@acorex-platform/module-security-management-server 0.0.15 → 2.0.0-next.42
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/contracts/src/AXM_USER_ACCESS_STATE_DEFINITION_KEY.js.map +1 -1
- package/contracts/src/AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY.js.map +1 -1
- package/contracts/src/ROLE_PERMISSIONS_PAGE_COMPONENT_KEY.d.ts +2 -0
- package/contracts/src/ROLE_PERMISSIONS_PAGE_COMPONENT_KEY.js +6 -0
- package/contracts/src/ROLE_PERMISSIONS_PAGE_COMPONENT_KEY.js.map +1 -0
- package/contracts/src/USER_ROLES_PAGE_COMPONENT_KEY.d.ts +1 -0
- package/contracts/src/USER_ROLES_PAGE_COMPONENT_KEY.js +5 -0
- package/contracts/src/USER_ROLES_PAGE_COMPONENT_KEY.js.map +1 -0
- package/contracts/src/create-application-role-rows.util.d.ts +15 -0
- package/contracts/src/create-application-role-rows.util.js +67 -0
- package/contracts/src/create-application-role-rows.util.js.map +1 -0
- package/contracts/src/device-session-admin-scope.d.ts +15 -0
- package/contracts/src/device-session-admin-scope.js +16 -0
- package/contracts/src/device-session-admin-scope.js.map +1 -0
- package/contracts/src/entities/device-sessions/device-sessions.entity.js +50 -1
- package/contracts/src/entities/device-sessions/device-sessions.entity.js.map +1 -1
- package/contracts/src/entities/device-sessions/device-sessions.types.d.ts +7 -0
- package/contracts/src/entities/device-sessions/device-sessions.types.js.map +1 -1
- package/contracts/src/entities/device-sessions/index.d.ts +0 -1
- package/contracts/src/entities/device-sessions/index.js +0 -1
- package/contracts/src/entities/device-sessions/index.js.map +1 -1
- package/contracts/src/entities/identity-provider/identity-provider.entity.d.ts +2 -0
- package/contracts/src/entities/identity-provider/identity-provider.entity.js +453 -0
- package/contracts/src/entities/identity-provider/identity-provider.entity.js.map +1 -0
- package/contracts/src/entities/identity-provider/identity-provider.types.d.ts +61 -0
- package/contracts/src/entities/identity-provider/identity-provider.types.js +14 -0
- package/contracts/src/entities/identity-provider/identity-provider.types.js.map +1 -0
- package/contracts/src/entities/identity-provider/index.d.ts +1 -0
- package/contracts/src/entities/identity-provider/index.js +5 -0
- package/contracts/src/entities/identity-provider/index.js.map +1 -0
- package/contracts/src/entities/index.d.ts +4 -0
- package/contracts/src/entities/index.js +4 -0
- package/contracts/src/entities/index.js.map +1 -1
- package/contracts/src/entities/policy/index.d.ts +0 -1
- package/contracts/src/entities/policy/index.js +0 -1
- package/contracts/src/entities/policy/index.js.map +1 -1
- package/contracts/src/entities/policy/policy.entity.js +15 -0
- package/contracts/src/entities/policy/policy.entity.js.map +1 -1
- package/contracts/src/entities/policy/policy.types.js.map +1 -1
- package/contracts/src/entities/profile/index.d.ts +0 -1
- package/contracts/src/entities/profile/index.js +0 -1
- package/contracts/src/entities/profile/index.js.map +1 -1
- package/contracts/src/entities/profile/profile.entity.js +15 -0
- package/contracts/src/entities/profile/profile.entity.js.map +1 -1
- package/contracts/src/entities/profile/profile.types.js.map +1 -1
- package/contracts/src/entities/role-permission/index.d.ts +1 -0
- package/contracts/src/entities/role-permission/index.js +5 -0
- package/contracts/src/entities/role-permission/index.js.map +1 -0
- package/contracts/src/entities/role-permission/role-permission.entity.d.ts +2 -0
- package/contracts/src/entities/role-permission/role-permission.entity.js +163 -0
- package/contracts/src/entities/role-permission/role-permission.entity.js.map +1 -0
- package/contracts/src/entities/role-permission/role-permission.types.d.ts +11 -0
- package/contracts/src/entities/role-permission/role-permission.types.js +5 -0
- package/contracts/src/entities/role-permission/role-permission.types.js.map +1 -0
- package/contracts/src/entities/roles/index.d.ts +0 -1
- package/contracts/src/entities/roles/index.js +0 -1
- package/contracts/src/entities/roles/index.js.map +1 -1
- package/contracts/src/entities/roles/roles.entity.js +73 -144
- package/contracts/src/entities/roles/roles.entity.js.map +1 -1
- package/contracts/src/entities/roles/roles.types.d.ts +4 -1
- package/contracts/src/entities/roles/roles.types.js.map +1 -1
- package/contracts/src/entities/user-role/index.d.ts +1 -0
- package/{src/lib/seed/tenant → contracts/src/entities/user-role}/index.js +1 -1
- package/contracts/src/entities/user-role/index.js.map +1 -0
- package/contracts/src/entities/user-role/user-role.entity.d.ts +2 -0
- package/contracts/src/entities/user-role/user-role.entity.js +164 -0
- package/contracts/src/entities/user-role/user-role.entity.js.map +1 -0
- package/contracts/src/entities/user-role/user-role.types.d.ts +11 -0
- package/contracts/src/entities/user-role/user-role.types.js +5 -0
- package/contracts/src/entities/user-role/user-role.types.js.map +1 -0
- package/contracts/src/entities/user-two-factor/index.d.ts +2 -0
- package/contracts/src/entities/user-two-factor/index.js +8 -0
- package/contracts/src/entities/user-two-factor/index.js.map +1 -0
- package/contracts/src/entities/user-two-factor/user-two-factor.entity.d.ts +6 -0
- package/contracts/src/entities/user-two-factor/user-two-factor.entity.js +103 -0
- package/contracts/src/entities/user-two-factor/user-two-factor.entity.js.map +1 -0
- package/contracts/src/entities/user-two-factor/user-two-factor.types.d.ts +24 -0
- package/contracts/src/entities/user-two-factor/user-two-factor.types.js +4 -0
- package/contracts/src/entities/user-two-factor/user-two-factor.types.js.map +1 -0
- package/contracts/src/entities/users/index.d.ts +1 -1
- package/contracts/src/entities/users/index.js +1 -1
- package/contracts/src/entities/users/index.js.map +1 -1
- package/contracts/src/entities/users/user-provisioning-list-actions.d.ts +8 -0
- package/contracts/src/entities/users/user-provisioning-list-actions.js +95 -0
- package/contracts/src/entities/users/user-provisioning-list-actions.js.map +1 -0
- package/contracts/src/entities/users/users.entity.js +341 -283
- package/contracts/src/entities/users/users.entity.js.map +1 -1
- package/contracts/src/entities/users/users.types.d.ts +24 -1
- package/contracts/src/entities/users/users.types.js.map +1 -1
- package/contracts/src/entity-catalog.d.ts +7 -0
- package/contracts/src/entity-catalog.js +28 -0
- package/contracts/src/entity-catalog.js.map +1 -0
- package/contracts/src/entity-entry.device-sessions.d.ts +1 -0
- package/contracts/src/entity-entry.device-sessions.js +6 -0
- package/contracts/src/entity-entry.device-sessions.js.map +1 -0
- package/contracts/src/entity-entry.identity-provider.d.ts +1 -0
- package/contracts/src/entity-entry.identity-provider.js +6 -0
- package/contracts/src/entity-entry.identity-provider.js.map +1 -0
- package/contracts/src/entity-entry.policy.d.ts +1 -0
- package/contracts/src/entity-entry.policy.js +6 -0
- package/contracts/src/entity-entry.policy.js.map +1 -0
- package/contracts/src/entity-entry.profile.d.ts +1 -0
- package/contracts/src/entity-entry.profile.js +6 -0
- package/contracts/src/entity-entry.profile.js.map +1 -0
- package/contracts/src/entity-entry.role-permission.d.ts +1 -0
- package/contracts/src/entity-entry.role-permission.js +6 -0
- package/contracts/src/entity-entry.role-permission.js.map +1 -0
- package/contracts/src/entity-entry.roles.d.ts +1 -0
- package/contracts/src/entity-entry.roles.js +6 -0
- package/contracts/src/entity-entry.roles.js.map +1 -0
- package/contracts/src/entity-entry.user-role.d.ts +1 -0
- package/contracts/src/entity-entry.user-role.js +6 -0
- package/contracts/src/entity-entry.user-role.js.map +1 -0
- package/contracts/src/entity-entry.user-two-factor.d.ts +1 -0
- package/contracts/src/entity-entry.user-two-factor.js +6 -0
- package/contracts/src/entity-entry.user-two-factor.js.map +1 -0
- package/contracts/src/entity-entry.users.d.ts +1 -0
- package/contracts/src/entity-entry.users.js +6 -0
- package/contracts/src/entity-entry.users.js.map +1 -0
- package/contracts/src/features.keys.d.ts +4 -0
