@warlock.js/auth 4.0.157 → 4.0.161

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (83) hide show
  1. package/package.json +5 -5
  2. package/esm/commands/auth-cleanup-command.d.ts +0 -10
  3. package/esm/commands/auth-cleanup-command.d.ts.map +0 -1
  4. package/esm/commands/auth-cleanup-command.js +0 -29
  5. package/esm/commands/auth-cleanup-command.js.map +0 -1
  6. package/esm/commands/jwt-secret-generator-command.d.ts +0 -2
  7. package/esm/commands/jwt-secret-generator-command.d.ts.map +0 -1
  8. package/esm/commands/jwt-secret-generator-command.js +0 -7
  9. package/esm/commands/jwt-secret-generator-command.js.map +0 -1
  10. package/esm/contracts/auth-contract.d.ts +0 -23
  11. package/esm/contracts/auth-contract.d.ts.map +0 -1
  12. package/esm/contracts/index.d.ts +0 -3
  13. package/esm/contracts/index.d.ts.map +0 -1
  14. package/esm/contracts/types.d.ts +0 -168
  15. package/esm/contracts/types.d.ts.map +0 -1
  16. package/esm/contracts/types.js +0 -20
  17. package/esm/contracts/types.js.map +0 -1
  18. package/esm/index.d.ts +0 -8
  19. package/esm/index.d.ts.map +0 -1
  20. package/esm/index.js +0 -1
  21. package/esm/index.js.map +0 -1
  22. package/esm/middleware/auth.middleware.d.ts +0 -2
  23. package/esm/middleware/auth.middleware.d.ts.map +0 -1
  24. package/esm/middleware/auth.middleware.js +0 -72
  25. package/esm/middleware/auth.middleware.js.map +0 -1
  26. package/esm/middleware/index.d.ts +0 -2
  27. package/esm/middleware/index.d.ts.map +0 -1
  28. package/esm/models/access-token/access-token.model.d.ts +0 -9
  29. package/esm/models/access-token/access-token.model.d.ts.map +0 -1
  30. package/esm/models/access-token/access-token.model.js +0 -14
  31. package/esm/models/access-token/access-token.model.js.map +0 -1
  32. package/esm/models/access-token/index.d.ts +0 -2
  33. package/esm/models/access-token/index.d.ts.map +0 -1
  34. package/esm/models/access-token/migration.d.ts +0 -2
  35. package/esm/models/access-token/migration.d.ts.map +0 -1
  36. package/esm/models/access-token/migration.js +0 -22
  37. package/esm/models/access-token/migration.js.map +0 -1
  38. package/esm/models/auth.model.d.ts +0 -58
  39. package/esm/models/auth.model.d.ts.map +0 -1
  40. package/esm/models/auth.model.js +0 -68
  41. package/esm/models/auth.model.js.map +0 -1
  42. package/esm/models/index.d.ts +0 -5
  43. package/esm/models/index.d.ts.map +0 -1
  44. package/esm/models/index.js +0 -1
  45. package/esm/models/index.js.map +0 -1
  46. package/esm/models/refresh-token/index.d.ts +0 -2
  47. package/esm/models/refresh-token/index.d.ts.map +0 -1
  48. package/esm/models/refresh-token/migration.d.ts +0 -2
  49. package/esm/models/refresh-token/migration.d.ts.map +0 -1
  50. package/esm/models/refresh-token/migration.js +0 -23
  51. package/esm/models/refresh-token/migration.js.map +0 -1
  52. package/esm/models/refresh-token/refresh-token.model.d.ts +0 -32
  53. package/esm/models/refresh-token/refresh-token.model.d.ts.map +0 -1
  54. package/esm/models/refresh-token/refresh-token.model.js +0 -53
  55. package/esm/models/refresh-token/refresh-token.model.js.map +0 -1
  56. package/esm/services/auth-events.d.ts +0 -85
  57. package/esm/services/auth-events.d.ts.map +0 -1
  58. package/esm/services/auth-events.js +0 -65
  59. package/esm/services/auth-events.js.map +0 -1
  60. package/esm/services/auth.service.d.ts +0 -92
  61. package/esm/services/auth.service.d.ts.map +0 -1
  62. package/esm/services/auth.service.js +0 -322
