@solidxai/core 0.1.13-beta.2 → 0.1.13-beta.21

package/dist/services/authentication.service.d.ts

@@ -22,6 +22,7 @@ import { SsoCodeStorageService } from "./sso-code-storage.service";
 import { RoleMetadataService } from "./role-metadata.service";
 import { SettingService } from "./setting.service";
 import { UserActivityHistoryService } from "./user-activity-history.service";
+import { MetadataValidationService } from "./metadata-validation.service";
 import { UserService } from "./user.service";
 import { SmsFactory } from "../factories/sms.factory";
 import { WhatsAppFactory } from "../factories/whatsapp.factory";
@@ -42,10 +43,11 @@ export declare class AuthenticationService {
     private readonly roleMetadataService;
     private readonly userActivityHistoryService;
     private readonly ssoCodeStorage;
+    private readonly metadataValidationService;
     private readonly dataSource;
     private readonly solidRegistry;
     private readonly logger;
-    constructor(userService: UserService, userRepository: UserRepository, hashingService: HashingService, jwtService: JwtService, activeSessionStorage: ActiveSessionStorageService, refreshTokenIdsStorage: RefreshTokenIdsStorageService, httpService: HttpService, mailServiceFactory: MailFactory, smsFactory: SmsFactory, whatsAppFactory: WhatsAppFactory, eventEmitter: EventEmitter2, settingService: SettingService, roleMetadataService: RoleMetadataService, userActivityHistoryService: UserActivityHistoryService, ssoCodeStorage: SsoCodeStorageService, dataSource: DataSource, solidRegistry: SolidRegistry);
+    constructor(userService: UserService, userRepository: UserRepository, hashingService: HashingService, jwtService: JwtService, activeSessionStorage: ActiveSessionStorageService, refreshTokenIdsStorage: RefreshTokenIdsStorageService, httpService: HttpService, mailServiceFactory: MailFactory, smsFactory: SmsFactory, whatsAppFactory: WhatsAppFactory, eventEmitter: EventEmitter2, settingService: SettingService, roleMetadataService: RoleMetadataService, userActivityHistoryService: UserActivityHistoryService, ssoCodeStorage: SsoCodeStorageService, metadataValidationService: MetadataValidationService, dataSource: DataSource, solidRegistry: SolidRegistry);
     private getCompanyLogo;
     resolveUser(username: string, email: string): Promise<User>;
     private resolveUserForPasswordSignIn;
@@ -56,6 +58,7 @@ export declare class AuthenticationService {
     private static readonly SIGNUP_DTO_KEYS;
     signUp(signUpDto: SignUpDto & Record<string, any>, activeUser?: ActiveUserData): Promise<User>;
     private performSignUp;
+    private assertUniqueSignupIdentifiers;
     private handlePasswordlessSignupOtp;
     signupForExtensionUser<T extends User>(signUpDto: SignUpDto, extensionUserDto: DeepPartial<T>, extensionUserRepo: Repository<T>): Promise<T>;
     private populateForSignup;
@@ -157,12 +160,12 @@ export declare class AuthenticationService {
         data: {};
     }>;
     private notifyUserOnPasswordChanged;
-    generateTokens(user: User): Promise<{
+    generateTokens(user: User, deviceId?: string): Promise<{
         accessToken: string;
         refreshToken: string;
     }>;
-    generateAccessToken(user: User, sessionId?: string): Promise<string>;
-    generateRefreshToken(user: User, previousRefreshToken?: string): Promise<string>;
+    generateAccessToken(user: User, sessionId?: string, deviceKey?: string): Promise<string>;
+    generateRefreshToken(user: User, previousRefreshToken?: string, deviceKey?: string): Promise<string>;
     refreshTokens(refreshTokenDto: RefreshTokenDto): Promise<{
         accessToken: string;
         refreshToken: string;
@@ -232,9 +235,10 @@ export declare class AuthenticationService {
     private checkAccountBlocked;
