@vynelix/nestjs-multi-auth 0.0.2

package/dist/auth/entities/auth-identify.entity.js

@@ -0,0 +1,73 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthIdentifier = exports.IdentifierSource = exports.IdentifierType = void 0;
+const typeorm_1 = require("typeorm");
+const auth_entity_1 = require("./auth.entity");
+const base_entity_1 = require("./base.entity");
+var IdentifierType;
+(function (IdentifierType) {
+    IdentifierType["EMAIL"] = "EMAIL";
+    IdentifierType["PHONE"] = "PHONE";
+    IdentifierType["USERNAME"] = "USERNAME";
+})(IdentifierType || (exports.IdentifierType = IdentifierType = {}));
+var IdentifierSource;
+(function (IdentifierSource) {
+    IdentifierSource["APPLE"] = "APPLE";
+    IdentifierSource["FACEBOOK"] = "FACEBOOK";
+    IdentifierSource["GOOGLE"] = "GOOGLE";
+    IdentifierSource["LOCAL"] = "LOCAL";
+})(IdentifierSource || (exports.IdentifierSource = IdentifierSource = {}));
+let AuthIdentifier = class AuthIdentifier extends base_entity_1.BaseEntity {
+    toMap() {
+        return {
+            id: this.id,
+            type: this.type,
+            value: this.value,
+            isVerified: this.isVerified,
+            // auth: this.auth.toMap(),
+        };
+    }
+};
+exports.AuthIdentifier = AuthIdentifier;
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => auth_entity_1.Auth, (auth) => auth.identifiers, { onDelete: 'CASCADE' }),
+    __metadata("design:type", auth_entity_1.Auth)
+], AuthIdentifier.prototype, "auth", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'enum', enum: IdentifierType }),
+    __metadata("design:type", String)
+], AuthIdentifier.prototype, "type", void 0);
+__decorate([
+    (0, typeorm_1.Index)({ unique: true }),
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], AuthIdentifier.prototype, "value", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ default: false }),
+    __metadata("design:type", Boolean)
+], AuthIdentifier.prototype, "isVerified", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        type: 'enum',
+        enum: IdentifierSource,
+        default: IdentifierSource.LOCAL,
+    }),
+    __metadata("design:type", String)
+], AuthIdentifier.prototype, "source", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], AuthIdentifier.prototype, "verifiedBy", void 0);
+exports.AuthIdentifier = AuthIdentifier = __decorate([
+    (0, typeorm_1.Entity)('auth_identifiers')
+], AuthIdentifier);
+//# sourceMappingURL=auth-identify.entity.js.map

package/dist/auth/entities/auth-identify.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-identify.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/auth-identify.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAKiB;AACjB,+CAAqC;AACrC,+CAA2C;AAG3C,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,iCAAe,CAAA;IACf,iCAAe,CAAA;IACf,uCAAqB,CAAA;AACvB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AACD,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAC1B,mCAA0B,CAAA;IAC1B,yCAAgC,CAAA;IAChC,qCAA4B,CAAA;IAC5B,mCAA0B,CAAA;AAC5B,CAAC,EALW,gBAAgB,gCAAhB,gBAAgB,QAK3B;AAGM,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,wBAAU;IAiC5C,KAAK;QACH,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,2BAA2B;SAC5B,CAAC;IACJ,CAAC;CACF,CAAA;AA1CY,wCAAc;AAGzB;IADC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,kBAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;8BACrE,kBAAI;4CAAC;AAGX;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;;4CAC1B;AAMrB;IAFC,IAAA,eAAK,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACvB,IAAA,gBAAM,GAAE;;6CACK;AAGd;IADC,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;kDACP;AAUpB;IALC,IAAA,gBAAM,EAAC;QACN,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,gBAAgB,CAAC,KAAK;KAChC,CAAC;;8CACuB;AAMzB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDACe;yBA/B/B,cAAc;IAD1B,IAAA,gBAAM,EAAC,kBAAkB,CAAC;GACd,cAAc,CA0C1B"}

