@taon-dev/session 21.0.216 → 21.0.240

package/lib-esm/lib/taon-session/taon-session.entity.d.ts

@@ -0,0 +1,21 @@
+import { TaonBaseAbstractEntity } from 'taon/lib-esm';
+import { TaonSessionUserEntity } from '../taon-session-user/taon-session-user.entity';
+import { TaonSessionIdentityProvider } from '../taon-session-user/taon-session-user.models';
+export declare class TaonSessionEntity extends TaonBaseAbstractEntity<TaonSessionEntity> {
+    userId: number;
+    identityId?: number;
+    authenticationProvider?: TaonSessionIdentityProvider;
+    user: TaonSessionUserEntity;
+    /**
+     * Store HASH of session token, not raw token.
+     */
+    tokenHash: string;
+    userAgent?: string;
+    ip?: string;
+    deviceName?: string;
+    lastActivityAt?: Date;
+    expiresAt: Date;
+    revokedAt?: Date;
+    revokeReason?: string;
+    createdAt: Date;
+}

package/lib-esm/lib/taon-session/taon-session.entity.js

@@ -0,0 +1,145 @@
+//#region imports
+import { Column, CreateDateColumn, Index, JoinColumn, ManyToOne, TaonBaseAbstractEntity, TaonEntity, } from 'taon/lib-esm';
+import { TaonSessionUserEntity } from '../taon-session-user/taon-session-user.entity';
+import { TaonSessionIdentityProvider } from '../taon-session-user/taon-session-user.models';
+//#endregion
+let TaonSessionEntity = class TaonSessionEntity extends TaonBaseAbstractEntity {
+    //#region @websql
+    //#endregion
+    userId;
+    //#region @websql
+    //#endregion
+    identityId;
+    //#region @websql
+    //#endregion
+    authenticationProvider;
+    //#region @websql
+    //#endregion
+    user;
+    /**
+     * Store HASH of session token, not raw token.
+     */
+    //#region @websql
+    //#endregion
+    tokenHash;
+    //#region @websql
+    //#endregion
+    userAgent;
+    //#region @websql
+    //#endregion
+    ip;
+    //#region @websql
+    //#endregion
+    deviceName;
+    //#region @websql
+    //#endregion
+    lastActivityAt;
+    //#region @websql
+    //#endregion
+    expiresAt;
+    //#region @websql
+    //#endregion
+    revokedAt;
+    //#region @websql
+    //#endregion
+    revokeReason;
+    //#region @websql
+    //#endregion
+    createdAt;
+};
+__decorate([
+    Column({ type: 'int' })
+    //#endregion
+    ,
+    __metadata("design:type", Number)
+], TaonSessionEntity.prototype, "userId", void 0);
+__decorate([
+    Column({ type: 'int', nullable: true })
+    //#endregion
+    ,
+    __metadata("design:type", Number)
+], TaonSessionEntity.prototype, "identityId", void 0);
+__decorate([
+    Column({ type: 'varchar', length: 50, nullable: true })
+    //#endregion
+    ,
+    __metadata("design:type", String)
+], TaonSessionEntity.prototype, "authenticationProvider", void 0);
+__decorate([
+    ManyToOne(() => TaonSessionUserEntity, user => user.sessions, {
+        onDelete: 'CASCADE',
+    })
+    //#endregion
+    //#region @websql
+    ,
+    JoinColumn({ name: 'userId' })
+    //#endregion
+    ,
+    __metadata("design:type", TaonSessionUserEntity)
+], TaonSessionEntity.prototype, "user", void 0);
+__decorate([
+    Index({ unique: true })
+    //#endregion
+    //#region @websql
+    ,
+    Column({ nullable: true, type: 'varchar' })
+    //#endregion
+    ,
+    __metadata("design:type", String)
+], TaonSessionEntity.prototype, "tokenHash", void 0);
+__decorate([
+    Column({ nullable: true, type: 'varchar', length: 4096 })
+    //#endregion
+    ,
+    __metadata("design:type", String)
+], TaonSessionEntity.prototype, "userAgent", void 0);
+__decorate([
+    Column({ nullable: true, type: 'varchar' })
+    //#endregion
+    ,
+    __metadata("design:type", String)
+], TaonSessionEntity.prototype, "ip", void 0);
+__decorate([
+    Column({ nullable: true, type: 'varchar' })
+    //#endregion
+    ,
+    __metadata("design:type", String)
+], TaonSessionEntity.prototype, "deviceName", void 0);
+__decorate([
+    Column({ type: 'datetime', nullable: true })
+    //#endregion
+    ,
+    __metadata("design:type", Date)
+], TaonSessionEntity.prototype, "lastActivityAt", void 0);
+__decorate([
+    Column({ nullable: true, type: 'datetime' })
+    //#endregion
+    ,
+    __metadata("design:type", Date)
+], TaonSessionEntity.prototype, "expiresAt", void 0);
+__decorate([
+    Column({ type: 'datetime', nullable: true })
+    //#endregion
+    ,
+    __metadata("design:type", Date)
+], TaonSessionEntity.prototype, "revokedAt", void 0);
+__decorate([
+    Column({ nullable: true, type: 'varchar' })
+    //#endregion
+    ,
+    __metadata("design:type", String)
+], TaonSessionEntity.prototype, "revokeReason", void 0);
+__decorate([
+    CreateDateColumn({ nullable: true })
+    //#endregion
+    ,
+    __metadata("design:type", Date)
+], TaonSessionEntity.prototype, "createdAt", void 0);
+TaonSessionEntity = __decorate([
+    TaonEntity({
+        className: 'TaonSessionEntity',
+        createTable: true,
+    })
+], TaonSessionEntity);
+export { TaonSessionEntity };
+//# sourceMappingURL=taon-session.entity.js.map

