@zyno-io/dk-server-foundation 26.216.430

package/dist/src/app/state.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DBProvider = exports.globalState = void 0;
+exports.globalState = { additionalEntities: [] };
+class DBProvider {
+    constructor(db) {
+        this.db = db;
+    }
+}
+exports.DBProvider = DBProvider;
+DBProvider.__type = ['BaseDatabase', 'db', 'constructor', 'DBProvider', 'P"w!2":"0#5w$'];
+//# sourceMappingURL=state.js.map

package/dist/src/app/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/app/state.ts"],"names":[],"mappings":";;;AAMa,QAAA,WAAW,GAQpB,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC;AAE/B,MAAa,UAAU;IACnB,YAAmB,EAAgB;QAAhB,OAAE,GAAF,EAAE,CAAc;IAAG,CAAC;;AAD3C,gCAEC"}

package/dist/src/auth/index.d.ts

@@ -0,0 +1,3 @@
+export * from './jwt';
+export * from './provider';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,OAAO,CAAC;AACtB,cAAc,YAAY,CAAC"}

package/dist/src/auth/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./jwt"), exports);
+tslib_1.__exportStar(require("./provider"), exports);
+//# sourceMappingURL=index.js.map

package/dist/src/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":";;;AAAA,gDAAsB;AACtB,qDAA2B"}

package/dist/src/auth/jwt.d.ts

@@ -0,0 +1,76 @@
+import { HttpRequest, HttpResponse } from '@deepkit/http';
+import { Algorithm, Bufferable, createDecoder, SignerPayload, SignerSync, VerifierSync } from 'fast-jwt';
+type JwtExtras = Record<string, any>;
+interface BaseJwtOptions {
+    issuer?: string;
+    audience?: string;
+}
+export interface JwtCookieOptions {
+    secure?: boolean;
+    sameSite?: 'Strict' | 'Lax' | 'None';
+    domain?: string;
+}
+interface JwtGenerationOptions<T extends JwtExtras = object> extends BaseJwtOptions {
+    id?: string;
+    subject: string;
+    expiresAt?: Date | number;
+    expiryMins?: number;
+    payload?: T;
+}
+interface VerifierOptions extends BaseJwtOptions {
+    key: string | Buffer;
+    algorithm: Algorithm;
+}
+export declare class ParsedJwt<T extends JwtExtras = object> {
+    readonly isValid = true;
+    id?: string;
+    issuer: string;
+    audience?: string;
+    subject: string;
+    issuedAtMs: number;
+    get issuedAt(): Date;
+    expiresAtMs: number;
+    get expiresAt(): Date;
+    payload: T;
+    rawPayload: Record<string, any>;
+}
+export interface InvalidJwtValidationResult {
+    isValid: false;
+    isDecodable: boolean;
+    isSignatureValid?: boolean;
+    isPayloadValid?: boolean;
+    isNotExpired?: boolean;
+}
+export type JwtValidationResult<T extends JwtExtras = object> = ParsedJwt<T> | InvalidJwtValidationResult;
+interface JWTState {
+    shouldVerify: boolean;
+    issuerName: string;
+    validityMins: number;
+    cookieName: string;
+    cookieRe: RegExp;
+    signer: typeof SignerSync<SignerPayload>;
+    verifier: typeof VerifierSync<Bufferable>;
+    decoder: ReturnType<typeof createDecoder>;
+}
+export declare class JWT {
+    private static _state?;
+    private static get state();
+    private static deriveEdPublicKey;
+    static generate<T extends JwtExtras>(options: JwtGenerationOptions<T>): Promise<string>;
+    static generateCookie<T extends JwtExtras>(options: JwtGenerationOptions<T>, response: HttpResponse, cookieOptions?: JwtCookieOptions): Promise<void>;
+    static clearCookie(response: HttpResponse, cookieOptions?: JwtCookieOptions): Promise<void>;
+    private static buildCookieAttributes;
+    static createVerifier<T extends JwtExtras = object>(options: VerifierOptions): (token: string) => Promise<JwtValidationResult<T>>;
+    static verify<T extends JwtExtras = object>(token: string, verifier?: JWTState['verifier']): Promise<JwtValidationResult<T>>;
+    static decode<T extends JwtExtras = object>(token: string): Promise<JwtValidationResult<T>>;
+    private static formatJwtResult;
+    private static formatJwtError;
+    static process(token: string): Promise<JwtValidationResult<object>>;
+    static processWithRequest(request: HttpRequest): Promise<JwtValidationResult | null>;
+    private static getExpirationTs;
+}
+export {};
+export declare type __ΩJwtCookieOptions = any[];
+export declare type __ΩInvalidJwtValidationResult = any[];
+export declare type __ΩJwtValidationResult = any[];
+//# sourceMappingURL=jwt.d.ts.map