package/dist/auth/entities/auth.entity.d.ts

@@ -0,0 +1,45 @@
+import { BaseEntity } from './base.entity';
+import { AuthIdentifier } from './auth-identify.entity';
+import { OAuthProvider } from './oauth-provider.entity';
+import { AuthStrategy } from '../enums/auth-type.enum';
+export declare class Auth extends BaseEntity {
+    uid: string;
+    strategy: AuthStrategy;
+    identifiers: AuthIdentifier[];
+    secretHash?: string;
+    isPrimary: boolean;
+    isVerified: boolean;
+    isActive: boolean;
+    meta?: Record<string, any>;
+    lastUsedAt?: Date;
+    oauthProviders?: OAuthProvider[];
+    toMap(): {
+        id: string;
+        strategy: AuthStrategy;
+        isActive: boolean;
+        isVerified: boolean;
+        isPrimary: boolean;
+        meta: Record<string, any>;
+        lastUsedAt: Date;
+        identifiers: {
+            id: string;
+            type: import("./auth-identify.entity").IdentifierType;
+            value: string;
+            isVerified: boolean;
+        }[];
+        oauthProviders: {
+            id: string;
+            provider: import("../enums/auth-type.enum").OAuthProviderType;
+            providerUserId: string;
+            accessToken: string;
+            refreshToken: string;
+            expiresAt: Date;
+            createdAt: Date;
+            updatedAt: Date;
+            deletedAt: Date;
+        }[];
+        createdAt: Date;
+        updatedAt: Date;
+        deletedAt: Date;
+    };
+}

package/dist/auth/entities/auth.entity.js

@@ -0,0 +1,129 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Auth = void 0;
+const typeorm_1 = require("typeorm");
+const swagger_1 = require("@nestjs/swagger");
+const base_entity_1 = require("./base.entity");
+const auth_identify_entity_1 = require("./auth-identify.entity");
+const oauth_provider_entity_1 = require("./oauth-provider.entity");
+const auth_type_enum_1 = require("../enums/auth-type.enum");
+let Auth = class Auth extends base_entity_1.BaseEntity {
+    toMap() {
+        return {
+            id: this.id,
+            strategy: this.strategy,
+            isActive: this.isActive,
+            isVerified: this.isVerified,
+            isPrimary: this.isPrimary,
+            meta: this.meta,
+            lastUsedAt: this.lastUsedAt,
+            // user: this.user.toMap(),
+            identifiers: this.identifiers?.map((id) => id?.toMap()),
+            oauthProviders: this.oauthProviders?.map((provider) => provider?.toMap()),
+            createdAt: this.createdAt,
+            updatedAt: this.updatedAt,
+            deletedAt: this.deletedAt,
+        };
+    }
+};
+exports.Auth = Auth;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Unique identity ID (UID) of this account. Multiple auth methods can share the same UID.',
+        type: 'string',
+        example: 'uuid-string',
+    }),
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, typeorm_1.Index)(),
+    __metadata("design:type", String)
+], Auth.prototype, "uid", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'enum', enum: auth_type_enum_1.AuthStrategy }),
+    __metadata("design:type", String)
+], Auth.prototype, "strategy", void 0);
+__decorate([
+    (0, typeorm_1.OneToMany)(() => auth_identify_entity_1.AuthIdentifier, (identifier) => identifier.auth, {
+        cascade: true,
+    }),
+    __metadata("design:type", Array)
+], Auth.prototype, "identifiers", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: '$2b$10$hashedpassword...',
+        description: 'Hashed secret (password, TOTP secret). Null for OAuth',
+        nullable: true,
+    }),
+    (0, typeorm_1.Column)({ nullable: true, select: false }),
+    __metadata("design:type", String)
+], Auth.prototype, "secretHash", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: true,
+        description: 'Primary login method for the user',
+    }),
+    (0, typeorm_1.Column)({ default: false }),
+    __metadata("design:type", Boolean)
+], Auth.prototype, "isPrimary", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: true,
+        description: 'Whether the identifier is verified',
+    }),
+    (0, typeorm_1.Column)({ default: false }),
+    __metadata("design:type", Boolean)
+], Auth.prototype, "isVerified", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: true,
+        description: 'Whether this auth method is enabled',
+    }),
+    (0, typeorm_1.Column)({ default: true }),
+    __metadata("design:type", Boolean)
+], Auth.prototype, "isActive", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: { device: 'iPhone', ip: '192.168.1.1' },
+        description: 'Additional metadata (JSON)',
+    }),
+    (0, typeorm_1.Column)({ type: 'jsonb', nullable: true }),
+    __metadata("design:type", Object)
+], Auth.prototype, "meta", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: '2025-09-30T12:00:00Z',
+        description: 'Last successful usage timestamp',
+    }),
+    (0, typeorm_1.Column)({ type: 'timestamp', nullable: true }),
+    __metadata("design:type", Date)
+], Auth.prototype, "lastUsedAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: () => oauth_provider_entity_1.OAuthProvider,
+        description: 'OAuth provider details (only for OAUTH method)',
+        required: false,
+    }),
+    (0, typeorm_1.OneToMany)(() => oauth_provider_entity_1.OAuthProvider, (provider) => provider.auth, {
+        cascade: true,
+        nullable: true,
+    }),
+    __metadata("design:type", Array)
+], Auth.prototype, "oauthProviders", void 0);
+exports.Auth = Auth = __decorate([
+    (0, typeorm_1.Entity)('auth'),
+    (0, typeorm_1.Index)('IDX_user_primary_auth', ['uid'], {
+        unique: true,
+        where: `"isPrimary" = true`,
+    }),
+    (0, typeorm_1.Index)(['strategy']),
+    (0, typeorm_1.Index)(['isActive'])
+], Auth);
+//# sourceMappingURL=auth.entity.js.map