package/lib-esm/lib/taon-session/taon-session.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taon-session.entity.js","sourceRoot":"","sources":[""],"names":[],"mappings":"AAAA,iBAAiB;AACjB,OAAO,EACL,MAAM,EACN,gBAAgB,EAEhB,KAAK,EACL,UAAU,EACV,SAAS,EAGT,sBAAsB,EACtB,UAAU,GACX,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACtF,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAE5F,YAAY;AAML,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,sBAAyC;IAC9E,iBAAiB;IAGjB,AADA,YAAY;IACZ,MAAM,CAAU;IAEhB,iBAAiB;IAGjB,AADA,YAAY;IACZ,UAAU,CAAU;IAEpB,iBAAiB;IAGjB,AADA,YAAY;IACZ,sBAAsB,CAA+B;IAErD,iBAAiB;IASjB,AADA,YAAY;IACZ,IAAI,CAAyB;IAE7B;;OAEG;IAEH,iBAAiB;IAOjB,AADA,YAAY;IACZ,SAAS,CAAU;IAEnB,iBAAiB;IAGjB,AADA,YAAY;IACZ,SAAS,CAAU;IAEnB,iBAAiB;IAGjB,AADA,YAAY;IACZ,EAAE,CAAU;IAEZ,iBAAiB;IAGjB,AADA,YAAY;IACZ,UAAU,CAAU;IAEpB,iBAAiB;IAGjB,AADA,YAAY;IACZ,cAAc,CAAQ;IAEtB,iBAAiB;IAGjB,AADA,YAAY;IACZ,SAAS,CAAQ;IAEjB,iBAAiB;IAGjB,AADA,YAAY;IACZ,SAAS,CAAQ;IAEjB,iBAAiB;IAGjB,AADA,YAAY;IACZ,YAAY,CAAU;IAEtB,iBAAiB;IAGjB,AADA,YAAY;IACZ,SAAS,CAAQ;CAClB,CAAA;AA3EC;IAFC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACxB,YAAY;;;iDACI;AAKhB;IAFC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,YAAY;;;qDACQ;AAKpB;IAFC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxD,YAAY;;;iEACyC;AAWrD;IARC,SAAS,CAAC,GAAG,EAAE,CAAC,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;QAC7D,QAAQ,EAAE,SAAS;KACpB,CAAC;IACF,YAAY;IAEZ,iBAAiB;;IAChB,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC/B,YAAY;;8BACL,qBAAqB;+CAAC;AAa7B;IANC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxB,YAAY;IAEZ,iBAAiB;;IAChB,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5C,YAAY;;;oDACO;AAKnB;IAFC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1D,YAAY;;;oDACO;AAKnB;IAFC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5C,YAAY;;;6CACA;AAKZ;IAFC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5C,YAAY;;;qDACQ;AAKpB;IAFC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7C,YAAY;;8BACK,IAAI;yDAAC;AAKtB;IAFC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC7C,YAAY;;8BACA,IAAI;oDAAC;AAKjB;IAFC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC7C,YAAY;;8BACA,IAAI;oDAAC;AAKjB;IAFC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5C,YAAY;;;uDACU;AAKtB;IAFC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACrC,YAAY;;8BACA,IAAI;oDAAC;AA9EN,iBAAiB;IAJ7B,UAAU,CAAC;QACV,SAAS,EAAE,mBAAmB;QAC9B,WAAW,EAAE,IAAI;KAClB,CAAC;GACW,iBAAiB,CA+E7B"}

package/lib-esm/lib/taon-session/{taon-session-kv.repository.d.ts → taon-session.kv.repository.d.ts}

