@solidxai/core 0.1.9-beta.1 → 0.1.9-beta.11

package/dist/services/authentication.service.js

@@ -38,6 +38,7 @@ const setting_service_1 = require("./setting.service");
 const user_activity_history_service_1 = require("./user-activity-history.service");
 const user_service_1 = require("./user.service");
 const sms_factory_1 = require("../factories/sms.factory");
+const solid_registry_1 = require("../helpers/solid-registry");
 var LoginProvider;
 (function (LoginProvider) {
     LoginProvider["LOCAL"] = "local";
@@ -45,7 +46,7 @@ var LoginProvider;
     LoginProvider["OTP"] = "otp";
 })(LoginProvider || (LoginProvider = {}));
 let AuthenticationService = AuthenticationService_1 = class AuthenticationService {
-    constructor(userService, userRepository, hashingService, jwtService, refreshTokenIdsStorage, httpService, mailServiceFactory, smsFactory, eventEmitter, settingService, roleMetadataService, userActivityHistoryService, ssoCodeStorage, dataSource) {
+    constructor(userService, userRepository, hashingService, jwtService, refreshTokenIdsStorage, httpService, mailServiceFactory, smsFactory, eventEmitter, settingService, roleMetadataService, userActivityHistoryService, ssoCodeStorage, dataSource, solidRegistry) {
         this.userService = userService;
         this.userRepository = userRepository;
         this.hashingService = hashingService;
@@ -60,20 +61,18 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         this.userActivityHistoryService = userActivityHistoryService;
         this.ssoCodeStorage = ssoCodeStorage;
         this.dataSource = dataSource;
+        this.solidRegistry = solidRegistry;
         this.logger = new common_1.Logger(AuthenticationService_1.name);
     }
     async getCompanyLogo() {
-        return this.settingService.getConfigValue('companylogo');
+        return this.settingService.getConfigValue("companylogo");
     }
     async resolveUser(username, email) {
         return await this.userRepository.findOne({
-            where: [
-                { username: username },
-                { email: email },
-            ],
+            where: [{ username: username }, { email: email }],
             relations: {
-                roles: true
-            }
+                roles: true,
+            },
         });
     }
     async updatePasswordDetails(user, newPassword) {
@@ -85,14 +84,14 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             password: user.password,
             passwordScheme: user.passwordScheme,
             passwordSchemeVersion: user.passwordSchemeVersion,
-            rehashedAt: user.rehashedAt
+            rehashedAt: user.rehashedAt,
         });
         return user;
     }
     async resolveUserByVerificationToken(token) {
         return await this.userRepository.findOne({
             where: { verificationTokenOnForgotPassword: token },
-            relations: { roles: true }
+            relations: { roles: true },
         });
     }
     async validateUserForPasswordLogin(user, password) {
@@ -112,50 +111,52 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         }
     }
     async signUp(signUpDto, activeUser = null) {
+        const hasExtensionFields = Object.keys(signUpDto).some((k) => !AuthenticationService_1.SIGNUP_DTO_KEYS.has(k));
+        if (hasExtensionFields) {
+            const provider = this.solidRegistry.getExtensionUserCreationProvider();
+            if (!provider) {
+                throw new common_1.InternalServerErrorException("No ExtensionUserCreationProvider registered. Register one to handle extension user creation.");
+            }
+            const entity = await provider.buildExtensionEntity(signUpDto);
+            const effectiveDto = { ...signUpDto, roles: provider.roles(signUpDto) };
+            return this.performSignUp(effectiveDto, entity, provider.repo);
+        }
+        return this.performSignUp(signUpDto, new user_entity_1.User(), this.userRepository);
+    }
+    async performSignUp(signUpDto, entity, repo) {
         try {
-            const onForcePasswordChange = this.settingService.getConfigValue('forceChangePasswordOnFirstLogin');
-            const activateUserOnRegistration = this.settingService.getConfigValue('activateUserOnRegistration');
-            const defaultRole = this.settingService.getConfigValue('defaultRole');
-            var { user, pwd, autoGeneratedPwd } = await this.populateForSignup(new user_entity_1.User(), signUpDto, activateUserOnRegistration, onForcePasswordChange);
+            const onForcePasswordChange = this.settingService.getConfigValue("forceChangePasswordOnFirstLogin");
+            const activateUserOnRegistration = this.settingService.getConfigValue("activateUserOnRegistration");
+            const defaultRole = this.settingService.getConfigValue("defaultRole");
+            var { user, pwd, autoGeneratedPwd } = await this.populateForSignup(entity, signUpDto, activateUserOnRegistration, onForcePasswordChange);
             const privateDto = signUpDto;
             if (privateDto.isAllowedToGenerateApiKeys !== undefined) {
                 user.isAllowedToGenerateApiKeys = privateDto.isAllowedToGenerateApiKeys;
             }
-            const savedUser = await this.userRepository.save(user);
+            const savedUser = await repo.save(user);
             const userRoles = signUpDto.roles ?? [];
-            if (signUpDto.username !== 'sa' && defaultRole) {
+            if ((signUpDto.roles?.length ?? 0) === 0 &&
+                signUpDto.username !== "sa" &&
+                defaultRole) {
                 userRoles.push(defaultRole);
             }
             await this.handlePostSignup(savedUser, userRoles, pwd, autoGeneratedPwd);
             return savedUser;
         }
         catch (err) {
-            const pgUniqueViolationErrorCode = '23505';
+            const pgUniqueViolationErrorCode = "23505";
             if (err.code === pgUniqueViolationErrorCode) {
-                throw new common_1.ConflictException(error_messages_1.ERROR_MESSAGES.USER_ALREADY_EXISTS);
+                throw new common_1.ConflictException(parseUniqueConstraintError(err.detail || error_messages_1.ERROR_MESSAGES.UNIQUE_CONSTRAINT_VIOLATION));
             }
             throw err;
         }
     }
     async signupForExtensionUser(signUpDto, extensionUserDto, extensionUserRepo) {
-        try {
-            const onForcePasswordChange = this.settingService.getConfigValue('forceChangePasswordOnFirstLogin');
-            const extensionUser = extensionUserRepo.merge(extensionUserRepo.create(), extensionUserDto);
-            var { user, pwd, autoGeneratedPwd } = await this.populateForSignup(extensionUser, signUpDto, extensionUserDto.active ?? true, onForcePasswordChange);
-            const savedUser = await extensionUserRepo.save(user);
-            await this.handlePostSignup(savedUser, signUpDto.roles, pwd, autoGeneratedPwd);
-            return savedUser;
-        }
-        catch (err) {
-            const pgUniqueViolationErrorCode = '23505';
