@warlock.js/auth 4.0.174 → 4.1.2

package/esm/models/access-token/access-token.model.d.mts

@@ -0,0 +1,13 @@
+import { Model } from "@warlock.js/cascade";
+
+//#region ../../@warlock.js/auth/src/models/access-token/access-token.model.d.ts
+declare class AccessToken extends Model {
+  /**
+   * {@inheritDoc}
+   */
+  static table: string;
+  static schema: any;
+}
+//#endregion
+export { AccessToken };
+//# sourceMappingURL=access-token.model.d.mts.map

package/esm/models/access-token/access-token.model.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-token.model.d.mts","names":[],"sources":["../../../../../../../@warlock.js/auth/src/models/access-token/access-token.model.ts"],"mappings":";;;cAWa,WAAA,SAAoB,KAAK;;AAAtC;;SAIgB,KAAA;EAAA,OAEA,MAAA;AAAA"}

package/esm/models/access-token/access-token.model.mjs

@@ -0,0 +1,23 @@
+import { Model } from "@warlock.js/cascade";
+import { v } from "@warlock.js/seal";
+
+//#region ../../@warlock.js/auth/src/models/access-token/access-token.model.ts
+const accessTokenSchema = v.object({
+	token: v.string().required(),
+	last_access: v.date().defaultNow().optional(),
+	user_id: v.scalar().required(),
+	user_type: v.string().required(),
+	is_active: v.boolean().default(true)
+});
+var AccessToken = class extends Model {
+	static {
+		this.table = "access_tokens";
+	}
+	static {
+		this.schema = accessTokenSchema;
+	}
+};
+
+//#endregion
+export { AccessToken };
+//# sourceMappingURL=access-token.model.mjs.map

package/esm/models/access-token/access-token.model.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-token.model.mjs","names":[],"sources":["../../../../../../../@warlock.js/auth/src/models/access-token/access-token.model.ts"],"sourcesContent":["import { Model } from \"@warlock.js/cascade\";\r\nimport { v } from \"@warlock.js/seal\";\r\n\r\nconst accessTokenSchema = v.object({\r\n  token: v.string().required(),\r\n  last_access: v.date().defaultNow().optional(),\r\n  user_id: v.scalar().required(),\r\n  user_type: v.string().required(),\r\n  is_active: v.boolean().default(true),\r\n});\r\n\r\nexport class AccessToken extends Model {\r\n  /**\r\n   * {@inheritDoc}\r\n   */\r\n  public static table = \"access_tokens\";\r\n\r\n  public static schema = accessTokenSchema;\r\n}\r\n"],"mappings":";;;;AAGA,MAAM,oBAAoB,EAAE,OAAO;CACjC,OAAO,EAAE,OAAO,EAAE,SAAS;CAC3B,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS;CAC5C,SAAS,EAAE,OAAO,EAAE,SAAS;CAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;CAC/B,WAAW,EAAE,QAAQ,EAAE,QAAQ,IAAI;AACrC,CAAC;AAED,IAAa,cAAb,cAAiC,MAAM;;eAIf;;;gBAEC;;AACzB"}

package/esm/models/access-token/index.d.mts

@@ -0,0 +1 @@
+import { AccessToken } from "./access-token.model.mjs";

package/esm/models/access-token/index.mjs

@@ -0,0 +1,3 @@
+import { AccessToken } from "./access-token.model.mjs";
+
+export {  };

package/esm/models/access-token/migration.mjs

@@ -0,0 +1,24 @@
+import { AccessToken } from "./access-token.model.mjs";
+import { migrate } from "@warlock.js/cascade";
+
+//#region ../../@warlock.js/auth/src/models/access-token/migration.ts
+const AccessTokenMigration = migrate(AccessToken, {
+	name: "accessToken",
+	up() {
+		this.createTableIfNotExists();
+		this.primaryUuid();
+		this.text("token").unique();
+		this.timestamp("last_access").nullable();
+		this.uuid("user_id").index();
+		this.string("user_type", 50).nullable();
+		this.boolean("is_active").nullable();
+		this.timestamps();
+	},
+	down() {
+		this.dropTableIfExists();
+	}
+});
+
+//#endregion
+export { AccessTokenMigration };
+//# sourceMappingURL=migration.mjs.map

package/esm/models/access-token/migration.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration.mjs","names":[],"sources":["../../../../../../../@warlock.js/auth/src/models/access-token/migration.ts"],"sourcesContent":["import { migrate } from \"@warlock.js/cascade\";\r\nimport { AccessToken } from \"./access-token.model\";\r\n\r\nexport const AccessTokenMigration = migrate(AccessToken, {\r\n  name: \"accessToken\",\r\n  up() {\r\n    // Create table\r\n    this.createTableIfNotExists();\r\n\r\n    // Primary key\r\n    this.primaryUuid();\r\n\r\n    // Token field\r\n    this.text(\"token\").unique();\r\n    this.timestamp(\"last_access\").nullable();\r\n\r\n    // User reference (flat columns for cross-driver compatibility)\r\n    this.uuid(\"user_id\").index();\r\n    this.string(\"user_type\", 50).nullable();\r\n\r\n    // Status (for token revocation)\r\n    this.boolean(\"is_active\").nullable();\r\n\r\n    // Timestamps\r\n    this.timestamps();\r\n  },\r\n  down() {\r\n    this.dropTableIfExists();\r\n  },\r\n});\r\n"],"mappings":";;;;AAGA,MAAa,uBAAuB,QAAQ,aAAa;CACvD,MAAM;CACN,KAAK;EAEH,KAAK,uBAAuB;EAG5B,KAAK,YAAY;EAGjB,KAAK,KAAK,OAAO,EAAE,OAAO;EAC1B,KAAK,UAAU,aAAa,EAAE,SAAS;EAGvC,KAAK,KAAK,SAAS,EAAE,MAAM;EAC3B,KAAK,OAAO,aAAa,EAAE,EAAE,SAAS;EAGtC,KAAK,QAAQ,WAAW,EAAE,SAAS;EAGnC,KAAK,WAAW;CAClB;CACA,OAAO;EACL,KAAK,kBAAkB;CACzB;AACF,CAAC"}

