@trokky/trokky 2.0.3

package/dist/routes/auth/mfa.d.ts

@@ -0,0 +1,121 @@
+/**
+ * MFA (Multi-Factor Authentication) Routes
+ *
+ * API routes for MFA setup, verification, and management.
+ */
+import type { HttpRequest, HttpResponse } from '../types.js';
+import { TrokkyCore, type MFAMethodType } from '../../core/index.js';
+export interface MFAVerifyRequest {
+    mfaToken: string;
+    code: string;
+    method: MFAMethodType;
+    trustDevice?: boolean;
+    deviceId?: string;
+    deviceName?: string;
+    rememberMe?: boolean;
+}
+export interface MFASetupInitRequest {
+    method: MFAMethodType;
+}
+export interface MFAVerifySetupRequest {
+    code: string;
+}
+export interface MFADisableRequest {
+    method: MFAMethodType;
+    password: string;
+}
+export interface MFABackupVerifyRequest {
+    mfaToken: string;
+    code: string;
+    trustDevice?: boolean;
+    deviceId?: string;
+    deviceName?: string;
+    rememberMe?: boolean;
+}
+export interface TrustedDeviceRevokeRequest {
+    deviceId: string;
+}
+export interface AdminMFAResetRequest {
+    userId: string;
+    reason?: string;
+}
+/**
+ * POST /auth/mfa/verify
+ * Verify MFA code after login (using mfaToken)
+ */
+export declare function verifyMFA(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * POST /auth/mfa/verify-backup
+ * Verify using backup code
+ */
+export declare function verifyMFABackup(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * POST /auth/mfa/setup/totp
+ * Initialize TOTP setup (get QR code)
+ * Accepts either normal auth or X-MFA-Setup-Token header for login flow
+ */
+export declare function initTOTPSetup(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * POST /auth/mfa/setup/totp/verify
+ * Verify TOTP code and enable
+ * Accepts either normal auth or X-MFA-Setup-Token header for login flow
+ */
+export declare function verifyTOTPSetup(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * POST /auth/mfa/setup/email
+ * Initialize Email OTP setup (sends verification code)
+ * Accepts either normal auth or X-MFA-Setup-Token header for login flow
+ */
+export declare function initEmailOTPSetup(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * POST /auth/mfa/setup/email/verify
+ * Verify Email OTP code and enable
+ * Accepts either normal auth or X-MFA-Setup-Token header for login flow
+ */
+export declare function verifyEmailOTPSetup(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * POST /auth/mfa/disable
+ * Disable an MFA method
+ */
+export declare function disableMFA(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * POST /auth/mfa/disable-all
+ * Disable all MFA for user (removes all methods and backup codes)
+ */
+export declare function disableAllMFA(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * POST /auth/mfa/backup-codes/regenerate
+ * Regenerate backup codes
+ */
+export declare function regenerateBackupCodes(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * GET /auth/mfa/status
+ * Get user's MFA status
+ */
+export declare function getMFAStatus(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * GET /auth/mfa/trusted-devices
+ * List user's trusted devices
+ */
+export declare function getTrustedDevices(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * DELETE /auth/mfa/trusted-devices/:deviceId
+ * Revoke a trusted device
+ */
+export declare function revokeTrustedDevice(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * DELETE /auth/mfa/trusted-devices
+ * Revoke all trusted devices
+ */
+export declare function revokeAllTrustedDevices(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * POST /admin/users/:userId/mfa/reset
+ * Admin: Reset a user's MFA configuration
+ */
+export declare function adminResetUserMFA(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+/**
+ * POST /auth/mfa/send-code
+ * Send MFA code via email (for email OTP method during login)
+ */
+export declare function sendMFACode(req: HttpRequest, core: TrokkyCore): Promise<HttpResponse>;
+//# sourceMappingURL=mfa.d.ts.map

package/dist/routes/auth/mfa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa.d.ts","sourceRoot":"","sources":["../../../src/routes/auth/mfa.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EACL,UAAU,EAGV,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAA;AAuC5B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,aAAa,CAAA;IACrB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,aAAa,CAAA;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,aAAa,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAMD;;;GAGG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CA0HvB;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CAmHvB;AAMD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CA4DvB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CAqGvB;AAMD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CAyDvB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CAsGvB;AAMD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CAoEvB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CA4DvB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CA2EvB;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CAuCvB;AAMD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CAyCvB;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CAgEvB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CAyCvB;AAMD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CA8FvB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CA6EvB"}