@@ -1,10 +1,14 @@
 import type express from 'express';
 import { TaonBaseKvRepository } from 'taon/lib-esm';
 import { TaonSessionProvider } from './taon-session.provider';
-export declare class TaonSessionKvRepository extends TaonBaseKvRepository {
+export declare class TaonSessionKvRepository extends TaonBaseKvRepository<Record<string, {
+    userId: number;
+    expiresAt: number;
+    sessionId?: number;
+}>> {
     taonSessionProvider: TaonSessionProvider;
-    createAccessToken(userId: string): string;
-    createRefreshToken(userId: string): string;
+    createAccessToken(userId: number, sessionId?: number): Promise<string>;
+    createRefreshToken(userId: number, sessionId?: number): Promise<string>;
     setAuthCookies(res: express.Response, accessToken: string, refreshToken: string): void;
     clearAuthCookies(res: express.Response): void;
     getTokenFromRequest(req: express.Request): string | null;

package/lib-esm/lib/taon-session/{taon-session-kv.repository.js → taon-session.kv.repository.js}

@@ -1,56 +1,64 @@
 //#region imports
-import * as jwt from 'jsonwebtoken'; // @backend
 import { TaonBaseKvRepository, TaonRepository } from 'taon/lib-esm';
+import { UtilsJwt } from 'tnp-core/lib-esm';
 import { TaonSessionProvider } from './taon-session.provider';
 //#endregion
 let TaonSessionKvRepository = class TaonSessionKvRepository extends TaonBaseKvRepository {
     taonSessionProvider = this.injectProvider(TaonSessionProvider);
-    createAccessToken(userId) {
-        //#region @backendFunc
-        return jwt.sign({ userId }, this.taonSessionProvider.ACCESS_TOKEN_SECRET, {
-            expiresIn: this.taonSessionProvider.ACCESS_TOKEN_EXPIRES,
+    //#region create access token
+    async createAccessToken(userId, sessionId) {
+        //#region @websqlFunc
+        return await UtilsJwt.sign({ userId, sessionId }, this.taonSessionProvider.cookies.ACCESS_TOKEN_SECRET, {
+            expiresIn: this.taonSessionProvider.cookies.ACCESS_TOKEN_EXPIRES,
         });
         //#endregion
     }
-    createRefreshToken(userId) {
-        //#region @backendFunc
-        const crypto = require('crypto');
+    //#endregion
+    //#region create refresh token
+    async createRefreshToken(userId, sessionId) {
+        //#region @websqlFunc
         const rtId = crypto.randomUUID();
         const expiresAt = Date.now() +
-            this.taonSessionProvider.REFRESH_TOKEN_EXPIRES_SECONDS * 1000;
-        this.set(rtId, { userId, expiresAt });
-        const token = jwt.sign({ rtId }, this.taonSessionProvider.REFRESH_TOKEN_SECRET, {
-            expiresIn: this.taonSessionProvider.REFRESH_TOKEN_EXPIRES_SECONDS,
+            this.taonSessionProvider.cookies.REFRESH_TOKEN_EXPIRES_SECONDS * 1000;
+        await this.set(rtId, { userId, expiresAt, sessionId });
+        const token = await UtilsJwt.sign({ rtId }, this.taonSessionProvider.cookies.REFRESH_TOKEN_SECRET, {
+            expiresIn: this.taonSessionProvider.cookies.REFRESH_TOKEN_EXPIRES_SECONDS,
         });
         return token;
         //#endregion
     }
+    //#endregion
+    //#region set auth cookies
     setAuthCookies(res, accessToken, refreshToken) {
-        //#region @backendFunc
+        //#region @websqlFunc
         res.cookie('accessToken', accessToken, {
-            httpOnly: true,
-            secure: false, // set true in production (HTTPS)
+            httpOnly: this.taonSessionProvider.cookies.httpOnly,
+            secure: this.taonSessionProvider.cookies.secure, // set true in production (HTTPS)
             sameSite: 'lax',
             path: '/',
             maxAge: 1000 * 60 * 15,
         });
         res.cookie('refreshToken', refreshToken, {
-            httpOnly: true,
-            secure: false,
+            httpOnly: this.taonSessionProvider.cookies.httpOnly,
+            secure: this.taonSessionProvider.cookies.secure,
             sameSite: 'strict',
             path: '/refresh',
-            maxAge: 1000 * this.taonSessionProvider.REFRESH_TOKEN_EXPIRES_SECONDS,
+            maxAge: 1000 * this.taonSessionProvider.cookies.REFRESH_TOKEN_EXPIRES_SECONDS,
         });
         //#endregion
     }
+    //#endregion
+    //#region clear auth cookies
     clearAuthCookies(res) {
-        //#region @backendFunc
+        //#region @websqlFunc
         res.cookie('accessToken', '', { maxAge: 0 });
         res.cookie('refreshToken', '', { maxAge: 0 });
         //#endregion
     }
+    //#endregion
+    //#region get token from request
     getTokenFromRequest(req) {
-        //#region @backendFunc
+        //#region @websqlFunc
         const cookieToken = req.cookies?.accessToken;
         const authHeader = req.headers['authorization'];
         const headerToken = authHeader && authHeader.startsWith('Bearer ')
@@ -66,4 +74,4 @@ TaonSessionKvRepository = __decorate([
     })
 ], TaonSessionKvRepository);
 export { TaonSessionKvRepository };
-//# sourceMappingURL=taon-session-kv.repository.js.map
+//# sourceMappingURL=taon-session.kv.repository.js.map

