@antelopejs/dms 0.5.6 → 0.6.0

package/dist/pages/settings/users/security.js

@@ -0,0 +1,251 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecuritySettingsController = void 0;
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const auth_1 = require("@antelopejs/interface-dms/auth");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const custom_1 = require("@antelopejs/interface-dms/base/custom");
+const guards_1 = require("@antelopejs/interface-dms/guards");
+const page_1 = require("@antelopejs/interface-dms/page");
+const account_credentials_1 = require("./account-credentials");
+const category_1 = require("./category");
+const email_change_1 = require("./email-change");
+const two_factor_operations_1 = require("./two-factor-operations");
+const security_attention_1 = require("./security-attention");
+let SecuritySettingsController = class SecuritySettingsController extends (0, page_1.PageController)("security", {
+    displayName: "$menu.security",
+    category: category_1.userCategory,
+    icon: "i-ph-shield-check",
+    order: 3,
+    description: "$page.settings.description.security",
+}) {
+    static statusComponent = (0, custom_1.CustomComponent)("DmsSecurityStatus")
+        .meta({
+        name: "$page.settings.security.status_title",
+        icon: "i-ph-gauge",
+    })
+        .navBadge({
+        count: (_ctx, user) => Promise.resolve((0, security_attention_1.securityAttention)((0, two_factor_operations_1.getTwoFactorStatus)(user)).length),
+    });
+    static passwordComponent = (0, custom_1.CustomComponent)("DmsSecurityPassword").meta({
+        name: "$page.settings.security.password_title",
+        icon: "i-ph-password",
+    });
+    static emailComponent = (0, custom_1.CustomComponent)("DmsSecurityEmail").meta({
+        name: "$page.settings.security.email_title",
+        icon: "i-ph-envelope-simple",
+    });
+    static twoFactorComponent = (0, custom_1.CustomComponent)("DmsSecurityTwoFactor").meta({
+        name: "$page.settings.two_factor.title",
+        icon: "i-ph-shield-check",
+    });
+    static sessionsComponent = (0, custom_1.CustomComponent)("DmsSecuritySessions").meta({
+        name: "$page.settings.sessions.title",
+        icon: "i-ph-devices",
+    });
+    getOverview(sessionModel) {
+        return (0, account_credentials_1.getSecurityOverview)(this.user, sessionModel);
+    }
+    updatePassword(body, userModel, sessionModel, authorization) {
+        return (0, account_credentials_1.changePassword)(this.user, body, {
+            userModel,
+            sessionModel,
+            authorization,
+        });
+    }
+    requestEmailChange(body, userModel) {
+        return (0, email_change_1.requestEmailChange)(this.user, body, userModel);
+    }
+    async confirmEmailChange(body, userModel) {
+        await (0, email_change_1.confirmEmailChange)(this.user, body, userModel);
+        return (0, auth_1.sanitizeUser)(this.user);
+    }
+    cancelEmailChange() {
+        return (0, email_change_1.cancelEmailChange)(this.user);
+    }
+    getTwoFactorStatus() {
+        return (0, two_factor_operations_1.getTwoFactorStatus)(this.user);
+    }
+    enableTotp(body, userModel) {
+        return (0, two_factor_operations_1.startTotpSetup)(this.user, body, userModel);
+    }
+    confirmTotp(body, userModel) {
+        return (0, two_factor_operations_1.confirmTotpSetup)(this.user, body, userModel);
+    }
+    enableEmail(body, userModel) {
+        return (0, two_factor_operations_1.enableEmailMethod)(this.user, body, userModel);
+    }
+    disableTwoFactor(body, userModel) {
+        return (0, two_factor_operations_1.disableTwoFactorMethod)(this.user, body, userModel);
+    }
+    regenerateBackupCodes(body, userModel) {
+        return (0, two_factor_operations_1.regenerateBackupCodes)(this.user, body, userModel);
+    }
+    markBackupCodesSaved(userModel) {
+        return (0, two_factor_operations_1.markBackupCodesSaved)(this.user, userModel);
+    }
+    requestTwoFactorEmailCode(userModel) {
+        return (0, two_factor_operations_1.requestTwoFactorEmailCode)(this.user, userModel);
+    }
+    getSessions(sessionModel, authorization) {
+        return (0, account_credentials_1.listSessions)(this.user, { sessionModel, authorization });
+    }
+    revokeOtherSessions(userModel, sessionModel, authorization) {
+        return (0, account_credentials_1.revokeOtherSessions)(this.user, {
+            userModel,
+            sessionModel,
+            authorization,
+        });
+    }
+    revokeSession(id, sessionModel) {
+        return (0, account_credentials_1.revokeSession)(this.user, id, sessionModel);
+    }
+};
+exports.SecuritySettingsController = SecuritySettingsController;
+__decorate([
+    (0, guards_1.AuthUserWithPermission)(SecuritySettingsController),
