emilsoftware-utilities 2.0.0-dev.67 → 2.0.0-dev.69

package/dist/accessi-module/Console/generated/model/federatedAuthenticationResultDto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federatedAuthenticationResultDto.js","sourceRoot":"","sources":["../../../../../src/accessi-module/Console/generated/model/federatedAuthenticationResultDto.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * Generated by orval v6.31.0 🍺\n * Do not edit manually.\n * Accessi API\n * OpenAPI spec version: 1.0\n */\nimport type { LoginResult } from './loginResult';\nimport type { TokenResult } from './tokenResult';\n\nexport interface FederatedAuthenticationResultDto {\n  codiceUtente: number;\n  /** Profilo, grant e token della sessione Accessi. */\n  login: LoginResult;\n  /** Assente quando login.challenge richiede la verifica 2FA. */\n  token?: TokenResult;\n}\n"]}

package/dist/accessi-module/Console/generated/model/federatedExchangeResponse.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v6.31.0 🍺
+ * Do not edit manually.
+ * Accessi API
+ * OpenAPI spec version: 1.0
+ */
+import type { FederatedAuthenticationResultDto } from './federatedAuthenticationResultDto';
+import type { Status } from './status';
+export interface FederatedExchangeResponse {
+    /** Messaggio informativo restituito dalla libreria quando presente. */
+    Message?: string;
+    Result: FederatedAuthenticationResultDto;
+    Status: Status;
+}

package/dist/accessi-module/Console/generated/model/federatedExchangeResponse.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=federatedExchangeResponse.js.map

package/dist/accessi-module/Console/generated/model/federatedExchangeResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federatedExchangeResponse.js","sourceRoot":"","sources":["../../../../../src/accessi-module/Console/generated/model/federatedExchangeResponse.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * Generated by orval v6.31.0 🍺\n * Do not edit manually.\n * Accessi API\n * OpenAPI spec version: 1.0\n */\nimport type { FederatedAuthenticationResultDto } from './federatedAuthenticationResultDto';\nimport type { Status } from './status';\n\nexport interface FederatedExchangeResponse {\n  /** Messaggio informativo restituito dalla libreria quando presente. */\n  Message?: string;\n  Result: FederatedAuthenticationResultDto;\n  Status: Status;\n}\n"]}

package/dist/accessi-module/Console/generated/model/index.d.ts

@@ -36,6 +36,9 @@ export * from './createScopeRequest';
 export * from './createServiceTokenRequest';
 export * from './createServiceTokenResponse';
 export * from './errorResponse';
+export * from './exchangeFederatedIdentityRequest';
+export * from './federatedAuthenticationResultDto';
+export * from './federatedExchangeResponse';
 export * from './federatedIdentityListResponse';
 export * from './federatedIdentityResponse';
 export * from './federatedIdentityResponseDto';
@@ -81,6 +84,9 @@ export * from './menuTypeEntity';
 export * from './passwordExpiredResponse';
 export * from './permission';
 export * from './publicRegisterRequest';
+export * from './refreshTokenRequest';
+export * from './refreshTokenResponse';
+export * from './refreshTokenResult';
 export * from './registerRequest';
 export * from './registerResponse';
 export * from './resendTwoFactorRequest';

package/dist/accessi-module/Console/generated/model/index.js

@@ -52,6 +52,9 @@ __exportStar(require("./createScopeRequest"), exports);
 __exportStar(require("./createServiceTokenRequest"), exports);
 __exportStar(require("./createServiceTokenResponse"), exports);
 __exportStar(require("./errorResponse"), exports);
+__exportStar(require("./exchangeFederatedIdentityRequest"), exports);
+__exportStar(require("./federatedAuthenticationResultDto"), exports);
+__exportStar(require("./federatedExchangeResponse"), exports);
 __exportStar(require("./federatedIdentityListResponse"), exports);
 __exportStar(require("./federatedIdentityResponse"), exports);
 __exportStar(require("./federatedIdentityResponseDto"), exports);
@@ -97,6 +100,9 @@ __exportStar(require("./menuTypeEntity"), exports);
 __exportStar(require("./passwordExpiredResponse"), exports);
 __exportStar(require("./permission"), exports);
 __exportStar(require("./publicRegisterRequest"), exports);
+__exportStar(require("./refreshTokenRequest"), exports);
+__exportStar(require("./refreshTokenResponse"), exports);
+__exportStar(require("./refreshTokenResult"), exports);
 __exportStar(require("./registerRequest"), exports);
 __exportStar(require("./registerResponse"), exports);
 __exportStar(require("./resendTwoFactorRequest"), exports);