package/lib-esm/lib/taon-session/taon-session.kv.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taon-session.kv.repository.js","sourceRoot":"","sources":[""],"names":[],"mappings":"AAAA,iBAAiB;AAGjB,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,YAAY;AAKL,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,oBAS5C;IACC,mBAAmB,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;IAE/D,6BAA6B;IACtB,KAAK,CAAC,iBAAiB,CAC5B,MAAc,EACd,SAAkB;QAElB,qBAAqB;QACrB,OAAO,MAAM,QAAQ,CAAC,IAAI,CACxB,EAAE,MAAM,EAAE,SAAS,EAAE,EACrB,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,mBAAmB,EACpD;YACE,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,oBAAoB;SACjE,CACF,CAAC;QACF,YAAY;IACd,CAAC;IACD,YAAY;IAEZ,8BAA8B;IACvB,KAAK,CAAC,kBAAkB,CAC7B,MAAc,EACd,SAAkB;QAElB,qBAAqB;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEjC,MAAM,SAAS,GACb,IAAI,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC;QAExE,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAEvD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAC/B,EAAE,IAAI,EAAE,EACR,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,oBAAoB,EACrD;YACE,SAAS,EACP,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,6BAA6B;SACjE,CACF,CAAC;QAEF,OAAO,KAAK,CAAC;QACb,YAAY;IACd,CAAC;IACD,YAAY;IAEZ,0BAA0B;IACnB,cAAc,CACnB,GAAqB,EACrB,WAAmB,EACnB,YAAoB;QAEpB,qBAAqB;QACrB,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE;YACrC,QAAQ,EAAE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ;YACnD,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,iCAAiC;YAClF,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI,GAAG,EAAE,GAAG,EAAE;SACvB,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,YAAY,EAAE;YACvC,QAAQ,EAAE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,QAAQ;YACnD,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM;YAC/C,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,UAAU;YAChB,MAAM,EACJ,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,6BAA6B;SACxE,CAAC,CAAC;QACH,YAAY;IACd,CAAC;IACD,YAAY;IAEZ,4BAA4B;IACrB,gBAAgB,CAAC,GAAqB;QAC3C,qBAAqB;QACrB,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,YAAY;IACd,CAAC;IACD,YAAY;IAEZ,gCAAgC;IACzB,mBAAmB,CAAC,GAAoB;QAC7C,qBAAqB;QACrB,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC;QAE7C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,WAAW,GACf,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;YAC5C,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,IAAI,CAAC;QAEX,OAAO,WAAW,IAAI,WAAW,IAAI,IAAI,CAAC;QAC1C,YAAY;IACd,CAAC;CAEF,CAAA;AA5GY,uBAAuB;IAHnC,cAAc,CAAC;QACd,SAAS,EAAE,yBAAyB;KACrC,CAAC;GACW,uBAAuB,CA4GnC"}

