@tinyrack/tinyauth-server 0.0.7

package/dist/entities/oauth-code.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-code.entity.d.ts","sourceRoot":"","sources":["../../src/entities/oauth-code.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAG/E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,eAAO,MAAM,2BAA2B;;;CAG9B,CAAC;AAEX,MAAM,MAAM,yBAAyB,GACnC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,OAAO,2BAA2B,CAAC,CAAC;AAEjF,eAAO,MAAM,qBAAqB;;;;mBA4Ew/c,GAAG;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;2BAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;IA7Bzhd;;;;OAIG;;;;;;mBAyBmhd,GAAG;;;mBAAH,GAAG;;;;mBAAH,GAAG;;;mBAAH,GAAG;;;;;;mBAAH,GAAG;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;2BAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;IA7Bzhd;;;;OAIG;;;;;;;;mBAyBmhd,GAAG;;;;;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;;;2BAAH,GAAG;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;;;+BAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;;;mCAAH,GAAG;;;;uCAAH,GAAG;;;uCAAH,GAAG;;;;;;;;;;;;;;;;mCAAH,GAAG;;;mCAAH,GAAG;;;;;;;+BAAH,GAAG;;;+BAAH,GAAG;;;;;;;2BAAH,GAAG;;;;2BAAH,GAAG;;;2BAAH,GAAG;;;;;;;uBAAH,GAAG;;;uBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;IA7Bzhd;;;;OAIG;;;;;;mBAyBmhd,GAAG;;;mBAAH,GAAG;;wEAH3hd,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/entities/oauth-code.entity.js

@@ -0,0 +1,79 @@
+import { defineEntity } from '@mikro-orm/core';
+import { OAuthCodeRepository } from "../repositories/oauth-code.repository.js";
+import { BaseSchema } from "./base.entity.js";
+import { OAuthClientEntitySchema } from "./oauth-client.entity.js";
+import { UserEntity } from "./user.entity.js";
+export const OAUTH_CODE_CHALLENGE_METHOD = {
+    S256: 'S256',
+    plain: 'plain',
+};
+export const OAuthCodeEntitySchema = defineEntity({
+    name: 'OAuthCodeEntity',
+    tableName: 'oauth_code',
+    comment: 'Issued OAuth authorization codes',
+    extends: BaseSchema,
+    repository: () => OAuthCodeRepository,
+    properties: (p) => ({
+        id: p
+            .uuid()
+            .primary()
+            .comment('Primary key as UUID')
+            .onCreate(() => crypto.randomUUID()),
+        codeHash: p
+            .string()
+            .comment('Hash of the issued authorization code')
+            .unique(),
+        client: () => p
+            .manyToOne(OAuthClientEntitySchema)
+            .comment('Reference to the OAuth client that requested the code'),
+        user: () => p
+            .manyToOne(UserEntity)
+            .ref()
+            .comment('Reference to the resource owner (user)'),
+        redirectUri: p
+            .string()
+            .comment('Redirect URI used during the authorization request')
+            .nullable(),
+        scope: p
+            .json()
+            .comment('Scopes granted by the authorization code')
+            .default([]),
+        nonce: p
+            .string()
+            .comment('Nonce value associated with the authorization request'),
+        codeChallenge: p.string().comment('PKCE code challenge value'),
+        codeChallengeMethod: p
+            .enum(() => OAUTH_CODE_CHALLENGE_METHOD)
+            .comment('PKCE code challenge method')
+            .default(OAUTH_CODE_CHALLENGE_METHOD.S256),
+        expiredAt: p.datetime().comment('Absolute expiry timestamp for the code'),
+        consumedAt: p
+            .datetime()
+            .comment('Timestamp when the code was redeemed')
+            .nullable(),
+        /**
+         * OIDC Authentication Metadata
+         * These fields store authentication context from the user's session
+         * to be included in the ID Token when the code is exchanged.
+         */
+        authTime: p
+            .integer()
+            .comment('Time when the End-User authentication occurred (Unix timestamp). Used for auth_time claim in ID Token (OIDC Core 1.0 §2)')
+            .nullable(),
+    }),
+    indexes: [
+        {
+            name: 'auth_code_hash_idx',
+            properties: ['codeHash'],
+        },
+        {
+            name: 'oauth_code_client_consumed_idx',
+            properties: ['client', 'consumedAt'],
+        },
+        {
+            name: 'oauth_code_expired_at_idx',
+            properties: ['expiredAt'],
+        },
+    ],
+});
+//# sourceMappingURL=oauth-code.entity.js.map