package/dist/src/auth/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../src/auth/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAgC,aAAa,EAAE,UAAU,EAAc,YAAY,EAAE,MAAM,UAAU,CAAC;AAKnJ,KAAK,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAErC,UAAU,cAAc;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,oBAAoB,CAAC,CAAC,SAAS,SAAS,GAAG,MAAM,CAAE,SAAQ,cAAc;IAC/E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,CAAC,CAAC;CACf;AAED,UAAU,eAAgB,SAAQ,cAAc;IAC5C,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACxB;AAED,qBAAa,SAAS,CAAC,CAAC,SAAS,SAAS,GAAG,MAAM;IAC/C,QAAQ,CAAC,OAAO,QAAQ;IACxB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAG,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAG,MAAM,CAAC;IACjB,UAAU,EAAG,MAAM,CAAC;IACpB,IAAI,QAAQ,SAEX;IACD,WAAW,EAAG,MAAM,CAAC;IACrB,IAAI,SAAS,SAEZ;IACD,OAAO,EAAG,CAAC,CAAC;IAEZ,UAAU,EAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACvC,OAAO,EAAE,KAAK,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,mBAAmB,CAAC,CAAC,SAAS,SAAS,GAAG,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,0BAA0B,CAAC;AAE1G,UAAU,QAAQ;IACd,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,UAAU,CAAC,aAAa,CAAC,CAAC;IACzC,QAAQ,EAAE,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;CAC7C;AASD,qBAAa,GAAG;IACZ,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAW;IAEjC,OAAO,CAAC,MAAM,KAAK,KAAK,GAuCvB;IAED,OAAO,CAAC,MAAM,CAAC,iBAAiB;WAanB,QAAQ,CAAC,CAAC,SAAS,SAAS,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;WAYhF,cAAc,CAAC,CAAC,SAAS,SAAS,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,gBAAgB;WAK9H,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,gBAAgB;IAOjF,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAQpC,MAAM,CAAC,cAAc,CAAC,CAAC,SAAS,SAAS,GAAG,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;WAcpH,MAAM,CAAC,CAAC,SAAS,SAAS,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;WAUrH,MAAM,CAAC,CAAC,SAAS,SAAS,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAUjG,OAAO,CAAC,MAAM,CAAC,eAAe;IAiB9B,OAAO,CAAC,MAAM,CAAC,cAAc;WAsBhB,OAAO,CAAC,KAAK,EAAE,MAAM;WAIrB,kBAAkB,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAuB1F,OAAO,CAAC,MAAM,CAAC,eAAe;CAKjC"}

