@tinyrack/issuary-server 0.31.0 → 0.32.2

package/dist/repositories/oauth-device-code.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-device-code.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/oauth-device-code.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAItF,MAAM,MAAM,uBAAuB,GAAG,uBAAuB,GAAG,WAAW,CAAC;AAE5E,qBAAa,yBAA0B,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;IAC/E,yBAAyB,CAAC,MAAM,EAAE;QACtC,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAalC;IAEK,yBAAyB,CAC7B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAQxC;IAEK,4BAA4B,CAAC,MAAM,EAAE;QACzC,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,IAAI,CAAC;KAClB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAuBzC;IAEK,yBAAyB,CAAC,MAAM,EAAE;QACtC,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,IAAI,CAAC;KAChB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAsBzC;IAEK,6BAA6B,CACjC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAMxC;IAEK,iBAAiB,CAAC,MAAM,EAAE;QAC9B,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,IAAI,CAAC;KAChB,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CA+C1C;IAEK,2BAA2B,CAC/B,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,IAAI,GACf,OAAO,CAAC,OAAO,CAAC,CAalB;CACF"}
+{"version":3,"file":"oauth-device-code.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/oauth-device-code.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAMtF,MAAM,MAAM,uBAAuB,GAAG,uBAAuB,GAAG,WAAW,CAAC;AAE5E,qBAAa,yBAA0B,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;YACvE,iBAAiB;IAoBzB,yBAAyB,CAAC,MAAM,EAAE;QACtC,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkBlC;IAEK,yBAAyB,CAC7B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAoBxC;IAEK,4BAA4B,CAAC,MAAM,EAAE;QACzC,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,IAAI,CAAC;KAClB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CA6BzC;IAEK,yBAAyB,CAAC,MAAM,EAAE;QACtC,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,IAAI,CAAC;KAChB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAwBzC;IAEK,6BAA6B,CACjC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CASxC;IAEK,iBAAiB,CAAC,MAAM,EAAE;QAC9B,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,IAAI,CAAC;KAChB,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CA+C1C;IAEK,2BAA2B,CAC/B,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,IAAI,GACf,OAAO,CAAC,OAAO,CAAC,CAalB;CACF"}

package/dist/repositories/oauth-device-code.repository.js

@@ -1,11 +1,31 @@
 import { EntityRepository } from '@mikro-orm/core';
+import { OAuthClientEntitySchema } from '../entities/oauth-client.entity.js';
+import { UserEntity } from '../entities/user.entity.js';
+import { lockOAuthClient } from '../services/client-security.js';
 const DEVICE_CODE_POLL_INTERVAL_SECONDS = 5;
 export class OAuthDeviceCodeRepository extends EntityRepository {
+    async withCurrentClient(userCodeHash, operation) {
+        return this.getEntityManager().transactional(async (em) => {
+            const code = await this.findOne({ userCodeHash }, { refresh: true });
+            if (!code)
+                return null;
+            const client = await lockOAuthClient(em, code.client.id);
+            if (!client ||
+                client.deletedAt ||
+                !client.enabled ||
+                !client.tokenEpoch ||
+                client.tokenEpoch !== code.client_epoch)
+                return null;
+            return operation();
+        });
+    }
     async createDeviceAuthorization(params) {
         const expiresInSeconds = params.expiresInSeconds ?? 600;
         const expiresAt = new Date(Date.now() + expiresInSeconds * 1000);
+        const client = await this.getEntityManager().findOneOrFail(OAuthClientEntitySchema, { id: params.clientId });
         const entity = this.create({
             client: params.clientId,
+            client_epoch: params.clientEpoch ?? client.tokenEpoch ?? '',
             deviceCodeHash: params.deviceCodeHash,
             userCodeHash: params.userCodeHash,
