@vynelix/nestjs-multi-auth 0.0.2

package/dist/auth/strategies/oauth/facebook.strategy.d.ts

@@ -0,0 +1,24 @@
+import { DataSource, Repository } from 'typeorm';
+import { LoginDto } from '../../dto/requests/login.dto';
+import { SignupDto } from '../../dto/requests/signup.dto';
+import { Auth } from '../../entities/auth.entity';
+import { OAuthProvider } from '../../entities/oauth-provider.entity';
+import { AuthIdentifier } from '../../entities/auth-identify.entity';
+import { AuthModuleOptions } from '../../interfaces/auth-module-options.interface';
+import { IOAuthStrategy } from '../../interfaces/oauth-strategy.interface';
+export declare class FacebookAuthStrategy implements IOAuthStrategy {
+    private readonly dataSource;
+    private authRepo;
+    private oauthProviderRepo;
+    private options;
+    constructor(dataSource: DataSource, authRepo: Repository<Auth>, oauthProviderRepo: Repository<OAuthProvider>, options: AuthModuleOptions);
+    private verifyToken;
+    registerCredentials(dto: SignupDto, uid?: string): Promise<{
+        auth: Auth;
+        identifier?: AuthIdentifier;
+    }>;
+    login(dto: LoginDto): Promise<{
+        auth: Auth;
+        identifier?: AuthIdentifier;
+    }>;
+}

package/dist/auth/strategies/oauth/facebook.strategy.js

@@ -0,0 +1,150 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FacebookAuthStrategy = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("typeorm");
+const typeorm_2 = require("@nestjs/typeorm");
+const auth_entity_1 = require("../../entities/auth.entity");
+const oauth_provider_entity_1 = require("../../entities/oauth-provider.entity");
+const auth_identify_entity_1 = require("../../entities/auth-identify.entity");
+const auth_type_enum_1 = require("../../enums/auth-type.enum");
+const auth_module_options_interface_1 = require("../../interfaces/auth-module-options.interface");
+const crypto_1 = require("crypto");
+let FacebookAuthStrategy = class FacebookAuthStrategy {
+    constructor(dataSource, authRepo, oauthProviderRepo, options) {
+        this.dataSource = dataSource;
+        this.authRepo = authRepo;
+        this.oauthProviderRepo = oauthProviderRepo;
+        this.options = options;
+    }
+    async verifyToken(token) {
+        try {
+            // Create App Secret Proof for security if secret is provided
+            let appSecretProof = '';
+            if (this.options.facebookAppSecret) {
+                appSecretProof = (0, crypto_1.createHmac)('sha256', this.options.facebookAppSecret)
+                    .update(token)
+                    .digest('hex');
+            }
+            const url = `https://graph.facebook.com/me?fields=id,email,first_name,last_name&access_token=${token}${appSecretProof ? `&appsecret_proof=${appSecretProof}` : ''}`;
+            const response = await fetch(url);
+            const data = await response.json();
+            if (data.error) {
+                throw new common_1.BadRequestException(`Facebook error: ${data.error.message}`);
+            }
+            if (!data.id) {
+                throw new common_1.BadRequestException('Invalid Facebook token payload');
+            }
+            return data;
+        }
+        catch (error) {
+            if (error instanceof common_1.BadRequestException)
+                throw error;
+            throw new common_1.BadRequestException('Failed to verify Facebook token');
+        }
+    }
+    async registerCredentials(dto, uid) {
+        if (!dto.token) {
+            throw new common_1.BadRequestException('Facebook access token is required');
+        }
+        const payload = await this.verifyToken(dto.token);
+        const facebookId = payload.id;
+        const email = payload.email?.toLowerCase();
+        return this.dataSource.transaction(async (manager) => {
+            const authRepo = manager.getRepository(auth_entity_1.Auth);
+            const oauthProviderRepo = manager.getRepository(oauth_provider_entity_1.OAuthProvider);
+            const identifierRepo = manager.getRepository(auth_identify_entity_1.AuthIdentifier);
+            // Check if this Facebook account is already linked
+            const existingProvider = await oauthProviderRepo.findOne({
+                where: { provider: auth_type_enum_1.OAuthProviderType.FACEBOOK, providerUserId: facebookId },
+                relations: ['auth'],
+            });
+            if (existingProvider) {
+                throw new common_1.BadRequestException('This Facebook account is already linked to a user');
+            }
+            // Check if email identifier is already taken
+            if (email) {
+                const existingIdentifier = await identifierRepo.findOne({
+                    where: { value: email, type: auth_identify_entity_1.IdentifierType.EMAIL },
+                });
+                if (existingIdentifier) {
+                    throw new common_1.BadRequestException('A user with this email already exists');
+                }
+            }
+            const identityUid = uid || (0, crypto_1.randomUUID)();
+            const newAuth = authRepo.create({
+                uid: identityUid,
+                strategy: auth_type_enum_1.AuthStrategy.OAUTH,
+                isActive: true,
+                isVerified: true, // Facebook verifies emails
+                isPrimary: true,
+            });
+            const identifiers = [];
+            if (email) {
+                identifiers.push(identifierRepo.create({
+                    type: auth_identify_entity_1.IdentifierType.EMAIL,
+                    value: email,
+                    isVerified: true,
+                    source: auth_identify_entity_1.IdentifierSource.FACEBOOK,
+                    verifiedBy: 'PROVIDER',
+                }));
+            }
+            newAuth.identifiers = identifiers;
+            const oauthProvider = oauthProviderRepo.create({
+                provider: auth_type_enum_1.OAuthProviderType.FACEBOOK,
+                providerUserId: facebookId,
+                expiresAt: payload.exp ? new Date(payload.exp * 1000) : undefined,
+                rawProfile: payload,
+                emailVerified: payload.email_verified === 'true' || payload.email_verified === true,
+                displayName: payload.name,
+                avatarUrl: payload.picture,
+            });
+            newAuth.oauthProviders = [...(newAuth.oauthProviders || []), oauthProvider];
+            const savedAuth = await authRepo.save(newAuth);
+            return { auth: savedAuth, identifier: savedAuth.identifiers?.[0] };
+        });
+    }
+    async login(dto) {
+        if (!dto.token) {
+            throw new common_1.BadRequestException('Facebook access token is required');
+        }
+        const payload = await this.verifyToken(dto.token);
+        const facebookId = payload.id;
+        const oauthProvider = await this.oauthProviderRepo.findOne({
+            where: { provider: auth_type_enum_1.OAuthProviderType.FACEBOOK, providerUserId: facebookId },
+            relations: ['auth', 'auth.identifiers'],
+        });
+        if (!oauthProvider || !oauthProvider.auth) {
+            throw new common_1.BadRequestException('No account found linked to this Facebook account');
+        }
+        const auth = oauthProvider.auth;
+        auth.lastUsedAt = new Date();
+        await this.authRepo.save(auth);
+        const email = payload.email?.toLowerCase();
+        const identifier = auth.identifiers?.find(id => id.value === email);
+        return { auth, identifier };
+    }
+};
+exports.FacebookAuthStrategy = FacebookAuthStrategy;
+exports.FacebookAuthStrategy = FacebookAuthStrategy = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, typeorm_2.InjectRepository)(auth_entity_1.Auth)),
+    __param(2, (0, typeorm_2.InjectRepository)(oauth_provider_entity_1.OAuthProvider)),
+    __param(3, (0, common_1.Inject)(auth_module_options_interface_1.AUTH_MODULE_OPTIONS)),
+    __metadata("design:paramtypes", [typeorm_1.DataSource,
+        typeorm_1.Repository,
+        typeorm_1.Repository, Object])
+], FacebookAuthStrategy);
+//# sourceMappingURL=facebook.strategy.js.map

