@udhuong/admin-core 0.1.0 → 0.1.2

package/dist/server/auth/domain/entities/auth-user.js

@@ -0,0 +1,134 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthUser = void 0;
+const enums_1 = require("../enums");
+class AuthUser {
+    id;
+    email;
+    username;
+    displayName;
+    avatar;
+    passwordHash;
+    emailVerifiedAt;
+    status;
+    failedLoginAttempts;
+    lockedUntil;
+    lastLoginAt;
+    lastLoginIp;
+    passwordChangedAt;
+    passwordResetToken;
+    passwordResetTokenExpiry;
+    twoFactorEnabled;
+    twoFactorMethod;
+    createdAt;
+    updatedAt;
+    roles;
+    permissions;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    get isActive() {
+        return [enums_1.AuthUserStatus.ACTIVE, enums_1.AuthUserStatus.PENDING_VERIFICATION].includes(this.status);
+    }
+    get isEmailVerified() {
+        return this.emailVerifiedAt !== null && this.emailVerifiedAt !== undefined;
+    }
+    get hasPassword() {
+        return !!this.passwordHash;
+    }
+    isLocked() {
+        if (!this.lockedUntil)
+            return false;
+        return this.lockedUntil > new Date();
+    }
+    canLogin() {
+        return (this.isActive) && !this.isLocked();
+    }
+    incrementFailedAttempts(maxAttempts = 5) {
+        this.failedLoginAttempts += 1;
+        return this.failedLoginAttempts >= maxAttempts;
+    }
+    lockAccount(durationMinutes = 15) {
+        const now = new Date();
+        this.lockedUntil = new Date(now.getTime() + durationMinutes * 60000);
+        this.status = enums_1.AuthUserStatus.LOCKED;
+    }
+    unlockIfExpired() {
+        if (this.lockedUntil && this.lockedUntil <= new Date()) {
+            this.lockedUntil = null;
+            this.status = enums_1.AuthUserStatus.ACTIVE;
+        }
+    }
+    resetFailedAttempts() {
+        this.failedLoginAttempts = 0;
+        this.lockedUntil = null;
+        if (this.status === enums_1.AuthUserStatus.LOCKED) {
+            this.status = enums_1.AuthUserStatus.ACTIVE;
+        }
+    }
+    updateLastLogin(ipAddress) {
+        this.lastLoginAt = new Date();
+        this.lastLoginIp = ipAddress;
+    }
+    verifyEmail() {
+        if (!this.isEmailVerified) {
+            this.emailVerifiedAt = new Date();
+        }
+    }
+    enable2FA(method) {
+        this.twoFactorEnabled = true;
+        this.twoFactorMethod = method;
+    }
+    disable2FA() {
+        this.twoFactorEnabled = false;
+        this.twoFactorMethod = null;
+    }
+    updatePassword(newPasswordHash) {
+        this.passwordHash = newPasswordHash;
+        this.passwordChangedAt = new Date();
+    }
+    suspend() {
+        this.status = enums_1.AuthUserStatus.SUSPENDED;
+    }
+    activate() {
+        this.status = enums_1.AuthUserStatus.ACTIVE;
+        this.lockedUntil = null;
+        this.failedLoginAttempts = 0;
+    }
+    shouldChangePassword(maxDays = 90) {
+        if (!this.passwordChangedAt)
+            return true;
+        const daysSinceChange = Math.floor((new Date().getTime() - this.passwordChangedAt.getTime()) /
+            (1000 * 60 * 60 * 24));
+        return daysSinceChange >= maxDays;
+    }
+    isNewIpAddress(ipAddress) {
+        return this.lastLoginIp !== ipAddress;
+    }
+    isValidForRegistration() {
+        return !!(this.email && this.passwordHash);
+    }
+    getDisplayName() {
+        return this.displayName || this.username || this.email.split('@')[0];
+    }
+    toPublic() {
+        return {
+            id: this.id,
+            email: this.email,
+            username: this.username,
+            displayName: this.displayName,
+            avatar: this.avatar,
+            emailVerifiedAt: this.emailVerifiedAt,
+            emailVerified: !!this.emailVerifiedAt,
+            status: this.status,
+            lastLoginAt: this.lastLoginAt,
+            twoFactorEnabled: this.twoFactorEnabled,
+            createdAt: this.createdAt,
+            updatedAt: this.updatedAt,
+            roles: this.roles,
+            permissions: this.permissions,
+        };
+    }
+}
+exports.AuthUser = AuthUser;
+//# sourceMappingURL=auth-user.js.map

