@tekcify/auth-backend 2.2.2 → 2.2.3

package/dist/index.d.ts

@@ -4,6 +4,7 @@ export * from './jwks-verifier';
 export * from './userinfo';
 export * from './user-profile';
 export * from './application-management';
+export * from './security';
 export * from './nestjs';
 export * from './express';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC"}

package/dist/index.js

@@ -20,5 +20,6 @@ __exportStar(require("./jwks-verifier"), exports);
 __exportStar(require("./userinfo"), exports);
 __exportStar(require("./user-profile"), exports);
 __exportStar(require("./application-management"), exports);
+__exportStar(require("./security"), exports);
 __exportStar(require("./nestjs"), exports);
 __exportStar(require("./express"), exports);

package/dist/security.d.ts

@@ -0,0 +1,115 @@
+export interface ChangePasswordDto {
+    currentPassword: string;
+    newPassword: string;
+}
+export interface SetupMfaDto {
+    password: string;
+}
+export interface SetupMfaResponse {
+    secret: string;
+    qrCodeUrl: string;
+    backupCodes: string[];
+}
+export interface VerifyMfaSetupDto {
+    code: string;
+}
+export interface DisableMfaDto {
+    password: string;
+    mfaCode: string;
+}
+export interface RegenerateBackupCodesDto {
+    password: string;
+    mfaCode: string;
+}
+export interface BackupCodesResponse {
+    backupCodes: string[];
+}
+export interface PasskeyRegistrationOptions {
+    options: {
+        challenge: string;
+        rp: {
+            name: string;
+            id: string;
+        };
+        user: {
+            id: string;
+            name: string;
+            displayName: string;
+        };
+        pubKeyCredParams: Array<{
+            type: string;
+            alg: number;
+        }>;
+        timeout: number;
+        attestation: string;
+        authenticatorSelection: {
+            authenticatorAttachment: string;
+            userVerification: string;
+            requireResidentKey: boolean;
+        };
+        excludeCredentials: Array<{
+            type: string;
+            id: string;
+        }>;
+    };
+    challenge: string;
+}
+export interface RegisterPasskeyDto {
+    credential: {
+        id: string;
+        rawId: string;
+        response: {
+            clientDataJSON: string;
+            attestationObject: string;
+        };
+        type: string;
+    };
+    challenge: string;
+    name?: string;
+}
+export interface Passkey {
+    id: string;
+    credentialId: string;
+    name: string;
+    createdAt: string;
+    lastUsedAt: string | null;
+}
+export interface RenamePasskeyDto {
+    name: string;
+}
+export interface Session {
+    id: string;
+    applicationName: string;
+    applicationLogo: string | null;
+    ipAddress: string;
+    userAgent: string;
+    scopes: string[];
+    createdAt: string;
+    lastUsedAt: string;
+    expiresAt: string;
+}
+export interface SessionsResponse {
+    sessions: Session[];
+}
+export interface SocialProvider {
+    id: string;
+    provider: string;
+    providerUserId: string;
+    connectedAt: string;
+}
+export declare function changePassword(accessToken: string, dto: ChangePasswordDto): Promise<void>;
+export declare function setupMfa(accessToken: string, dto: SetupMfaDto): Promise<SetupMfaResponse>;
+export declare function verifyMfaSetup(accessToken: string, dto: VerifyMfaSetupDto): Promise<void>;
+export declare function disableMfa(accessToken: string, dto: DisableMfaDto): Promise<void>;
+export declare function regenerateBackupCodes(accessToken: string, dto: RegenerateBackupCodesDto): Promise<BackupCodesResponse>;
+export declare function getPasskeyRegistrationOptions(accessToken: string): Promise<PasskeyRegistrationOptions>;
+export declare function registerPasskey(accessToken: string, dto: RegisterPasskeyDto): Promise<Passkey>;
+export declare function listPasskeys(accessToken: string): Promise<Passkey[]>;
+export declare function deletePasskey(accessToken: string, credentialId: string): Promise<void>;
+export declare function renamePasskey(accessToken: string, credentialId: string, dto: RenamePasskeyDto): Promise<Passkey>;
+export declare function listSessions(accessToken: string): Promise<SessionsResponse>;
+export declare function revokeSession(accessToken: string, sessionId: string): Promise<void>;
+export declare function revokeAllSessions(accessToken: string): Promise<void>;
+export declare function listSocialProviders(accessToken: string): Promise<SocialProvider[]>;
+export declare function disconnectSocialProvider(accessToken: string, provider: string): Promise<void>;
+//# sourceMappingURL=security.d.ts.map

