@vynelix/nestjs-multi-auth 0.0.2

package/dist/auth/entities/session.entity.js

@@ -0,0 +1,65 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Session = void 0;
+const typeorm_1 = require("typeorm");
+let Session = class Session {
+    toMap() {
+        return {
+            id: this.id,
+            uid: this.uid,
+            userAgent: this.userAgent,
+            deviceFingerprint: this.deviceFingerprint,
+            ipAddress: this.ipAddress,
+            expiresAt: this.expiresAt,
+            createdAt: this.createdAt,
+        };
+    }
+};
+exports.Session = Session;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], Session.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    (0, typeorm_1.Index)(),
+    __metadata("design:type", String)
+], Session.prototype, "uid", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ select: false }) // Do not return in standard queries
+    ,
+    __metadata("design:type", String)
+], Session.prototype, "refreshTokenHash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], Session.prototype, "userAgent", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], Session.prototype, "deviceFingerprint", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], Session.prototype, "ipAddress", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", Date)
+], Session.prototype, "expiresAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    __metadata("design:type", Date)
+], Session.prototype, "createdAt", void 0);
+exports.Session = Session = __decorate([
+    (0, typeorm_1.Entity)('sessions')
+], Session);
+//# sourceMappingURL=session.entity.js.map

package/dist/auth/entities/session.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/session.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAMiB;AAGV,IAAM,OAAO,GAAb,MAAM,OAAO;IA+BlB,KAAK;QACH,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF,CAAA;AA1CY,0BAAO;AAElB;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;mCACpB;AAKX;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,eAAK,GAAE;;oCACI;AAKZ;IADC,IAAA,gBAAM,EAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,oCAAoC;;;iDACtC;AAIzB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0CACT;AAIlB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDACD;AAG1B;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0CACT;AAGlB;IADC,IAAA,gBAAM,GAAE;8BACE,IAAI;0CAAC;AAGhB;IADC,IAAA,0BAAgB,GAAE;8BACR,IAAI;0CAAC;kBA7BL,OAAO;IADnB,IAAA,gBAAM,EAAC,UAAU,CAAC;GACN,OAAO,CA0CnB"}

package/dist/auth/enums/auth-type.enum.d.ts

@@ -0,0 +1,23 @@
+export declare enum AuthStrategy {
+    EMAIL = "EMAIL",
+    PHONE = "PHONE",
+    USERNAME = "USERNAME",
+    GOOGLE = "GOOGLE",
+    FACEBOOK = "FACEBOOK",
+    APPLE = "APPLE",
+    /** @deprecated Use granular types instead */
+    LOCAL = "LOCAL",
+    /** @deprecated Use granular types instead */
+    OAUTH = "OAUTH",
+    MAGIC_LINK = "MAGIC_LINK"
+}
+export declare enum OAuthProviderType {
+    GOOGLE = "GOOGLE",
+    FACEBOOK = "FACEBOOK",
+    APPLE = "APPLE"
+}
+export declare enum AuthTransport {
+    COOKIE = "cookie",
+    BEARER = "bearer",
+    BOTH = "both"
+}

package/dist/auth/enums/auth-type.enum.js

@@ -0,0 +1,34 @@
+"use strict";
+// src/auth/enums/auth-types.enum.ts
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthTransport = exports.OAuthProviderType = exports.AuthStrategy = void 0;
+var AuthStrategy;
+(function (AuthStrategy) {
+    // Local / Password-based
+    AuthStrategy["EMAIL"] = "EMAIL";
+    AuthStrategy["PHONE"] = "PHONE";
+    AuthStrategy["USERNAME"] = "USERNAME";
+    // Social / OAuth
+    AuthStrategy["GOOGLE"] = "GOOGLE";
+    AuthStrategy["FACEBOOK"] = "FACEBOOK";
+    AuthStrategy["APPLE"] = "APPLE";
+    /** @deprecated Use granular types instead */
+    AuthStrategy["LOCAL"] = "LOCAL";
+    /** @deprecated Use granular types instead */
+    AuthStrategy["OAUTH"] = "OAUTH";
+    // Authentication Extension
+    AuthStrategy["MAGIC_LINK"] = "MAGIC_LINK";
+})(AuthStrategy || (exports.AuthStrategy = AuthStrategy = {}));
+var OAuthProviderType;
+(function (OAuthProviderType) {
+    OAuthProviderType["GOOGLE"] = "GOOGLE";
+    OAuthProviderType["FACEBOOK"] = "FACEBOOK";
+    OAuthProviderType["APPLE"] = "APPLE";
+})(OAuthProviderType || (exports.OAuthProviderType = OAuthProviderType = {}));
+var AuthTransport;
+(function (AuthTransport) {
+    AuthTransport["COOKIE"] = "cookie";
+    AuthTransport["BEARER"] = "bearer";
+    AuthTransport["BOTH"] = "both";
+})(AuthTransport || (exports.AuthTransport = AuthTransport = {}));
+//# sourceMappingURL=auth-type.enum.js.map