package/dist/server/auth/domain/entities/auth-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-user.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/auth-user.ts"],"names":[],"mappings":";;;AAAA,oCAA2D;AAE3D,MAAa,QAAQ;IACnB,EAAE,CAAS;IACX,KAAK,CAAS;IACd,QAAQ,CAAU;IAClB,WAAW,CAAU;IACrB,MAAM,CAAU;IAChB,YAAY,CAAU;IACtB,eAAe,CAAQ;IACvB,MAAM,CAAiB;IACvB,mBAAmB,CAAS;IAC5B,WAAW,CAAQ;IACnB,WAAW,CAAQ;IACnB,WAAW,CAAU;IACrB,iBAAiB,CAAQ;IACzB,kBAAkB,CAAU;IAC5B,wBAAwB,CAAQ;IAChC,gBAAgB,CAAU;IAC1B,eAAe,CAAmB;IAClC,SAAS,CAAO;IAChB,SAAS,CAAO;IAChB,KAAK,CAAY;IACjB,WAAW,CAAY;IAEvB,YAAY,OAA2B;QACrC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAID,IAAI,QAAQ;QACV,OAAO,CAAC,sBAAc,CAAC,MAAM,EAAE,sBAAc,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC;IAC7E,CAAC;IAED,IAAI,WAAW;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAOD,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACpC,OAAO,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IACvC,CAAC;IAKD,QAAQ;QACN,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAMD,uBAAuB,CAAC,cAAsB,CAAC;QAC7C,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,mBAAmB,IAAI,WAAW,CAAC;IACjD,CAAC;IAKD,WAAW,CAAC,kBAA0B,EAAE;QACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,eAAe,GAAG,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,GAAG,sBAAc,CAAC,MAAM,CAAC;IACtC,CAAC;IAKD,eAAe;QACb,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,MAAM,GAAG,sBAAc,CAAC,MAAM,CAAC;QACtC,CAAC;IACH,CAAC;IAKD,mBAAmB;QACjB,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,sBAAc,CAAC,MAAM,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,GAAG,sBAAc,CAAC,MAAM,CAAC;QACtC,CAAC;IACH,CAAC;IAKD,eAAe,CAAC,SAAiB;QAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;IAC/B,CAAC;IAKD,WAAW;QACT,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAKD,SAAS,CAAC,MAAuB;QAC/B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC;IAChC,CAAC;IAKD,UAAU;QACR,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAC9B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;IAC9B,CAAC;IAKD,cAAc,CAAC,eAAuB;QACpC,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC;QACpC,IAAI,CAAC,iBAAiB,GAAG,IAAI,IAAI,EAAE,CAAC;IACtC,CAAC;IAKD,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,sBAAc,CAAC,SAAS,CAAC;IACzC,CAAC;IAKD,QAAQ;QACN,IAAI,CAAC,MAAM,GAAG,sBAAc,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;IAC/B,CAAC;IAKD,oBAAoB,CAAC,UAAkB,EAAE;QACvC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAEzC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAChC,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;YACvD,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CACxB,CAAC;QAEF,OAAO,eAAe,IAAI,OAAO,CAAC;IACpC,CAAC;IAKD,cAAc,CAAC,SAAiB;QAC9B,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC;IACxC,CAAC;IAKD,sBAAsB;QACpB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IAKD,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAKD,QAAQ;QAMN,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe;YACrC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC;IACJ,CAAC;CACF;AAvND,4BAuNC"}

package/dist/server/auth/domain/entities/email-verification-token.d.ts

@@ -0,0 +1,13 @@
+export declare class EmailVerificationToken {
+    id: number;
+    userId: number;
+    token: string;
+    expiresAt: Date;
+    verifiedAt?: Date;
+    createdAt: Date;
+    constructor(partial?: Partial<EmailVerificationToken>);
+    isValid(): boolean;
+    isExpired(): boolean;
+    markAsVerified(): void;
+}
+//# sourceMappingURL=email-verification-token.d.ts.map