             scope: params.scope,
@@ -15,51 +35,66 @@ export class OAuthDeviceCodeRepository extends EntityRepository {
         return entity;
     }
     async findPendingByUserCodeHash(userCodeHash) {
-        return this.findOne({
+        const code = await this.findOne({
             userCodeHash,
             consumedAt: null,
             authorizedAt: null,
             deniedAt: null,
             expiresAt: { $gt: new Date() },
-        });
+        }, { populate: ['client'], refresh: true });
+        if (!code ||
+            code.client.deletedAt ||
+            !code.client.enabled ||
+            !code.client.tokenEpoch ||
+            code.client_epoch !== code.client.tokenEpoch)
+            return null;
+        return code;
     }
     async approvePendingByUserCodeHash(params) {
-        const updated = await this.nativeUpdate({
-            userCodeHash: params.userCodeHash,
-            consumedAt: null,
-            authorizedAt: null,
-            deniedAt: null,
-            expiresAt: { $gt: params.approvedAt },
-        }, {
-            authorizedUser: params.userSub,
-            authorizedAt: params.approvedAt,
+        return this.withCurrentClient(params.userCodeHash, async () => {
+            const user = await this.getEntityManager().findOneOrFail(UserEntity, {
+                sub: params.userSub,
+            });
+            const updated = await this.nativeUpdate({
+                userCodeHash: params.userCodeHash,
+                consumedAt: null,
+                authorizedAt: null,
+                deniedAt: null,
+                expiresAt: { $gt: params.approvedAt },
+            }, {
+                authorizedUser: params.userSub,
+                user_epoch: params.userEpoch ?? user.token_epoch,
+                authorizedAt: params.approvedAt,
+            });
+            if (updated !== 1) {
+                return null;
+            }
+            return this.findOne({ userCodeHash: params.userCodeHash }, { populate: ['client'] });
         });
-        if (updated !== 1) {
-            return null;
-        }
-        return this.findOne({ userCodeHash: params.userCodeHash }, { populate: ['client'] });
     }
     async denyPendingByUserCodeHash(params) {
-        const updated = await this.nativeUpdate({
-            userCodeHash: params.userCodeHash,
-            consumedAt: null,
-            authorizedAt: null,
-            deniedAt: null,
-            expiresAt: { $gt: params.deniedAt },
-        }, {
-            deniedAt: params.deniedAt,
+        return this.withCurrentClient(params.userCodeHash, async () => {
+            const updated = await this.nativeUpdate({
+                userCodeHash: params.userCodeHash,
+                consumedAt: null,
+                authorizedAt: null,
+                deniedAt: null,
+                expiresAt: { $gt: params.deniedAt },
+            }, {
+                deniedAt: params.deniedAt,
+            });
+            if (updated !== 1) {
+                return null;
+            }
+            return this.findOne({ userCodeHash: params.userCodeHash }, { populate: ['client'] });
         });
-        if (updated !== 1) {
-            return null;
-        }
-        return this.findOne({ userCodeHash: params.userCodeHash }, { populate: ['client'] });
     }
     async findByClientAndDeviceCodeHash(clientId, deviceCodeHash) {
         return this.findOne({
             client: clientId,
             deviceCodeHash,
             consumedAt: null,
-        });
+        }, { refresh: true });
     }
     async recordPendingPoll(params) {
         const deviceCode = await this.findOne({
@@ -92,7 +127,7 @@ export class OAuthDeviceCodeRepository extends EntityRepository {
             pollIntervalSeconds: nextIntervalSeconds,
         });
         if (updated !== 1) {
-            return this.recordPendingPoll(params);
+            return 'slow_down';
         }
         return isSlowDown ? 'slow_down' : 'authorization_pending';
     }