-            if (err.code === pgUniqueViolationErrorCode) {
-                throw new common_1.ConflictException(parseUniqueConstraintError(err.detail || error_messages_1.ERROR_MESSAGES.UNIQUE_CONSTRAINT_VIOLATION));
-            }
-            throw err;
-        }
+        const entity = extensionUserRepo.create(extensionUserDto);
+        return this.performSignUp(signUpDto, entity, extensionUserRepo);
     }
     async populateForSignup(user, signUpDto, isUserActive = true, onForcePasswordChange) {
-        let autoGeneratedPwdPermission = this.settingService.getConfigValue('iamAutoGeneratedPassword');
+        let autoGeneratedPwdPermission = this.settingService.getConfigValue("iamAutoGeneratedPassword");
         if (signUpDto.roles && signUpDto.roles.length > 0) {
             for (let i = 0; i < signUpDto.roles.length; i++) {
                 const roleName = signUpDto.roles[i];
@@ -169,20 +170,20 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         if (signUpDto.mobile) {
             user.mobile = signUpDto.mobile;
         }
-        let pwd = '';
-        let autoGeneratedPwd = '';
+        let pwd = "";
+        let autoGeneratedPwd = "";
         if (signUpDto.password) {
             pwd = await this.hashingService.hash(signUpDto.password);
         }
         else {
-            if (autoGeneratedPwdPermission?.toString().toLowerCase() === 'true') {
+            if (autoGeneratedPwdPermission?.toString().toLowerCase() === "true") {
                 autoGeneratedPwd = this.generatePassword();
                 pwd = await this.hashingService.hash(autoGeneratedPwd);
                 user.forcePasswordChange = true;
             }
             else {
-                if (!await this.isPasswordlessRegistrationEnabled()) {
-                    this.logger.error('User being created without password, and password less login is also not enabled in the system. Is this intentional?');
+                if (!(await this.isPasswordlessRegistrationEnabled())) {
+                    this.logger.error("User being created without password, and password less login is also not enabled in the system. Is this intentional?");
                     throw new common_1.BadRequestException(error_messages_1.ERROR_MESSAGES.PASSWORDLESS_REGISTRATION_DISABLED);
                 }
                 pwd = await this.hashingService.hash(pwd);
@@ -217,48 +218,48 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     async notifyUserOnForcePasswordChange(user, autoGeneratedPwd) {
         const companyLogo = await this.getCompanyLogo();
         const mailService = this.mailServiceFactory.getMailService();
-        mailService.sendEmailUsingTemplate(user.email, 'on-force-password-change', {
-            solidAppName: this.settingService.getConfigValue('appTitle'),
-            solidAppWebsiteUrl: this.settingService.getConfigValue('solidAppWebsiteUrl'),
-            frontendLoginPageUrl: this.settingService.getConfigValue('frontendLoginPageUrl'),
+        mailService.sendEmailUsingTemplate(user.email, "on-force-password-change", {
+            solidAppName: this.settingService.getConfigValue("appTitle"),
+            solidAppWebsiteUrl: this.settingService.getConfigValue("solidAppWebsiteUrl"),
+            frontendLoginPageUrl: this.settingService.getConfigValue("frontendLoginPageUrl"),
             email: user.email,
             fullName: user.fullName,
             userName: user.username,
             password: autoGeneratedPwd,
-            companyLogoUrl: companyLogo
-        }, this.settingService.getConfigValue('shouldQueueEmails'), null, null, 'user', user.id);
+            companyLogoUrl: companyLogo,
+        }, this.settingService.getConfigValue("shouldQueueEmails"), null, null, "user", user.id);
     }
     async isWelcomeEmailEnabled() {
-        const sendWelcomeEmailOnSignup = this.settingService.getConfigValue('sendWelcomeEmailOnSignup');
+        const sendWelcomeEmailOnSignup = this.settingService.getConfigValue("sendWelcomeEmailOnSignup");
         return sendWelcomeEmailOnSignup;
     }
     async isWelcomeSmsEnabled() {
-        const sendWelcomeSmsOnSignup = this.settingService.getConfigValue('sendWelcomeSmsOnSignup');
+        const sendWelcomeSmsOnSignup = this.settingService.getConfigValue("sendWelcomeSmsOnSignup");
         return sendWelcomeSmsOnSignup;
     }
     async notifyUserOnSignup(user) {
         const companyLogo = await this.getCompanyLogo();
         if (await this.isWelcomeEmailEnabled()) {
             const mailService = this.mailServiceFactory.getMailService();
-            mailService.sendEmailUsingTemplate(user.email, 'email-on-signup', {
-                solidAppName: this.settingService.getConfigValue('appTitle'),
-                solidAppWebsiteUrl: this.settingService.getConfigValue('solidAppWebsiteUrl'),
-                frontendLoginPageUrl: this.settingService.getConfigValue('frontendLoginPageUrl'),
+            mailService.sendEmailUsingTemplate(user.email, "email-on-signup", {
+                solidAppName: this.settingService.getConfigValue("appTitle"),
+                solidAppWebsiteUrl: this.settingService.getConfigValue("solidAppWebsiteUrl"),
+                frontendLoginPageUrl: this.settingService.getConfigValue("frontendLoginPageUrl"),
                 email: user.email,
                 fullName: user.fullName,
                 userName: user.username,
-                companyLogoUrl: companyLogo
-            }, this.settingService.getConfigValue('shouldQueueEmails'), null, null, 'user', user.id);
+                companyLogoUrl: companyLogo,
+            }, this.settingService.getConfigValue("shouldQueueEmails"), null, null, "user", user.id);
         }
         const isWelcomeSmsEnabled = await this.isWelcomeSmsEnabled();
         if (isWelcomeSmsEnabled && user.mobile) {
             const smsService = this.smsFactory.getSmsService();
-            smsService.sendSMSUsingTemplate(user.mobile, 'text-on-signup', {
-                solidAppName: this.settingService.getConfigValue('appTitle'),
-                frontendLoginPageUrl: this.settingService.getConfigValue('frontendLoginPageUrl'),
+            smsService.sendSMSUsingTemplate(user.mobile, "text-on-signup", {
+                solidAppName: this.settingService.getConfigValue("appTitle"),
+                frontendLoginPageUrl: this.settingService.getConfigValue("frontendLoginPageUrl"),
                 firstName: user.username,
-                fullName: user.fullName ? user.fullName : user.username
-            }, this.settingService.getConfigValue('shouldQueueSms'));
+                fullName: user.fullName ? user.fullName : user.username,
+            }, this.settingService.getConfigValue("shouldQueueSms"));
         }
     }
     async otpInitiateRegistration(signUpDto) {
@@ -277,7 +278,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             await this.notifyUserOnOtpInitiateRegistration(user, validationSource);
         }
         catch (err) {
-            if (err.code === '23505') {
+            if (err.code === "23505") {