package/dist/entities/oauth-code.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-code.entity.js","sourceRoot":"","sources":["../../src/entities/oauth-code.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAoB,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACN,CAAC;AAKX,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;IAChD,IAAI,EAAE,iBAAiB;IACvB,SAAS,EAAE,YAAY;IACvB,OAAO,EAAE,kCAAkC;IAC3C,OAAO,EAAE,UAAU;IACnB,UAAU,EAAE,GAAG,EAAE,CAAC,mBAAmB;IACrC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,CAAC;aACF,IAAI,EAAE;aACN,OAAO,EAAE;aACT,OAAO,CAAC,qBAAqB,CAAC;aAC9B,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,OAAO,CAAC,uCAAuC,CAAC;aAChD,MAAM,EAAE;QACX,MAAM,EAAE,GAAG,EAAE,CACX,CAAC;aACE,SAAS,CAAC,uBAAuB,CAAC;aAClC,OAAO,CAAC,uDAAuD,CAAC;QACrE,IAAI,EAAE,GAAG,EAAE,CACT,CAAC;aACE,SAAS,CAAC,UAAU,CAAC;aACrB,GAAG,EAAE;aACL,OAAO,CAAC,wCAAwC,CAAC;QACtD,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,OAAO,CAAC,oDAAoD,CAAC;aAC7D,QAAQ,EAAE;QACb,KAAK,EAAE,CAAC;aACL,IAAI,EAAY;aAChB,OAAO,CAAC,0CAA0C,CAAC;aACnD,OAAO,CAAC,EAAE,CAAC;QACd,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,OAAO,CAAC,uDAAuD,CAAC;QACnE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC;QAC9D,mBAAmB,EAAE,CAAC;aACnB,IAAI,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC;aACvC,OAAO,CAAC,4BAA4B,CAAC;aACrC,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC;QAC5C,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC;QACzE,UAAU,EAAE,CAAC;aACV,QAAQ,EAAE;aACV,OAAO,CAAC,sCAAsC,CAAC;aAC/C,QAAQ,EAAE;QAEb;;;;WAIG;QACH,QAAQ,EAAE,CAAC;aACR,OAAO,EAAE;aACT,OAAO,CACN,0HAA0H,CAC3H;aACA,QAAQ,EAAE;KACd,CAAC;IACF,OAAO,EAAE;QACP;YACE,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,CAAC,UAAU,CAAC;SACzB;QACD;YACE,IAAI,EAAE,gCAAgC;YACtC,UAAU,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;SACrC;QACD;YACE,IAAI,EAAE,2BAA2B;YACjC,UAAU,EAAE,CAAC,WAAW,CAAC;SAC1B;KACF;CACF,CAAC,CAAC"}