package/dist/auth/entities/auth.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/auth.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAgF;AAChF,6CAA8C;AAC9C,+CAA2C;AAC3C,iEAAwD;AACxD,mEAAwD;AACxD,4DAAuD;AAShD,IAAM,IAAI,GAAV,MAAM,IAAK,SAAQ,wBAAU;IAoGlC,KAAK;QACH,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,2BAA2B;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;YACvD,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;YACzE,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF,CAAA;AArHY,oBAAI;AAYf;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yFAAyF;QACtG,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,aAAa;KACvB,CAAC;IACD,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,eAAK,GAAE;;iCACI;AAGZ;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6BAAY,EAAE,CAAC;;sCACtB;AAavB;IAHC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,qCAAc,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE;QAChE,OAAO,EAAE,IAAI;KACd,CAAC;;yCAC4B;AAY9B;IANC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,0BAA0B;QACnC,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;wCACtB;AAWpB;IALC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,mCAAmC;KACjD,CAAC;IACD,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;uCACR;AAOnB;IALC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,oCAAoC;KAClD,CAAC;IACD,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;wCACP;AAOpB;IALC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,qCAAqC;KACnD,CAAC;IACD,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;;sCACR;AAWlB;IALC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE;QAChD,WAAW,EAAE,4BAA4B;KAC1C,CAAC;IACD,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kCACf;AAO3B;IALC,IAAA,qBAAW,EAAC;QACX,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EAAE,iCAAiC;KAC/C,CAAC;IACD,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BACjC,IAAI;wCAAC;AAelB;IATC,IAAA,qBAAW,EAAC;QACX,IAAI,EAAE,GAAG,EAAE,CAAC,qCAAa;QACzB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,qCAAa,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC3D,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;KACf,CAAC;;4CAC+B;eAlGtB,IAAI;IAPhB,IAAA,gBAAM,EAAC,MAAM,CAAC;IACd,IAAA,eAAK,EAAC,uBAAuB,EAAE,CAAC,KAAK,CAAC,EAAE;QACvC,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,oBAAoB;KAC5B,CAAC;IACD,IAAA,eAAK,EAAC,CAAC,UAAU,CAAC,CAAC;IACnB,IAAA,eAAK,EAAC,CAAC,UAAU,CAAC,CAAC;GACP,IAAI,CAqHhB"}