package/dist/auth/strategies/oauth/facebook.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facebook.strategy.js","sourceRoot":"","sources":["../../../../src/auth/strategies/oauth/facebook.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAyE;AACzE,qCAAiD;AACjD,6CAAmD;AAGnD,4DAAkD;AAClD,gFAAqE;AACrE,8EAAuG;AACvG,+DAA6E;AAC7E,kGAAwG;AAExG,mCAAgD;AAGzC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC7B,YACqB,UAAsB,EACP,QAA0B,EACjB,iBAA4C,EAChD,OAA0B;QAH9C,eAAU,GAAV,UAAU,CAAY;QACP,aAAQ,GAAR,QAAQ,CAAkB;QACjB,sBAAiB,GAAjB,iBAAiB,CAA2B;QAChD,YAAO,GAAP,OAAO,CAAmB;IAC/D,CAAC;IAEG,KAAK,CAAC,WAAW,CAAC,KAAa;QACnC,IAAI,CAAC;YACD,6DAA6D;YAC7D,IAAI,cAAc,GAAG,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBACjC,cAAc,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;qBAChE,MAAM,CAAC,KAAK,CAAC;qBACb,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YAED,MAAM,GAAG,GAAG,mFAAmF,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,oBAAoB,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAEpK,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,MAAM,IAAI,4BAAmB,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,4BAAmB,CAAC,gCAAgC,CAAC,CAAC;YACpE,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,4BAAmB;gBAAE,MAAM,KAAK,CAAC;YACtD,MAAM,IAAI,4BAAmB,CAAC,iCAAiC,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAc,EAAE,GAAY;QAClD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,mCAAmC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;QAE3C,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,kBAAI,CAAC,CAAC;YAC7C,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,qCAAa,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,qCAAc,CAAC,CAAC;YAE7D,mDAAmD;YACnD,MAAM,gBAAgB,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC;gBACrD,KAAK,EAAE,EAAE,QAAQ,EAAE,kCAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE;gBAC3E,SAAS,EAAE,CAAC,MAAM,CAAC;aACtB,CAAC,CAAC;YAEH,IAAI,gBAAgB,EAAE,CAAC;gBACnB,MAAM,IAAI,4BAAmB,CAAC,mDAAmD,CAAC,CAAC;YACvF,CAAC;YAED,6CAA6C;YAC7C,IAAI,KAAK,EAAE,CAAC;gBACR,MAAM,kBAAkB,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;oBACpD,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,qCAAc,CAAC,KAAK,EAAE;iBACtD,CAAC,CAAC;gBACH,IAAI,kBAAkB,EAAE,CAAC;oBACrB,MAAM,IAAI,4BAAmB,CAAC,uCAAuC,CAAC,CAAC;gBAC3E,CAAC;YACL,CAAC;YAED,MAAM,WAAW,GAAG,GAAG,IAAI,IAAA,mBAAU,GAAE,CAAC;YAExC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC5B,GAAG,EAAE,WAAW;gBAChB,QAAQ,EAAE,6BAAY,CAAC,KAAK;gBAC5B,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,IAAI,EAAE,2BAA2B;gBAC7C,SAAS,EAAE,IAAI;aAClB,CAAC,CAAC;YAEH,MAAM,WAAW,GAAqB,EAAE,CAAC;YACzC,IAAI,KAAK,EAAE,CAAC;gBACR,WAAW,CAAC,IAAI,CACZ,cAAc,CAAC,MAAM,CAAC;oBAClB,IAAI,EAAE,qCAAc,CAAC,KAAK;oBAC1B,KAAK,EAAE,KAAK;oBACZ,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE,uCAAgB,CAAC,QAAQ;oBACjC,UAAU,EAAE,UAAU;iBACzB,CAAC,CACL,CAAC;YACN,CAAC;YAED,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;YAElC,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC;gBAC3C,QAAQ,EAAE,kCAAiB,CAAC,QAAQ;gBACpC,cAAc,EAAE,UAAU;gBAC1B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACjE,UAAU,EAAE,OAAO;gBACnB,aAAa,EAAE,OAAO,CAAC,cAAc,KAAK,MAAM,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI;gBACnF,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,SAAS,EAAE,OAAO,CAAC,OAAO;aAC7B,CAAC,CAAC;YAEH,OAAO,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;YAE5E,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAa;QACrB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,4BAAmB,CAAC,mCAAmC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,CAAC;QAE9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE,EAAE,QAAQ,EAAE,kCAAiB,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE;YAC3E,SAAS,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC;SAC1C,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,4BAAmB,CAAC,kDAAkD,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAEpE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAChC,CAAC;CACJ,CAAA;AA5IY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAIJ,WAAA,IAAA,0BAAgB,EAAC,kBAAI,CAAC,CAAA;IACtB,WAAA,IAAA,0BAAgB,EAAC,qCAAa,CAAC,CAAA;IAC/B,WAAA,IAAA,eAAM,EAAC,mDAAmB,CAAC,CAAA;qCAHC,oBAAU;QACG,oBAAU;QACQ,oBAAU;GAJjE,oBAAoB,CA4IhC"}