package/dist/accessi-module/Console/generated/model/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/accessi-module/Console/generated/model/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,qDAAmC;AACnC,qEAAmD;AACnD,kEAAgD;AAChD,mDAAiC;AACjC,iEAA+C;AAC/C,+DAA6C;AAC7C,mEAAiD;AACjD,6DAA2C;AAC3C,iEAA+C;AAC/C,gEAA8C;AAC9C,0DAAwC;AACxC,2DAAyC;AACzC,4DAA0C;AAC1C,gEAA8C;AAC9C,gEAA8C;AAC9C,gEAA8C;AAC9C,8DAA4C;AAC5C,+DAA6C;AAC7C,6DAA2C;AAC3C,4DAA0C;AAC1C,mEAAiD;AACjD,mEAAiD;AACjD,+DAA6C;AAC7C,4DAA0C;AAC1C,sEAAoD;AACpD,2DAAyC;AACzC,sDAAoC;AACpC,0DAAwC;AACxC,uDAAqC;AACrC,8DAA4C;AAC5C,+DAA6C;AAC7C,kDAAgC;AAChC,kEAAgD;AAChD,8DAA4C;AAC5C,iEAA+C;AAC/C,kEAAgD;AAChD,8DAA4C;AAC5C,iEAA+C;AAC/C,iDAA+B;AAC/B,sDAAoC;AACpC,0DAAwC;AACxC,4DAA0C;AAC1C,6DAA2C;AAC3C,+DAA6C;AAC7C,0DAAwC;AACxC,yDAAuC;AACvC,mDAAiC;AACjC,qDAAmC;AACnC,qDAAmC;AACnC,sDAAoC;AACpC,sDAAoC;AACpC,2DAAyC;AACzC,6DAA2C;AAC3C,0DAAwC;AACxC,2DAAyC;AACzC,gEAA8C;AAC9C,mDAAiC;AACjC,qDAAmC;AACnC,mDAAiC;AACjC,kEAAgD;AAChD,yDAAuC;AACvC,kEAAgD;AAChD,mEAAiD;AACjD,0DAAwC;AACxC,mDAAiC;AACjC,oDAAkC;AAClC,kDAAgC;AAChC,iDAA+B;AAC/B,kDAAgC;AAChC,gDAA8B;AAC9B,+DAA6C;AAC7C,gEAA8C;AAC9C,+CAA6B;AAC7B,mDAAiC;AACjC,4DAA0C;AAC1C,+CAA6B;AAC7B,0DAAwC;AACxC,oDAAkC;AAClC,qDAAmC;AACnC,2DAAyC;AACzC,yCAAuB;AACvB,8CAA4B;AAC5B,8DAA4C;AAC5C,oDAAkC;AAClC,qDAAmC;AACnC,gDAA8B;AAC9B,kEAAgD;AAChD,iEAA+C;AAC/C,oDAAkC;AAClC,yDAAuC;AACvC,kEAAgD;AAChD,yDAAuC;AACvC,6DAA2C;AAC3C,+EAA6D;AAC7D,2DAAyC;AACzC,2CAAyB;AACzB,+CAA6B;AAC7B,yDAAuC;AACvC,gDAA8B;AAC9B,oDAAkC;AAClC,0DAAwC;AACxC,gEAA8C;AAC9C,2EAAyD;AACzD,+DAA6C;AAC7C,mEAAiD;AACjD,mEAAiD;AACjD,4DAA0C;AAC1C,sEAAoD;AACpD,2DAAyC;AACzC,sDAAoC;AACpC,0DAAwC;AACxC,uDAAqC;AACrC,4CAA0B;AAC1B,8DAA4C;AAC5C,kDAAgC;AAChC,uDAAqC;AACrC,2DAAyC","sourcesContent":["/**\n * Generated by orval v6.31.0 🍺\n * Do not edit manually.\n * Accessi API\n * OpenAPI spec version: 1.0\n */\n\nexport * from './abilitazioneMenu';\nexport * from './abilitazioneMenuTipoAbilitazione';\nexport * from './accessiIntrospectionResultDto';\nexport * from './actionResponse';\nexport * from './adminBootstrapStatusResponse';\nexport * from './adminBootstrapStatusResult';\nexport * from './assignPermissionsToUserRequest';\nexport * from './assignRolesToUserRequest';\nexport * from './authenticatedTokenPayloadDto';\nexport * from './authenticatedUserPayloadDto';\nexport * from './bootstrapAdminRequest';\nexport * from './bootstrapAdminResponse';\nexport * from './bootstrapAdminResultDto';\nexport * from './confirmResetPasswordRequest';\nexport * from './consoleEntryExchangeRequest';\nexport * from './consoleEntrySessionResponse';\nexport * from './consoleEntrySessionResult';\nexport * from './consoleEntryTicketResponse';\nexport * from './consoleEntryTicketResult';\nexport * from './consoleEntryTokenResult';\nexport * from './createFederatedIdentityRequest';\nexport * from './createFederatedProviderRequest';\nexport * from './createFederatedUserRequest';\nexport * from './createFilterTypeRequest';\nexport * from './createFilterTypeRequestFlgEnabled';\nexport * from './createMenuGroupRequest';\nexport * from './createMenuRequest';\nexport * from './createMenuTypeRequest';\nexport * from './createScopeRequest';\nexport * from './createServiceTokenRequest';\nexport * from './createServiceTokenResponse';\nexport * from './errorResponse';\nexport * from './federatedIdentityListResponse';\nexport * from './federatedIdentityResponse';\nexport * from './federatedIdentityResponseDto';\nexport * from './federatedProviderListResponse';\nexport * from './federatedProviderResponse';\nexport * from './federatedProviderResponseDto';\nexport * from './filtriUtente';\nexport * from './getFiltriResponse';\nexport * from './getFiltriUtenteParams';\nexport * from './getFiltriUtenteResponse';\nexport * from './getGroupsWithMenusParams';\nexport * from './getGroupsWithMenusResponse';\nexport * from './getMenuScopesResponse';\nexport * from './getMenuTypesResponse';\nexport * from './getMenusParams';\nexport * from './getMenusResponse';\nexport * from './getRolesResponse';\nexport * from './getSchemaResponse';\nexport * from './getScopesResponse';\nexport * from './getServiceTokensParams';\nexport * from './getServiceTokensResponse';\nexport * from './getUserByTokenRequest';\nexport * from './getUserByTokenResponse';\nexport * from './getUserRolesAndGrantsParams';\nexport * from './getUsersParams';\nexport * from './getUsersResponse';\nexport * from './getUsersResult';\nexport * from './getUsersResultExtensionFields';\nexport * from './groupWithMenusEntity';\nexport * from './introspectAccessiTokenRequest';\nexport * from './introspectAccessiTokenResponse';\nexport * from './issuedServiceTokenDto';\nexport * from './loginAsRequest';\nexport * from './loginAsResponse';\nexport * from './loginAsResult';\nexport * from './loginRequest';\nexport * from './loginResponse';\nexport * from './loginResult';\nexport * from './loginResultExtensionFields';\nexport * from './loginResultPasswordRequired';\nexport * from './menuEntity';\nexport * from './menuTypeEntity';\nexport * from './passwordExpiredResponse';\nexport * from './permission';\nexport * from './publicRegisterRequest';\nexport * from './registerRequest';\nexport * from './registerResponse';\nexport * from './resendTwoFactorRequest';\nexport * from './role';\nexport * from './ruoliMenu';\nexport * from './ruoliMenuTipoAbilitazione';\nexport * from './schemaDdlResult';\nexport * from './schemaDdlSection';\nexport * from './scopeEntity';\nexport * from './sendResetPasswordEmailRequest';\nexport * from './serveResetPasswordPageParams';\nexport * from './serviceTokenDto';\nexport * from './setMenuScopesRequest';\nexport * from './setPasswordLoginPolicyRequest';\nexport * from './setScopeMenusRequest';\nexport * from './setStatoRegistrazioneDto';\nexport * from './setStatoRegistrazioneDtoStatoRegistrazione';\nexport * from './setUserPasswordRequest';\nexport * from './status';\nexport * from './tipoFiltro';\nexport * from './tipoFiltroFlgEnabled';\nexport * from './tokenResult';\nexport * from './tokenResultType';\nexport * from './twoFactorChallengeDto';\nexport * from './twoFactorChallengeDtoMethod';\nexport * from './twoFactorChallengeDtoTwoFactorRequired';\nexport * from './updateEnabledStatusRequest';\nexport * from './updateFederatedIdentityRequest';\nexport * from './updateFederatedProviderRequest';\nexport * from './updateFilterTypeRequest';\nexport * from './updateFilterTypeRequestFlgEnabled';\nexport * from './updateMenuGroupRequest';\nexport * from './updateMenuRequest';\nexport * from './updateMenuTypeRequest';\nexport * from './updateScopeRequest';\nexport * from './userDto';\nexport * from './userDtoStatoRegistrazione';\nexport * from './userGrantsDto';\nexport * from './userGrantsResponse';\nexport * from './verifyTwoFactorRequest';"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/accessi-module/Console/generated/model/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,qDAAmC;AACnC,qEAAmD;AACnD,kEAAgD;AAChD,mDAAiC;AACjC,iEAA+C;AAC/C,+DAA6C;AAC7C,mEAAiD;AACjD,6DAA2C;AAC3C,iEAA+C;AAC/C,gEAA8C;AAC9C,0DAAwC;AACxC,2DAAyC;AACzC,4DAA0C;AAC1C,gEAA8C;AAC9C,gEAA8C;AAC9C,gEAA8C;AAC9C,8DAA4C;AAC5C,+DAA6C;AAC7C,6DAA2C;AAC3C,4DAA0C;AAC1C,mEAAiD;AACjD,mEAAiD;AACjD,+DAA6C;AAC7C,4DAA0C;AAC1C,sEAAoD;AACpD,2DAAyC;AACzC,sDAAoC;AACpC,0DAAwC;AACxC,uDAAqC;AACrC,8DAA4C;AAC5C,+DAA6C;AAC7C,kDAAgC;AAChC,qEAAmD;AACnD,qEAAmD;AACnD,8DAA4C;AAC5C,kEAAgD;AAChD,8DAA4C;AAC5C,iEAA+C;AAC/C,kEAAgD;AAChD,8DAA4C;AAC5C,iEAA+C;AAC/C,iDAA+B;AAC/B,sDAAoC;AACpC,0DAAwC;AACxC,4DAA0C;AAC1C,6DAA2C;AAC3C,+DAA6C;AAC7C,0DAAwC;AACxC,yDAAuC;AACvC,mDAAiC;AACjC,qDAAmC;AACnC,qDAAmC;AACnC,sDAAoC;AACpC,sDAAoC;AACpC,2DAAyC;AACzC,6DAA2C;AAC3C,0DAAwC;AACxC,2DAAyC;AACzC,gEAA8C;AAC9C,mDAAiC;AACjC,qDAAmC;AACnC,mDAAiC;AACjC,kEAAgD;AAChD,yDAAuC;AACvC,kEAAgD;AAChD,mEAAiD;AACjD,0DAAwC;AACxC,mDAAiC;AACjC,oDAAkC;AAClC,kDAAgC;AAChC,iDAA+B;AAC/B,kDAAgC;AAChC,gDAA8B;AAC9B,+DAA6C;AAC7C,gEAA8C;AAC9C,+CAA6B;AAC7B,mDAAiC;AACjC,4DAA0C;AAC1C,+CAA6B;AAC7B,0DAAwC;AACxC,wDAAsC;AACtC,yDAAuC;AACvC,uDAAqC;AACrC,oDAAkC;AAClC,qDAAmC;AACnC,2DAAyC;AACzC,yCAAuB;AACvB,8CAA4B;AAC5B,8DAA4C;AAC5C,oDAAkC;AAClC,qDAAmC;AACnC,gDAA8B;AAC9B,kEAAgD;AAChD,iEAA+C;AAC/C,oDAAkC;AAClC,yDAAuC;AACvC,kEAAgD;AAChD,yDAAuC;AACvC,6DAA2C;AAC3C,+EAA6D;AAC7D,2DAAyC;AACzC,2CAAyB;AACzB,+CAA6B;AAC7B,yDAAuC;AACvC,gDAA8B;AAC9B,oDAAkC;AAClC,0DAAwC;AACxC,gEAA8C;AAC9C,2EAAyD;AACzD,+DAA6C;AAC7C,mEAAiD;AACjD,mEAAiD;AACjD,4DAA0C;AAC1C,sEAAoD;AACpD,2DAAyC;AACzC,sDAAoC;AACpC,0DAAwC;AACxC,uDAAqC;AACrC,4CAA0B;AAC1B,8DAA4C;AAC5C,kDAAgC;AAChC,uDAAqC;AACrC,2DAAyC","sourcesContent":["/**\n * Generated by orval v6.31.0 🍺\n * Do not edit manually.\n * Accessi API\n * OpenAPI spec version: 1.0\n */\n\nexport * from './abilitazioneMenu';\nexport * from './abilitazioneMenuTipoAbilitazione';\nexport * from './accessiIntrospectionResultDto';\nexport * from './actionResponse';\nexport * from './adminBootstrapStatusResponse';\nexport * from './adminBootstrapStatusResult';\nexport * from './assignPermissionsToUserRequest';\nexport * from './assignRolesToUserRequest';\nexport * from './authenticatedTokenPayloadDto';\nexport * from './authenticatedUserPayloadDto';\nexport * from './bootstrapAdminRequest';\nexport * from './bootstrapAdminResponse';\nexport * from './bootstrapAdminResultDto';\nexport * from './confirmResetPasswordRequest';\nexport * from './consoleEntryExchangeRequest';\nexport * from './consoleEntrySessionResponse';\nexport * from './consoleEntrySessionResult';\nexport * from './consoleEntryTicketResponse';\nexport * from './consoleEntryTicketResult';\nexport * from './consoleEntryTokenResult';\nexport * from './createFederatedIdentityRequest';\nexport * from './createFederatedProviderRequest';\nexport * from './createFederatedUserRequest';\nexport * from './createFilterTypeRequest';\nexport * from './createFilterTypeRequestFlgEnabled';\nexport * from './createMenuGroupRequest';\nexport * from './createMenuRequest';\nexport * from './createMenuTypeRequest';\nexport * from './createScopeRequest';\nexport * from './createServiceTokenRequest';\nexport * from './createServiceTokenResponse';\nexport * from './errorResponse';\nexport * from './exchangeFederatedIdentityRequest';\nexport * from './federatedAuthenticationResultDto';\nexport * from './federatedExchangeResponse';\nexport * from './federatedIdentityListResponse';\nexport * from './federatedIdentityResponse';\nexport * from './federatedIdentityResponseDto';\nexport * from './federatedProviderListResponse';\nexport * from './federatedProviderResponse';\nexport * from './federatedProviderResponseDto';\nexport * from './filtriUtente';\nexport * from './getFiltriResponse';\nexport * from './getFiltriUtenteParams';\nexport * from './getFiltriUtenteResponse';\nexport * from './getGroupsWithMenusParams';\nexport * from './getGroupsWithMenusResponse';\nexport * from './getMenuScopesResponse';\nexport * from './getMenuTypesResponse';\nexport * from './getMenusParams';\nexport * from './getMenusResponse';\nexport * from './getRolesResponse';\nexport * from './getSchemaResponse';\nexport * from './getScopesResponse';\nexport * from './getServiceTokensParams';\nexport * from './getServiceTokensResponse';\nexport * from './getUserByTokenRequest';\nexport * from './getUserByTokenResponse';\nexport * from './getUserRolesAndGrantsParams';\nexport * from './getUsersParams';\nexport * from './getUsersResponse';\nexport * from './getUsersResult';\nexport * from './getUsersResultExtensionFields';\nexport * from './groupWithMenusEntity';\nexport * from './introspectAccessiTokenRequest';\nexport * from './introspectAccessiTokenResponse';\nexport * from './issuedServiceTokenDto';\nexport * from './loginAsRequest';\nexport * from './loginAsResponse';\nexport * from './loginAsResult';\nexport * from './loginRequest';\nexport * from './loginResponse';\nexport * from './loginResult';\nexport * from './loginResultExtensionFields';\nexport * from './loginResultPasswordRequired';\nexport * from './menuEntity';\nexport * from './menuTypeEntity';\nexport * from './passwordExpiredResponse';\nexport * from './permission';\nexport * from './publicRegisterRequest';\nexport * from './refreshTokenRequest';\nexport * from './refreshTokenResponse';\nexport * from './refreshTokenResult';\nexport * from './registerRequest';\nexport * from './registerResponse';\nexport * from './resendTwoFactorRequest';\nexport * from './role';\nexport * from './ruoliMenu';\nexport * from './ruoliMenuTipoAbilitazione';\nexport * from './schemaDdlResult';\nexport * from './schemaDdlSection';\nexport * from './scopeEntity';\nexport * from './sendResetPasswordEmailRequest';\nexport * from './serveResetPasswordPageParams';\nexport * from './serviceTokenDto';\nexport * from './setMenuScopesRequest';\nexport * from './setPasswordLoginPolicyRequest';\nexport * from './setScopeMenusRequest';\nexport * from './setStatoRegistrazioneDto';\nexport * from './setStatoRegistrazioneDtoStatoRegistrazione';\nexport * from './setUserPasswordRequest';\nexport * from './status';\nexport * from './tipoFiltro';\nexport * from './tipoFiltroFlgEnabled';\nexport * from './tokenResult';\nexport * from './tokenResultType';\nexport * from './twoFactorChallengeDto';\nexport * from './twoFactorChallengeDtoMethod';\nexport * from './twoFactorChallengeDtoTwoFactorRequired';\nexport * from './updateEnabledStatusRequest';\nexport * from './updateFederatedIdentityRequest';\nexport * from './updateFederatedProviderRequest';\nexport * from './updateFilterTypeRequest';\nexport * from './updateFilterTypeRequestFlgEnabled';\nexport * from './updateMenuGroupRequest';\nexport * from './updateMenuRequest';\nexport * from './updateMenuTypeRequest';\nexport * from './updateScopeRequest';\nexport * from './userDto';\nexport * from './userDtoStatoRegistrazione';\nexport * from './userGrantsDto';\nexport * from './userGrantsResponse';\nexport * from './verifyTwoFactorRequest';"]}