package/dist/entities/password-reset.entity.d.ts

@@ -0,0 +1,90 @@
+import { type InferEntity } from '@mikro-orm/core';
+import { PasswordResetRepository } from '../repositories/password-reset.repository.ts';
+import { UserEntity } from './user.entity.ts';
+export declare const PasswordResetEntitySchema: import("@mikro-orm/core").EntitySchemaWithMeta<"PasswordResetEntity", "password_reset", import("@mikro-orm/core").InferEntityFromProperties<{
+    readonly id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "primary"> & {
+        primary: true;
+    } & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly user: () => import("@mikro-orm/core").PropertyChain<UserEntity, Omit<import("@mikro-orm/core").EmptyOptions & {
+        kind: "m:1";
+    }, "ref"> & {
+        ref: true;
+    }>;
+    readonly token: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly expiresAt: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly used: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+        default: false;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly usedAt: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, "default"> & {
+        default: null;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, undefined, import("@mikro-orm/core").InferEntityFromProperties<{
+    readonly created_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly updated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, undefined, never, never, false>, typeof PasswordResetRepository, false>, import("@mikro-orm/core").InferEntityFromProperties<{
+    readonly created_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly updated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, undefined, never, never, false>, {
+    readonly id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "primary"> & {
+        primary: true;
+    } & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly user: () => import("@mikro-orm/core").PropertyChain<UserEntity, Omit<import("@mikro-orm/core").EmptyOptions & {
+        kind: "m:1";
+    }, "ref"> & {
+        ref: true;
+    }>;
+    readonly token: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly expiresAt: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly used: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+        default: false;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly usedAt: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, "default"> & {
+        default: null;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, import("@mikro-orm/core").EntityCtor<import("@mikro-orm/core").InferEntityFromProperties<{
+    readonly id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "primary"> & {
+        primary: true;
+    } & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly user: () => import("@mikro-orm/core").PropertyChain<UserEntity, Omit<import("@mikro-orm/core").EmptyOptions & {
+        kind: "m:1";
+    }, "ref"> & {
+        ref: true;
+    }>;
+    readonly token: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly expiresAt: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly used: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<NonNullable<boolean | null | undefined>, Omit<import("@mikro-orm/core").EmptyOptions, "default"> & {
+        default: false;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly usedAt: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, Omit<Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, "default"> & {
+        default: null;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, undefined, import("@mikro-orm/core").InferEntityFromProperties<{
+    readonly created_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly updated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, undefined, never, never, false>, typeof PasswordResetRepository, false>>>;
+export type IPasswordResetEntity = InferEntity<typeof PasswordResetEntitySchema>;
+//# sourceMappingURL=password-reset.entity.d.ts.map

package/dist/entities/password-reset.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.entity.d.ts","sourceRoot":"","sources":["../../src/entities/password-reset.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAEvF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,eAAO,MAAM,yBAAyB;;;;mBAuCm5f,GAAG;;;;;;;;;;;;;;;;;;;mBAAH,GAAG;;;mBAAH,GAAG;;;;mBAAH,GAAG;;;mBAAH,GAAG;;;;;;mBAAH,GAAG;;;;;;;;;;;;;;;;;;;;;mBAAH,GAAG;;;;;;;;;;;;;;;;;;;mBAAH,GAAG;;;mBAAH,GAAG;;4EAL17f,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAC5C,OAAO,yBAAyB,CACjC,CAAC"}

package/dist/entities/password-reset.entity.js

@@ -0,0 +1,39 @@
+import { defineEntity } from '@mikro-orm/core';
+import { PasswordResetRepository } from "../repositories/password-reset.repository.js";
+import { BaseSchema } from "./base.entity.js";
+import { UserEntity } from "./user.entity.js";
+export const PasswordResetEntitySchema = defineEntity({
+    name: 'PasswordResetEntity',
+    tableName: 'password_reset',
+    comment: 'Password reset tokens for user password recovery',
+    extends: BaseSchema,
+    repository: () => PasswordResetRepository,
+    properties: (p) => ({
+        id: p
+            .uuid()
+            .primary()
+            .comment('Primary key as UUID')
+            .onCreate(() => crypto.randomUUID()),
+        user: () => p
+            .manyToOne(UserEntity)
+            .ref()
+            .comment('Reference to the user')
+            .index('password_reset_user_sub_idx'),
+        token: p.string().comment('Unique password reset token'),
+        expiresAt: p.datetime().comment('Token expiration timestamp'),
+        used: p.boolean().comment('Whether the token has been used').default(false),
+        usedAt: p
+            .datetime()
+            .comment('Timestamp when the token was used')
+            .nullable()
+            .default(null),
+    }),
+    indexes: [
+        {
+            name: 'password_reset_token_idx',
+            properties: ['token'],
+            options: { unique: true },
+        },
+    ],
+});
+//# sourceMappingURL=password-reset.entity.js.map