package/dist/auth/strategies/oauth/google.strategy.d.ts

@@ -0,0 +1,25 @@
+import { DataSource, Repository } from 'typeorm';
+import { Auth } from '../../entities/auth.entity';
+import { OAuthProvider } from '../../entities/oauth-provider.entity';
+import { AuthIdentifier } from '../../entities/auth-identify.entity';
+import { AuthModuleOptions } from '../../interfaces/auth-module-options.interface';
+import { IOAuthStrategy } from '../../interfaces/oauth-strategy.interface';
+import { LoginDto } from '../../dto/requests/login.dto';
+import { SignupDto } from '../../dto/requests/signup.dto';
+export declare class GoogleAuthStrategy implements IOAuthStrategy {
+    private readonly dataSource;
+    private authRepo;
+    private oauthProviderRepo;
+    private options;
+    private client;
+    constructor(dataSource: DataSource, authRepo: Repository<Auth>, oauthProviderRepo: Repository<OAuthProvider>, options: AuthModuleOptions);
+    private verifyToken;
+    registerCredentials(dto: SignupDto, uid?: string): Promise<{
+        auth: Auth;
+        identifier?: AuthIdentifier;
+    }>;
+    login(dto: LoginDto): Promise<{
+        auth: Auth;
+        identifier?: AuthIdentifier;
+    }>;
+}

