nicot-simple-user 1.0.0

package/dist/simple-user/send-code/send-code.service.js

@@ -0,0 +1,144 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SendCodeService = void 0;
+const common_1 = require("@nestjs/common");
+const module_builder_1 = require("../module-builder");
+const send_code_dto_1 = require("./send-code.dto");
+const aragami_1 = require("aragami");
+const nestjs_aragami_1 = require("nestjs-aragami");
+const nicot_1 = require("nicot");
+const wait_time_dto_1 = require("./wait-time.dto");
+const nicot_2 = require("nicot");
+const buildSendCodeCacheKey = (ctx) => `email:${ctx.email}:${ctx.codePurpose}`;
+class SendCodeRecord extends send_code_dto_1.SendCodeDto {
+    get cacheKey() {
+        return buildSendCodeCacheKey(this);
+    }
+}
+__decorate([
+    (0, aragami_1.CacheKey)(),
+    __metadata("design:type", Object),
+    __metadata("design:paramtypes", [])
+], SendCodeRecord.prototype, "cacheKey", null);
+class VerifyCodeAttemptRecord extends send_code_dto_1.SendCodeDto {
+    get cacheKey() {
+        return buildSendCodeCacheKey(this) + `:attempts:${this.time.getTime()}`;
+    }
+}
+__decorate([
+    (0, aragami_1.CacheKey)(),
+    __metadata("design:type", Object),
+    __metadata("design:paramtypes", [])
+], VerifyCodeAttemptRecord.prototype, "cacheKey", null);
+let SendCodeService = class SendCodeService {
+    constructor(options, aragami) {
+        this.options = options;
+        this.aragami = aragami;
+        this.logger = new common_1.ConsoleLogger('SendCodeService');
+        this.sendCodeValidTimeMs = this.options.sendCodeValidTimeMs || 10 * 60 * 1000;
+        this.sendCodeCooldownTimeMs = this.options.sendCodeCooldownTimeMs || 60 * 1000;
+        this.verifyCodeMaxAttempts = this.options.verifyCodeMaxAttempts || 5;
+        this.verifyCodeBlockTimeMs = this.options.verifyCodeBlockTimeMs || 15 * 60 * 1000;
+    }
+    async sendCode(dto, riskControlContext) {
+        const riskControlKeys = [
+            `ip:${riskControlContext.ip}:${dto.codePurpose}`,
+            `ssaid:${riskControlContext.ssaid}:${dto.codePurpose}`,
+        ];
+        if (this.sendCodeCooldownTimeMs) {
+            const cooldownChecks = await Promise.all([buildSendCodeCacheKey(dto), ...riskControlKeys].map(async (key) => {
+                const existing = await this.aragami.get(SendCodeRecord, key);
+                if (existing) {
+                    const elapsed = Date.now() - existing.sentTime.getTime();
+                    if (elapsed < this.sendCodeCooldownTimeMs) {
+                        return this.sendCodeCooldownTimeMs - elapsed;
+                    }
+                }
+            }));
+            const hitChecks = cooldownChecks.filter((s) => !!s);
+            if (hitChecks.length > 0) {
+                const waitTimeMs = Math.max(...hitChecks);
+                const waitTimeDto = new wait_time_dto_1.WaitTimeDto();
+                waitTimeDto.waitTimeMs = waitTimeMs;
+                throw new nicot_1.GenericReturnMessageDto(429, 'Please wait before requesting another code', waitTimeDto).toException();
+            }
+        }
+        if (!this.options.sendCodeGenerator) {