package/dist/auth/enums/auth-type.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-type.enum.js","sourceRoot":"","sources":["../../../src/auth/enums/auth-type.enum.ts"],"names":[],"mappings":";AAAA,oCAAoC;;;AAEpC,IAAY,YAkBX;AAlBD,WAAY,YAAY;IACtB,yBAAyB;IACzB,+BAAe,CAAA;IACf,+BAAe,CAAA;IACf,qCAAqB,CAAA;IAErB,iBAAiB;IACjB,iCAAiB,CAAA;IACjB,qCAAqB,CAAA;IACrB,+BAAe,CAAA;IAEf,6CAA6C;IAC7C,+BAAe,CAAA;IACf,6CAA6C;IAC7C,+BAAe,CAAA;IAEf,2BAA2B;IAC3B,yCAAyB,CAAA;AAC3B,CAAC,EAlBW,YAAY,4BAAZ,YAAY,QAkBvB;AAED,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,sCAAiB,CAAA;IACjB,0CAAqB,CAAA;IACrB,oCAAe,CAAA;AACjB,CAAC,EAJW,iBAAiB,iCAAjB,iBAAiB,QAI5B;AAED,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,kCAAiB,CAAA;IACjB,kCAAiB,CAAA;IACjB,8BAAa,CAAA;AACf,CAAC,EAJW,aAAa,6BAAb,aAAa,QAIxB"}

package/dist/auth/guards/jwt-auth.guard.d.ts

@@ -0,0 +1,10 @@
+import { ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+declare const JwtAuthGuard_base: import("@nestjs/passport").Type<import("@nestjs/passport").IAuthGuard>;
+export declare class JwtAuthGuard extends JwtAuthGuard_base {
+    private reflector;
+    constructor(reflector: Reflector);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    handleRequest(err: any, user: any, info: any, context: ExecutionContext): any;
+}
+export {};

package/dist/auth/guards/jwt-auth.guard.js

@@ -0,0 +1,68 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtAuthGuard = void 0;
+// src/auth/jwt-auth.guard.ts
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const passport_1 = require("@nestjs/passport");
+const public_decorator_1 = require("../decorator/public.decorator");
+const optional_decorator_1 = require("../decorator/optional.decorator");
+let JwtAuthGuard = class JwtAuthGuard extends (0, passport_1.AuthGuard)('jwt') {
+    constructor(reflector) {
+        super();
+        this.reflector = reflector;
+    }
+    async canActivate(context) {
+        const isPublic = this.reflector.getAllAndOverride(public_decorator_1.IS_PUBLIC_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        const isOptional = this.reflector.getAllAndOverride(optional_decorator_1.IS_OPTIONAL_KEY, [context.getHandler(), context.getClass()]);
+        if (isOptional || isPublic) {
+            // Try JWT, but don’t throw if missing/invalid
+            try {
+                return (await super.canActivate(context));
+            }
+            catch {
+                const request = context.switchToHttp().getRequest();
+                request.user = null;
+                return true;
+            }
+        }
+        // Default = strict JWT required
+        return (await super.canActivate(context));
+    }
+    handleRequest(err, user, info, context) {
+        // Check if this is an optional or public route
+        const isPublic = this.reflector.getAllAndOverride(public_decorator_1.IS_PUBLIC_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        const isOptional = this.reflector.getAllAndOverride(optional_decorator_1.IS_OPTIONAL_KEY, [context.getHandler(), context.getClass()]);
+        // console.log('Auth user', user);
+        // For optional/public routes, allow null user
+        if (isOptional || isPublic) {
+            return user || null;
+        }
+        // For protected routes, throw error if no valid user
+        if (err || !user) {
+            throw err || new common_1.UnauthorizedException('Authentication required');
+        }
+        return user;
+    }
+};
+exports.JwtAuthGuard = JwtAuthGuard;
+exports.JwtAuthGuard = JwtAuthGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.Reflector])
+], JwtAuthGuard);
+//# sourceMappingURL=jwt-auth.guard.js.map