package/dist/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,EAAE,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACjC,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QACxD,gBAAgB,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACvD,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,sBAAsB,EAAE;YACtB,uBAAuB,EAAE,MAAM,CAAC;YAChC,gBAAgB,EAAE,MAAM,CAAC;YACzB,kBAAkB,EAAE,OAAO,CAAC;SAC7B,CAAC;QACF,kBAAkB,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACzD,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE;QACV,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE;YACR,cAAc,EAAE,MAAM,CAAC;YACvB,iBAAiB,EAAE,MAAM,CAAC;SAC3B,CAAC;QACF,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,wBAAsB,QAAQ,CAC5B,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,gBAAgB,CAAC,CAuB3B;AAED,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,iBAAiB,GACrB,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,wBAAsB,UAAU,CAC9B,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,wBAAwB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CA0B9B;AAED,wBAAsB,6BAA6B,CACjD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,0BAA0B,CAAC,CA0BrC;AAED,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAED,wBAAsB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAsB1E;AAED,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,OAAO,CAAC,CA0BlB;AAED,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAsB3B;AAED,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB1E;AAED,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,cAAc,EAAE,CAAC,CAsB3B;AAED,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/security.js

@@ -0,0 +1,269 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.changePassword = changePassword;
+exports.setupMfa = setupMfa;
+exports.verifyMfaSetup = verifyMfaSetup;
+exports.disableMfa = disableMfa;
+exports.regenerateBackupCodes = regenerateBackupCodes;
+exports.getPasskeyRegistrationOptions = getPasskeyRegistrationOptions;
+exports.registerPasskey = registerPasskey;
+exports.listPasskeys = listPasskeys;
+exports.deletePasskey = deletePasskey;
+exports.renamePasskey = renamePasskey;
+exports.listSessions = listSessions;
+exports.revokeSession = revokeSession;
+exports.revokeAllSessions = revokeAllSessions;
+exports.listSocialProviders = listSocialProviders;
+exports.disconnectSocialProvider = disconnectSocialProvider;
+const AUTH_SERVER_URL = 'https://auth-api.tekcify.com';
+function extractErrorMessage(error, fallback) {
+    if (error &&
+        typeof error === 'object' &&
+        'message' in error &&
+        typeof error.message === 'string' &&
+        error.message.trim()) {
+        return error.message;
+    }
+    return fallback;
+}
+async function changePassword(accessToken, dto) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/password/change`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(dto),
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to change password: ${response.statusText} (Status: ${response.status})`));
+    }
+}
+async function setupMfa(accessToken, dto) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/setup-mfa`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(dto),
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to setup MFA: ${response.statusText} (Status: ${response.status})`));
+    }
+    return response.json();
+}
+async function verifyMfaSetup(accessToken, dto) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/mfa/verify-setup`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(dto),
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to verify MFA setup: ${response.statusText} (Status: ${response.status})`));
+    }
+}
+async function disableMfa(accessToken, dto) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/mfa/disable`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(dto),
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to disable MFA: ${response.statusText} (Status: ${response.status})`));
+    }
+}
+async function regenerateBackupCodes(accessToken, dto) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/mfa/regenerate-backup-codes`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(dto),
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to regenerate backup codes: ${response.statusText} (Status: ${response.status})`));
+    }
+    return response.json();
+}
+async function getPasskeyRegistrationOptions(accessToken) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/passkey/register/options`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({}),
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to get passkey registration options: ${response.statusText} (Status: ${response.status})`));
+    }
+    return response.json();
+}
+async function registerPasskey(accessToken, dto) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/passkey/register`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(dto),
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to register passkey: ${response.statusText} (Status: ${response.status})`));
+    }
+    return response.json();
+}
+async function listPasskeys(accessToken) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/passkeys`, {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to list passkeys: ${response.statusText} (Status: ${response.status})`));
+    }
+    return response.json();
+}
+async function deletePasskey(accessToken, credentialId) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/passkeys/${credentialId}`, {
+        method: 'DELETE',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to delete passkey: ${response.statusText} (Status: ${response.status})`));
+    }
+}
+async function renamePasskey(accessToken, credentialId, dto) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/passkeys/${credentialId}/rename`, {
+        method: 'PUT',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(dto),
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to rename passkey: ${response.statusText} (Status: ${response.status})`));
+    }
+    return response.json();
+}
+async function listSessions(accessToken) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/sessions`, {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to list sessions: ${response.statusText} (Status: ${response.status})`));
+    }
+    return response.json();
+}
+async function revokeSession(accessToken, sessionId) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/sessions/${sessionId}`, {
+        method: 'DELETE',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to revoke session: ${response.statusText} (Status: ${response.status})`));
+    }
+}
+async function revokeAllSessions(accessToken) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/sessions`, {
+        method: 'DELETE',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to revoke all sessions: ${response.statusText} (Status: ${response.status})`));
+    }
+}
+async function listSocialProviders(accessToken) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/social`, {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to list social providers: ${response.statusText} (Status: ${response.status})`));
+    }
+    return response.json();
+}
+async function disconnectSocialProvider(accessToken, provider) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/auth/social/${provider}`, {
+        method: 'DELETE',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        throw new Error(extractErrorMessage(error, `Failed to disconnect social provider: ${response.statusText} (Status: ${response.status})`));
+    }
+}