package/dist/src/auth/jwt.js

@@ -0,0 +1,218 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWT = exports.__ΩJwtValidationResult = exports.__ΩInvalidJwtValidationResult = exports.ParsedJwt = exports.__ΩJwtCookieOptions = void 0;
+const __ΩRecord = ['K', 'T', 'Record', 'l\'e#"Rb!b"Pde"!N#!w#y'];
+const __ΩReturnType = ['T', 'args', '', 'ReturnType', 'l>e"!R"RPde#!P"@2"h"!/#qk#\'QRb!Pde"!p)w$y'];
+function __assignType(fn, args) {
+    fn.__type = args;
+    return fn;
+}
+const http_1 = require("@deepkit/http");
+const crypto_1 = require("crypto");
+const fast_jwt_1 = require("fast-jwt");
+const resolver_1 = require("../app/resolver");
+const __ΩJwtExtras = [() => __ΩRecord, 'JwtExtras', '&"o!#w"y'];
+const __ΩBaseJwtOptions = ['issuer', 'audience', 'BaseJwtOptions', 'P&4!8&4"8Mw#y'];
+const __ΩJwtCookieOptions = ['secure', "Strict", "Lax", "None", 'sameSite', 'domain', 'JwtCookieOptions', 'P)4!8P.".#.$J4%8&4&8Mw\'y'];
+exports.__ΩJwtCookieOptions = __ΩJwtCookieOptions;
+const __ΩJwtGenerationOptions = ['T', () => __ΩBaseJwtOptions, 'id', 'subject', 'expiresAt', 'expiryMins', 'payload', 'JwtGenerationOptions', '%c!Pn"&4#8&4$PT\'J4%8\'4&8e"!4\'8Mw(y'];
+const __ΩVerifierOptions = [() => __ΩBaseJwtOptions, 'key', 'Algorithm', 'algorithm', 'VerifierOptions', 'Pn!P&!J4""w#4$Mw%y'];
+class ParsedJwt {
+    constructor() {
+        this.isValid = true;
+    }
+    get issuedAt() {
+        return new Date(this.issuedAtMs * 1000);
+    }
+    get expiresAt() {
+        return new Date(this.expiresAtMs * 1000);
+    }
+}
+exports.ParsedJwt = ParsedJwt;
+ParsedJwt.__type = ['T', 'isValid', function () { return true; }, 'id', 'issuer', 'audience', 'subject', 'issuedAtMs', 'expiresAtMs', 'payload', () => __ΩRecord, 'rawPayload', 'ParsedJwt', '%c!)3"9>#&3$8&3%&3&8&3\'\'3(!\'3)!e!!3*&"o+#3,5w-'];
+const __ΩInvalidJwtValidationResult = [false, 'isValid', 'isDecodable', 'isSignatureValid', 'isPayloadValid', 'isNotExpired', 'InvalidJwtValidationResult', 'P.!4")4#)4$8)4%8)4&8Mw\'y'];
+exports.__ΩInvalidJwtValidationResult = __ΩInvalidJwtValidationResult;
+const __ΩJwtValidationResult = ['T', () => ParsedJwt, () => __ΩInvalidJwtValidationResult, 'JwtValidationResult', '%c!PPe#!7"n#Jw$y'];
+exports.__ΩJwtValidationResult = __ΩJwtValidationResult;
+const __ΩJWTState = ['shouldVerify', 'issuerName', 'validityMins', 'cookieName', 'cookieRe', () => fast_jwt_1.SignerSync, 'signer', () => fast_jwt_1.VerifierSync, 'verifier', () => __ΩReturnType, () => fast_jwt_1.createDecoder, 'decoder', 'JWTState', 'P)4!&4"\'4#&4$A4%i&4\'i(4)i+o*"4,Mw-y'];
+const TokenErrorClasses = {
+    decode: [fast_jwt_1.TokenError.codes.invalidPayload, fast_jwt_1.TokenError.codes.malformed, fast_jwt_1.TokenError.codes.invalidType],
+    verify: [fast_jwt_1.TokenError.codes.verifyError, fast_jwt_1.TokenError.codes.invalidSignature, fast_jwt_1.TokenError.codes.invalidAlgorithm],
+    payload: [fast_jwt_1.TokenError.codes.invalidClaimType, fast_jwt_1.TokenError.codes.invalidClaimValue, fast_jwt_1.TokenError.codes.missingRequiredClaim],
+    expiry: [fast_jwt_1.TokenError.codes.expired, fast_jwt_1.TokenError.codes.inactive]
+};
+class JWT {
+    static get state() {
+        const appConfig = (0, resolver_1.getAppConfig)();
+        if (appConfig.AUTH_JWT_ENABLE_VERIFY) {
+            if (!appConfig.AUTH_JWT_SECRET && !appConfig.AUTH_JWT_SECRET_B64 && !appConfig.AUTH_JWT_ED_SECRET) {
+                throw new Error('AUTH_JWT_SECRET/AUTH_JWT_SECRET_B64/AUTH_JWT_ED_SECRET is not configured');
+            }
+            if (appConfig.AUTH_JWT_SECRET && appConfig.AUTH_JWT_SECRET_B64) {
+                throw new Error('AUTH_JWT_SECRET and AUTH_JWT_SECRET_B64 cannot both be configured');
+            }
+            if ((appConfig.AUTH_JWT_SECRET || appConfig.AUTH_JWT_SECRET_B64) && appConfig.AUTH_JWT_ED_SECRET) {
+                throw new Error('AUTH_JWT_SECRET/AUTH_JWT_SECRET_B64 and AUTH_JWT_ED_SECRET cannot both be configured');
+            }
+        }
+        const shouldVerify = appConfig.AUTH_JWT_ENABLE_VERIFY;
+        const cookieName = appConfig.AUTH_JWT_COOKIE_NAME ?? 'jwt';
