@skyapp-labs/blueprint-backend-core 1.0.9

package/dist/modules/otp/otp.service.js

@@ -0,0 +1,146 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var OtpService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OtpService = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const otp_service_interface_1 = require("./interfaces/otp.service.interface");
+const jobs_1 = require("../../jobs");
+const redis_module_1 = require("../../config/redis.module");
+const otp_session_store_1 = require("./services/otp.session.store");
+const otp_rate_limiter_1 = require("./services/otp.rate-limiter");
+const otp_utils_1 = require("./utils/otp.utils");
+const settings_service_1 = require("../settings/services/settings.service");
+const settings_keys_1 = require("../settings/constants/settings.keys");
+let OtpService = OtpService_1 = class OtpService extends otp_service_interface_1.IOtpService {
+    constructor(redis, jobsQueue, sessionStore, rateLimiter, configService, settingsService) {
+        super();
+        this.redis = redis;
+        this.jobsQueue = jobsQueue;
+        this.sessionStore = sessionStore;
+        this.rateLimiter = rateLimiter;
+        this.configService = configService;
+        this.settingsService = settingsService;
+        this.logger = new common_1.Logger(OtpService_1.name);
+        if (!this.redis || !this.jobsQueue) {
+            this.logger.warn('OtpService: Redis or JobsQueue is disabled — OTP features unavailable. Set REDIS_ENABLED=true to enable.');
+        }
+    }
+    async generateOtp(identifier, channel) {
+        this.assertEnabled();
+        const normalized = channel === 'sms' ? (0, otp_utils_1.normalizePhone)(identifier) : (0, otp_utils_1.normalizeEmail)(identifier);
+        const test = this.getTestCredentials();
+        if (test && channel === 'sms' && normalized === test.phone) {
+            this.auditLog('otp.generated.test', {
+                identifier: (0, otp_utils_1.maskIdentifier)(normalized, channel),
+            });
+            return this.sessionStore.createSession(normalized, channel, test.code);
+        }
+        await this.rateLimiter.assertSendRateLimit(normalized, channel);
+        const result = await this.sessionStore.createSession(normalized, channel);
+        this.auditLog('otp.generated', { identifier: (0, otp_utils_1.maskIdentifier)(normalized, channel) });
+        return result;
+    }
+    async verifyOtp(sessionToken, code) {
+        this.assertEnabled();
+        this.assertValidUuid(sessionToken);
+        const session = await this.sessionStore.loadSession(sessionToken);
+        const { isValid, newAttempts, lockedOut, identifier, channel } = await this.sessionStore.verifyCodeAndTrackAttempts(sessionToken, code, session);
+        if (lockedOut) {
+            this.auditLog('otp.locked_out', {
+                identifier: (0, otp_utils_1.maskIdentifier)(identifier, channel),
+                attempts: newAttempts,
+            });
+            throw new common_1.BadRequestException('Maximum verification attempts exceeded. Please request a new OTP.');
+        }
+        if (!isValid) {
+            this.auditLog('otp.failed', {
+                identifier: (0, otp_utils_1.maskIdentifier)(identifier, channel),
+                attempts: newAttempts,
+            });
+            throw new common_1.BadRequestException('Invalid or expired code.');
+        }
+        this.auditLog('otp.verified', { identifier: (0, otp_utils_1.maskIdentifier)(identifier, channel) });
+        return {
+            success: true,
+            message: 'OTP verified successfully',
+            data: {
+                subject: identifier,
+                channel,
+            },
+        };
+    }
+    async resendOtp(sessionToken) {
+        this.assertEnabled();
+        this.assertValidUuid(sessionToken);
+        const session = await this.sessionStore.loadSession(sessionToken);
+        const cooldown = this.settingsService.get(settings_keys_1.SETTING_KEYS.OTP_RESEND_COOLDOWN_SECONDS);
+        const elapsed = (Date.now() - session.lastSentAt) / 1000;
+        if (elapsed < cooldown) {
+            const remaining = Math.ceil(cooldown - elapsed);
+            throw new common_1.HttpException({
+                message: `Please wait ${remaining}s before requesting a new OTP.`,
+                retryAfter: remaining,
+            }, common_1.HttpStatus.TOO_MANY_REQUESTS, { description: `Retry-After: ${remaining}` });
+        }
+        const test = this.getTestCredentials();
+        const isTestIdentifier = !!test && session.channel === 'sms' && session.identifier === test.phone;
+        if (!isTestIdentifier) {
+            await this.rateLimiter.assertResendRateLimit(session.identifier, session.channel);
+        }
+        await this.sessionStore.deleteSession(sessionToken);
+        const result = await this.sessionStore.createSession(session.identifier, session.channel, isTestIdentifier ? test.code : undefined);
+        this.auditLog(isTestIdentifier ? 'otp.resent.test' : 'otp.resent', {
+            identifier: (0, otp_utils_1.maskIdentifier)(session.identifier, session.channel),
+        });
+        return result;
+    }
+    assertEnabled() {
+        if (!this.redis || !this.jobsQueue) {
+            throw new common_1.ServiceUnavailableException('OTP features require Redis. Set REDIS_ENABLED=true in your environment.');
+        }
+    }
+    assertValidUuid(token) {
+        if (!otp_utils_1.UUID_RE.test(token)) {
+            throw new common_1.BadRequestException('Invalid session token format.');
+        }
+    }
+    getTestCredentials() {
+        const isProd = this.configService.get('app.nodeEnv') === 'production';
+        if (isProd)
+            return null;
+        const phone = this.configService.get('app.testOtp.phone');
+        const code = this.configService.get('app.testOtp.code');
+        if (!phone || !code)
+            return null;
+        return { phone, code };
+    }
+    auditLog(event, meta) {
+        this.logger.log(JSON.stringify({ event, ...meta, ts: new Date().toISOString() }));
+    }
+};
+exports.OtpService = OtpService;
+exports.OtpService = OtpService = OtpService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Optional)()),
+    __param(0, (0, common_1.Inject)(redis_module_1.REDIS_CLIENT)),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(jobs_1.JobsQueue)),
+    __metadata("design:paramtypes", [Object, Object, otp_session_store_1.OtpSessionStore,
+        otp_rate_limiter_1.OtpRateLimiter,
+        config_1.ConfigService,
+        settings_service_1.SettingsService])
+], OtpService);
+//# sourceMappingURL=otp.service.js.map