package/dist/entities/password-reset.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.entity.js","sourceRoot":"","sources":["../../src/entities/password-reset.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAoB,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,CAAC,MAAM,yBAAyB,GAAG,YAAY,CAAC;IACpD,IAAI,EAAE,qBAAqB;IAC3B,SAAS,EAAE,gBAAgB;IAC3B,OAAO,EAAE,kDAAkD;IAC3D,OAAO,EAAE,UAAU;IACnB,UAAU,EAAE,GAAG,EAAE,CAAC,uBAAuB;IACzC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,CAAC;aACF,IAAI,EAAE;aACN,OAAO,EAAE;aACT,OAAO,CAAC,qBAAqB,CAAC;aAC9B,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,IAAI,EAAE,GAAG,EAAE,CACT,CAAC;aACE,SAAS,CAAC,UAAU,CAAC;aACrB,GAAG,EAAE;aACL,OAAO,CAAC,uBAAuB,CAAC;aAChC,KAAK,CAAC,6BAA6B,CAAC;QACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC;QACxD,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC;QAC7D,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC3E,MAAM,EAAE,CAAC;aACN,QAAQ,EAAE;aACV,OAAO,CAAC,mCAAmC,CAAC;aAC5C,QAAQ,EAAE;aACV,OAAO,CAAC,IAAI,CAAC;KACjB,CAAC;IACF,OAAO,EAAE;QACP;YACE,IAAI,EAAE,0BAA0B;YAChC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SAC1B;KACF;CACF,CAAC,CAAC"}

package/dist/entities/pending-oauth-registration.entity.d.ts

@@ -0,0 +1,116 @@
+import { type InferEntity } from '@mikro-orm/core';
+import { PendingOAuthRegistrationRepository } from '../repositories/pending-oauth-registration.repository.ts';
+/**
+ * Stores pending OAuth registration data server-side.
+ *
+ * When a new OAuth user needs to accept explicit terms before
+ * registration completes, the OAuth tokens and user info are
+ * persisted here instead of in the session cookie (which has a
+ * ~4 KB size limit). The session only holds a lightweight lookup
+ * token that references this record.
+ */
+export declare const PendingOAuthRegistrationEntitySchema: import("@mikro-orm/core").EntitySchemaWithMeta<"PendingOAuthRegistrationEntity", "pending_oauth_registration", import("@mikro-orm/core").InferEntityFromProperties<{
+    readonly id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "primary"> & {
+        primary: true;
+    } & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly token: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly providerId: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly accessToken: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly refreshToken: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly expiresIn: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly tokenType: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly userInfo: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<{
+        id: string;
+        email: string;
+        email_verified: boolean;
+        name?: string | undefined;
+        picture?: string | undefined;
+    }, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly returnUrl: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly expiresAt: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, undefined, import("@mikro-orm/core").InferEntityFromProperties<{
+    readonly created_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly updated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, undefined, never, never, false>, typeof PendingOAuthRegistrationRepository, false>, import("@mikro-orm/core").InferEntityFromProperties<{
+    readonly created_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly updated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, undefined, never, never, false>, {
+    readonly id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "primary"> & {
+        primary: true;
+    } & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly token: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly providerId: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly accessToken: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly refreshToken: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly expiresIn: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly tokenType: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly userInfo: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<{
+        id: string;
+        email: string;
+        email_verified: boolean;
+        name?: string | undefined;
+        picture?: string | undefined;
+    }, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly returnUrl: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly expiresAt: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, import("@mikro-orm/core").EntityCtor<import("@mikro-orm/core").InferEntityFromProperties<{
+    readonly id: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "primary"> & {
+        primary: true;
+    } & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly token: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly providerId: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly accessToken: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly refreshToken: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly expiresIn: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<number, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly tokenType: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly userInfo: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<{
+        id: string;
+        email: string;
+        email_verified: boolean;
+        name?: string | undefined;
+        picture?: string | undefined;
+    }, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly returnUrl: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<string, Omit<import("@mikro-orm/core").EmptyOptions, "nullable"> & {
+        nullable: true;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly expiresAt: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, undefined, import("@mikro-orm/core").InferEntityFromProperties<{
+    readonly created_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+    readonly updated_at: Pick<import("@mikro-orm/core").UniversalPropertyOptionsBuilder<Date, import("@mikro-orm/core").EmptyOptions & {
+        onCreate: (...args: any[]) => any;
+    }, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>, keyof import("@mikro-orm/core").PropertyOptions<any> | ("~options" | "~type" | "$type" | "strictNullable")>;
+}, undefined, never, never, false>, typeof PendingOAuthRegistrationRepository, false>>>;
+export type IPendingOAuthRegistrationEntity = InferEntity<typeof PendingOAuthRegistrationEntitySchema>;
+//# sourceMappingURL=pending-oauth-registration.entity.d.ts.map