     private incrementFailedAttempts;
     private resetFailedAttempts;
-    logout(refreshToken: string): Promise<{
+    logout(refreshToken: string, allDevices?: boolean): Promise<{
         message: string;
     }>;
+    private verifyRefreshTokenForLogout;
     activateUser(userId: number): Promise<void>;
     me(activeUser: ActiveUserData): Promise<{
         user: {

package/dist/services/authentication.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.service.d.ts","sourceRoot":"","sources":["../../src/services/authentication.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAY5C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAO9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAEL,6BAA6B,EAC9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAa3D,qBACa,qBAAqB;IAI9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,0BAA0B;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc;IAG/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAxBhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;gBAG9C,WAAW,EAAE,WAAW,EAExB,cAAc,EAAE,cAAc,EAC9B,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,UAAU,EACtB,oBAAoB,EAAE,2BAA2B,EACjD,sBAAsB,EAAE,6BAA6B,EACrD,WAAW,EAAE,WAAW,EAExB,kBAAkB,EAAE,WAAW,EAE/B,UAAU,EAAE,UAAU,EACtB,eAAe,EAAE,eAAe,EAChC,YAAY,EAAE,aAAa,EAC3B,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,EACxC,0BAA0B,EAAE,0BAA0B,EACtD,cAAc,EAAE,qBAAqB,EAGrC,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa;YAKjC,cAAc;IAItB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;YASnC,4BAA4B;IAoBpC,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM;IAcrD,8BAA8B,CAAC,KAAK,EAAE,MAAM;YAOpC,4BAA4B;YAmB5B,wBAAwB;IAWtC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAUpC;IAEG,MAAM,CACV,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1C,UAAU,GAAE,cAAqB,GAChC,OAAO,CAAC,IAAI,CAAC;YAuBF,aAAa;YA0Db,2BAA2B;IAqCnC,sBAAsB,CAAC,CAAC,SAAS,IAAI,EACzC,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,EAChC,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC;YAKC,iBAAiB;YAmEjB,gBAAgB;IAkB9B,gBAAgB,CAAC,MAAM,GAAE,MAAU,GAAG,MAAM;YAiB9B,+BAA+B;YAkC/B,qBAAqB;YAQrB,mBAAmB;YAQnB,kBAAkB;IAwD1B,uBAAuB,CAAC,SAAS,EAAE,YAAY;;;IAkCrD,OAAO,CAAC,4BAA4B;YAsBtB,4BAA4B;IAa1C,OAAO,CAAC,mCAAmC;YAM7B,4CAA4C;IAuB1D,OAAO,CAAC,UAAU;YAWJ,qBAAqB;YAqCrB,mCAAmC;IA+HjD,OAAO,CAAC,4BAA4B;YAkCtB,yBAAyB;IAajC,sBAAsB,CAAC,gBAAgB,EAAE,gBAAgB;;;;YAoCjD,gCAAgC;IAe9C,OAAO,CAAC,uBAAuB;IAqB/B,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,wBAAwB;YAMlB,uDAAuD;YAwBvD,GAAG;IAWjB,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,gBAAgB;IAclB,MAAM,CAAC,SAAS,EAAE,SAAS;;;;;;;;;;;;IA6BjC,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,UAAU;IAWZ,gBAAgB,CAAC,SAAS,EAAE,YAAY;;;;;;;;;;IAmB9C,OAAO,CAAC,gBAAgB;YA2BV,4BAA4B;YAkB5B,gBAAgB;YAqBhB,cAAc;IAsB5B,OAAO,CAAC,qBAAqB;YAcf,6BAA6B;IAwHrC,eAAe,CAAC,gBAAgB,EAAE,gBAAgB;;;;;;;;;;;;IA2CxD,OAAO,CAAC,gBAAgB;YAqBV,aAAa;IA2B3B,OAAO,CAAC,gBAAgB;YAMV,uBAAuB;IAK/B,cAAc,CAClB,iBAAiB,EAAE,iBAAiB,EACpC,UAAU,EAAE,cAAc;YA0Dd,2BAA2B;IAiBnC,sBAAsB,CAC1B,yBAAyB,EAAE,yBAAyB;;;;;;;;;;;YAsDxC,0BAA0B;IA8DlC,qBAAqB,CACzB,wBAAwB,EAAE,wBAAwB;;;;;;;YA6DtC,2BAA2B;IA8DnC,cAAc,CAAC,IAAI,EAAE,IAAI;;;;IAoBzB,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM;IAuBlD,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM;IAkB9D,aAAa,CAAC,eAAe,EAAE,eAAe;;;;YA4DtC,SAAS;IAuBjB,uBAAuB,CAAC,IAAI,EAAE,IAAI;IAyBlC,iBAAiB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAqCpC,yBAAyB,CAAC,IAAI,EAAE,IAAI;IAiCpC,mBAAmB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCtC,0BAA0B,CAAC,IAAI,EAAE,IAAI;IA0BrC,oBAAoB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCvC,yCAAyC,CAAC,IAAI,EAAE,IAAI;IA0CpD,mCAAmC,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCtD,gBAAgB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;YAkC3B,iCAAiC;IAO/C,OAAO,CAAC,6BAA6B;IAQrC,OAAO,CAAC,mBAAmB;YAab,uBAAuB;YAQvB,mBAAmB;IAa3B,MAAM,CAAC,YAAY,EAAE,MAAM;;;IAwC3B,YAAY,CAAC,MAAM,EAAE,MAAM;IAS3B,EAAE,CAAC,UAAU,EAAE,cAAc;;;;;;;;;;IA+B7B,eAAe,CACnB,UAAU,EAAE,cAAc,EAC1B,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAgBzB,eAAe,CAAC,IAAI,EAAE,MAAM;;;;;;;;;;;;CAYnC"}
