@udhuong/admin-core 0.1.1 → 0.1.2

package/dist/server/auth/domain/entities/oauth-token.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthToken = void 0;
+class OAuthToken {
+    id;
+    tokenType;
+    token;
+    clientId;
+    userId;
+    sessionId;
+    scopes;
+    expiresAt;
+    revokedAt;
+    parentRefreshTokenId;
+    createdAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    isValid() {
+        if (this.revokedAt)
+            return false;
+        return this.expiresAt > new Date();
+    }
+    isExpired() {
+        return this.expiresAt <= new Date();
+    }
+    revoke() {
+        this.revokedAt = new Date();
+    }
+    hasScope(scope) {
+        return this.scopes.includes(scope);
+    }
+    hasAllScopes(requiredScopes) {
+        return requiredScopes.every((scope) => this.hasScope(scope));
+    }
+}
+exports.OAuthToken = OAuthToken;
+//# sourceMappingURL=oauth-token.js.map

package/dist/server/auth/domain/entities/oauth-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-token.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/oauth-token.ts"],"names":[],"mappings":";;;AAAA,MAAa,UAAU;IACrB,EAAE,CAAS;IACX,SAAS,CAAS;IAClB,KAAK,CAAS;IACd,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,SAAS,CAAU;IACnB,MAAM,CAAW;IACjB,SAAS,CAAO;IAChB,SAAS,CAAQ;IACjB,oBAAoB,CAAU;IAC9B,SAAS,CAAO;IAEhB,YAAY,OAA6B;QACvC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,OAAO;QACL,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACjC,OAAO,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IACrC,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,CAAC;IAKD,MAAM;QACJ,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9B,CAAC;IAKD,QAAQ,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAKD,YAAY,CAAC,cAAwB;QACnC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;CACF;AApDD,gCAoDC"}

package/dist/server/auth/domain/entities/permission.d.ts

@@ -0,0 +1,14 @@
+export declare class Permission {
+    id: number;
+    name: string;
+    resource: string;
+    action: string;
+    description?: string;
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(partial?: Partial<Permission>);
+    getIdentifier(): string;
+    matches(identifier: string): boolean;
+    matchesResourceAction(resource: string, action: string): boolean;
+}
+//# sourceMappingURL=permission.d.ts.map

package/dist/server/auth/domain/entities/permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/permission.ts"],"names":[],"mappings":"AAAA,qBAAa,UAAU;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;IAOzC,aAAa,IAAI,MAAM;IAOvB,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAOpC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;CAGjE"}

package/dist/server/auth/domain/entities/permission.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Permission = void 0;
+class Permission {
+    id;
+    name;
+    resource;
+    action;
+    description;
+    createdAt;
+    updatedAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    getIdentifier() {
+        return `${this.resource}:${this.action}`;
+    }
+    matches(identifier) {
+        return this.getIdentifier() === identifier;
+    }
+    matchesResourceAction(resource, action) {
+        return this.resource === resource && this.action === action;
+    }
+}
+exports.Permission = Permission;
+//# sourceMappingURL=permission.js.map

package/dist/server/auth/domain/entities/permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/permission.ts"],"names":[],"mappings":";;;AAAA,MAAa,UAAU;IACrB,EAAE,CAAS;IACX,IAAI,CAAS;IACb,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,WAAW,CAAU;IACrB,SAAS,CAAO;IAChB,SAAS,CAAO;IAEhB,YAAY,OAA6B;QACvC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,aAAa;QACX,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;IAC3C,CAAC;IAKD,OAAO,CAAC,UAAkB;QACxB,OAAO,IAAI,CAAC,aAAa,EAAE,KAAK,UAAU,CAAC;IAC7C,CAAC;IAKD,qBAAqB,CAAC,QAAgB,EAAE,MAAc;QACpD,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;IAC9D,CAAC;CACF;AAjCD,gCAiCC"}

package/dist/server/auth/domain/entities/role-permission.d.ts

@@ -0,0 +1,8 @@
+export declare class RolePermission {
+    id: number;
+    roleId: number;
+    permissionId: number;
+    createdAt: Date;
+    constructor(partial?: Partial<RolePermission>);
+}
+//# sourceMappingURL=role-permission.d.ts.map

package/dist/server/auth/domain/entities/role-permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-permission.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/role-permission.ts"],"names":[],"mappings":"AAAA,qBAAa,cAAc;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC;CAG9C"}