package/esm/models/auth.model.d.mts

@@ -0,0 +1,63 @@
+import { RefreshToken } from "./refresh-token/refresh-token.model.mjs";
+import { AccessTokenOutput, DeviceInfo, TokenPair } from "../contracts/types.mjs";
+import { Authenticable } from "../contracts/auth-contract.mjs";
+import { ChildModel, Model, ModelSchema } from "@warlock.js/cascade";
+
+//#region ../../@warlock.js/auth/src/models/auth.model.d.ts
+declare abstract class Auth<Schema extends ModelSchema = ModelSchema> extends Model<Schema> implements Authenticable {
+  /**
+   * Get user type
+   */
+  abstract get userType(): string;
+  /**
+   * Get access token payload
+   */
+  accessTokenPayload(): {
+    id: any;
+    userType: string;
+    created_at: number;
+  };
+  /**
+   * Create both access and refresh tokens
+   */
+  createTokenPair(deviceInfo?: DeviceInfo): Promise<TokenPair>;
+  /**
+   * Generate access token
+   */
+  generateAccessToken(data?: any): Promise<AccessTokenOutput>;
+  /**
+   * Generate refresh token
+   */
+  generateRefreshToken(deviceInfo?: DeviceInfo): Promise<RefreshToken | undefined>;
+  /**
+   * Remove current access token
+   */
+  removeAccessToken(token: string): Promise<void>;
+  /**
+   * Remove refresh token
+   */
+  removeRefreshToken(token: string): Promise<void>;
+  /**
+   * Remove all access tokens
+   */
+  removeAllAccessTokens(): Promise<void>;
+  /**
+   * Revoke all tokens (logout from all devices)
+   */
+  revokeAllTokens(): Promise<void>;
+  /**
+   * Get active sessions
+   */
+  activeSessions(): Promise<RefreshToken[]>;
+  /**
+   * Attempt to login the user
+   */
+  static attempt(this: ChildModel<Auth>, data: any): Promise<Auth | null>;
+  /**
+   * Confirm password
+   */
+  confirmPassword(password: string): Promise<boolean>;
+}
+//#endregion
+export { Auth };
+//# sourceMappingURL=auth.model.d.mts.map

package/esm/models/auth.model.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.model.d.mts","names":[],"sources":["../../../../../../@warlock.js/auth/src/models/auth.model.ts"],"mappings":";;;;;;uBAMsB,IAAA,gBAAoB,WAAA,GAAc,WAAA,UAC9C,KAAA,CAAM,MAAA,aACH,aAAA;;AAFb;;eAOsB,QAAA,CAAA;EAPoB;;;EAYjC,kBAAA,CAAA;;;;;EAqBwC;;;EAdlC,eAAA,CAAgB,UAAA,GAAa,UAAA,GAAa,OAAA,CAAQ,SAAA;EA4Bf;;;EArBnC,mBAAA,CAAoB,IAAA,SAAa,OAAA,CAAQ,iBAAA;EA0CvB;;;EAnClB,oBAAA,CAAqB,UAAA,GAAa,UAAA,GAAa,OAAA,CAAQ,YAAA;EA0CJ;;;EAnCnD,iBAAA,CAAkB,KAAA,WAAgB,OAAA;EAtCvB;;;EA6CX,kBAAA,CAAmB,KAAA,WAAgB,OAAA;EA/CM;;;EAsDzC,qBAAA,CAAA,GAAyB,OAAA;EA/ClB;;;EAsDP,eAAA,CAAA,GAAmB,OAAA;;;;EAOnB,cAAA,CAAA,GAAkB,OAAA,CAAQ,YAAA;EAjDgB;;;EAAA,OAwDnC,OAAA,CAAQ,IAAA,EAAM,UAAA,CAAW,IAAA,GAAO,IAAA,QAAY,OAAA,CAAQ,IAAA;EAjD1B;;;EAwDjC,eAAA,CAAgB,QAAA,WAAmB,OAAA;AAAA"}

package/esm/models/auth.model.mjs

@@ -0,0 +1,77 @@
+import { authService } from "../services/auth.service.mjs";
+import "../services/index.mjs";
+import { Model } from "@warlock.js/cascade";
+
+//#region ../../@warlock.js/auth/src/models/auth.model.ts
+var Auth = class extends Model {
+	/**
+	* Get access token payload
+	*/
+	accessTokenPayload() {
+		return authService.buildAccessTokenPayload(this);
+	}
+	/**
+	* Create both access and refresh tokens
+	*/
+	async createTokenPair(deviceInfo) {
+		return authService.createTokenPair(this, deviceInfo);
+	}
+	/**
+	* Generate access token
+	*/
+	async generateAccessToken(data) {
+		return authService.generateAccessToken(this, data);
+	}
+	/**
+	* Generate refresh token
+	*/
+	async generateRefreshToken(deviceInfo) {
+		return authService.createRefreshToken(this, deviceInfo);
+	}
+	/**
+	* Remove current access token
+	*/
+	async removeAccessToken(token) {
+		return authService.removeAccessToken(this, token);
+	}
+	/**
+	* Remove refresh token
+	*/
+	async removeRefreshToken(token) {
+		return authService.removeRefreshToken(this, token);
+	}
+	/**
+	* Remove all access tokens
+	*/
+	async removeAllAccessTokens() {
+		return authService.removeAllAccessTokens(this);
+	}
+	/**
+	* Revoke all tokens (logout from all devices)
+	*/
+	async revokeAllTokens() {
+		return authService.revokeAllTokens(this);
+	}
+	/**
+	* Get active sessions
+	*/
+	async activeSessions() {
+		return authService.getActiveSessions(this);
+	}
+	/**
+	* Attempt to login the user
+	*/
+	static async attempt(data) {
+		return authService.attemptLogin(this, data);
+	}
+	/**
+	* Confirm password
+	*/
+	async confirmPassword(password) {
+		return authService.verifyPassword(password, this.string("password"));
+	}
+};
+
+//#endregion
+export { Auth };
+//# sourceMappingURL=auth.model.mjs.map