+{"version":3,"file":"authentication.service.d.ts","sourceRoot":"","sources":["../../src/services/authentication.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAY5C,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAoB,UAAU,EAAE,MAAM,SAAS,CAAC;AAOhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAEL,6BAA6B,EAC9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAa3D,qBACa,qBAAqB;IAI9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,0BAA0B;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAG1C,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAzBhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;gBAG9C,WAAW,EAAE,WAAW,EAExB,cAAc,EAAE,cAAc,EAC9B,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,UAAU,EACtB,oBAAoB,EAAE,2BAA2B,EACjD,sBAAsB,EAAE,6BAA6B,EACrD,WAAW,EAAE,WAAW,EAExB,kBAAkB,EAAE,WAAW,EAE/B,UAAU,EAAE,UAAU,EACtB,eAAe,EAAE,eAAe,EAChC,YAAY,EAAE,aAAa,EAC3B,cAAc,EAAE,cAAc,EAC9B,mBAAmB,EAAE,mBAAmB,EACxC,0BAA0B,EAAE,0BAA0B,EACtD,cAAc,EAAE,qBAAqB,EACrC,yBAAyB,EAAE,yBAAyB,EAGpD,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa;YAKjC,cAAc;IAItB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;YASnC,4BAA4B;IAoBpC,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM;IAcrD,8BAA8B,CAAC,KAAK,EAAE,MAAM;YAOpC,4BAA4B;YAmB5B,wBAAwB;IAWtC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAUpC;IAEG,MAAM,CACV,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1C,UAAU,GAAE,cAAqB,GAChC,OAAO,CAAC,IAAI,CAAC;YAuBF,aAAa;YA6Db,6BAA6B;YAqD7B,2BAA2B;IAqCnC,sBAAsB,CAAC,CAAC,SAAS,IAAI,EACzC,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,EAChC,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC;YAKC,iBAAiB;YAmEjB,gBAAgB;IA8B9B,gBAAgB,CAAC,MAAM,GAAE,MAAU,GAAG,MAAM;YAiB9B,+BAA+B;YAkC/B,qBAAqB;YAQrB,mBAAmB;YAQnB,kBAAkB;IAwD1B,uBAAuB,CAAC,SAAS,EAAE,YAAY;;;IAkCrD,OAAO,CAAC,4BAA4B;YAsBtB,4BAA4B;IAa1C,OAAO,CAAC,mCAAmC;YAM7B,4CAA4C;IAuB1D,OAAO,CAAC,UAAU;YAWJ,qBAAqB;YAqCrB,mCAAmC;IA+HjD,OAAO,CAAC,4BAA4B;YAkCtB,yBAAyB;IAajC,sBAAsB,CAAC,gBAAgB,EAAE,gBAAgB;;;;YAoCjD,gCAAgC;IAe9C,OAAO,CAAC,uBAAuB;IAqB/B,OAAO,CAAC,oBAAoB;IAe5B,OAAO,CAAC,wBAAwB;YAMlB,uDAAuD;YAwBvD,GAAG;IAWjB,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,gBAAgB;IAclB,MAAM,CAAC,SAAS,EAAE,SAAS;;;;;;;;;;;;IA6BjC,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,UAAU;IAWZ,gBAAgB,CAAC,SAAS,EAAE,YAAY;;;;;;;;;;IAmB9C,OAAO,CAAC,gBAAgB;YA2BV,4BAA4B;YAkB5B,gBAAgB;YAqBhB,cAAc;IAsB5B,OAAO,CAAC,qBAAqB;YAcf,6BAA6B;IAwHrC,eAAe,CAAC,gBAAgB,EAAE,gBAAgB;;;;;;;;;;;;IA2CxD,OAAO,CAAC,gBAAgB;YAqBV,aAAa;IA2B3B,OAAO,CAAC,gBAAgB;YAMV,uBAAuB;IAK/B,cAAc,CAClB,iBAAiB,EAAE,iBAAiB,EACpC,UAAU,EAAE,cAAc;YA0Dd,2BAA2B;IAiBnC,sBAAsB,CAC1B,yBAAyB,EAAE,yBAAyB;;;;;;;;;;;YAsDxC,0BAA0B;IA8DlC,qBAAqB,CACzB,wBAAwB,EAAE,wBAAwB;;;;;;;YA6DtC,2BAA2B;IAoEnC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,MAAM;;;;IA4B5C,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;IA2BtE,oBAAoB,CACxB,IAAI,EAAE,IAAI,EACV,oBAAoB,CAAC,EAAE,MAAM,EAC7B,SAAS,CAAC,EAAE,MAAM;IA8Bd,aAAa,CAAC,eAAe,EAAE,eAAe;;;;YA2EtC,SAAS;IAuBjB,uBAAuB,CAAC,IAAI,EAAE,IAAI;IAyBlC,iBAAiB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAqCpC,yBAAyB,CAAC,IAAI,EAAE,IAAI;IAiCpC,mBAAmB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCtC,0BAA0B,CAAC,IAAI,EAAE,IAAI;IA0BrC,oBAAoB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCvC,yCAAyC,CAAC,IAAI,EAAE,IAAI;IA0CpD,mCAAmC,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;IAoCtD,gBAAgB,CAAC,UAAU,EAAE,MAAM;;;;;;;;;;;YAkC3B,iCAAiC;IAO/C,OAAO,CAAC,6BAA6B;IAQrC,OAAO,CAAC,mBAAmB;YAab,uBAAuB;YAQvB,mBAAmB;IAa3B,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,UAAQ;;;YAgDvC,2BAA2B;IAyBnC,YAAY,CAAC,MAAM,EAAE,MAAM;IAS3B,EAAE,CAAC,UAAU,EAAE,cAAc;;;;;;;;;;IAwC7B,eAAe,CACnB,UAAU,EAAE,cAAc,EAC1B,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAiBzB,eAAe,CAAC,IAAI,EAAE,MAAM;;;;;;;;;;;;CAYnC"}