package/dist/server/auth/domain/entities/role-permission.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RolePermission = void 0;
+class RolePermission {
+    id;
+    roleId;
+    permissionId;
+    createdAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+}
+exports.RolePermission = RolePermission;
+//# sourceMappingURL=role-permission.js.map

package/dist/server/auth/domain/entities/role-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-permission.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/role-permission.ts"],"names":[],"mappings":";;;AAAA,MAAa,cAAc;IACzB,EAAE,CAAS;IACX,MAAM,CAAS;IACf,YAAY,CAAS;IACrB,SAAS,CAAO;IAEhB,YAAY,OAAiC;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF;AATD,wCASC"}

package/dist/server/auth/domain/entities/role.d.ts

@@ -0,0 +1,13 @@
+export declare class Role {
+    id: number;
+    name: string;
+    description?: string;
+    isSystem: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(partial?: Partial<Role>);
+    isSystemRole(): boolean;
+    canBeDeleted(): boolean;
+    update(name: string, description?: string): void;
+}
+//# sourceMappingURL=role.d.ts.map

package/dist/server/auth/domain/entities/role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/role.ts"],"names":[],"mappings":"AAAA,qBAAa,IAAI;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC;IAOnC,YAAY,IAAI,OAAO;IAOvB,YAAY,IAAI,OAAO;IAOvB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;CAIjD"}

package/dist/server/auth/domain/entities/role.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Role = void 0;
+class Role {
+    id;
+    name;
+    description;
+    isSystem;
+    createdAt;
+    updatedAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    isSystemRole() {
+        return this.isSystem === true;
+    }
+    canBeDeleted() {
+        return !this.isSystemRole();
+    }
+    update(name, description) {
+        this.name = name;
+        this.description = description;
+    }
+}
+exports.Role = Role;
+//# sourceMappingURL=role.js.map

package/dist/server/auth/domain/entities/role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/role.ts"],"names":[],"mappings":";;;AAAA,MAAa,IAAI;IACf,EAAE,CAAS;IACX,IAAI,CAAS;IACb,WAAW,CAAU;IACrB,QAAQ,CAAU;IAClB,SAAS,CAAO;IAChB,SAAS,CAAO;IAEhB,YAAY,OAAuB;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAChC,CAAC;IAKD,YAAY;QACV,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;IAC9B,CAAC;IAKD,MAAM,CAAC,IAAY,EAAE,WAAoB;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAjCD,oBAiCC"}

package/dist/server/auth/domain/entities/social-account.d.ts

@@ -0,0 +1,20 @@
+import { SocialProvider } from '../enums';
+export declare class SocialAccount {
+    id: number;
+    userId: number;
+    provider: SocialProvider;
+    providerUserId: string;
+    email?: string;
+    displayName?: string;
+    avatar?: string;
+    accessToken?: string;
+    refreshToken?: string;
+    tokenExpiresAt?: Date;
+    profileData?: any;
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(partial?: Partial<SocialAccount>);
+    hasValidToken(): boolean;
+    updateTokens(accessToken: string, refreshToken?: string, expiresAt?: Date): void;
+}
+//# sourceMappingURL=social-account.d.ts.map

package/dist/server/auth/domain/entities/social-account.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-account.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/social-account.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,qBAAa,aAAa;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,cAAc,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IAO5C,aAAa,IAAI,OAAO;IASxB,YAAY,CACV,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,IAAI,GACf,IAAI;CAKR"}

package/dist/server/auth/domain/entities/social-account.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SocialAccount = void 0;
+class SocialAccount {
+    id;
+    userId;
+    provider;
+    providerUserId;
+    email;
+    displayName;
+    avatar;
+    accessToken;
+    refreshToken;
+    tokenExpiresAt;
+    profileData;
+    createdAt;
+    updatedAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    hasValidToken() {
+        if (!this.accessToken)
+            return false;
+        if (!this.tokenExpiresAt)
+            return true;
+        return this.tokenExpiresAt > new Date();
+    }
+    updateTokens(accessToken, refreshToken, expiresAt) {
+        this.accessToken = accessToken;
+        if (refreshToken)
+            this.refreshToken = refreshToken;
+        if (expiresAt)
+            this.tokenExpiresAt = expiresAt;
+    }
+}
+exports.SocialAccount = SocialAccount;
+//# sourceMappingURL=social-account.js.map