package/esm/models/auth.model.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.model.mjs","names":[],"sources":["../../../../../../@warlock.js/auth/src/models/auth.model.ts"],"sourcesContent":["import { type ChildModel, Model, type ModelSchema } from \"@warlock.js/cascade\";\r\nimport type { Authenticable } from \"../contracts/auth-contract\";\r\nimport type { AccessTokenOutput, DeviceInfo, TokenPair } from \"../contracts/types\";\r\nimport { authService } from \"../services\";\r\nimport type { RefreshToken } from \"./refresh-token/refresh-token.model\";\r\n\r\nexport abstract class Auth<Schema extends ModelSchema = ModelSchema>\r\n  extends Model<Schema>\r\n  implements Authenticable\r\n{\r\n  /**\r\n   * Get user type\r\n   */\r\n  public abstract get userType(): string;\r\n\r\n  /**\r\n   * Get access token payload\r\n   */\r\n  public accessTokenPayload() {\r\n    return authService.buildAccessTokenPayload(this);\r\n  }\r\n\r\n  /**\r\n   * Create both access and refresh tokens\r\n   */\r\n  public async createTokenPair(deviceInfo?: DeviceInfo): Promise<TokenPair> {\r\n    return authService.createTokenPair(this, deviceInfo);\r\n  }\r\n\r\n  /**\r\n   * Generate access token\r\n   */\r\n  public async generateAccessToken(data?: any): Promise<AccessTokenOutput> {\r\n    return authService.generateAccessToken(this, data);\r\n  }\r\n\r\n  /**\r\n   * Generate refresh token\r\n   */\r\n  public async generateRefreshToken(deviceInfo?: DeviceInfo): Promise<RefreshToken | undefined> {\r\n    return authService.createRefreshToken(this, deviceInfo);\r\n  }\r\n\r\n  /**\r\n   * Remove current access token\r\n   */\r\n  public async removeAccessToken(token: string): Promise<void> {\r\n    return authService.removeAccessToken(this, token);\r\n  }\r\n\r\n  /**\r\n   * Remove refresh token\r\n   */\r\n  public async removeRefreshToken(token: string): Promise<void> {\r\n    return authService.removeRefreshToken(this, token);\r\n  }\r\n\r\n  /**\r\n   * Remove all access tokens\r\n   */\r\n  public async removeAllAccessTokens(): Promise<void> {\r\n    return authService.removeAllAccessTokens(this);\r\n  }\r\n\r\n  /**\r\n   * Revoke all tokens (logout from all devices)\r\n   */\r\n  public async revokeAllTokens(): Promise<void> {\r\n    return authService.revokeAllTokens(this);\r\n  }\r\n\r\n  /**\r\n   * Get active sessions\r\n   */\r\n  public async activeSessions(): Promise<RefreshToken[]> {\r\n    return authService.getActiveSessions(this);\r\n  }\r\n\r\n  /**\r\n   * Attempt to login the user\r\n   */\r\n  public static async attempt(this: ChildModel<Auth>, data: any): Promise<Auth | null> {\r\n    return authService.attemptLogin(this, data);\r\n  }\r\n\r\n  /**\r\n   * Confirm password\r\n   */\r\n  public async confirmPassword(password: string): Promise<boolean> {\r\n    return authService.verifyPassword(password, this.string(\"password\")!);\r\n  }\r\n}\r\n"],"mappings":";;;;;AAMA,IAAsB,OAAtB,cACU,MAEV;;;;CASE,AAAO,qBAAqB;EAC1B,OAAO,YAAY,wBAAwB,IAAI;CACjD;;;;CAKA,MAAa,gBAAgB,YAA6C;EACxE,OAAO,YAAY,gBAAgB,MAAM,UAAU;CACrD;;;;CAKA,MAAa,oBAAoB,MAAwC;EACvE,OAAO,YAAY,oBAAoB,MAAM,IAAI;CACnD;;;;CAKA,MAAa,qBAAqB,YAA4D;EAC5F,OAAO,YAAY,mBAAmB,MAAM,UAAU;CACxD;;;;CAKA,MAAa,kBAAkB,OAA8B;EAC3D,OAAO,YAAY,kBAAkB,MAAM,KAAK;CAClD;;;;CAKA,MAAa,mBAAmB,OAA8B;EAC5D,OAAO,YAAY,mBAAmB,MAAM,KAAK;CACnD;;;;CAKA,MAAa,wBAAuC;EAClD,OAAO,YAAY,sBAAsB,IAAI;CAC/C;;;;CAKA,MAAa,kBAAiC;EAC5C,OAAO,YAAY,gBAAgB,IAAI;CACzC;;;;CAKA,MAAa,iBAA0C;EACrD,OAAO,YAAY,kBAAkB,IAAI;CAC3C;;;;CAKA,aAAoB,QAAgC,MAAiC;EACnF,OAAO,YAAY,aAAa,MAAM,IAAI;CAC5C;;;;CAKA,MAAa,gBAAgB,UAAoC;EAC/D,OAAO,YAAY,eAAe,UAAU,KAAK,OAAO,UAAU,CAAE;CACtE;AACF"}