package/dist/modules/otp/otp.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.service.js","sourceRoot":"","sources":["../../../modules/otp/otp.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,2CAA+C;AAE/C,8EAI4C;AAC5C,qCAAuC;AACvC,4DAAyD;AACzD,oEAA+D;AAC/D,kEAA6D;AAC7D,iDAA4F;AAC5F,4EAAwE;AACxE,uEAAmE;AAG5D,IAAM,UAAU,kBAAhB,MAAM,UAAW,SAAQ,mCAAW;IAG1C,YAGC,KAAsC,EAGtC,SAA4C,EAC3B,YAA6B,EAC7B,WAA2B,EAC3B,aAA4B,EAC5B,eAAgC;QAEjD,KAAK,EAAE,CAAC;QATS,UAAK,GAAL,KAAK,CAAgB;QAGrB,cAAS,GAAT,SAAS,CAAkB;QAC3B,iBAAY,GAAZ,YAAY,CAAiB;QAC7B,gBAAW,GAAX,WAAW,CAAgB;QAC3B,kBAAa,GAAb,aAAa,CAAe;QAC5B,oBAAe,GAAf,eAAe,CAAiB;QAZjC,WAAM,GAAG,IAAI,eAAM,CAAC,YAAU,CAAC,IAAI,CAAC,CAAC;QAerD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,0GAA0G,CAC1G,CAAC;QACH,CAAC;IACF,CAAC;IAID,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,OAAwB;QAC7D,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,MAAM,UAAU,GACf,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,IAAA,0BAAc,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAA,0BAAc,EAAC,UAAU,CAAC,CAAC;QAE7E,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACvC,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5D,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE;gBACnC,UAAU,EAAE,IAAA,0BAAc,EAAC,UAAU,EAAE,OAAO,CAAC;aAC/C,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAE1E,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,IAAA,0BAAc,EAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAEpF,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,YAAoB,EAAE,IAAY;QACjD,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAElE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,GAC7D,MAAM,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAEjF,IAAI,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE;gBAC/B,UAAU,EAAE,IAAA,0BAAc,EAAC,UAAU,EAAE,OAAO,CAAC;gBAC/C,QAAQ,EAAE,WAAW;aACrB,CAAC,CAAC;YACH,MAAM,IAAI,4BAAmB,CAC5B,mEAAmE,CACnE,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;gBAC3B,UAAU,EAAE,IAAA,0BAAc,EAAC,UAAU,EAAE,OAAO,CAAC;gBAC/C,QAAQ,EAAE,WAAW;aACrB,CAAC,CAAC;YACH,MAAM,IAAI,4BAAmB,CAAC,0BAA0B,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,UAAU,EAAE,IAAA,0BAAc,EAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAEnF,OAAO;YACN,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,2BAA2B;YACpC,IAAI,EAAE;gBACL,OAAO,EAAE,UAAU;gBACnB,OAAO;aACP;SACD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,YAAoB;QACnC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAS,4BAAY,CAAC,2BAA2B,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QACzD,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC;YAChD,MAAM,IAAI,sBAAa,CACtB;gBACC,OAAO,EAAE,eAAe,SAAS,gCAAgC;gBACjE,UAAU,EAAE,SAAS;aACrB,EACD,mBAAU,CAAC,iBAAiB,EAC5B,EAAE,WAAW,EAAE,gBAAgB,SAAS,EAAE,EAAE,CAC5C,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACvC,MAAM,gBAAgB,GACrB,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,CAAC;QAE1E,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAIvB,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CACnD,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,OAAO,EACf,gBAAgB,CAAC,CAAC,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CACzC,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,EAAE;YAClE,UAAU,EAAE,IAAA,0BAAc,EAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC;SAC/D,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IACf,CAAC;IAIO,aAAa;QACpB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,oCAA2B,CACpC,yEAAyE,CACzE,CAAC;QACH,CAAC;IACF,CAAC;IAEO,eAAe,CAAC,KAAa;QACpC,IAAI,CAAC,mBAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,4BAAmB,CAAC,+BAA+B,CAAC,CAAC;QAChE,CAAC;IACF,CAAC;IASO,kBAAkB;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,aAAa,CAAC,KAAK,YAAY,CAAC;QAC9E,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,mBAAmB,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAS,kBAAkB,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAKO,QAAQ,CAAC,KAAa,EAAE,IAA6B;QAC5D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;CACD,CAAA;AA3KY,gCAAU;qBAAV,UAAU;IADtB,IAAA,mBAAU,GAAE;IAKV,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,2BAAY,CAAC,CAAA;IAEpB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,gBAAS,CAAC,CAAA;qDAEa,mCAAe;QAChB,iCAAc;QACZ,sBAAa;QACX,kCAAe;GAbtC,UAAU,CA2KtB"}