package/dist/auth/entities/base.entity.d.ts

@@ -0,0 +1,6 @@
+export declare abstract class BaseEntity {
+    id: string;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt: Date;
+}

package/dist/auth/entities/base.entity.js

@@ -0,0 +1,41 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseEntity = void 0;
+const typeorm_1 = require("typeorm");
+const swagger_1 = require("@nestjs/swagger");
+class BaseEntity {
+}
+exports.BaseEntity = BaseEntity;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        example: 'uuid-string',
+        description: 'Unique identifier',
+    }),
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], BaseEntity.prototype, "id", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Creation date' }),
+    (0, typeorm_1.CreateDateColumn)({ type: 'timestamp' }),
+    __metadata("design:type", Date)
+], BaseEntity.prototype, "createdAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Last update date' }),
+    (0, typeorm_1.UpdateDateColumn)({ type: 'timestamp' }),
+    __metadata("design:type", Date)
+], BaseEntity.prototype, "updatedAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Deletion date (soft delete)' }),
+    (0, typeorm_1.DeleteDateColumn)({ type: 'timestamp', nullable: true }),
+    __metadata("design:type", Date)
+], BaseEntity.prototype, "deletedAt", void 0);
+//# sourceMappingURL=base.entity.js.map

package/dist/auth/entities/base.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/base.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAKiB;AACjB,6CAA8C;AAE9C,MAAsB,UAAU;CAmB/B;AAnBD,gCAmBC;AAbG;IALC,IAAA,qBAAW,EAAC;QACT,OAAO,EAAE,aAAa;QACtB,WAAW,EAAE,mBAAmB;KACnC,CAAC;IACD,IAAA,gCAAsB,EAAC,MAAM,CAAC;;sCACpB;AAIX;IAFC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IAC7C,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BAC7B,IAAI;6CAAC;AAIhB;IAFC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAChD,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BAC7B,IAAI;6CAAC;AAIhB;IAFC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;IAC3D,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BAC7C,IAAI;6CAAC"}

package/dist/auth/entities/mfa-method.entity.d.ts

@@ -0,0 +1,23 @@
+export declare enum MfaType {
+    TOTP = "TOTP",// Authenticator App
+    SMS = "SMS",
+    EMAIL = "EMAIL"
+}
+export declare class MfaMethod {
+    id: string;
+    uid: string;
+    type: MfaType;
+    secret: string;
+    isEnabled: boolean;
+    isDefault: boolean;
+    lastUsedAt: Date;
+    createdAt: Date;
+    toMap(): {
+        id: string;
+        type: MfaType;
+        isEnabled: boolean;
+        isDefault: boolean;
+        lastUsedAt: Date;
+        createdAt: Date;
+    };
+}

package/dist/auth/entities/mfa-method.entity.js

@@ -0,0 +1,69 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MfaMethod = exports.MfaType = void 0;
+const typeorm_1 = require("typeorm");
+var MfaType;
+(function (MfaType) {
+    MfaType["TOTP"] = "TOTP";
+    MfaType["SMS"] = "SMS";
+    MfaType["EMAIL"] = "EMAIL";
+})(MfaType || (exports.MfaType = MfaType = {}));
+let MfaMethod = class MfaMethod {
+    toMap() {
+        return {
+            id: this.id,
+            type: this.type,
+            isEnabled: this.isEnabled,
+            isDefault: this.isDefault,
+            lastUsedAt: this.lastUsedAt,
+            createdAt: this.createdAt,
+        };
+    }
+};
+exports.MfaMethod = MfaMethod;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], MfaMethod.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    (0, typeorm_1.Index)(),
+    __metadata("design:type", String)
+], MfaMethod.prototype, "uid", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'enum', enum: MfaType }),
+    __metadata("design:type", String)
+], MfaMethod.prototype, "type", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ select: false }),
+    __metadata("design:type", String)
+], MfaMethod.prototype, "secret", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ default: false }),
+    __metadata("design:type", Boolean)
+], MfaMethod.prototype, "isEnabled", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ default: false }),
+    __metadata("design:type", Boolean)
+], MfaMethod.prototype, "isDefault", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", Date)
+], MfaMethod.prototype, "lastUsedAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    __metadata("design:type", Date)
+], MfaMethod.prototype, "createdAt", void 0);
+exports.MfaMethod = MfaMethod = __decorate([
+    (0, typeorm_1.Entity)('auth_mfa_methods')
+], MfaMethod);
+//# sourceMappingURL=mfa-method.entity.js.map