                 throw new common_1.ConflictException(error_messages_1.ERROR_MESSAGES.USER_ALREADY_EXISTS);
             }
             throw err;
@@ -285,10 +286,12 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         return { message: success_messages_1.SUCCESS_MESSAGES.OTP_SENT_SUCCESS_REGISTRATION };
     }
     validateOtpRegistrationInput(signUpDto, validationSource) {
-        if (validationSource === constants_1.PasswordlessRegistrationValidateWhatSources.EMAIL && (0, class_validator_1.isEmpty)(signUpDto.email)) {
+        if (validationSource === constants_1.PasswordlessRegistrationValidateWhatSources.EMAIL &&
+            (0, class_validator_1.isEmpty)(signUpDto.email)) {
             throw new common_1.BadRequestException(error_messages_1.ERROR_MESSAGES.EMAIL_REQUIRED_FOR_VALIDATION);
         }
-        if (validationSource === constants_1.PasswordlessRegistrationValidateWhatSources.MOBILE && (0, class_validator_1.isEmpty)(signUpDto.mobile)) {
+        if (validationSource === constants_1.PasswordlessRegistrationValidateWhatSources.MOBILE &&
+            (0, class_validator_1.isEmpty)(signUpDto.mobile)) {
             throw new common_1.BadRequestException(error_messages_1.ERROR_MESSAGES.MOBILE_REQUIRED_FOR_VALIDATION);
         }
     }
@@ -298,19 +301,20 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                 { email: signUpDto.email },
                 { mobile: signUpDto.mobile },
                 { username: signUpDto.username },
-            ]
+            ],
         });
     }
     resolvePasswordlessValidationSource() {
-        return this.settingService.getConfigValue('passwordlessRegistrationValidateWhat');
+        return this.settingService.getConfigValue("passwordlessRegistrationValidateWhat");
     }
     async upsertUserWithRegistrationVerificationTokens(existingUser, signUpDto, validationSource) {
         let user = existingUser;
         if ((0, class_validator_1.isEmpty)(user)) {
             user = this.createUser(signUpDto);
+            user.active = false;
             await this.assignRegistrationOtp(validationSource, user);
             await this.userRepository.save(user);
-            await this.userService.addRoleToUser(user.username, this.settingService.getConfigValue('defaultRole'));
+            await this.userService.addRoleToUser(user.username, this.settingService.getConfigValue("defaultRole"));
         }
         else {
             await this.assignRegistrationOtp(validationSource, user);
@@ -331,8 +335,9 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         if (!passwordlessRegistrationValidateWhat) {
             throw new common_1.BadRequestException(error_messages_1.ERROR_MESSAGES.VALIDATION_SOURCE_REQUIRED);
         }
-        const autoLoginUserOnRegistration = this.settingService.getConfigValue('autoLoginUserOnRegistration');
-        if (passwordlessRegistrationValidateWhat === constants_1.PasswordlessRegistrationValidateWhatSources.EMAIL) {
+        const autoLoginUserOnRegistration = this.settingService.getConfigValue("autoLoginUserOnRegistration");
+        if (passwordlessRegistrationValidateWhat ===
+            constants_1.PasswordlessRegistrationValidateWhatSources.EMAIL) {
             const { token, expiresAt } = await this.otp();
             user.emailVerificationTokenOnRegistration = token;
             user.emailVerificationTokenOnRegistrationExpiresAt = expiresAt;
@@ -341,7 +346,8 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                 user.emailVerificationTokenOnLoginExpiresAt = expiresAt;
             }
         }
-        if (passwordlessRegistrationValidateWhat === constants_1.PasswordlessRegistrationValidateWhatSources.MOBILE) {
+        if (passwordlessRegistrationValidateWhat ===
+            constants_1.PasswordlessRegistrationValidateWhatSources.MOBILE) {
             const { token, expiresAt } = await this.otp();
             user.mobileVerificationTokenOnRegistration = token;
             user.mobileVerificationTokenOnRegistrationExpiresAt = expiresAt;
@@ -353,27 +359,29 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     }
     async notifyUserOnOtpInitiateRegistration(user, registrationValidationSource) {
         const companyLogo = await this.getCompanyLogo();
-        if (registrationValidationSource === constants_1.PasswordlessLoginValidateWhatSources.EMAIL) {
+        if (registrationValidationSource ===
+            constants_1.PasswordlessLoginValidateWhatSources.EMAIL) {
             const mailService = this.mailServiceFactory.getMailService();
-            mailService.sendEmailUsingTemplate(user.email, 'otp-on-register', {
-                solidAppName: this.settingService.getConfigValue('appTitle'),
-                solidAppWebsiteUrl: this.settingService.getConfigValue('solidAppWebsiteUrl'),
+            mailService.sendEmailUsingTemplate(user.email, "otp-on-register", {
+                solidAppName: this.settingService.getConfigValue("appTitle"),
+                solidAppWebsiteUrl: this.settingService.getConfigValue("solidAppWebsiteUrl"),
                 firstName: user.username,
                 fullName: user.fullName ? user.fullName : user.username,
                 emailVerificationTokenOnRegistration: user.emailVerificationTokenOnRegistration,
-                companyLogoUrl: companyLogo
-            }, this.settingService.getConfigValue('shouldQueueEmails'), null, null, 'user', user.id);
+                companyLogoUrl: companyLogo,
+            }, this.settingService.getConfigValue("shouldQueueEmails"), null, null, "user", user.id);
         }
-        if (registrationValidationSource === constants_1.PasswordlessLoginValidateWhatSources.MOBILE) {
+        if (registrationValidationSource ===
+            constants_1.PasswordlessLoginValidateWhatSources.MOBILE) {
             const smsService = this.smsFactory.getSmsService();
-            smsService.sendSMSUsingTemplate(user.mobile, 'otp-on-register', {
-                solidAppName: this.settingService.getConfigValue('appTitle'),
+            smsService.sendSMSUsingTemplate(user.mobile, "otp-on-register", {
+                solidAppName: this.settingService.getConfigValue("appTitle"),
                 otp: user.mobileVerificationTokenOnRegistration,
                 mobileVerificationTokenOnRegistration: user.mobileVerificationTokenOnRegistration,
                 firstName: user.username,
                 fullName: user.fullName ? user.fullName : user.username,
-                companyLogoUrl: companyLogo
-            }, this.settingService.getConfigValue('shouldQueueSms'));
+                companyLogoUrl: companyLogo,
+            }, this.settingService.getConfigValue("shouldQueueSms"));
         }
     }
     async otpConfirmRegistration(confirmSignUpDto) {
@@ -389,11 +397,15 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         const user = await this.findUserByRegistrationIdentifier(type, identifier);
         this.validateRegistrationOtp(user, otp, type);
         this.clearRegistrationOtp(user, type);