package/dist/server/auth/domain/entities/email-verification-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-verification-token.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/email-verification-token.ts"],"names":[],"mappings":"AAAA,qBAAa,sBAAsB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC;IAOrD,OAAO,IAAI,OAAO;IAQlB,SAAS,IAAI,OAAO;IAOpB,cAAc,IAAI,IAAI;CAGvB"}

package/dist/server/auth/domain/entities/email-verification-token.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailVerificationToken = void 0;
+class EmailVerificationToken {
+    id;
+    userId;
+    token;
+    expiresAt;
+    verifiedAt;
+    createdAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    isValid() {
+        if (this.verifiedAt)
+            return false;
+        return this.expiresAt > new Date();
+    }
+    isExpired() {
+        return this.expiresAt <= new Date();
+    }
+    markAsVerified() {
+        this.verifiedAt = new Date();
+    }
+}
+exports.EmailVerificationToken = EmailVerificationToken;
+//# sourceMappingURL=email-verification-token.js.map

package/dist/server/auth/domain/entities/email-verification-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-verification-token.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/email-verification-token.ts"],"names":[],"mappings":";;;AAAA,MAAa,sBAAsB;IACjC,EAAE,CAAS;IACX,MAAM,CAAS;IACf,KAAK,CAAS;IACd,SAAS,CAAO;IAChB,UAAU,CAAQ;IAClB,SAAS,CAAO;IAEhB,YAAY,OAAyC;QACnD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,OAAO;QACL,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IACrC,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,CAAC;IAKD,cAAc;QACZ,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;IAC/B,CAAC;CACF;AAjCD,wDAiCC"}

package/dist/server/auth/domain/entities/index.d.ts

@@ -0,0 +1,17 @@
+export * from './auth-user';
+export * from './role';
+export * from './permission';
+export * from './user-role';
+export * from './role-permission';
+export * from './oauth-client';
+export * from './oauth-scope';
+export * from './oauth-token';
+export * from './oauth-authorization-code';
+export * from './oauth-client-consent';
+export * from './user-session';
+export * from './login-history';
+export * from './user-two-factor';
+export * from './email-verification-token';
+export * from './social-account';
+export * from './oauth-audit-log';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/auth/domain/entities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC"}

package/dist/server/auth/domain/entities/index.js

@@ -0,0 +1,33 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./auth-user"), exports);
+__exportStar(require("./role"), exports);
+__exportStar(require("./permission"), exports);
+__exportStar(require("./user-role"), exports);
+__exportStar(require("./role-permission"), exports);
+__exportStar(require("./oauth-client"), exports);
+__exportStar(require("./oauth-scope"), exports);
+__exportStar(require("./oauth-token"), exports);
+__exportStar(require("./oauth-authorization-code"), exports);
+__exportStar(require("./oauth-client-consent"), exports);
+__exportStar(require("./user-session"), exports);
+__exportStar(require("./login-history"), exports);
+__exportStar(require("./user-two-factor"), exports);
+__exportStar(require("./email-verification-token"), exports);
+__exportStar(require("./social-account"), exports);
+__exportStar(require("./oauth-audit-log"), exports);
+//# sourceMappingURL=index.js.map

package/dist/server/auth/domain/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,yCAAuB;AACvB,+CAA6B;AAC7B,8CAA4B;AAC5B,oDAAkC;AAClC,iDAA+B;AAC/B,gDAA8B;AAC9B,gDAA8B;AAC9B,6DAA2C;AAC3C,yDAAuC;AACvC,iDAA+B;AAC/B,kDAAgC;AAChC,oDAAkC;AAClC,6DAA2C;AAC3C,mDAAiC;AACjC,oDAAkC"}

package/dist/server/auth/domain/entities/login-history.d.ts

@@ -0,0 +1,18 @@
+import { LoginStatus } from "../enums";
+export declare class LoginHistory {
+    id: number;
+    userId?: number;
+    email: string;
+    status: LoginStatus;
+    failureReason?: string;
+    ipAddress: string;
+    userAgent?: string;
+    deviceFingerprint?: string;
+    sessionId?: number;
+    createdAt: Date;
+    constructor(partial?: Partial<LoginHistory>);
+    isSuccessful(): boolean;
+    isFailed(): boolean;
+    isBlocked(): boolean;
+}
+//# sourceMappingURL=login-history.d.ts.map