package/dist/services/authentication.service.js

@@ -37,6 +37,7 @@ const sso_code_storage_service_1 = require("./sso-code-storage.service");
 const role_metadata_service_1 = require("./role-metadata.service");
 const setting_service_1 = require("./setting.service");
 const user_activity_history_service_1 = require("./user-activity-history.service");
+const metadata_validation_service_1 = require("./metadata-validation.service");
 const user_service_1 = require("./user.service");
 const sms_factory_1 = require("../factories/sms.factory");
 const whatsapp_factory_1 = require("../factories/whatsapp.factory");
@@ -48,7 +49,7 @@ var LoginProvider;
     LoginProvider["OTP"] = "otp";
 })(LoginProvider || (LoginProvider = {}));
 let AuthenticationService = AuthenticationService_1 = class AuthenticationService {
-    constructor(userService, userRepository, hashingService, jwtService, activeSessionStorage, refreshTokenIdsStorage, httpService, mailServiceFactory, smsFactory, whatsAppFactory, eventEmitter, settingService, roleMetadataService, userActivityHistoryService, ssoCodeStorage, dataSource, solidRegistry) {
+    constructor(userService, userRepository, hashingService, jwtService, activeSessionStorage, refreshTokenIdsStorage, httpService, mailServiceFactory, smsFactory, whatsAppFactory, eventEmitter, settingService, roleMetadataService, userActivityHistoryService, ssoCodeStorage, metadataValidationService, dataSource, solidRegistry) {
         this.userService = userService;
         this.userRepository = userRepository;
         this.hashingService = hashingService;
@@ -64,6 +65,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         this.roleMetadataService = roleMetadataService;
         this.userActivityHistoryService = userActivityHistoryService;
         this.ssoCodeStorage = ssoCodeStorage;
+        this.metadataValidationService = metadataValidationService;
         this.dataSource = dataSource;
         this.solidRegistry = solidRegistry;
         this.logger = new common_1.Logger(AuthenticationService_1.name);
@@ -147,6 +149,8 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     }
     async performSignUp(signUpDto, entity, repo, preferEntityApiKeyFlag = false) {
         try {
+            await this.assertUniqueSignupIdentifiers(signUpDto, repo);
+            await this.metadataValidationService.validateCreateDto("user", signUpDto);
             const onForcePasswordChange = this.settingService.getConfigValue("forceChangePasswordOnFirstLogin");
             const activateUserOnRegistration = this.settingService.getConfigValue("activateUserOnRegistration");
             const defaultRole = this.settingService.getConfigValue("defaultRole");
@@ -176,6 +180,38 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             throw err;
         }
     }
+    async assertUniqueSignupIdentifiers(signUpDto, repo) {
+        const username = signUpDto.username?.trim();
+        const email = signUpDto.email?.trim();
+        const mobile = signUpDto.mobile?.trim();
+        const where = [];
+        if (username) {
+            where.push({ username });
+        }
+        if (email) {
+            where.push({ email });
+        }
+        if (mobile) {
+            where.push({ mobile });
+        }
+        if (where.length === 0) {
+            return;
+        }