+            throw new nicot_2.BlankReturnMessageDto(501, 'Send code generator not configured').toException();
+        }
+        try {
+            const code = await this.options.sendCodeGenerator(dto);
+            const record = new SendCodeRecord();
+            record.email = dto.email;
+            record.codePurpose = dto.codePurpose;
+            record.code = code;
+            record.sentTime = new Date();
+            await this.aragami.set(record, {
+                ttl: this.sendCodeValidTimeMs,
+            });
+            if (this.sendCodeCooldownTimeMs) {
+                await Promise.all(riskControlKeys.map((key) => this.aragami.set(record, {
+                    ttl: this.sendCodeCooldownTimeMs,
+                    key,
+                })));
+            }
+            return new nicot_2.BlankReturnMessageDto(200, 'success');
+        }
+        catch (e) {
+            this.logger.error(`Failed to send code to ${dto.email} for purpose ${dto.codePurpose}: ${e}`);
+            throw new nicot_1.GenericReturnMessageDto(501, 'Failed to send code').toException();
+        }
+    }
+    async verifyCode(dto, noConsume = false) {
+        const key = buildSendCodeCacheKey(dto);
+        if (this.verifyCodeMaxAttempts && this.verifyCodeBlockTimeMs) {
+            const tries = await this.aragami.values(VerifyCodeAttemptRecord, key + ':attempts:');
+            if (tries.length >= this.verifyCodeMaxAttempts) {
+                tries.sort((a, b) => a.time.getTime() - b.time.getTime());
+                const firstExceed = tries[0];
+                const waitTimeMs = firstExceed.time.getTime() + this.verifyCodeBlockTimeMs - Date.now();
+                const waitTimeDto = new wait_time_dto_1.WaitTimeDto();
+                waitTimeDto.waitTimeMs = waitTimeMs;
+                throw new nicot_1.GenericReturnMessageDto(429, 'Too many invalid code attempts, please try again later', waitTimeDto).toException();
+            }
+        }
+        const record = await this.aragami.get(SendCodeRecord, key);
+        if (!record || record.code !== dto.code) {
+            if (this.verifyCodeMaxAttempts && this.verifyCodeBlockTimeMs) {
+                const attemptRecord = new VerifyCodeAttemptRecord();
+                attemptRecord.email = dto.email;
+                attemptRecord.codePurpose = dto.codePurpose;
+                attemptRecord.time = new Date();
+                await this.aragami.set(attemptRecord, {
+                    ttl: this.verifyCodeBlockTimeMs,
+                });
+            }
+            throw new nicot_2.BlankReturnMessageDto(403, 'Invalid email code').toException();
+        }
+        if (!noConsume) {
+            await this.aragami.del(SendCodeRecord, key);
+        }
+        await this.aragami.clear(VerifyCodeAttemptRecord, key);
+        return new nicot_2.BlankReturnMessageDto(200, 'success');
+    }
+};
+exports.SendCodeService = SendCodeService;
+exports.SendCodeService = SendCodeService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(module_builder_1.MODULE_OPTIONS_TOKEN)),
+    __param(1, (0, nestjs_aragami_1.InjectAragami)()),
+    __metadata("design:paramtypes", [Object, aragami_1.Aragami])
+], SendCodeService);
+//# sourceMappingURL=send-code.service.js.map