  63. package/esm/services/auth.service.js.map +0 -1
  64. package/esm/services/generate-jwt-secret.d.ts +0 -2
  65. package/esm/services/generate-jwt-secret.d.ts.map +0 -1
  66. package/esm/services/generate-jwt-secret.js +0 -47
  67. package/esm/services/generate-jwt-secret.js.map +0 -1
  68. package/esm/services/index.d.ts +0 -5
  69. package/esm/services/index.d.ts.map +0 -1
  70. package/esm/services/jwt.d.ts +0 -23
  71. package/esm/services/jwt.d.ts.map +0 -1
  72. package/esm/services/jwt.js +0 -40
  73. package/esm/services/jwt.js.map +0 -1
  74. package/esm/utils/auth-error-codes.d.ts +0 -18
  75. package/esm/utils/auth-error-codes.d.ts.map +0 -1
  76. package/esm/utils/auth-error-codes.js +0 -18
  77. package/esm/utils/auth-error-codes.js.map +0 -1
  78. package/esm/utils/duration.d.ts +0 -45
  79. package/esm/utils/duration.d.ts.map +0 -1
  80. package/esm/utils/duration.js +0 -93
  81. package/esm/utils/duration.js.map +0 -1
  82. package/esm/utils/index.d.ts +0 -3
  83. package/esm/utils/index.d.ts.map +0 -1
@@ -1,68 +0,0 @@
1
- import {Model}from'@warlock.js/cascade';import'@mongez/events';import {authService}from'../services/auth.service.js';import'@mongez/fs';import'@mongez/reinforcements';import'@warlock.js/core';import'@warlock.js/logger';import'fast-jwt';class Auth extends Model {
2
- /**
3
- * Get access token payload
4
- */
5
- accessTokenPayload() {
6
- return authService.buildAccessTokenPayload(this);
7
- }
8
- /**
9
- * Create both access and refresh tokens
10
- */
11
- async createTokenPair(deviceInfo) {
12
- return authService.createTokenPair(this, deviceInfo);
13
- }
14
- /**
15
- * Generate access token
16
- */
17
- async generateAccessToken(data) {
18
- return authService.generateAccessToken(this, data);
19
- }
20
- /**
21
- * Generate refresh token
22
- */
23
- async generateRefreshToken(deviceInfo) {
24
- return authService.createRefreshToken(this, deviceInfo);
25
- }
26
- /**
27
- * Remove current access token
28
- */
29
- async removeAccessToken(token) {
30
- return authService.removeAccessToken(this, token);
31
- }
32
- /**
33
- * Remove refresh token
34
- */
35
- async removeRefreshToken(token) {
36
- return authService.removeRefreshToken(this, token);
37
- }
38
- /**
39
- * Remove all access tokens
40
- */
41
- async removeAllAccessTokens() {
42
- return authService.removeAllAccessTokens(this);
43
- }
44
- /**
45
- * Revoke all tokens (logout from all devices)
46
- */
47
- async revokeAllTokens() {
48
- return authService.revokeAllTokens(this);
49
- }
50
- /**
51
- * Get active sessions
52
- */
53
- async activeSessions() {
54
- return authService.getActiveSessions(this);
55
- }
56
- /**
57
- * Attempt to login the user
58
- */
59
- static async attempt(data) {
60
- return authService.attemptLogin(this, data);
61
- }
62
- /**
63
- * Confirm password
64
- */
65
- async confirmPassword(password) {
66
- return authService.verifyPassword(this.string("password"), password);
67
- }
68