package/dist/modules/otp/services/otp.rate-limiter.d.ts

@@ -0,0 +1,13 @@
+import IORedis from 'ioredis';
+import { SettingsService } from '../../settings/services/settings.service';
+export declare class OtpRateLimiter {
+    private readonly redis;
+    private readonly settingsService;
+    constructor(redis: IORedis | null, settingsService: SettingsService);
+    assertSendRateLimit(identifier: string, channel: 'sms' | 'email'): Promise<void>;
+    assertResendRateLimit(identifier: string, channel: 'sms' | 'email'): Promise<void>;
+    private evalRateLimit;
+    private rateKey;
+    private get client();
+}
+//# sourceMappingURL=otp.rate-limiter.d.ts.map

package/dist/modules/otp/services/otp.rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.rate-limiter.d.ts","sourceRoot":"","sources":["../../../../modules/otp/services/otp.rate-limiter.ts"],"names":[],"mappings":"AACA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAG3E,qBACa,cAAc;IAIzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,eAAe;gBADf,KAAK,EAAE,OAAO,GAAG,IAAI,EACrB,eAAe,EAAE,eAAe;IAY5C,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBhF,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YAqB1E,aAAa;IAW3B,OAAO,CAAC,OAAO;IAIf,OAAO,KAAK,MAAM,GAEjB;CACD"}

