@taon-dev/session 21.0.216 → 21.0.241

package/lib/taon-session/taon-session.state.service.js

@@ -0,0 +1,393 @@
+"use strict";
+//#region imports
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TaonSessionStateService = void 0;
+/* */
+const rxjs_1 = require("rxjs");
+const lib_1 = require("taon/lib");
+const lib_2 = require("tnp-core/lib");
+const lib_3 = require("tnp-core/lib");
+/* */
+/* */
+const taon_session_models_1 = require("./taon-session.models");
+//#endregion
+//#region @backend
+let TaonSessionStateService = class TaonSessionStateService extends lib_1.TaonBaseProvider {
+    //#region fields & getters
+    /* */
+    /* */
+    /**
+     * Refreshes session/authentication information.
+     *
+     * This causes getCurrentUserId() to be called again.
+     */
+    refreshSrc = new rxjs_1.BehaviorSubject(void 0);
+    /**
+     * Refreshes authorization context without reloading
+     * the current session/user.
+     *
+     * Useful when roles/groups/permissions change while
+     * the currently authenticated user stays the same.
+     */
+    contextRefreshSrc = new rxjs_1.BehaviorSubject(void 0);
+    userId = (0, lib_2.signal)(void 0);
+    currentSlide = (0, lib_2.signal)(taon_session_models_1.TaonSessionState.LOADING_INITIAL_AUTH_INFO);
+    allowedStateMap = new Map([
+        [
+            taon_session_models_1.TaonSessionState.LOADING_INITIAL_AUTH_INFO,
+            [taon_session_models_1.TaonSessionState.LOGIN_OR_REGISTER, taon_session_models_1.TaonSessionState.LOGIN_SUCCESS],
+        ],
+        [
+            taon_session_models_1.TaonSessionState.LOGIN_OR_REGISTER,
+            [
+                taon_session_models_1.TaonSessionState.ENTER_PASSWORD,
+                taon_session_models_1.TaonSessionState.ENTER_REGISTRATION_PASSWORDS,
+                taon_session_models_1.TaonSessionState.LOADING_AUTH,
+                taon_session_models_1.TaonSessionState.LOADING_CHECK_USER_EMAIL_EXISTS,
+            ],
+        ],
+        [
+            taon_session_models_1.TaonSessionState.LOADING_CHECK_USER_EMAIL_EXISTS,
+            [
+                taon_session_models_1.TaonSessionState.ENTER_PASSWORD,
+                taon_session_models_1.TaonSessionState.ENTER_REGISTRATION_PASSWORDS,
+                taon_session_models_1.TaonSessionState.LOGIN_OR_REGISTER,
+            ],
+        ],
+        [
+            taon_session_models_1.TaonSessionState.ENTER_REGISTRATION_PASSWORDS,
+            [taon_session_models_1.TaonSessionState.LOADING_AUTH, taon_session_models_1.TaonSessionState.LOGIN_OR_REGISTER],
+        ],
+        [
+            taon_session_models_1.TaonSessionState.ENTER_PASSWORD,
+            [
+                taon_session_models_1.TaonSessionState.LOGIN_OR_REGISTER,
+                taon_session_models_1.TaonSessionState.ENTER_PASSWORD,
+                taon_session_models_1.TaonSessionState.LOADING_AUTH,
+                taon_session_models_1.TaonSessionState.TWO_FA_AUTHENTICATOR,
+                taon_session_models_1.TaonSessionState.TWO_FA_EMAIL,
+                taon_session_models_1.TaonSessionState.TWO_FA_SMS,
+            ],
+        ],
+        [
+            taon_session_models_1.TaonSessionState.LOADING_AUTH,
+            [
+                taon_session_models_1.TaonSessionState.ENTER_PASSWORD,
+                taon_session_models_1.TaonSessionState.LOGIN_OR_REGISTER,
+                taon_session_models_1.TaonSessionState.LOGIN_SUCCESS,