package/lib-esm/lib/taon-session/taon-session.middleware.d.ts

@@ -1,8 +1,6 @@
-import { TaonAdditionalMiddlewareMethodInfo, TaonBaseMiddleware, TaonServerMiddlewareInterceptOptions } from 'taon/lib-esm';
-import { TaonSessionKvRepository } from './taon-session-kv.repository';
-import { TaonSessionProvider } from './taon-session.provider';
+import { TaonBaseMiddleware, TaonServerMiddlewareInterceptOptions } from 'taon/lib-esm';
+import { TaonSessionRepository } from './taon-session.repository';
 export declare class TaonSessionMiddleware extends TaonBaseMiddleware {
-    taonSessionKvRepository: TaonSessionKvRepository;
-    taonSessionProvider: TaonSessionProvider;
-    interceptServerMethod({ req, res, next }: TaonServerMiddlewareInterceptOptions, { methodName, expressPath, httpRequestType, }: TaonAdditionalMiddlewareMethodInfo): Promise<void> | void;
+    taonSessionRepository: TaonSessionRepository;
+    interceptServerMethod(data: TaonServerMiddlewareInterceptOptions): Promise<void>;
 }

package/lib-esm/lib/taon-session/taon-session.middleware.js

@@ -1,28 +1,13 @@
 //#region imports
-import * as jwt from 'jsonwebtoken'; // @backend
 import { TaonBaseMiddleware, TaonMiddleware, } from 'taon/lib-esm';
-import { TaonSessionKvRepository } from './taon-session-kv.repository';
-import { TaonSessionProvider } from './taon-session.provider';
+import { TaonSessionRepository } from './taon-session.repository';
 //#endregion
 let TaonSessionMiddleware = class TaonSessionMiddleware extends TaonBaseMiddleware {
-    taonSessionKvRepository = this.injectKvRepository(TaonSessionKvRepository);
-    taonSessionProvider = this.injectProvider(TaonSessionProvider);
-    interceptServerMethod({ req, res, next }, { methodName, expressPath, httpRequestType, }) {
+    taonSessionRepository = this.injectCustomRepo(TaonSessionRepository);
+    //#region intercept server method
+    async interceptServerMethod(data) {
         //#region @backend
-        const token = this.taonSessionKvRepository.getTokenFromRequest(req);
-        if (!token) {
-            res.status(401).json({ message: 'No token' });
-            return;
-        }
-        try {
-            const payload = jwt.verify(token, this.taonSessionProvider.ACCESS_TOKEN_SECRET);
-            req.userId = payload.userId;
-            next();
-        }
-        catch (err) {
-            console.log(err);
-            res.status(401).json({ message: 'Invalid token' });
-        }
+        await this.taonSessionRepository.throwIfNotAuthenticated(data);
         //#endregion
     }
 };

package/lib-esm/lib/taon-session/taon-session.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"taon-session.middleware.js","sourceRoot":"","sources":[""],"names":[],"mappings":"AAAA,iBAAiB;AACjB,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC,CAAC,WAAW;AAChD,OAAO,EAGL,kBAAkB,EAClB,cAAc,GAEf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,YAAY;AAKL,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,kBAAkB;IAC3D,uBAAuB,GAAG,IAAI,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IAE3E,mBAAmB,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;IAE/D,qBAAqB,CACnB,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAwC,EACxD,EACE,UAAU,EACV,WAAW,EACX,eAAe,GACoB;QAErC,kBAAkB;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAEpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CACxB,KAAK,EACL,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,CACtC,CAAC;YACR,GAAW,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACrC,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,YAAY;IACd,CAAC;CACF,CAAA;AAlCY,qBAAqB;IAHjC,cAAc,CAAC;QACd,SAAS,EAAE,uBAAuB;KACnC,CAAC;GACW,qBAAqB,CAkCjC"}
+{"version":3,"file":"taon-session.middleware.js","sourceRoot":"","sources":[""],"names":[],"mappings":"AAAA,iBAAiB;AACjB,OAAO,EAGL,kBAAkB,EAClB,cAAc,GAEf,MAAM,cAAc,CAAC;AAKtB,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,YAAY;AAKL,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,kBAAkB;IAC3D,qBAAqB,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;IAErE,iCAAiC;IACjC,KAAK,CAAC,qBAAqB,CACzB,IAA0C;QAE1C,kBAAkB;QAClB,MAAM,IAAI,CAAC,qBAAqB,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC/D,YAAY;IACd,CAAC;CAEF,CAAA;AAZY,qBAAqB;IAHjC,cAAc,CAAC;QACd,SAAS,EAAE,uBAAuB;KACnC,CAAC;GACW,qBAAqB,CAYjC"}