package/dist/repositories/oauth-device-code.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-device-code.repository.js","sourceRoot":"","sources":["../../src/repositories/oauth-device-code.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,MAAM,iCAAiC,GAAG,CAAC,CAAC;AAI5C,MAAM,OAAO,yBAA0B,SAAQ,gBAAwC;IACrF,KAAK,CAAC,yBAAyB,CAAC,MAM/B;QACC,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,GAAG,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QACtD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,YAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,YAAY;YACZ,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,4BAA4B,CAAC,MAIlC;QACC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC;YACE,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE;SACtC,EACD;YACE,cAAc,EAAE,MAAM,CAAC,OAAO;YAC9B,YAAY,EAAE,MAAM,CAAC,UAAU;SAChC,CACF,CAAC;QAEF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,EACrC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,MAG/B;QACC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC;YACE,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;SACpC,EACD;YACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CACF,CAAC;QAEF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,EACrC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,QAAgB,EAChB,cAAsB;QAEtB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,QAAQ;YAChB,cAAc;YACd,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAGvB;QACC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CACnC;YACE,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;SACpC,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,eAAe,GACnB,UAAU,CAAC,mBAAmB,IAAI,iCAAiC,CAAC;QACtE,MAAM,cAAc,GAAG,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QAC1D,MAAM,UAAU,GACd,cAAc,KAAK,SAAS;YAC5B,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,eAAe,GAAG,IAAI,CAAC;QACtE,MAAM,mBAAmB,GAAG,UAAU;YACpC,CAAC,CAAC,eAAe,GAAG,CAAC;YACrB,CAAC,CAAC,eAAe,CAAC;QAEpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC;YACE,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;YACnC,mBAAmB,EAAE,eAAe;YACpC,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,IAAI;SAC9C,EACD;YACE,YAAY,EAAE,MAAM,CAAC,QAAQ;YAC7B,mBAAmB,EAAE,mBAAmB;SACzC,CACF,CAAC;QAEF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,EAAU,EACV,UAAgB;QAEhB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC;YACE,EAAE;YACF,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;SAC/B,EACD,EAAE,UAAU,EAAE,CACf,CAAC;QAEF,OAAO,OAAO,KAAK,CAAC,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"oauth-device-code.repository.js","sourceRoot":"","sources":["../../src/repositories/oauth-device-code.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAE7E,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,MAAM,iCAAiC,GAAG,CAAC,CAAC;AAI5C,MAAM,OAAO,yBAA0B,SAAQ,gBAAwC;IAC7E,KAAK,CAAC,iBAAiB,CAC7B,YAAoB,EACpB,SAA2B;QAE3B,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzD,IACE,CAAC,MAAM;gBACP,MAAM,CAAC,SAAS;gBAChB,CAAC,MAAM,CAAC,OAAO;gBACf,CAAC,MAAM,CAAC,UAAU;gBAClB,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,YAAY;gBAEvC,OAAO,IAAI,CAAC;YACd,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,MAO/B;QACC,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,GAAG,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,aAAa,CACxD,uBAAuB,EACvB,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,CACxB,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE;YAC3D,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QACtD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,YAAoB;QAEpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B;YACE,YAAY;YACZ,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE;SAC/B,EACD,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CACxC,CAAC;QACF,IACE,CAAC,IAAI;YACL,IAAI,CAAC,MAAM,CAAC,SAAS;YACrB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YACpB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;YACvB,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU;YAE5C,OAAO,IAAI,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,4BAA4B,CAAC,MAKlC;QACC,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE;gBACnE,GAAG,EAAE,MAAM,CAAC,OAAO;aACpB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC;gBACE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE;aACtC,EACD;gBACE,cAAc,EAAE,MAAM,CAAC,OAAO;gBAC9B,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW;gBAChD,YAAY,EAAE,MAAM,CAAC,UAAU;aAChC,CACF,CAAC;YAEF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,EACrC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CACzB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,MAG/B;QACC,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC;gBACE,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;aACpC,EACD;gBACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CACF,CAAC;YAEF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,EACrC,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CACzB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,QAAgB,EAChB,cAAsB;QAEtB,OAAO,IAAI,CAAC,OAAO,CACjB;YACE,MAAM,EAAE,QAAQ;YAChB,cAAc;YACd,UAAU,EAAE,IAAI;SACjB,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAGvB;QACC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CACnC;YACE,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;SACpC,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;QAEF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,eAAe,GACnB,UAAU,CAAC,mBAAmB,IAAI,iCAAiC,CAAC;QACtE,MAAM,cAAc,GAAG,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QAC1D,MAAM,UAAU,GACd,cAAc,KAAK,SAAS;YAC5B,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,eAAe,GAAG,IAAI,CAAC;QACtE,MAAM,mBAAmB,GAAG,UAAU;YACpC,CAAC,CAAC,eAAe,GAAG,CAAC;YACrB,CAAC,CAAC,eAAe,CAAC;QAEpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC;YACE,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;YACnC,mBAAmB,EAAE,eAAe;YACpC,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,IAAI;SAC9C,EACD;YACE,YAAY,EAAE,MAAM,CAAC,QAAQ;YAC7B,mBAAmB,EAAE,mBAAmB;SACzC,CACF,CAAC;QAEF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,EAAU,EACV,UAAgB;QAEhB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC;YACE,EAAE;YACF,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;YAC3B,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;SAC/B,EACD,EAAE,UAAU,EAAE,CACf,CAAC;QAEF,OAAO,OAAO,KAAK,CAAC,CAAC;IACvB,CAAC;CACF"}