package/dist/server/auth/domain/entities/social-account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-account.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/social-account.ts"],"names":[],"mappings":";;;AAEA,MAAa,aAAa;IACxB,EAAE,CAAS;IACX,MAAM,CAAS;IACf,QAAQ,CAAiB;IACzB,cAAc,CAAS;IACvB,KAAK,CAAU;IACf,WAAW,CAAU;IACrB,MAAM,CAAU;IAChB,WAAW,CAAU;IACrB,YAAY,CAAU;IACtB,cAAc,CAAQ;IACtB,WAAW,CAAO;IAClB,SAAS,CAAO;IAChB,SAAS,CAAO;IAEhB,YAAY,OAAgC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,IAAI,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1C,CAAC;IAKD,YAAY,CACV,WAAmB,EACnB,YAAqB,EACrB,SAAgB;QAEhB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACnD,IAAI,SAAS;YAAE,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;IACjD,CAAC;CACF;AAxCD,sCAwCC"}

package/dist/server/auth/domain/entities/user-role.d.ts

@@ -0,0 +1,8 @@
+export declare class UserRole {
+    id: number;
+    userId: number;
+    roleId: number;
+    createdAt: Date;
+    constructor(partial?: Partial<UserRole>);
+}
+//# sourceMappingURL=user-role.d.ts.map

package/dist/server/auth/domain/entities/user-role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-role.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/user-role.ts"],"names":[],"mappings":"AAAA,qBAAa,QAAQ;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC;CAGxC"}

package/dist/server/auth/domain/entities/user-role.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserRole = void 0;
+class UserRole {
+    id;
+    userId;
+    roleId;
+    createdAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+}
+exports.UserRole = UserRole;
+//# sourceMappingURL=user-role.js.map

package/dist/server/auth/domain/entities/user-role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-role.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/user-role.ts"],"names":[],"mappings":";;;AAAA,MAAa,QAAQ;IACnB,EAAE,CAAS;IACX,MAAM,CAAS;IACf,MAAM,CAAS;IACf,SAAS,CAAO;IAEhB,YAAY,OAA2B;QACrC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF;AATD,4BASC"}

package/dist/server/auth/domain/entities/user-session.d.ts

@@ -0,0 +1,25 @@
+export declare class UserSession {
+    id: number;
+    userId: number;
+    sessionToken: string;
+    deviceName: string;
+    deviceFingerprint?: string;
+    ipAddress: string;
+    userAgent?: string;
+    clientId?: number;
+    isCurrent: boolean;
+    expiresAt: Date;
+    lastActiveAt?: Date;
+    revokedAt?: Date;
+    revokedReason?: string;
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(partial?: Partial<UserSession>);
+    isActive(): boolean;
+    isExpired(): boolean;
+    revoke(reason?: string): void;
+    markAsCurrent(): void;
+    willExpireSoon(hours?: number): boolean;
+    updateLastActiveAt(): void;
+}
+//# sourceMappingURL=user-session.d.ts.map

package/dist/server/auth/domain/entities/user-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-session.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/user-session.ts"],"names":[],"mappings":"AAAA,qBAAa,WAAW;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC;IAO1C,QAAQ,IAAI,OAAO;IASnB,SAAS,IAAI,OAAO;IAOpB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAS7B,aAAa,IAAI,IAAI;IAOrB,cAAc,CAAC,KAAK,GAAE,MAAW,GAAG,OAAO;IAS3C,kBAAkB,IAAI,IAAI;CAG3B"}

package/dist/server/auth/domain/entities/user-session.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserSession = void 0;
+class UserSession {
+    id;
+    userId;
+    sessionToken;
+    deviceName;
+    deviceFingerprint;
+    ipAddress;
+    userAgent;
+    clientId;
+    isCurrent;
+    expiresAt;
+    lastActiveAt;
+    revokedAt;
+    revokedReason;
+    createdAt;
+    updatedAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    isActive() {
+        if (this.revokedAt)
+            return false;
+        if (this.expiresAt < new Date())
+            return false;
+        return true;
+    }
+    isExpired() {
+        return this.expiresAt < new Date();
+    }
+    revoke(reason) {
+        this.revokedAt = new Date();
+        this.revokedReason = reason || 'Người dùng thu hồi';
+        this.isCurrent = false;
+    }
+    markAsCurrent() {
+        this.isCurrent = true;
+    }
+    willExpireSoon(hours = 24) {
+        const hoursUntilExpiry = (this.expiresAt.getTime() - new Date().getTime()) / (1000 * 60 * 60);
+        return hoursUntilExpiry <= hours && hoursUntilExpiry > 0;
+    }
+    updateLastActiveAt() {
+        this.lastActiveAt = new Date();
+    }
+}
+exports.UserSession = UserSession;
+//# sourceMappingURL=user-session.js.map