package/esm/models/index.d.mts

@@ -0,0 +1,8 @@
+import { RefreshToken } from "./refresh-token/refresh-token.model.mjs";
+import { Auth } from "./auth.model.mjs";
+import { AccessToken } from "./access-token/access-token.model.mjs";
+//#region ../../@warlock.js/auth/src/models/index.d.ts
+declare const authMigrations: any[];
+//#endregion
+export { authMigrations };
+//# sourceMappingURL=index.d.mts.map

package/esm/models/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../../../@warlock.js/auth/src/models/index.ts"],"mappings":";;;;cAOa,cAAA"}

package/esm/models/index.mjs

@@ -0,0 +1,14 @@
+import { AccessToken } from "./access-token/access-token.model.mjs";
+import "./access-token/index.mjs";
+import { RefreshToken } from "./refresh-token/refresh-token.model.mjs";
+import "./refresh-token/index.mjs";
+import { AccessTokenMigration } from "./access-token/migration.mjs";
+import { RefreshTokenMigration } from "./refresh-token/migration.mjs";
+import { Auth } from "./auth.model.mjs";
+
+//#region ../../@warlock.js/auth/src/models/index.ts
+const authMigrations = [AccessTokenMigration, RefreshTokenMigration];
+
+//#endregion
+export { authMigrations };
+//# sourceMappingURL=index.mjs.map

package/esm/models/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../../../@warlock.js/auth/src/models/index.ts"],"sourcesContent":["import { AccessTokenMigration } from \"./access-token/migration\";\r\nimport { RefreshTokenMigration } from \"./refresh-token/migration\";\r\n\r\nexport * from \"./access-token\";\r\nexport * from \"./auth.model\";\r\nexport * from \"./refresh-token\";\r\n\r\nexport const authMigrations = [AccessTokenMigration, RefreshTokenMigration];\r\n"],"mappings":";;;;;;;;;AAOA,MAAa,iBAAiB,CAAC,sBAAsB,qBAAqB"}

package/esm/models/refresh-token/index.d.mts

@@ -0,0 +1 @@
+import { RefreshToken } from "./refresh-token.model.mjs";

package/esm/models/refresh-token/index.mjs

@@ -0,0 +1,3 @@
+import { RefreshToken } from "./refresh-token.model.mjs";
+
+export {  };

package/esm/models/refresh-token/migration.mjs

@@ -0,0 +1,27 @@
+import { RefreshToken } from "./refresh-token.model.mjs";
+import { migrate } from "@warlock.js/cascade";
+
+//#region ../../@warlock.js/auth/src/models/refresh-token/migration.ts
+const RefreshTokenMigration = migrate(RefreshToken, {
+	name: "refreshToken",
+	up() {
+		this.createTableIfNotExists();
+		this.primaryUuid();
+		this.text("token").unique();
+		this.uuid("user_id").index();
+		this.string("user_type", 50).nullable();
+		this.text("family_id").index().nullable();
+		this.timestamp("expires_at").index().nullable();
+		this.timestamp("last_used_at").nullable();
+		this.timestamp("revoked_at").nullable();
+		this.json("device_info").nullable();
+		this.timestamps();
+	},
+	down() {
+		this.dropTableIfExists();
+	}
+});
+
+//#endregion
+export { RefreshTokenMigration };
+//# sourceMappingURL=migration.mjs.map

package/esm/models/refresh-token/migration.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration.mjs","names":[],"sources":["../../../../../../../@warlock.js/auth/src/models/refresh-token/migration.ts"],"sourcesContent":["import { migrate } from \"@warlock.js/cascade\";\nimport { RefreshToken } from \"./refresh-token.model\";\n\nexport const RefreshTokenMigration = migrate(RefreshToken, {\n  name: \"refreshToken\",\n  up() {\n    // Create table\n    this.createTableIfNotExists();\n\n    // Primary key\n    this.primaryUuid();\n\n    // Token fields\n    this.text(\"token\").unique();\n    this.uuid(\"user_id\").index();\n    this.string(\"user_type\", 50).nullable();\n    this.text(\"family_id\").index().nullable();\n    this.timestamp(\"expires_at\").index().nullable();\n    this.timestamp(\"last_used_at\").nullable();\n    this.timestamp(\"revoked_at\").nullable();\n    this.json(\"device_info\").nullable();\n\n    // Timestamps\n    this.timestamps();\n  },\n  down() {\n    this.dropTableIfExists();\n  },\n});\n"],"mappings":";;;;AAGA,MAAa,wBAAwB,QAAQ,cAAc;CACzD,MAAM;CACN,KAAK;EAEH,KAAK,uBAAuB;EAG5B,KAAK,YAAY;EAGjB,KAAK,KAAK,OAAO,EAAE,OAAO;EAC1B,KAAK,KAAK,SAAS,EAAE,MAAM;EAC3B,KAAK,OAAO,aAAa,EAAE,EAAE,SAAS;EACtC,KAAK,KAAK,WAAW,EAAE,MAAM,EAAE,SAAS;EACxC,KAAK,UAAU,YAAY,EAAE,MAAM,EAAE,SAAS;EAC9C,KAAK,UAAU,cAAc,EAAE,SAAS;EACxC,KAAK,UAAU,YAAY,EAAE,SAAS;EACtC,KAAK,KAAK,aAAa,EAAE,SAAS;EAGlC,KAAK,WAAW;CAClB;CACA,OAAO;EACL,KAAK,kBAAkB;CACzB;AACF,CAAC"}