- }export{Auth};//# sourceMappingURL=auth.model.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"auth.model.js","sources":["../../src/models/auth.model.ts"],"sourcesContent":[null],"names":[],"mappings":"4OAKM,MAAgB,IAA+C,SAAQ,KAAa,CAAA;AAMxF;;AAEG;IACI,kBAAkB,GAAA;AACvB,QAAA,OAAO,WAAW,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;KAClD;AAED;;AAEG;IACI,MAAM,eAAe,CAAC,UAAuB,EAAA;QAClD,OAAO,WAAW,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;KACtD;AAED;;AAEG;IACI,MAAM,mBAAmB,CAAC,IAAU,EAAA;QACzC,OAAO,WAAW,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KACpD;AAED;;AAEG;IACI,MAAM,oBAAoB,CAAC,UAAuB,EAAA;QACvD,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;KACzD;AAED;;AAEG;IACI,MAAM,iBAAiB,CAAC,KAAa,EAAA;QAC1C,OAAO,WAAW,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KACnD;AAED;;AAEG;IACI,MAAM,kBAAkB,CAAC,KAAa,EAAA;QAC3C,OAAO,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KACpD;AAED;;AAEG;AACI,IAAA,MAAM,qBAAqB,GAAA;AAChC,QAAA,OAAO,WAAW,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;KAChD;AAED;;AAEG;AACI,IAAA,MAAM,eAAe,GAAA;AAC1B,QAAA,OAAO,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;KAC1C;AAED;;AAEG;AACI,IAAA,MAAM,cAAc,GAAA;AACzB,QAAA,OAAO,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;KAC5C;AAED;;AAEG;AACI,IAAA,aAAa,OAAO,CAAyB,IAAS,EAAA;QAC3D,OAAO,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;KAC7C;AAED;;AAEG;IACI,MAAM,eAAe,CAAC,QAAgB,EAAA;AAC3C,QAAA,OAAO,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAE,EAAE,QAAQ,CAAC,CAAC;KACvE;AACF"}
@@ -1,5 +0,0 @@
1
- export * from "./access-token";
2
- export * from "./auth.model";
3
- export * from "./refresh-token";
4
- export declare const authMigrations: any[];
5
- //# sourceMappingURL=index.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":"AAGA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAEhC,eAAO,MAAM,cAAc,OAAgD,CAAC"}
@@ -1 +0,0 @@
1
- import {AccessTokenMigration}from'./access-token/migration.js';import {RefreshTokenMigration}from'./refresh-token/migration.js';export{AccessToken}from'./access-token/access-token.model.js';import'@warlock.js/cascade';import'@mongez/events';import'@mongez/reinforcements';import'@warlock.js/core';export{RefreshToken}from'./refresh-token/refresh-token.model.js';import'fast-jwt';import'@mongez/fs';import'@warlock.js/logger';const authMigrations = [AccessTokenMigration, RefreshTokenMigration];export{authMigrations};//# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sources":["../../src/models/index.ts"],"sourcesContent":[null],"names":[],"mappings":"+aAOa,cAAc,GAAG,CAAC,oBAAoB,EAAE,qBAAqB"}
@@ -1,2 +0,0 @@
1
- export * from "./refresh-token.model";
2
- //# sourceMappingURL=index.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/models/refresh-token/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC"}
@@ -1,2 +0,0 @@
1
- export declare const RefreshTokenMigration: any;
2
- //# sourceMappingURL=migration.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"migration.d.ts","sourceRoot":"","sources":["../../../src/models/refresh-token/migration.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,qBAAqB,KAyBhC,CAAC"}
@@ -1,23 +0,0 @@
1
- import {migrate}from'@warlock.js/cascade';import {RefreshToken}from'./refresh-token.model.js';const RefreshTokenMigration = migrate(RefreshToken, {
2
- name: "refreshToken",
3
- up() {
4
- // Create table
5
- this.createTableIfNotExists();
6
- // Primary key
7
- this.primaryUuid();
8
- // Token fields
9
- this.text("token").unique();
10
- this.uuid("user_id").index();
11
- this.string("user_type", 50).nullable();
12
- this.text("family_id").index().nullable();
13
- this.timestamp("expires_at").index().nullable();
14
- this.timestamp("last_used_at").nullable();
15
- this.timestamp("revoked_at").nullable();
16
- this.json("device_info").nullable();
17
- // Timestamps
18
- this.timestamps();
19
- },
20
- down() {
21
- this.dropTableIfExists();
22
- },
23