package/dist/repositories/password-reset.repository.d.ts

@@ -8,6 +8,7 @@ export declare class PasswordResetRepository extends EntityRepository<IPasswordR
      */
     generateToken(params: {
         userSub: string;
+        userEpoch: string;
         expiresInHours?: number;
     }): Promise<IPasswordResetEntity>;
     /**

package/dist/repositories/password-reset.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password-reset.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/password-reset.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAO,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAGjF,qBAAa,uBAAwB,SAAQ,gBAAgB,CAAC,oBAAoB,CAAC;IACjF;;;;OAIG;IACG,aAAa,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA6BhC;IAED;;;OAGG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAsBrE;CACF"}
+{"version":3,"file":"password-reset.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/password-reset.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAO,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAGjF,qBAAa,uBAAwB,SAAQ,gBAAgB,CAAC,oBAAoB,CAAC;IACjF;;;;OAIG;IACG,aAAa,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA0BhC;IAED;;;OAGG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAQrE;CACF"}

package/dist/repositories/password-reset.repository.js

@@ -13,16 +13,11 @@ export class PasswordResetRepository extends EntityRepository {
         const expiresInHours = params.expiresInHours || 1;
         const expiresAt = new Date(Date.now() + expiresInHours * 60 * 60 * 1000);
         // Invalidate all previous unused tokens for this user
-        const previousTokens = await this.find({
-            user: ref(UserEntity, params.userSub),
-            used: false,
-        });
-        for (const prevToken of previousTokens) {
-            prevToken.expiresAt = new Date(); // Expire immediately
-        }
+        await this.nativeUpdate({ user: ref(UserEntity, params.userSub), used: false, revoked_at: null }, { revoked_at: new Date() });
         // Create the entity
         const entity = this.create({
             user: params.userSub,
+            user_epoch: params.userEpoch,
             token,
             expiresAt,
         });
@@ -35,19 +30,11 @@ export class PasswordResetRepository extends EntityRepository {
      * @returns The verified entity with user populated, or null if invalid
      */
     async verifyToken(token) {
-        const entity = await this.findOne({ token, used: false }, { populate: ['user'] });
-        if (!entity) {
-            return null;
-        }
-        // Check if expired
-        if (entity.expiresAt < new Date()) {
+        const now = new Date();
+        const changed = await this.nativeUpdate({ token, used: false, revoked_at: null, expiresAt: { $gt: now } }, { used: true, usedAt: now });
+        if (changed !== 1)
             return null;
-        }
-        // Mark as used
-        entity.used = true;
-        entity.usedAt = new Date();
-        await this.getEntityManager().flush();
-        return entity;
+        return this.findOne({ token }, { populate: ['user'], refresh: true });
     }
 }
 //# sourceMappingURL=password-reset.repository.js.map

package/dist/repositories/password-reset.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"password-reset.repository.js","sourceRoot":"","sources":["../../src/repositories/password-reset.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,MAAM,OAAO,uBAAwB,SAAQ,gBAAsC;IACjF;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,MAGnB;QACC,qCAAqC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAElC,2DAA2D;QAC3D,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEzE,sDAAsD;QACtD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;YACrC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC;YACrC,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QAEH,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;YACvC,SAAS,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC,qBAAqB;QACzD,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACzB,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,KAAK;YACL,SAAS;SACV,CAAC,CAAC;QAEH,sBAAsB;QACtB,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAExC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EACtB,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,CACvB,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,eAAe;QACf,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAE3B,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,CAAC;QAEtC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}
+{"version":3,"file":"password-reset.repository.js","sourceRoot":"","sources":["../../src/repositories/password-reset.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,MAAM,OAAO,uBAAwB,SAAQ,gBAAsC;IACjF;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,MAInB;QACC,qCAAqC;QACrC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAElC,2DAA2D;QAC3D,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAEzE,sDAAsD;QACtD,MAAM,IAAI,CAAC,YAAY,CACrB,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EACxE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAC3B,CAAC;QAEF,oBAAoB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACzB,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,KAAK;YACL,SAAS;SACV,CAAC,CAAC;QAEH,sBAAsB;QACtB,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAExC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EACjE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAC5B,CAAC;QACF,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;CACF"}

package/dist/repositories/pending-oauth-registration.repository.d.ts

@@ -25,6 +25,7 @@ export declare class PendingOAuthRegistrationRepository extends EntityRepository
      * Find a valid (non-expired) pending registration by its token.
      * Eagerly loads lazy fields (accessToken, refreshToken).
      */
+    claim(token: string): Promise<IPendingOAuthRegistrationEntity | null>;
     findValidByToken(token: string): Promise<IPendingOAuthRegistrationEntity | null>;
     /**
      * Delete a pending registration record after it has been consumed.
@@ -33,6 +34,7 @@ export declare class PendingOAuthRegistrationRepository extends EntityRepository
     /**
      * Delete all expired pending registrations.
      */
+    invalidateIdentity(providerId: string, providerUserId: string, email: string): Promise<void>;
     cleanExpired(cutoffDate: Date): Promise<number>;
 }
 //# sourceMappingURL=pending-oauth-registration.repository.d.ts.map

package/dist/repositories/pending-oauth-registration.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pending-oauth-registration.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/pending-oauth-registration.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kDAAkD,CAAC;AAExG,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,OAAO,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC9B,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,qBAAa,kCAAmC,SAAQ,gBAAgB,CAAC,+BAA+B,CAAC;IACvG;;OAEG;IACG,yBAAyB,CAC7B,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,MAAM,CAAC,CAmBjB;IAED;;;OAGG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC,CAQjD;IAED;;OAEG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjD;IAED;;OAEG;IACG,YAAY,CAAC,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAIpD;CACF"}
+{"version":3,"file":"pending-oauth-registration.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/pending-oauth-registration.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kDAAkD,CAAC;AAExG,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,OAAO,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC9B,CAAC;IACF,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,qBAAa,kCAAmC,SAAQ,gBAAgB,CAAC,+BAA+B,CAAC;IACvG;;OAEG;IACG,yBAAyB,CAC7B,MAAM,EAAE,+BAA+B,GACtC,OAAO,CAAC,MAAM,CAAC,CAmBjB;IAED;;;OAGG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC,CAU1E;IAEK,gBAAgB,CACpB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC,CAQjD;IAED;;OAEG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjD;IAED;;OAEG;IACG,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAOf;IAEK,YAAY,CAAC,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAIpD;CACF"}

