@rapidrest/auth 1.0.0-beta.1

package/dist/lib/models/types.js

@@ -0,0 +1,35 @@
+/**
+ * @author Jean-Philippe Steinmetz
+ */
+export class AuthResult {
+    constructor(other) {
+        this.token = other.token;
+        this.user = other.user;
+    }
+}
+/**
+ *
+ */
+export var AliasType;
+(function (AliasType) {
+    AliasType["EMAIL"] = "email";
+    AliasType["NAME"] = "name";
+    AliasType["OAUTH"] = "oauth";
+    AliasType["PHONE"] = "phone";
+})(AliasType || (AliasType = {}));
+export var ContactType;
+(function (ContactType) {
+    ContactType["EMAIL"] = "email";
+    ContactType["PHONE"] = "phone";
+})(ContactType || (ContactType = {}));
+/**
+ *
+ */
+export var SecretType;
+(function (SecretType) {
+    SecretType["FIDO2"] = "fido2";
+    SecretType["PASSKEY"] = "passkey";
+    SecretType["PASSWORD"] = "password";
+    SecretType["TOTP"] = "totp";
+})(SecretType || (SecretType = {}));
+//# sourceMappingURL=types.js.map

package/dist/lib/models/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/models/types.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,OAAO,UAAU;IAInB,YAAY,KAAU;QAClB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3B,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,SAKX;AALD,WAAY,SAAS;IACjB,4BAAe,CAAA;IACf,0BAAa,CAAA;IACb,4BAAe,CAAA;IACf,4BAAe,CAAA;AACnB,CAAC,EALW,SAAS,KAAT,SAAS,QAKpB;AAmBD,MAAM,CAAN,IAAY,WAGX;AAHD,WAAY,WAAW;IACnB,8BAAe,CAAA;IACf,8BAAe,CAAA;AACnB,CAAC,EAHW,WAAW,KAAX,WAAW,QAGtB;AAmED;;GAEG;AACH,MAAM,CAAN,IAAY,UAKX;AALD,WAAY,UAAU;IAClB,6BAAe,CAAA;IACf,iCAAmB,CAAA;IACnB,mCAAqB,CAAA;IACrB,2BAAa,CAAA;AACjB,CAAC,EALW,UAAU,KAAV,UAAU,QAKrB"}

package/dist/lib/mongo.js

@@ -0,0 +1,3 @@
+export * from "./models/mongo.js";
+export * from "./routes/mongo.js";
+//# sourceMappingURL=mongo.js.map

package/dist/lib/mongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo.js","sourceRoot":"","sources":["../../src/mongo.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC"}

package/dist/lib/routes/BaseAliasRoute.js

@@ -0,0 +1,10 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz. All rights reserved.
+///////////////////////////////////////////////////////////////////////////////
+import { CRUDRoute } from "@rapidrest/service-core";
+/**
+ * @author Jean-Philippe Steinmetz
+ */
+export class BaseAliasRoute extends CRUDRoute {
+}
+//# sourceMappingURL=BaseAliasRoute.js.map

package/dist/lib/routes/BaseAliasRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAliasRoute.js","sourceRoot":"","sources":["../../../src/routes/BaseAliasRoute.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAC/E,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGpD;;GAEG;AACH,MAAM,OAAgB,cAAgC,SAAQ,SAAY;CAAG"}

