@wenlarge/ostrol-communication 0.6.1 → 0.7.0

package/dist/generated/auth.d.ts

@@ -66,6 +66,32 @@ export interface OAuthLoginRequest {
 export interface RefreshTokenRequest {
     refreshToken: string;
 }
+export interface LogoutRequest {
+    /** caller, from gateway (authenticated route) */
+    userId: string;
+    /** session to revoke; may be empty with allDevices */
+    refreshToken: string;
+    /** revoke EVERY refresh token of the user */
+    allDevices: boolean;
+}
+/**
+ * Doubles as "set password" for OAuth-only accounts: when the account has no
+ * password yet, currentPassword must be empty and is not checked.
+ */
+export interface ChangePasswordRequest {
+    /** caller, from gateway (authenticated route) */
+    userId: string;
+    currentPassword: string;
+    newPassword: string;
+}
+export interface ForgotPasswordRequest {
+    email: string;
+}
+export interface ResetPasswordRequest {
+    /** single-use token from the reset email */
+    token: string;
+    newPassword: string;
+}
 export interface UpdateProfileRequest {
     /**
      * Partial update: every field except userId is `optional` so absence is
@@ -108,6 +134,10 @@ export interface AuthServiceClient {
     login(request: LoginRequest, metadata?: Metadata): Observable<AuthResponse>;
     oAuthLogin(request: OAuthLoginRequest, metadata?: Metadata): Observable<AuthResponse>;
     refreshToken(request: RefreshTokenRequest, metadata?: Metadata): Observable<AuthResponse>;
+    logout(request: LogoutRequest, metadata?: Metadata): Observable<Empty>;
+    changePassword(request: ChangePasswordRequest, metadata?: Metadata): Observable<AuthResponse>;
+    forgotPassword(request: ForgotPasswordRequest, metadata?: Metadata): Observable<Empty>;
+    resetPassword(request: ResetPasswordRequest, metadata?: Metadata): Observable<Empty>;
     updateProfile(request: UpdateProfileRequest, metadata?: Metadata): Observable<AuthResponse>;
     oAuthLink(request: OAuthLinkRequest, metadata?: Metadata): Observable<Empty>;
     oAuthUnlink(request: OAuthUnlinkRequest, metadata?: Metadata): Observable<Empty>;
@@ -120,6 +150,10 @@ export interface AuthServiceController {
     login(request: LoginRequest, metadata?: Metadata): Promise<AuthResponse> | Observable<AuthResponse> | AuthResponse;
     oAuthLogin(request: OAuthLoginRequest, metadata?: Metadata): Promise<AuthResponse> | Observable<AuthResponse> | AuthResponse;
     refreshToken(request: RefreshTokenRequest, metadata?: Metadata): Promise<AuthResponse> | Observable<AuthResponse> | AuthResponse;
+    logout(request: LogoutRequest, metadata?: Metadata): void;
+    changePassword(request: ChangePasswordRequest, metadata?: Metadata): Promise<AuthResponse> | Observable<AuthResponse> | AuthResponse;
+    forgotPassword(request: ForgotPasswordRequest, metadata?: Metadata): void;
+    resetPassword(request: ResetPasswordRequest, metadata?: Metadata): void;
     updateProfile(request: UpdateProfileRequest, metadata?: Metadata): Promise<AuthResponse> | Observable<AuthResponse> | AuthResponse;
     oAuthLink(request: OAuthLinkRequest, metadata?: Metadata): void;
     oAuthUnlink(request: OAuthUnlinkRequest, metadata?: Metadata): void;

package/dist/generated/auth.js

@@ -32,6 +32,10 @@ function AuthServiceControllerMethods() {
             "login",
             "oAuthLogin",
             "refreshToken",
+            "logout",
+            "changePassword",
+            "forgotPassword",
+            "resetPassword",
             "updateProfile",
             "oAuthLink",
             "oAuthUnlink",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenlarge/ostrol-communication",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "Shared gRPC proto contracts, generated clients and Kafka helpers for Ostrol microservices.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -46,4 +46,4 @@
     "@nestjs/common": "^10.x",
     "@nestjs/microservices": "^10.x"
   }
-}
+}