package/dist/server/auth/domain/entities/user-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-session.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/user-session.ts"],"names":[],"mappings":";;;AAAA,MAAa,WAAW;IACtB,EAAE,CAAS;IACX,MAAM,CAAS;IACf,YAAY,CAAS;IACrB,UAAU,CAAS;IACnB,iBAAiB,CAAU;IAC3B,SAAS,CAAS;IAClB,SAAS,CAAU;IACnB,QAAQ,CAAU;IAClB,SAAS,CAAU;IACnB,SAAS,CAAO;IAChB,YAAY,CAAQ;IACpB,SAAS,CAAQ;IACjB,aAAa,CAAU;IACvB,SAAS,CAAO;IAChB,SAAS,CAAO;IAEhB,YAAY,OAA8B;QACxC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAKD,QAAQ;QACN,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IACrC,CAAC;IAKD,MAAM,CAAC,MAAe;QACpB,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,MAAM,IAAI,oBAAoB,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAKD,aAAa;QACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAKD,cAAc,CAAC,QAAgB,EAAE;QAC/B,MAAM,gBAAgB,GACpB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,OAAO,gBAAgB,IAAI,KAAK,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAC3D,CAAC;IAKD,kBAAkB;QAChB,IAAI,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;IACjC,CAAC;CACF;AApED,kCAoEC"}

package/dist/server/auth/domain/entities/user-two-factor.d.ts

@@ -0,0 +1,25 @@
+import { TwoFactorMethod } from "../enums";
+export declare class UserTwoFactor {
+    id: number;
+    userId: number;
+    method: TwoFactorMethod;
+    totpSecret?: string;
+    totpBackupCodes?: string[];
+    emailOtpCode?: string;
+    emailOtpExpiresAt?: Date;
+    verifiedAt?: Date;
+    lastUsedAt?: Date;
+    createdAt: Date;
+    updatedAt: Date;
+    constructor(partial?: Partial<UserTwoFactor>);
+    get isVerified(): boolean;
+    isConfigured(): boolean;
+    isEmailOtpValid(): boolean;
+    isValidBackupCode(code: string): boolean;
+    useBackupCode(code: string): boolean;
+    generateEmailOtp(expiryMinutes?: number): string;
+    verifyEmailOtp(code: string): boolean;
+    markAsVerified(): void;
+    updateLastUsed(): void;
+}
+//# sourceMappingURL=user-two-factor.d.ts.map

package/dist/server/auth/domain/entities/user-two-factor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-two-factor.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/user-two-factor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE3C,qBAAa,aAAa;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IAGxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAG3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,IAAI,CAAC;IAEzB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;gBAEJ,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IAS5C,IAAI,UAAU,IAAI,OAAO,CAExB;IAKD,YAAY,IAAI,OAAO;IAOvB,eAAe,IAAI,OAAO;IAU1B,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAOxC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAYpC,gBAAgB,CAAC,aAAa,GAAE,MAAW,GAAG,MAAM;IAepD,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAiBrC,cAAc,IAAI,IAAI;IAOtB,cAAc,IAAI,IAAI;CAGvB"}