package/esm/models/refresh-token/refresh-token.model.d.mts

@@ -0,0 +1,36 @@
+import { Model } from "@warlock.js/cascade";
+
+//#region ../../@warlock.js/auth/src/models/refresh-token/refresh-token.model.d.ts
+declare class RefreshToken extends Model {
+  /**
+   * {@inheritDoc}
+   */
+  static table: string;
+  /**
+   * {@inheritDoc}
+   */
+  static schema: any;
+  /**
+   * Check if token is expired
+   */
+  get isExpired(): boolean;
+  /**
+   * Check if token is revoked
+   */
+  get isRevoked(): boolean;
+  /**
+   * Check if token is valid (not expired and not revoked)
+   */
+  get isValid(): boolean;
+  /**
+   * Revoke this token
+   */
+  revoke(): Promise<this>;
+  /**
+   * Mark token as used (update last_used_at)
+   */
+  markAsUsed(): Promise<void>;
+}
+//#endregion
+export { RefreshToken };
+//# sourceMappingURL=refresh-token.model.d.mts.map

package/esm/models/refresh-token/refresh-token.model.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.model.d.mts","names":[],"sources":["../../../../../../../@warlock.js/auth/src/models/refresh-token/refresh-token.model.ts"],"mappings":";;;cAca,YAAA,SAAqB,KAAA;;AAAlC;;SAIgB,KAAA;EAiCS;;;EAAA,OA5BT,MAAA;EATuB;;;EAAA,IAc1B,SAAA,CAAA;EAAA;;;EAAA,IASA,SAAA,CAAA;EAcY;;;EAAA,IAPZ,OAAA,CAAA;EAcuB;;;EAPrB,MAAA,CAAA,GAAU,OAAA;;;;EAOV,UAAA,CAAA,GAAc,OAAA;AAAA"}

package/esm/models/refresh-token/refresh-token.model.mjs

@@ -0,0 +1,58 @@
+import { Model } from "@warlock.js/cascade";
+import { v } from "@warlock.js/seal";
+
+//#region ../../@warlock.js/auth/src/models/refresh-token/refresh-token.model.ts
+const refreshTokenSchema = v.object({
+	token: v.string().required(),
+	user_id: v.scalar().required(),
+	user_type: v.string().required(),
+	family_id: v.string().required(),
+	expires_at: v.date().required(),
+	last_used_at: v.date().default(() => /* @__PURE__ */ new Date()),
+	revoked_at: v.date().optional(),
+	device_info: v.record(v.any()).optional()
+});
+var RefreshToken = class extends Model {
+	static {
+		this.table = "refresh_tokens";
+	}
+	static {
+		this.schema = refreshTokenSchema;
+	}
+	/**
+	* Check if token is expired
+	*/
+	get isExpired() {
+		const expiresAt = this.get("expires_at");
+		if (!expiresAt) return false;
+		return /* @__PURE__ */ new Date() > new Date(expiresAt);
+	}
+	/**
+	* Check if token is revoked
+	*/
+	get isRevoked() {
+		return !!this.get("revoked_at");
+	}
+	/**
+	* Check if token is valid (not expired and not revoked)
+	*/
+	get isValid() {
+		return !this.isExpired && !this.isRevoked;
+	}
+	/**
+	* Revoke this token
+	*/
+	async revoke() {
+		return this.merge({ revoked_at: /* @__PURE__ */ new Date() }).save();
+	}
+	/**
+	* Mark token as used (update last_used_at)
+	*/
+	async markAsUsed() {
+		await this.merge({ last_used_at: /* @__PURE__ */ new Date() }).save();
+	}
+};
+
+//#endregion
+export { RefreshToken };
+//# sourceMappingURL=refresh-token.model.mjs.map