package/dist/modules/otp/services/otp.rate-limiter.js

@@ -0,0 +1,70 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OtpRateLimiter = void 0;
+const common_1 = require("@nestjs/common");
+const redis_module_1 = require("../../../config/redis.module");
+const settings_service_1 = require("../../settings/services/settings.service");
+const settings_keys_1 = require("../../settings/constants/settings.keys");
+let OtpRateLimiter = class OtpRateLimiter {
+    constructor(redis, settingsService) {
+        this.redis = redis;
+        this.settingsService = settingsService;
+    }
+    async assertSendRateLimit(identifier, channel) {
+        const max = this.settingsService.get(settings_keys_1.SETTING_KEYS.OTP_RATE_LIMIT_MAX);
+        const window = this.settingsService.get(settings_keys_1.SETTING_KEYS.OTP_RATE_LIMIT_WINDOW_SECONDS);
+        const key = this.rateKey(identifier, channel);
+        const count = await this.evalRateLimit(key, window);
+        if (count > max) {
+            const ttl = await this.client.ttl(key);
+            throw new common_1.HttpException({
+                message: `Too many OTP requests. Please try again in ${ttl}s.`,
+                retryAfter: ttl,
+            }, common_1.HttpStatus.TOO_MANY_REQUESTS, { description: `Retry-After: ${ttl}` });
+        }
+    }
+    async assertResendRateLimit(identifier, channel) {
+        const max = this.settingsService.get(settings_keys_1.SETTING_KEYS.OTP_RATE_LIMIT_MAX);
+        const window = this.settingsService.get(settings_keys_1.SETTING_KEYS.OTP_RATE_LIMIT_WINDOW_SECONDS);
+        const key = this.rateKey(identifier, channel);
+        const count = await this.evalRateLimit(key, window);
+        if (count > max) {
+            const ttl = await this.client.ttl(key);
+            throw new common_1.HttpException({
+                message: `Too many OTP requests. Please try again in ${ttl}s.`,
+                retryAfter: ttl,
+            }, common_1.HttpStatus.TOO_MANY_REQUESTS, { description: `Retry-After: ${ttl}` });
+        }
+    }
+    async evalRateLimit(key, windowSeconds) {
+        return (await this.client.eval(`local n = redis.call('INCR', KEYS[1])
+			 if n == 1 then redis.call('EXPIRE', KEYS[1], ARGV[1]) end
+			 return n`, 1, key, String(windowSeconds)));
+    }
+    rateKey(identifier, channel) {
+        return `otp:rate:${channel}:${identifier}`;
+    }
+    get client() {
+        return this.redis;
+    }
+};
+exports.OtpRateLimiter = OtpRateLimiter;
+exports.OtpRateLimiter = OtpRateLimiter = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Optional)()),
+    __param(0, (0, common_1.Inject)(redis_module_1.REDIS_CLIENT)),
+    __metadata("design:paramtypes", [Object, settings_service_1.SettingsService])
+], OtpRateLimiter);
+//# sourceMappingURL=otp.rate-limiter.js.map

package/dist/modules/otp/services/otp.rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.rate-limiter.js","sourceRoot":"","sources":["../../../../modules/otp/services/otp.rate-limiter.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAyF;AAEzF,+DAA4D;AAC5D,+EAA2E;AAC3E,0EAAsE;AAG/D,IAAM,cAAc,GAApB,MAAM,cAAc;IAC1B,YAGkB,KAAqB,EACrB,eAAgC;QADhC,UAAK,GAAL,KAAK,CAAgB;QACrB,oBAAe,GAAf,eAAe,CAAiB;IAC/C,CAAC;IAWJ,KAAK,CAAC,mBAAmB,CAAC,UAAkB,EAAE,OAAwB;QACrE,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAS,4BAAY,CAAC,kBAAkB,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAS,4BAAY,CAAC,6BAA6B,CAAC,CAAC;QAE5F,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEpD,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,IAAI,sBAAa,CACtB;gBACC,OAAO,EAAE,8CAA8C,GAAG,IAAI;gBAC9D,UAAU,EAAE,GAAG;aACf,EACD,mBAAU,CAAC,iBAAiB,EAC5B,EAAE,WAAW,EAAE,gBAAgB,GAAG,EAAE,EAAE,CACtC,CAAC;QACH,CAAC;IACF,CAAC;IAMD,KAAK,CAAC,qBAAqB,CAAC,UAAkB,EAAE,OAAwB;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAS,4BAAY,CAAC,kBAAkB,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAS,4BAAY,CAAC,6BAA6B,CAAC,CAAC;QAE5F,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEpD,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,IAAI,sBAAa,CACtB;gBACC,OAAO,EAAE,8CAA8C,GAAG,IAAI;gBAC9D,UAAU,EAAE,GAAG;aACf,EACD,mBAAU,CAAC,iBAAiB,EAC5B,EAAE,WAAW,EAAE,gBAAgB,GAAG,EAAE,EAAE,CACtC,CAAC;QACH,CAAC;IACF,CAAC;IAGO,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,aAAqB;QAC7D,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAC7B;;aAEU,EACV,CAAC,EACD,GAAG,EACH,MAAM,CAAC,aAAa,CAAC,CACrB,CAAW,CAAC;IACd,CAAC;IAEO,OAAO,CAAC,UAAkB,EAAE,OAAwB;QAC3D,OAAO,YAAY,OAAO,IAAI,UAAU,EAAE,CAAC;IAC5C,CAAC;IAED,IAAY,MAAM;QACjB,OAAO,IAAI,CAAC,KAAM,CAAC;IACpB,CAAC;CACD,CAAA;AAhFY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAGV,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,2BAAY,CAAC,CAAA;6CAEa,kCAAe;GALtC,cAAc,CAgF1B"}