- package/contracts/src/features.keys.js +4 -0
- package/contracts/src/features.keys.js.map +1 -1
- package/contracts/src/index.d.ts +13 -1
- package/contracts/src/index.js +13 -1
- package/contracts/src/index.js.map +1 -1
- package/contracts/src/invite-application-role-rows.util.d.ts +16 -0
- package/contracts/src/invite-application-role-rows.util.js +68 -0
- package/contracts/src/invite-application-role-rows.util.js.map +1 -0
- package/contracts/src/invite-assignable-roles.util.d.ts +34 -0
- package/contracts/src/invite-assignable-roles.util.js +75 -0
- package/contracts/src/invite-assignable-roles.util.js.map +1 -0
- package/contracts/src/lib/context.definitions.d.ts +2 -0
- package/contracts/src/lib/context.definitions.js +15 -0
- package/contracts/src/lib/context.definitions.js.map +1 -0
- package/contracts/src/manifest.d.ts +6 -0
- package/contracts/src/manifest.js +24 -0
- package/contracts/src/manifest.js.map +1 -0
- package/contracts/src/menu.keys.d.ts +1 -0
- package/contracts/src/menu.keys.js +1 -0
- package/contracts/src/menu.keys.js.map +1 -1
- package/contracts/src/permission.keys.d.ts +48 -18
- package/contracts/src/permission.keys.js +49 -21
- package/contracts/src/permission.keys.js.map +1 -1
- package/contracts/src/resolve-user-effective-state.d.ts +10 -0
- package/contracts/src/resolve-user-effective-state.js +46 -0
- package/contracts/src/resolve-user-effective-state.js.map +1 -0
- package/contracts/src/root-config.d.ts +33 -0
- package/contracts/src/root-config.js +33 -0
- package/contracts/src/root-config.js.map +1 -1
- package/contracts/src/server-commands.d.ts +340 -0
- package/contracts/src/server-commands.js +88 -0
- package/contracts/src/server-commands.js.map +1 -0
- package/contracts/src/settings.keys.d.ts +16 -0
- package/contracts/src/settings.keys.js +21 -0
- package/contracts/src/settings.keys.js.map +1 -0
- package/contracts/src/user-access-state.js.map +1 -1
- package/contracts/src/user-effective-state.js.map +1 -1
- package/contracts/src/user-invitation.d.ts +41 -0
- package/contracts/src/user-invitation.js +18 -0
- package/contracts/src/user-invitation.js.map +1 -0
- package/contracts/src/user-password-reset.d.ts +9 -0
- package/contracts/src/user-password-reset.js +5 -0
- package/contracts/src/user-password-reset.js.map +1 -0
- package/package.json +16 -11
- package/server/src/index.d.ts +3 -0
- package/server/src/index.js +11 -0
- package/server/src/index.js.map +1 -0
- package/server/src/lib/effective-access-history/effective-access-history.service.d.ts +35 -0
- package/server/src/lib/effective-access-history/effective-access-history.service.js +486 -0
- package/server/src/lib/effective-access-history/effective-access-history.service.js.map +1 -0
- package/server/src/lib/effective-access-history/effective-access-history.types.d.ts +64 -0
- package/server/src/lib/effective-access-history/effective-access-history.types.js +5 -0
- package/server/src/lib/effective-access-history/effective-access-history.types.js.map +1 -0
- package/server/src/lib/effective-access-history/version-as-of.util.d.ts +37 -0
- package/server/src/lib/effective-access-history/version-as-of.util.js +167 -0
- package/server/src/lib/effective-access-history/version-as-of.util.js.map +1 -0
- package/server/src/lib/entities/index.d.ts +1 -0
- package/server/src/lib/entities/index.js +5 -0
- package/{src/lib/seed/tenant → server/src/lib/entities}/index.js.map +1 -1
- package/server/src/lib/entities/security-management.entity-catalog.d.ts +1 -0
- package/server/src/lib/entities/security-management.entity-catalog.js +12 -0
- package/server/src/lib/entities/security-management.entity-catalog.js.map +1 -0
- package/server/src/lib/handlers/security-report.handlers.d.ts +36 -0
- package/server/src/lib/handlers/security-report.handlers.js +164 -0
- package/server/src/lib/handlers/security-report.handlers.js.map +1 -0
- package/server/src/lib/identity-provider/auth-oauth-clients.constants.d.ts +5 -0
- package/server/src/lib/identity-provider/auth-oauth-clients.constants.js +11 -0
- package/server/src/lib/identity-provider/auth-oauth-clients.constants.js.map +1 -0
- package/server/src/lib/identity-provider/identity-provider-catalog.service.d.ts +20 -0
- package/server/src/lib/identity-provider/identity-provider-catalog.service.js +169 -0
- package/server/src/lib/identity-provider/identity-provider-catalog.service.js.map +1 -0
- package/server/src/lib/identity-provider/identity-provider-ids.constants.d.ts +8 -0
- package/server/src/lib/identity-provider/identity-provider-ids.constants.js +19 -0
- package/server/src/lib/identity-provider/identity-provider-ids.constants.js.map +1 -0
- package/server/src/lib/identity-provider/identity-provider-stub.bootstrap.d.ts +12 -0
- package/server/src/lib/identity-provider/identity-provider-stub.bootstrap.js +48 -0
- package/server/src/lib/identity-provider/identity-provider-stub.bootstrap.js.map +1 -0
- package/server/src/lib/identity-provider/identity-provider.constants.d.ts +1 -0
- package/server/src/lib/identity-provider/identity-provider.constants.js +7 -0
- package/server/src/lib/identity-provider/identity-provider.constants.js.map +1 -0
- package/server/src/lib/middlewares/device-sessions-active.middleware.d.ts +15 -0
- package/server/src/lib/middlewares/device-sessions-active.middleware.js +76 -0
- package/server/src/lib/middlewares/device-sessions-active.middleware.js.map +1 -0
- package/server/src/lib/middlewares/device-sessions-app-scope.middleware.d.ts +29 -0
- package/server/src/lib/middlewares/device-sessions-app-scope.middleware.js +137 -0
- package/server/src/lib/middlewares/device-sessions-app-scope.middleware.js.map +1 -0
- package/server/src/lib/middlewares/device-sessions-app-scope.util.d.ts +41 -0
- package/server/src/lib/middlewares/device-sessions-app-scope.util.js +69 -0
- package/server/src/lib/middlewares/device-sessions-app-scope.util.js.map +1 -0
- package/server/src/lib/middlewares/device-sessions-token-revoke.middleware.d.ts +18 -0
- package/server/src/lib/middlewares/device-sessions-token-revoke.middleware.js +90 -0
- package/server/src/lib/middlewares/device-sessions-token-revoke.middleware.js.map +1 -0
- package/server/src/lib/middlewares/user-assigned-roles.middleware.d.ts +36 -0
- package/server/src/lib/middlewares/user-assigned-roles.middleware.js +359 -0
- package/server/src/lib/middlewares/user-assigned-roles.middleware.js.map +1 -0
- package/server/src/lib/middlewares/user-effective-state.middleware.d.ts +13 -0
- package/server/src/lib/middlewares/user-effective-state.middleware.js +57 -0
- package/server/src/lib/middlewares/user-effective-state.middleware.js.map +1 -0
- package/server/src/lib/middlewares/user-invitation-list.middleware.d.ts +32 -0
- package/server/src/lib/middlewares/user-invitation-list.middleware.js +250 -0
- package/server/src/lib/middlewares/user-invitation-list.middleware.js.map +1 -0
- package/server/src/lib/middlewares/user-profile-write.middleware.d.ts +18 -0
- package/server/src/lib/middlewares/user-profile-write.middleware.js +206 -0
- package/server/src/lib/middlewares/user-profile-write.middleware.js.map +1 -0
- package/server/src/lib/password-reset/change-own-password.command.d.ts +8 -0
- package/server/src/lib/password-reset/change-own-password.command.js +38 -0
- package/server/src/lib/password-reset/change-own-password.command.js.map +1 -0
- package/server/src/lib/password-reset/complete-password-reset.command.d.ts +8 -0
- package/server/src/lib/password-reset/complete-password-reset.command.js +37 -0
- package/server/src/lib/password-reset/complete-password-reset.command.js.map +1 -0
- package/server/src/lib/password-reset/get-own-password-status.command.d.ts +8 -0
- package/server/src/lib/password-reset/get-own-password-status.command.js +31 -0
- package/server/src/lib/password-reset/get-own-password-status.command.js.map +1 -0
- package/server/src/lib/password-reset/send-password-reset-email.command.d.ts +20 -0
- package/server/src/lib/password-reset/send-password-reset-email.command.js +43 -0
- package/server/src/lib/password-reset/send-password-reset-email.command.js.map +1 -0