+            ],
+        ],
+        [
+            taon_session_models_1.TaonSessionState.LOGIN_SUCCESS,
+            [
+                taon_session_models_1.TaonSessionState.LOADING_LOGOUT_INFO,
+                taon_session_models_1.TaonSessionState.ENTER_PASSWORD,
+                taon_session_models_1.TaonSessionState.PROFILE_INFO,
+            ],
+        ],
+        [
+            taon_session_models_1.TaonSessionState.PROFILE_INFO,
+            [
+                taon_session_models_1.TaonSessionState.LOGIN_SUCCESS,
+                taon_session_models_1.TaonSessionState.LOADING_LOGOUT_INFO,
+                taon_session_models_1.TaonSessionState.ENTER_PASSWORD,
+            ],
+        ],
+        [
+            taon_session_models_1.TaonSessionState.LOADING_LOGOUT_INFO,
+            [taon_session_models_1.TaonSessionState.LOGIN_OR_REGISTER, taon_session_models_1.TaonSessionState.LOGIN_SUCCESS],
+        ],
+    ]);
+    state = new lib_3.TaonStateMachine({
+        defaultValue: this.currentSlide(),
+        allowedStateMap: this.allowedStateMap,
+        effect: (nextState, previousState, debugMode) => {
+            this.currentSlide.set(nextState);
+        },
+    });
+    /**
+     * Current authenticated user.
+     *
+     * Shared because multiple consumers may depend on userId$,
+     * isLoggedIn$ and context$ at the same time.
+     *
+     * One refresh => one getCurrentUserId() request.
+     */
+    userId$ = this.refreshSrc.pipe((0, rxjs_1.switchMap)(() => {
+        //#region @backend
+        return (0, rxjs_1.of)(1000000);
+        //#endregion
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+    }), (0, rxjs_1.tap)(userId => {
+        this.userId.set(userId);
+        if (userId) {
+            this.state.set(taon_session_models_1.TaonSessionState.LOGIN_SUCCESS);
+        }
+        else {
+            this.state.set(taon_session_models_1.TaonSessionState.LOGIN_OR_REGISTER);
+        }
+    }), (0, rxjs_1.shareReplay)({
+        bufferSize: 1,
+        refCount: true,
+    }));
+    /**
+     * Projection of userId$.
+     *
+     * Does NOT cause another getCurrentUserId() call because
+     * userId$ is shared.
+     */
+    isLoggedIn$ = this.userId$.pipe((0, rxjs_1.map)(userId => !!userId));
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    /* */
+    //#endregion
+    executeActionForState(
+    /* */
+    /* */
+    ) {
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+    }
+    logout(successCallback) {
+        this.state.set(taon_session_models_1.TaonSessionState.LOADING_LOGOUT_INFO);
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+        /* */
+    }
+    /**
+     * Reload complete authentication/session state.
+     *
+     * This causes:
+     *
+     * getCurrentUserId()
+     *   -> userId$
+     *   -> isLoggedIn$
+     *   -> context$
+     */
+    refresh() {
+        this.refreshSrc.next(void 0);
+    }
+    /**
+     * Reload authorization context only.
+     *
+     * Does NOT call getCurrentUserId().
+     */
+    refreshContext() {
+        this.contextRefreshSrc.next(void 0);
+    }
+};
+exports.TaonSessionStateService = TaonSessionStateService;
+exports.TaonSessionStateService = TaonSessionStateService = __decorate([
+    (0, lib_1.TaonProvider)({
+        className: 'TaonSessionStateService',
+    })
+    //#endregion
+    /* */
+    /* */
+], TaonSessionStateService);
+//# sourceMappingURL=taon-session.state.service.js.map