package/lib-esm/lib/taon-session/taon-session.models.d.ts

@@ -1,8 +1,33 @@
-export declare namespace TaonSession {
-    const DEFAULT_PASSWORD = "1234";
-    const DEFAULT_EMAIL = "test@test.com";
-    interface TaonLoginData {
-        email?: string;
-        password?: string;
-    }
+export interface TaonLoginData {
+    email?: string;
+    password?: string;
+    googleCode?: string;
 }
+export interface GoogleCodeResponse {
+    code?: string;
+    error?: string;
+    error_description?: string;
+}
+export declare enum TaonSessionState {
+    LOADING_INITIAL_AUTH_INFO = "LOADING_INITIAL_AUTH_INFO",
+    LOGIN_OR_REGISTER = "LOGIN_OR_REGISTER",
+    ENTER_PASSWORD = "ENTER_PASSWORD",
+    ENTER_REGISTRATION_PASSWORDS = "ENTER_REGISTRATION_PASSWORDS",
+    LOADING_AUTH = "LOADING_AUTH",
+    LOADING_CHECK_USER_EMAIL_EXISTS = "LOADING_CHECK_USER_EMAIL_EXISTS",
+    LOADING_CREATING_USER = "LOADING_CREATING_USER",
+    LOADING_LOGOUT_INFO = "LOADING_LOGOUT_INFO",
+    TWO_FA_EMAIL = "TWO_FA_EMAIL",
+    TWO_FA_SMS = "TWO_FA_SMS",
+    TWO_FA_AUTHENTICATOR = "TWO_FA_AUTHENTICATOR",
+    LOGIN_SUCCESS = "LOGIN_SUCCESS",
+    PROFILE_INFO = "PROFILE_INFO",
+    PASSWORD_CHANGE = "PASSWORD_CHANGE",
+    AVATAR_CHANGE = "AVATAR_CHANGE"
+}
+export declare enum TaonLoginErrors {
+    INVALID_PASSWORD = "INVALID_PASSWORD",
+    INVALID_SOCIAL_LOGIN = "INVALID_SOCIAL_LOGIN",
+    PASSWORDS_DO_NOT_MATCH = "PASSWORDS_DO_NOT_MATCH"
+}
+export declare const TaonErorsMap: Map<TaonLoginErrors, string>;

package/lib-esm/lib/taon-session/taon-session.models.js

@@ -1,6 +1,38 @@
-export var TaonSession;
-(function (TaonSession) {
-    TaonSession.DEFAULT_PASSWORD = '1234';
-    TaonSession.DEFAULT_EMAIL = 'test@test.com';
-})(TaonSession || (TaonSession = {}));
+import { Translation } from '@taon-dev/i18n/lib-esm';
+const t = Translation.for('src/lib/taon-session/taon-session.models.ts', {});
+export var TaonSessionState;
+(function (TaonSessionState) {
+    TaonSessionState["LOADING_INITIAL_AUTH_INFO"] = "LOADING_INITIAL_AUTH_INFO";
+    TaonSessionState["LOGIN_OR_REGISTER"] = "LOGIN_OR_REGISTER";
+    TaonSessionState["ENTER_PASSWORD"] = "ENTER_PASSWORD";
+    TaonSessionState["ENTER_REGISTRATION_PASSWORDS"] = "ENTER_REGISTRATION_PASSWORDS";
+    TaonSessionState["LOADING_AUTH"] = "LOADING_AUTH";
+    TaonSessionState["LOADING_CHECK_USER_EMAIL_EXISTS"] = "LOADING_CHECK_USER_EMAIL_EXISTS";
+    TaonSessionState["LOADING_CREATING_USER"] = "LOADING_CREATING_USER";
+    TaonSessionState["LOADING_LOGOUT_INFO"] = "LOADING_LOGOUT_INFO";
+    TaonSessionState["TWO_FA_EMAIL"] = "TWO_FA_EMAIL";
+    TaonSessionState["TWO_FA_SMS"] = "TWO_FA_SMS";
+    TaonSessionState["TWO_FA_AUTHENTICATOR"] = "TWO_FA_AUTHENTICATOR";
+    TaonSessionState["LOGIN_SUCCESS"] = "LOGIN_SUCCESS";
+    TaonSessionState["PROFILE_INFO"] = "PROFILE_INFO";
+    TaonSessionState["PASSWORD_CHANGE"] = "PASSWORD_CHANGE";
+    TaonSessionState["AVATAR_CHANGE"] = "AVATAR_CHANGE";
+})(TaonSessionState || (TaonSessionState = {}));
+export var TaonLoginErrors;
+(function (TaonLoginErrors) {
+    TaonLoginErrors["INVALID_PASSWORD"] = "INVALID_PASSWORD";
+    TaonLoginErrors["INVALID_SOCIAL_LOGIN"] = "INVALID_SOCIAL_LOGIN";
+    TaonLoginErrors["PASSWORDS_DO_NOT_MATCH"] = "PASSWORDS_DO_NOT_MATCH";
+})(TaonLoginErrors || (TaonLoginErrors = {}));
+export const TaonErorsMap = new Map([
+    [TaonLoginErrors.INVALID_PASSWORD, t.gettext('Invalid Password')],
+    [
+        TaonLoginErrors.INVALID_SOCIAL_LOGIN,
+        t.gettext('Not able to login with social account'),
+    ],
+    [
+        TaonLoginErrors.PASSWORDS_DO_NOT_MATCH,
+        t.gettext('Passwords do not match each other'),
+    ],
+]);
 //# sourceMappingURL=taon-session.models.js.map