+        const cookieRe = new RegExp('(^|;)[ ]*' + cookieName + '=([^;]+)');
+        const issuerName = appConfig.AUTH_JWT_ISSUER ?? 'app';
+        const validityMins = appConfig.AUTH_JWT_EXPIRATION_MINS ?? 60;
+        const getKey = () => appConfig.AUTH_JWT_SECRET_B64 ? Buffer.from(appConfig.AUTH_JWT_SECRET_B64, 'base64') : (appConfig.AUTH_JWT_SECRET ?? '');
+        const signer = (0, fast_jwt_1.createSigner)(appConfig.AUTH_JWT_ED_SECRET
+            ? { algorithm: 'EdDSA', key: `-----BEGIN PRIVATE KEY-----\n${appConfig.AUTH_JWT_ED_SECRET}\n-----END PRIVATE KEY-----` }
+            : { key: getKey() });
+        const verifier = (0, fast_jwt_1.createVerifier)({
+            cache: true,
+            allowedIss: issuerName,
+            ...(appConfig.AUTH_JWT_ED_SECRET
+                ? { algorithms: ['EdDSA'], key: this.deriveEdPublicKey(appConfig.AUTH_JWT_ED_SECRET) }
+                : { key: getKey() })
+        });
+        const decoder = (0, fast_jwt_1.createDecoder)();
+        this._state = { shouldVerify, issuerName, validityMins, cookieName, cookieRe, signer, verifier, decoder };
+        Object.defineProperty(this, 'state', { value: this._state });
+        return this._state;
+    }
+    static deriveEdPublicKey(privateKey) {
+        const privateKeyObj = (0, crypto_1.createPrivateKey)({
+            key: `-----BEGIN PRIVATE KEY-----\n${privateKey}\n-----END PRIVATE KEY-----`,
+            format: 'pem',
+            type: 'pkcs8'
+        });
+        const publicKeyObj = (0, crypto_1.createPublicKey)({
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            key: privateKeyObj
+        });
+        return publicKeyObj.export({ type: 'spki', format: 'pem' });
+    }
+    static async generate(options) {
+        return this.state.signer({
+            ...(options.id ? { jti: options.id } : {}),
+            iss: options.issuer ?? this.state.issuerName,
+            aud: options.audience,
+            sub: options.subject,
+            exp: this.getExpirationTs(options),
+            ...options.payload
+        });
+        // todo: ID
+    }
+    static async generateCookie(options, response, cookieOptions) {
+        const payload = await this.generate(options);
+        response.setHeader('set-cookie', `${this.state.cookieName}=${payload}; ${this.buildCookieAttributes(cookieOptions)}`);
+    }
+    static async clearCookie(response, cookieOptions) {
+        response.setHeader('set-cookie', `${this.state.cookieName}=invalid; Expires=Thu, 01 Jan 1970 00:00:00 GMT; ${this.buildCookieAttributes(cookieOptions)}`);
+    }
+    static buildCookieAttributes(options) {
+        const parts = ['Path=/; HttpOnly'];
+        if (options?.secure !== false)
+            parts.push('Secure');
+        parts.push(`SameSite=${options?.sameSite ?? 'Lax'}`);
+        if (options?.domain)
+            parts.push(`Domain=${options.domain}`);
+        return parts.join('; ');
+    }
+    static createVerifier(options) {
+        const verifier = (0, fast_jwt_1.createVerifier)({
+            cache: true,
+            allowedIss: options.issuer,
+            allowedAud: options.audience,
+            algorithms: [options.algorithm],
+            key: typeof options.key === 'string' && !options.key.startsWith('-----BEGIN PUBLIC KEY-----') && options.algorithm === 'EdDSA'
+                ? `-----BEGIN PUBLIC KEY-----\n${options.key}\n-----END PUBLIC KEY-----`
+                : options.key
+        });
+        return __assignType(async (token) => this.verify(token, verifier), ['token', '', 'P&2!"/"']);
+    }
+    static async verify(token, verifier) {
+        try {
+            verifier = verifier ?? this.state.verifier;
+            const result = await verifier(token);
+            return (this.formatJwtResult.Ω = [[() => __ΩJwtExtras, 'n!']], this.formatJwtResult(result));
+        }
+        catch (err) {
+            return this.formatJwtError(err);
+        }
+    }
+    static async decode(token) {
+        try {
+            const result = await this.state.decoder(token);