package/dist/modules/otp/services/otp.session.store.d.ts

@@ -0,0 +1,28 @@
+import IORedis from 'ioredis';
+import { JobsQueue } from '../../../jobs';
+import { OtpGenerateResult } from '../interfaces/otp.service.interface';
+import { OtpSessionData } from '../utils/otp.utils';
+import { SettingsService } from '../../settings/services/settings.service';
+export interface VerifyCodeResult {
+    isValid: boolean;
+    newAttempts: number;
+    lockedOut: boolean;
+    identifier: string;
+    channel: 'sms' | 'email';
+}
+export declare class OtpSessionStore {
+    private readonly redis;
+    private readonly jobsQueue;
+    private readonly settingsService;
+    private readonly logger;
+    constructor(redis: IORedis | null, jobsQueue: JobsQueue | null, settingsService: SettingsService);
+    isEnabled(): boolean;
+    createSession(identifier: string, channel: 'sms' | 'email', fixedCode?: string): Promise<OtpGenerateResult>;
+    loadSession(sessionToken: string): Promise<OtpSessionData>;
+    deleteSession(sessionToken: string): Promise<void>;
+    verifyCodeAndTrackAttempts(sessionToken: string, code: string, session: OtpSessionData): Promise<VerifyCodeResult>;
+    private sessionKey;
+    private correlationKey;
+    private get client();
+}
+//# sourceMappingURL=otp.session.store.d.ts.map

package/dist/modules/otp/services/otp.session.store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.session.store.d.ts","sourceRoot":"","sources":["../../../../modules/otp/services/otp.session.store.ts"],"names":[],"mappings":"AAUA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAgC,MAAM,oBAAoB,CAAC;AAElF,OAAO,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAG3E,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,KAAK,GAAG,OAAO,CAAC;CACzB;AAED,qBACa,eAAe;IAM1B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAGtB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,eAAe;IATjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;gBAKzC,KAAK,EAAE,OAAO,GAAG,IAAI,EAGrB,SAAS,EAAE,SAAS,GAAG,IAAI,EAC3B,eAAe,EAAE,eAAe;IAGlD,SAAS,IAAI,OAAO;IAgBd,aAAa,CAClB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,KAAK,GAAG,OAAO,EACxB,SAAS,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,CAAC;IA+FvB,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAuB1D,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBlD,0BAA0B,CAC/B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,GACrB,OAAO,CAAC,gBAAgB,CAAC;IA+D5B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,cAAc;IAItB,OAAO,KAAK,MAAM,GAEjB;CACD"}