- });export{RefreshTokenMigration};//# sourceMappingURL=migration.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"migration.js","sources":["../../../src/models/refresh-token/migration.ts"],"sourcesContent":[null],"names":[],"mappings":"8FAGa,MAAA,qBAAqB,GAAG,OAAO,CAAC,YAAY,EAAE;AACzD,IAAA,IAAI,EAAE,cAAc;IACpB,EAAE,GAAA;;QAEA,IAAI,CAAC,sBAAsB,EAAE,CAAC;;QAG9B,IAAI,CAAC,WAAW,EAAE,CAAC;;QAGnB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC;;QAGpC,IAAI,CAAC,UAAU,EAAE,CAAC;KACnB;IACD,IAAI,GAAA;QACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;KAC1B;AACF,CAAA"}
@@ -1,32 +0,0 @@
1
- import { Model } from "@warlock.js/cascade";
2
- export declare class RefreshToken extends Model {
3
- /**
4
- * {@inheritDoc}
5
- */
6
- static table: string;
7
- /**
8
- * {@inheritDoc}
9
- */
10
- static schema: any;
11
- /**
12
- * Check if token is expired
13
- */
14
- get isExpired(): boolean;
15
- /**
16
- * Check if token is revoked
17
- */
18
- get isRevoked(): boolean;
19
- /**
20
- * Check if token is valid (not expired and not revoked)
21
- */
22
- get isValid(): boolean;
23
- /**
24
- * Revoke this token
25
- */
26
- revoke(): Promise<this>;
27
- /**
28
- * Mark token as used (update last_used_at)
29
- */
30
- markAsUsed(): Promise<void>;
31
- }
32
- //# sourceMappingURL=refresh-token.model.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"refresh-token.model.d.ts","sourceRoot":"","sources":["../../../src/models/refresh-token/refresh-token.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAc5C,qBAAa,YAAa,SAAQ,KAAK;IACrC;;OAEG;IACH,OAAc,KAAK,SAAoB;IAEvC;;OAEG;IACH,OAAc,MAAM,MAAsB;IAE1C;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAI9B;IAED;;OAEG;IACH,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED;;OAEG;IACH,IAAW,OAAO,IAAI,OAAO,CAE5B;IAED;;OAEG;IACU,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpC;;OAEG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAGzC"}
@@ -1,53 +0,0 @@
1
- import {Model}from'@warlock.js/cascade';import {v}from'@warlock.js/seal';const refreshTokenSchema = v.object({
2
- token: v.string().required(),
3
- user_id: v.scalar().required(),
4
- user_type: v.string().required(),
5
- family_id: v.string().required(),
6
- expires_at: v.date().required(),
7
- last_used_at: v.date().default(() => new Date()),
8
- revoked_at: v.date().optional(),
9
- device_info: v.record(v.any()).optional(),
10
- });
11
- class RefreshToken extends Model {
12
- /**
13
- * {@inheritDoc}
14
- */
15
- static table = "refresh_tokens";
16
- /**
17
- * {@inheritDoc}
18
- */
19
- static schema = refreshTokenSchema;
20
- /**
21
- * Check if token is expired
22
- */
23
- get isExpired() {
24
- const expiresAt = this.get("expires_at");
25
- if (!expiresAt)
26
- return false;
27
- return new Date() > new Date(expiresAt);
28
- }
29
- /**
30
- * Check if token is revoked
31
- */
32
- get isRevoked() {
33
- return !!this.get("revoked_at");
34
- }
35
- /**
36
- * Check if token is valid (not expired and not revoked)
37
- */
38
- get isValid() {
39
- return !this.isExpired && !this.isRevoked;
40
- }
41
- /**
42
- * Revoke this token
43
- */
44
- async revoke() {
45
- return this.merge({ revoked_at: new Date() }).save();
46
- }
47
- /**
48
- * Mark token as used (update last_used_at)
49
- */
50
- async markAsUsed() {
51
- await this.merge({ last_used_at: new Date() }).save();
52
- }
53