+            return (this.formatJwtResult.Ω = [[() => __ΩJwtExtras, 'n!']], this.formatJwtResult(result));
+        }
+        catch (err) {
+            return this.formatJwtError(err);
+        }
+    }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    static formatJwtResult(result) {
+        const formatted = (ParsedJwt.Ω = [[() => __ΩJwtExtras, 'n!']], new ParsedJwt());
+        const { jti, sub, iss, aud, iat, exp, ...payload } = result;
+        Object.assign(formatted, {
+            id: jti,
+            subject: sub,
+            issuer: iss,
+            audience: aud,
+            issuedAtMs: iat,
+            expiresAtMs: exp,
+            payload,
+            rawPayload: result
+        });
+        return formatted;
+    }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    static formatJwtError(err) {
+        if (err instanceof fast_jwt_1.TokenError) {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            if (TokenErrorClasses.decode.includes(err.code)) {
+                return { isValid: false, isDecodable: false };
+            }
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            if (TokenErrorClasses.verify.includes(err.code)) {
+                return { isValid: false, isDecodable: true, isSignatureValid: false };
+            }
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            if (TokenErrorClasses.payload.includes(err.code)) {
+                return { isValid: false, isDecodable: true, isSignatureValid: true, isPayloadValid: false };
+            }
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            if (TokenErrorClasses.expiry.includes(err.code)) {
+                return { isValid: false, isDecodable: true, isSignatureValid: true, isPayloadValid: true, isNotExpired: false };
+            }
+        }
+        throw err;
+    }
+    static async process(token) {
+        return this.state.shouldVerify ? this.verify(token) : this.decode(token);
+    }
+    static async processWithRequest(request) {
+        if (request.headers.authorization) {
+            if (request.headers.authorization.startsWith('Bearer ')) {
+                const result = await this.process(request.headers.authorization.substring(7));
+                if (result.isValid) {
+                    return result;
+                }
+            }
+        }
+        if (request.headers.cookie) {
+            const matches = request.headers.cookie.match(this.state.cookieRe);
+            if (matches) {
+                const result = await this.process(matches[2]);
+                if (result.isValid) {
+                    return result;
+                }
+            }
+        }
+        return null;
+    }
+    static getExpirationTs(options) {
+        const expiresMsIn = options.expiresAt instanceof Date ? options.expiresAt.getTime() : options.expiresAt;
+        const expiresMs = expiresMsIn ?? Date.now() + (options.expiryMins ?? this.state.validityMins) * 60 * 1000;
+        return Math.floor(expiresMs / 1000);
+    }
+}
+exports.JWT = JWT;
+JWT.__type = [() => __ΩJWTState, '_state', 'privateKey', 'deriveEdPublicKey', () => __ΩJwtGenerationOptions, 'options', 'generate', () => __ΩJwtGenerationOptions, () => http_1.HttpResponse, 'response', () => __ΩJwtCookieOptions, 'cookieOptions', 'generateCookie', () => http_1.HttpResponse, () => __ΩJwtCookieOptions, 'clearCookie', () => __ΩJwtCookieOptions, 'buildCookieAttributes', () => __ΩVerifierOptions, 'token', () => __ΩJwtValidationResult, '', 'createVerifier', () => __ΩJWTState, "verifier", 'verifier', () => __ΩJwtValidationResult, 'verify', () => __ΩJwtValidationResult, 'decode', 'result', () => __ΩJwtValidationResult, 'formatJwtResult', 'err', () => __ΩInvalidJwtValidationResult, 'formatJwtError', 'process', () => http_1.HttpRequest, 'request', () => __ΩJwtValidationResult, 'processWithRequest', () => __ΩJwtGenerationOptions, 'getExpirationTs', 'JWT', 'n!3"8;s!P&2#"0$;sP"o%"2&&`0\'sP"o("2&P7)2*n+2,8"0-sPP7.2*n/2,8"00sPn12&8&02;sPn32&P&24"o5"`/607sP&24n8.9f2:8"o;"`0<sP&24"o="`0>sP"2?"o@"0A;sP"2BnC0D;sP&24"0EsPP7F2GPnH,J`0IsPnJ2&"0K;s5wL'];
+//# sourceMappingURL=jwt.js.map