package/dist/auth/entities/mfa-method.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-method.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/mfa-method.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAMiB;AAEjB,IAAY,OAIX;AAJD,WAAY,OAAO;IACjB,wBAAa,CAAA;IACb,sBAAW,CAAA;IACX,0BAAe,CAAA;AACjB,CAAC,EAJW,OAAO,uBAAP,OAAO,QAIlB;AAGM,IAAM,SAAS,GAAf,MAAM,SAAS;IA4BpB,KAAK;QACH,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF,CAAA;AAtCY,8BAAS;AAEpB;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;qCACpB;AAIX;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,eAAK,GAAE;;sCACI;AAGZ;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;;uCAC1B;AAKd;IADC,IAAA,gBAAM,EAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;yCACX;AAGf;IADC,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;4CACR;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;4CACR;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BACf,IAAI;6CAAC;AAGjB;IADC,IAAA,0BAAgB,GAAE;8BACR,IAAI;4CAAC;oBA1BL,SAAS;IADrB,IAAA,gBAAM,EAAC,kBAAkB,CAAC;GACd,SAAS,CAsCrB"}

package/dist/auth/entities/oauth-provider.entity.d.ts

@@ -0,0 +1,38 @@
+import { BaseEntity } from './base.entity';
+import { Auth } from './auth.entity';
+import { OAuthProviderType } from '../enums/auth-type.enum';
+export declare class OAuthProvider extends BaseEntity {
+    auth: Auth;
+    provider: OAuthProviderType;
+    providerUserId: string;
+    accessToken?: string;
+    refreshToken?: string;
+    expiresAt?: Date;
+    /**
+     * Display name from provider (e.g. "John Doe")
+     */
+    displayName?: string;
+    /**
+     * Avatar/profile picture URL
+     */
+    avatarUrl?: string;
+    /**
+     * Whether provider verified the email
+     */
+    emailVerified?: boolean;
+    /**
+     * Raw provider response (for debugging/future-proofing)
+     */
+    rawProfile?: Record<string, any>;
+    toMap(): {
+        id: string;
+        provider: OAuthProviderType;
+        providerUserId: string;
+        accessToken: string;
+        refreshToken: string;
+        expiresAt: Date;
+        createdAt: Date;
+        updatedAt: Date;
+        deletedAt: Date;
+    };
+}