package/dist/accessi-module/Console/generated/model/loginResult.d.ts

@@ -23,6 +23,8 @@ export interface LoginResult {
     filtri?: FiltriUtente[] | null;
     /** Il primo passo email richiede ora la password. Nessun utente o token viene restituito. */
     passwordRequired?: LoginResultPasswordRequired;
+    /** Refresh token, presente solo se jwtOptions.refreshExpiresIn e configurato. */
+    refreshToken?: TokenResult;
     /** Token, assente durante la verifica del codice. */
     token?: TokenResult;
     /** Abilitazioni e ruoli utente */

package/dist/accessi-module/Console/generated/model/loginResult.js.map

@@ -1 +1 @@
-{"version":3,"file":"loginResult.js","sourceRoot":"","sources":["../../../../../src/accessi-module/Console/generated/model/loginResult.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * Generated by orval v6.31.0 🍺\n * Do not edit manually.\n * Accessi API\n * OpenAPI spec version: 1.0\n */\nimport type { TwoFactorChallengeDto } from './twoFactorChallengeDto';\nimport type { LoginResultExtensionFields } from './loginResultExtensionFields';\nimport type { FiltriUtente } from './filtriUtente';\nimport type { LoginResultPasswordRequired } from './loginResultPasswordRequired';\nimport type { TokenResult } from './tokenResult';\nimport type { UserGrantsDto } from './userGrantsDto';\nimport type { UserDto } from './userDto';\n\nexport interface LoginResult {\n  /** Presente solo quando serve il codice. Profilo, grant e token sono assenti fino alla verifica. */\n  challenge?: TwoFactorChallengeDto;\n  /** Extension Fields */\n  extensionFields?: LoginResultExtensionFields;\n  /**\n   * Filtri utente\n   * @nullable\n   */\n  filtri?: FiltriUtente[] | null;\n  /** Il primo passo email richiede ora la password. Nessun utente o token viene restituito. */\n  passwordRequired?: LoginResultPasswordRequired;\n  /** Token, assente durante la verifica del codice. */\n  token?: TokenResult;\n  /** Abilitazioni e ruoli utente */\n  userGrants?: UserGrantsDto;\n  /** Dati utente, presenti solo al completamento del login. */\n  utente?: UserDto;\n}\n"]}
+{"version":3,"file":"loginResult.js","sourceRoot":"","sources":["../../../../../src/accessi-module/Console/generated/model/loginResult.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * Generated by orval v6.31.0 🍺\n * Do not edit manually.\n * Accessi API\n * OpenAPI spec version: 1.0\n */\nimport type { TwoFactorChallengeDto } from './twoFactorChallengeDto';\nimport type { LoginResultExtensionFields } from './loginResultExtensionFields';\nimport type { FiltriUtente } from './filtriUtente';\nimport type { LoginResultPasswordRequired } from './loginResultPasswordRequired';\nimport type { TokenResult } from './tokenResult';\nimport type { UserGrantsDto } from './userGrantsDto';\nimport type { UserDto } from './userDto';\n\nexport interface LoginResult {\n  /** Presente solo quando serve il codice. Profilo, grant e token sono assenti fino alla verifica. */\n  challenge?: TwoFactorChallengeDto;\n  /** Extension Fields */\n  extensionFields?: LoginResultExtensionFields;\n  /**\n   * Filtri utente\n   * @nullable\n   */\n  filtri?: FiltriUtente[] | null;\n  /** Il primo passo email richiede ora la password. Nessun utente o token viene restituito. */\n  passwordRequired?: LoginResultPasswordRequired;\n  /** Refresh token, presente solo se jwtOptions.refreshExpiresIn e configurato. */\n  refreshToken?: TokenResult;\n  /** Token, assente durante la verifica del codice. */\n  token?: TokenResult;\n  /** Abilitazioni e ruoli utente */\n  userGrants?: UserGrantsDto;\n  /** Dati utente, presenti solo al completamento del login. */\n  utente?: UserDto;\n}\n"]}

package/dist/accessi-module/Console/generated/model/refreshTokenRequest.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Generated by orval v6.31.0 🍺
+ * Do not edit manually.
+ * Accessi API
+ * OpenAPI spec version: 1.0
+ */
+export interface RefreshTokenRequest {
+    /** Refresh token emesso al login, 2FA o SSO. */
+    refreshToken: string;
+}

package/dist/accessi-module/Console/generated/model/refreshTokenRequest.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Generated by orval v6.31.0 🍺
+ * Do not edit manually.
+ * Accessi API
+ * OpenAPI spec version: 1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=refreshTokenRequest.js.map

package/dist/accessi-module/Console/generated/model/refreshTokenRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refreshTokenRequest.js","sourceRoot":"","sources":["../../../../../src/accessi-module/Console/generated/model/refreshTokenRequest.ts"],"names":[],"mappings":";AAAA;;;;;GAKG","sourcesContent":["/**\n * Generated by orval v6.31.0 🍺\n * Do not edit manually.\n * Accessi API\n * OpenAPI spec version: 1.0\n */\n\nexport interface RefreshTokenRequest {\n  /** Refresh token emesso al login, 2FA o SSO. */\n  refreshToken: string;\n}\n"]}

package/dist/accessi-module/Console/generated/model/refreshTokenResponse.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v6.31.0 🍺
+ * Do not edit manually.
+ * Accessi API
+ * OpenAPI spec version: 1.0
+ */
+import type { RefreshTokenResult } from './refreshTokenResult';
+import type { Status } from './status';
+export interface RefreshTokenResponse {
+    /** Messaggio informativo restituito dalla libreria quando presente. */
+    Message?: string;
+    Result: RefreshTokenResult;
+    Status: Status;
+}

package/dist/accessi-module/Console/generated/model/refreshTokenResponse.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=refreshTokenResponse.js.map

package/dist/accessi-module/Console/generated/model/refreshTokenResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refreshTokenResponse.js","sourceRoot":"","sources":["../../../../../src/accessi-module/Console/generated/model/refreshTokenResponse.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * Generated by orval v6.31.0 🍺\n * Do not edit manually.\n * Accessi API\n * OpenAPI spec version: 1.0\n */\nimport type { RefreshTokenResult } from './refreshTokenResult';\nimport type { Status } from './status';\n\nexport interface RefreshTokenResponse {\n  /** Messaggio informativo restituito dalla libreria quando presente. */\n  Message?: string;\n  Result: RefreshTokenResult;\n  Status: Status;\n}\n"]}

package/dist/accessi-module/Console/generated/model/refreshTokenResult.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by orval v6.31.0 🍺
+ * Do not edit manually.
+ * Accessi API
+ * OpenAPI spec version: 1.0
+ */
+import type { TokenResult } from './tokenResult';
+export interface RefreshTokenResult {
+    /** Nuovo refresh token, se abilitato. */
+    refreshToken?: TokenResult;
+    /** Nuovo access token. */
+    token: TokenResult;
+}

package/dist/accessi-module/Console/generated/model/refreshTokenResult.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=refreshTokenResult.js.map