package/dist/server/auth/domain/entities/user-two-factor.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserTwoFactor = void 0;
+class UserTwoFactor {
+    id;
+    userId;
+    method;
+    totpSecret;
+    totpBackupCodes;
+    emailOtpCode;
+    emailOtpExpiresAt;
+    verifiedAt;
+    lastUsedAt;
+    createdAt;
+    updatedAt;
+    constructor(partial) {
+        Object.assign(this, partial);
+    }
+    get isVerified() {
+        return this.verifiedAt !== null && this.verifiedAt !== undefined;
+    }
+    isConfigured() {
+        return this.isVerified;
+    }
+    isEmailOtpValid() {
+        if (!this.emailOtpCode || !this.emailOtpExpiresAt)
+            return false;
+        return this.emailOtpExpiresAt > new Date();
+    }
+    isValidBackupCode(code) {
+        return this.totpBackupCodes?.includes(code) || false;
+    }
+    useBackupCode(code) {
+        if (!this.isValidBackupCode(code))
+            return false;
+        this.totpBackupCodes = this.totpBackupCodes.filter((c) => c !== code);
+        this.lastUsedAt = new Date();
+        return true;
+    }
+    generateEmailOtp(expiryMinutes = 10) {
+        const otp = Math.floor(100000 + Math.random() * 900000).toString();
+        this.emailOtpCode = otp;
+        const expiresAt = new Date();
+        expiresAt.setMinutes(expiresAt.getMinutes() + expiryMinutes);
+        this.emailOtpExpiresAt = expiresAt;
+        return otp;
+    }
+    verifyEmailOtp(code) {
+        if (!this.isEmailOtpValid())
+            return false;
+        if (this.emailOtpCode !== code)
+            return false;
+        this.emailOtpCode = null;
+        this.emailOtpExpiresAt = null;
+        this.lastUsedAt = new Date();
+        return true;
+    }
+    markAsVerified() {
+        this.verifiedAt = new Date();
+    }
+    updateLastUsed() {
+        this.lastUsedAt = new Date();
+    }
+}
+exports.UserTwoFactor = UserTwoFactor;
+//# sourceMappingURL=user-two-factor.js.map

package/dist/server/auth/domain/entities/user-two-factor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-two-factor.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/entities/user-two-factor.ts"],"names":[],"mappings":";;;AAEA,MAAa,aAAa;IACxB,EAAE,CAAS;IACX,MAAM,CAAS;IACf,MAAM,CAAkB;IAGxB,UAAU,CAAU;IACpB,eAAe,CAAY;IAG3B,YAAY,CAAU;IACtB,iBAAiB,CAAQ;IAEzB,UAAU,CAAQ;IAClB,UAAU,CAAQ;IAClB,SAAS,CAAO;IAChB,SAAS,CAAO;IAEhB,YAAY,OAAgC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAOD,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;IACnE,CAAC;IAKD,YAAY;QACV,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAKD,eAAe;QACb,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO,KAAK,CAAC;QAChE,OAAO,IAAI,CAAC,iBAAiB,GAAG,IAAI,IAAI,EAAE,CAAC;IAC7C,CAAC;IAOD,iBAAiB,CAAC,IAAY;QAC5B,OAAO,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;IACvD,CAAC;IAKD,aAAa,CAAC,IAAY;QACxB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAOD,gBAAgB,CAAC,gBAAwB,EAAE;QAEzC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnE,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;QAExB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,aAAa,CAAC,CAAC;QAC7D,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QAEnC,OAAO,GAAG,CAAC;IACb,CAAC;IAKD,cAAc,CAAC,IAAY;QACzB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAG7C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAE7B,OAAO,IAAI,CAAC;IACd,CAAC;IAOD,cAAc;QACZ,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;IAC/B,CAAC;IAKD,cAAc;QACZ,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;IAC/B,CAAC;CACF;AAhHD,sCAgHC"}

package/dist/server/auth/domain/enums/index.d.ts

@@ -0,0 +1,2 @@
+export * from './oauth.enums';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/auth/domain/enums/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/enums/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}

package/dist/server/auth/domain/enums/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./oauth.enums"), exports);
+//# sourceMappingURL=index.js.map

package/dist/server/auth/domain/enums/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/server/auth/domain/enums/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA8B"}