package/dist/auth/entities/oauth-provider.entity.js

@@ -0,0 +1,88 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthProvider = void 0;
+const typeorm_1 = require("typeorm");
+const swagger_1 = require("@nestjs/swagger");
+const base_entity_1 = require("./base.entity");
+const auth_entity_1 = require("./auth.entity");
+const auth_type_enum_1 = require("../enums/auth-type.enum");
+let OAuthProvider = class OAuthProvider extends base_entity_1.BaseEntity {
+    toMap() {
+        return {
+            id: this.id,
+            provider: this.provider,
+            providerUserId: this.providerUserId,
+            accessToken: this.accessToken,
+            refreshToken: this.refreshToken,
+            expiresAt: this.expiresAt,
+            createdAt: this.createdAt,
+            updatedAt: this.updatedAt,
+            deletedAt: this.deletedAt,
+            // auth: this.auth.toMap(),
+        };
+    }
+};
+exports.OAuthProvider = OAuthProvider;
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => auth_entity_1.Auth, (auth) => auth.oauthProviders, { onDelete: 'CASCADE' }),
+    (0, typeorm_1.JoinColumn)({ name: 'authId' }),
+    __metadata("design:type", auth_entity_1.Auth)
+], OAuthProvider.prototype, "auth", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ enum: auth_type_enum_1.OAuthProviderType, example: auth_type_enum_1.OAuthProviderType.GOOGLE }),
+    (0, typeorm_1.Column)({ type: 'enum', enum: auth_type_enum_1.OAuthProviderType }),
+    __metadata("design:type", String)
+], OAuthProvider.prototype, "provider", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: '1234567890' }),
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], OAuthProvider.prototype, "providerUserId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: 'ya29.a0ARrdaM...' }),
+    (0, typeorm_1.Column)({ nullable: true, select: false }),
+    __metadata("design:type", String)
+], OAuthProvider.prototype, "accessToken", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: '1//0gdf1234...' }),
+    (0, typeorm_1.Column)({ nullable: true, select: false }),
+    __metadata("design:type", String)
+], OAuthProvider.prototype, "refreshToken", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: '2025-10-01T12:00:00Z' }),
+    (0, typeorm_1.Column)({ type: 'timestamp', nullable: true }),
+    __metadata("design:type", Date)
+], OAuthProvider.prototype, "expiresAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: 'John Doe', required: false }),
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthProvider.prototype, "displayName", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: 'https://lh3.googleusercontent.com/...', required: false }),
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OAuthProvider.prototype, "avatarUrl", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ example: true, required: false }),
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", Boolean)
+], OAuthProvider.prototype, "emailVerified", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({ required: false }),
+    (0, typeorm_1.Column)({ type: 'jsonb', nullable: true }),
+    __metadata("design:type", Object)
+], OAuthProvider.prototype, "rawProfile", void 0);
+exports.OAuthProvider = OAuthProvider = __decorate([
+    (0, typeorm_1.Entity)('oauth_providers')
+], OAuthProvider);
+//# sourceMappingURL=oauth-provider.entity.js.map

package/dist/auth/entities/oauth-provider.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-provider.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/oauth-provider.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAgE;AAChE,6CAA8C;AAC9C,+CAA2C;AAC3C,+CAAqC;AACrC,4DAA4D;AAGrD,IAAM,aAAa,GAAnB,MAAM,aAAc,SAAQ,wBAAU;IA0D3C,KAAK;QACH,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,2BAA2B;SAC5B,CAAC;IACJ,CAAC;CACF,CAAA;AAxEY,sCAAa;AAGxB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,kBAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7E,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;8BACzB,kBAAI;2CAAC;AAIX;IAFC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,kCAAiB,EAAE,OAAO,EAAE,kCAAiB,CAAC,MAAM,EAAE,CAAC;IAC3E,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kCAAiB,EAAE,CAAC;;+CACtB;AAK5B;IAFC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IACtC,IAAA,gBAAM,GAAE;;qDACc;AAIvB;IAFC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC5C,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;kDACrB;AAIrB;IAFC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC1C,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;;mDACpB;AAItB;IAFC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAChD,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8BAClC,IAAI;gDAAC;AAWjB;IAFC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACrD,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kDACN;AAOrB;IAFC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAClF,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;gDACR;AAOnB;IAFC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/C,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDACH;AAOxB;IAFC,IAAA,qBAAW,EAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDACT;wBAxDtB,aAAa;IADzB,IAAA,gBAAM,EAAC,iBAAiB,CAAC;GACb,aAAa,CAwEzB"}

package/dist/auth/entities/otp-token.entity.d.ts

@@ -0,0 +1,22 @@
+import { BaseEntity } from './base.entity';
+export declare enum OtpPurpose {
+    VERIFY_EMAIL = "VERIFY_EMAIL",// For registration
+    VERIFY_PHONE = "VERIFY_PHONE",// For registration
+    PASSWORD_RESET = "PASSWORD_RESET",// For recovery
+    LOGIN_2FA = "LOGIN_2FA",// For logging in
+    MAGIC_LINK = "MAGIC_LINK",// For magic link login
+    SECURE_ACCOUNT = "SECURE_ACCOUNT"
+}
+export declare class OtpToken extends BaseEntity {
+    identifier: string;
+    purpose: OtpPurpose;
+    codeHash: string;
+    expiresAt: Date;
+    isUsed: boolean;
+    requestUserId?: string;
+    /**
+     * The ID of the primary Auth record that triggered this verification.
+     * This is used to mark the specific Auth method as verified upon success.
+     */
+    requestAuthId?: string;
+}