- }export{RefreshToken};//# sourceMappingURL=refresh-token.model.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"refresh-token.model.js","sources":["../../../src/models/refresh-token/refresh-token.model.ts"],"sourcesContent":[null],"names":[],"mappings":"yEAGA,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;AAClC,IAAA,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;AAC5B,IAAA,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;AAC9B,IAAA,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;AAChC,IAAA,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;AAChC,IAAA,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;AAC/B,IAAA,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;AAChD,IAAA,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;AAC/B,IAAA,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;AAC1C,CAAA,CAAC,CAAC;AAEG,MAAO,YAAa,SAAQ,KAAK,CAAA;AACrC;;AAEG;AACI,IAAA,OAAO,KAAK,GAAG,gBAAgB,CAAC;AAEvC;;AAEG;AACI,IAAA,OAAO,MAAM,GAAG,kBAAkB,CAAC;AAE1C;;AAEG;AACH,IAAA,IAAW,SAAS,GAAA;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACzC,QAAA,IAAI,CAAC,SAAS;AAAE,YAAA,OAAO,KAAK,CAAC;QAC7B,OAAO,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;KACzC;AAED;;AAEG;AACH,IAAA,IAAW,SAAS,GAAA;QAClB,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;KACjC;AAED;;AAEG;AACH,IAAA,IAAW,OAAO,GAAA;QAChB,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;KAC3C;AAED;;AAEG;AACI,IAAA,MAAM,MAAM,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;KACtD;AAED;;AAEG;AACI,IAAA,MAAM,UAAU,GAAA;AACrB,QAAA,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;KACvD;"}
@@ -1,85 +0,0 @@
1
- import { type EventSubscription } from "@mongez/events";
2
- import type { DeviceInfo, TokenPair } from "../contracts/types";
3
- import type { Auth } from "../models/auth.model";
4
- import type { RefreshToken } from "../models/refresh-token";
5
- /**
6
- * Auth event payload types
7
- */
8
- export type AuthEventPayloads = {
9
- "login.success": [user: Auth, tokenPair: TokenPair, deviceInfo?: DeviceInfo];
10
- "login.failed": [credentials: {
11
- email?: string;
12
- username?: string;
13
- }, reason: string];
14
- "login.attempt": [credentials: {
15
- email?: string;
16
- username?: string;
17
- }];
18
- logout: [user: Auth];
19
- "logout.all": [user: Auth];
20
- "logout.failsafe": [user: Auth];
21
- "token.created": [user: Auth, tokenPair: TokenPair];
22
- "token.refreshed": [user: Auth, newTokenPair: TokenPair, oldRefreshToken: RefreshToken];
23
- "token.revoked": [user: Auth, token: RefreshToken];
24
- "token.expired": [token: RefreshToken];
25
- "token.familyRevoked": [familyId: string, tokens: RefreshToken[]];
26
- "password.changed": [user: Auth];
27
- "password.resetRequested": [user: Auth, resetToken: string];
28
- "password.reset": [user: Auth];
29
- "session.created": [user: Auth, refreshToken: RefreshToken, deviceInfo?: DeviceInfo];
30
- "session.destroyed": [user: Auth, refreshToken: RefreshToken];
31
- "cleanup.completed": [expiredCount: number];
32
- };
33
- /**
34
- * Auth event names
35
- */
36
- export type AuthEventName = keyof AuthEventPayloads;
37
- /**
38
- * Callback type for a specific event
39
- */
40
- export type AuthEventCallback<T extends AuthEventName> = (...args: AuthEventPayloads[T]) => void | Promise<void>;
41
- /**
42
- * Type-safe auth events manager
43
- *
44
- * @example
45
- * ```typescript
46
- * // Subscribe to events with full autocomplete
47
- * authEvents.on("login.success", (user, tokenPair, deviceInfo) => {
48
- * console.log(`User ${user.id} logged in`);
49
- * });
50
- *
51
- * authEvents.on("token.refreshed", (user, newPair, oldToken) => {
52
- * console.log(`Token refreshed for user ${user.id}`);