package/dist/accessi-module/Console/generated/model/refreshTokenResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refreshTokenResult.js","sourceRoot":"","sources":["../../../../../src/accessi-module/Console/generated/model/refreshTokenResult.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * Generated by orval v6.31.0 🍺\n * Do not edit manually.\n * Accessi API\n * OpenAPI spec version: 1.0\n */\nimport type { TokenResult } from './tokenResult';\n\nexport interface RefreshTokenResult {\n  /** Nuovo refresh token, se abilitato. */\n  refreshToken?: TokenResult;\n  /** Nuovo access token. */\n  token: TokenResult;\n}\n"]}

package/dist/accessi-module/Console/wiki.js

@@ -140,6 +140,7 @@ exports.WIKI_SECTIONS = [
                 ['accessi/ui', 'Percorsi degli asset Web Component frameworkless.', 'no'],
             ]),
             p(`Topologia consigliata: un solo Accessi Service possiede database, encryptionKey, SMTP, chiavi JWT e console. Gli altri backend usano resource-server e client, senza credenziali del database Accessi.`),
+            p(`Per avviare Accessi come servizio autonomo usare startAccessiService: espone /health/live, /health/ready, /health/metrics, valida la configurazione e gestisce SIGTERM/SIGINT.`),
             good('ts', [
                 "// Backend che ospita Accessi",
                 "import { initializeAccessiModule } from 'emilsoftware-utilities/accessi/server';",
@@ -171,17 +172,23 @@ exports.WIKI_SECTIONS = [
                 ['passwordExpirationDays', 'number', 'no', 'Valore predefinito: 90 giorni.'],
                 ['legacyPasswordMigrationOnStartup', 'boolean', 'no', 'Predefinito true: converte le password legacy.'],
                 ['autoUpdateDatabase', 'boolean', 'no', 'Predefinito true: riconcilia lo schema al boot.'],
-                ['jwtOptions', '{ secret, expiresIn, algorithm, issuer, audience, privateKey, publicKey, keyId }', 'sì', 'Firma e durata JWT. Default HS256; RS/ES consigliati per resource server multi-servizio.'],
+                ['jwtOptions', '{ secret, expiresIn, refreshExpiresIn, algorithm, issuer, audience, privateKey, publicKey, keyId, jwksPath, previousPublicKeys }', 'sì', 'Firma, durata, refresh token e JWKS. Default HS256; RS/ES consigliati per resource server multi-servizio.'],
                 ['emailOptions', 'EmailOptions', 'sì', 'SMTP per reset e codici email.'],
-                ['publicAuthRateLimit', 'PublicAuthRateLimitOptions', 'no', 'Limiti in-memory sugli endpoint pubblici.'],
+                ['publicAuthRateLimit', 'PublicAuthRateLimitOptions', 'no', 'Limiti per endpoint pubblici; store condiviso opzionale (Redis) per il cluster.'],
+                ['edgeRateLimit', 'AccessiEdgeRateLimitOptions', 'no', 'Limite grossolano per IP davanti alle rotte Accessi; opzionale, store condiviso supportato.'],
+                ['http', '{ cors, trustProxy, securityHeaders }', 'no', 'CORS, IP reali dietro proxy e header di sicurezza del servizio.'],
                 ['publicRegistration', '{ enabled }', 'no', 'Registrazione pubblica: disattivata per impostazione predefinita.'],
                 ['federatedAuthentication', 'FederatedAuthenticationOptions', 'no', `Abilita l'SSO generico.`],
                 ['extensionFieldsOptions', 'ExtensionFieldsOptions[]', 'no', 'Tabelle esterne allegate al profilo.'],
-                ['serviceTokens', '{ enabled, defaultTtlDays }', 'no', 'Token macchina-a-macchina, abilitati per impostazione predefinita.'],
+                ['serviceTokens', '{ enabled, defaultTtlDays, rateLimitStore }', 'no', 'Token macchina-a-macchina, abilitati per impostazione predefinita; rate limit condiviso opzionale.'],
                 ['catalogScripts', '{ enabled, folder, ... }', 'no', 'Catalog migrations SQL eseguite dopo la riconciliazione dello schema.'],
                 ['adminBootstrap', '{ enabled, superUser }', 'no', 'Token casuale a ogni avvio per creare il primo admin dalla console.'],
                 ['publicBaseUrl', 'string', 'no', 'Base URL usata solo per loggare console/OpenAPI/API.'],
+                ['consoleApiBaseUrl', 'string', 'no', 'Base URL API per la console quando UI e API sono su domini diversi.'],
                 ['openapi', 'OpenApiSetupOptions', 'no', 'Path, titolo, descrizione e enabled della documentazione OpenAPI. Default invariati.'],
+                ['consoleEntry', '{ ttlMs, store }', 'no', 'TTL e store condiviso dei ticket console (Redis per multi-istanza). Default in memoria.'],
+                ['sessionRevocation', '{ enabled, store, ttlMs }', 'no', 'Revoca sessioni per utente tramite store memory/Redis; abilita POST /api/accessi/auth/revoke-sessions.'],
+                ['refreshTokenRotation', '{ enabled, store }', 'no', 'Refresh token monouso tramite store memory/Redis; consigliato in multi-istanza.'],