package/lib/taon-session/taon-session.state.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taon-session.state.service.js","sourceRoot":"","sources":[""],"names":[],"mappings":";AAAA,iBAAiB;;;;;;;;;AAEjB,KAAK;AAEL,+BAac;AAEd,kCAA0D;AAC1D,sCAAsC;AACtC,sCAAgD;AAIhD,KAAK;AACL,KAAK;AACL,+DAI+B;AAE/B,YAAY;AAEZ,kBAAkB;AAQX,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,sBAAgB;IAC3D,0BAA0B;IAE5B,KAAK;IACL,KAAK;IAGH;;;;OAIG;IACgB,UAAU,GAAG,IAAI,sBAAe,CAAO,KAAK,CAAC,CAAC,CAAC;IAElE;;;;;;OAMG;IACgB,iBAAiB,GAAG,IAAI,sBAAe,CAAO,KAAK,CAAC,CAAC,CAAC;IAEtD,MAAM,GAAG,IAAA,YAAM,EAAqB,KAAK,CAAC,CAAC,CAAC;IAE5C,YAAY,GAAG,IAAA,YAAM,EACtC,sCAAgB,CAAC,yBAAyB,CAC3C,CAAC;IAEM,eAAe,GAAG,IAAI,GAAG,CAAuC;QACtE;YACE,sCAAgB,CAAC,yBAAyB;YAC1C,CAAC,sCAAgB,CAAC,iBAAiB,EAAE,sCAAgB,CAAC,aAAa,CAAC;SACrE;QACD;YACE,sCAAgB,CAAC,iBAAiB;YAClC;gBACE,sCAAgB,CAAC,cAAc;gBAC/B,sCAAgB,CAAC,4BAA4B;gBAC7C,sCAAgB,CAAC,YAAY;gBAC7B,sCAAgB,CAAC,+BAA+B;aACjD;SACF;QACD;YACE,sCAAgB,CAAC,+BAA+B;YAChD;gBACE,sCAAgB,CAAC,cAAc;gBAC/B,sCAAgB,CAAC,4BAA4B;gBAC7C,sCAAgB,CAAC,iBAAiB;aACnC;SACF;QACD;YACE,sCAAgB,CAAC,4BAA4B;YAC7C,CAAC,sCAAgB,CAAC,YAAY,EAAE,sCAAgB,CAAC,iBAAiB,CAAC;SACpE;QACD;YACE,sCAAgB,CAAC,cAAc;YAC/B;gBACE,sCAAgB,CAAC,iBAAiB;gBAClC,sCAAgB,CAAC,cAAc;gBAC/B,sCAAgB,CAAC,YAAY;gBAC7B,sCAAgB,CAAC,oBAAoB;gBACrC,sCAAgB,CAAC,YAAY;gBAC7B,sCAAgB,CAAC,UAAU;aAC5B;SACF;QACD;YACE,sCAAgB,CAAC,YAAY;YAC7B;gBACE,sCAAgB,CAAC,cAAc;gBAC/B,sCAAgB,CAAC,iBAAiB;gBAClC,sCAAgB,CAAC,aAAa;aAC/B;SACF;QACD;YACE,sCAAgB,CAAC,aAAa;YAC9B;gBACE,sCAAgB,CAAC,mBAAmB;gBACpC,sCAAgB,CAAC,cAAc;gBAC/B,sCAAgB,CAAC,YAAY;aAC9B;SACF;QACD;YACE,sCAAgB,CAAC,YAAY;YAC7B;gBACE,sCAAgB,CAAC,aAAa;gBAC9B,sCAAgB,CAAC,mBAAmB;gBACpC,sCAAgB,CAAC,cAAc;aAChC;SACF;QACD;YACE,sCAAgB,CAAC,mBAAmB;YACpC,CAAC,sCAAgB,CAAC,iBAAiB,EAAE,sCAAgB,CAAC,aAAa,CAAC;SACrE;KACF,CAAC,CAAC;IAEI,KAAK,GAAG,IAAI,sBAAgB,CAAmB;QACpD,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;QACjC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,MAAM,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE;YAC9C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;KACF,CAAC,CAAC;IAEH;;;;;;;OAOG;IACgB,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAC/C,IAAA,gBAAS,EAAC,GAAG,EAAE;QACb,kBAAkB;QAClB,OAAO,IAAA,SAAE,EAAC,OAAO,CAAC,CAAC;QACnB,YAAY;QAElB,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;IAED,CAAC,CAAC,EAEF,IAAA,UAAG,EAAC,MAAM,CAAC,EAAE;QACX,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAExB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAgB,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAgB,CAAC,iBAAiB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,EAEF,IAAA,kBAAW,EAAC;QACV,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,IAAI;KACf,CAAC,CACH,CAAC;IAEF;;;;;OAKG;IACa,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,UAAG,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAE3E,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IAGH,YAAY;IAEL,qBAAqB;IAC9B,KAAK;IACL,KAAK;;QAGL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;IAEH,CAAC;IAEM,MAAM,CAAC,eAA4B;QACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAgB,CAAC,mBAAmB,CAAC,CAAC;QAEzD,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;IAEH,CAAC;IAED;;;;;;;;;OASG;IACI,OAAO;QACZ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACI,cAAc;QACnB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACtC,CAAC;CACF,CAAA;AAzYY,0DAAuB;kCAAvB,uBAAuB;IAPnC,IAAA,kBAAY,EAAC;QACZ,SAAS,EAAE,yBAAyB;KACrC,CAAC;IACF,YAAY;IACZ,KAAK;IACL,KAAK;GAEQ,uBAAuB,CAyYnC"}