package/lib-esm/lib/taon-session/taon-session.models.js.map

@@ -1 +1 @@
-{"version":3,"file":"taon-session.models.js","sourceRoot":"","sources":[""],"names":[],"mappings":"AAAA,MAAM,KAAW,WAAW,CAO3B;AAPD,WAAiB,WAAW;IACb,4BAAgB,GAAG,MAAM,CAAC;IAC1B,yBAAa,GAAG,eAAe,CAAC;AAK/C,CAAC,EAPgB,WAAW,KAAX,WAAW,QAO3B"}
+{"version":3,"file":"taon-session.models.js","sourceRoot":"","sources":[""],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,6CAA6C,EAAE,EAAS,CAAC,CAAC;AAcpF,MAAM,CAAN,IAAY,gBAgBX;AAhBD,WAAY,gBAAgB;IAC1B,2EAAuD,CAAA;IACvD,2DAAuC,CAAA;IACvC,qDAAiC,CAAA;IACjC,iFAA6D,CAAA;IAC7D,iDAA6B,CAAA;IAC7B,uFAAmE,CAAA;IACnE,mEAA+C,CAAA;IAC/C,+DAA2C,CAAA;IAC3C,iDAA6B,CAAA;IAC7B,6CAAyB,CAAA;IACzB,iEAA6C,CAAA;IAC7C,mDAA+B,CAAA;IAC/B,iDAA6B,CAAA;IAC7B,uDAAmC,CAAA;IACnC,mDAA+B,CAAA;AACjC,CAAC,EAhBW,gBAAgB,KAAhB,gBAAgB,QAgB3B;AAED,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,wDAAqC,CAAA;IACrC,gEAA6C,CAAA;IAC7C,oEAAiD,CAAA;AACnD,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAClC,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjE;QACE,eAAe,CAAC,oBAAoB;QACpC,CAAC,CAAC,OAAO,CAAC,uCAAuC,CAAC;KACnD;IACD;QACE,eAAe,CAAC,sBAAsB;QACtC,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC;KAC/C;CACF,CAAC,CAAC"}