package/dist/modules/otp/services/otp.session.store.js

@@ -0,0 +1,226 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var OtpSessionStore_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OtpSessionStore = void 0;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+const argon2 = __importStar(require("argon2"));
+const redis_module_1 = require("../../../config/redis.module");
+const jobs_1 = require("../../../jobs");
+const otp_utils_1 = require("../utils/otp.utils");
+const otp_constants_1 = require("../constants/otp.constants");
+const settings_service_1 = require("../../settings/services/settings.service");
+const settings_keys_1 = require("../../settings/constants/settings.keys");
+let OtpSessionStore = OtpSessionStore_1 = class OtpSessionStore {
+    constructor(redis, jobsQueue, settingsService) {
+        this.redis = redis;
+        this.jobsQueue = jobsQueue;
+        this.settingsService = settingsService;
+        this.logger = new common_1.Logger(OtpSessionStore_1.name);
+    }
+    isEnabled() {
+        return !!(this.redis && this.jobsQueue);
+    }
+    async createSession(identifier, channel, fixedCode) {
+        const ttl = this.settingsService.get(settings_keys_1.SETTING_KEYS.OTP_TTL_SECONDS);
+        const resendIn = this.settingsService.get(settings_keys_1.SETTING_KEYS.OTP_RESEND_COOLDOWN_SECONDS);
+        const code = fixedCode ?? (0, otp_utils_1.generateCode)(otp_constants_1.OTP_CODE_LENGTH);
+        const sessionToken = (0, crypto_1.randomUUID)();
+        const otpCodeHash = await argon2.hash(code);
+        const now = Date.now();
+        const sessionData = {
+            identifier,
+            channel,
+            otpCodeHash,
+            attempts: 0,
+            lastSentAt: now,
+        };
+        try {
+            const result = await this.client.set(this.sessionKey(sessionToken), JSON.stringify(sessionData), 'EX', ttl);
+            if (result !== 'OK')
+                throw new Error('Redis SET returned unexpected result');
+        }
+        catch (err) {
+            this.logger.error(`Redis SET failed for OTP session (${(0, otp_utils_1.maskIdentifier)(identifier, channel)})`, err);
+            throw new common_1.ServiceUnavailableException('Failed to create OTP session. Please try again.');
+        }
+        if (!fixedCode) {
+            const correlationId = (0, crypto_1.randomUUID)();
+            try {
+                await this.client.set(this.correlationKey(correlationId), code, 'EX', otp_constants_1.OTP_CORRELATION_TTL_SECONDS);
+            }
+            catch (err) {
+                await this.client.del(this.sessionKey(sessionToken)).catch(() => undefined);
+                this.logger.error(`Correlation key write failed for ${(0, otp_utils_1.maskIdentifier)(identifier, channel)}`, err);
+                throw new common_1.ServiceUnavailableException('Failed to create OTP session. Please try again.');
+            }
+            try {
+                if (channel === 'sms') {
+                    await this.jobsQueue.addSendSms({ to: identifier, correlationId });
+                }
+                else {
+                    await this.jobsQueue.addSendEmail({
+                        to: identifier,
+                        subject: 'Your verification code',
+                        template: 'otp',
+                        data: { correlationId },
+                    });
+                }
+            }
+            catch (err) {
+                await Promise.allSettled([
+                    this.client.del(this.sessionKey(sessionToken)),
+                    this.client.del(this.correlationKey(correlationId)),
+                ]);
+                this.logger.error(`${channel.toUpperCase()} enqueue failed for ${(0, otp_utils_1.maskIdentifier)(identifier, channel)} — session rolled back`, err);
+                throw new common_1.ServiceUnavailableException('Failed to send OTP. Please try again.');
+            }
+        }
+        return {
+            success: true,
+            message: 'OTP generated successfully',
+            data: {
+                verificationId: sessionToken,
+                expiresAt: now + ttl * 1000,
+                resendIn: resendIn * 1000,
+            },
+        };
+    }
+    async loadSession(sessionToken) {
+        let raw;
+        try {
+            raw = await this.client.get(this.sessionKey(sessionToken));
+        }
+        catch (err) {
+            this.logger.error('Redis GET failed during session load', err);
+            throw new common_1.ServiceUnavailableException('Failed to load OTP session. Please try again.');
+        }
+        if (!raw) {
+            throw new common_1.BadRequestException('Invalid or expired code.');
+        }
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            this.logger.error(`Corrupted OTP session data for token ${sessionToken.slice(0, 8)}…`);
+            await this.client.del(this.sessionKey(sessionToken)).catch(() => undefined);
+            throw new common_1.BadRequestException('Invalid or expired code.');
+        }
+    }
+    async deleteSession(sessionToken) {
+        await this.client.del(this.sessionKey(sessionToken));
+    }
+    async verifyCodeAndTrackAttempts(sessionToken, code, session) {
+        const maxAttempts = this.settingsService.get(settings_keys_1.SETTING_KEYS.OTP_MAX_ATTEMPTS);
+        const key = this.sessionKey(sessionToken);
+        if (session.attempts >= maxAttempts) {
+            await this.client.del(key);
+            return {
+                isValid: false,
+                newAttempts: session.attempts,
+                lockedOut: true,
+                identifier: session.identifier,
+                channel: session.channel,
+            };
+        }
+        const isValid = await argon2.verify(session.otpCodeHash, code);
+        if (!isValid) {
+            const [newAttempts, lockedOut] = (await this.client.eval(`local raw = redis.call('GET', KEYS[1])
+				 if not raw then return {0, 0} end
+				 local data = cjson.decode(raw)
+				 data['attempts'] = data['attempts'] + 1
+				 local locked = 0
+				 if data['attempts'] >= tonumber(ARGV[1]) then
+				   redis.call('DEL', KEYS[1])
+				   locked = 1
+				 else
+				   local ttl = redis.call('TTL', KEYS[1])
+				   if ttl > 0 then
+				     redis.call('SET', KEYS[1], cjson.encode(data), 'EX', ttl)
+				   else
+				     redis.call('SET', KEYS[1], cjson.encode(data))
+				   end
+				 end
+				 return {data['attempts'], locked}`, 1, key, String(maxAttempts)));
+            return {
+                isValid: false,
+                newAttempts,
+                lockedOut: lockedOut === 1,
+                identifier: session.identifier,
+                channel: session.channel,
+            };
+        }
+        await this.client.del(key);
+        return {
+            isValid: true,
+            newAttempts: session.attempts,
+            lockedOut: false,
+            identifier: session.identifier,
+            channel: session.channel,
+        };
+    }
+    sessionKey(sessionToken) {
+        return `otp:session:${sessionToken}`;
+    }
+    correlationKey(correlationId) {
+        return `otp:code:${correlationId}`;
+    }
+    get client() {
+        return this.redis;
+    }
+};
+exports.OtpSessionStore = OtpSessionStore;
+exports.OtpSessionStore = OtpSessionStore = OtpSessionStore_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Optional)()),
+    __param(0, (0, common_1.Inject)(redis_module_1.REDIS_CLIENT)),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(jobs_1.JobsQueue)),
+    __metadata("design:paramtypes", [Object, Object, settings_service_1.SettingsService])
+], OtpSessionStore);
+//# sourceMappingURL=otp.session.store.js.map