package/lib/taon-session/taon-session.utils.d.ts

@@ -1 +1,15 @@
-export declare namespace TaonSessionUtils { }
+import { TaonServerMiddlewareInterceptOptions } from 'ng2-rest/lib';
+export declare namespace TaonSessionUtils {
+    const getRequestMetadata: (req: TaonServerMiddlewareInterceptOptions["req"]) => {
+        userAgent?: string;
+        ip?: string;
+        deviceName?: string;
+    };
+    function verifyGoogleAuthorizationCode(GOOGLE_CLIENT_ID: string, GOOGLE_CLIENT_SECRET: string, code: string): Promise<{
+        sub: string;
+        email: string;
+        emailVerified: true;
+        name: string;
+        picture: string;
+    }>;
+}

package/lib/taon-session/taon-session.utils.js

@@ -1,3 +1,163 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.TaonSessionUtils = void 0;
+var TaonSessionUtils;
+(function (TaonSessionUtils) {
+    TaonSessionUtils.getRequestMetadata = (req) => {
+        //#region @websqlFunc
+        const header = req.headers?.['user-agent'];
+        const userAgent = typeof header === 'string' ? header.slice(0, 4096) : undefined;
+        // Express applies trust-proxy; the Worker adapter resolves the edge IP.
+        const ip = req.ip || req.socket?.remoteAddress;
+        const browsers = [
+            ['Edg/', 'Edge'], ['OPR/', 'Opera'], ['Chrome/', 'Chrome'],
+            ['Firefox/', 'Firefox'], ['Safari/', 'Safari'],
+        ];
+        const systems = [
+            ['Android', 'Android'], ['iPhone|iPad', 'iOS'], ['Windows', 'Windows'],
+            ['Macintosh', 'macOS'], ['Linux', 'Linux'],
+        ];
+        const browser = browsers.find(([pattern]) => userAgent?.includes(pattern))?.[1];
+        const system = systems.find(([pattern]) => new RegExp(pattern).test(userAgent || ''))?.[1];
+        return {
+            userAgent,
+            ip,
+            deviceName: [browser, system].filter(Boolean).join(' / ') || undefined,
+        };
+        //#endregion
+    };
+    //#region verify google authorization code
+    async function verifyGoogleAuthorizationCode(GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, code) {
+        //#region @websqlFunc
+        // ---------------------------------------------------------
+        // 1. Exchange authorization code for tokens
+        // ---------------------------------------------------------
+        const tokenResponse = await fetch('https://oauth2.googleapis.com/token', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/x-www-form-urlencoded',
+            },
+            body: new URLSearchParams({
+                client_id: GOOGLE_CLIENT_ID,
+                client_secret: GOOGLE_CLIENT_SECRET,
+                code,
+                grant_type: 'authorization_code',
+                // Important:
+                // must match what was used when obtaining the code.
+                redirect_uri: 'postmessage',
+            }),
+        });
+        const tokens = (await tokenResponse.json());
+        if (!tokenResponse.ok) {
+            throw new Error(`Google token exchange failed: ${tokens.error_description || tokens.error || tokenResponse.statusText}`);
+        }
+        if (!tokens.id_token) {
+            throw new Error('Google did not return an ID token.');
+        }
+        // ---------------------------------------------------------
+        // 2. Verify Google ID token
+        // ---------------------------------------------------------
+        const payload = await verifyGoogleIdToken(tokens.id_token, GOOGLE_CLIENT_ID);
+        // ---------------------------------------------------------
+        // 3. Validate required identity data
+        // ---------------------------------------------------------
+        if (!payload.sub) {
+            throw new Error('Google identity does not contain sub.');
+        }
+        if (!payload.email) {
+            throw new Error('Google identity does not contain email.');
+        }
+        if (payload.email_verified !== true) {
+            throw new Error('Google email is not verified.');
+        }
+        return {
+            sub: payload.sub,