package/dist/lib/routes/BaseAuthBasicRoute.js

@@ -0,0 +1,132 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+///////////////////////////////////////////////////////////////////////////////
+import { JWTUtils, ObjectDecorators } from "@rapidrest/core";
+import { RouteDecorators, DocDecorators, RepoUtils, AuthMiddleware, ObjectFactory } from "@rapidrest/service-core";
+import { AuthResult, SecretType } from "../models/types.js";
+import { BasicStrategy, BasicStrategyOptions } from "../auth/BasicStrategy.js";
+import { importArgon2 } from "../auth/shared.js";
+import { UserUtils } from "./UserUtils.js";
+const { Config, Init, Inject } = ObjectDecorators;
+const { Summary, Description, Returns } = DocDecorators;
+const { Auth, Get } = RouteDecorators;
+const AuthUser = RouteDecorators.User;
+/**
+ *
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class BaseAuthBasicRoute {
+    /**
+     * Called on server startup to initialize the route with any defaults.
+     */
+    async initialize() {
+        if (!this.authMiddleware) {
+            throw new Error("authMiddleware is not set.");
+        }
+        if (!this.objectFactory) {
+            throw new Error("objectFactory is not set.");
+        }
+        if (!this.secretRepo && this.secretClass) {
+            this.secretRepo = await this.objectFactory.newInstance(RepoUtils, {
+                name: this.secretClass.name,
+                args: [this.secretClass],
+            });
+        }
+        if (!this.userUtils && this.userClass && this.aliasClass) {
+            this.userUtils = await this.objectFactory.newInstance(UserUtils, {
+                name: "default",
+                args: [this.userClass, this.aliasClass],
+            });
+        }
+        const options = new BasicStrategyOptions();
+        options.verify = async (name, password) => {
+            if (!this.secretRepo) {
+                throw new Error("Secret repository not set.");
+            }
+            if (!this.userUtils) {
+                throw new Error("User repository not set.");
+            }
+            const user = await this.userUtils.lookup(name);
+            if (!user) {
+                throw new Error("Invalid name or password");
+            }
+            let secrets = await this.secretRepo.find({
+                userUid: user.uid,
+                type: SecretType.PASSWORD,
+            }, {
+                ignoreACL: true,
+            });
+            // Try all known passwords until at least one succeeds
+            let success = false;
+            for (const secret of secrets) {
+                const argon = await importArgon2();
+                success = await argon.verify(secret.data, password);
+                if (success) {
+                    break;
+                }
+            }
+            if (!success) {
+                throw new Error("Invalid name or password");
+            }
+            return user;
+        };
+        const strategy = await this.objectFactory.newInstance(BasicStrategy, {
+            name: "default",
+            args: [options],
+        });
+        this.authMiddleware.register(strategy.name, strategy);
+    }
+    /**
+     * Authenticates the user using HTTP Basic and returns a JSON Web Token access token to be used with future API requests.
+     */
+    async authenticate(user) {
+        const token = await JWTUtils.createToken(this.jwtConfig, user);
+        return new AuthResult({
+            token,
+            user,
+        });
+    }
+}
+__decorate([
+    Inject(AuthMiddleware),
+    __metadata("design:type", AuthMiddleware)
+], BaseAuthBasicRoute.prototype, "authMiddleware", void 0);
+__decorate([
+    Config("auth"),
+    __metadata("design:type", Object)
+], BaseAuthBasicRoute.prototype, "jwtConfig", void 0);
+__decorate([
+    Inject(ObjectFactory),
+    __metadata("design:type", ObjectFactory)
+], BaseAuthBasicRoute.prototype, "objectFactory", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], BaseAuthBasicRoute.prototype, "initialize", null);
+__decorate([
+    Summary("Authenticate Password"),
+    Description("Authenticates the user using HTTP Basic and returns a JSON Web Token access token to be used with future API requests."),
+    Returns([AuthResult, undefined]),
+    Auth(["basic"]),
+    Get(),
+    __param(0, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], BaseAuthBasicRoute.prototype, "authenticate", null);
+//# sourceMappingURL=BaseAuthBasicRoute.js.map