package/dist/auth/strategies/oauth/google.strategy.js

@@ -0,0 +1,225 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoogleAuthStrategy = void 0;
+/* eslint-disable @typescript-eslint/no-unused-vars */
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("typeorm");
+const typeorm_2 = require("@nestjs/typeorm");
+const google_auth_library_1 = require("google-auth-library");
+const auth_entity_1 = require("../../entities/auth.entity");
+const oauth_provider_entity_1 = require("../../entities/oauth-provider.entity");
+const auth_identify_entity_1 = require("../../entities/auth-identify.entity");
+const auth_module_options_interface_1 = require("../../interfaces/auth-module-options.interface");
+const crypto_1 = require("crypto");
+const auth_type_enum_1 = require("../../enums/auth-type.enum");
+let GoogleAuthStrategy = class GoogleAuthStrategy {
+    constructor(dataSource, authRepo, oauthProviderRepo, options) {
+        this.dataSource = dataSource;
+        this.authRepo = authRepo;
+        this.oauthProviderRepo = oauthProviderRepo;
+        this.options = options;
+        this.client = new google_auth_library_1.OAuth2Client(this.options.googleClientId);
+    }
+    async verifyToken(token) {
+        try {
+            const ticket = await this.client.verifyIdToken({
+                idToken: token,
+                audience: this.options.googleClientId,
+            });
+            const payload = ticket.getPayload();
+            if (!payload) {
+                throw new common_1.BadRequestException('Invalid Google token payload');
+            }
+            return payload;
+        }
+        catch (error) {
+            throw new common_1.BadRequestException('Invalid Google token');
+        }
+    }
+    async registerCredentials(dto, uid) {
+        if (!dto.token) {
+            throw new common_1.BadRequestException('Google ID token is required');
+        }
+        const payload = await this.verifyToken(dto.token);
+        const googleId = payload.sub;
+        const email = payload.email?.toLowerCase();
+        return this.dataSource.transaction(async (manager) => {
+            const authRepo = manager.getRepository(auth_entity_1.Auth);
+            const oauthProviderRepo = manager.getRepository(oauth_provider_entity_1.OAuthProvider);
+            const identifierRepo = manager.getRepository(auth_identify_entity_1.AuthIdentifier);
+            // Check if this Google account is already linked
+            const existingProvider = await oauthProviderRepo.findOne({
+                where: { provider: auth_type_enum_1.OAuthProviderType.GOOGLE, providerUserId: googleId },
+                relations: ['auth'],
+            });
+            if (existingProvider) {
+                throw new common_1.BadRequestException('This Google account is already linked to a user');
+            }
+            // Check if email identifier is already taken
+            if (email) {
+                const existingIdentifier = await identifierRepo.findOne({
+                    where: { value: email, type: auth_identify_entity_1.IdentifierType.EMAIL },
+                });
+                if (existingIdentifier) {
+                    throw new common_1.BadRequestException('A user with this email already exists. Please login instead.');
+                }
+            }
+            const identityUid = uid || (0, crypto_1.randomUUID)();
+            const newAuth = authRepo.create({
+                uid: identityUid,
+                strategy: auth_type_enum_1.AuthStrategy.OAUTH,
+                isActive: true,
+                isVerified: payload.email_verified || false,
+                isPrimary: true,
+            });
+            const identifiers = [];
+            if (email) {
+                identifiers.push(identifierRepo.create({
+                    type: auth_identify_entity_1.IdentifierType.EMAIL,
+                    value: email,
+                    isVerified: payload.email_verified || false,
+                    source: auth_identify_entity_1.IdentifierSource.GOOGLE,
+                    verifiedBy: payload.email_verified ? 'PROVIDER' : undefined,
+                }));
+            }
+            newAuth.identifiers = identifiers;
+            const oauthProvider = oauthProviderRepo.create({
+                provider: auth_type_enum_1.OAuthProviderType.GOOGLE,
+                providerUserId: googleId,
+                rawProfile: payload,
+                displayName: payload.name,
+                avatarUrl: payload.picture,
+                emailVerified: payload.email_verified,
+                expiresAt: payload.exp ? new Date(payload.exp * 1000) : undefined,
+            });
+            newAuth.oauthProviders = [...(newAuth.oauthProviders || []), oauthProvider];
+            return { auth: await authRepo.save(newAuth), identifier: newAuth.identifiers?.[0] };
+        });
+    }
+    // async login(dto: LoginDto): Promise<{ auth: Auth; identifier?: AuthIdentifier }> {
+    //   if (!dto.token) {
+    //     throw new BadRequestException('Google ID token is required');
+    //   }
+    //   const payload = await this.verifyToken(dto.token);
+    //   const googleId = payload.sub;