package/esm/models/refresh-token/refresh-token.model.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.model.mjs","names":[],"sources":["../../../../../../../@warlock.js/auth/src/models/refresh-token/refresh-token.model.ts"],"sourcesContent":["import { Model } from \"@warlock.js/cascade\";\nimport { v } from \"@warlock.js/seal\";\n\nconst refreshTokenSchema = v.object({\n  token: v.string().required(),\n  user_id: v.scalar().required(),\n  user_type: v.string().required(),\n  family_id: v.string().required(),\n  expires_at: v.date().required(),\n  last_used_at: v.date().default(() => new Date()),\n  revoked_at: v.date().optional(),\n  device_info: v.record(v.any()).optional(),\n});\n\nexport class RefreshToken extends Model {\n  /**\n   * {@inheritDoc}\n   */\n  public static table = \"refresh_tokens\";\n\n  /**\n   * {@inheritDoc}\n   */\n  public static schema = refreshTokenSchema;\n\n  /**\n   * Check if token is expired\n   */\n  public get isExpired(): boolean {\n    const expiresAt = this.get(\"expires_at\");\n    if (!expiresAt) return false;\n    return new Date() > new Date(expiresAt);\n  }\n\n  /**\n   * Check if token is revoked\n   */\n  public get isRevoked(): boolean {\n    return !!this.get(\"revoked_at\");\n  }\n\n  /**\n   * Check if token is valid (not expired and not revoked)\n   */\n  public get isValid(): boolean {\n    return !this.isExpired && !this.isRevoked;\n  }\n\n  /**\n   * Revoke this token\n   */\n  public async revoke(): Promise<this> {\n    return this.merge({ revoked_at: new Date() }).save();\n  }\n\n  /**\n   * Mark token as used (update last_used_at)\n   */\n  public async markAsUsed(): Promise<void> {\n    await this.merge({ last_used_at: new Date() }).save();\n  }\n}\n"],"mappings":";;;;AAGA,MAAM,qBAAqB,EAAE,OAAO;CAClC,OAAO,EAAE,OAAO,EAAE,SAAS;CAC3B,SAAS,EAAE,OAAO,EAAE,SAAS;CAC7B,WAAW,EAAE,OAAO,EAAE,SAAS;CAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;CAC/B,YAAY,EAAE,KAAK,EAAE,SAAS;CAC9B,cAAc,EAAE,KAAK,EAAE,8BAAc,IAAI,KAAK,CAAC;CAC/C,YAAY,EAAE,KAAK,EAAE,SAAS;CAC9B,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAC1C,CAAC;AAED,IAAa,eAAb,cAAkC,MAAM;;eAIhB;;;gBAKC;;;;;CAKvB,IAAW,YAAqB;EAC9B,MAAM,YAAY,KAAK,IAAI,YAAY;EACvC,IAAI,CAAC,WAAW,OAAO;EACvB,uBAAO,IAAI,KAAK,IAAI,IAAI,KAAK,SAAS;CACxC;;;;CAKA,IAAW,YAAqB;EAC9B,OAAO,CAAC,CAAC,KAAK,IAAI,YAAY;CAChC;;;;CAKA,IAAW,UAAmB;EAC5B,OAAO,CAAC,KAAK,aAAa,CAAC,KAAK;CAClC;;;;CAKA,MAAa,SAAwB;EACnC,OAAO,KAAK,MAAM,EAAE,4BAAY,IAAI,KAAK,EAAE,CAAC,EAAE,KAAK;CACrD;;;;CAKA,MAAa,aAA4B;EACvC,MAAM,KAAK,MAAM,EAAE,8BAAc,IAAI,KAAK,EAAE,CAAC,EAAE,KAAK;CACtD;AACF"}

package/esm/services/auth-events.d.mts

@@ -0,0 +1,89 @@
+import { RefreshToken } from "../models/refresh-token/refresh-token.model.mjs";
+import { Auth } from "../models/auth.model.mjs";
+import { DeviceInfo, TokenPair } from "../contracts/types.mjs";
+import { EventSubscription } from "@mongez/events";
+
+//#region ../../@warlock.js/auth/src/services/auth-events.d.ts
+/**
+ * Auth event payload types
+ */
+type AuthEventPayloads = {
+  "login.success": [user: Auth, tokenPair: TokenPair, deviceInfo?: DeviceInfo];
+  "login.failed": [credentials: {
+    email?: string;
+    username?: string;
+  }, reason: string];
+  "login.attempt": [credentials: {
+    email?: string;
+    username?: string;
+  }];
+  logout: [user: Auth];
+  "logout.all": [user: Auth];
+  "logout.failsafe": [user: Auth];
+  "token.created": [user: Auth, tokenPair: TokenPair];
+  "token.refreshed": [user: Auth, newTokenPair: TokenPair, oldRefreshToken: RefreshToken];
+  "token.revoked": [user: Auth, token: RefreshToken];
+  "token.expired": [token: RefreshToken];
+  "token.familyRevoked": [familyId: string, tokens: RefreshToken[]];
+  "password.changed": [user: Auth];
+  "password.resetRequested": [user: Auth, resetToken: string];
+  "password.reset": [user: Auth];
+  "session.created": [user: Auth, refreshToken: RefreshToken, deviceInfo?: DeviceInfo];
+  "session.destroyed": [user: Auth, refreshToken: RefreshToken];
+  "cleanup.completed": [expiredCount: number];
+};
+/**
+ * Auth event names
+ */
+type AuthEventName = keyof AuthEventPayloads;
+/**
+ * Callback type for a specific event
+ */
+type AuthEventCallback<T extends AuthEventName> = (...args: AuthEventPayloads[T]) => void | Promise<void>;
+/**
+ * Type-safe auth events manager
+ *
+ * @example
+ * ```typescript
+ * // Subscribe to events with full autocomplete
+ * authEvents.on("login.success", (user, tokenPair, deviceInfo) => {
+ *   console.log(`User ${user.id} logged in`);
+ * });
+ *
+ * authEvents.on("token.refreshed", (user, newPair, oldToken) => {
+ *   console.log(`Token refreshed for user ${user.id}`);
+ * });
+ *
+ * // Trigger events
+ * authEvents.emit("login.success", user, tokenPair, deviceInfo);
+ * ```
+ */
+declare const authEvents: {
+  /**
+   * Subscribe to an auth event
+   */
+  on<T extends AuthEventName>(event: T, callback: AuthEventCallback<T>): EventSubscription;
+  /**
+   * Subscribe to an auth event (alias for `on`)
+   */
+  subscribe<T extends AuthEventName>(event: T, callback: AuthEventCallback<T>): EventSubscription;
+  /**
+   * Emit an auth event
+   */
+  emit<T extends AuthEventName>(event: T, ...args: AuthEventPayloads[T]): void;
+  /**
+   * Emit an auth event (alias for `emit`)
+   */
+  trigger<T extends AuthEventName>(event: T, ...args: AuthEventPayloads[T]): void;
+  /**
+   * Unsubscribe from all auth events
+   */
+  unsubscribeAll(): void;
+  /**
+   * Unsubscribe from a specific auth event
+   */
+  off(event?: AuthEventName): void;
+};
+//#endregion
+export { AuthEventCallback, AuthEventName, AuthEventPayloads, authEvents };
+//# sourceMappingURL=auth-events.d.mts.map