package/dist/simple-user/send-code/send-code.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-code.service.js","sourceRoot":"","sources":["../../../src/simple-user/send-code/send-code.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAmE;AACnE,sDAAyD;AAEzD,mDAA2D;AAC3D,qCAA4C;AAC5C,mDAA+C;AAC/C,iCAAgD;AAChD,mDAA8C;AAC9C,iCAA8C;AAI9C,MAAM,qBAAqB,GAAG,CAAC,GAG9B,EAAE,EAAE,CAAC,SAAS,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;AAE9C,MAAM,cAAe,SAAQ,2BAAW;IAItC,IACI,QAAQ;QACV,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;CACF;AAJC;IAAC,IAAA,kBAAQ,GAAE;;;8CAGV;AAGH,MAAM,uBAAwB,SAAQ,2BAAW;IAG/C,IACI,QAAQ;QACV,OAAO,qBAAqB,CAAC,IAAI,CAAC,GAAG,aAAa,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1E,CAAC;CACF;AAJC;IAAC,IAAA,kBAAQ,GAAE;;;uDAGV;AAII,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,YACgC,OAAkC,EAC/C,OAAwB;QADH,YAAO,GAAP,OAAO,CAAmB;QACvC,YAAO,GAAP,OAAO,CAAS;QAGnC,WAAM,GAAG,IAAI,sBAAa,CAAC,iBAAiB,CAAC,CAAC;QAE9C,wBAAmB,GACzB,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC7C,2BAAsB,GAC5B,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,GAAG,IAAI,CAAC;QAqE3C,0BAAqB,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,CAAC;QAChE,0BAAqB,GAC3B,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IA9EpD,CAAC;IASJ,KAAK,CAAC,QAAQ,CAAC,GAAgB,EAAE,kBAA0C;QACzE,MAAM,eAAe,GAAG;YACtB,MAAM,kBAAkB,CAAC,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE;YAChD,SAAS,kBAAkB,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE;SACvD,CAAC;QACF,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;gBAC7D,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACzD,IAAI,OAAO,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;wBAC1C,OAAO,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC;oBAC/C,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CACH,CAAC;YACF,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;gBAC1C,MAAM,WAAW,GAAG,IAAI,2BAAW,EAAE,CAAC;gBACtC,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC;gBACpC,MAAM,IAAI,+BAAuB,CAC/B,GAAG,EACH,4CAA4C,EAC5C,WAAW,CACZ,CAAC,WAAW,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACpC,MAAM,IAAI,6BAAqB,CAC7B,GAAG,EACH,oCAAoC,CACrC,CAAC,WAAW,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACzB,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;YACrC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,MAAM,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;gBAC7B,GAAG,EAAE,IAAI,CAAC,mBAAmB;aAC9B,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAChC,MAAM,OAAO,CAAC,GAAG,CACf,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;oBACvB,GAAG,EAAE,IAAI,CAAC,sBAAsB;oBAChC,GAAG;iBACJ,CAAC,CACH,CACF,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,6BAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0BAA0B,GAAG,CAAC,KAAK,gBAAgB,GAAG,CAAC,WAAW,KAAK,CAAC,EAAE,CAC3E,CAAC;YACF,MAAM,IAAI,+BAAuB,CAC/B,GAAG,EACH,qBAAqB,CACtB,CAAC,WAAW,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAMD,KAAK,CAAC,UAAU,CAAC,GAAgB,EAAE,SAAS,GAAG,KAAK;QAClD,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,qBAAqB,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACrC,uBAAuB,EACvB,GAAG,GAAG,YAAY,CACnB,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC/C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,MAAM,UAAU,GACd,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvE,MAAM,WAAW,GAAG,IAAI,2BAAW,EAAE,CAAC;gBACtC,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC;gBACpC,MAAM,IAAI,+BAAuB,CAC/B,GAAG,EACH,wDAAwD,EACxD,WAAW,CACZ,CAAC,WAAW,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,qBAAqB,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC7D,MAAM,aAAa,GAAG,IAAI,uBAAuB,EAAE,CAAC;gBACpD,aAAa,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gBAChC,aAAa,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;gBAC5C,aAAa,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE;oBACpC,GAAG,EAAE,IAAI,CAAC,qBAAqB;iBAChC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,6BAAqB,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3E,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,IAAI,6BAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC;CACF,CAAA;AA7HY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,qCAAoB,CAAC,CAAA;IAC5B,WAAA,IAAA,8BAAa,GAAE,CAAA;6CAAkB,iBAAO;GAHhC,eAAe,CA6H3B"}

