAE;QACF,0EAA0E;QAC1E,EAAE;QACF,+BAA+B;QAC/B,4DAA4D;QAC5D,sDAAsD;QAEtD,MAAM,OAAO,GAAI,OAAO,CAAC,GAAc,IAAK,OAAO,CAAC,MAAiB,CAAC;QACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAA2B,CAAC;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAA0B,CAAC;QAEhD,MAAM,QAAQ,GAAG,OAAO,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC9C,IAAI,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAErE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBACnC,KAAK;gBACL,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC;CACF,CAAA;AAhEY,WAAW;IADvB,UAAU,EAAE;IAMR,WAAA,MAAM,CAAC,YAAY,CAAC,CAAA;6CAEQ,UAAU;GAP9B,WAAW,CAgEvB"}

package/dist/auth/strategies/totp/totp.strategy.d.ts

@@ -1,37 +0,0 @@
-import type { ExecutionContext } from '@nestjs/common';
-import { AuthMethod, type IAuthResult } from '../../interfaces';
-import type { IUserService } from '../../interfaces';
-import { JwtService } from '../../session/jwt.service';
-import { BaseStrategy } from '../base/base.strategy';
-/**
- * TOTP-based Two-Factor Authentication.
- *
- * Supports enrollment (generating secret + QR code), verification of codes,
- * and backup-code management.
- */
-export declare class TotpStrategy extends BaseStrategy {
-    private readonly userService;
-    private readonly jwtService;
-    readonly type = AuthMethod.TOTP;
-    readonly name = "totp";
-    constructor(userService: IUserService, jwtService: JwtService);
-    /**
-     * Authenticate using a TOTP code after primary authentication.
-     * Expects `userId` and `code` in the payload.
-     */
-    authenticate(payload: Record<string, unknown>, _context?: ExecutionContext): Promise<IAuthResult>;
-    /**
-     * Generate a new TOTP secret for a user (enrollment).
-     * Returns the secret and an otpauth URL for QR code generation.
-     */
-    enroll(userId: string, issuer?: string): Promise<{
-        secret: string;
-        otpauthUrl: string;
-    }>;
-    /**
-     * Verify a TOTP or backup code.
-     */
-    verifyCode(secret: string, code: string): Promise<boolean>;
-    private loadOtpauth;
-}
-//# sourceMappingURL=totp.strategy.d.ts.map

package/dist/auth/strategies/totp/totp.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"totp.strategy.d.ts","sourceRoot":"","sources":["../../../../packages/auth/strategies/totp/totp.strategy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD;;;;;GAKG;AACH,qBACa,YAAa,SAAQ,YAAY;IAM1C,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAN7B,QAAQ,CAAC,IAAI,mBAAmB;IAChC,QAAQ,CAAC,IAAI,UAAU;gBAIJ,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,UAAU;IAKzC;;;OAGG;IACY,YAAY,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,QAAQ,CAAC,EAAE,gBAAgB,GAC1B,OAAO,CAAC,WAAW,CAAC;IAgCvB;;;OAGG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,MAAM,SAAY,GACjB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAgBlD;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAclD,WAAW;CAO1B"}