- package/server/src/lib/password-reset/user-change-password.service.d.ts +24 -0
- package/server/src/lib/password-reset/user-change-password.service.js +92 -0
- package/server/src/lib/password-reset/user-change-password.service.js.map +1 -0
- package/server/src/lib/password-reset/user-password-reset.service.d.ts +26 -0
- package/server/src/lib/password-reset/user-password-reset.service.js +221 -0
- package/server/src/lib/password-reset/user-password-reset.service.js.map +1 -0
- package/server/src/lib/queries/get-permission-holders-history.query.d.ts +4 -0
- package/server/src/lib/queries/get-permission-holders-history.query.definition.d.ts +5 -0
- package/server/src/lib/queries/get-permission-holders-history.query.definition.js +38 -0
- package/server/src/lib/queries/get-permission-holders-history.query.definition.js.map +1 -0
- package/server/src/lib/queries/get-permission-holders-history.query.js +25 -0
- package/server/src/lib/queries/get-permission-holders-history.query.js.map +1 -0
- package/server/src/lib/queries/get-role-holders-history.query.d.ts +4 -0
- package/server/src/lib/queries/get-role-holders-history.query.definition.d.ts +5 -0
- package/server/src/lib/queries/get-role-holders-history.query.definition.js +38 -0
- package/server/src/lib/queries/get-role-holders-history.query.definition.js.map +1 -0
- package/server/src/lib/queries/get-role-holders-history.query.js +25 -0
- package/server/src/lib/queries/get-role-holders-history.query.js.map +1 -0
- package/server/src/lib/queries/get-user-effective-permissions-history.query.d.ts +4 -0
- package/server/src/lib/queries/get-user-effective-permissions-history.query.definition.d.ts +5 -0
- package/server/src/lib/queries/get-user-effective-permissions-history.query.definition.js +35 -0
- package/server/src/lib/queries/get-user-effective-permissions-history.query.definition.js.map +1 -0
- package/server/src/lib/queries/get-user-effective-permissions-history.query.js +26 -0
- package/server/src/lib/queries/get-user-effective-permissions-history.query.js.map +1 -0
- package/server/src/lib/queries/get-user-effective-roles-history.query.d.ts +4 -0
- package/server/src/lib/queries/get-user-effective-roles-history.query.definition.d.ts +5 -0
- package/server/src/lib/queries/get-user-effective-roles-history.query.definition.js +36 -0
- package/server/src/lib/queries/get-user-effective-roles-history.query.definition.js.map +1 -0
- package/server/src/lib/queries/get-user-effective-roles-history.query.js +25 -0
- package/server/src/lib/queries/get-user-effective-roles-history.query.js.map +1 -0
- package/server/src/lib/queries/get-user-password-change-history.query.d.ts +4 -0
- package/server/src/lib/queries/get-user-password-change-history.query.definition.d.ts +5 -0
- package/server/src/lib/queries/get-user-password-change-history.query.definition.js +33 -0
- package/server/src/lib/queries/get-user-password-change-history.query.definition.js.map +1 -0
- package/server/src/lib/queries/get-user-password-change-history.query.js +23 -0
- package/server/src/lib/queries/get-user-password-change-history.query.js.map +1 -0
- package/server/src/lib/queries/security-query.helpers.d.ts +47 -0
- package/server/src/lib/queries/security-query.helpers.js +184 -0
- package/server/src/lib/queries/security-query.helpers.js.map +1 -0
- package/server/src/lib/reports/password-change-history.service.d.ts +14 -0
- package/server/src/lib/reports/password-change-history.service.js +74 -0
- package/server/src/lib/reports/password-change-history.service.js.map +1 -0
- package/server/src/lib/reports/permission-display-catalog.d.ts +7 -0
- package/server/src/lib/reports/permission-display-catalog.js +101 -0
- package/server/src/lib/reports/permission-display-catalog.js.map +1 -0
- package/server/src/lib/reports/security-report-definition.provider.d.ts +5 -0
- package/server/src/lib/reports/security-report-definition.provider.js +23 -0
- package/server/src/lib/reports/security-report-definition.provider.js.map +1 -0
- package/server/src/lib/reports/security-report-parameter-groups.d.ts +343 -0
- package/server/src/lib/reports/security-report-parameter-groups.js +167 -0
- package/server/src/lib/reports/security-report-parameter-groups.js.map +1 -0
- package/server/src/lib/reports/security-report-scope.constants.d.ts +5 -0
- package/server/src/lib/reports/security-report-scope.constants.js +11 -0
- package/server/src/lib/reports/security-report-scope.constants.js.map +1 -0
- package/server/src/lib/reports/security-report.definitions.d.ts +12 -0
- package/server/src/lib/reports/security-report.definitions.js +386 -0
- package/server/src/lib/reports/security-report.definitions.js.map +1 -0
- package/server/src/lib/security-management-entity-storage.bootstrap.d.ts +26 -0
- package/server/src/lib/security-management-entity-storage.bootstrap.js +56 -0
- package/server/src/lib/security-management-entity-storage.bootstrap.js.map +1 -0
- package/server/src/lib/security-management-server.module.d.ts +7 -0
- package/server/src/lib/security-management-server.module.js +190 -0
- package/server/src/lib/security-management-server.module.js.map +1 -0
- package/server/src/lib/two-factor/admin-reset-two-factor.command.d.ts +8 -0
- package/server/src/lib/two-factor/admin-reset-two-factor.command.js +35 -0
- package/server/src/lib/two-factor/admin-reset-two-factor.command.js.map +1 -0
- package/server/src/lib/two-factor/confirm-two-factor-enrollment.command.d.ts +8 -0
- package/server/src/lib/two-factor/confirm-two-factor-enrollment.command.js +34 -0
- package/server/src/lib/two-factor/confirm-two-factor-enrollment.command.js.map +1 -0
- package/server/src/lib/two-factor/disable-two-factor.command.d.ts +8 -0
- package/server/src/lib/two-factor/disable-two-factor.command.js +31 -0
- package/server/src/lib/two-factor/disable-two-factor.command.js.map +1 -0
- package/server/src/lib/two-factor/generate-two-factor-recovery-codes.command.d.ts +8 -0
- package/server/src/lib/two-factor/generate-two-factor-recovery-codes.command.js +34 -0
- package/server/src/lib/two-factor/generate-two-factor-recovery-codes.command.js.map +1 -0
- package/server/src/lib/two-factor/get-two-factor-status.command.d.ts +8 -0
- package/server/src/lib/two-factor/get-two-factor-status.command.js +31 -0
- package/server/src/lib/two-factor/get-two-factor-status.command.js.map +1 -0
- package/server/src/lib/two-factor/recovery-codes.util.d.ts +11 -0
- package/server/src/lib/two-factor/recovery-codes.util.js +73 -0
- package/server/src/lib/two-factor/recovery-codes.util.js.map +1 -0
- package/server/src/lib/two-factor/start-two-factor-enrollment.command.d.ts +8 -0
- package/server/src/lib/two-factor/start-two-factor-enrollment.command.js +31 -0
- package/server/src/lib/two-factor/start-two-factor-enrollment.command.js.map +1 -0
- package/server/src/lib/two-factor/totp.util.d.ts +32 -0
- package/server/src/lib/two-factor/totp.util.js +128 -0
- package/server/src/lib/two-factor/totp.util.js.map +1 -0
- package/server/src/lib/two-factor/two-factor-encryption.util.d.ts +25 -0
- package/server/src/lib/two-factor/two-factor-encryption.util.js +123 -0
- package/server/src/lib/two-factor/two-factor-encryption.util.js.map +1 -0
- package/server/src/lib/two-factor/two-factor-gate.bootstrap.d.ts +9 -0
- package/server/src/lib/two-factor/two-factor-gate.bootstrap.js +65 -0
- package/server/src/lib/two-factor/two-factor-gate.bootstrap.js.map +1 -0
- package/server/src/lib/two-factor/two-factor-redis.store.d.ts +63 -0
- package/server/src/lib/two-factor/two-factor-redis.store.js +321 -0
- package/server/src/lib/two-factor/two-factor-redis.store.js.map +1 -0
- package/server/src/lib/two-factor/user-two-factor.service.d.ts +62 -0
- package/server/src/lib/two-factor/user-two-factor.service.js +573 -0
- package/server/src/lib/two-factor/user-two-factor.service.js.map +1 -0
- package/server/src/lib/two-factor/verify-two-factor-login.command.d.ts +18 -0
- package/server/src/lib/two-factor/verify-two-factor-login.command.js +54 -0
- package/server/src/lib/two-factor/verify-two-factor-login.command.js.map +1 -0
- package/server/src/lib/user-invitation/accept-invitation.command.d.ts +8 -0