package/esm/services/auth-events.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-events.d.mts","names":[],"sources":["../../../../../../@warlock.js/auth/src/services/auth-events.ts"],"mappings":";;;;;;;;;KAQY,iBAAA;EAEV,eAAA,GAAkB,IAAA,EAAM,IAAA,EAAM,SAAA,EAAW,SAAA,EAAW,UAAA,GAAa,UAAA;EACjE,cAAA,GAAiB,WAAA;IAAe,KAAA;IAAgB,QAAA;EAAA,GAAqB,MAAA;EACrE,eAAA,GAAkB,WAAA;IAAe,KAAA;IAAgB,QAAA;EAAA;EAGjD,MAAA,GAAS,IAAA,EAAM,IAAA;EACf,YAAA,GAAe,IAAA,EAAM,IAAA;EACrB,iBAAA,GAAoB,IAAA,EAAM,IAAA;EAG1B,eAAA,GAAkB,IAAA,EAAM,IAAA,EAAM,SAAA,EAAW,SAAA;EACzC,iBAAA,GAAoB,IAAA,EAAM,IAAA,EAAM,YAAA,EAAc,SAAA,EAAW,eAAA,EAAiB,YAAA;EAC1E,eAAA,GAAkB,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,YAAA;EACrC,eAAA,GAAkB,KAAA,EAAO,YAAA;EACzB,qBAAA,GAAwB,QAAA,UAAkB,MAAA,EAAQ,YAAA;EAGlD,kBAAA,GAAqB,IAAA,EAAM,IAAA;EAC3B,yBAAA,GAA4B,IAAA,EAAM,IAAA,EAAM,UAAA;EACxC,gBAAA,GAAmB,IAAA,EAAM,IAAA;EAGzB,iBAAA,GAAoB,IAAA,EAAM,IAAA,EAAM,YAAA,EAAc,YAAA,EAAc,UAAA,GAAa,UAAA;EACzE,mBAAA,GAAsB,IAAA,EAAM,IAAA,EAAM,YAAA,EAAc,YAAA;EAGhD,mBAAA,GAAsB,YAAA;AAAA;;;;KAMZ,aAAA,SAAsB,iBAAiB;;;;KAKvC,iBAAA,WAA4B,aAAA,QACnC,IAAA,EAAM,iBAAA,CAAkB,CAAA,aACjB,OAAA;;;;;;;;;;;;;;;;;;;cAyBC,UAAA;EAzDe;;;eA6Db,aAAA,EAAa,KAAA,EAAS,CAAA,EAAC,QAAA,EAAY,iBAAA,CAAkB,CAAA,IAAK,iBAAA;EA1DzC;;;sBAiEV,aAAA,EAAa,KAAA,EAAS,CAAA,EAAC,QAAA,EAAY,iBAAA,CAAkB,CAAA,IAAK,iBAAA;EAhEpD;;;iBAuEX,aAAA,EAAa,KAAA,EAAS,CAAA,KAAC,IAAA,EAAW,iBAAA,CAAkB,CAAA;EAvEO;;;oBA8ExD,aAAA,EAAa,KAAA,EAAS,CAAA,KAAC,IAAA,EAAW,iBAAA,CAAkB,CAAA;EA7ExC;;;;EACL;;;cA0Fb,aAAA;AAAA"}

package/esm/services/auth-events.mjs

@@ -0,0 +1,68 @@
+import events from "@mongez/events";
+
+//#region ../../@warlock.js/auth/src/services/auth-events.ts
+/**
+* Event namespace prefix for auth events
+*/
+const AUTH_EVENT_PREFIX = "auth.";
+/**
+* Type-safe auth events manager
+*
+* @example
+* ```typescript
+* // Subscribe to events with full autocomplete
+* authEvents.on("login.success", (user, tokenPair, deviceInfo) => {
+*   console.log(`User ${user.id} logged in`);
+* });
+*
+* authEvents.on("token.refreshed", (user, newPair, oldToken) => {
+*   console.log(`Token refreshed for user ${user.id}`);
+* });
+*
+* // Trigger events
+* authEvents.emit("login.success", user, tokenPair, deviceInfo);
+* ```
+*/
+const authEvents = {
+	/**
+	* Subscribe to an auth event
+	*/
+	on(event, callback) {
+		return events.subscribe(AUTH_EVENT_PREFIX + event, callback);
+	},
+	/**
+	* Subscribe to an auth event (alias for `on`)
+	*/
+	subscribe(event, callback) {
+		return this.on(event, callback);
+	},
+	/**
+	* Emit an auth event
+	*/
+	emit(event, ...args) {
+		events.trigger(AUTH_EVENT_PREFIX + event, ...args);
+	},
+	/**
+	* Emit an auth event (alias for `emit`)
+	*/
+	trigger(event, ...args) {
+		this.emit(event, ...args);
+	},
+	/**
+	* Unsubscribe from all auth events
+	*/
+	unsubscribeAll() {
+		events.unsubscribeNamespace(AUTH_EVENT_PREFIX.slice(0, -1));
+	},
+	/**
+	* Unsubscribe from a specific auth event
+	*/
+	off(event) {
+		if (event) events.unsubscribe(AUTH_EVENT_PREFIX + event);
+		else this.unsubscribeAll();
+	}
+};
+
+//#endregion
+export { authEvents };
+//# sourceMappingURL=auth-events.mjs.map