package/dist/repositories/pending-oauth-registration.repository.js

@@ -24,11 +24,17 @@ export class PendingOAuthRegistrationRepository extends EntityRepository {
      * Find a valid (non-expired) pending registration by its token.
      * Eagerly loads lazy fields (accessToken, refreshToken).
      */
+    async claim(token) {
+        const changed = await this.nativeUpdate({ token, consumed_at: null, expiresAt: { $gt: new Date() } }, { consumed_at: new Date() });
+        if (changed !== 1)
+            return null;
+        return this.findOne({ token }, { populate: ['accessToken', 'refreshToken'], refresh: true });
+    }
     async findValidByToken(token) {
-        const entity = await this.findOne({ token }, { populate: ['accessToken', 'refreshToken'] });
+        const entity = await this.findOne({ token, consumed_at: null }, { populate: ['accessToken', 'refreshToken'] });
         if (!entity)
             return null;
-        if (entity.expiresAt < new Date())
+        if (entity.expiresAt <= new Date())
             return null;
         return entity;
     }
@@ -41,6 +47,14 @@ export class PendingOAuthRegistrationRepository extends EntityRepository {
     /**
      * Delete all expired pending registrations.
      */
+    async invalidateIdentity(providerId, providerUserId, email) {
+        await this.nativeDelete({
+            $or: [
+                { providerId, userInfo: { id: providerUserId } },
+                { userInfo: { email } },
+            ],
+        });
+    }
     async cleanExpired(cutoffDate) {
         return await this.nativeDelete({
             expiresAt: { $lt: cutoffDate },

package/dist/repositories/pending-oauth-registration.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"pending-oauth-registration.repository.js","sourceRoot":"","sources":["../../src/repositories/pending-oauth-registration.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAoBnD,MAAM,OAAO,kCAAmC,SAAQ,gBAAiD;IACvG;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,MAAuC;QAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAElC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACzB,KAAK;YACL,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,CAAC;QAEtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAa;QAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,EAAE,KAAK,EAAE,EACT,EAAE,QAAQ,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAC9C,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,UAAgB;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC;YAC7B,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"pending-oauth-registration.repository.js","sourceRoot":"","sources":["../../src/repositories/pending-oauth-registration.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAoBnD,MAAM,OAAO,kCAAmC,SAAQ,gBAAiD;IACvG;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,MAAuC;QAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAElC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YACzB,KAAK;YACL,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,CAAC;QAEtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,KAAa;QACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,EAC5D,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE,CAC5B,CAAC;QACF,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,KAAK,EAAE,EACT,EAAE,QAAQ,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAC7D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,KAAa;QAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,EAC5B,EAAE,QAAQ,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAC9C,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,KAAa;QAChC,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,UAAkB,EAClB,cAAsB,EACtB,KAAa;QAEb,MAAM,IAAI,CAAC,YAAY,CAAC;YACtB,GAAG,EAAE;gBACH,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE;gBAChD,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE;aACxB;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAgB;QACjC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC;YAC7B,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/repositories/terms.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terms.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/terms.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,qBAAa,eAAgB,SAAQ,gBAAgB,CAAC,YAAY,CAAC;IACjE;;OAEG;IACG,mBAAmB,IAAI,OAAO,CAClC,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,CAC/C,CAOA;CACF"}
+{"version":3,"file":"terms.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/terms.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,qBAAa,eAAgB,SAAQ,gBAAgB,CAAC,YAAY,CAAC;IACjE;;OAEG;IACG,mBAAmB,IAAI,OAAO,CAClC,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,CAC/C,CAQA;CACF"}

package/dist/repositories/terms.repository.js

@@ -6,6 +6,7 @@ export class TermsRepository extends EntityRepository {
     async findAllWithContents() {
         return this.find({ archivedAt: null }, {
             populate: ['contents'],
+            refresh: true,
         });
     }
 }

package/dist/repositories/terms.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"terms.repository.js","sourceRoot":"","sources":["../../src/repositories/terms.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAe,MAAM,iBAAiB,CAAC;AAGhE,MAAM,OAAO,eAAgB,SAAQ,gBAA8B;IACjE;;OAEG;IACH,KAAK,CAAC,mBAAmB;QAGvB,OAAO,IAAI,CAAC,IAAI,CACd,EAAE,UAAU,EAAE,IAAI,EAAE,EACpB;YACE,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB,CACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"terms.repository.js","sourceRoot":"","sources":["../../src/repositories/terms.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAe,MAAM,iBAAiB,CAAC;AAGhE,MAAM,OAAO,eAAgB,SAAQ,gBAA8B;IACjE;;OAEG;IACH,KAAK,CAAC,mBAAmB;QAGvB,OAAO,IAAI,CAAC,IAAI,CACd,EAAE,UAAU,EAAE,IAAI,EAAE,EACpB;YACE,QAAQ,EAAE,CAAC,UAAU,CAAC;YACtB,OAAO,EAAE,IAAI;SACd,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/repositories/user-consent.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-consent.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-consent.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAO,MAAM,iBAAiB,CAAC;AAExD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,qBAAa,qBAAsB,SAAQ,gBAAgB,CAAC,iBAAiB,CAAC;IAC5E;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAMnC;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC,OAAO,CAAC,CAMlB;IAED;;;OAGG;IACG,YAAY,CAAC,MAAM,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8B7B;CACF"}
+{"version":3,"file":"user-consent.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-consent.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAO,MAAM,iBAAiB,CAAC;AAExD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,qBAAa,qBAAsB,SAAQ,gBAAgB,CAAC,iBAAiB,CAAC;IAC5E;;OAEG;IACG,WAAW,CACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CASnC;IAED;;OAEG;IACG,UAAU,CACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC,OAAO,CAAC,CAMlB;IAED;;;OAGG;IACG,YAAY,CAAC,MAAM,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8B7B;CACF"}