package/dist/lib/routes/BaseAuthBasicRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAuthBasicRoute.js","sourceRoot":"","sources":["../../../src/routes/BaseAuthBasicRoute.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,6CAA6C;AAC7C,+EAA+E;AAC/E,OAAO,EAAW,QAAQ,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACnH,OAAO,EAAS,UAAU,EAAU,UAAU,EAAQ,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAClD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;AACxD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC;AACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC;AAEtC;;;;GAIG;AACH,MAAM,OAAgB,kBAAkB;IAkBpC;;OAEG;IAEa,AAAN,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC9D,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;gBAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;aAC3B,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACvD,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC7D,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC;aAC1C,CAAC,CAAC;QACP,CAAC;QAED,MAAM,OAAO,GAAyB,IAAI,oBAAoB,EAAE,CAAC;QACjE,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,QAAgB,EAAgC,EAAE;YACpF,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,GAAqB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAChD,CAAC;YAED,IAAI,OAAO,GAAa,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAC9C;gBACI,OAAO,EAAE,IAAI,CAAC,GAAG;gBACjB,IAAI,EAAE,UAAU,CAAC,QAAQ;aAC5B,EACD;gBACI,SAAS,EAAE,IAAI;aAClB,CACJ,CAAC;YAEF,sDAAsD;YACtD,IAAI,OAAO,GAAY,KAAK,CAAC;YAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;gBACnC,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACpD,IAAI,OAAO,EAAE,CAAC;oBACV,MAAM;gBACV,CAAC;YACL,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAChD,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAkB,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,aAAa,EAAE;YAChF,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,CAAC,OAAO,CAAC;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IAQU,AAAN,KAAK,CAAC,YAAY,CAAW,IAAa;QAC7C,MAAM,KAAK,GAAW,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvE,OAAO,IAAI,UAAU,CAAC;YAClB,KAAK;YACL,IAAI;SACP,CAAC,CAAC;IACP,CAAC;CACJ;AArGa;IADT,MAAM,CAAC,cAAc,CAAC;8BACI,cAAc;0DAAC;AAGhC;IADT,MAAM,CAAC,MAAM,CAAC;;qDACW;AAGhB;IADT,MAAM,CAAC,aAAa,CAAC;8BACI,aAAa;yDAAC;AAUxB;IADf,IAAI;;;;oDAmEJ;AAYY;IAPZ,OAAO,CAAC,uBAAuB,CAAC;IAChC,WAAW,CACR,wHAAwH,CAC3H;IACA,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IACf,GAAG,EAAE;IACqB,WAAA,QAAQ,CAAA;;;;sDAMlC"}