package/dist/auth/guards/jwt-auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-auth.guard.js","sourceRoot":"","sources":["../../../src/auth/guards/jwt-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6BAA6B;AAC7B,2CAIwB;AACxB,uCAAyC;AACzC,+CAA6C;AAC7C,oEAA8D;AAC9D,wEAAkE;AAG3D,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,IAAA,oBAAS,EAAC,KAAK,CAAC;IAChD,YAAoB,SAAoB;QACtC,KAAK,EAAE,CAAC;QADU,cAAS,GAAT,SAAS,CAAW;IAExC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,gCAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACjD,oCAAe,EACf,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEF,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;YAC3B,8CAA8C;YAC9C,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAY,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;gBACpD,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,OAAO,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAY,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,GAAQ,EAAE,IAAS,EAAE,IAAS,EAAE,OAAyB;QACrE,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,gCAAa,EAAE;YACxE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACjD,oCAAe,EACf,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAC3C,CAAC;QAEF,kCAAkC;QAElC,8CAA8C;QAC9C,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;YAC3B,OAAO,IAAI,IAAI,IAAI,CAAC;QACtB,CAAC;QAED,qDAAqD;QACrD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,GAAG,IAAI,IAAI,8BAAqB,CAAC,yBAAyB,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAzDY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAEoB,gBAAS;GAD7B,YAAY,CAyDxB"}

package/dist/auth/guards/optional-auth.guard.d.ts

@@ -0,0 +1,8 @@
+import { ExecutionContext } from '@nestjs/common';
+declare const OptionalAuthGuard_base: import("@nestjs/passport").Type<import("@nestjs/passport").IAuthGuard>;
+export declare class OptionalAuthGuard extends OptionalAuthGuard_base {
+    private readonly logger;
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    handleRequest(err: any, user: any, info: any): any;
+}
+export {};

package/dist/auth/guards/optional-auth.guard.js

@@ -0,0 +1,45 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var OptionalAuthGuard_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OptionalAuthGuard = void 0;
+// src/auth/optional-auth.guard.ts
+const common_1 = require("@nestjs/common");
+const passport_1 = require("@nestjs/passport");
+let OptionalAuthGuard = OptionalAuthGuard_1 = class OptionalAuthGuard extends (0, passport_1.AuthGuard)('jwt') {
+    constructor() {
+        super(...arguments);
+        this.logger = new common_1.Logger(OptionalAuthGuard_1.name);
+    }
+    async canActivate(context) {
+        const req = context.switchToHttp().getRequest();
+        const authHeader = req.headers['authorization'];
+        this.logger.debug(`Authorization header: ${authHeader || 'none'}`);
+        if (!authHeader) {
+            this.logger.debug('No authorization header, skipping JWT check');
+            req.user = null; // 👈 set anonymous user
+            return true;
+        }
+        // fallback to normal AuthGuard behavior
+        return (await super.canActivate(context));
+    }
+    handleRequest(err, user, info) {
+        if (err) {
+            this.logger.warn(`JWT error: ${err.message}`);
+        }
+        if (info) {
+            this.logger.debug(`JWT info: ${JSON.stringify(info)}`);
+        }
+        return user || null;
+    }
+};
+exports.OptionalAuthGuard = OptionalAuthGuard;
+exports.OptionalAuthGuard = OptionalAuthGuard = OptionalAuthGuard_1 = __decorate([
+    (0, common_1.Injectable)()
+], OptionalAuthGuard);
+//# sourceMappingURL=optional-auth.guard.js.map