- package/server/src/lib/user-invitation/accept-invitation.command.js +41 -0
- package/server/src/lib/user-invitation/accept-invitation.command.js.map +1 -0
- package/server/src/lib/user-invitation/accept-my-invitation.command.d.ts +8 -0
- package/server/src/lib/user-invitation/accept-my-invitation.command.js +40 -0
- package/server/src/lib/user-invitation/accept-my-invitation.command.js.map +1 -0
- package/server/src/lib/user-invitation/approve-join-request.command.d.ts +8 -0
- package/server/src/lib/user-invitation/approve-join-request.command.js +41 -0
- package/server/src/lib/user-invitation/approve-join-request.command.js.map +1 -0
- package/server/src/lib/user-invitation/cancel-invitation.command.d.ts +8 -0
- package/server/src/lib/user-invitation/cancel-invitation.command.js +37 -0
- package/server/src/lib/user-invitation/cancel-invitation.command.js.map +1 -0
- package/server/src/lib/user-invitation/cancel-my-join-request.command.d.ts +8 -0
- package/server/src/lib/user-invitation/cancel-my-join-request.command.js +40 -0
- package/server/src/lib/user-invitation/cancel-my-join-request.command.js.map +1 -0
- package/server/src/lib/user-invitation/create-user-in-tenant.command.d.ts +8 -0
- package/server/src/lib/user-invitation/create-user-in-tenant.command.js +37 -0
- package/server/src/lib/user-invitation/create-user-in-tenant.command.js.map +1 -0
- package/server/src/lib/user-invitation/decline-invitation.command.d.ts +8 -0
- package/server/src/lib/user-invitation/decline-invitation.command.js +37 -0
- package/server/src/lib/user-invitation/decline-invitation.command.js.map +1 -0
- package/server/src/lib/user-invitation/invite-user.command.d.ts +8 -0
- package/server/src/lib/user-invitation/invite-user.command.js +37 -0
- package/server/src/lib/user-invitation/invite-user.command.js.map +1 -0
- package/server/src/lib/user-invitation/list-invite-assignable-roles.command.d.ts +8 -0
- package/server/src/lib/user-invitation/list-invite-assignable-roles.command.js +41 -0
- package/server/src/lib/user-invitation/list-invite-assignable-roles.command.js.map +1 -0
- package/server/src/lib/user-invitation/list-my-join-requests.command.d.ts +8 -0
- package/server/src/lib/user-invitation/list-my-join-requests.command.js +40 -0
- package/server/src/lib/user-invitation/list-my-join-requests.command.js.map +1 -0
- package/server/src/lib/user-invitation/list-my-pending-invitations.command.d.ts +8 -0
- package/server/src/lib/user-invitation/list-my-pending-invitations.command.js +37 -0
- package/server/src/lib/user-invitation/list-my-pending-invitations.command.js.map +1 -0
- package/server/src/lib/user-invitation/list-tenant-entitled-applications.command.d.ts +8 -0
- package/server/src/lib/user-invitation/list-tenant-entitled-applications.command.js +41 -0
- package/server/src/lib/user-invitation/list-tenant-entitled-applications.command.js.map +1 -0
- package/server/src/lib/user-invitation/lookup-tenant-by-unique-name.command.d.ts +8 -0
- package/server/src/lib/user-invitation/lookup-tenant-by-unique-name.command.js +40 -0
- package/server/src/lib/user-invitation/lookup-tenant-by-unique-name.command.js.map +1 -0
- package/server/src/lib/user-invitation/reject-join-request.command.d.ts +8 -0
- package/server/src/lib/user-invitation/reject-join-request.command.js +41 -0
- package/server/src/lib/user-invitation/reject-join-request.command.js.map +1 -0
- package/server/src/lib/user-invitation/request-tenant-membership.command.d.ts +8 -0
- package/server/src/lib/user-invitation/request-tenant-membership.command.js +40 -0
- package/server/src/lib/user-invitation/request-tenant-membership.command.js.map +1 -0
- package/server/src/lib/user-invitation/resend-invitation.command.d.ts +12 -0
- package/server/src/lib/user-invitation/resend-invitation.command.js +37 -0
- package/server/src/lib/user-invitation/resend-invitation.command.js.map +1 -0
- package/server/src/lib/user-invitation/user-invitation-application-access.util.d.ts +25 -0
- package/server/src/lib/user-invitation/user-invitation-application-access.util.js +121 -0
- package/server/src/lib/user-invitation/user-invitation-application-access.util.js.map +1 -0
- package/server/src/lib/user-invitation/user-invitation.service.d.ts +162 -0
- package/server/src/lib/user-invitation/user-invitation.service.js +1658 -0
- package/server/src/lib/user-invitation/user-invitation.service.js.map +1 -0
- package/contracts/src/datasource.keys.d.ts +0 -4
- package/contracts/src/datasource.keys.js +0 -10
- package/contracts/src/datasource.keys.js.map +0 -1
- package/src/index.d.ts +0 -5
- package/src/index.js +0 -13
- package/src/index.js.map +0 -1
- package/src/lib/security-management-server.module.d.ts +0 -2
- package/src/lib/security-management-server.module.js +0 -23
- package/src/lib/security-management-server.module.js.map +0 -1
- package/src/lib/seed/index.d.ts +0 -22
- package/src/lib/seed/index.js +0 -24
- package/src/lib/seed/index.js.map +0 -1
- package/src/lib/seed/policy/index.d.ts +0 -2
- package/src/lib/seed/policy/index.js +0 -6
- package/src/lib/seed/policy/index.js.map +0 -1
- package/src/lib/seed/policy/policy.mock.d.ts +0 -7
- package/src/lib/seed/policy/policy.mock.js +0 -40
- package/src/lib/seed/policy/policy.mock.js.map +0 -1
- package/src/lib/seed/policy/policy.seed.d.ts +0 -5
- package/src/lib/seed/policy/policy.seed.js +0 -31
- package/src/lib/seed/policy/policy.seed.js.map +0 -1
- package/src/lib/seed/role/index.d.ts +0 -4
- package/src/lib/seed/role/index.js +0 -8
- package/src/lib/seed/role/index.js.map +0 -1
- package/src/lib/seed/role/role-ids.constants.d.ts +0 -14
- package/src/lib/seed/role/role-ids.constants.js +0 -20
- package/src/lib/seed/role/role-ids.constants.js.map +0 -1
- package/src/lib/seed/role/role-permission-keys.constants.d.ts +0 -578
- package/src/lib/seed/role/role-permission-keys.constants.js +0 -620
- package/src/lib/seed/role/role-permission-keys.constants.js.map +0 -1
- package/src/lib/seed/role/role.mock.d.ts +0 -4
- package/src/lib/seed/role/role.mock.js +0 -321
- package/src/lib/seed/role/role.mock.js.map +0 -1
- package/src/lib/seed/role/role.seed.d.ts +0 -5
- package/src/lib/seed/role/role.seed.js +0 -31
- package/src/lib/seed/role/role.seed.js.map +0 -1
- package/src/lib/seed/security-management-seed.provider.d.ts +0 -4
- package/src/lib/seed/security-management-seed.provider.js +0 -18
- package/src/lib/seed/security-management-seed.provider.js.map +0 -1
- package/src/lib/seed/security-management-seed.tokens.d.ts +0 -1
- package/src/lib/seed/security-management-seed.tokens.js +0 -7
- package/src/lib/seed/security-management-seed.tokens.js.map +0 -1
- package/src/lib/seed/security-management.seed-catalog.d.ts +0 -2
- package/src/lib/seed/security-management.seed-catalog.js +0 -17
- package/src/lib/seed/security-management.seed-catalog.js.map +0 -1
- package/src/lib/seed/tenant/index.d.ts +0 -1
- package/src/lib/seed/tenant/tenant-ids.constants.d.ts +0 -11
- package/src/lib/seed/tenant/tenant-ids.constants.js +0 -17
- package/src/lib/seed/tenant/tenant-ids.constants.js.map +0 -1
- package/src/lib/seed/user/index.d.ts +0 -4
- package/src/lib/seed/user/index.js +0 -13
- package/src/lib/seed/user/index.js.map +0 -1
- package/src/lib/seed/user/resolve-user-effective-state.util.d.ts +0 -14
- package/src/lib/seed/user/resolve-user-effective-state.util.js +0 -61
- package/src/lib/seed/user/resolve-user-effective-state.util.js.map +0 -1
- package/src/lib/seed/user/user.mock.d.ts +0 -20
- package/src/lib/seed/user/user.mock.js +0 -332
- package/src/lib/seed/user/user.mock.js.map +0 -1
- package/src/lib/seed/user/user.seed.d.ts +0 -5
- package/src/lib/seed/user/user.seed.js +0 -31
- package/src/lib/seed/user/user.seed.js.map +0 -1
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
//#region ---- Imports ----
|
|
3
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
4
|
+
exports.SecurityManagementManifest = void 0;
|
|
5
|
+
const root_config_1 = require("./root-config");
|
|
6
|
+
//#endregion
|
|
7
|
+
//#region ---- Manifest Definition ----
|
|
8
|
+
/**
|
|
9
|
+
* Security Management Module Manifest.