package/dist/server/auth/domain/entities/login-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-history.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/login-history.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,qBAAa,YAAY;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC;IAO3C,YAAY,IAAI,OAAO;IAOvB,QAAQ,IAAI,OAAO;IAOnB,SAAS,IAAI,OAAO;CAGrB"}

package/dist/server/auth/domain/entities/login-history.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoginHistory = void 0;
+const enums_1 = require("../enums");
+class LoginHistory {
+    id;
+    userId;
+    email;
+    status;
+    failureReason;
+    ipAddress;
+    userAgent;
+    deviceFingerprint;
+    sessionId;
+    createdAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    isSuccessful() {
+        return this.status === enums_1.LoginStatus.SUCCESS;
+    }
+    isFailed() {
+        return this.status === enums_1.LoginStatus.FAILED;
+    }
+    isBlocked() {
+        return this.status === enums_1.LoginStatus.BLOCKED;
+    }
+}
+exports.LoginHistory = LoginHistory;
+//# sourceMappingURL=login-history.js.map

package/dist/server/auth/domain/entities/login-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-history.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/login-history.ts"],"names":[],"mappings":";;;AAAA,oCAAuC;AAEvC,MAAa,YAAY;IACvB,EAAE,CAAS;IACX,MAAM,CAAU;IAChB,KAAK,CAAS;IACd,MAAM,CAAc;IACpB,aAAa,CAAU;IACvB,SAAS,CAAS;IAClB,SAAS,CAAU;IACnB,iBAAiB,CAAU;IAC3B,SAAS,CAAU;IACnB,SAAS,CAAO;IAEhB,YAAY,OAA+B;QACzC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,YAAY;QACV,OAAO,IAAI,CAAC,MAAM,KAAK,mBAAW,CAAC,OAAO,CAAC;IAC7C,CAAC;IAKD,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,KAAK,mBAAW,CAAC,MAAM,CAAC;IAC5C,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,mBAAW,CAAC,OAAO,CAAC;IAC7C,CAAC;CACF;AApCD,oCAoCC"}

package/dist/server/auth/domain/entities/oauth-audit-log.d.ts

@@ -0,0 +1,15 @@
+export declare class OAuthAuditLog {
+    id: number;
+    userId?: number;
+    action: string;
+    resource: string;
+    resourceId?: number;
+    ipAddress?: string;
+    userAgent?: string;
+    metadata?: Record<string, any>;
+    createdAt: Date;
+    constructor(partial?: Partial<OAuthAuditLog>);
+    getDescription(): string;
+    isSensitiveAction(): boolean;
+}
+//# sourceMappingURL=oauth-audit-log.d.ts.map

package/dist/server/auth/domain/entities/oauth-audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-audit-log.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-audit-log.ts"],"names":[],"mappings":"AAAA,qBAAa,aAAa;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IAO5C,cAAc,IAAI,MAAM;IAOxB,iBAAiB,IAAI,OAAO;CAY7B"}

package/dist/server/auth/domain/entities/oauth-audit-log.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthAuditLog = void 0;
+class OAuthAuditLog {
+    id;
+    userId;
+    action;
+    resource;
+    resourceId;
+    ipAddress;
+    userAgent;
+    metadata;
+    createdAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    getDescription() {
+        return `${this.action} trên ${this.resource}${this.resourceId ? ` #${this.resourceId}` : ''}`;
+    }
+    isSensitiveAction() {
+        const sensitiveActions = [
+            'login',
+            'logout',
+            'password_change',
+            'email_change',
+            '2fa_enable',
+            '2fa_disable',
+            'token_revoke',
+        ];
+        return sensitiveActions.includes(this.action);
+    }
+}
+exports.OAuthAuditLog = OAuthAuditLog;
+//# sourceMappingURL=oauth-audit-log.js.map