package/dist/lib/routes/BaseAuthFIDO2Route.js

@@ -0,0 +1,191 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+///////////////////////////////////////////////////////////////////////////////
+import { JWTUtils, MessagingUtils, ObjectDecorators } from "@rapidrest/core";
+import { RouteDecorators, DocDecorators, RepoUtils, AuthMiddleware, ObjectFactory } from "@rapidrest/service-core";
+import { AuthResult, SecretType } from "../models/types.js";
+import { FIDO2Strategy, FIDO2StrategyOptions } from "../auth/FIDO2Strategy.js";
+import { UserUtils } from "./UserUtils.js";
+const { Config, Init, Inject } = ObjectDecorators;
+const { Summary, Description, Returns } = DocDecorators;
+const { Auth, Get, Post } = RouteDecorators;
+const AuthUser = RouteDecorators.User;
+/**
+ * Authenticates users via a registered FIDO2 hardware security key (e.g. a YubiKey) using
+ * WebAuthn/CTAP2. See `BaseAuthPasskeyRoute` for the software/synced-credential ("Passkey")
+ * counterpart of this route — both share the same underlying WebAuthn ceremony, but look up
+ * credentials stored as `SecretType.FIDO2` rather than `SecretType.PASSKEY`.
+ *
+ * @author Jean-Philippe Steinmetz
+ */
+export class BaseAuthFIDO2Route {
+    constructor() {
+        /**
+         * The relying party configuration to use for this FIDO2 strategy. Kept separate from the Passkey
+         * strategy's configuration since a hardware key deployment commonly wants a different
+         * `authenticatorAttachment`/`residentKey` policy (see `BaseSecretRoute.fido2Config`).
+         */
+        this.fido2Config = {
+            rpName: "rapidrest",
+            rpID: "rapidrest",
+            origin: "http://localhost:3000",
+        };
+    }
+    /**
+     * Called on server startup to initialize the route with any defaults.
+     */
+    async initialize() {
+        if (!this.authMiddleware) {
+            throw new Error("authMiddleware is not set.");
+        }
+        if (!this.objectFactory) {
+            throw new Error("objectFactory is not set.");
+        }
+        if (!this.aliasRepo && this.aliasClass) {
+            this.aliasRepo = await this.objectFactory.newInstance(RepoUtils, {
+                name: this.aliasClass.name,
+                args: [this.aliasClass],
+            });
+        }
+        if (!this.secretRepo && this.secretClass) {
+            this.secretRepo = await this.objectFactory.newInstance(RepoUtils, {
+                name: this.secretClass.name,
+                args: [this.secretClass],
+            });
+        }
+        if (!this.userRepo && this.userClass) {
+            this.userRepo = await this.objectFactory.newInstance(RepoUtils, {
+                name: this.userClass.name,
+                args: [this.userClass],
+            });
+        }
+        if (!this.userUtils && this.userClass && this.aliasClass) {
+            this.userUtils = await this.objectFactory.newInstance(UserUtils, {
+                name: "default",
+                args: [this.userClass, this.aliasClass],
+            });
+        }
+        const options = new FIDO2StrategyOptions(this.fido2Config);
+        options.getCredentialById = this.getCredentialById.bind(this);
+        options.getCredentials = this.getCredentials.bind(this);
+        options.updateCredentialCounter = this.updateCredentialCounter.bind(this);
+        options.getUser = this.getUser.bind(this);
+        const strategy = await this.objectFactory.newInstance(FIDO2Strategy, {
+            name: "default",
+            args: [options],
+        });
+        this.authMiddleware.register(strategy.name, strategy);
+    }
+    /**
+     * Authenticates the user using a FIDO2 hardware security key and returns a JSON Web Token access
+     * token to be used with future API requests.
+     */
+    async authenticate(user) {
+        const token = await JWTUtils.createToken(this.jwtConfig, user);
+        return new AuthResult({
+            token,
+            user,
+        });
+    }
+    async getCredentialById(credentialId) {
+        if (!this.secretRepo) {
+            throw new Error("secretRepo is not set.");
+        }
+        const secret = await this.secretRepo.findOne(credentialId, { ignoreACL: true });
+        return secret?.data;
+    }
+    async getCredentials(id) {
+        if (!this.secretRepo) {
+            throw new Error("secretRepo is not set.");
+        }
+        if (!this.userUtils) {
+            throw new Error("userUtils is not set.");
+        }
+        const user = await this.userUtils.lookup(id);
+        if (!user) {
+            throw new Error("Invalid authentication request.");
+        }
+        // Retrieve all FIDO2 secrets associated with this user
+        const secrets = await this.secretRepo.find({ type: SecretType.FIDO2, userUid: user.uid }, { ignoreACL: true });
+        // Extract the credential data from the secrets and return
+        const results = [];
+        secrets.forEach((secret) => results.push(secret.data));
+        return results;
+    }
+    /**
+     * Retrieve the user associated with a given uid or alias.
+     *
+     * @param id The unqique id of the user or alias to lookup.
+     */
+    async getUser(id) {
+        if (!this.userUtils) {
+            throw new Error("userUtils is not set.");
+        }
+        return await this.userUtils.lookup(id);
+    }
+    async updateCredentialCounter(credentialId, newCounter) {
+        if (!this.secretRepo) {
+            throw new Error("secretRepo is not set.");
+        }
+        const secret = await this.secretRepo.findOne(credentialId, { ignoreACL: true });
+        if (secret) {
+            secret.data.counter = newCounter;
+            await this.secretRepo.update({
+                uid: secret.uid,
+                version: secret.version,
+                data: secret.data,
+            }, secret, { ignoreACL: true, recordEvent: false });
+        }
+    }
+}
+__decorate([
+    Inject(AuthMiddleware),
+    __metadata("design:type", AuthMiddleware)
+], BaseAuthFIDO2Route.prototype, "authMiddleware", void 0);
+__decorate([
+    Config("auth"),
+    __metadata("design:type", Object)
+], BaseAuthFIDO2Route.prototype, "jwtConfig", void 0);
+__decorate([
+    Inject(ObjectFactory),
+    __metadata("design:type", ObjectFactory)
+], BaseAuthFIDO2Route.prototype, "objectFactory", void 0);
+__decorate([
+    Inject(MessagingUtils),
+    __metadata("design:type", MessagingUtils)
+], BaseAuthFIDO2Route.prototype, "messagingUtils", void 0);
+__decorate([
+    Config("auth:fido2"),
+    __metadata("design:type", Object)
+], BaseAuthFIDO2Route.prototype, "fido2Config", void 0);
+__decorate([
+    Init,
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], BaseAuthFIDO2Route.prototype, "initialize", null);
+__decorate([
+    Summary("Authenticate FIDO2"),
+    Description("Authenticates the user using a FIDO2 hardware security key and returns a JSON Web Token access token to be used with future API requests."),
+    Returns([AuthResult, undefined]),
+    Auth(["fido2"]),
+    Get(),
+    Post(),
+    __param(0, AuthUser),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], BaseAuthFIDO2Route.prototype, "authenticate", null);
+//# sourceMappingURL=BaseAuthFIDO2Route.js.map