|
|
10
|
+
* Defines module metadata, features, and provider references.
|
|
11
|
+
*/
|
|
12
|
+
exports.SecurityManagementManifest = {
|
|
13
|
+
name: root_config_1.RootConfig.module.name,
|
|
14
|
+
version: '1.0.0',
|
|
15
|
+
title: root_config_1.RootConfig.module.title,
|
|
16
|
+
icon: root_config_1.RootConfig.module.icon,
|
|
17
|
+
i18n: root_config_1.RootConfig.config.i18n,
|
|
18
|
+
type: 'platform',
|
|
19
|
+
domain: 'platform',
|
|
20
|
+
required: true,
|
|
21
|
+
// Module dependencies (optional)
|
|
22
|
+
};
|
|
23
|
+
//#endregion
|
|
24
|
+
//# sourceMappingURL=manifest.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/contracts/src/manifest.ts"],"names":[],"mappings":";AAAA,+BAA+B;;;AAG/B,+CAA2C;AAE3C,YAAY;AAEZ,2CAA2C;AAE3C;;;GAGG;AACU,QAAA,0BAA0B,GAAsB;IAC3D,IAAI,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;IAC5B,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,wBAAU,CAAC,MAAM,CAAC,KAAK;IAC9B,IAAI,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;IAC5B,IAAI,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;IAC5B,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,UAAU;IAClB,QAAQ,EAAE,IAAI;IAEd,iCAAiC;CAClC,CAAC;AAEF,YAAY"}
|
|
@@ -4,5 +4,6 @@ export declare const AXPSecurityManagementMenuKeys: {
|
|
|
4
4
|
readonly Roles: "SecurityManagement:Menu:Roles";
|
|
5
5
|
readonly DeviceSessions: "SecurityManagement:Menu:DeviceSessions";
|
|
6
6
|
readonly Policy: "SecurityManagement:Menu:Policy";
|
|
7
|
+
readonly IdentityProviders: "SecurityManagement:Menu:IdentityProviders";
|
|
7
8
|
readonly MyProfile: "SecurityManagement:Menu:MyProfile";
|
|
8
9
|
};
|
|
@@ -7,6 +7,7 @@ exports.AXPSecurityManagementMenuKeys = {
|
|
|
7
7
|
Roles: 'SecurityManagement:Menu:Roles',
|
|
8
8
|
DeviceSessions: 'SecurityManagement:Menu:DeviceSessions',
|
|
9
9
|
Policy: 'SecurityManagement:Menu:Policy',
|
|
10
|
+
IdentityProviders: 'SecurityManagement:Menu:IdentityProviders',
|
|
10
11
|
MyProfile: 'SecurityManagement:Menu:MyProfile',
|
|
11
12
|
};
|
|
12
13
|
//# sourceMappingURL=menu.keys.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"menu.keys.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/
|
|
1
|
+
{"version":3,"file":"menu.keys.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/contracts/src/menu.keys.ts"],"names":[],"mappings":";;;AAAa,QAAA,6BAA6B,GAAG;IAC3C,IAAI,EAAE,yBAAyB;IAC/B,KAAK,EAAE,+BAA+B;IACtC,KAAK,EAAE,+BAA+B;IACtC,cAAc,EAAE,wCAAwC;IACxD,MAAM,EAAE,gCAAgC;IACxC,iBAAiB,EAAE,2CAA2C;IAC9D,SAAS,EAAE,mCAAmC;CACtC,CAAC"}
|
|
@@ -1,28 +1,58 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Administration capabilities used by this module.
|
|
3
|
+
* Domain capability keys for this module. Root groups live in `AXPCommonPermissionGroupKeys` (common contracts).
|
|
4
|
+
*/
|
|
5
|
+
export declare const AXPAdministrationPermissionKeys: {
|
|
6
|
+
readonly Access: "Administration:Permission:Access";
|
|
7
|
+
/** Create and maintain users, roles, role assignments, and related security-access reports. */
|
|
8
|
+
readonly MaintainUsersAndRoles: "Administration:Permission:MaintainUsersAndRoles";
|
|
9
|
+
readonly ManageSessions: "Administration:Permission:ManageSessions";
|
|
10
|
+
readonly MaintainPolicies: "Administration:Permission:MaintainPolicies";
|
|
11
|
+
readonly ViewIntegrations: "Administration:Permission:ViewIntegrations";
|
|
12
|
+
readonly MaintainConnections: "Administration:Permission:MaintainConnections";
|
|
13
|
+
readonly ManageIntegrationActions: "Administration:Permission:ManageIntegrationActions";
|
|
14
|
+
readonly MaintainWorkflows: "Administration:Permission:MaintainWorkflows";
|
|
15
|
+
readonly ManageWorkflowActions: "Administration:Permission:ManageWorkflowActions";
|
|
16
|
+
readonly ViewRules: "Administration:Permission:ViewRules";
|
|
17
|
+
readonly MaintainRules: "Administration:Permission:MaintainRules";
|
|
18
|
+
readonly ManageRuleActions: "Administration:Permission:ManageRuleActions";
|
|
19
|
+
readonly MaintainAi: "Administration:Permission:MaintainAi";
|
|
20
|
+
readonly UseAiAssist: "Administration:Permission:UseAiAssist";
|
|
21
|
+
readonly MaintainDashboards: "Administration:Permission:MaintainDashboards";
|
|
22
|
+
readonly ViewJobs: "Administration:Permission:ViewJobs";
|
|
23
|
+
readonly ManageJobActions: "Administration:Permission:ManageJobActions";
|
|
24
|
+
readonly ViewObservability: "Administration:Permission:ViewObservability";
|
|
25
|
+
readonly MaintainObservability: "Administration:Permission:MaintainObservability";
|
|
26
|
+
};
|
|
27
|
+
/**
|
|
28
|
+
* @deprecated Prefer {@link AXPAdministrationPermissionKeys}.
|
|
29
|
+
* Legacy nested shape kept so existing imports compile during migration.