                 ['logger', 'LoggerService', 'no', 'Logger Nest del sotto-app; se assente Nest usa il proprio logger.'],
                 ['bufferLogs', 'boolean', 'no', 'Buffer dei log di bootstrap del sotto-app. Default true.'],
             ]),
@@ -430,6 +437,8 @@ exports.WIKI_SECTIONS = [
             ]),
             note('warn', `Fail closed`, `Se introspection e configurata ma non raggiungibile, il resource server risponde 503. Non autorizza la richiesta.`),
             note('info', `Introspection`, `POST /api/accessi/auth/introspect restituisce active=false per token invalido, scaduto o utente disabilitato. I risultati attivi sono cachati lato resource server per 30 secondi per default.`),
+            note('info', `JWKS`, `Con RS256/ES256 Accessi pubblica la JWKS su /accessi/.well-known/jwks.json (configurabile con jwtOptions.jwksPath). Il resource server puo usare jwks.url e ruotare le chiavi con previousPublicKeys.`),
+            note('info', `Audit`, `I fallimenti di autenticazione del resource server e i blocchi edge producono eventi strutturati tramite auditAccessi; i token e i segreti vengono redatti dal Logger.`),
         ],
     },
     // -------------------------------------------------------------------------
@@ -616,6 +625,7 @@ exports.WIKI_SECTIONS = [
                 '}',
                 'return res.json({ login: result.login, token: result.token });',
             ].join('\n'), 'Login SSO'),
+            note('info', `Scambio service-to-service`, `Se il backend fratello valida il provider SSO, può scambiare { provider, subject } con POST /api/accessi/federated-auth/exchange usando un service token con scope accessi:federated:exchange. Accessi non riceve il token del provider.`),
             h(`API amministrative (superutente)`),
             list([
                 `GET/POST /api/accessi/federated-auth/providers, PATCH/DELETE providers/:provider`,
@@ -640,6 +650,8 @@ exports.WIKI_SECTIONS = [
             p(`Formato: st_<id>.<segreto> (segreto da 256 bit). Nel database si salva solo lo SHA-256 del segreto; il segreto è mostrato una sola volta. La verifica restituisce { tokenId, label, scopes }: nessun ruolo o grant.`),
             note('danger', `Non è un superutente`, `Un service token non apre le API Accessi: abilita solo le rotte della tua app che proteggi con ServiceTokenGuard.`),
             note('info', `Introspection`, `Per un backend fratello creare un service token con scope accessi:introspect e usarlo in POST /api/accessi/auth/introspect. Il resource server lo configura in introspection.serviceToken.`),
+            note('warn', `Rate limit condiviso`, `In cluster configurare serviceTokens.rateLimitStore e publicAuthRateLimit.store con createRedisRateLimitStore: i contatori in memoria valgono solo per singola istanza.`),
+            note('info', `Edge rate limit`, `Per una soglia grossolana per IP configurare edgeRateLimit: viene applicata davanti alle rotte Accessi. Il gateway/API gateway resta comunque consigliato per bot protection e limiti di connessione.`),
             good('ts', [
                 "import { ServiceTokenGuard, RequireServiceTokenScopes } from 'emilsoftware-utilities';",
                 '',
@@ -688,6 +700,7 @@ exports.WIKI_SECTIONS = [
             note('info', `Bootstrap admin`, `Con adminBootstrap.enabled il backend stampa a ogni avvio un token casuale (monouso, valido fino al riavvio). La sezione "Crea utente admin" nella schermata di login compare solo quando adminBootstrap è abilitato (stato esposto da GET /api/accessi/auth/bootstrap-admin/status): incolla il token e crea il primo admin senza email di conferma. La password è opzionale: se assente viene generata e mostrata una sola volta.`),
             note('ok', `Auto-ingresso dal frontend`, `Se un frontend ha già una sessione Accessi valida e l'utente è abilitato alla console, può aprire la console senza rifare il login: \`POST /api/accessi/console/entry\` con \`Authorization: Bearer <jwt>\` restituisce un ticket monouso; apri poi \`/api/accessi/console#entry=<ticket>\`. Il JWT non finisce mai nell'URL; il ticket dura 60 secondi ed è utilizzabile una sola volta (endpoint di scambio protetto da rate limit).`),
             note('info', `Console centralizzata`, `In una topologia multi-backend la console va ospitata una sola volta su Accessi Service. Gli altri backend possono linkarla con \`buildAccessiConsoleUrl\` di \`accessi/console\` oppure proxare \`/api/accessi/*\` sullo stesso dominio. Non copiare gli asset della console in ogni applicazione.`),
+            note('warn', `Ticket multi-istanza`, `I ticket di ingresso console sono in memoria per default. Con piu istanze configurare \`consoleEntry.store\` con \`createRedisConsoleEntryStore\`: il JWT viene cifrato e il consume e atomico.`),
         ],
     },
     // -------------------------------------------------------------------------