package/dist/auth/guards/optional-auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optional-auth.guard.js","sourceRoot":"","sources":["../../../src/auth/guards/optional-auth.guard.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,kCAAkC;AAClC,2CAAsE;AACtE,+CAA6C;AAGtC,IAAM,iBAAiB,yBAAvB,MAAM,iBAAkB,SAAQ,IAAA,oBAAS,EAAC,KAAK,CAAC;IAAhD;;QACY,WAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IA4B/D,CAAC;IA1BC,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAEhD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,UAAU,IAAI,MAAM,EAAE,CAAC,CAAC;QAEnE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,wBAAwB;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wCAAwC;QACxC,OAAO,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAY,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,GAAQ,EAAE,IAAS,EAAE,IAAS;QAC1C,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;CACF,CAAA;AA7BY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;GACA,iBAAiB,CA6B7B"}

package/dist/auth/guards/ws-jwt-auth.guard.js

@@ -0,0 +1,31 @@
+// /* eslint-disable prettier/prettier */
+// import { CanActivate, ExecutionContext, Injectable } from '@nestjs/common';
+// import { WsException } from '@nestjs/websockets';
+// import { Socket } from 'socket.io';
+// import { JwtService } from '@nestjs/jwt';
+// @Injectable()
+// export class WsJwtAuthGuard implements CanActivate {
+//     constructor(private jwtService: JwtService) { }
+//     async canActivate(context: ExecutionContext): Promise<boolean> {
+//         try {
+//             const client: Socket = context.switchToWs().getClient();
+//             const token = this.extractTokenFromHeader(client);
+//             if (!token) {
+//                 throw new WsException('Unauthorized access');
+//             }
+//             const payload = await this.jwtService.verifyAsync(token);
+//             // Attach user to socket
+//             client['user'] = payload;
+//             return true;
+//         } catch {
+//             throw new WsException('Unauthorized access');
+//         }
+//     }
+//     private extractTokenFromHeader(client: Socket): string | undefined {
+//         const auth = (client.handshake?.headers as any)?.authorization;
+//         if (!auth) return undefined;
+//         const [type, token] = auth.split(' ');
+//         return type === 'Bearer' ? token : (undefined as string | undefined);
+//     }
+// }
+//# sourceMappingURL=ws-jwt-auth.guard.js.map

package/dist/auth/guards/ws-jwt-auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-jwt-auth.guard.js","sourceRoot":"","sources":["../../../src/auth/guards/ws-jwt-auth.guard.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,8EAA8E;AAC9E,oDAAoD;AACpD,sCAAsC;AACtC,4CAA4C;AAE5C,gBAAgB;AAChB,uDAAuD;AACvD,sDAAsD;AAEtD,uEAAuE;AACvE,gBAAgB;AAChB,uEAAuE;AACvE,iEAAiE;AAEjE,4BAA4B;AAC5B,gEAAgE;AAChE,gBAAgB;AAEhB,wEAAwE;AACxE,uCAAuC;AACvC,wCAAwC;AAExC,2BAA2B;AAC3B,oBAAoB;AACpB,4DAA4D;AAC5D,YAAY;AACZ,QAAQ;AAER,2EAA2E;AAC3E,0EAA0E;AAC1E,uCAAuC;AAEvC,iDAAiD;AACjD,gFAAgF;AAChF,QAAQ;AACR,IAAI"}

package/dist/auth/interfaces/auth-module-async-options.interface.d.ts

@@ -0,0 +1,7 @@
+import { AuthModuleOptions } from "./auth-module-options.interface";
+export interface AuthModuleAsyncOptions {
+    imports?: any[];
+    inject?: any[];
+    useFactory: (...args: any[]) => Promise<AuthModuleOptions> | AuthModuleOptions;
+    disableController?: boolean;
+}

package/dist/auth/interfaces/auth-module-async-options.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=auth-module-async-options.interface.js.map

package/dist/auth/interfaces/auth-module-async-options.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-module-async-options.interface.js","sourceRoot":"","sources":["../../../src/auth/interfaces/auth-module-async-options.interface.ts"],"names":[],"mappings":""}