+    //   const oauthProvider = await this.oauthProviderRepo.findOne({
+    //     where: { provider: OAuthProviderType.GOOGLE, providerUserId: googleId },
+    //     relations: ['auth', 'auth.identifiers'],
+    //   });
+    //   if (!oauthProvider || !oauthProvider.auth) {
+    //     throw new BadRequestException('No account found linked to this Google account. Please sign up.');
+    //   }
+    //   const auth = oauthProvider.auth;
+    //   auth.lastUsedAt = new Date();
+    //   await this.authRepo.save(auth);
+    //   // Find the identifier that matches the email from Google
+    //   const email = payload.email?.toLowerCase();
+    //   const identifier = auth.identifiers?.find(id => id.value === email);
+    //   return { auth, identifier };
+    // }
+    async login(dto) {
+        if (!dto.token) {
+            throw new common_1.BadRequestException('Google ID token is required');
+        }
+        const payload = await this.verifyToken(dto.token);
+        const googleId = payload.sub;
+        const email = payload.email?.toLowerCase();
+        const result = await this.dataSource.transaction(async (manager) => {
+            const oauthRepo = manager.getRepository(oauth_provider_entity_1.OAuthProvider);
+            const authRepo = manager.getRepository(auth_entity_1.Auth);
+            const identifierRepo = manager.getRepository(auth_identify_entity_1.AuthIdentifier);
+            // -------------------------
+            // 1. Load OAuth Provider INSIDE transaction
+            // -------------------------
+            const oauthProvider = await oauthRepo.findOne({
+                where: {
+                    provider: auth_type_enum_1.OAuthProviderType.GOOGLE,
+                    providerUserId: googleId,
+                },
+                relations: ['auth', 'auth.identifiers'],
+            });
+            if (!oauthProvider || !oauthProvider.auth) {
+                throw new common_1.BadRequestException('No account found linked to this Google account. Please sign up.');
+            }
+            const auth = oauthProvider.auth;
+            // -------------------------
+            // 2. Update OAuth Provider
+            // -------------------------
+            oauthProvider.rawProfile = payload;
+            oauthProvider.displayName = payload.name ?? null;
+            oauthProvider.avatarUrl = payload.picture ?? null;
+            oauthProvider.emailVerified = payload.email_verified ?? false;
+            // -------------------------
+            // 3. Update Auth
+            // -------------------------
+            auth.lastUsedAt = new Date();
+            // -------------------------
+            // 4. Handle Identifier (EMAIL)
+            // -------------------------
+            let identifier = null;
+            if (email) {
+                identifier = await identifierRepo.findOne({
+                    where: {
+                        auth: { id: auth.id },
+                        type: auth_identify_entity_1.IdentifierType.EMAIL,
+                    },
+                });
+                if (!identifier) {
+                    identifier = identifierRepo.create({
+                        auth,
+                        type: auth_identify_entity_1.IdentifierType.EMAIL,
+                        value: email,
+                        isVerified: false,
+                    });
+                }
+                // always normalize + update
+                identifier.value = email;
+                identifier.isVerified = payload.email_verified ?? false;
+                identifier.verifiedBy = payload.email_verified ? 'PROVIDER' : identifier.verifiedBy;
+                identifier.source = auth_identify_entity_1.IdentifierSource.GOOGLE;
+                await identifierRepo.save(identifier);
+            }
+            // -------------------------
+            // 5. Save core entities
+            // -------------------------
+            await oauthRepo.save(oauthProvider);
+            await authRepo.save(auth);
+            return { auth, identifier };
+        });
+        // -------------------------
+        // 6. Reload fresh state (important for consistency)
+        // -------------------------
+        const updatedAuth = await this.authRepo.findOne({
+            where: { id: result.auth.id },
+            relations: ['identifiers', 'oauthProviders'],
+        });
+        const identifier = updatedAuth?.identifiers?.find((i) => i.type === auth_identify_entity_1.IdentifierType.EMAIL && i.value === email);
+        return {
+            auth: updatedAuth,
+            identifier,
+        };
+    }
+};
+exports.GoogleAuthStrategy = GoogleAuthStrategy;
+exports.GoogleAuthStrategy = GoogleAuthStrategy = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, typeorm_2.InjectRepository)(auth_entity_1.Auth)),
+    __param(2, (0, typeorm_2.InjectRepository)(oauth_provider_entity_1.OAuthProvider)),
+    __param(3, (0, common_1.Inject)(auth_module_options_interface_1.AUTH_MODULE_OPTIONS)),
+    __metadata("design:paramtypes", [typeorm_1.DataSource,
+        typeorm_1.Repository,
+        typeorm_1.Repository, Object])
+], GoogleAuthStrategy);
+//# sourceMappingURL=google.strategy.js.map