+        const existingUser = await repo.findOne({ where });
+        if (!existingUser) {
+            return;
+        }
+        if (email && existingUser.email === email) {
+            throw new common_1.ConflictException(`A user with email address "${email}" already exists.`);
+        }
+        if (mobile && existingUser.mobile === mobile) {
+            throw new common_1.ConflictException(`A user with mobile number "${mobile}" already exists.`);
+        }
+        if (username && existingUser.username === username) {
+            throw new common_1.ConflictException(`A user with username "${username}" already exists.`);
+        }
+        throw new common_1.ConflictException(error_messages_1.ERROR_MESSAGES.USER_ALREADY_EXISTS);
+    }
     async handlePasswordlessSignupOtp(user, signUpDto, autoGeneratedPwd, repo) {
         const isPasswordProvided = !!signUpDto.password;
         const isAutoGeneratedPassword = !!autoGeneratedPwd;
@@ -241,9 +277,19 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     async handlePostSignup(user, roles = [], pwd, autoGeneratedPwd) {
         await this.userService.initializeRolesForNewUser(roles, user);
         if (user.forcePasswordChange && autoGeneratedPwd) {
-            await this.notifyUserOnForcePasswordChange(user, autoGeneratedPwd);
+            try {
+                await this.notifyUserOnForcePasswordChange(user, autoGeneratedPwd);
+            }
+            catch (error) {
+                this.logger.error(`Failed to send force-password-change email for user ${user.id}: ${error?.message ?? error}`);
+            }
+        }
+        try {
+            await this.notifyUserOnSignup(user);
+        }
+        catch (error) {
+            this.logger.error(`Failed to send signup notifications for user ${user.id}: ${error?.message ?? error}`);
         }
-        await this.notifyUserOnSignup(user);
     }
     generatePassword(length = 8) {
         const upperCase = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
@@ -1055,7 +1101,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             }, this.settingService.getConfigValue("shouldQueueSms"));
         }
     }
-    async generateTokens(user) {
+    async generateTokens(user, deviceId) {
         const sessionId = this.shouldPreventConcurrentLogins()
             ? (0, crypto_1.randomUUID)()
             : undefined;
@@ -1065,16 +1111,19 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         else {
             await this.activeSessionStorage.clearActiveSession(user.id);
         }
+        const deviceKey = this.refreshTokenIdsStorage.areConcurrentLoginsAllowed()
+            ? deviceId ?? (0, crypto_1.randomUUID)()
+            : undefined;
         const [accessToken, refreshToken] = await Promise.all([
-            await this.generateAccessToken(user, sessionId),
-            await this.generateRefreshToken(user),
+            await this.generateAccessToken(user, sessionId, deviceKey),
+            await this.generateRefreshToken(user, undefined, deviceKey),
         ]);
         return {
             accessToken,
             refreshToken,
         };
     }
-    async generateAccessToken(user, sessionId) {
+    async generateAccessToken(user, sessionId, deviceKey) {
         const userRoleNames = user.roles.map((role) => role.name);
         const resolvedSessionId = this.shouldPreventConcurrentLogins()
             ? sessionId ?? (await this.activeSessionStorage.getActiveSession(user.id))
@@ -1085,16 +1134,22 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             email: user.email,
             roles: userRoleNames,
             ...(resolvedSessionId ? { sessionId: resolvedSessionId } : {}),
+            ...(deviceKey ? { deviceKey } : {}),
         });