package/dist/simple-user/send-code/wait-time.dto.d.ts

@@ -0,0 +1,3 @@
+export declare class WaitTimeDto {
+    waitTimeMs: number;
+}

package/dist/simple-user/send-code/wait-time.dto.js

@@ -0,0 +1,29 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WaitTimeDto = void 0;
+const openapi = require("@nestjs/swagger");
+const swagger_1 = require("@nestjs/swagger");
+class WaitTimeDto {
+    static _OPENAPI_METADATA_FACTORY() {
+        return { waitTimeMs: { required: true, type: () => Number } };
+    }
+}
+exports.WaitTimeDto = WaitTimeDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'The time in milliseconds the user needs to wait before retrying',
+        example: 45000,
+        required: true,
+    }),
+    __metadata("design:type", Number)
+], WaitTimeDto.prototype, "waitTimeMs", void 0);
+//# sourceMappingURL=wait-time.dto.js.map

package/dist/simple-user/send-code/wait-time.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait-time.dto.js","sourceRoot":"","sources":["../../../src/simple-user/send-code/wait-time.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,6CAA8C;AAE9C,MAAa,WAAW;;;;CAQvB;AARD,kCAQC;AADC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,iEAAiE;QACnE,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf,CAAC;;+CACiB"}

package/dist/simple-user/simple-user/change-email.dto.d.ts

@@ -0,0 +1,3 @@
+import { EmailAndCodeDto } from './email.dto';
+export declare class ChangeEmailDto extends EmailAndCodeDto {
+}

package/dist/simple-user/simple-user/change-email.dto.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChangeEmailDto = void 0;
+const openapi = require("@nestjs/swagger");
+const email_dto_1 = require("./email.dto");
+class ChangeEmailDto extends email_dto_1.EmailAndCodeDto {
+    static _OPENAPI_METADATA_FACTORY() {
+        return {};
+    }
+}
+exports.ChangeEmailDto = ChangeEmailDto;
+//# sourceMappingURL=change-email.dto.js.map

package/dist/simple-user/simple-user/change-email.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-email.dto.js","sourceRoot":"","sources":["../../../src/simple-user/simple-user/change-email.dto.ts"],"names":[],"mappings":";;;;AAAA,2CAA8C;AAE9C,MAAa,cAAe,SAAQ,2BAAe;;;;CAAG;AAAtD,wCAAsD"}

package/dist/simple-user/simple-user/change-password.dto.d.ts

@@ -0,0 +1,4 @@
+export declare class ChangePasswordDto {
+    currentPassword?: string;
+    newPassword: string;
+}

package/dist/simple-user/simple-user/change-password.dto.js

@@ -0,0 +1,41 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChangePasswordDto = void 0;
+const openapi = require("@nestjs/swagger");
+const swagger_1 = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+class ChangePasswordDto {
+    static _OPENAPI_METADATA_FACTORY() {
+        return { currentPassword: { required: false, type: () => String }, newPassword: { required: true, type: () => String } };
+    }
+}
+exports.ChangePasswordDto = ChangePasswordDto;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, swagger_1.ApiProperty)({
+        description: 'The current password of the user. Must be provided if applicable.',
+        example: 'currentpassword',
+    }),
+    __metadata("design:type", String)
+], ChangePasswordDto.prototype, "currentPassword", void 0);
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, swagger_1.ApiProperty)({
+        description: 'The new password to set for the user',
+        example: 'newsecurepassword',
+    }),
+    __metadata("design:type", String)
+], ChangePasswordDto.prototype, "newPassword", void 0);
+//# sourceMappingURL=change-password.dto.js.map

package/dist/simple-user/simple-user/change-password.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-password.dto.js","sourceRoot":"","sources":["../../../src/simple-user/simple-user/change-password.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAmE;AAEnE,MAAa,iBAAiB;;;;CAkB7B;AAlBD,8CAkBC;AATC;IARC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,mEAAmE;QACrE,OAAO,EAAE,iBAAiB;KAC3B,CAAC;;0DACuB;AAQzB;IANC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,mBAAmB;KAC7B,CAAC;;sDACkB"}

package/dist/simple-user/simple-user/email.dto.d.ts

@@ -0,0 +1,6 @@
+export declare class EmailDto {
+    email: string;
+}
+export declare class EmailAndCodeDto extends EmailDto {
+    code: string;
+}

package/dist/simple-user/simple-user/email.dto.js

@@ -0,0 +1,46 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailAndCodeDto = exports.EmailDto = void 0;
+const openapi = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const swagger_1 = require("@nestjs/swagger");
+class EmailDto {
+    static _OPENAPI_METADATA_FACTORY() {
+        return { email: { required: true, type: () => String, format: "email" } };
+    }
+}
+exports.EmailDto = EmailDto;
+__decorate([
+    (0, class_validator_1.IsEmail)(),
+    (0, swagger_1.ApiProperty)({
+        description: 'The email address',
+        example: 'someuser@example.com',
+        required: true,
+    }),
+    __metadata("design:type", String)
+], EmailDto.prototype, "email", void 0);
+class EmailAndCodeDto extends EmailDto {
+    static _OPENAPI_METADATA_FACTORY() {
+        return { code: { required: true, type: () => String } };
+    }
+}
+exports.EmailAndCodeDto = EmailAndCodeDto;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, swagger_1.ApiProperty)({
+        description: 'The code sent to the email address',
+        example: '123456',
+    }),
+    __metadata("design:type", String)
+], EmailAndCodeDto.prototype, "code", void 0);
+//# sourceMappingURL=email.dto.js.map