package/dist/auth/strategies/oauth/google.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.strategy.js","sourceRoot":"","sources":["../../../../src/auth/strategies/oauth/google.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sDAAsD;AACtD,2CAAyE;AACzE,qCAAqD;AACrD,6CAAmD;AACnD,6DAAmD;AACnD,4DAAkD;AAClD,gFAAqE;AACrE,8EAAuG;AACvG,kGAAwG;AAExG,mCAAoC;AAGpC,+DAA6E;AAGtE,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAG7B,YACmB,UAAsB,EACP,QAA0B,EACjB,iBAA4C,EAChD,OAA0B;QAH9C,eAAU,GAAV,UAAU,CAAY;QACP,aAAQ,GAAR,QAAQ,CAAkB;QACjB,sBAAiB,GAAjB,iBAAiB,CAA2B;QAChD,YAAO,GAAP,OAAO,CAAmB;QAE/D,IAAI,CAAC,MAAM,GAAG,IAAI,kCAAY,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAa;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC7C,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;aACtC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,4BAAmB,CAAC,8BAA8B,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,4BAAmB,CAAC,sBAAsB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAc,EAAE,GAAY;QACpD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,4BAAmB,CAAC,6BAA6B,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;QAE3C,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,kBAAI,CAAC,CAAC;YAC7C,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,qCAAa,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,qCAAc,CAAC,CAAC;YAE7D,iDAAiD;YACjD,MAAM,gBAAgB,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC;gBACvD,KAAK,EAAE,EAAE,QAAQ,EAAE,kCAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE;gBACvE,SAAS,EAAE,CAAC,MAAM,CAAC;aACpB,CAAC,CAAC;YAEH,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,IAAI,4BAAmB,CAAC,iDAAiD,CAAC,CAAC;YACnF,CAAC;YAED,6CAA6C;YAC7C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,kBAAkB,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;oBACtD,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,qCAAc,CAAC,KAAK,EAAE;iBACpD,CAAC,CAAC;gBACH,IAAI,kBAAkB,EAAE,CAAC;oBACvB,MAAM,IAAI,4BAAmB,CAAC,8DAA8D,CAAC,CAAC;gBAChG,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,GAAG,IAAI,IAAA,mBAAU,GAAE,CAAC;YAExC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC9B,GAAG,EAAE,WAAW;gBAChB,QAAQ,EAAE,6BAAY,CAAC,KAAK;gBAC5B,QAAQ,EAAE,IAAI;gBACd,UAAU,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;gBAC3C,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YAEH,MAAM,WAAW,GAAqB,EAAE,CAAC;YACzC,IAAI,KAAK,EAAE,CAAC;gBACV,WAAW,CAAC,IAAI,CACd,cAAc,CAAC,MAAM,CAAC;oBACpB,IAAI,EAAE,qCAAc,CAAC,KAAK;oBAC1B,KAAK,EAAE,KAAK;oBACZ,UAAU,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;oBAC3C,MAAM,EAAE,uCAAgB,CAAC,MAAM;oBAC/B,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;iBAC5D,CAAC,CACH,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;YAElC,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC;gBAC7C,QAAQ,EAAE,kCAAiB,CAAC,MAAM;gBAClC,cAAc,EAAE,QAAQ;gBACxB,UAAU,EAAE,OAAO;gBACnB,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,SAAS,EAAE,OAAO,CAAC,OAAO;gBAC1B,aAAa,EAAE,OAAO,CAAC,cAAc;gBACrC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;aAClE,CAAC,CAAC;YAEH,OAAO,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;YAE5E,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qFAAqF;IACrF,sBAAsB;IACtB,oEAAoE;IACpE,MAAM;IAEN,uDAAuD;IACvD,kCAAkC;IAElC,iEAAiE;IACjE,+EAA+E;IAC/E,+CAA+C;IAC/C,QAAQ;IAER,iDAAiD;IACjD,wGAAwG;IACxG,MAAM;IAEN,qCAAqC;IACrC,kCAAkC;IAClC,oCAAoC;IAEpC,8DAA8D;IAC9D,gDAAgD;IAChD,yEAAyE;IAEzE,iCAAiC;IACjC,IAAI;IAEJ,KAAK,CAAC,KAAK,CACT,GAAa;QAEb,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,4BAAmB,CAAC,6BAA6B,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACjE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,qCAAa,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,kBAAI,CAAC,CAAC;YAC7C,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,qCAAc,CAAC,CAAC;YAE7D,4BAA4B;YAC5B,4CAA4C;YAC5C,4BAA4B;YAC5B,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAC5C,KAAK,EAAE;oBACL,QAAQ,EAAE,kCAAiB,CAAC,MAAM;oBAClC,cAAc,EAAE,QAAQ;iBACzB;gBACD,SAAS,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC;aACxC,CAAC,CAAC;YAEH,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;gBAC1C,MAAM,IAAI,4BAAmB,CAC3B,iEAAiE,CAClE,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;YAEhC,4BAA4B;YAC5B,2BAA2B;YAC3B,4BAA4B;YAC5B,aAAa,CAAC,UAAU,GAAG,OAAO,CAAC;YACnC,aAAa,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC;YACjD,aAAa,CAAC,SAAS,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;YAClD,aAAa,CAAC,aAAa,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;YAE9D,4BAA4B;YAC5B,iBAAiB;YACjB,4BAA4B;YAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;YAE7B,4BAA4B;YAC5B,+BAA+B;YAC/B,4BAA4B;YAC5B,IAAI,UAAU,GAA0B,IAAI,CAAC;YAE7C,IAAI,KAAK,EAAE,CAAC;gBACV,UAAU,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;oBACxC,KAAK,EAAE;wBACL,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;wBACrB,IAAI,EAAE,qCAAc,CAAC,KAAK;qBAC3B;iBACF,CAAC,CAAC;gBAEH,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC;wBACjC,IAAI;wBACJ,IAAI,EAAE,qCAAc,CAAC,KAAK;wBAC1B,KAAK,EAAE,KAAK;wBACZ,UAAU,EAAE,KAAK;qBAClB,CAAC,CAAC;gBACL,CAAC;gBAED,4BAA4B;gBAC5B,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC;gBACzB,UAAU,CAAC,UAAU,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;gBACxD,UAAU,CAAC,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;gBACpF,UAAU,CAAC,MAAM,GAAG,uCAAgB,CAAC,MAAM,CAAC;gBAE5C,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxC,CAAC;YAED,4BAA4B;YAC5B,wBAAwB;YACxB,4BAA4B;YAC5B,MAAM,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACpC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE1B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,oDAAoD;QACpD,4BAA4B;QAC5B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC9C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;YAC7B,SAAS,EAAE,CAAC,aAAa,EAAE,gBAAgB,CAAC;SAC7C,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,WAAW,EAAE,WAAW,EAAE,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qCAAc,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAC5D,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,WAAY;YAClB,UAAU;SACX,CAAC;IACJ,CAAC;CACF,CAAA;AA7OY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,0BAAgB,EAAC,kBAAI,CAAC,CAAA;IACtB,WAAA,IAAA,0BAAgB,EAAC,qCAAa,CAAC,CAAA;IAC/B,WAAA,IAAA,eAAM,EAAC,mDAAmB,CAAC,CAAA;qCAHC,oBAAU;QACG,oBAAU;QACQ,oBAAU;GAN7D,kBAAkB,CA6O9B"}