package/dist/server/auth/domain/entities/oauth-audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-audit-log.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-audit-log.ts"],"names":[],"mappings":";;;AAAA,MAAa,aAAa;IACxB,EAAE,CAAS;IACX,MAAM,CAAU;IAChB,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,UAAU,CAAU;IACpB,SAAS,CAAU;IACnB,SAAS,CAAU;IACnB,QAAQ,CAAuB;IAC/B,SAAS,CAAO;IAEhB,YAAY,OAAgC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,cAAc;QACZ,OAAO,GAAG,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAChG,CAAC;IAKD,iBAAiB;QACf,MAAM,gBAAgB,GAAG;YACvB,OAAO;YACP,QAAQ;YACR,iBAAiB;YACjB,cAAc;YACd,YAAY;YACZ,aAAa;YACb,cAAc;SACf,CAAC;QACF,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;CACF;AArCD,sCAqCC"}

package/dist/server/auth/domain/entities/oauth-authorization-code.d.ts

@@ -0,0 +1,19 @@
+export declare class OAuthAuthorizationCode {
+    id: number;
+    userId: number;
+    clientId: number;
+    code: string;
+    redirectUri: string;
+    scopes: string[];
+    codeChallenge?: string;
+    codeChallengeMethod?: string;
+    expiresAt: Date;
+    usedAt?: Date;
+    createdAt: Date;
+    constructor(partial?: Partial<OAuthAuthorizationCode>);
+    isValid(): boolean;
+    isExpired(): boolean;
+    markAsUsed(): void;
+    validatePKCE(codeVerifier: string): boolean;
+}
+//# sourceMappingURL=oauth-authorization-code.d.ts.map

package/dist/server/auth/domain/entities/oauth-authorization-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-authorization-code.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-authorization-code.ts"],"names":[],"mappings":"AAAA,qBAAa,sBAAsB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC;IAChB,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC;IAOrD,OAAO,IAAI,OAAO;IAQlB,SAAS,IAAI,OAAO;IAOpB,UAAU,IAAI,IAAI;IAOlB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO;CAM5C"}

package/dist/server/auth/domain/entities/oauth-authorization-code.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthAuthorizationCode = void 0;
+class OAuthAuthorizationCode {
+    id;
+    userId;
+    clientId;
+    code;
+    redirectUri;
+    scopes;
+    codeChallenge;
+    codeChallengeMethod;
+    expiresAt;
+    usedAt;
+    createdAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    isValid() {
+        if (this.usedAt)
+            return false;
+        return this.expiresAt > new Date();
+    }
+    isExpired() {
+        return this.expiresAt <= new Date();
+    }
+    markAsUsed() {
+        this.usedAt = new Date();
+    }
+    validatePKCE(codeVerifier) {
+        if (!this.codeChallenge)
+            return true;
+        return !!codeVerifier;
+    }
+}
+exports.OAuthAuthorizationCode = OAuthAuthorizationCode;
+//# sourceMappingURL=oauth-authorization-code.js.map

package/dist/server/auth/domain/entities/oauth-authorization-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-authorization-code.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-authorization-code.ts"],"names":[],"mappings":";;;AAAA,MAAa,sBAAsB;IACjC,EAAE,CAAS;IACX,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,IAAI,CAAS;IACb,WAAW,CAAS;IACpB,MAAM,CAAW;IACjB,aAAa,CAAU;IACvB,mBAAmB,CAAU;IAC7B,SAAS,CAAO;IAChB,MAAM,CAAQ;IACd,SAAS,CAAO;IAEhB,YAAY,OAAyC;QACnD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,OAAO;QACL,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IACrC,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,CAAC;IAKD,UAAU;QACR,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAKD,YAAY,CAAC,YAAoB;QAC/B,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAGrC,OAAO,CAAC,CAAC,YAAY,CAAC;IACxB,CAAC;CACF;AAhDD,wDAgDC"}

package/dist/server/auth/domain/entities/oauth-client-consent.d.ts

@@ -0,0 +1,14 @@
+export declare class OAuthClientConsent {
+    id: number;
+    userId: number;
+    clientId: number;
+    scopes: string[];
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(partial?: Partial<OAuthClientConsent>);
+    hasConsentedToScope(scope: string): boolean;
+    hasConsentedToAllScopes(requiredScopes: string[]): boolean;
+    addScope(scope: string): void;
+    removeScope(scope: string): void;
+}
+//# sourceMappingURL=oauth-client-consent.d.ts.map