package/proto/auth.proto

@@ -10,6 +10,10 @@ service AuthService {
   rpc Login (LoginRequest) returns (AuthResponse);
   rpc OAuthLogin (OAuthLoginRequest) returns (AuthResponse);
   rpc RefreshToken (RefreshTokenRequest) returns (AuthResponse);
+  rpc Logout (LogoutRequest) returns (google.protobuf.Empty);
+  rpc ChangePassword (ChangePasswordRequest) returns (AuthResponse);
+  rpc ForgotPassword (ForgotPasswordRequest) returns (google.protobuf.Empty);
+  rpc ResetPassword (ResetPasswordRequest) returns (google.protobuf.Empty);
   rpc UpdateProfile (UpdateProfileRequest) returns (AuthResponse);
   rpc OAuthLink (OAuthLinkRequest) returns (google.protobuf.Empty);
   rpc OAuthUnlink (OAuthUnlinkRequest) returns (google.protobuf.Empty);
@@ -81,6 +85,29 @@ message RefreshTokenRequest {
   string refreshToken = 1;
 }
 
+message LogoutRequest {
+  string userId = 1;             // caller, from gateway (authenticated route)
+  string refreshToken = 2;       // session to revoke; may be empty with allDevices
+  bool allDevices = 3;           // revoke EVERY refresh token of the user
+}
+
+// Doubles as "set password" for OAuth-only accounts: when the account has no
+// password yet, currentPassword must be empty and is not checked.
+message ChangePasswordRequest {
+  string userId = 1;             // caller, from gateway (authenticated route)
+  string currentPassword = 2;
+  string newPassword = 3;
+}
+
+message ForgotPasswordRequest {
+  string email = 1;
+}
+
+message ResetPasswordRequest {
+  string token = 1;              // single-use token from the reset email
+  string newPassword = 2;
+}
+
 message UpdateProfileRequest {
   reserved 4;                    // was `birthTimezone`; timezone is derived from lat/lng in astro-engine
   reserved "birthTimezone";

package/src/generated/auth.ts

@@ -84,6 +84,36 @@ export interface RefreshTokenRequest {
   refreshToken: string;
 }
 
+export interface LogoutRequest {
+  /** caller, from gateway (authenticated route) */
+  userId: string;
+  /** session to revoke; may be empty with allDevices */
+  refreshToken: string;
+  /** revoke EVERY refresh token of the user */
+  allDevices: boolean;
+}
+
+/**
+ * Doubles as "set password" for OAuth-only accounts: when the account has no
+ * password yet, currentPassword must be empty and is not checked.
+ */
+export interface ChangePasswordRequest {
+  /** caller, from gateway (authenticated route) */
+  userId: string;
+  currentPassword: string;
+  newPassword: string;
+}
+
+export interface ForgotPasswordRequest {
+  email: string;
+}
+
+export interface ResetPasswordRequest {
+  /** single-use token from the reset email */
+  token: string;
+  newPassword: string;
+}
+
 export interface UpdateProfileRequest {
   /**
    * Partial update: every field except userId is `optional` so absence is
@@ -139,6 +169,14 @@ export interface AuthServiceClient {
 
   refreshToken(request: RefreshTokenRequest, metadata?: Metadata): Observable<AuthResponse>;
 
+  logout(request: LogoutRequest, metadata?: Metadata): Observable<Empty>;
+
+  changePassword(request: ChangePasswordRequest, metadata?: Metadata): Observable<AuthResponse>;
+
+  forgotPassword(request: ForgotPasswordRequest, metadata?: Metadata): Observable<Empty>;
+
+  resetPassword(request: ResetPasswordRequest, metadata?: Metadata): Observable<Empty>;
+
   updateProfile(request: UpdateProfileRequest, metadata?: Metadata): Observable<AuthResponse>;
 
   oAuthLink(request: OAuthLinkRequest, metadata?: Metadata): Observable<Empty>;
@@ -170,6 +208,17 @@ export interface AuthServiceController {
     metadata?: Metadata,
   ): Promise<AuthResponse> | Observable<AuthResponse> | AuthResponse;
 
+  logout(request: LogoutRequest, metadata?: Metadata): void;
+
+  changePassword(
+    request: ChangePasswordRequest,
+    metadata?: Metadata,
+  ): Promise<AuthResponse> | Observable<AuthResponse> | AuthResponse;
+
+  forgotPassword(request: ForgotPasswordRequest, metadata?: Metadata): void;
+
+  resetPassword(request: ResetPasswordRequest, metadata?: Metadata): void;
+
   updateProfile(
     request: UpdateProfileRequest,
     metadata?: Metadata,
@@ -193,6 +242,10 @@ export function AuthServiceControllerMethods() {
       "login",
       "oAuthLogin",
       "refreshToken",
+      "logout",
+      "changePassword",
+      "forgotPassword",
+      "resetPassword",
       "updateProfile",
       "oAuthLink",
       "oAuthUnlink",