package/dist/modules/otp/services/otp.session.store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.session.store.js","sourceRoot":"","sources":["../../../../modules/otp/services/otp.session.store.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAOwB;AACxB,mCAAoC;AACpC,+CAAiC;AAEjC,+DAA4D;AAC5D,wCAA0C;AAE1C,kDAAkF;AAClF,8DAA0F;AAC1F,+EAA2E;AAC3E,0EAAsE;AAW/D,IAAM,eAAe,uBAArB,MAAM,eAAe;IAG3B,YAGC,KAAsC,EAGtC,SAA4C,EAC3B,eAAgC;QAJhC,UAAK,GAAL,KAAK,CAAgB;QAGrB,cAAS,GAAT,SAAS,CAAkB;QAC3B,oBAAe,GAAf,eAAe,CAAiB;QATjC,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IAUxD,CAAC;IAEJ,SAAS;QACR,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAcD,KAAK,CAAC,aAAa,CAClB,UAAkB,EAClB,OAAwB,EACxB,SAAkB;QAElB,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAS,4BAAY,CAAC,eAAe,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAS,4BAAY,CAAC,2BAA2B,CAAC,CAAC;QAE5F,MAAM,IAAI,GAAG,SAAS,IAAI,IAAA,wBAAY,EAAC,+BAAe,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,IAAA,mBAAU,GAAE,CAAC;QAClC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAmB;YACnC,UAAU;YACV,OAAO;YACP,WAAW;YACX,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,GAAG;SACf,CAAC;QAGF,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACnC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAC7B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAC3B,IAAI,EACJ,GAAG,CACH,CAAC;YACF,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,qCAAqC,IAAA,0BAAc,EAAC,UAAU,EAAE,OAAO,CAAC,GAAG,EAC3E,GAAG,CACH,CAAC;YACF,MAAM,IAAI,oCAA2B,CACpC,iDAAiD,CACjD,CAAC;QACH,CAAC;QAGD,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,aAAa,GAAG,IAAA,mBAAU,GAAE,CAAC;YAGnC,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACpB,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAClC,IAAI,EACJ,IAAI,EACJ,2CAA2B,CAC3B,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,oCAAoC,IAAA,0BAAc,EAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EACzE,GAAG,CACH,CAAC;gBACF,MAAM,IAAI,oCAA2B,CACpC,iDAAiD,CACjD,CAAC;YACH,CAAC;YAGD,IAAI,CAAC;gBACJ,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;oBACvB,MAAM,IAAI,CAAC,SAAU,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;gBACrE,CAAC;qBAAM,CAAC;oBACP,MAAM,IAAI,CAAC,SAAU,CAAC,YAAY,CAAC;wBAClC,EAAE,EAAE,UAAU;wBACd,OAAO,EAAE,wBAAwB;wBACjC,QAAQ,EAAE,KAAK;wBACf,IAAI,EAAE,EAAE,aAAa,EAAE;qBACvB,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAEd,MAAM,OAAO,CAAC,UAAU,CAAC;oBACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;oBAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;iBACnD,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,GAAG,OAAO,CAAC,WAAW,EAAE,uBAAuB,IAAA,0BAAc,EAAC,UAAU,EAAE,OAAO,CAAC,wBAAwB,EAC1G,GAAG,CACH,CAAC;gBACF,MAAM,IAAI,oCAA2B,CAAC,uCAAuC,CAAC,CAAC;YAChF,CAAC;QACF,CAAC;QAED,OAAO;YACN,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,4BAA4B;YACrC,IAAI,EAAE;gBACL,cAAc,EAAE,YAAY;gBAC5B,SAAS,EAAE,GAAG,GAAG,GAAG,GAAG,IAAI;gBAC3B,QAAQ,EAAE,QAAQ,GAAG,IAAI;aACzB;SACD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,YAAoB;QACrC,IAAI,GAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;YAC/D,MAAM,IAAI,oCAA2B,CAAC,+CAA+C,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,IAAI,4BAAmB,CAAC,0BAA0B,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YAER,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YACvF,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5E,MAAM,IAAI,4BAAmB,CAAC,0BAA0B,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,YAAoB;QACvC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACtD,CAAC;IAcD,KAAK,CAAC,0BAA0B,CAC/B,YAAoB,EACpB,IAAY,EACZ,OAAuB;QAEvB,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAS,4BAAY,CAAC,gBAAgB,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAG1C,IAAI,OAAO,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,OAAO,CAAC,QAAQ;gBAC7B,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;aACxB,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACvD;;;;;;;;;;;;;;;;uCAgBmC,EACnC,CAAC,EACD,GAAG,EACH,MAAM,CAAC,WAAW,CAAC,CACnB,CAAqB,CAAC;YAEvB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,WAAW;gBACX,SAAS,EAAE,SAAS,KAAK,CAAC;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;aACxB,CAAC;QACH,CAAC;QAGD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE3B,OAAO;YACN,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,OAAO,CAAC,QAAQ;YAC7B,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;SACxB,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,YAAoB;QACtC,OAAO,eAAe,YAAY,EAAE,CAAC;IACtC,CAAC;IAEO,cAAc,CAAC,aAAqB;QAC3C,OAAO,YAAY,aAAa,EAAE,CAAC;IACpC,CAAC;IAED,IAAY,MAAM;QACjB,OAAO,IAAI,CAAC,KAAM,CAAC;IACpB,CAAC;CACD,CAAA;AArPY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAKV,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,2BAAY,CAAC,CAAA;IAEpB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,gBAAS,CAAC,CAAA;qDAEgB,kCAAe;GAVtC,eAAe,CAqP3B"}