|
|
30
|
+
*/
|
|
1
31
|
export declare const AXPSecurityManagementPermissionKeys: {
|
|
2
32
|
readonly User: {
|
|
3
|
-
readonly Management: "
|
|
4
|
-
readonly View: "
|
|
5
|
-
readonly Edit: "
|
|
6
|
-
readonly Delete: "
|
|
7
|
-
readonly Create: "
|
|
33
|
+
readonly Management: "Administration:Permission:MaintainUsersAndRoles";
|
|
34
|
+
readonly View: "Administration:Permission:MaintainUsersAndRoles";
|
|
35
|
+
readonly Edit: "Administration:Permission:MaintainUsersAndRoles";
|
|
36
|
+
readonly Delete: "Administration:Permission:MaintainUsersAndRoles";
|
|
37
|
+
readonly Create: "Administration:Permission:MaintainUsersAndRoles";
|
|
8
38
|
};
|
|
9
39
|
readonly Role: {
|
|
10
|
-
readonly Management: "
|
|
11
|
-
readonly View: "
|
|
12
|
-
readonly Edit: "
|
|
13
|
-
readonly Delete: "
|
|
14
|
-
readonly Create: "
|
|
40
|
+
readonly Management: "Administration:Permission:MaintainUsersAndRoles";
|
|
41
|
+
readonly View: "Administration:Permission:MaintainUsersAndRoles";
|
|
42
|
+
readonly Edit: "Administration:Permission:MaintainUsersAndRoles";
|
|
43
|
+
readonly Delete: "Administration:Permission:MaintainUsersAndRoles";
|
|
44
|
+
readonly Create: "Administration:Permission:MaintainUsersAndRoles";
|
|
15
45
|
};
|
|
16
46
|
readonly DeviceSession: {
|
|
17
|
-
readonly Management: "
|
|
18
|
-
readonly View: "
|
|
19
|
-
readonly Terminate: "
|
|
47
|
+
readonly Management: "Administration:Permission:ManageSessions";
|
|
48
|
+
readonly View: "Administration:Permission:ManageSessions";
|
|
49
|
+
readonly Terminate: "Administration:Permission:ManageSessions";
|
|
20
50
|
};
|
|
21
51
|
readonly Policy: {
|
|
22
|
-
readonly Management: "
|
|
23
|
-
readonly View: "
|
|
24
|
-
readonly Edit: "
|
|
25
|
-
readonly Delete: "
|
|
26
|
-
readonly Create: "
|
|
52
|
+
readonly Management: "Administration:Permission:MaintainPolicies";
|
|
53
|
+
readonly View: "Administration:Permission:MaintainPolicies";
|
|
54
|
+
readonly Edit: "Administration:Permission:MaintainPolicies";
|
|
55
|
+
readonly Delete: "Administration:Permission:MaintainPolicies";
|
|
56
|
+
readonly Create: "Administration:Permission:MaintainPolicies";
|
|
27
57
|
};
|
|
28
58
|
};
|
|
@@ -1,34 +1,62 @@
|
|
|
1
1
|
"use strict";
|
|
2
|
-
//#region ---- Permission Keys ----
|
|
3
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
4
|
-
exports.AXPSecurityManagementPermissionKeys = void 0;
|
|
3
|
+
exports.AXPSecurityManagementPermissionKeys = exports.AXPAdministrationPermissionKeys = void 0;
|
|
4
|
+
/**
|
|
5
|
+
* Administration capabilities used by this module.
|
|
6
|
+
* Domain capability keys for this module. Root groups live in `AXPCommonPermissionGroupKeys` (common contracts).
|
|
7
|
+
*/
|
|
8
|
+
exports.AXPAdministrationPermissionKeys = {
|
|
9
|
+
Access: 'Administration:Permission:Access',
|
|
10
|
+
/** Create and maintain users, roles, role assignments, and related security-access reports. */
|
|
11
|
+
MaintainUsersAndRoles: 'Administration:Permission:MaintainUsersAndRoles',
|
|
12
|
+
ManageSessions: 'Administration:Permission:ManageSessions',
|
|
13
|
+
MaintainPolicies: 'Administration:Permission:MaintainPolicies',
|
|
14
|
+
ViewIntegrations: 'Administration:Permission:ViewIntegrations',
|
|
15
|
+
MaintainConnections: 'Administration:Permission:MaintainConnections',
|
|
16
|
+
ManageIntegrationActions: 'Administration:Permission:ManageIntegrationActions',
|
|
17
|
+
MaintainWorkflows: 'Administration:Permission:MaintainWorkflows',
|
|
18
|
+
ManageWorkflowActions: 'Administration:Permission:ManageWorkflowActions',
|
|
19
|
+
ViewRules: 'Administration:Permission:ViewRules',
|
|
20
|
+
MaintainRules: 'Administration:Permission:MaintainRules',
|
|
21
|
+
ManageRuleActions: 'Administration:Permission:ManageRuleActions',
|
|
22
|
+
MaintainAi: 'Administration:Permission:MaintainAi',
|
|
23
|
+
UseAiAssist: 'Administration:Permission:UseAiAssist',
|
|
24
|
+
MaintainDashboards: 'Administration:Permission:MaintainDashboards',
|
|
25
|
+
ViewJobs: 'Administration:Permission:ViewJobs',
|
|
26
|
+
ManageJobActions: 'Administration:Permission:ManageJobActions',
|
|
27
|
+
ViewObservability: 'Administration:Permission:ViewObservability',
|
|
28
|
+
MaintainObservability: 'Administration:Permission:MaintainObservability',
|
|
29
|
+
};
|
|
30
|
+
/**
|
|
31
|
+
* @deprecated Prefer {@link AXPAdministrationPermissionKeys}.
|
|
32
|
+
* Legacy nested shape kept so existing imports compile during migration.
|
|
33
|
+
*/
|
|
5
34
|
exports.AXPSecurityManagementPermissionKeys = {
|
|
6
35
|
User: {
|
|
7
|
-
Management:
|
|
8
|
-
View:
|
|
9
|
-
Edit:
|
|
10
|
-
Delete:
|
|
11
|
-
Create:
|
|
36
|
+
Management: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
|
|
37
|
+
View: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
|
|
38
|
+
Edit: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
|
|
39
|
+
Delete: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
|
|
40
|
+
Create: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
|
|
12
41
|
},
|
|
13
42
|
Role: {
|
|
14
|
-
Management:
|
|
15
|
-
View:
|
|
16
|
-
Edit:
|
|
17
|
-
Delete:
|
|
18
|
-
Create:
|
|
43
|
+
Management: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
|
|
44
|
+
View: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
|
|
45
|
+
Edit: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
|
|
46
|
+
Delete: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
|
|
47
|
+
Create: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
|
|
19
48
|
},
|
|
20
49
|
DeviceSession: {
|
|
21
|
-
Management:
|
|
22
|
-
View:
|
|
23
|
-
Terminate:
|
|
50
|
+
Management: exports.AXPAdministrationPermissionKeys.ManageSessions,
|
|
51
|
+
View: exports.AXPAdministrationPermissionKeys.ManageSessions,
|
|
52
|
+
Terminate: exports.AXPAdministrationPermissionKeys.ManageSessions,
|
|
24
53
|
},
|
|
25
54
|
Policy: {
|
|
26
|
-
Management:
|
|
27
|
-
View:
|
|
28
|
-
Edit:
|
|
29
|
-
Delete:
|
|
30
|
-
Create:
|
|
55
|
+
Management: exports.AXPAdministrationPermissionKeys.MaintainPolicies,
|
|
56
|
+
View: exports.AXPAdministrationPermissionKeys.MaintainPolicies,
|
|
57
|
+
Edit: exports.AXPAdministrationPermissionKeys.MaintainPolicies,
|
|
58
|
+
Delete: exports.AXPAdministrationPermissionKeys.MaintainPolicies,
|
|
59
|
+