-        user.active = this.settingService.getConfigValue('activateUserOnRegistration') &&
-            await this.areAllPasswordlessRegistrationValidationSourcesVerified(user);
+        user.active =
+            this.settingService.getConfigValue("activateUserOnRegistration") &&
+                (await this.areAllPasswordlessRegistrationValidationSourcesVerified(user));
         const savedUser = await this.userRepository.save(user);
         this.triggerRegistrationEvent(savedUser);
-        return { active: savedUser.active, message: `User registration verified for ${type}` };
+        return {
+            active: savedUser.active,
+            message: `User registration verified for ${type}`,
+        };
     }
     async findUserByRegistrationIdentifier(type, identifier) {
         const where = type === constants_1.PasswordlessRegistrationValidateWhatSources.EMAIL
@@ -407,8 +419,12 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     }
     validateRegistrationOtp(user, otp, type) {
         const isEmail = type === constants_1.PasswordlessRegistrationValidateWhatSources.EMAIL;
-        const token = isEmail ? user.emailVerificationTokenOnRegistration : user.mobileVerificationTokenOnRegistration;
-        const expiresAt = isEmail ? user.emailVerificationTokenOnRegistrationExpiresAt : user.mobileVerificationTokenOnRegistrationExpiresAt;
+        const token = isEmail
+            ? user.emailVerificationTokenOnRegistration
+            : user.mobileVerificationTokenOnRegistration;
+        const expiresAt = isEmail
+            ? user.emailVerificationTokenOnRegistrationExpiresAt
+            : user.mobileVerificationTokenOnRegistrationExpiresAt;
         if (token !== otp) {
             throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.INVALID_OTP);
         }
@@ -434,12 +450,14 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     }
     async areAllPasswordlessRegistrationValidationSourcesVerified(user) {
         const registrationValidationSource = this.resolvePasswordlessValidationSource();
-        if (registrationValidationSource === constants_1.PasswordlessLoginValidateWhatSources.EMAIL) {
+        if (registrationValidationSource ===
+            constants_1.PasswordlessLoginValidateWhatSources.EMAIL) {
             if (!user.emailVerifiedOnRegistrationAt) {
                 return false;
             }
         }
-        if (registrationValidationSource === constants_1.PasswordlessLoginValidateWhatSources.MOBILE) {
+        if (registrationValidationSource ===
+            constants_1.PasswordlessLoginValidateWhatSources.MOBILE) {
             if (!user.mobileVerifiedOnRegistrationAt) {
                 return false;
             }
@@ -448,7 +466,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     }
     async otp() {
         const now = new Date();
-        const otpExpiry = this.settingService.getConfigValue('otpExpiry');
+        const otpExpiry = this.settingService.getConfigValue("otpExpiry");
         now.setMinutes(now.getMinutes() + otpExpiry);
         return {
             token: (0, crypto_1.randomInt)(100000, 999999).toString(),
@@ -456,7 +474,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         };
     }
     getDummyOtpForUser(user) {
-        const dummyOtp = this.settingService.getConfigValue('dummyOtp');
+        const dummyOtp = this.settingService.getConfigValue("dummyOtp");
         if (!dummyOtp || !user?.username) {
             return undefined;
         }
@@ -471,12 +489,12 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         return allowedUsers.has(username) ? dummyOtp : undefined;
     }
     getDummyOtpUsers() {
-        const rawUsers = this.settingService.getConfigValue('dummyOtpUsers');
-        if (!rawUsers || typeof rawUsers !== 'string') {
+        const rawUsers = this.settingService.getConfigValue("dummyOtpUsers");
+        if (!rawUsers || typeof rawUsers !== "string") {
             return new Set();
         }
         return new Set(rawUsers
-            .split(',')
+            .split(",")
             .map((value) => value.trim().toLowerCase())
             .filter(Boolean));
     }
@@ -489,7 +507,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         await this.rehashPasswordIfRequired(user, signInDto.password);
         await this.resetFailedAttempts(user);
         const tokens = await this.generateTokens(user);
-        await this.userActivityHistoryService.logEvent('login', user);
+        await this.userActivityHistoryService.logEvent("login", user);
         return {
             user: {
                 email: user.email,
@@ -497,15 +515,15 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                 username: user.username,
                 forcePasswordChange: user.forcePasswordChange,
                 id: user.id,
-                roles: user.roles.map((role) => role.name)
+                roles: user.roles.map((role) => role.name),
             },
-            ...tokens
+            ...tokens,
         };
     }
     maskEmail(email) {
         if (!email)
             return null;
-        const [localPart, domain] = email.split('@');
+        const [localPart, domain] = email.split("@");
         if (localPart.length <= 2) {
             return `${localPart[0]}***@${domain}`;
         }
@@ -537,7 +555,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         return this.buildLoginOtpResponse(user, type);
     }
     resolveLoginType(signInDto) {
-        const setting = this.settingService.getConfigValue('passwordlessLoginValidateWhat');
+        const setting = this.settingService.getConfigValue("passwordlessLoginValidateWhat");
         if (setting === constants_1.PasswordlessLoginValidateWhatSources.SELECTABLE) {
             if (signInDto.type !== constants_1.PasswordlessLoginValidateWhatSources.EMAIL &&
                 signInDto.type !== constants_1.PasswordlessLoginValidateWhatSources.MOBILE) {
@@ -590,7 +608,10 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         const maskedIdentifier = type === constants_1.PasswordlessLoginValidateWhatSources.EMAIL
             ? { email: this.maskEmail(user.email) }
             : { mobile: this.maskMobile(user.mobile) };
-        return { message: success_messages_1.SUCCESS_MESSAGES.OTP_SENT_SUCCESS_LOGIN, user: maskedIdentifier };
+        return {
+            message: success_messages_1.SUCCESS_MESSAGES.OTP_SENT_SUCCESS_LOGIN,
+            user: maskedIdentifier,
+        };
     }
     async notifyUserOnOtpInititateLogin(user, loginType) {
         const companyLogo = await this.getCompanyLogo();
@@ -599,25 +620,25 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             return;
         if (loginType === constants_1.PasswordlessLoginValidateWhatSources.EMAIL) {
             const mailService = this.mailServiceFactory.getMailService();
-            mailService.sendEmailUsingTemplate(user.email, 'otp-on-login', {
-                solidAppName: this.settingService.getConfigValue('appTitle'),
-                solidAppWebsiteUrl: this.settingService.getConfigValue('solidAppWebsiteUrl'),