package/dist/src/auth/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../src/auth/jwt.ts"],"names":[],"mappings":";;;;;;;;;AAAA,wCAA0D;AAC1D,mCAA2D;AAC3D,uCAAmJ;AAEnJ,8CAA+C;;;;;;;AA6B/C,MAAa,SAAS;IAAtB;QACa,YAAO,GAAG,IAAI,CAAC;KAgB3B;IAVG,IAAI,QAAQ;QACR,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,SAAS;QACT,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;;AAbL,8BAiBC;yDAhBsB,IAAI;;;;;;AAuC3B,MAAM,iBAAiB,GAAG;IACtB,MAAM,EAAE,CAAC,qBAAU,CAAC,KAAK,CAAC,cAAc,EAAE,qBAAU,CAAC,KAAK,CAAC,SAAS,EAAE,qBAAU,CAAC,KAAK,CAAC,WAAW,CAAC;IACnG,MAAM,EAAE,CAAC,qBAAU,CAAC,KAAK,CAAC,WAAW,EAAE,qBAAU,CAAC,KAAK,CAAC,gBAAgB,EAAE,qBAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC5G,OAAO,EAAE,CAAC,qBAAU,CAAC,KAAK,CAAC,gBAAgB,EAAE,qBAAU,CAAC,KAAK,CAAC,iBAAiB,EAAE,qBAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACvH,MAAM,EAAE,CAAC,qBAAU,CAAC,KAAK,CAAC,OAAO,EAAE,qBAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;CAChE,CAAC;AAEF,MAAa,GAAG;IAGJ,MAAM,KAAK,KAAK;QACpB,MAAM,SAAS,GAAG,IAAA,uBAAY,GAAE,CAAC;QACjC,IAAI,SAAS,CAAC,sBAAsB,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAC;gBAChG,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;YAChG,CAAC;YACD,IAAI,SAAS,CAAC,eAAe,IAAI,SAAS,CAAC,mBAAmB,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,eAAe,IAAI,SAAS,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC,kBAAkB,EAAE,CAAC;gBAC/F,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;YAC5G,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,SAAS,CAAC,sBAAsB,CAAC;QACtD,MAAM,UAAU,GAAG,SAAS,CAAC,oBAAoB,IAAI,KAAK,CAAC;QAC3D,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,SAAS,CAAC,eAAe,IAAI,KAAK,CAAC;QACtD,MAAM,YAAY,GAAG,SAAS,CAAC,wBAAwB,IAAI,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,GAAG,EAAE,CAChB,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QAC7H,MAAM,MAAM,GAAG,IAAA,uBAAY,EACvB,SAAS,CAAC,kBAAkB;YACxB,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,gCAAgC,SAAS,CAAC,kBAAkB,6BAA6B,EAAE;YACxH,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAC1B,CAAC;QACF,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC;YAC5B,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,UAAU;YACtB,GAAG,CAAC,SAAS,CAAC,kBAAkB;gBAC5B,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE;gBACtF,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;SAC3B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,wBAAa,GAAE,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAE1G,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;IAEO,MAAM,CAAC,iBAAiB,CAAC,UAAkB;QAC/C,MAAM,aAAa,GAAG,IAAA,yBAAgB,EAAC;YACnC,GAAG,EAAE,gCAAgC,UAAU,6BAA6B;YAC5E,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SAChB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAA,wBAAe,EAAC;YACjC,8DAA8D;YAC9D,GAAG,EAAE,aAAoB;SAC5B,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAsB,OAAgC;QACvE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACrB,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU;YAC5C,GAAG,EAAE,OAAO,CAAC,QAAQ;YACrB,GAAG,EAAE,OAAO,CAAC,OAAO;YACpB,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC;YAClC,GAAG,OAAO,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,WAAW;IACf,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,cAAc,CAAsB,OAAgC,EAAE,QAAsB,EAAE,aAAgC;QACvI,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7C,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