package/dist/auth/interfaces/auth-module-options.interface.d.ts

@@ -0,0 +1,132 @@
+import { Type } from '@nestjs/common';
+import { AuthTransport, AuthStrategy } from '../enums/auth-type.enum';
+import { AuthNotificationProvider } from './auth-notification-provider.interface';
+export declare const AUTH_MODULE_OPTIONS = "AUTH_MODULE_OPTIONS";
+export interface AuthModuleOptions {
+    /**
+     * Secret key for signing Access Tokens
+     */
+    jwtSecret: string;
+    /**
+     * Secret key for signing Refresh Tokens
+     */
+    jwtRefreshSecret: string;
+    /**
+     * Optional: Custom expiration for Access Tokens (e.g., '15m')
+     */
+    accessTokenExpiresIn?: string;
+    /**
+     * Optional: Custom expiration for Refresh Tokens (e.g., '7d')
+     */
+    refreshTokenExpiresIn?: string;
+    /**
+     * If true, the library will NOT automatically register the global JwtAuthGuard.
+     *
+     * IMPORTANT: When this is set to true, decorators like @CurrentAuth() will return
+     * undefined unless you manually apply a guard (e.g., @UseGuards(JwtAuthGuard))
+     * to the controller or route.
+     */
+    disableGlobalGuard?: boolean;
+    /**
+     * If true, the library will NOT register the default AuthController.
+     * Useful if you want to implement your own auth endpoints using AuthService.
+     */
+    disableController?: boolean;
+    /**
+     * Transport methods to support (COOKIE, BEARER, or BOTH)
+     */
+    transport?: AuthTransport | AuthTransport[];
+    /**
+     * Optional: Pluggable provider for sending notifications (OTPs).
+     */
+    notificationProvider?: Type<AuthNotificationProvider>;
+    /**
+     * If true, identities MUST be verified before they can log in.
+     * Requires a notificationProvider to be configured.
+     */
+    verificationRequired?: boolean;
+    /**
+     * Optional: List of modules to import into the AuthModule context.
+     * Use this if your notificationProvider requires specific providers from other modules.
+     */
+    imports?: any[];
+    /**
+     * Google OAuth Client ID for token verification
+     */
+    googleClientId?: string;
+    /**
+     * Facebook App ID for token verification
+     */
+    facebookAppId?: string;
+    /**
+     * Facebook App Secret for App Secret Proof security
+     */
+    facebookAppSecret?: string;
+    /**
+     * Apple Client ID (Services ID or App ID)
+     */
+    appleClientId?: string;
+    /**
+     * Apple Team ID (optional)
+     */
+    appleTeamId?: string;
+    /**
+     * Optional: List of enabled authentication strategies.
+     * If not provided, all strategies are enabled by default.
+     */
+    enabledStrategies?: AuthStrategy[];
+    /**
+     * Optional: If true, email-based authentication REQUIRES a password.
+     * Defaults to true.
+     */
+    emailRequiresPassword?: boolean;
+    /**
+     * Optional: If true, username-based authentication REQUIRES a password.
+     * Defaults to true.
+     */
+    usernameRequiresPassword?: boolean;
+    /**
+     * Optional: If true, phone-based authentication REQUIRES a password.
+     * Defaults to false (password-less phone auth allowed).
+     */
+    phoneRequiresPassword?: boolean;
+    /**
+     * Optional: Duration for OTP expiration in minutes.
+     * Defaults to 15 minutes.
+     */
+    otpExpiresIn?: number;
+    /**
+     * Optional: Minimum interval between OTP resends in seconds.
+     * Defaults to 60 seconds.
+     */
+    otpResendInterval?: number;
+    /**
+     * Optional: Application name shown in TOTP apps (e.g., Google Authenticator)
+     */
+    appName?: string;
+    /**
+     * Optional: Max number of requests within the ttl (default: 10)
+     */
+    throttlerLimit?: number;
+    /**
+     * Optional: Time to live for the throttler in seconds (default: 60)
+     */
+    throttlerTtl?: number;
+    /**
+     * Optional: If true, the built-in rate limiting is disabled.
+     */
+    disableThrottler?: boolean;
+    /**
+     * Optional: List of allowed phone number prefixes (e.g. ['+234', '+44']).
+     * If provided, all phone-based signups and signins must match one of these prefixes.
+     */
+    allowedPhonePrefixes?: string[];
+    /**
+     * If true, the library will automatically run migrations on startup.
+     */
+    autoMigrate?: boolean;
+    /**
+     * The URL of the frontend application (used for Magic Links and Security Alerts).
+     */
+    frontendUrl?: string;
+}