+            email: payload.email,
+            emailVerified: payload.email_verified,
+            name: payload.name,
+            picture: payload.picture,
+        };
+        //#endregion
+    }
+    TaonSessionUtils.verifyGoogleAuthorizationCode = verifyGoogleAuthorizationCode;
+    //#endregion
+    //#region verify google id token
+    async function verifyGoogleIdToken(idToken, expectedAudience) {
+        const parts = idToken.split('.');
+        if (parts.length !== 3) {
+            throw new Error('Invalid Google ID token.');
+        }
+        const [encodedHeader, encodedPayload, encodedSignature] = parts;
+        const header = JSON.parse(decodeBase64UrlToString(encodedHeader));
+        if (header.alg !== 'RS256') {
+            throw new Error(`Unsupported Google JWT algorithm: ${header.alg}`);
+        }
+        if (!header.kid) {
+            throw new Error('Google ID token does not contain kid.');
+        }
+        // ---------------------------------------------------------
+        // Google's public signing keys
+        // ---------------------------------------------------------
+        const jwksResponse = await fetch('https://www.googleapis.com/oauth2/v3/certs');
+        if (!jwksResponse.ok) {
+            throw new Error('Unable to download Google signing keys.');
+        }
+        const jwks = (await jwksResponse.json());
+        const jwk = jwks.keys.find(key => key.kid === header.kid);
+        if (!jwk) {
+            throw new Error('Google signing key not found.');
+        }
+        // ---------------------------------------------------------
+        // Import RSA public key
+        // ---------------------------------------------------------
+        const publicKey = await crypto.subtle.importKey('jwk', jwk, {
+            name: 'RSASSA-PKCS1-v1_5',
+            hash: 'SHA-256',
+        }, false, ['verify']);
+        // ---------------------------------------------------------
+        // Verify JWT signature
+        // ---------------------------------------------------------
+        const signedData = new TextEncoder().encode(`${encodedHeader}.${encodedPayload}`);
+        const signature = decodeBase64UrlToBytes(encodedSignature);
+        const validSignature = await crypto.subtle.verify('RSASSA-PKCS1-v1_5', publicKey, 
+        // @ts-ignore
+        signature, signedData);
+        if (!validSignature) {
+            throw new Error('Invalid Google ID token signature.');
+        }
+        // ---------------------------------------------------------
+        // Decode + validate claims
+        // ---------------------------------------------------------
+        const payload = JSON.parse(decodeBase64UrlToString(encodedPayload));
+        if (payload.iss !== 'https://accounts.google.com' &&
+            payload.iss !== 'accounts.google.com') {
+            throw new Error(`Invalid Google token issuer: ${payload.iss}`);
+        }
+        const audiences = Array.isArray(payload.aud) ? payload.aud : [payload.aud];
+        if (!audiences.includes(expectedAudience)) {
+            throw new Error('Google ID token audience mismatch.');
+        }
+        const now = Math.floor(Date.now() / 1000);
+        if (!payload.exp || payload.exp <= now) {
+            throw new Error('Google ID token has expired.');
+        }
+        return payload;
+    }
+    //#endregion
+    //#region base64 url
+    function decodeBase64UrlToBytes(input) {
+        let base64 = input.replace(/-/g, '+').replace(/_/g, '/');
+        base64 += '='.repeat((4 - (base64.length % 4)) % 4);
+        const binary = atob(base64);
+        const result = new Uint8Array(binary.length);
+        for (let i = 0; i < binary.length; i++) {
+            result[i] = binary.charCodeAt(i);
+        }
+        return result;
+    }
+    function decodeBase64UrlToString(input) {
+        return new TextDecoder().decode(decodeBase64UrlToBytes(input));
+    }
+    //#endregion
+})(TaonSessionUtils || (exports.TaonSessionUtils = TaonSessionUtils = {}));
 //# sourceMappingURL=taon-session.utils.js.map