,OAAO,KAAK,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,QAAsB,EAAE,aAAgC;QAC7E,QAAQ,CAAC,SAAS,CACd,YAAY,EACZ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,oDAAoD,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,EAAE,CAC1H,CAAC;IACN,CAAC;IAEO,MAAM,CAAC,qBAAqB,CAAC,OAA0B;QAC3D,MAAM,KAAK,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACnC,IAAI,OAAO,EAAE,MAAM,KAAK,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,EAAE,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,OAAO,EAAE,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,cAAc,CAA+B,OAAwB;QACxE,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC;YAC5B,KAAK,EAAE,IAAI;YACX,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,UAAU,EAAE,OAAO,CAAC,QAAQ;YAC5B,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;YAC/B,GAAG,EACC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,4BAA4B,CAAC,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO;gBACrH,CAAC,CAAC,+BAA+B,OAAO,CAAC,GAAG,4BAA4B;gBACxE,CAAC,CAAC,OAAO,CAAC,GAAG;SACxB,CAAC,CAAC;QACH,oBAAO,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,4BAAC;IACjE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAA+B,KAAa,EAAE,QAA+B;QAC5F,IAAI,CAAC;YACD,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;YACrC,QAAO,IAAI,CAAC,eAAe,mCAApB,IAAI,CAAC,eAAe,CAAI,MAAM,CAAC,EAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAA+B,KAAa;QAC3D,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/C,QAAO,IAAI,CAAC,eAAe,mCAApB,IAAI,CAAC,eAAe,CAAI,MAAM,CAAC,EAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED,8DAA8D;IACtD,MAAM,CAAC,eAAe,CAA+B,MAAW;QACpE,MAAM,SAAS,IAAO,SAAS,mCAAb,IAAI,SAAS,EAAK,CAAA,CAAC;QACrC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACrB,EAAE,EAAE,GAAG;YACP,OAAO,EAAE,GAAG;YACZ,MAAM,EAAE,GAAG;YACX,QAAQ,EAAE,GAAG;YACb,UAAU,EAAE,GAAG;YACf,WAAW,EAAE,GAAG;YAChB,OAAO;YACP,UAAU,EAAE,MAAM;SACrB,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,8DAA8D;IACtD,MAAM,CAAC,cAAc,CAAC,GAAQ;QAClC,IAAI,GAAG,YAAY,qBAAU,EAAE,CAAC;YAC5B,8DAA8D;YAC9D,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAW,CAAC,EAAE,CAAC;gBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YAClD,CAAC;YACD,8DAA8D;YAC9D,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAW,CAAC,EAAE,CAAC;gBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;YAC1E,CAAC;YACD,8DAA8D;YAC9D,IAAI,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAW,CAAC,EAAE,CAAC;gBACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAChG,CAAC;YACD,8DAA8D;YAC9D,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAW,CAAC,EAAE,CAAC;gBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YACpH,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC;IACd,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAa;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAoB;QAChD,IAAI,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,MAAM,CAAC;gBAClB,CAAC;YACL,CAAC;QACL,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClE,IAAI,OAAO,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,MAAM,CAAC;gBAClB,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,OAA6B;QACxD,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACxG,MAAM,SAAS,GAAG,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC1G,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACxC,CAAC;;AAjML,kBAkMC"}