package/dist/auth/interfaces/auth-module-options.interface.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_MODULE_OPTIONS = void 0;
+exports.AUTH_MODULE_OPTIONS = 'AUTH_MODULE_OPTIONS';
+//# sourceMappingURL=auth-module-options.interface.js.map

package/dist/auth/interfaces/auth-module-options.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-module-options.interface.js","sourceRoot":"","sources":["../../../src/auth/interfaces/auth-module-options.interface.ts"],"names":[],"mappings":";;;AAIa,QAAA,mBAAmB,GAAG,qBAAqB,CAAC"}

package/dist/auth/interfaces/auth-notification-provider.interface.d.ts

@@ -0,0 +1,29 @@
+export declare const AUTH_NOTIFICATION_PROVIDER = "AUTH_NOTIFICATION_PROVIDER";
+export interface AuthNotificationProvider {
+    /**
+     * Sends a verification code to a specific destination (email or phone).
+     *
+     * @param to The destination identifier (email or phone number)
+     * @param code The numeric or alphanumeric verification code
+     * @param type The type of identifier ('email' | 'phone')
+     */
+    sendVerificationCode(to: string, code: string, type: 'email' | 'phone'): Promise<void>;
+    /**
+     * Sends a notification when a password is changed, including security context.
+     *
+     * @param to The destination identifier (email or phone number)
+     * @param context The security context
+     */
+    sendPasswordChangedNotification?(to: string, context: {
+        ip: string;
+        userAgent: string;
+        secureAccountLink: string;
+    }): Promise<void>;
+    /**
+     * Sends a magic login link.
+     *
+     * @param to The destination identifier (email or phone number)
+     * @param link The magic link
+     */
+    sendMagicLink?(to: string, link: string): Promise<void>;
+}

package/dist/auth/interfaces/auth-notification-provider.interface.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_NOTIFICATION_PROVIDER = void 0;
+exports.AUTH_NOTIFICATION_PROVIDER = 'AUTH_NOTIFICATION_PROVIDER';
+//# sourceMappingURL=auth-notification-provider.interface.js.map

package/dist/auth/interfaces/auth-notification-provider.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-notification-provider.interface.js","sourceRoot":"","sources":["../../../src/auth/interfaces/auth-notification-provider.interface.ts"],"names":[],"mappings":";;;AAAa,QAAA,0BAA0B,GAAG,4BAA4B,CAAC"}

package/dist/auth/interfaces/auth-user-service.interface.d.ts

@@ -0,0 +1,13 @@
+export declare const AUTH_USER_SERVICE = "AUTH_USER_SERVICE";
+export declare const AUTH_MODULE_OPTIONS = "AUTH_MODULE_OPTIONS";
+export declare const AUTH_SIGNUP_HANDLER = "AUTH_SIGNUP_HANDLER";
+export interface AuthUserLookupService {
+    findUser(authId: string): Promise<any | null>;
+    findById?(id: string): Promise<any | null>;
+}
+export interface AuthSignupHandler {
+    onSignup(auth: any, dto: any): Promise<any>;
+    create?(data: any): Promise<any>;
+}
+export interface AuthUserService extends AuthUserLookupService, AuthSignupHandler {
+}

package/dist/auth/interfaces/auth-user-service.interface.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTH_SIGNUP_HANDLER = exports.AUTH_MODULE_OPTIONS = exports.AUTH_USER_SERVICE = void 0;
+exports.AUTH_USER_SERVICE = 'AUTH_USER_SERVICE';
+exports.AUTH_MODULE_OPTIONS = 'AUTH_MODULE_OPTIONS';
+exports.AUTH_SIGNUP_HANDLER = 'AUTH_SIGNUP_HANDLER';
+//# sourceMappingURL=auth-user-service.interface.js.map

package/dist/auth/interfaces/auth-user-service.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-user-service.interface.js","sourceRoot":"","sources":["../../../src/auth/interfaces/auth-user-service.interface.ts"],"names":[],"mappings":";;;AAAa,QAAA,iBAAiB,GAAG,mBAAmB,CAAC;AACxC,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;AAC5C,QAAA,mBAAmB,GAAG,qBAAqB,CAAC"}