package/dist/server/auth/domain/enums/oauth.enums.d.ts

@@ -0,0 +1,69 @@
+export declare enum AuthUserStatus {
+    DEFAULT = 0,
+    ACTIVE = 1,
+    INACTIVE = 2,
+    SUSPENDED = 3,
+    LOCKED = 4,
+    PENDING_VERIFICATION = 5
+}
+export declare const AuthUserStatusLabel: Record<AuthUserStatus, string>;
+export declare enum OAuthTokenType {
+    DEFAULT = 0,
+    ACCESS_TOKEN = 1,
+    REFRESH_TOKEN = 2
+}
+export declare const OAuthTokenTypeLabel: Record<OAuthTokenType, string>;
+export declare enum OAuthClientType {
+    DEFAULT = 0,
+    FIRST_PARTY = 1,
+    THIRD_PARTY = 2
+}
+export declare const OAuthClientTypeLabel: Record<OAuthClientType, string>;
+export declare enum OAuthGrantType {
+    PASSWORD = "password",
+    AUTHORIZATION_CODE = "authorization_code",
+    CLIENT_CREDENTIALS = "client_credentials",
+    REFRESH_TOKEN = "refresh_token"
+}
+export declare const OAuthGrantTypeLabel: Record<OAuthGrantType, string>;
+export declare enum CodeChallengeMethod {
+    PLAIN = "plain",
+    S256 = "S256"
+}
+export declare const CodeChallengeMethodLabel: Record<CodeChallengeMethod, string>;
+export declare enum AuditLogStatus {
+    DEFAULT = 0,
+    SUCCESS = 1,
+    FAILURE = 2
+}
+export declare const AuditLogStatusLabel: Record<AuditLogStatus, string>;
+export declare enum TwoFactorMethod {
+    DEFAULT = 0,
+    TOTP = 1,
+    EMAIL = 2
+}
+export declare const TwoFactorMethodLabel: Record<TwoFactorMethod, string>;
+export declare enum SocialProvider {
+    DEFAULT = 0,
+    GOOGLE = 1,
+    FACEBOOK = 2,
+    GITHUB = 3
+}
+export declare const SocialProviderLabel: Record<SocialProvider, string>;
+export declare enum LoginStatus {
+    DEFAULT = 0,
+    SUCCESS = 1,
+    FAILED = 2,
+    BLOCKED = 3
+}
+export declare const LoginStatusLabel: Record<LoginStatus, string>;
+export declare enum SessionRevokeReason {
+    DEFAULT = 0,
+    USER_LOGOUT = 1,
+    EXCEEDED_LIMIT = 2,
+    SECURITY = 3,
+    ADMIN_REVOKE = 4,
+    PASSWORD_CHANGED = 5
+}
+export declare const SessionRevokeReasonLabel: Record<SessionRevokeReason, string>;
+//# sourceMappingURL=oauth.enums.d.ts.map

package/dist/server/auth/domain/enums/oauth.enums.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.enums.d.ts","sourceRoot":"","sources":["../../../../../src/server/auth/domain/enums/oauth.enums.ts"],"names":[],"mappings":"AAGA,oBAAY,cAAc;IACxB,OAAO,IAAI;IACX,MAAM,IAAI;IACV,QAAQ,IAAI;IACZ,SAAS,IAAI;IACb,MAAM,IAAI;IACV,oBAAoB,IAAI;CACzB;AAED,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAO9D,CAAC;AAKF,oBAAY,cAAc;IACxB,OAAO,IAAI;IACX,YAAY,IAAI;IAChB,aAAa,IAAI;CAClB;AAED,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAI9D,CAAC;AAKF,oBAAY,eAAe;IACzB,OAAO,IAAI;IACX,WAAW,IAAI;IACf,WAAW,IAAI;CAChB;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAIhE,CAAC;AAKF,oBAAY,cAAc;IACxB,QAAQ,aAAa;IACrB,kBAAkB,uBAAuB;IACzC,kBAAkB,uBAAuB;IACzC,aAAa,kBAAkB;CAChC;AAED,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAK9D,CAAC;AAKF,oBAAY,mBAAmB;IAC7B,KAAK,UAAU;IACf,IAAI,SAAS;CACd;AAED,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAGxE,CAAC;AAKF,oBAAY,cAAc;IACxB,OAAO,IAAI;IACX,OAAO,IAAI;IACX,OAAO,IAAI;CACZ;AAED,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAI9D,CAAC;AAKF,oBAAY,eAAe;IACzB,OAAO,IAAI;IACX,IAAI,IAAI;IACR,KAAK,IAAI;CACV;AAED,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAIhE,CAAC;AAKF,oBAAY,cAAc;IACxB,OAAO,IAAI;IACX,MAAM,IAAI;IACV,QAAQ,IAAI;IACZ,MAAM,IAAI;CACX;AAED,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAK9D,CAAC;AAKF,oBAAY,WAAW;IACrB,OAAO,IAAI;IACX,OAAO,IAAI;IACX,MAAM,IAAI;IACV,OAAO,IAAI;CACZ;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAKxD,CAAC;AAKF,oBAAY,mBAAmB;IAC7B,OAAO,IAAI;IACX,WAAW,IAAI;IACf,cAAc,IAAI;IAClB,QAAQ,IAAI;IACZ,YAAY,IAAI;IAChB,gBAAgB,IAAI;CACrB;AAED,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAOxE,CAAC"}