         return accessToken;
     }
-    async generateRefreshToken(user, previousRefreshToken) {
+    async generateRefreshToken(user, previousRefreshToken, deviceKey) {
         const refreshTokenId = (0, crypto_1.randomUUID)();
         const refreshTokenTtl = this.settingService.getConfigValue("refreshTokenTtl");
+        const epoch = deviceKey
+            ? await this.refreshTokenIdsStorage.getEpoch(user.id)
+            : undefined;
         const refreshToken = await this.signToken(user.id, refreshTokenTtl, {
             refreshTokenId,
+            ...(deviceKey ? { deviceKey } : {}),
+            ...(epoch !== undefined ? { epoch } : {}),
         });
-        await this.refreshTokenIdsStorage.insert(user.id, refreshToken, previousRefreshToken);
+        await this.refreshTokenIdsStorage.insert(user.id, refreshToken, previousRefreshToken, deviceKey);
         return refreshToken;
     }
     async refreshTokens(refreshTokenDto) {
@@ -1102,7 +1157,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             const secret = this.settingService.getConfigValue("secret");
             const audience = this.settingService.getConfigValue("audience");
             const issuer = this.settingService.getConfigValue("issuer");
-            const { sub } = await this.jwtService.verifyAsync(refreshTokenDto.refreshToken, {
+            const { sub, deviceKey, epoch } = await this.jwtService.verifyAsync(refreshTokenDto.refreshToken, {
                 secret,
                 audience,
                 issuer,
@@ -1118,11 +1173,11 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             if (!user) {
                 throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.SESSION_INVALID);
             }
-            const currentRefreshToken = await this.refreshTokenIdsStorage.validateAndRotate(user, refreshTokenDto.refreshToken);
+            const rotated = await this.refreshTokenIdsStorage.validateAndRotate(user, refreshTokenDto.refreshToken, { deviceKey, epoch });
             await this.userActivityHistoryService.logEvent("tokenRefreshed", user);
             return {
-                accessToken: await this.generateAccessToken(user),
-                refreshToken: currentRefreshToken,
+                accessToken: await this.generateAccessToken(user, undefined, rotated.deviceKey),
+                refreshToken: rotated.refreshToken,
             };
         }
         catch (err) {
@@ -1425,21 +1480,29 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         user.failedLoginAttempts = 0;
         await this.userRepository.update(user.id, { failedLoginAttempts: 0 });
     }
-    async logout(refreshToken) {
+    async logout(refreshToken, allDevices = false) {
         try {
-            const payload = this.jwtService.decode(refreshToken);
-            if (!payload || !payload.sub) {
-                throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.INVALID_REFRESH_TOKEN);
+            const payload = await this.verifyRefreshTokenForLogout(refreshToken);
+            if (!payload?.sub) {
+                this.logger.warn("logout called with an unverifiable refresh token");
+                return { message: success_messages_1.SUCCESS_MESSAGES.LOGOUT_SUCCESS };
             }
             const userId = payload.sub;
-            await this.refreshTokenIdsStorage.invalidate(userId);
+            if (allDevices) {
+                await this.refreshTokenIdsStorage.invalidateAll(userId);
+            }
+            else {
+                await this.refreshTokenIdsStorage.invalidate(userId, payload.deviceKey);
+            }
             await this.activeSessionStorage.clearActiveSession(userId);
             const user = await this.userRepository.findOne({
                 where: {