package/dist/auth/strategies/oauth/oauth-strategy.interface.d.ts

@@ -0,0 +1,14 @@
+import { SignupDto } from '../../dto/requests/signup.dto';
+import { LoginDto } from '../../dto/requests/login.dto';
+import { Auth } from '../../entities/auth.entity';
+import { AuthIdentifier } from '../../entities/auth-identify.entity';
+export interface IOAuthStrategy {
+    registerCredentials(dto: SignupDto, uid?: string): Promise<{
+        auth: Auth;
+        identifier?: AuthIdentifier;
+    }>;
+    login(dto: LoginDto): Promise<{
+        auth: Auth;
+        identifier?: AuthIdentifier;
+    }>;
+}

package/dist/auth/strategies/oauth/oauth-strategy.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=oauth-strategy.interface.js.map

package/dist/auth/strategies/oauth/oauth-strategy.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-strategy.interface.js","sourceRoot":"","sources":["../../../../src/auth/strategies/oauth/oauth-strategy.interface.ts"],"names":[],"mappings":""}

package/dist/auth/strategies/oauth/oauth.strategy.d.ts

@@ -0,0 +1,25 @@
+import { SignupDto } from '../../dto/requests/signup.dto';
+import { LoginDto } from '../../dto/requests/login.dto';
+import { Auth } from '../../entities/auth.entity';
+import { AuthIdentifier } from '../../entities/auth-identify.entity';
+import { GoogleAuthStrategy } from './google.strategy';
+import { FacebookAuthStrategy } from './facebook.strategy';
+import { AppleAuthStrategy } from './apple.strategy';
+import { IOAuthStrategy } from '../../interfaces/oauth-strategy.interface';
+import { AuthModuleOptions } from '../../interfaces/auth-module-options.interface';
+export declare class OAuthAuthStrategy implements IOAuthStrategy {
+    private googleStrategy;
+    private facebookStrategy;
+    private appleStrategy;
+    private options;
+    constructor(googleStrategy: GoogleAuthStrategy, facebookStrategy: FacebookAuthStrategy, appleStrategy: AppleAuthStrategy, options: AuthModuleOptions);
+    private getStrategy;
+    registerCredentials(dto: SignupDto, uid?: string): Promise<{
+        auth: Auth;
+        identifier?: AuthIdentifier;
+    }>;
+    login(dto: LoginDto): Promise<{
+        auth: Auth;
+        identifier?: AuthIdentifier;
+    }>;
+}

package/dist/auth/strategies/oauth/oauth.strategy.js

@@ -0,0 +1,70 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthAuthStrategy = void 0;
+const common_1 = require("@nestjs/common");
+const auth_type_enum_1 = require("../../enums/auth-type.enum");
+const google_strategy_1 = require("./google.strategy");
+const facebook_strategy_1 = require("./facebook.strategy");
+const apple_strategy_1 = require("./apple.strategy");
+const auth_module_options_interface_1 = require("../../interfaces/auth-module-options.interface");
+const common_2 = require("@nestjs/common");
+const auth_type_enum_2 = require("../../enums/auth-type.enum");
+let OAuthAuthStrategy = class OAuthAuthStrategy {
+    constructor(googleStrategy, facebookStrategy, appleStrategy, options) {
+        this.googleStrategy = googleStrategy;
+        this.facebookStrategy = facebookStrategy;
+        this.appleStrategy = appleStrategy;
+        this.options = options;
+    }
+    getStrategy(provider) {
+        const enabledStrategies = this.options.enabledStrategies || Object.values(auth_type_enum_2.AuthStrategy);
+        if (provider === auth_type_enum_1.OAuthProviderType.GOOGLE && !enabledStrategies.includes(auth_type_enum_2.AuthStrategy.GOOGLE) && !enabledStrategies.includes(auth_type_enum_2.AuthStrategy.OAUTH)) {
+            throw new common_1.BadRequestException('Google authentication is currently disabled.');
+        }
+        if (provider === auth_type_enum_1.OAuthProviderType.FACEBOOK && !enabledStrategies.includes(auth_type_enum_2.AuthStrategy.FACEBOOK) && !enabledStrategies.includes(auth_type_enum_2.AuthStrategy.OAUTH)) {
+            throw new common_1.BadRequestException('Facebook authentication is currently disabled.');
+        }
+        if (provider === auth_type_enum_1.OAuthProviderType.APPLE && !enabledStrategies.includes(auth_type_enum_2.AuthStrategy.APPLE) && !enabledStrategies.includes(auth_type_enum_2.AuthStrategy.OAUTH)) {
+            throw new common_1.BadRequestException('Apple authentication is currently disabled.');
+        }
+        switch (provider) {
+            case auth_type_enum_1.OAuthProviderType.GOOGLE:
+                return this.googleStrategy;
+            case auth_type_enum_1.OAuthProviderType.FACEBOOK:
+                return this.facebookStrategy;
+            case auth_type_enum_1.OAuthProviderType.APPLE:
+                return this.appleStrategy;
+            default:
+                throw new common_1.BadRequestException(`Unsupported or missing OAuth provider: ${provider}`);
+        }
+    }
+    async registerCredentials(dto, uid) {
+        const strategy = this.getStrategy(dto.provider);
+        return strategy.registerCredentials(dto, uid);
+    }
+    async login(dto) {
+        const strategy = this.getStrategy(dto.provider);
+        return strategy.login(dto);
+    }
+};
+exports.OAuthAuthStrategy = OAuthAuthStrategy;
+exports.OAuthAuthStrategy = OAuthAuthStrategy = __decorate([
+    (0, common_1.Injectable)(),
+    __param(3, (0, common_2.Inject)(auth_module_options_interface_1.AUTH_MODULE_OPTIONS)),
+    __metadata("design:paramtypes", [google_strategy_1.GoogleAuthStrategy,
+        facebook_strategy_1.FacebookAuthStrategy,
+        apple_strategy_1.AppleAuthStrategy, Object])
+], OAuthAuthStrategy);
+//# sourceMappingURL=oauth.strategy.js.map