package/esm/services/auth-events.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-events.mjs","names":[],"sources":["../../../../../../@warlock.js/auth/src/services/auth-events.ts"],"sourcesContent":["import events, { type EventSubscription } from \"@mongez/events\";\nimport type { DeviceInfo, TokenPair } from \"../contracts/types\";\nimport type { Auth } from \"../models/auth.model\";\nimport type { RefreshToken } from \"../models/refresh-token\";\n\n/**\n * Auth event payload types\n */\nexport type AuthEventPayloads = {\n  // Login events\n  \"login.success\": [user: Auth, tokenPair: TokenPair, deviceInfo?: DeviceInfo];\n  \"login.failed\": [credentials: { email?: string; username?: string }, reason: string];\n  \"login.attempt\": [credentials: { email?: string; username?: string }];\n\n  // Logout events\n  logout: [user: Auth];\n  \"logout.all\": [user: Auth];\n  \"logout.failsafe\": [user: Auth];\n\n  // Token events\n  \"token.created\": [user: Auth, tokenPair: TokenPair];\n  \"token.refreshed\": [user: Auth, newTokenPair: TokenPair, oldRefreshToken: RefreshToken];\n  \"token.revoked\": [user: Auth, token: RefreshToken];\n  \"token.expired\": [token: RefreshToken];\n  \"token.familyRevoked\": [familyId: string, tokens: RefreshToken[]];\n\n  // Password events\n  \"password.changed\": [user: Auth];\n  \"password.resetRequested\": [user: Auth, resetToken: string];\n  \"password.reset\": [user: Auth];\n\n  // Session events\n  \"session.created\": [user: Auth, refreshToken: RefreshToken, deviceInfo?: DeviceInfo];\n  \"session.destroyed\": [user: Auth, refreshToken: RefreshToken];\n\n  // Cleanup events\n  \"cleanup.completed\": [expiredCount: number];\n};\n\n/**\n * Auth event names\n */\nexport type AuthEventName = keyof AuthEventPayloads;\n\n/**\n * Callback type for a specific event\n */\nexport type AuthEventCallback<T extends AuthEventName> = (\n  ...args: AuthEventPayloads[T]\n) => void | Promise<void>;\n\n/**\n * Event namespace prefix for auth events\n */\nconst AUTH_EVENT_PREFIX = \"auth.\";\n\n/**\n * Type-safe auth events manager\n *\n * @example\n * ```typescript\n * // Subscribe to events with full autocomplete\n * authEvents.on(\"login.success\", (user, tokenPair, deviceInfo) => {\n *   console.log(`User ${user.id} logged in`);\n * });\n *\n * authEvents.on(\"token.refreshed\", (user, newPair, oldToken) => {\n *   console.log(`Token refreshed for user ${user.id}`);\n * });\n *\n * // Trigger events\n * authEvents.emit(\"login.success\", user, tokenPair, deviceInfo);\n * ```\n */\nexport const authEvents = {\n  /**\n   * Subscribe to an auth event\n   */\n  on<T extends AuthEventName>(event: T, callback: AuthEventCallback<T>): EventSubscription {\n    return events.subscribe(AUTH_EVENT_PREFIX + event, callback as Function);\n  },\n\n  /**\n   * Subscribe to an auth event (alias for `on`)\n   */\n  subscribe<T extends AuthEventName>(event: T, callback: AuthEventCallback<T>): EventSubscription {\n    return this.on(event, callback);\n  },\n\n  /**\n   * Emit an auth event\n   */\n  emit<T extends AuthEventName>(event: T, ...args: AuthEventPayloads[T]): void {\n    events.trigger(AUTH_EVENT_PREFIX + event, ...args);\n  },\n\n  /**\n   * Emit an auth event (alias for `emit`)\n   */\n  trigger<T extends AuthEventName>(event: T, ...args: AuthEventPayloads[T]): void {\n    this.emit(event, ...args);\n  },\n\n  /**\n   * Unsubscribe from all auth events\n   */\n  unsubscribeAll(): void {\n    events.unsubscribeNamespace(AUTH_EVENT_PREFIX.slice(0, -1));\n  },\n\n  /**\n   * Unsubscribe from a specific auth event\n   */\n  off(event?: AuthEventName): void {\n    if (event) {\n      events.unsubscribe(AUTH_EVENT_PREFIX + event);\n    } else {\n      this.unsubscribeAll();\n    }\n  },\n};\n"],"mappings":";;;;;;AAsDA,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;AAoB1B,MAAa,aAAa;;;;CAIxB,GAA4B,OAAU,UAAmD;EACvF,OAAO,OAAO,UAAU,oBAAoB,OAAO,QAAoB;CACzE;;;;CAKA,UAAmC,OAAU,UAAmD;EAC9F,OAAO,KAAK,GAAG,OAAO,QAAQ;CAChC;;;;CAKA,KAA8B,OAAU,GAAG,MAAkC;EAC3E,OAAO,QAAQ,oBAAoB,OAAO,GAAG,IAAI;CACnD;;;;CAKA,QAAiC,OAAU,GAAG,MAAkC;EAC9E,KAAK,KAAK,OAAO,GAAG,IAAI;CAC1B;;;;CAKA,iBAAuB;EACrB,OAAO,qBAAqB,kBAAkB,MAAM,GAAG,EAAE,CAAC;CAC5D;;;;CAKA,IAAI,OAA6B;EAC/B,IAAI,OACF,OAAO,YAAY,oBAAoB,KAAK;OAE5C,KAAK,eAAe;CAExB;AACF"}