Create: exports.AXPAdministrationPermissionKeys.MaintainPolicies,
|
|
31
60
|
},
|
|
32
61
|
};
|
|
33
|
-
//#endregion
|
|
34
62
|
//# sourceMappingURL=permission.keys.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"permission.keys.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/
|
|
1
|
+
{"version":3,"file":"permission.keys.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/contracts/src/permission.keys.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACU,QAAA,+BAA+B,GAAG;IAC7C,MAAM,EAAE,kCAAkC;IAC1C,+FAA+F;IAC/F,qBAAqB,EAAE,iDAAiD;IACxE,cAAc,EAAE,0CAA0C;IAC1D,gBAAgB,EAAE,4CAA4C;IAC9D,gBAAgB,EAAE,4CAA4C;IAC9D,mBAAmB,EAAE,+CAA+C;IACpE,wBAAwB,EAAE,oDAAoD;IAC9E,iBAAiB,EAAE,6CAA6C;IAChE,qBAAqB,EAAE,iDAAiD;IACxE,SAAS,EAAE,qCAAqC;IAChD,aAAa,EAAE,yCAAyC;IACxD,iBAAiB,EAAE,6CAA6C;IAChE,UAAU,EAAE,sCAAsC;IAClD,WAAW,EAAE,uCAAuC;IACpD,kBAAkB,EAAE,8CAA8C;IAClE,QAAQ,EAAE,oCAAoC;IAC9C,gBAAgB,EAAE,4CAA4C;IAC9D,iBAAiB,EAAE,6CAA6C;IAChE,qBAAqB,EAAE,iDAAiD;CAChE,CAAC;AAEX;;;GAGG;AACU,QAAA,mCAAmC,GAAG;IACjD,IAAI,EAAE;QACJ,UAAU,EAAE,uCAA+B,CAAC,qBAAqB;QACjE,IAAI,EAAE,uCAA+B,CAAC,qBAAqB;QAC3D,IAAI,EAAE,uCAA+B,CAAC,qBAAqB;QAC3D,MAAM,EAAE,uCAA+B,CAAC,qBAAqB;QAC7D,MAAM,EAAE,uCAA+B,CAAC,qBAAqB;KAC9D;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,uCAA+B,CAAC,qBAAqB;QACjE,IAAI,EAAE,uCAA+B,CAAC,qBAAqB;QAC3D,IAAI,EAAE,uCAA+B,CAAC,qBAAqB;QAC3D,MAAM,EAAE,uCAA+B,CAAC,qBAAqB;QAC7D,MAAM,EAAE,uCAA+B,CAAC,qBAAqB;KAC9D;IACD,aAAa,EAAE;QACb,UAAU,EAAE,uCAA+B,CAAC,cAAc;QAC1D,IAAI,EAAE,uCAA+B,CAAC,cAAc;QACpD,SAAS,EAAE,uCAA+B,CAAC,cAAc;KAC1D;IACD,MAAM,EAAE;QACN,UAAU,EAAE,uCAA+B,CAAC,gBAAgB;QAC5D,IAAI,EAAE,uCAA+B,CAAC,gBAAgB;QACtD,IAAI,EAAE,uCAA+B,CAAC,gBAAgB;QACtD,MAAM,EAAE,uCAA+B,CAAC,gBAAgB;QACxD,MAAM,EAAE,uCAA+B,CAAC,gBAAgB;KACzD;CACO,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import { AXMUserAccessState } from './user-access-state';
|
|
2
|
+
import { AXMUserEffectiveState } from './user-effective-state';
|
|
3
|
+
/**
|
|
4
|
+
* Derives the unified operational state from account lifecycle and sign-in gate.
|
|
5
|
+
* Used for persisted `effectiveState` on SecurityManagement.User.
|
|
6
|
+
*/
|
|
7
|
+
export declare function resolveAXMUserEffectiveState(input: {
|
|
8
|
+
accountState: string | undefined;
|
|
9
|
+
accessState: AXMUserAccessState | string | undefined;
|
|
10
|
+
}): AXMUserEffectiveState;
|
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.resolveAXMUserEffectiveState = resolveAXMUserEffectiveState;
|
|
4
|
+
const user_access_state_1 = require("./user-access-state");
|
|
5
|
+
const user_effective_state_1 = require("./user-effective-state");
|
|
6
|
+
//#region ---- Resolve effective state ----
|
|
7
|
+
const AccountLifecycleState = {
|
|
8
|
+
Active: 'active',
|
|
9
|
+
Archived: 'archived',
|
|
10
|
+
Pending: 'pending',
|
|
11
|
+
Inactive: 'inactive',
|
|
12
|
+
Suspended: 'suspended',
|
|
13
|
+
};
|
|
14
|
+
/**
|
|
15
|
+
* Derives the unified operational state from account lifecycle and sign-in gate.
|
|
16
|
+
* Used for persisted `effectiveState` on SecurityManagement.User.
|
|
17
|
+
*/
|
|
18
|
+
function resolveAXMUserEffectiveState(input) {
|
|
19
|
+
var _a;
|
|
20
|
+
const lifecycle = input.accountState;
|
|
21
|
+
const auth = ((_a = input.accessState) !== null && _a !== void 0 ? _a : user_access_state_1.AXMUserAccessState.Allowed);
|
|
22
|
+
if (lifecycle === AccountLifecycleState.Archived) {
|
|
23
|
+
return user_effective_state_1.AXMUserEffectiveState.Archived;
|
|
24
|
+
}
|
|
25
|
+
if (lifecycle === AccountLifecycleState.Pending) {
|
|
26
|
+
return user_effective_state_1.AXMUserEffectiveState.Pending;
|
|
27
|
+
}
|
|
28
|
+
if (lifecycle === AccountLifecycleState.Inactive) {
|
|
29
|
+
return user_effective_state_1.AXMUserEffectiveState.Inactive;
|
|
30
|
+
}
|
|
31
|
+
if (lifecycle === AccountLifecycleState.Suspended) {
|
|
32
|
+
return user_effective_state_1.AXMUserEffectiveState.Suspended;
|
|
33
|
+
}
|
|
34
|
+
if (auth === user_access_state_1.AXMUserAccessState.Expired) {
|
|
35
|
+
return user_effective_state_1.AXMUserEffectiveState.CredentialExpired;
|
|
36
|
+
}
|
|
37
|
+
if (auth === user_access_state_1.AXMUserAccessState.Blocked) {
|
|
38
|
+
return user_effective_state_1.AXMUserEffectiveState.SignInBlocked;
|
|
39
|
+
}
|
|
40
|
+
if (lifecycle === AccountLifecycleState.Active) {
|
|
41
|
+
return user_effective_state_1.AXMUserEffectiveState.Active;
|
|
42
|
+
}
|
|
43
|
+
return user_effective_state_1.AXMUserEffectiveState.Active;
|
|
44
|
+
}
|
|
45
|
+
//#endregion
|
|
46
|
+
//# sourceMappingURL=resolve-user-effective-state.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"resolve-user-effective-state.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/contracts/src/resolve-user-effective-state.ts"],"names":[],"mappings":";;AAiBA,oEA6BC;AA9CD,2DAAyD;AACzD,iEAA+D;AAE/D,2CAA2C;AAE3C,MAAM,qBAAqB,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;CACd,CAAC;AAEX;;;GAGG;AACH,SAAgB,4BAA4B,CAAC,KAG5C;;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,MAAA,KAAK,CAAC,WAAW,mCAAI,sCAAkB,CAAC,OAAO,CAAW,CAAC;IAEzE,IAAI,SAAS,KAAK,qBAAqB,CAAC,QAAQ,EAAE,CAAC;QACjD,OAAO,4CAAqB,CAAC,QAAQ,CAAC;IACxC,CAAC;IACD,IAAI,SAAS,KAAK,qBAAqB,CAAC,OAAO,EAAE,CAAC;QAChD,OAAO,4CAAqB,CAAC,OAAO,CAAC;IACvC,CAAC;IACD,IAAI,SAAS,KAAK,qBAAqB,CAAC,QAAQ,EAAE,CAAC;QACjD,OAAO,4CAAqB,CAAC,QAAQ,CAAC;IACxC,CAAC;IACD,IAAI,SAAS,KAAK,qBAAqB,CAAC,SAAS,EAAE,CAAC;QAClD,OAAO,4CAAqB,CAAC,SAAS,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,KAAK,sCAAkB,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,4CAAqB,CAAC,iBAAiB,CAAC;IACjD,CAAC;IACD,IAAI,IAAI,KAAK,sCAAkB,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,4CAAqB,CAAC,aAAa,CAAC;IAC7C,CAAC;IACD,IAAI,SAAS,KAAK,qBAAqB,CAAC,MAAM,EAAE,CAAC;QAC/C,OAAO,4CAAqB,CAAC,MAAM,CAAC;IACtC,CAAC;IACD,OAAO,4CAAqB,CAAC,MAAM,CAAC;AACtC,CAAC;AAED,YAAY"}
|
|
@@ -34,11 +34,44 @@ export declare const RootConfig: {
|
|
|
34
34
|
readonly titlePlural: `@${string}:roles.entities.role.plural`;
|
|
35
35
|
readonly icon: "fa-light fa-user-tag";
|
|
36
36
|
};
|
|
37
|
+
readonly rolePermission: {
|
|
38
|
+
readonly name: "RolePermission";
|
|
39
|
+
readonly title: `@${string}:role-permissions.entities.role-permission.title`;
|
|
40
|
+
readonly titlePlural: `@${string}:role-permissions.entities.role-permission.plural`;
|
|
41
|