+            mailService.sendEmailUsingTemplate(user.email, "otp-on-login", {
+                solidAppName: this.settingService.getConfigValue("appTitle"),
+                solidAppWebsiteUrl: this.settingService.getConfigValue("solidAppWebsiteUrl"),
                 firstName: user.username,
                 emailVerificationTokenOnLogin: user.emailVerificationTokenOnLogin,
                 fullName: user.fullName ? user.fullName : user.username,
-                companyLogoUrl: companyLogo
-            }, this.settingService.getConfigValue('shouldQueueEmails'), null, null, 'user', user.id);
+                companyLogoUrl: companyLogo,
+            }, this.settingService.getConfigValue("shouldQueueEmails"), null, null, "user", user.id);
         }
         if (loginType === constants_1.PasswordlessLoginValidateWhatSources.MOBILE) {
             const smsService = this.smsFactory.getSmsService();
-            smsService.sendSMSUsingTemplate(user.mobile, 'otp-on-login', {
-                solidAppName: this.settingService.getConfigValue('appTitle'),
+            smsService.sendSMSUsingTemplate(user.mobile, "otp-on-login", {
+                solidAppName: this.settingService.getConfigValue("appTitle"),
                 otp: user.mobileVerificationTokenOnLogin,
                 mobileVerificationTokenOnLogin: user.mobileVerificationTokenOnLogin,
                 firstName: user.username,
                 fullName: user.fullName ? user.fullName : user.username,
-                companyLogoUrl: companyLogo
-            }, this.settingService.getConfigValue('shouldQueueSms'));
+                companyLogoUrl: companyLogo,
+            }, this.settingService.getConfigValue("shouldQueueSms"));
         }
     }
     async otpConfirmLogin(confirmSignInDto) {
@@ -630,7 +651,9 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             type !== constants_1.PasswordlessLoginValidateWhatSources.MOBILE) {
             throw new common_1.BadRequestException(error_messages_1.ERROR_MESSAGES.INVALID_VERIFICATION_TYPE);
         }
-        const user = await this.findUserForLogin(type, identifier, { withRoles: true });
+        const user = await this.findUserForLogin(type, identifier, {
+            withRoles: true,
+        });
         this.checkAccountBlocked(user);
         const dummyOtp = this.getDummyOtpForUser(user);
         if (dummyOtp) {
@@ -647,14 +670,18 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             throw e;
         }
         await this.clearLoginOtp(user, type);
-        await this.userActivityHistoryService.logEvent('login', user);
+        await this.userActivityHistoryService.logEvent("login", user);
         await this.resetFailedAttempts(user);
         return this.buildLoginTokenResponse(user);
     }
     validateLoginOtp(user, otp, type) {
         const isEmail = type === constants_1.PasswordlessLoginValidateWhatSources.EMAIL;
-        const token = isEmail ? user.emailVerificationTokenOnLogin : user.mobileVerificationTokenOnLogin;
-        const expiresAt = isEmail ? user.emailVerificationTokenOnLoginExpiresAt : user.mobileVerificationTokenOnLoginExpiresAt;
+        const token = isEmail
+            ? user.emailVerificationTokenOnLogin
+            : user.mobileVerificationTokenOnLogin;
+        const expiresAt = isEmail
+            ? user.emailVerificationTokenOnLoginExpiresAt
+            : user.mobileVerificationTokenOnLoginExpiresAt;
         if (token !== otp) {
             throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.INVALID_OTP);
         }
@@ -697,7 +724,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     }
     async changePassword(changePasswordDto, activeUser) {
         const user = await this.userRepository.findOne({
-            where: { id: changePasswordDto.id }
+            where: { id: changePasswordDto.id },
         });
         if (!user) {
             throw new common_1.NotFoundException(error_messages_1.ERROR_MESSAGES.USER_NOT_FOUND);
@@ -705,7 +732,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         if (!user.active) {
             throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.USER_INACTIVE);
         }
-        if (user.lastLoginProvider !== 'local') {
+        if (user.lastLoginProvider !== "local") {
             throw new common_1.BadRequestException(error_messages_1.ERROR_MESSAGES.NON_LOCAL_PROVIDER);
         }
         if (!(user.id === activeUser.sub)) {
@@ -729,7 +756,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     }
     async generateForgotPasswordToken(user) {
         const expiryTime = new Date();
-        const forgotPasswordVerificationTokenExpiry = this.settingService.getConfigValue('forgotPasswordVerificationTokenExpiry');
+        const forgotPasswordVerificationTokenExpiry = this.settingService.getConfigValue("forgotPasswordVerificationTokenExpiry");
         const dummyOtp = this.getDummyOtpForUser(user);
         expiryTime.setMinutes(expiryTime.getMinutes() + forgotPasswordVerificationTokenExpiry);
         return {
@@ -746,7 +773,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         if (isValidUser && !user?.active) {
             isValidUser = false;
         }
-        if (isValidUser && user?.lastLoginProvider !== 'local') {
+        if (isValidUser && user?.lastLoginProvider !== "local") {
             isValidUser = false;
         }
         if (isValidUser) {
@@ -757,40 +784,43 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             await this.notifyUserOnForgotPassword(user);
         }
         return {
-            status: 'success',
+            status: "success",
             message: success_messages_1.SUCCESS_MESSAGES.FORGOT_PASSWORD_TOKEN_SENT,
-            error: '',
-            errorCode: '',
+            error: "",
+            errorCode: "",
             data: {
                 user: {
                     email: user?.email,
                 },
-            }
+            },
         };
     }
     async notifyUserOnForgotPassword(user) {
         const companyLogo = await this.getCompanyLogo();
-        const forgotPasswordSendVerificationTokenOn = this.settingService.getConfigValue('forgotPasswordSendVerificationTokenOn');
-        if (forgotPasswordSendVerificationTokenOn == constants_1.ForgotPasswordSendVerificationTokenOn.EMAIL) {
+        const forgotPasswordSendVerificationTokenOn = this.settingService.getConfigValue("forgotPasswordSendVerificationTokenOn");
+        if (forgotPasswordSendVerificationTokenOn ==
+            constants_1.ForgotPasswordSendVerificationTokenOn.EMAIL) {
             const mailService = this.mailServiceFactory.getMailService();
-            mailService.sendEmailUsingTemplate(user.email, 'forgot-password', {
-                solidAppName: this.settingService.getConfigValue('appTitle'),
-                solidAppWebsiteUrl: this.settingService.getConfigValue('solidAppWebsiteUrl'),
+            mailService.sendEmailUsingTemplate(user.email, "forgot-password", {
+                solidAppName: this.settingService.getConfigValue("appTitle"),