package/dist/repositories/user-consent.repository.js

@@ -9,7 +9,7 @@ export class UserConsentRepository extends EntityRepository {
             user: ref(UserEntity, userSub),
             client: clientId,
             revoked_at: null,
-        });
+        }, { refresh: true });
     }
     /**
      * Check if user has consented to all requested scopes for a client

package/dist/repositories/user-consent.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-consent.repository.js","sourceRoot":"","sources":["../../src/repositories/user-consent.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,MAAM,OAAO,qBAAsB,SAAQ,gBAAmC;IAC5E;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAe,EACf,QAAgB;QAEhB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;YAC9B,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAAe,EACf,QAAgB,EAChB,eAAyB;QAEzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,MAIlB;QACC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACzC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC;YACrC,MAAM,EAAE,MAAM,CAAC,QAAQ;SACxB,CAAC,CAAC;QAEH,IAAI,eAAe,EAAE,CAAC;YACpB,iDAAiD;YACjD,MAAM,YAAY,GAAG;gBACnB,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC;oBAC7D,GAAG,MAAM,CAAC,MAAM;iBACjB,CAAC;aACH,CAAC;YACF,eAAe,CAAC,MAAM,GAAG,YAAY,CAAC;YACtC,eAAe,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;YACxC,eAAe,CAAC,UAAU,GAAG,IAAI,CAAC;YAClC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,CAAC;YACtC,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,qBAAqB;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}
+{"version":3,"file":"user-consent.repository.js","sourceRoot":"","sources":["../../src/repositories/user-consent.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,MAAM,OAAO,qBAAsB,SAAQ,gBAAmC;IAC5E;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAAe,EACf,QAAgB;QAEhB,OAAO,IAAI,CAAC,OAAO,CACjB;YACE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;YAC9B,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,IAAI;SACjB,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACd,OAAe,EACf,QAAgB,EAChB,eAAyB;QAEzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,MAIlB;QACC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACzC,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC;YACrC,MAAM,EAAE,MAAM,CAAC,QAAQ;SACxB,CAAC,CAAC;QAEH,IAAI,eAAe,EAAE,CAAC;YACpB,iDAAiD;YACjD,MAAM,YAAY,GAAG;gBACnB,GAAG,IAAI,GAAG,CAAC;oBACT,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC;oBAC7D,GAAG,MAAM,CAAC,MAAM;iBACjB,CAAC;aACH,CAAC;YACF,eAAe,CAAC,MAAM,GAAG,YAAY,CAAC;YACtC,eAAe,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;YACxC,eAAe,CAAC,UAAU,GAAG,IAAI,CAAC;YAClC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,CAAC;YACtC,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,qBAAqB;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/repositories/user-terms-consent.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-terms-consent.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-terms-consent.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAO,MAAM,iBAAiB,CAAC;AAExD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAEvF,qBAAa,0BAA2B,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;IACtF;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAUxC;IAED;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CASxE;IAED;;;OAGG;IACG,qBAAqB,CACzB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAY9C;IAED;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,EAAE,UAAU,GAAG,UAAU,CAAC;KACtC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAYlC;IAED;;OAEG;IACG,cAAc,CAClB,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,EAAE,UAAU,GAAG,UAAU,CAAC;KACtC,CAAC,GACD,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAcnC;CACF"}
+{"version":3,"file":"user-terms-consent.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-terms-consent.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAO,MAAM,iBAAiB,CAAC;AAExD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAEvF,qBAAa,0BAA2B,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;IACtF;;OAEG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAWxC;IAED;;OAEG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAUxE;IAED;;;OAGG;IACG,qBAAqB,CACzB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAY9C;IAED;;OAEG;IACG,aAAa,CAAC,MAAM,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,EAAE,UAAU,GAAG,UAAU,CAAC;KACtC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAYlC;IAED;;OAEG;IACG,cAAc,CAClB,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,EAAE,UAAU,GAAG,UAAU,CAAC;KACtC,CAAC,GACD,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAcnC;CACF"}