package/dist/server/auth/domain/entities/oauth-client-consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client-consent.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-client-consent.ts"],"names":[],"mappings":"AAAA,qBAAa,kBAAkB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC;IAOjD,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAO3C,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO;IAO1D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAS7B,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAGjC"}

package/dist/server/auth/domain/entities/oauth-client-consent.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthClientConsent = void 0;
+class OAuthClientConsent {
+    id;
+    userId;
+    clientId;
+    scopes;
+    createdAt;
+    updatedAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    hasConsentedToScope(scope) {
+        return this.scopes.includes(scope);
+    }
+    hasConsentedToAllScopes(requiredScopes) {
+        return requiredScopes.every((scope) => this.hasConsentedToScope(scope));
+    }
+    addScope(scope) {
+        if (!this.hasConsentedToScope(scope)) {
+            this.scopes.push(scope);
+        }
+    }
+    removeScope(scope) {
+        this.scopes = this.scopes.filter((s) => s !== scope);
+    }
+}
+exports.OAuthClientConsent = OAuthClientConsent;
+//# sourceMappingURL=oauth-client-consent.js.map

package/dist/server/auth/domain/entities/oauth-client-consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client-consent.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-client-consent.ts"],"names":[],"mappings":";;;AAAA,MAAa,kBAAkB;IAC7B,EAAE,CAAS;IACX,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,MAAM,CAAW;IACjB,SAAS,CAAO;IAChB,SAAS,CAAO;IAEhB,YAAY,OAAqC;QAC/C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,mBAAmB,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAKD,uBAAuB,CAAC,cAAwB;QAC9C,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC;IAKD,QAAQ,CAAC,KAAa;QACpB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAKD,WAAW,CAAC,KAAa;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;IACvD,CAAC;CACF;AAzCD,gDAyCC"}

package/dist/server/auth/domain/entities/oauth-client.d.ts

@@ -0,0 +1,31 @@
+export declare class OAuthClient {
+    id: number;
+    clientCode: string;
+    clientSecret?: string;
+    name: string;
+    description?: string;
+    type: number;
+    confidential: boolean;
+    redirectUris: string[];
+    allowedGrants: string[];
+    allowedScopes: string[];
+    accessTokenLifetime: number;
+    refreshTokenLifetime: number;
+    logoUrl?: string;
+    websiteUrl?: string;
+    privacyPolicyUrl?: string;
+    termsUrl?: string;
+    isActive: boolean;
+    createdBy?: number;
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(partial?: Partial<OAuthClient>);
+    canBeUsed(): boolean;
+    isConfidential(): boolean;
+    isValidRedirectUri(uri: string): boolean;
+    isScopeAllowed(scope: string): boolean;
+    areAllScopesAllowed(scopes: string[]): boolean;
+    deactivate(): void;
+    activate(): void;
+}
+//# sourceMappingURL=oauth-client.d.ts.map

package/dist/server/auth/domain/entities/oauth-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-client.ts"],"names":[],"mappings":"AAAA,qBAAa,WAAW;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAO1C,SAAS,IAAI,OAAO;IAOpB,cAAc,IAAI,OAAO;IAOzB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAOxC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAOtC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO;IAO9C,UAAU,IAAI,IAAI;IAOlB,QAAQ,IAAI,IAAI;CAGjB"}

package/dist/server/auth/domain/entities/oauth-client.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthClient = void 0;
+class OAuthClient {
+    id;
+    clientCode;
+    clientSecret;
+    name;
+    description;
+    type;
+    confidential;
+    redirectUris;
+    allowedGrants;
+    allowedScopes;
+    accessTokenLifetime;
+    refreshTokenLifetime;
+    logoUrl;
+    websiteUrl;
+    privacyPolicyUrl;
+    termsUrl;
+    isActive;
+    createdBy;
+    createdAt;
+    updatedAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    canBeUsed() {
+        return this.isActive === true;
+    }
+    isConfidential() {
+        return this.confidential && !!this.clientSecret;
+    }
+    isValidRedirectUri(uri) {
+        return this.redirectUris.includes(uri);
+    }
+    isScopeAllowed(scope) {
+        return this.allowedScopes.includes(scope);
+    }
+    areAllScopesAllowed(scopes) {
+        return scopes.every((scope) => this.isScopeAllowed(scope));
+    }
+    deactivate() {
+        this.isActive = false;
+    }
+    activate() {
+        this.isActive = true;
+    }
+}
+exports.OAuthClient = OAuthClient;
+//# sourceMappingURL=oauth-client.js.map