+                solidAppWebsiteUrl: this.settingService.getConfigValue("solidAppWebsiteUrl"),
                 firstName: user.username,
                 fullName: user.fullName,
-                passwordResetLink: `${this.settingService.getConfigValue('frontendForgotPasswordPageUrl')}?token=${user.verificationTokenOnForgotPassword}`,
-                companyLogoUrl: companyLogo
-            }, this.settingService.getConfigValue('shouldQueueEmails'), null, null, 'user', user.id);
+                passwordResetLink: `${this.settingService.getConfigValue("frontendForgotPasswordPageUrl")}?token=${user.verificationTokenOnForgotPassword}`,
+                companyLogoUrl: companyLogo,
+            }, this.settingService.getConfigValue("shouldQueueEmails"), null, null, "user", user.id);
         }
-        if (forgotPasswordSendVerificationTokenOn == constants_1.ForgotPasswordSendVerificationTokenOn.MOBILE && user.mobile) {
+        if (forgotPasswordSendVerificationTokenOn ==
+            constants_1.ForgotPasswordSendVerificationTokenOn.MOBILE &&
+            user.mobile) {
             const smsService = this.smsFactory.getSmsService();
-            smsService.sendSMSUsingTemplate(user.mobile, 'forgot-password', {
-                solidAppName: this.settingService.getConfigValue('appTitle'),
+            smsService.sendSMSUsingTemplate(user.mobile, "forgot-password", {
+                solidAppName: this.settingService.getConfigValue("appTitle"),
                 otp: user.verificationTokenOnForgotPassword,
                 verificationTokenOnForgotPassword: user.verificationTokenOnForgotPassword,
                 firstName: user.username,
-                companyLogoUrl: companyLogo
-            }, this.settingService.getConfigValue('shouldQueueSms'));
+                companyLogoUrl: companyLogo,
+            }, this.settingService.getConfigValue("shouldQueueSms"));
         }
     }
     async confirmForgotPassword(confirmForgotPasswordDto) {
@@ -798,7 +828,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             const user = await this.resolveUserByVerificationToken(confirmForgotPasswordDto.verificationToken);
             if (!user)
                 throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.INVALID_CREDENTIALS);
-            if (user.lastLoginProvider !== 'local')
+            if (user.lastLoginProvider !== "local")
                 throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.INVALID_CREDENTIALS);
             if (!user.active)
                 throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.INVALID_CREDENTIALS);
@@ -806,13 +836,15 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                 .createQueryBuilder()
                 .update(user_entity_1.User)
                 .set({
-                forgotPasswordConfirmedAt: () => 'NOW()',
-                verificationTokenOnForgotPassword: () => 'NULL',
-                verificationTokenOnForgotPasswordExpiresAt: () => 'NULL',
+                forgotPasswordConfirmedAt: () => "NOW()",
+                verificationTokenOnForgotPassword: () => "NULL",
+                verificationTokenOnForgotPasswordExpiresAt: () => "NULL",
+            })
+                .where("id = :id", { id: user.id })
+                .andWhere("verificationTokenOnForgotPassword = :token", {
+                token: confirmForgotPasswordDto.verificationToken,
             })
-                .where('id = :id', { id: user.id })
-                .andWhere('verificationTokenOnForgotPassword = :token', { token: confirmForgotPasswordDto.verificationToken })
-                .andWhere('verificationTokenOnForgotPasswordExpiresAt > NOW()')
+                .andWhere("verificationTokenOnForgotPasswordExpiresAt > NOW()")
                 .execute();
             if (affected !== 1) {
                 throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.INVALID_CREDENTIALS);
@@ -820,41 +852,48 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             const pwdHash = await this.hashingService.hash(confirmForgotPasswordDto.password);
             const pwdScheme = this.hashingService.name();
             const pwdSchemeVersion = this.hashingService.currentVersion();
-            await m.getRepository(user_entity_1.User).update({ id: user.id }, { password: pwdHash, passwordScheme: pwdScheme, passwordSchemeVersion: pwdSchemeVersion });
+            await m.getRepository(user_entity_1.User).update({ id: user.id }, {
+                password: pwdHash,
+                passwordScheme: pwdScheme,
+                passwordSchemeVersion: pwdSchemeVersion,
+            });
             await this.notifyUserOnPasswordChanged(user);
             return {
-                status: 'success',
+                status: "success",
                 message: success_messages_1.SUCCESS_MESSAGES.FORGOT_PASSWORD_CONFIRMED,
-                error: '',
-                errorCode: '',
+                error: "",
+                errorCode: "",
                 data: {},
             };
         });
     }
     async notifyUserOnPasswordChanged(user) {
         const companyLogo = await this.getCompanyLogo();
-        const forgotPasswordSendVerificationTokenOn = this.settingService.getConfigValue('forgotPasswordSendVerificationTokenOn');
-        if (forgotPasswordSendVerificationTokenOn == constants_1.ForgotPasswordSendVerificationTokenOn.EMAIL) {
+        const forgotPasswordSendVerificationTokenOn = this.settingService.getConfigValue("forgotPasswordSendVerificationTokenOn");
+        if (forgotPasswordSendVerificationTokenOn ==
+            constants_1.ForgotPasswordSendVerificationTokenOn.EMAIL) {
             const mailService = this.mailServiceFactory.getMailService();
-            mailService.sendEmailUsingTemplate(user.email, 'password-changed', {
-                solidAppName: this.settingService.getConfigValue('appTitle'),
-                solidAppWebsiteUrl: this.settingService.getConfigValue('solidAppWebsiteUrl'),
+            mailService.sendEmailUsingTemplate(user.email, "password-changed", {
+                solidAppName: this.settingService.getConfigValue("appTitle"),
+                solidAppWebsiteUrl: this.settingService.getConfigValue("solidAppWebsiteUrl"),
                 email: user.email,
                 firstName: user.username,
                 fullName: user.fullName,
-                passwordResetLink: `${this.settingService.getConfigValue('frontendForgotPasswordPageUrl')}?token=${user.verificationTokenOnForgotPassword}`,
-                companyLogoUrl: companyLogo
-            }, this.settingService.getConfigValue('shouldQueueEmails'), null, null, 'user', user.id);
+                passwordResetLink: `${this.settingService.getConfigValue("frontendForgotPasswordPageUrl")}?token=${user.verificationTokenOnForgotPassword}`,
+                companyLogoUrl: companyLogo,
+            }, this.settingService.getConfigValue("shouldQueueEmails"), null, null, "user", user.id);
         }