package/dist/repositories/user-terms-consent.repository.js

@@ -10,6 +10,7 @@ export class UserTermsConsentRepository extends EntityRepository {
             terms: termsId,
         }, {
             orderBy: { agreedAt: 'DESC' },
+            refresh: true,
         });
     }
     /**
@@ -20,6 +21,7 @@ export class UserTermsConsentRepository extends EntityRepository {
             user: ref(UserEntity, userSub),
         }, {
             orderBy: { agreedAt: 'DESC' },
+            refresh: true,
         });
     }
     /**

package/dist/repositories/user-terms-consent.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"user-terms-consent.repository.js","sourceRoot":"","sources":["../../src/repositories/user-terms-consent.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,MAAM,OAAO,0BAA2B,SAAQ,gBAAwC;IACtF;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAe,EACf,OAAe;QAEf,OAAO,IAAI,CAAC,OAAO,CACjB;YACE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;YAC9B,KAAK,EAAE,OAAO;SACf,EACD;YACE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;SAC9B,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,OAAO,IAAI,CAAC,IAAI,CACd;YACE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;SAC/B,EACD;YACE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;SAC9B,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAAe;QAEf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkC,CAAC;QAEtD,6EAA6E;QAC7E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,MAMnB;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,MAME;QAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChC,IAAI,CAAC,MAAM,CAAC;YACV,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,KAAK,EAAE,CAAC,CAAC,OAAO;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CACH,CAAC;QAEF,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}
+{"version":3,"file":"user-terms-consent.repository.js","sourceRoot":"","sources":["../../src/repositories/user-terms-consent.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,MAAM,OAAO,0BAA2B,SAAQ,gBAAwC;IACtF;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAe,EACf,OAAe;QAEf,OAAO,IAAI,CAAC,OAAO,CACjB;YACE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;YAC9B,KAAK,EAAE,OAAO;SACf,EACD;YACE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;YAC7B,OAAO,EAAE,IAAI;SACd,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,OAAO,IAAI,CAAC,IAAI,CACd;YACE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC;SAC/B,EACD;YACE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;YAC7B,OAAO,EAAE,IAAI;SACd,CACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAAe;QAEf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkC,CAAC;QAEtD,6EAA6E;QAC7E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,MAMnB;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,EAAE,MAAM,CAAC,OAAO;YACpB,KAAK,EAAE,MAAM,CAAC,OAAO;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,MAME;QAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChC,IAAI,CAAC,MAAM,CAAC;YACV,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,KAAK,EAAE,CAAC,CAAC,OAAO;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CACH,CAAC;QAEF,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/repositories/user-totp-recovery-code.repository.d.ts

@@ -26,6 +26,15 @@ export declare class UserTotpRecoveryCodeRepository extends EntityRepository<IUs
             readonly role: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<"admin" | "user", Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
                 default: "user";
             }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly security_revision: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+                default: 0;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly token_epoch: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions & {
+                onCreate: (...args: any[]) => any;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly sessions_invalidated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+                nullable: true;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
             readonly deleted_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
                 nullable: true;
             }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
@@ -130,6 +139,9 @@ export declare class UserTotpRecoveryCodeRepository extends EntityRepository<IUs
                 readonly verified: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
                     default: false;
                 }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+                readonly last_used_step: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+                    nullable: true;
+                }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
                 readonly recovery_confirmed: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
                     default: false;
                 }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
@@ -213,6 +225,15 @@ export declare class UserTotpRecoveryCodeRepository extends EntityRepository<IUs
             readonly role: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<"admin" | "user", Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
                 default: "user";
             }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly security_revision: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+                default: 0;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly token_epoch: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions & {
+                onCreate: (...args: any[]) => any;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly sessions_invalidated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+                nullable: true;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
             readonly deleted_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
                 nullable: true;
             }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
@@ -317,6 +338,9 @@ export declare class UserTotpRecoveryCodeRepository extends EntityRepository<IUs
                 readonly verified: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
                     default: false;
                 }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+                readonly last_used_step: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+                    nullable: true;
+                }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
                 readonly recovery_confirmed: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
                     default: false;
                 }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;

package/dist/repositories/user-totp-recovery-code.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-totp-recovery-code.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-totp-recovery-code.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAEjG,qBAAa,8BAA+B,SAAQ,gBAAgB,CAAC,2BAA2B,CAAC;IACzF,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8KAMrE;IAED;;;;;OAKG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yKAExC;IAED;;;;;OAKG;IACG,oBAAoB,CAAC,OAAO,EAAE,MAAM,mBAEzC;IAEK,cAAc,CAAC,OAAO,EAAE,MAAM,mBAEnC;IAED;;;;;OAKG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,mBAEpC;CACF"}
+{"version":3,"file":"user-totp-recovery-code.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-totp-recovery-code.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAEjG,qBAAa,8BAA+B,SAAQ,gBAAgB,CAAC,2BAA2B,CAAC;IACzF,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8KAMrE;IAED;;;;;OAKG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yKAExC;IAED;;;;;OAKG;IACG,oBAAoB,CAAC,OAAO,EAAE,MAAM,mBAEzC;IAEK,cAAc,CAAC,OAAO,EAAE,MAAM,mBAEnC;IAED;;;;;OAKG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,mBAEpC;CACF"}

