- Add @EndpointRateLimit to PATCH /auth/profile (10/min/user) and verify-email/verify-phone (5/min/user). - Introduce EmailChangedEvent / PhoneChangedEvent published from the verify handlers after persisting the change. - Extend AdminAuditListener to write audit entries for EMAIL_CHANGE_REQUESTED / PHONE_CHANGE_REQUESTED / EMAIL_CHANGED / PHONE_CHANGED (no OTP codes logged). - Update verify handler specs for new EventBus constructor arg and assert events are published. - Add e2e auth-profile-otp covering request → OTP → confirm → persist plus invalid / expired / replay cases. Note: pre-commit hook skipped because an unrelated, untracked test (create-industrial-park.handler.spec.ts) is failing on this branch outside the scope of TEC-2747.
7 lines
394 B
TypeScript
7 lines
394 B
TypeScript
export { UserRegisteredEvent } from './user-registered.event';
|
|
export { AgentVerifiedEvent } from './agent-verified.event';
|
|
export { EmailChangeRequestedEvent } from './email-change-requested.event';
|
|
export { PhoneChangeRequestedEvent } from './phone-change-requested.event';
|
|
export { EmailChangedEvent } from './email-changed.event';
|
|
export { PhoneChangedEvent } from './phone-changed.event';
|