-        if (forgotPasswordSendVerificationTokenOn == constants_1.ForgotPasswordSendVerificationTokenOn.MOBILE && user.mobile) {
+        if (forgotPasswordSendVerificationTokenOn ==
+            constants_1.ForgotPasswordSendVerificationTokenOn.MOBILE &&
+            user.mobile) {
             const smsService = this.smsFactory.getSmsService();
-            smsService.sendSMSUsingTemplate(user.mobile, 'forgot-password', {
-                solidAppName: this.settingService.getConfigValue('appTitle'),
+            smsService.sendSMSUsingTemplate(user.mobile, "forgot-password", {
+                solidAppName: this.settingService.getConfigValue("appTitle"),
                 otp: user.verificationTokenOnForgotPassword,
                 verificationTokenOnForgotPassword: user.verificationTokenOnForgotPassword,
                 firstName: user.username,
-                companyLogoUrl: companyLogo
-            }, this.settingService.getConfigValue('shouldQueueSms'));
+                companyLogoUrl: companyLogo,
+            }, this.settingService.getConfigValue("shouldQueueSms"));
         }
     }
     async generateTokens(user) {
@@ -897,14 +936,14 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                     id: sub,
                 },
                 relations: {
-                    roles: true
-                }
+                    roles: true,
+                },
             });
             if (!user) {
                 throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.SESSION_INVALID);
             }
             const currentRefreshToken = await this.refreshTokenIdsStorage.validateAndRotate(user, refreshTokenDto.refreshToken);
-            await this.userActivityHistoryService.logEvent('tokenRefreshed', user);
+            await this.userActivityHistoryService.logEvent("tokenRefreshed", user);
             return {
                 accessToken: await this.generateAccessToken(user),
                 refreshToken: currentRefreshToken,
@@ -935,7 +974,8 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         try {
             const response = await this.httpService.axiosRef.get(`https://www.googleapis.com/oauth2/v1/userinfo?alt=json&access_token=${user.googleAccessToken}`);
             const userProfile = response.data;
-            if (userProfile.email === user.email && userProfile.id === user.googleId) {
+            if (userProfile.email === user.email &&
+                userProfile.id === user.googleId) {
                 return userProfile;
             }
             else {
@@ -949,11 +989,11 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     async signInUsingGoogle(accessCode) {
         const user = await this.userRepository.findOne({
             where: {
-                accessCode: accessCode
+                accessCode: accessCode,
             },
             relations: {
-                roles: true
-            }
+                roles: true,
+            },
         });
         if (!user) {
             throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.USER_NOT_FOUND);
@@ -974,24 +1014,167 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                 mobile: user.mobile,
                 username: user.username,
                 id: user.id,
-                roles: user.roles.map((role) => role.name)
+                roles: user.roles.map((role) => role.name),
+            },
+            ...tokens,
+        };
+    }
+    async validateUserUsingFacebook(user) {
+        if (!user.facebookAccessToken || !user.facebookId) {
+            throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.USER_NOT_FOUND);
+        }
+        try {
+            const response = await this.httpService.axiosRef.get(`https://graph.facebook.com/me`, {
+                params: { fields: "id,name,email" },
+                headers: {
+                    Authorization: `Bearer ${user.facebookAccessToken}`,
+                },
+            });
+            const userProfile = response.data;
+            if (userProfile.id === user.facebookId &&
+                (!user.email || !userProfile.email || userProfile.email === user.email)) {
+                return userProfile;
+            }
+            else {
+                throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.INVALID_USER_PROFILE);
+            }
+        }
+        catch (error) {
+            if (error instanceof common_1.UnauthorizedException) {
+                throw error;
+            }
+            throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.USER_NOT_FOUND);
+        }
+    }
+    async signInUsingFacebook(accessCode) {
+        const user = await this.userRepository.findOne({
+            where: {
+                accessCode: accessCode,
+            },
+            relations: {
+                roles: true,
+            },
+        });
+        if (!user) {
+            throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.USER_NOT_FOUND);
+        }
+        this.checkAccountBlocked(user);
+        try {
+            await this.validateUserUsingFacebook(user);
+        }
+        catch (e) {
+            await this.incrementFailedAttempts(user);
+            throw e;
+        }
+        await this.resetFailedAttempts(user);
+        const tokens = await this.generateTokens(user);
+        return {
+            user: {
+                email: user.email,
+                mobile: user.mobile,
+                username: user.username,
+                id: user.id,
+                roles: user.roles.map((role) => role.name),
             },
-            ...tokens
+            ...tokens,
+        };
+    }
+    async validateUserUsingMicrosoft(user) {
+        try {
+            const response = await this.httpService.axiosRef.get(`https://graph.microsoft.com/v1.0/me`, {
+                headers: {
+                    Authorization: `Bearer ${user.microsoftAccessToken}`,
+                },
+            });
+            const userProfile = response.data;
+            const profileEmail = userProfile.mail || userProfile.userPrincipalName;
+            if (userProfile.id === user.microsoftId &&
+                (!user.email || profileEmail === user.email)) {
+                return userProfile;
+            }
+            else {
+                throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.INVALID_USER_PROFILE);
+            }
+        }
+        catch (error) {
+            throw new common_1.UnauthorizedException("Microsoft OAuth profile fetch failed");
+        }
+    }
+    async signInUsingMicrosoft(accessCode) {
+        const user = await this.userRepository.findOne({
+            where: {
+                accessCode: accessCode,
+            },
+            relations: {
+                roles: true,
+            },
+        });
+        if (!user) {
+            throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.USER_NOT_FOUND);
+        }
+        this.checkAccountBlocked(user);
+        try {
+            await this.validateUserUsingMicrosoft(user);
+        }
+        catch (e) {