53
- * });
54
- *
55
- * // Trigger events
56
- * authEvents.emit("login.success", user, tokenPair, deviceInfo);
57
- * ```
58
- */
59
- export declare const authEvents: {
60
- /**
61
- * Subscribe to an auth event
62
- */
63
- on<T extends keyof AuthEventPayloads>(event: T, callback: AuthEventCallback<T>): EventSubscription;
64
- /**
65
- * Subscribe to an auth event (alias for `on`)
66
- */
67
- subscribe<T_1 extends keyof AuthEventPayloads>(event: T_1, callback: AuthEventCallback<T_1>): EventSubscription;
68
- /**
69
- * Emit an auth event
70
- */
71
- emit<T_2 extends keyof AuthEventPayloads>(event: T_2, ...args: AuthEventPayloads[T_2]): void;
72
- /**
73
- * Emit an auth event (alias for `emit`)
74
- */
75
- trigger<T_3 extends keyof AuthEventPayloads>(event: T_3, ...args: AuthEventPayloads[T_3]): void;
76
- /**
77
- * Unsubscribe from all auth events
78
- */
79
- unsubscribeAll(): void;
80
- /**
81
- * Unsubscribe from a specific auth event
82
- */
83
- off(event?: AuthEventName): void;
84
- };
85
- //# sourceMappingURL=auth-events.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"auth-events.d.ts","sourceRoot":"","sources":["../../src/services/auth-events.ts"],"names":[],"mappings":"AAAA,OAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAE9B,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7E,cAAc,EAAE,CAAC,WAAW,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACrF,eAAe,EAAE,CAAC,WAAW,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAGtE,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrB,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3B,iBAAiB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAGhC,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACpD,iBAAiB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IACxF,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IACnD,eAAe,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACvC,qBAAqB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAGlE,kBAAkB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,yBAAyB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5D,gBAAgB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAG/B,iBAAiB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IACrF,mBAAmB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAG9D,mBAAmB,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;CAC7C,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;AAEpD;;GAEG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,aAAa,IAAI,CACvD,GAAG,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAC1B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAO1B;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,UAAU;IACrB;;OAEG;qFACoE,iBAAiB;IAIxF;;OAEG;kGAC2E,iBAAiB;IAI/F;;OAEG;4FACqE,IAAI;IAI5E;;OAEG;+FACwE,IAAI;IAI/E;;OAEG;sBACe,IAAI;IAItB;;OAEG;gBACS,aAAa,GAAG,IAAI;CAOjC,CAAC"}
@@ -1,65 +0,0 @@
1
- import events from'@mongez/events';/**
2
- * Event namespace prefix for auth events
3
- */
4
- const AUTH_EVENT_PREFIX = "auth.";
5
- /**
6
- * Type-safe auth events manager
7
- *
8
- * @example
9
- * ```typescript
10
- * // Subscribe to events with full autocomplete
11
- * authEvents.on("login.success", (user, tokenPair, deviceInfo) => {
12
- * console.log(`User ${user.id} logged in`);
13
- * });
14
- *
15
- * authEvents.on("token.refreshed", (user, newPair, oldToken) => {
16
- * console.log(`Token refreshed for user ${user.id}`);
17
- * });
18
- *
19
- * // Trigger events
20
- * authEvents.emit("login.success", user, tokenPair, deviceInfo);