package/dist/server/auth/domain/entities/oauth-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-client.ts"],"names":[],"mappings":";;;AAAA,MAAa,WAAW;IACtB,EAAE,CAAS;IACX,UAAU,CAAS;IACnB,YAAY,CAAU;IACtB,IAAI,CAAS;IACb,WAAW,CAAU;IACrB,IAAI,CAAS;IACb,YAAY,CAAU;IACtB,YAAY,CAAW;IACvB,aAAa,CAAW;IACxB,aAAa,CAAW;IACxB,mBAAmB,CAAS;IAC5B,oBAAoB,CAAS;IAC7B,OAAO,CAAU;IACjB,UAAU,CAAU;IACpB,gBAAgB,CAAU;IAC1B,QAAQ,CAAU;IAClB,QAAQ,CAAU;IAClB,SAAS,CAAU;IACnB,SAAS,CAAO;IAChB,SAAS,CAAO;IAEhB,YAAY,OAA8B;QACxC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAChC,CAAC;IAKD,cAAc;QACZ,OAAO,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAClD,CAAC;IAKD,kBAAkB,CAAC,GAAW;QAC5B,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAKD,cAAc,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAKD,mBAAmB,CAAC,MAAgB;QAClC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC;IAKD,UAAU;QACR,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IACxB,CAAC;IAKD,QAAQ;QACN,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;CACF;AA1ED,kCA0EC"}

package/dist/server/auth/domain/entities/oauth-scope.d.ts

@@ -0,0 +1,10 @@
+export declare class OAuthScope {
+    id: number;
+    name: string;
+    description?: string;
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(partial?: Partial<OAuthScope>);
+    getIdentifier(): string;
+}
+//# sourceMappingURL=oauth-scope.d.ts.map

package/dist/server/auth/domain/entities/oauth-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-scope.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-scope.ts"],"names":[],"mappings":"AAAA,qBAAa,UAAU;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;IAOzC,aAAa,IAAI,MAAM;CAGxB"}

package/dist/server/auth/domain/entities/oauth-scope.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthScope = void 0;
+class OAuthScope {
+    id;
+    name;
+    description;
+    createdAt;
+    updatedAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    getIdentifier() {
+        return this.name;
+    }
+}
+exports.OAuthScope = OAuthScope;
+//# sourceMappingURL=oauth-scope.js.map

package/dist/server/auth/domain/entities/oauth-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-scope.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-scope.ts"],"names":[],"mappings":";;;AAAA,MAAa,UAAU;IACrB,EAAE,CAAS;IACX,IAAI,CAAS;IACb,WAAW,CAAU;IACrB,SAAS,CAAO;IAChB,SAAS,CAAO;IAEhB,YAAY,OAA6B;QACvC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,aAAa;QACX,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAjBD,gCAiBC"}

package/dist/server/auth/domain/entities/oauth-token.d.ts

@@ -0,0 +1,20 @@
+export declare class OAuthToken {
+    id: number;
+    tokenType: number;
+    token: string;
+    clientId: number;
+    userId: number;
+    sessionId?: number;
+    scopes: string[];
+    expiresAt: Date;
+    revokedAt?: Date;
+    parentRefreshTokenId?: number;
+    createdAt: Date;
+    constructor(partial?: Partial<OAuthToken>);
+    isValid(): boolean;
+    isExpired(): boolean;
+    revoke(): void;
+    hasScope(scope: string): boolean;
+    hasAllScopes(requiredScopes: string[]): boolean;
+}
+//# sourceMappingURL=oauth-token.d.ts.map

package/dist/server/auth/domain/entities/oauth-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-token.ts"],"names":[],"mappings":"AAAA,qBAAa,UAAU;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;IAOzC,OAAO,IAAI,OAAO;IAQlB,SAAS,IAAI,OAAO;IAOpB,MAAM,IAAI,IAAI;IAOd,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAOhC,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO;CAGhD"}