package/dist/repositories/user-totp.repository.d.ts

@@ -32,6 +32,15 @@ export declare class UserTotpRepository extends EntityRepository<IUserTotpEntity
             readonly role: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<"admin" | "user", Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
                 default: "user";
             }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly security_revision: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+                default: 0;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly token_epoch: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions & {
+                onCreate: (...args: any[]) => any;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly sessions_invalidated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+                nullable: true;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
             readonly deleted_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
                 nullable: true;
             }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
@@ -177,6 +186,9 @@ export declare class UserTotpRepository extends EntityRepository<IUserTotpEntity
         readonly verified: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
             default: false;
         }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+        readonly last_used_step: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
         readonly recovery_confirmed: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
             default: false;
         }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
@@ -220,6 +232,15 @@ export declare class UserTotpRepository extends EntityRepository<IUserTotpEntity
             readonly role: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<"admin" | "user", Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
                 default: "user";
             }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly security_revision: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+                default: 0;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly token_epoch: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions & {
+                onCreate: (...args: any[]) => any;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly sessions_invalidated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+                nullable: true;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
             readonly deleted_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
                 nullable: true;
             }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
@@ -365,6 +386,9 @@ export declare class UserTotpRepository extends EntityRepository<IUserTotpEntity
         readonly verified: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
             default: false;
         }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+        readonly last_used_step: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
         readonly recovery_confirmed: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
             default: false;
         }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
@@ -408,6 +432,15 @@ export declare class UserTotpRepository extends EntityRepository<IUserTotpEntity
             readonly role: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<"admin" | "user", Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
                 default: "user";
             }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly security_revision: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+                default: 0;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly token_epoch: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions & {
+                onCreate: (...args: any[]) => any;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+            readonly sessions_invalidated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+                nullable: true;
+            }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
             readonly deleted_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
                 nullable: true;
             }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
@@ -553,6 +586,9 @@ export declare class UserTotpRepository extends EntityRepository<IUserTotpEntity
         readonly verified: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
             default: false;
         }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
+        readonly last_used_step: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+            nullable: true;
+        }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;
         readonly recovery_confirmed: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
             default: false;
         }, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>, ("$type" | "lazyRef" | "strictNullable" | "~options" | "~type") | keyof import("@mikro-orm/core").PropertyOptions<any>>;

package/dist/repositories/user-totp.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-totp.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-totp.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,qBAAa,kBAAmB,SAAQ,gBAAgB,CAAC,eAAe,CAAC;IACvE;;;;;OAKG;IACG,aAAa,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qKAElC;IAED;;;;;;OAMG;IACG,4BAA4B,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qKAKjD;IAED;;;;;;OAMG;IACG,qBAAqB,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qKAK1C;IAED;;;;;OAKG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,oBAOjC;IAED;;;;;OAKG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,mBAEpC;CACF"}
+{"version":3,"file":"user-totp.repository.d.ts","sourceRoot":"","sources":["../../src/repositories/user-totp.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,qBAAa,kBAAmB,SAAQ,gBAAgB,CAAC,eAAe,CAAC;IACvE;;;;;OAKG;IACG,aAAa,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qKAElC;IAED;;;;;;OAMG;IACG,4BAA4B,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qKAKjD;IAED;;;;;;OAMG;IACG,qBAAqB,CAAC,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qKAK1C;IAED;;;;;OAKG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,oBAOjC;IAED;;;;;OAKG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,mBAEpC;CACF"}

package/dist/routes/.well-known/openid-configuration/get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/routes/.well-known/openid-configuration/get.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAW3B,CAAC"}
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/routes/.well-known/openid-configuration/get.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAe3B,CAAC"}

package/dist/routes/.well-known/openid-configuration/get.js

@@ -1,4 +1,5 @@
 import { Hono } from 'hono';
+import { describeRoute } from 'hono-openapi';
 import { buildOpenidConfiguration } from '#server/routes/oauth/.well-known/openid-configuration/get.js';
 /**
  * Standard OIDC Discovery endpoint at /.well-known/openid-configuration
@@ -7,7 +8,10 @@ import { buildOpenidConfiguration } from '#server/routes/oauth/.well-known/openi
  * This provides compatibility with clients that expect the standard
  * OIDC Discovery URL at the root level.
  */
-export const openidConfigGet = new Hono().get('/openid-configuration', async (c) => {
+export const openidConfigGet = new Hono().get('/openid-configuration', describeRoute({
+    summary: 'OpenID Connect discovery',
+    responses: { 200: { description: 'Provider metadata' } },
+}), async (c) => {
     const { config } = c.var.services;
     c.header('Cache-Control', 'public, max-age=3600');
     if (c.req.header('origin')) {