package/dist/auth/interfaces/current-user-interface.d.ts

@@ -0,0 +1,4 @@
+export interface AuthCredential {
+    uid: string;
+    sessionId: string;
+}

package/dist/auth/interfaces/current-user-interface.js

@@ -0,0 +1,4 @@
+"use strict";
+// import { User } from 'src/users/entities/user.entity';
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=current-user-interface.js.map

package/dist/auth/interfaces/current-user-interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-user-interface.js","sourceRoot":"","sources":["../../../src/auth/interfaces/current-user-interface.ts"],"names":[],"mappings":";AAAA,yDAAyD"}

package/dist/auth/interfaces/current-user.decorator.d.ts

@@ -0,0 +1,2 @@
+import { AuthCredential } from './current-user-interface';
+export declare const CurrentAuth: (...dataOrPipes: (import("@nestjs/common").PipeTransform<any, any> | import("@nestjs/common").Type<import("@nestjs/common").PipeTransform<any, any>> | keyof AuthCredential)[]) => ParameterDecorator;

package/dist/auth/interfaces/current-user.decorator.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CurrentAuth = void 0;
+const common_1 = require("@nestjs/common");
+// src/auth/current-user.decorator.ts
+exports.CurrentAuth = (0, common_1.createParamDecorator)((data, ctx) => {
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
+    const request = ctx.switchToHttp().getRequest();
+    const logger = new common_1.Logger('CurrentAuthDecorator');
+    // logger.log(`Request keys: ${Object.keys(request)}`)
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+    const user = request.user;
+    logger.log(`Extracted auth: ${JSON.stringify(user)}`);
+    return data ? user?.[data] : user;
+});
+//# sourceMappingURL=current-user.decorator.js.map

package/dist/auth/interfaces/current-user.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-user.decorator.js","sourceRoot":"","sources":["../../../src/auth/interfaces/current-user.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAAgF;AAGhF,qCAAqC;AACxB,QAAA,WAAW,GAAG,IAAA,6BAAoB,EAC7C,CAAC,IAAsC,EAAE,GAAqB,EAAE,EAAE;IAChE,mEAAmE;IACnE,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IAEhD,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAsB,CAAC,CAAC;IAClD,sDAAsD;IACtD,sEAAsE;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,MAAM,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEtD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpC,CAAC,CACF,CAAC"}

package/dist/auth/interfaces/jwt-payload-interface.d.ts

@@ -0,0 +1,4 @@
+export interface JwtPayload {
+    sub: string;
+    sessionId: string;
+}

package/dist/auth/interfaces/jwt-payload-interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=jwt-payload-interface.js.map

package/dist/auth/interfaces/jwt-payload-interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-payload-interface.js","sourceRoot":"","sources":["../../../src/auth/interfaces/jwt-payload-interface.ts"],"names":[],"mappings":""}

package/dist/auth/interfaces/oauth-strategy.interface.d.ts

@@ -0,0 +1,14 @@
+import { SignupDto } from '../dto/requests/signup.dto';
+import { LoginDto } from '../dto/requests/login.dto';
+import { Auth } from '../entities/auth.entity';
+import { AuthIdentifier } from '../entities/auth-identify.entity';
+export interface IOAuthStrategy {
+    registerCredentials(dto: SignupDto, uid?: string): Promise<{
+        auth: Auth;
+        identifier?: AuthIdentifier;
+    }>;
+    login(dto: LoginDto): Promise<{
+        auth: Auth;
+        identifier?: AuthIdentifier;
+    }>;
+}

package/dist/auth/interfaces/oauth-strategy.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=oauth-strategy.interface.js.map

package/dist/auth/interfaces/oauth-strategy.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-strategy.interface.js","sourceRoot":"","sources":["../../../src/auth/interfaces/oauth-strategy.interface.ts"],"names":[],"mappings":""}

package/dist/auth/jwt-payload-interface.d.ts

@@ -0,0 +1,4 @@
+export interface JwtPayload {
+    sub: string;
+    sessionId: string;
+}

package/dist/auth/jwt-payload-interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=jwt-payload-interface.js.map