package/dist/auth/entities/otp-token.entity.js

@@ -0,0 +1,61 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OtpToken = exports.OtpPurpose = void 0;
+const typeorm_1 = require("typeorm");
+const base_entity_1 = require("./base.entity");
+var OtpPurpose;
+(function (OtpPurpose) {
+    OtpPurpose["VERIFY_EMAIL"] = "VERIFY_EMAIL";
+    OtpPurpose["VERIFY_PHONE"] = "VERIFY_PHONE";
+    OtpPurpose["PASSWORD_RESET"] = "PASSWORD_RESET";
+    OtpPurpose["LOGIN_2FA"] = "LOGIN_2FA";
+    OtpPurpose["MAGIC_LINK"] = "MAGIC_LINK";
+    OtpPurpose["SECURE_ACCOUNT"] = "SECURE_ACCOUNT";
+})(OtpPurpose || (exports.OtpPurpose = OtpPurpose = {}));
+let OtpToken = class OtpToken extends base_entity_1.BaseEntity {
+};
+exports.OtpToken = OtpToken;
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], OtpToken.prototype, "identifier", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'enum', enum: OtpPurpose }),
+    __metadata("design:type", String)
+], OtpToken.prototype, "purpose", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], OtpToken.prototype, "codeHash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'timestamp' }),
+    __metadata("design:type", Date)
+], OtpToken.prototype, "expiresAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ default: false }),
+    __metadata("design:type", Boolean)
+], OtpToken.prototype, "isUsed", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OtpToken.prototype, "requestUserId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    __metadata("design:type", String)
+], OtpToken.prototype, "requestAuthId", void 0);
+exports.OtpToken = OtpToken = __decorate([
+    (0, typeorm_1.Entity)('otp_tokens')
+    // Index makes lookup fast: "Find latest unused OTP for john@gmail.com"
+    ,
+    (0, typeorm_1.Index)(['identifier', 'purpose', 'isUsed'])
+], OtpToken);
+//# sourceMappingURL=otp-token.entity.js.map

package/dist/auth/entities/otp-token.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp-token.entity.js","sourceRoot":"","sources":["../../../src/auth/entities/otp-token.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAAgD;AAChD,+CAA2C;AAE3C,IAAY,UAOX;AAPD,WAAY,UAAU;IACpB,2CAA6B,CAAA;IAC7B,2CAA6B,CAAA;IAC7B,+CAAiC,CAAA;IACjC,qCAAuB,CAAA;IACvB,uCAAyB,CAAA;IACzB,+CAAiC,CAAA;AACnC,CAAC,EAPW,UAAU,0BAAV,UAAU,QAOrB;AAKM,IAAM,QAAQ,GAAd,MAAM,QAAS,SAAQ,wBAAU;CAgCvC,CAAA;AAhCY,4BAAQ;AAInB;IADC,IAAA,gBAAM,GAAE;;4CACU;AAInB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;;yCACvB;AAKpB;IADC,IAAA,gBAAM,GAAE;;0CACQ;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;8BACnB,IAAI;2CAAC;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;;wCACX;AAKhB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACJ;AAOvB;IADC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACJ;mBA/BZ,QAAQ;IAHpB,IAAA,gBAAM,EAAC,YAAY,CAAC;IACrB,uEAAuE;;IACtE,IAAA,eAAK,EAAC,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;GAC9B,QAAQ,CAgCpB"}

package/dist/auth/entities/session.entity.d.ts

@@ -0,0 +1,19 @@
+export declare class Session {
+    id: string;
+    uid: string;
+    refreshTokenHash: string;
+    userAgent: string;
+    deviceFingerprint: string;
+    ipAddress: string;
+    expiresAt: Date;
+    createdAt: Date;
+    toMap(): {
+        id: string;
+        uid: string;
+        userAgent: string;
+        deviceFingerprint: string;
+        ipAddress: string;
+        expiresAt: Date;
+        createdAt: Date;
+    };
+}