+
readonly icon: "fa-light fa-key";
|
|
42
|
+
};
|
|
43
|
+
readonly userRole: {
|
|
44
|
+
readonly name: "UserRole";
|
|
45
|
+
readonly title: `@${string}:user-roles.entities.user-role.title`;
|
|
46
|
+
readonly titlePlural: `@${string}:user-roles.entities.user-role.plural`;
|
|
47
|
+
readonly icon: "fa-light fa-user-tag";
|
|
48
|
+
};
|
|
37
49
|
readonly profile: {
|
|
38
50
|
readonly name: "Profile";
|
|
39
51
|
readonly title: `@${string}:profile.entities.profile.title`;
|
|
40
52
|
readonly titlePlural: `@${string}:profile.entities.profile.plural`;
|
|
41
53
|
readonly icon: "fa-light fa-user";
|
|
42
54
|
};
|
|
55
|
+
readonly identityProvider: {
|
|
56
|
+
readonly name: "IdentityProvider";
|
|
57
|
+
readonly title: `@${string}:identity-providers.entities.identity-provider.title`;
|
|
58
|
+
readonly titlePlural: `@${string}:identity-providers.entities.identity-provider.plural`;
|
|
59
|
+
readonly icon: "fa-light fa-id-badge";
|
|
60
|
+
};
|
|
61
|
+
readonly userTwoFactor: {
|
|
62
|
+
readonly name: "UserTwoFactor";
|
|
63
|
+
readonly title: `@${string}:user-two-factor.entities.user-two-factor.title`;
|
|
64
|
+
readonly titlePlural: `@${string}:user-two-factor.entities.user-two-factor.plural`;
|
|
65
|
+
readonly icon: "fa-light fa-shield-keyhole";
|
|
66
|
+
};
|
|
67
|
+
};
|
|
68
|
+
readonly queries: {
|
|
69
|
+
readonly reports: {
|
|
70
|
+
readonly getUserEffectiveRolesHistory: "SecurityManagement:Reports:GetUserEffectiveRolesHistory";
|
|
71
|
+
readonly getUserEffectivePermissionsHistory: "SecurityManagement:Reports:GetUserEffectivePermissionsHistory";
|
|
72
|
+
readonly getRoleHoldersHistory: "SecurityManagement:Reports:GetRoleHoldersHistory";
|
|
73
|
+
readonly getPermissionHoldersHistory: "SecurityManagement:Reports:GetPermissionHoldersHistory";
|
|
74
|
+
readonly getUserPasswordChangeHistory: "SecurityManagement:Reports:GetUserPasswordChangeHistory";
|
|
75
|
+
};
|
|
43
76
|
};
|
|
44
77
|
};
|
|
@@ -38,12 +38,45 @@ exports.RootConfig = {
|
|
|
38
38
|
titlePlural: `@${config.i18n}:roles.entities.role.plural`,
|
|
39
39
|
icon: 'fa-light fa-user-tag',
|
|
40
40
|
},
|
|
41
|
+
rolePermission: {
|
|
42
|
+
name: 'RolePermission',
|
|
43
|
+
title: `@${config.i18n}:role-permissions.entities.role-permission.title`,
|
|
44
|
+
titlePlural: `@${config.i18n}:role-permissions.entities.role-permission.plural`,
|
|
45
|
+
icon: 'fa-light fa-key',
|
|
46
|
+
},
|
|
47
|
+
userRole: {
|
|
48
|
+
name: 'UserRole',
|
|
49
|
+
title: `@${config.i18n}:user-roles.entities.user-role.title`,
|
|
50
|
+
titlePlural: `@${config.i18n}:user-roles.entities.user-role.plural`,
|
|
51
|
+
icon: 'fa-light fa-user-tag',
|
|
52
|
+
},
|
|
41
53
|
profile: {
|
|
42
54
|
name: 'Profile',
|
|
43
55
|
title: `@${config.i18n}:profile.entities.profile.title`,
|
|
44
56
|
titlePlural: `@${config.i18n}:profile.entities.profile.plural`,
|
|
45
57
|
icon: 'fa-light fa-user',
|
|
46
58
|
},
|
|
59
|
+
identityProvider: {
|
|
60
|
+
name: 'IdentityProvider',
|
|
61
|
+
title: `@${config.i18n}:identity-providers.entities.identity-provider.title`,
|
|
62
|
+
titlePlural: `@${config.i18n}:identity-providers.entities.identity-provider.plural`,
|
|
63
|
+
icon: 'fa-light fa-id-badge',
|
|
64
|
+
},
|
|
65
|
+
userTwoFactor: {
|
|
66
|
+
name: 'UserTwoFactor',
|
|
67
|
+
title: `@${config.i18n}:user-two-factor.entities.user-two-factor.title`,
|
|
68
|
+
titlePlural: `@${config.i18n}:user-two-factor.entities.user-two-factor.plural`,
|
|
69
|
+
icon: 'fa-light fa-shield-keyhole',
|
|
70
|
+
},
|
|
71
|
+
},
|
|
72
|
+
queries: {
|
|
73
|
+
reports: {
|
|
74
|
+
getUserEffectiveRolesHistory: 'SecurityManagement:Reports:GetUserEffectiveRolesHistory',
|
|
75
|
+
getUserEffectivePermissionsHistory: 'SecurityManagement:Reports:GetUserEffectivePermissionsHistory',
|
|
76
|
+
getRoleHoldersHistory: 'SecurityManagement:Reports:GetRoleHoldersHistory',
|
|
77
|
+
getPermissionHoldersHistory: 'SecurityManagement:Reports:GetPermissionHoldersHistory',
|
|
78
|
+
getUserPasswordChangeHistory: 'SecurityManagement:Reports:GetUserPasswordChangeHistory',
|
|
79
|
+
},
|
|
47
80
|
},
|
|
48
81
|
};
|
|
49
82
|
//# sourceMappingURL=root-config.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"root-config.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/
|
|
1
|
+
{"version":3,"file":"root-config.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/contracts/src/root-config.ts"],"names":[],"mappings":";;;AAAA,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,qBAAqB;IAC3B,aAAa,EAAE,SAAS;CACzB,CAAC;AACW,QAAA,UAAU,GAAG;IACxB,MAAM;IACN,MAAM,EAAE;QACN,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,eAAe;QACrC,IAAI,EAAE,2BAA2B;KAClC;IACD,QAAQ,EAAE;QACR,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,iCAAiC;YACvD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YAC9D,IAAI,EAAE,4BAA4B;SACnC;QACD,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YACxD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,mCAAmC;YAC/D,IAAI,EAAE,oBAAoB;SAC3B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,4BAA4B;YAClD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,6BAA6B;YACzD,IAAI,EAAE,mBAAmB;SAC1B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,4BAA4B;YAClD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,6BAA6B;YACzD,IAAI,EAAE,sBAAsB;SAC7B;QACD,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,kDAAkD;YACxE,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,mDAAmD;YAC/E,IAAI,EAAE,iBAAiB;SACxB;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,sCAAsC;YAC5D,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,uCAAuC;YACnE,IAAI,EAAE,sBAAsB;SAC7B;QACD,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,iCAAiC;YACvD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YAC9D,IAAI,EAAE,kBAAkB;SACzB;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,sDAAsD;YAC5E,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,uDAAuD;YACnF,IAAI,EAAE,sBAAsB;SAC7B;QACD,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,iDAAiD;YACvE,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,kDAAkD;YAC9E,IAAI,EAAE,4BAA4B;SACnC;KACF;IACD,OAAO,EAAE;QACP,OAAO,EAAE;YACP,4BAA4B,EAAE,yDAAyD;YACvF,kCAAkC,EAChC,+DAA+D;YACjE,qBAAqB,EAAE,kDAAkD;YACzE,2BAA2B,EAAE,wDAAwD;YACrF,4BAA4B,EAAE,yDAAyD;SACxF;KACF;CACO,CAAC"}
|