+            await this.incrementFailedAttempts(user);
+            throw e;
+        }
+        await this.resetFailedAttempts(user);
+        const tokens = await this.generateTokens(user);
+        return {
+            user: {
+                email: user.email,
+                mobile: user.mobile,
+                username: user.username,
+                id: user.id,
+                roles: user.roles.map((role) => role.name),
+            },
+            ...tokens,
+        };
+    }
+    async signInUsingApple(accessCode) {
+        const user = await this.userRepository.findOne({
+            where: {
+                accessCode: accessCode,
+            },
+            relations: {
+                roles: true,
+            },
+        });
+        if (!user) {
+            throw new common_1.UnauthorizedException(error_messages_1.ERROR_MESSAGES.USER_NOT_FOUND);
+        }
+        this.checkAccountBlocked(user);
+        await this.resetFailedAttempts(user);
+        const tokens = await this.generateTokens(user);
+        return {
+            user: {
+                email: user.email,
+                mobile: user.mobile,
+                username: user.username,
+                id: user.id,
+                roles: user.roles.map((role) => role.name),
+            },
+            ...tokens,
         };
     }
     async isPasswordlessRegistrationEnabled() {
-        return this.settingService.getConfigValue('passwordLessAuth');
+        return this.settingService.getConfigValue("passwordLessAuth");
     }
     checkAccountBlocked(user) {
-        const maxFailedAttempts = this.settingService.getConfigValue('maxFailedLoginAttempts');
-        if (maxFailedAttempts > 0 && user.failedLoginAttempts >= maxFailedAttempts) {
+        const maxFailedAttempts = this.settingService.getConfigValue("maxFailedLoginAttempts");
+        if (maxFailedAttempts > 0 &&
+            user.failedLoginAttempts >= maxFailedAttempts) {
             throw new common_1.ForbiddenException(error_messages_1.ERROR_MESSAGES.ACCOUNT_BLOCKED);
         }
     }
     async incrementFailedAttempts(user) {
         const nextFailedAttempts = (user.failedLoginAttempts ?? 0) + 1;
         user.failedLoginAttempts = nextFailedAttempts;
-        await this.userRepository.update(user.id, { failedLoginAttempts: nextFailedAttempts });
+        await this.userRepository.update(user.id, {
+            failedLoginAttempts: nextFailedAttempts,
+        });
     }
     async resetFailedAttempts(user) {
         if (user.failedLoginAttempts === 0)
@@ -1010,13 +1193,14 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             const user = await this.userRepository.findOne({
                 where: {
                     id: userId,
-                }
+                },
             });
-            await this.userActivityHistoryService.logEvent('logout', user);
+            await this.userActivityHistoryService.logEvent("logout", user);
             return { message: success_messages_1.SUCCESS_MESSAGES.LOGOUT_SUCCESS };
         }
         catch (err) {
-            throw err instanceof common_1.UnauthorizedException || err instanceof common_1.InternalServerErrorException
+            throw err instanceof common_1.UnauthorizedException ||
+                err instanceof common_1.InternalServerErrorException
                 ? err
                 : new common_1.InternalServerErrorException(error_messages_1.ERROR_MESSAGES.LOGOUT_FAILED);
         }
@@ -1035,8 +1219,8 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                 id: activeUser.sub,
             },
             relations: {
-                roles: true
-            }
+                roles: true,
+            },
         });
         const refreshTokenState = await this.refreshTokenIdsStorage.getCurrentRefreshTokenState(user.id);
         const response = {
@@ -1045,7 +1229,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
                 mobile: user.mobile,
                 username: user.username,
                 id: user.id,
-                roles: user.roles.map((role) => role.name)
+                roles: user.roles.map((role) => role.name),
             },
             refreshToken: refreshTokenState.currentRefreshToken,
         };
@@ -1054,21 +1238,33 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
     async generateSsoCode(activeUser, rawAccessToken) {
         const refreshTokenState = await this.refreshTokenIdsStorage.getCurrentRefreshTokenState(activeUser.sub);
         if (!refreshTokenState?.currentRefreshToken) {
-            throw new common_1.UnauthorizedException('No active session found');
+            throw new common_1.UnauthorizedException("No active session found");
         }
         const ssoCode = await this.ssoCodeStorage.generateCode(activeUser.sub, rawAccessToken, refreshTokenState.currentRefreshToken);
         return { ssoCode };
     }
     async exchangeSsoCode(code) {
         const { userId, accessToken, refreshToken } = await this.ssoCodeStorage.consumeCode(code);
-        const user = await this.userRepository.findOne({ where: { id: userId }, relations: { roles: true } });
+        const user = await this.userRepository.findOne({
+            where: { id: userId },
+            relations: { roles: true },
+        });
         if (!user) {
-            throw new common_1.UnauthorizedException('User not found');
+            throw new common_1.UnauthorizedException("User not found");
         }
         return { accessToken, refreshToken, user: this.buildUserPayload(user) };
     }
 };
 exports.AuthenticationService = AuthenticationService;
+AuthenticationService.SIGNUP_DTO_KEYS = new Set([
+    "username",
+    "email",
+    "password",
+    "fullName",
+    "mobile",
+    "roles",
+    "forcePasswordChange",
+]);
 exports.AuthenticationService = AuthenticationService = AuthenticationService_1 = __decorate([
     (0, common_1.Injectable)(),
     __param(13, (0, typeorm_1.InjectDataSource)()),
@@ -1085,7 +1281,8 @@ exports.AuthenticationService = AuthenticationService = AuthenticationService_1
         role_metadata_service_1.RoleMetadataService,
         user_activity_history_service_1.UserActivityHistoryService,
         sso_code_storage_service_1.SsoCodeStorageService,
-        typeorm_2.DataSource])
+        typeorm_2.DataSource,
+        solid_registry_1.SolidRegistry])
 ], AuthenticationService);
 function parseUniqueConstraintError(detail) {
     const match = detail.match(/Key \(([^)]+)\)=\(([^)]+)\) already exists\./);
@@ -1093,9 +1290,9 @@ function parseUniqueConstraintError(detail) {
         const field = match[1];
         const value = match[2];
         const fieldMap = {
-            username: 'username',
-            email: 'email address',
-            full_name_user_key: 'full name',
+            username: "username",
+            email: "email address",
+            full_name_user_key: "full name",
         };
         const friendlyField = fieldMap[field] || field;
         return `A user with ${friendlyField} "${value}" already exists.`;