package/dist/modules/otp/sms/index.d.ts

@@ -0,0 +1,4 @@
+export * from './sms-provider.interface';
+export * from './sms.module';
+export * from './providers';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/otp/sms/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../modules/otp/sms/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC"}

package/dist/modules/otp/sms/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./sms-provider.interface"), exports);
+__exportStar(require("./sms.module"), exports);
+__exportStar(require("./providers"), exports);
+//# sourceMappingURL=index.js.map

package/dist/modules/otp/sms/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../modules/otp/sms/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC;AACzC,+CAA6B;AAC7B,8CAA4B"}

package/dist/modules/otp/sms/providers/index.d.ts

@@ -0,0 +1,5 @@
+export * from './twilio.provider';
+export * from './termii.provider';
+export * from './infobip.provider';
+export * from './smart-sms.provider';
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/otp/sms/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../modules/otp/sms/providers/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC"}

package/dist/modules/otp/sms/providers/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./twilio.provider"), exports);
+__exportStar(require("./termii.provider"), exports);
+__exportStar(require("./infobip.provider"), exports);
+__exportStar(require("./smart-sms.provider"), exports);
+//# sourceMappingURL=index.js.map

package/dist/modules/otp/sms/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../modules/otp/sms/providers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,oDAAkC;AAClC,qDAAmC;AACnC,uDAAqC"}

package/dist/modules/otp/sms/providers/infobip.provider.d.ts

@@ -0,0 +1,10 @@
+import { SettingsService } from '../../../settings/services/settings.service';
+import { ISmsProvider, SmsMessage } from '../sms-provider.interface';
+export declare class InfobipProvider extends ISmsProvider {
+    private readonly settings;
+    private readonly logger;
+    constructor(settings: SettingsService);
+    get isConfigured(): boolean;
+    send(message: SmsMessage): Promise<void>;
+}
+//# sourceMappingURL=infobip.provider.d.ts.map

package/dist/modules/otp/sms/providers/infobip.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infobip.provider.d.ts","sourceRoot":"","sources":["../../../../../modules/otp/sms/providers/infobip.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAE9E,OAAO,EAAE,YAAY,EAAoB,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAEvF,qBACa,eAAgB,SAAQ,YAAY;IAGpC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAFrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;gBAE9B,QAAQ,EAAE,eAAe;IAItD,IAAI,YAAY,IAAI,OAAO,CAE1B;IAEK,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAkC9C"}