package/lib-esm/lib/taon-session/taon-session.provider.d.ts

@@ -1,7 +1,169 @@
-import { TaonBaseProvider } from 'taon/lib-esm';
-export declare class TaonSessionProvider extends TaonBaseProvider {
+import { TaonBaseClass, TaonBaseProvider } from 'taon/lib-esm';
+import { CoreModels } from 'tnp-core/lib-esm';
+export declare class TaonSessionCookiesConfig extends TaonBaseClass {
     ACCESS_TOKEN_SECRET: string;
     REFRESH_TOKEN_SECRET: string;
     ACCESS_TOKEN_EXPIRES: string;
     REFRESH_TOKEN_EXPIRES_SECONDS: number;
+    accessTokenCookieName: string;
+    refreshTokenCookieName: string;
+    sameSite: 'lax' | 'strict' | 'none';
+    secure: boolean;
+    httpOnly: boolean;
+    constructor();
+}
+export declare class TaonSessionSocialLoginConfig extends TaonBaseClass {
+    google: {
+        enabled?: boolean;
+        googleClientId?: string;
+        googleSecret?: string;
+    };
+    facebook: {
+        enabled?: boolean;
+        facebookClientId?: string;
+    };
+    microsoft: {
+        enabled?: boolean;
+        microsoftClientId?: string;
+    };
+    apple: {
+        enabled?: boolean;
+        appleClientId?: string;
+    };
+    github: {
+        enabled?: boolean;
+        githubClientId?: string;
+    };
+    constructor();
+    get isAnySocialLoginEnabled(): boolean;
+}
+export declare class TaonSessionPasswordRequirementsConfig {
+    minLength: number;
+    maxLength: number;
+    requireLowercase: boolean;
+    requireUppercase: boolean;
+    requireNumber: boolean;
+    requireSpecialCharacter: boolean;
+    specialCharacters: string;
+    constructor();
+}
+export declare class TaonSessionRegistrationConfig {
+    /**
+     * ⌛ TODO in progress
+     */
+    enabled: boolean;
+    /**
+     * ⌛ TODO in progress
+     */
+    requireEmailConfirmation: boolean;
+    /**
+     * ⌛ TODO in progress
+     * Registration allowed only when user has
+     * invitation code / registration password.
+     */
+    requireRegistrationPassword: boolean;
+    /**
+     * ⌛ TODO in progress
+     */
+    allowDuplicateEmail: boolean;
+    constructor();
+}
+export declare class TaonSessionLoginConfig extends TaonBaseClass {
+    diableLoginByEmail: boolean;
+    defaultEmail?: string;
+    defaultPassword?: string;
+    linkToDashboard: string;
+    displayDashboardButton: boolean;
+    /**
+     * TODO
+     * Whether FE may check whether email exists
+     * before showing password/register screen.
+     */
+    /**
+     * TODO
+     */
+    constructor();
+}
+export declare class TaonSessionCheckIfHumanConfig {
+    duringLoginRegisterEmail: boolean;
+    duringRegistrationPassword: boolean;
+    duringLoginPassword: boolean;
+    duringPasswordReset: boolean;
+    constructor();
+}
+export declare class TaonSessionSessionsConfig {
+    /**
+     * Multiple devices / browsers may stay logged in.
+     */
+    allowMultipleSessions: boolean;
+    /**
+     * 0 = unlimited
+     */
+    maxSessionsPerUser: number;
+    /**
+     * Update last activity timestamp.
+     */
+    trackActivity: boolean;
+    /**
+     * Optional idle timeout.
+     * 0 = disabled
+     */
+    idleTimeoutSeconds: number;
+    constructor();
+}
+export declare class TaonSessionPasswordRecoveryConfig {
+    enabled: boolean;
+    tokenExpiresSeconds: number;
+    invalidateExistingSessionsAfterReset: boolean;
+    constructor();
+}
+export declare class TaonSessionEmailConfirmationConfig {
+    enabled: boolean;
+    tokenExpiresSeconds: number;
+    allowResend: boolean;
+    resendCooldownSeconds: number;
+    constructor();
+}
+export declare class TaonSessionSecurityConfig {
+    /**
+     * Logout all sessions after password change.
+     */
+    invalidateSessionsAfterPasswordChange: boolean;
+    /**
+     * Rotate refresh token after successful refresh.
+     */
+    rotateRefreshTokens: boolean;
+    /**
+     * Detect reuse of already rotated refresh tokens.
+     */
+    detectRefreshTokenReuse: boolean;
+    constructor();
+}
+export declare class TaonSessionRateLimitConfig {
+    maxAttempts: number;
+    windowSeconds: number;
+    constructor(maxAttempts: number, windowSeconds: number);
+}
+export declare class TaonSessionRateLimitsConfig {
+    loginAttempts: TaonSessionRateLimitConfig;
+    passwordReset: TaonSessionRateLimitConfig;
+    emailConfirmationResend: TaonSessionRateLimitConfig;
+    constructor();
+}
+export type TaonSessionConfig = Omit<CoreModels.DeepPartial<TaonSessionProvider>, 'ctx' | '_' | 'getOriginalPrototype' | 'getOriginalConstructor' | '__endpoint_context__'>;
+export declare class TaonSessionProvider extends TaonBaseProvider {
+    /**
+     * Production means here - it runs on real server
+     */
+    isProduction: boolean;
+    superUsersEmails: string[];
+    /**
+     * Resolve social accounts by verified email as well as provider identity.
+     */
+    linkSocialAccountEmail: boolean;
+    cookies: TaonSessionCookiesConfig;
+    login: TaonSessionLoginConfig;
+    socialLogin: TaonSessionSocialLoginConfig;
+    _(): Promise<void>;
+    clone(): TaonSessionConfig;
 }