package/dist/src/auth/provider.d.ts

@@ -0,0 +1,15 @@
+import { Serializable } from '../types';
+interface ResetToken<T = any> {
+    token: string;
+    data: T;
+    generationTime: number;
+    verifier: string;
+}
+export declare class Auth {
+    static hashPassword(password: string, rounds?: number): Promise<string>;
+    static verifyHash(password: string, hash: string): Promise<boolean>;
+    static generateResetToken(data: Serializable): Promise<ResetToken>;
+    static decodeResetToken<T>(token: string): Promise<ResetToken<T>>;
+}
+export {};
+//# sourceMappingURL=provider.d.ts.map

package/dist/src/auth/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/auth/provider.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAGxC,UAAU,UAAU,CAAC,CAAC,GAAG,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,CAAC;IACR,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,IAAI;IACb,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAInE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;WAItD,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;WAmB3D,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;CAc1E"}

package/dist/src/auth/provider.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Auth = void 0;
+const tslib_1 = require("tslib");
+const bcrypt_1 = tslib_1.__importDefault(require("bcrypt"));
+const serialization_1 = require("../helpers/data/serialization");
+const crypto_1 = require("../helpers/security/crypto");
+/*@ts-ignore*/
+var { __ΩSerializable } = require('../types');
+const __ΩResetToken = ['T', 'token', 'data', 'generationTime', 'verifier', 'ResetToken', '"c!P&4"e"!4#\'4$&4%Mw&y'];
+class Auth {
+    static hashPassword(password, rounds = 10) {
+        return bcrypt_1.default.hash(password, rounds);
+    }
+    static verifyHash(password, hash) {
+        return bcrypt_1.default.compare(password, hash);
+    }
+    static async generateResetToken(data) {
+        const generationTime = Date.now();
+        const serializedData = (0, serialization_1.toJson)(data);
+        const randomBuf = await (0, crypto_1.randomBytes)(16);
+        const bufSize = 4 + 16 + serializedData.length;
+        const tokenBuf = Buffer.alloc(bufSize);
+        tokenBuf.writeUInt32BE(Math.floor(generationTime / 1000), 0);
+        randomBuf.copy(tokenBuf, 4);
+        tokenBuf.write(serializedData, 20);
+        return {
+            data,
+            generationTime,
+            verifier: randomBuf.toString('base64'),
+            token: tokenBuf.toString('base64')
+        };
+    }
+    static async decodeResetToken(token) {
+        const tokenBuf = Buffer.from('token', 'base64');
+        const generationTime = tokenBuf.readUInt32BE(0) * 1000;
+        const randomBuf = tokenBuf.slice(4, 20);
+        const serializedData = tokenBuf.slice(20).toString('utf8');
+        const data = (serialization_1.fromJson.Ω = [['!']], (0, serialization_1.fromJson)(serializedData));
+        return {
+            token,
+            data,
+            generationTime,
+            verifier: randomBuf.toString('base64')
+        };
+    }
+}
+exports.Auth = Auth;
+Auth.__type = ['password', 'rounds', 'hashPassword', 'hash', 'verifyHash', () => __ΩSerializable, 'data', () => __ΩResetToken, 'generateResetToken', 'token', () => __ΩResetToken, 'decodeResetToken', 'Auth', 'P&2!"2"&`0#sP&2!&2$)`0%sPn&2\'n(`0)sP&2*"o+"`0,s5w-'];
+//# sourceMappingURL=provider.js.map

package/dist/src/auth/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../src/auth/provider.ts"],"names":[],"mappings":";;;;AAAA,4DAA4B;AAE5B,iEAAiE;AACjE,uDAAyD;;kCAC5B,UAAU;;AAUvC,MAAa,IAAI;IACb,MAAM,CAAC,YAAY,CAAC,QAAgB,EAAE,MAAM,GAAG,EAAE;QAC7C,OAAO,gBAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,QAAgB,EAAE,IAAY;QAC5C,OAAO,gBAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAkB;QAC9C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,cAAc,GAAG,IAAA,sBAAM,EAAC,IAAI,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC;QAE/C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5B,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAEnC,OAAO;YACH,IAAI;YACJ,cAAc;YACd,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACtC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACrC,CAAC;IACN,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAI,KAAa;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,IAAG,wBAAQ,cAAR,IAAA,wBAAQ,EAAI,cAAc,CAAC,CAAA,CAAC;QAEzC,OAAO;YACH,KAAK;YACL,IAAI;YACJ,cAAc;YACd,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACzC,CAAC;IACN,CAAC;;AAzCL,oBA0CC"}

package/dist/src/cli/dksf-dev.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=dksf-dev.d.ts.map

package/dist/src/cli/dksf-dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dksf-dev.d.ts","sourceRoot":"","sources":["../../../src/cli/dksf-dev.ts"],"names":[],"mappings":""}