package/lib/taon-session/taon-session.utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"taon-session.utils.js","sourceRoot":"","sources":[""],"names":[],"mappings":""}
+{"version":3,"file":"taon-session.utils.js","sourceRoot":"","sources":[""],"names":[],"mappings":";;;AAEA,IAAiB,gBAAgB,CAgRhC;AAhRD,WAAiB,gBAAgB;IAClB,mCAAkB,GAAG,CAChC,GAAgD,EACU,EAAE;QAC5D,qBAAqB;QACrB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,wEAAwE;QACxE,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC;QAC/C,MAAM,QAAQ,GAAG;YACf,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;YAC1D,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;SAC/C,CAAC;QACF,MAAM,OAAO,GAAG;YACd,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YACtE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;SAC3C,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3F,OAAO;YACL,SAAS;YACT,EAAE;YACF,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS;SACvE,CAAC;QACF,YAAY;IACd,CAAC,CAAC;IA8BF,0CAA0C;IACnC,KAAK,UAAU,6BAA6B,CACjD,gBAAwB,EACxB,oBAA4B,EAC5B,IAAY;QAEZ,qBAAqB;QAErB,4DAA4D;QAC5D,4CAA4C;QAC5C,4DAA4D;QAE5D,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,qCAAqC,EAAE;YACvE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,gBAAgB;gBAC3B,aAAa,EAAE,oBAAoB;gBACnC,IAAI;gBACJ,UAAU,EAAE,oBAAoB;gBAEhC,aAAa;gBACb,oDAAoD;gBACpD,YAAY,EAAE,aAAa;aAC5B,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAwB,CAAC;QAEnE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,iCACE,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC,UAC5D,EAAE,CACH,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,4DAA4D;QAC5D,4BAA4B;QAC5B,4DAA4D;QAE5D,MAAM,OAAO,GAAG,MAAM,mBAAmB,CACvC,MAAM,CAAC,QAAQ,EACf,gBAAgB,CACjB,CAAC;QAEF,4DAA4D;QAC5D,qCAAqC;QACrC,4DAA4D;QAE5D,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,OAAO,CAAC,cAAc;YACrC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;QAEF,YAAY;IACd,CAAC;IA5EqB,8CAA6B,gCA4ElD,CAAA;IACD,YAAY;IAEZ,gCAAgC;IAChC,KAAK,UAAU,mBAAmB,CAChC,OAAe,EACf,gBAAwB;QAExB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,KAAK,CAAC;QAEhE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAG/D,CAAC;QAEF,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,4DAA4D;QAC5D,+BAA+B;QAC/B,4DAA4D;QAE5D,MAAM,YAAY,GAAG,MAAM,KAAK,CAC9B,4CAA4C,CAC7C,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAEtC,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;QAE1D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,4DAA4D;QAC5D,wBAAwB;QACxB,4DAA4D;QAE5D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,KAAK,EACL,GAAG,EACH;YACE,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,SAAS;SAChB,EACD,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;QAEF,4DAA4D;QAC5D,uBAAuB;QACvB,4DAA4D;QAE5D,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACzC,GAAG,aAAa,IAAI,cAAc,EAAE,CACrC,CAAC;QAEF,MAAM,SAAS,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAE3D,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/C,mBAAmB,EACnB,SAAS;QACT,aAAa;QACb,SAAS,EACT,UAAU,CACX,CAAC;QAEF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,4DAA4D;QAC5D,2BAA2B;QAC3B,4DAA4D;QAE5D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,uBAAuB,CAAC,cAAc,CAAC,CAChB,CAAC;QAE1B,IACE,OAAO,CAAC,GAAG,KAAK,6BAA6B;YAC7C,OAAO,CAAC,GAAG,KAAK,qBAAqB,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE3E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,YAAY;IAEZ,oBAAoB;IACpB,SAAS,sBAAsB,CAAC,KAAa;QAC3C,IAAI,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAEzD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAE5B,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,uBAAuB,CAAC,KAAa;QAC5C,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,YAAY;AACd,CAAC,EAhRgB,gBAAgB,gCAAhB,gBAAgB,QAgRhC"}