package/dist/entities/pending-oauth-registration.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-oauth-registration.entity.d.ts","sourceRoot":"","sources":["../../src/entities/pending-oauth-registration.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,kCAAkC,EAAE,MAAM,0DAA0D,CAAC;AAG9G;;;;;;;;GAQG;AACH,eAAO,MAAM,oCAAoC;;;;mBAiE+zd,GAAG;;;;;;;;;;;;;YA/Bv2d,MAAM;eACH,MAAM;wBACG,OAAO;eAChB,MAAM,GAAG,SAAS;kBACf,MAAM,GAAG,SAAS;;;;;;;;mBA2B40d,GAAG;;;mBAAH,GAAG;;;;mBAAH,GAAG;;;mBAAH,GAAG;;;;;;mBAAH,GAAG;;;;;;;;;;;;;YA/Bv2d,MAAM;eACH,MAAM;wBACG,OAAO;eAChB,MAAM,GAAG,SAAS;kBACf,MAAM,GAAG,SAAS;;;;;;;;;;mBA2B40d,GAAG;;;;;;;;;;;;;YA/Bv2d,MAAM;eACH,MAAM;wBACG,OAAO;eAChB,MAAM,GAAG,SAAS;kBACf,MAAM,GAAG,SAAS;;;;;;;;mBA2B40d,GAAG;;;mBAAH,GAAG;;uFALj3d,CAAC;AAEH,MAAM,MAAM,+BAA+B,GAAG,WAAW,CACvD,OAAO,oCAAoC,CAC5C,CAAC"}

