@7365admin1/core 3.32.2-staging.70 → 3.32.2-staging.72

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @iservice365/core
 
+## 3.41.0
+
+### Minor Changes
+
+- cef6dac: release changes in attendance, etc.
+
 ## 3.40.0
 
 ### Minor Changes

package/dist/index.js

@@ -74915,13 +74915,19 @@ function decryptSecret(value) {
   if (!value?.startsWith(`${PASSWORD_PREFIX}:`)) {
     return value;
   }
-  const [, ivHex, tagHex, encryptedHex] = value.split(":");
-  const decipher = import_crypto4.default.createDecipheriv("aes-256-gcm", getSecretKey(), Buffer.from(ivHex, "hex"));
-  decipher.setAuthTag(Buffer.from(tagHex, "hex"));
-  return Buffer.concat([
-    decipher.update(Buffer.from(encryptedHex, "hex")),
-    decipher.final()
-  ]).toString("utf8");
+  try {
+    const [, ivHex, tagHex, encryptedHex] = value.split(":");
+    const decipher = import_crypto4.default.createDecipheriv("aes-256-gcm", getSecretKey(), Buffer.from(ivHex, "hex"));
+    decipher.setAuthTag(Buffer.from(tagHex, "hex"));
+    return Buffer.concat([
+      decipher.update(Buffer.from(encryptedHex, "hex")),
+      decipher.final()
+    ]).toString("utf8");
+  } catch {
+    throw new import_node_server_utils266.BadRequestError(
+      "The stored HID credential cannot be decrypted. Re-enter and save the credential before trying again."
+    );
+  }
 }
 function formatHidResponse(data) {
   if (data === void 0 || data === null) {
@@ -74995,9 +75001,17 @@ function createVisitorQrCredential(visitorId, readerId, qrFormat) {
       qrValue: value.toString(16).toUpperCase()
     };
   }
-  const token = `VIS-${import_crypto4.default.randomBytes(12).toString("hex").toUpperCase()}`;
+  const token = `VIS${import_crypto4.default.randomBytes(12).toString("hex").toUpperCase()}`;
   return { credentialId, object: "qrcodes", value: token, qrValue: token };
 }
+async function configureVisitorQrReader(client, qrFormat) {
+  await client.setConfiguration({
+    face_id: { qrcode_legacy_mode_enabled: qrFormat }
+  });
+  await client.setConfiguration({
+    identifier: { qrcode_identification_enabled: "1" }
+  });
+}
 function getRelayAuth() {
   const username = process.env.HID_AMICO_RELAY_USERNAME;
   const password = process.env.HID_AMICO_RELAY_PASSWORD;
@@ -75595,6 +75609,7 @@ function useHidAmicoService() {
     const client = new HidAmicoClient(reader);
     try {
       await client.login();
+      await configureVisitorQrReader(client, value.qrFormat);
       const existingUserResponse = await client.loadObjects({
         object: "users",
         where: { users: { id: hidUserId } },
@@ -75642,6 +75657,21 @@ function useHidAmicoService() {
           user_id: hidUserId
         }]
       });
+      const savedCredentialResponse = await client.loadObjects({
+        object: credential.object,
+        where: { [credential.object]: { id: credential.credentialId } },
+        limit: 1,
+        offset: 0
+      });
+      const savedCredential = getHidObjectRows(
+        savedCredentialResponse,
+        credential.object
+      )[0];
+      if (!savedCredential || String(savedCredential.user_id) !== String(hidUserId) || String(savedCredential.value) !== String(credential.value)) {
+        throw new import_node_server_utils266.BadRequestError(
+          "The HID reader did not retain the generated visitor QR credential."
+        );
+      }
       const identityPayload = {
         hidUserId: String(hidUserId),
         registration,