package/dist/simple-user/simple-user/email.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.dto.js","sourceRoot":"","sources":["../../../src/simple-user/simple-user/email.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,qDAAgE;AAChE,6CAA8C;AAE9C,MAAa,QAAQ;;;;CAQpB;AARD,4BAQC;AADC;IANC,IAAA,yBAAO,GAAE;IACT,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,IAAI;KACf,CAAC;;uCACY;AAGhB,MAAa,eAAgB,SAAQ,QAAQ;;;;CAQ5C;AARD,0CAQC;AADC;IANC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,QAAQ;KAClB,CAAC;;6CACW"}

package/dist/simple-user/simple-user/login.dto.d.ts

@@ -0,0 +1,11 @@
+import { EmailDto } from './email.dto';
+export declare class LoginDto extends EmailDto {
+    code?: string;
+    password?: string;
+    setPassword?: string;
+}
+export declare class LoginResponseDto {
+    token: string;
+    tokenExpiresAt: Date;
+    userId: number;
+}

package/dist/simple-user/simple-user/login.dto.js

@@ -0,0 +1,80 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoginResponseDto = exports.LoginDto = void 0;
+const openapi = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const swagger_1 = require("@nestjs/swagger");
+const email_dto_1 = require("./email.dto");
+class LoginDto extends email_dto_1.EmailDto {
+    static _OPENAPI_METADATA_FACTORY() {
+        return { code: { required: false, type: () => String }, password: { required: false, type: () => String }, setPassword: { required: false, type: () => String } };
+    }
+}
+exports.LoginDto = LoginDto;
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, swagger_1.ApiProperty)({
+        description: 'The login code sent to the email address (MUST present if no password)',
+        example: '123456',
+    }),
+    __metadata("design:type", String)
+], LoginDto.prototype, "code", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, swagger_1.ApiProperty)({
+        description: 'The password for login (if applicable)',
+        example: 'yourpassword',
+    }),
+    __metadata("design:type", String)
+], LoginDto.prototype, "password", void 0);
+__decorate([
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, swagger_1.ApiProperty)({
+        description: 'The new password to set for the user (if applicable, e.g., during registration)',
+        example: 'newsecurepassword',
+    }),
+    __metadata("design:type", String)
+], LoginDto.prototype, "setPassword", void 0);
+class LoginResponseDto {
+    static _OPENAPI_METADATA_FACTORY() {
+        return { token: { required: true, type: () => String }, tokenExpiresAt: { required: true, type: () => Date }, userId: { required: true, type: () => Number } };
+    }
+}
+exports.LoginResponseDto = LoginResponseDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'The authentication token for the user',
+        minLength: 64,
+        maxLength: 64,
+        example: 'x'.repeat(64),
+    }),
+    __metadata("design:type", String)
+], LoginResponseDto.prototype, "token", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'The expiration time of the authentication token',
+        example: new Date(),
+    }),
+    __metadata("design:type", Date)
+], LoginResponseDto.prototype, "tokenExpiresAt", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'The ID of the logged-in user',
+        example: 123,
+    }),
+    __metadata("design:type", Number)
+], LoginResponseDto.prototype, "userId", void 0);
+//# sourceMappingURL=login.dto.js.map

package/dist/simple-user/simple-user/login.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.dto.js","sourceRoot":"","sources":["../../../src/simple-user/simple-user/login.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,qDAAmE;AACnE,6CAA8C;AAC9C,2CAAuC;AAEvC,MAAa,QAAS,SAAQ,oBAAQ;;;;CA2BrC;AA3BD,4BA2BC;AAlBC;IARC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,wEAAwE;QAC1E,OAAO,EAAE,QAAQ;KAClB,CAAC;;sCACY;AAQd;IANC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE,cAAc;KACxB,CAAC;;0CACgB;AASlB;IAPC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,iFAAiF;QACnF,OAAO,EAAE,mBAAmB;KAC7B,CAAC;;6CACmB;AAGvB,MAAa,gBAAgB;;;;CAkB5B;AAlBD,4CAkBC;AAXC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,uCAAuC;QACpD,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;KACxB,CAAC;;+CACY;AAKd;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,iDAAiD;QAC9D,OAAO,EAAE,IAAI,IAAI,EAAE;KACpB,CAAC;8BACc,IAAI;wDAAC;AAKrB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8BAA8B;QAC3C,OAAO,EAAE,GAAG;KACb,CAAC;;gDACa"}