21
- * ```
22
- */
23
- const authEvents = {
24
- /**
25
- * Subscribe to an auth event
26
- */
27
- on(event, callback) {
28
- return events.subscribe(AUTH_EVENT_PREFIX + event, callback);
29
- },
30
- /**
31
- * Subscribe to an auth event (alias for `on`)
32
- */
33
- subscribe(event, callback) {
34
- return this.on(event, callback);
35
- },
36
- /**
37
- * Emit an auth event
38
- */
39
- emit(event, ...args) {
40
- events.trigger(AUTH_EVENT_PREFIX + event, ...args);
41
- },
42
- /**
43
- * Emit an auth event (alias for `emit`)
44
- */
45
- trigger(event, ...args) {
46
- this.emit(event, ...args);
47
- },
48
- /**
49
- * Unsubscribe from all auth events
50
- */
51
- unsubscribeAll() {
52
- events.unsubscribeNamespace(AUTH_EVENT_PREFIX.slice(0, -1));
53
- },
54
- /**
55
- * Unsubscribe from a specific auth event
56
- */
57
- off(event) {
58
- if (event) {
59
- events.unsubscribe(AUTH_EVENT_PREFIX + event);
60
- }
61
- else {
62
- this.unsubscribeAll();
63
- }
64
- },
65
- };export{authEvents};//# sourceMappingURL=auth-events.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"auth-events.js","sources":["../../src/services/auth-events.ts"],"sourcesContent":[null],"names":[],"mappings":"mCAmDA;;AAEG;AACH,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC;;;;;;;;;;;;;;;;;AAiBG;AACU,MAAA,UAAU,GAAG;AACxB;;AAEG;IACH,EAAE,CAA0B,KAAQ,EAAE,QAA8B,EAAA;QAClE,OAAO,MAAM,CAAC,SAAS,CAAC,iBAAiB,GAAG,KAAK,EAAE,QAAoB,CAAC,CAAC;KAC1E;AAED;;AAEG;IACH,SAAS,CAA0B,KAAQ,EAAE,QAA8B,EAAA;QACzE,OAAO,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;KACjC;AAED;;AAEG;AACH,IAAA,IAAI,CAA0B,KAAQ,EAAE,GAAG,IAA0B,EAAA;QACnE,MAAM,CAAC,OAAO,CAAC,iBAAiB,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;KACpD;AAED;;AAEG;AACH,IAAA,OAAO,CAA0B,KAAQ,EAAE,GAAG,IAA0B,EAAA;QACtE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;KAC3B;AAED;;AAEG;IACH,cAAc,GAAA;AACZ,QAAA,MAAM,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KAC7D;AAED;;AAEG;AACH,IAAA,GAAG,CAAC,KAAqB,EAAA;AACvB,QAAA,IAAI,KAAK,EAAE;AACT,YAAA,MAAM,CAAC,WAAW,CAAC,iBAAiB,GAAG,KAAK,CAAC,CAAC;AAC/C,SAAA;AAAM,aAAA;YACL,IAAI,CAAC,cAAc,EAAE,CAAC;AACvB,SAAA;KACF;"}
@@ -1,92 +0,0 @@
1
- import type { ChildModel } from "@warlock.js/cascade";
2
- import type { AccessTokenOutput, DeviceInfo, LoginResult, TokenPair } from "../contracts/types";
3
- import type { Auth } from "../models/auth.model";
4
- import { RefreshToken } from "../models/refresh-token";
5
- declare class AuthService {
6
- /**
7
- * Build access token payload from user
8
- */
9
- buildAccessTokenPayload(user: Auth): {
10
- id: any;
11
- userType: string;
12
- created_at: number;
13
- };
14
- /**
15
- * Generate access token for user
16
- */
17
- generateAccessToken(user: Auth, payload?: any): Promise<AccessTokenOutput>;
18
- /**
19
- * Create refresh token for user
20
- */
21
- createRefreshToken(user: Auth, deviceInfo?: DeviceInfo): Promise<RefreshToken>;
22
- /**
23
- * Create both access and refresh tokens
24
- */
25
- createTokenPair(user: Auth, deviceInfo?: DeviceInfo): Promise<TokenPair>;
26
- /**
27
- * Refresh tokens using a refresh token
28
- */
29
- refreshTokens(refreshTokenString: string, deviceInfo?: DeviceInfo): Promise<TokenPair | null>;
30
- /**
31
- * Verify password
32
- */
33
- verifyPassword(plainPassword: string, hashedPassword: string): Promise<boolean>;
34
- /**
35
- * Hash password
36
- */
37
- hashPassword(password: string): Promise<string>;
38
- /**
39
- * Attempt to login user with given credentials