package/dist/entities/pending-oauth-registration.entity.js

@@ -0,0 +1,67 @@
+import { defineEntity } from '@mikro-orm/core';
+import { PendingOAuthRegistrationRepository } from "../repositories/pending-oauth-registration.repository.js";
+import { BaseSchema } from "./base.entity.js";
+/**
+ * Stores pending OAuth registration data server-side.
+ *
+ * When a new OAuth user needs to accept explicit terms before
+ * registration completes, the OAuth tokens and user info are
+ * persisted here instead of in the session cookie (which has a
+ * ~4 KB size limit). The session only holds a lightweight lookup
+ * token that references this record.
+ */
+export const PendingOAuthRegistrationEntitySchema = defineEntity({
+    name: 'PendingOAuthRegistrationEntity',
+    tableName: 'pending_oauth_registration',
+    comment: 'Server-side store for pending OAuth registrations awaiting terms consent',
+    extends: BaseSchema,
+    repository: () => PendingOAuthRegistrationRepository,
+    properties: (p) => ({
+        id: p
+            .uuid()
+            .primary()
+            .comment('Primary key as UUID')
+            .onCreate(() => crypto.randomUUID()),
+        token: p
+            .string()
+            .comment('Unique lookup token stored in the session cookie')
+            .unique(),
+        providerId: p.string().comment('OAuth provider identifier'),
+        accessToken: p
+            .text()
+            .comment('OAuth access token from the provider')
+            .lazy(),
+        refreshToken: p
+            .text()
+            .comment('OAuth refresh token from the provider')
+            .nullable()
+            .lazy(),
+        expiresIn: p
+            .integer()
+            .comment('Token expiration duration in seconds')
+            .nullable(),
+        tokenType: p.string().comment('OAuth token type (e.g. Bearer)'),
+        userInfo: p
+            .json()
+            .comment('Normalized user info from the OAuth provider'),
+        returnUrl: p
+            .string()
+            .comment('URL to redirect to after registration completes')
+            .nullable(),
+        expiresAt: p
+            .datetime()
+            .comment('Absolute expiry timestamp for this pending registration'),
+    }),
+    indexes: [
+        {
+            name: 'pending_oauth_reg_token_idx',
+            properties: ['token'],
+            options: { unique: true },
+        },
+        {
+            name: 'pending_oauth_reg_expires_at_idx',
+            properties: ['expiresAt'],
+        },
+    ],
+});
+//# sourceMappingURL=pending-oauth-registration.entity.js.map

package/dist/entities/pending-oauth-registration.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-oauth-registration.entity.js","sourceRoot":"","sources":["../../src/entities/pending-oauth-registration.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAoB,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,kCAAkC,EAAE,MAAM,0DAA0D,CAAC;AAC9G,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,YAAY,CAAC;IAC/D,IAAI,EAAE,gCAAgC;IACtC,SAAS,EAAE,4BAA4B;IACvC,OAAO,EACL,0EAA0E;IAC5E,OAAO,EAAE,UAAU;IACnB,UAAU,EAAE,GAAG,EAAE,CAAC,kCAAkC;IACpD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClB,EAAE,EAAE,CAAC;aACF,IAAI,EAAE;aACN,OAAO,EAAE;aACT,OAAO,CAAC,qBAAqB,CAAC;aAC9B,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,OAAO,CAAC,kDAAkD,CAAC;aAC3D,MAAM,EAAE;QACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC;QAC3D,WAAW,EAAE,CAAC;aACX,IAAI,EAAE;aACN,OAAO,CAAC,sCAAsC,CAAC;aAC/C,IAAI,EAAE;QACT,YAAY,EAAE,CAAC;aACZ,IAAI,EAAE;aACN,OAAO,CAAC,uCAAuC,CAAC;aAChD,QAAQ,EAAE;aACV,IAAI,EAAE;QACT,SAAS,EAAE,CAAC;aACT,OAAO,EAAE;aACT,OAAO,CAAC,sCAAsC,CAAC;aAC/C,QAAQ,EAAE;QACb,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC;QAC/D,QAAQ,EAAE,CAAC;aACR,IAAI,EAMD;aACH,OAAO,CAAC,8CAA8C,CAAC;QAC1D,SAAS,EAAE,CAAC;aACT,MAAM,EAAE;aACR,OAAO,CAAC,iDAAiD,CAAC;aAC1D,QAAQ,EAAE;QACb,SAAS,EAAE,CAAC;aACT,QAAQ,EAAE;aACV,OAAO,CAAC,yDAAyD,CAAC;KACtE,CAAC;IACF,OAAO,EAAE;QACP;YACE,IAAI,EAAE,6BAA6B;YACnC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SAC1B;QACD;YACE,IAAI,EAAE,kCAAkC;YACxC,UAAU,EAAE,CAAC,WAAW,CAAC;SAC1B;KACF;CACF,CAAC,CAAC"}