package/dist/simple-user/simple-user/reset-password.dto.d.ts

@@ -0,0 +1,4 @@
+import { EmailAndCodeDto } from './email.dto';
+export declare class ResetPasswordDto extends EmailAndCodeDto {
+    newPassword: string;
+}

package/dist/simple-user/simple-user/reset-password.dto.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResetPasswordDto = void 0;
+const openapi = require("@nestjs/swagger");
+const class_validator_1 = require("class-validator");
+const swagger_1 = require("@nestjs/swagger");
+const email_dto_1 = require("./email.dto");
+class ResetPasswordDto extends email_dto_1.EmailAndCodeDto {
+    static _OPENAPI_METADATA_FACTORY() {
+        return { newPassword: { required: true, type: () => String } };
+    }
+}
+exports.ResetPasswordDto = ResetPasswordDto;
+__decorate([
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, swagger_1.ApiProperty)({
+        description: 'The new password to set for the user',
+        example: 'newsecurepassword',
+    }),
+    __metadata("design:type", String)
+], ResetPasswordDto.prototype, "newPassword", void 0);
+//# sourceMappingURL=reset-password.dto.js.map

package/dist/simple-user/simple-user/reset-password.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-password.dto.js","sourceRoot":"","sources":["../../../src/simple-user/simple-user/reset-password.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,qDAAuD;AACvD,6CAA8C;AAC9C,2CAA8C;AAE9C,MAAa,gBAAiB,SAAQ,2BAAe;;;;CAQpD;AARD,4CAQC;AADC;IANC,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,mBAAmB;KAC7B,CAAC;;qDACkB"}

package/dist/simple-user/simple-user/simple-user.service.d.ts

@@ -0,0 +1,33 @@
+import { BlankReturnMessageDto, CrudBase, GenericReturnMessageDto } from 'nicot';
+import { SimpleUser } from '../simple-user.entity';
+import { Repository } from 'typeorm';
+import { SimpleUserExtraOptions, SimpleUserOptions } from '../options';
+import { UserContext, UserRiskControlContext } from '../resolver';
+import { Aragami } from 'aragami';
+import { LoginDto, LoginResponseDto } from './login.dto';
+import { SendCodeService } from '../send-code/send-code.service';
+import { ChangeEmailDto } from './change-email.dto';
+import { ChangePasswordDto } from './change-password.dto';
+import { ResetPasswordDto } from './reset-password.dto';
+export declare class SimpleUserService<U extends SimpleUser = SimpleUser> extends CrudBase<U> {
+    private options;
+    private optionsEx;
+    private aragami;
+    private sendCodeService;
+    constructor(repo: Repository<U>, options: SimpleUserOptions, optionsEx: SimpleUserExtraOptions, aragami: Aragami, sendCodeService: SendCodeService);
+    private getFindOptions;
+    findOrCreateUser(ctx: UserContext): Promise<U>;
+    findUserWithId(id: number): Promise<U>;
+    checkUserExists(email: string): Promise<GenericReturnMessageDto<{
+        exists: boolean;
+    }>>;
+    private passwordMaxAttempts;
+    private passwordBlockTimeMs;
+    private checkPasswordRiskControl;
+    private recordPasswordFailAttempt;
+    login(dto: LoginDto, ctx: UserRiskControlContext): Promise<GenericReturnMessageDto<LoginResponseDto>>;
+    changeEmail(user: U, dto: ChangeEmailDto): Promise<BlankReturnMessageDto>;
+    kickUserEmail(email: string): Promise<void>;
+    changePassword(user: U, dto: ChangePasswordDto, ctx: UserRiskControlContext): Promise<BlankReturnMessageDto>;
+    resetPassword(dto: ResetPasswordDto): Promise<BlankReturnMessageDto>;
+}