40
- */
41
- attemptLogin<T extends Auth>(Model: ChildModel<T>, data: any): Promise<T | null>;
42
- /**
43
- * Full login flow: validate credentials, create tokens, emit events
44
- * Returns token pair on success, null on failure
45
- */
46
- login<T extends Auth>(Model: ChildModel<T>, credentials: any, deviceInfo?: DeviceInfo): Promise<LoginResult<T> | null>;
47
- /**
48
- * Logout user
49
- * @param user - The authenticated user
50
- * @param accessToken - Optional access token string to revoke
51
- * @param refreshToken - Optional refresh token string to revoke
52
- * If refresh token is not provided, behavior is determined by config:
53
- * - "revoke-all" (default): Revoke ALL refresh tokens for security
54
- * - "error": Throw error requiring refresh token
55
- */
56
- logout(user: Auth, accessToken?: string, refreshToken?: string): Promise<void>;
57
- /**
58
- * Remove specific access token
59
- */
60
- removeAccessToken(user: Auth, token: string): Promise<void>;
61
- /**
62
- * Remove all access tokens for a user
63
- */
64
- removeAllAccessTokens(user: Auth): Promise<void>;
65
- /**
66
- * Remove specific refresh token
67
- */
68
- removeRefreshToken(user: Auth, token: string): Promise<void>;
69
- /**
70
- * Revoke all tokens for a user
71
- */
72
- revokeAllTokens(user: Auth): Promise<void>;
73
- /**
74
- * Revoke entire token family (for rotation breach detection)
75
- */
76
- revokeTokenFamily(familyId: string): Promise<void>;
77
- /**
78
- * Cleanup expired tokens
79
- */
80
- cleanupExpiredTokens(): Promise<number>;
81
- /**
82
- * Enforce max refresh tokens per user
83
- */
84
- private enforceMaxRefreshTokens;
85
- /**
86
- * Get active sessions for user
87
- */
88
- getActiveSessions(user: Auth): Promise<RefreshToken[]>;
89
- }
90
- export declare const authService: AuthService;
91
- export {};
92
- //# sourceMappingURL=auth.service.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../src/services/auth.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEhG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAKvD,cAAM,WAAW;IACf;;OAEG;IACI,uBAAuB,CAAC,IAAI,EAAE,IAAI;;;;;IAQzC;;OAEG;IACU,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAoBvF;;OAEG;IACU,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC;IAoC3F;;OAEG;IACU,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAmBrF;;OAEG;IACU,aAAa,CACxB,kBAAkB,EAAE,MAAM,EAC1B,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAoD5B;;OAEG;IACU,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5F;;OAEG;IACU,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI5D;;OAEG;IACU,YAAY,CAAC,CAAC,SAAS,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAqB7F;;;OAGG;IACU,KAAK,CAAC,CAAC,SAAS,IAAI,EAC/B,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EACpB,WAAW,EAAE,GAAG,EAChB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAqBjC;;;;;;;;OAQG;IACU,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoC3F;;OAEG;IACU,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxE;;OAEG;IACU,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7D;;OAEG;IACU,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzE;;OAEG;IACU,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBvD;;OAEG;IACU,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAc/D;;OAEG;IACU,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC;IAcpD;;OAEG;YACW,uBAAuB;IAqBrC;;OAEG;IACU,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;CAWpE;AAED,eAAO,MAAM,WAAW,aAAoB,CAAC"}