package/dist/lib/routes/BaseAuthFIDO2Route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAuthFIDO2Route.js","sourceRoot":"","sources":["../../../src/routes/BaseAuthFIDO2Route.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+EAA+E;AAC/E,6CAA6C;AAC7C,+EAA+E;AAC/E,OAAO,EAAW,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACnH,OAAO,EAAS,UAAU,EAAU,UAAU,EAAQ,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAE/E,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAClD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;AACxD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC;AAC5C,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,OAAgB,kBAAkB;IAAxC;QAqBI;;;;WAIG;QAEO,gBAAW,GAAkB;YACnC,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,uBAAuB;SAClC,CAAC;IA8IN,CAAC;IAxIG;;OAEG;IAEa,AAAN,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC7D,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;gBAC1B,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;aAC1B,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC9D,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI;gBAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;aAC3B,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC5D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;gBACzB,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;aACzB,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACvD,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,SAAS,EAAE;gBAC7D,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC;aAC1C,CAAC,CAAC;QACP,CAAC;QAED,MAAM,OAAO,GAAyB,IAAI,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjF,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAkB,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,aAAa,EAAE;YAChF,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,CAAC,OAAO,CAAC;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAED;;;OAGG;IASU,AAAN,KAAK,CAAC,YAAY,CAAW,IAAa;QAC7C,MAAM,KAAK,GAAW,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvE,OAAO,IAAI,UAAU,CAAC;YAClB,KAAK;YACL,IAAI;SACP,CAAC,CAAC;IACP,CAAC;IAES,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAClD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,MAAM,GAAuB,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpG,OAAO,MAAM,EAAE,IAAI,CAAC;IACxB,CAAC;IAES,KAAK,CAAC,cAAc,CAAC,EAAU;QACrC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,IAAI,GAAkB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACvD,CAAC;QAED,uDAAuD;QACvD,MAAM,OAAO,GAAa,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAChD,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAC7C,EAAE,SAAS,EAAE,IAAI,EAAE,CACtB,CAAC;QAEF,0DAA0D;QAC1D,MAAM,OAAO,GAA8B,EAAE,CAAC;QAC9C,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,OAAO,CAAC,EAAU;QAC9B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IAES,KAAK,CAAC,uBAAuB,CAAC,YAAoB,EAAE,UAAkB;QAC5E,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,MAAM,GAAkB,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,IAAI,MAAM,EAAE,CAAC;YACR,MAAM,CAAC,IAAgC,CAAC,OAAO,GAAG,UAAU,CAAC;YAC9D,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CACxB;gBACI,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;aACf,EACN,MAAM,EACN,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAC1C,CAAC;QACN,CAAC;IACL,CAAC;CACJ;AArKa;IADT,MAAM,CAAC,cAAc,CAAC;8BACI,cAAc;0DAAC;AAGhC;IADT,MAAM,CAAC,MAAM,CAAC;;qDACW;AAGhB;IADT,MAAM,CAAC,aAAa,CAAC;8BACI,aAAa;yDAAC;AAG9B;IADT,MAAM,CAAC,cAAc,CAAC;8BACI,cAAc;0DAAC;AAUhC;IADT,MAAM,CAAC,YAAY,CAAC;;uDAKnB;AAUc;IADf,IAAI;;;;oDA+CJ;AAcY;IARZ,OAAO,CAAC,oBAAoB,CAAC;IAC7B,WAAW,CACR,2IAA2I,CAC9I;IACA,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IACf,GAAG,EAAE;IACL,IAAI,EAAE;IACoB,WAAA,QAAQ,CAAA;;;;sDAMlC"}