package/dist/auth/strategies/oauth/oauth.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.strategy.js","sourceRoot":"","sources":["../../../../src/auth/strategies/oauth/oauth.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAiE;AAKjE,+DAA+D;AAC/D,uDAAuD;AACvD,2DAA2D;AAC3D,qDAAqD;AAErD,kGAAwG;AACxG,2CAAwC;AACxC,+DAA0D;AAGnD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC1B,YACY,cAAkC,EAClC,gBAAsC,EACtC,aAAgC,EACH,OAA0B;QAHvD,mBAAc,GAAd,cAAc,CAAoB;QAClC,qBAAgB,GAAhB,gBAAgB,CAAsB;QACtC,kBAAa,GAAb,aAAa,CAAmB;QACH,YAAO,GAAP,OAAO,CAAmB;IAC/D,CAAC;IAEG,WAAW,CAAC,QAA4B;QAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,MAAM,CAAC,6BAAY,CAAC,CAAC;QAExF,IAAI,QAAQ,KAAK,kCAAiB,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,6BAAY,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,6BAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/I,MAAM,IAAI,4BAAmB,CAAC,8CAA8C,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,QAAQ,KAAK,kCAAiB,CAAC,QAAQ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,6BAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,6BAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACnJ,MAAM,IAAI,4BAAmB,CAAC,gDAAgD,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,QAAQ,KAAK,kCAAiB,CAAC,KAAK,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,6BAAY,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,6BAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7I,MAAM,IAAI,4BAAmB,CAAC,6CAA6C,CAAC,CAAC;QACjF,CAAC;QAED,QAAQ,QAAQ,EAAE,CAAC;YACf,KAAK,kCAAiB,CAAC,MAAM;gBACzB,OAAO,IAAI,CAAC,cAAc,CAAC;YAC/B,KAAK,kCAAiB,CAAC,QAAQ;gBAC3B,OAAO,IAAI,CAAC,gBAAgB,CAAC;YACjC,KAAK,kCAAiB,CAAC,KAAK;gBACxB,OAAO,IAAI,CAAC,aAAa,CAAC;YAC9B;gBACI,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,QAAQ,EAAE,CAAC,CAAC;QAC5F,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAc,EAAE,GAAY;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAa;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACJ,CAAA;AA1CY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAMJ,WAAA,IAAA,eAAM,EAAC,mDAAmB,CAAC,CAAA;qCAHJ,oCAAkB;QAChB,wCAAoB;QACvB,kCAAiB;GAJnC,iBAAiB,CA0C7B"}

package/dist/auth/strategies/otp.strategy.d.ts

@@ -0,0 +1,7 @@
+import { LoginDto } from '../dto/login.dto';
+import { SignupDto } from '../dto/signup.dto';
+import { Auth } from '../entities/auth.entity';
+export declare class OtpAuthStrategy {
+    registerCredentials(dto: SignupDto, uid?: string): Promise<Auth>;
+    login(dto: LoginDto): Promise<Auth>;
+}

package/dist/auth/strategies/otp.strategy.js

@@ -0,0 +1,23 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OtpAuthStrategy = void 0;
+const common_1 = require("@nestjs/common");
+let OtpAuthStrategy = class OtpAuthStrategy {
+    async registerCredentials(dto, uid) {
+        throw new Error('Not implemented');
+    }
+    async login(dto) {
+        throw new Error('Not implemented');
+    }
+};
+exports.OtpAuthStrategy = OtpAuthStrategy;
+exports.OtpAuthStrategy = OtpAuthStrategy = __decorate([
+    (0, common_1.Injectable)()
+], OtpAuthStrategy);
+//# sourceMappingURL=otp.strategy.js.map

package/dist/auth/strategies/otp.strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.strategy.js","sourceRoot":"","sources":["../../../src/auth/strategies/otp.strategy.ts"],"names":[],"mappings":";;;;;;;;;AAEA,2CAA4C;AAMrC,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,KAAK,CAAC,mBAAmB,CAAC,GAAc,EAAE,GAAY;QAEpD,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAa;QAEvB,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;CACF,CAAA;AAVY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CAU3B"}

package/dist/auth/strategies/password.strategy.d.ts

@@ -0,0 +1,14 @@
+import { DataSource, Repository } from 'typeorm';
+import { LoginDto } from '../dto/login.dto';
+import { SignupDto } from '../dto/signup.dto';
+import { Auth } from '../entities/auth.entity';
+import { AuthIdentifier } from '../entities/auth-identify.entity';
+export declare class LocalAuthStrategy {
+    private readonly dataSource;
+    private authRepo;
+    private identifierRepo;
+    constructor(dataSource: DataSource, authRepo: Repository<Auth>, identifierRepo: Repository<AuthIdentifier>);
+    private readonly logger;
+    registerCredentials(dto: SignupDto, uid?: string): Promise<Auth>;
+    login(dto: LoginDto): Promise<Auth>;
+}