package/lib/taon-session/taon-session.validators.d.ts

@@ -0,0 +1,4 @@
+import { ValidatorFn } from '@angular/forms';
+export declare namespace TaonSessionValidator {
+    const passwordMatchValidator: ValidatorFn;
+}

package/lib/taon-session/taon-session.validators.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=taon-session.validators.js.map

package/lib/taon-session/taon-session.validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taon-session.validators.js","sourceRoot":"","sources":[""],"names":[],"mappings":""}

package/lib/taon-session-user/index.d.ts

@@ -0,0 +1,12 @@
+export * from './taon-session-user-api.service';
+export * from './taon-session-user-group.repository';
+export * from './taon-session-user.abstract.context';
+export * from './taon-session-user.constants';
+export * from './taon-session-user.controller';
+export * from './taon-session-user.entity';
+export * from './taon-session-user.middleware';
+export * from './taon-session-user.models';
+export * from './taon-session-user.provider';
+export * from './taon-session-user.repository';
+export * from './taon-session-user.subscriber';
+export * from './taon-session-user.utils';

package/lib/taon-session-user/index.js

@@ -0,0 +1,29 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/* */
+__exportStar(require("./taon-session-user-group.repository"), exports);
+__exportStar(require("./taon-session-user.abstract.context"), exports);
+__exportStar(require("./taon-session-user.constants"), exports);
+__exportStar(require("./taon-session-user.controller"), exports);
+__exportStar(require("./taon-session-user.entity"), exports);
+__exportStar(require("./taon-session-user.middleware"), exports);
+__exportStar(require("./taon-session-user.models"), exports);
+__exportStar(require("./taon-session-user.provider"), exports);
+__exportStar(require("./taon-session-user.repository"), exports);
+__exportStar(require("./taon-session-user.subscriber"), exports);
+__exportStar(require("./taon-session-user.utils"), exports);
+//# sourceMappingURL=index.js.map

package/lib/taon-session-user/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":[""],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,KAAK;AACL,uEAAqD;AACrD,uEAAqD;AACrD,gEAA8C;AAC9C,iEAA+C;AAC/C,6DAA2C;AAC3C,iEAA+C;AAC/C,6DAA2C;AAC3C,+DAA6C;AAC7C,iEAA+C;AAC/C,iEAA+C;AAC/C,4DAA0C"}

package/lib/taon-session-user/taon-session-backoffice-users/index.d.ts

@@ -0,0 +1 @@
+export * from './taon-session-backoffice-users.component';

package/lib/taon-session-user/taon-session-backoffice-users/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dummy1791750440219 = dummy1791750440219;
+function dummy1791750440219() { }
+//# sourceMappingURL=index.js.map

package/lib/taon-session-user/taon-session-backoffice-users/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":[""],"names":[],"mappings":";;AAAA,gDAAwC;AAAxC,SAAgB,kBAAkB,KAAK,CAAC"}