package/dist/user-profile.d.ts

@@ -15,4 +15,52 @@ export interface UploadResponse {
 export declare function getUserProfile(accessToken: string): Promise<UserProfile>;
 export declare function updateUserProfile(accessToken: string, data: UpdateProfileDto): Promise<UserProfile>;
 export declare function uploadProfilePicture(accessToken: string, file: Blob | File, fileName?: string): Promise<UploadResponse>;
+export interface ExportedUserData {
+    profile: {
+        email: string;
+        firstName: string | null;
+        lastName: string | null;
+        avatarUrl: string | null;
+        mfaEnabled: boolean;
+        role: string;
+        emailVerifiedAt: string | null;
+        lastLoginAt: string | null;
+        createdAt: string;
+    };
+    connectedApps: Array<{
+        applicationName: string;
+        scopes: string[];
+        consentedAt: string;
+    }>;
+    socialProviders: Array<{
+        provider: string;
+        email: string;
+        connectedAt: string;
+    }>;
+    passkeys: Array<{
+        name: string | null;
+        deviceType: string | null;
+        createdAt: string;
+        lastUsedAt: string | null;
+    }>;
+    securityActivity: Array<{
+        activityType: string;
+        ipAddress: string | null;
+        location: string | null;
+        deviceType: string | null;
+        success: boolean | null;
+        createdAt: string;
+    }>;
+    exportedAt: string;
+}
+export interface DeleteAccountDto {
+    password: string;
+    mfaCode?: string;
+    confirmDelete: true;
+}
+export interface DeleteAccountResponse {
+    message: string;
+}
+export declare function exportUserData(accessToken: string): Promise<ExportedUserData>;
+export declare function deleteUserAccount(accessToken: string, data: DeleteAccountDto): Promise<DeleteAccountResponse>;
 //# sourceMappingURL=user-profile.d.ts.map

package/dist/user-profile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-profile.d.ts","sourceRoot":"","sources":["../src/user-profile.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,CAAC,CAqBtB;AAED,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,WAAW,CAAC,CAsBtB;AAED,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,IAAI,GAAG,IAAI,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,cAAc,CAAC,CA6BzB"}
+{"version":3,"file":"user-profile.d.ts","sourceRoot":"","sources":["../src/user-profile.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,WAAW,CAAC,CAqBtB;AAED,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,WAAW,CAAC,CAsBtB;AAED,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,IAAI,GAAG,IAAI,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,cAAc,CAAC,CA6BzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,UAAU,EAAE,OAAO,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,aAAa,EAAE,KAAK,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,eAAe,EAAE,KAAK,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,gBAAgB,EAAE,KAAK,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAqB3B;AAED,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,qBAAqB,CAAC,CAsBhC"}

package/dist/user-profile.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getUserProfile = getUserProfile;
 exports.updateUserProfile = updateUserProfile;
 exports.uploadProfilePicture = uploadProfilePicture;
+exports.exportUserData = exportUserData;
+exports.deleteUserAccount = deleteUserAccount;
 const AUTH_SERVER_URL = 'https://auth-api.tekcify.com';
 async function getUserProfile(accessToken) {
     const response = await fetch(`${AUTH_SERVER_URL}/api/user/profile`, {
@@ -69,3 +71,42 @@ async function uploadProfilePicture(accessToken, file, fileName) {
     }
     return response.json();
 }
+async function exportUserData(accessToken) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/user/export-data`, {
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        const errorMessage = error?.message && typeof error.message === 'string' && error.message.trim()
+            ? error.message
+            : `Failed to export user data: ${response.statusText} (Status: ${response.status})`;
+        throw new Error(errorMessage);
+    }
+    return response.json();
+}
+async function deleteUserAccount(accessToken, data) {
+    const response = await fetch(`${AUTH_SERVER_URL}/api/user/account`, {
+        method: 'DELETE',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(data),
+    });
+    if (!response.ok) {
+        const error = (await response
+            .json()
+            .catch(() => ({ message: response.statusText })));
+        const errorMessage = error?.message && typeof error.message === 'string' && error.message.trim()
+            ? error.message
+            : `Failed to delete account: ${response.statusText} (Status: ${response.status})`;
+        throw new Error(errorMessage);
+    }
+    return response.json();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tekcify/auth-backend",
-  "version": "2.2.2",
+  "version": "2.2.3",
   "description": "Backend authentication helpers for Tekcify Auth. Provides middleware, guards, and utilities for validating JWT tokens and protecting API routes in NestJS and Express applications.",
   "author": "Tekcify",
   "main": "./dist/index.js",