                     id: userId,
                 },
             });
-            await this.userActivityHistoryService.logEvent("logout", user);
+            if (user) {
+                await this.userActivityHistoryService.logEvent("logout", user);
+            }
             return { message: success_messages_1.SUCCESS_MESSAGES.LOGOUT_SUCCESS };
         }
         catch (err) {
@@ -1449,6 +1512,20 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                 : new common_1.InternalServerErrorException(error_messages_1.ERROR_MESSAGES.LOGOUT_FAILED);
         }
     }
+    async verifyRefreshTokenForLogout(refreshToken) {
+        try {
+            const payload = await this.jwtService.verifyAsync(refreshToken, {
+                secret: this.settingService.getConfigValue("secret"),
+                audience: this.settingService.getConfigValue("audience"),
+                issuer: this.settingService.getConfigValue("issuer"),
+                ignoreExpiration: true,
+            });
+            return payload?.refreshTokenId ? payload : null;
+        }
+        catch {
+            return null;
+        }
+    }
     async activateUser(userId) {
         const user = await this.userService.findOne(userId, {});
         if (!user) {
@@ -1466,7 +1543,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                 roles: true,
             },
         });
-        const refreshTokenState = await this.refreshTokenIdsStorage.getCurrentRefreshTokenState(user.id);
+        const refreshTokenState = await this.refreshTokenIdsStorage.getCurrentRefreshTokenState(user.id, activeUser.deviceKey);
         const response = {
             user: {
                 email: user.email,
@@ -1475,12 +1552,12 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                 id: user.id,
                 roles: user.roles.map((role) => role.name),
             },
-            refreshToken: refreshTokenState.currentRefreshToken,
+            refreshToken: refreshTokenState?.currentRefreshToken ?? null,
         };
         return response;
     }
     async generateSsoCode(activeUser, rawAccessToken) {
-        const refreshTokenState = await this.refreshTokenIdsStorage.getCurrentRefreshTokenState(activeUser.sub);
+        const refreshTokenState = await this.refreshTokenIdsStorage.getCurrentRefreshTokenState(activeUser.sub, activeUser.deviceKey);
         if (!refreshTokenState?.currentRefreshToken) {
             throw new common_1.UnauthorizedException("No active session found");
         }
@@ -1513,7 +1590,7 @@ AuthenticationService.SIGNUP_DTO_KEYS = new Set([
 ]);
 exports.AuthenticationService = AuthenticationService = AuthenticationService_1 = __decorate([
     (0, common_1.Injectable)(),
-    __param(15, (0, typeorm_1.InjectDataSource)()),
+    __param(16, (0, typeorm_1.InjectDataSource)()),
     __metadata("design:paramtypes", [user_service_1.UserService,
         user_repository_1.UserRepository,
         hashing_service_1.HashingService,
@@ -1529,6 +1606,7 @@ exports.AuthenticationService = AuthenticationService = AuthenticationService_1
         role_metadata_service_1.RoleMetadataService,
         user_activity_history_service_1.UserActivityHistoryService,
         sso_code_storage_service_1.SsoCodeStorageService,
+        metadata_validation_service_1.MetadataValidationService,
         typeorm_2.DataSource,
         solid_registry_1.SolidRegistry])
 ], AuthenticationService);
@@ -1540,6 +1618,7 @@ function parseUniqueConstraintError(detail) {
         const fieldMap = {
             username: "username",
             email: "email address",
+            mobile: "mobile number",
             full_name_user_key: "full name",
         };
         const friendlyField = fieldMap[field] || field;