+    __metadata("design:type", Function)
+], SecuritySettingsController.prototype, "user", void 0);
+__decorate([
+    (0, interface_api_1.Get)("/"),
+    __param(0, (0, interface_database_decorators_1.Model)(db_1.SessionModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [db_1.SessionModel]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "getOverview", null);
+__decorate([
+    (0, interface_api_1.Post)("/password"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __param(2, (0, interface_database_decorators_1.Model)(db_1.SessionModel)),
+    __param(3, (0, interface_api_1.Parameter)("authorization", "header")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, db_1.UserModel,
+        db_1.SessionModel, String]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "updatePassword", null);
+__decorate([
+    (0, interface_api_1.Post)("/email"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, db_1.UserModel]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "requestEmailChange", null);
+__decorate([
+    (0, interface_api_1.Post)("/email/confirm"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, db_1.UserModel]),
+    __metadata("design:returntype", Promise)
+], SecuritySettingsController.prototype, "confirmEmailChange", null);
+__decorate([
+    (0, interface_api_1.Delete)("/email/pending"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "cancelEmailChange", null);
+__decorate([
+    (0, interface_api_1.Get)("/two-factor"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "getTwoFactorStatus", null);
+__decorate([
+    (0, interface_api_1.Post)("/two-factor/enable-totp"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, db_1.UserModel]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "enableTotp", null);
+__decorate([
+    (0, interface_api_1.Post)("/two-factor/confirm-totp"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, db_1.UserModel]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "confirmTotp", null);
+__decorate([
+    (0, interface_api_1.Post)("/two-factor/enable-email"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, db_1.UserModel]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "enableEmail", null);
+__decorate([
+    (0, interface_api_1.Post)("/two-factor/disable"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, db_1.UserModel]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "disableTwoFactor", null);
+__decorate([
+    (0, interface_api_1.Post)("/two-factor/regenerate-backup"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, db_1.UserModel]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "regenerateBackupCodes", null);
+__decorate([
+    (0, interface_api_1.Post)("/two-factor/backup-codes-saved"),
+    __param(0, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [db_1.UserModel]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "markBackupCodesSaved", null);
+__decorate([
+    (0, interface_api_1.Post)("/two-factor/request-email-code"),
+    __param(0, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [db_1.UserModel]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "requestTwoFactorEmailCode", null);
+__decorate([
+    (0, interface_api_1.Get)("/sessions"),
+    __param(0, (0, interface_database_decorators_1.Model)(db_1.SessionModel)),
+    __param(1, (0, interface_api_1.Parameter)("authorization", "header")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [db_1.SessionModel, String]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "getSessions", null);
+__decorate([
+    (0, interface_api_1.Delete)("/other-sessions"),
+    __param(0, (0, interface_database_decorators_1.Model)(db_1.UserModel)),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.SessionModel)),
+    __param(2, (0, interface_api_1.Parameter)("authorization", "header")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [db_1.UserModel,
+        db_1.SessionModel, String]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "revokeOtherSessions", null);
+__decorate([
+    (0, interface_api_1.Delete)("/sessions/:id"),
+    __param(0, (0, interface_api_1.Parameter)("id", "param")),
+    __param(1, (0, interface_database_decorators_1.Model)(db_1.SessionModel)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, db_1.SessionModel]),
+    __metadata("design:returntype", void 0)
+], SecuritySettingsController.prototype, "revokeSession", null);
+exports.SecuritySettingsController = SecuritySettingsController = __decorate([
+    (0, page_1.RegisterPage)()
+], SecuritySettingsController);
+//# sourceMappingURL=security.js.map

package/dist/pages/settings/users/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/security.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,6DAMmC;AACnC,6FAAkE;AAClE,yDAA8D;AAC9D,0DAI2C;AAC3C,kEAAwE;AACxE,6DAA0E;AAC1E,yDAA8E;AAC9E,+DAM+B;AAC/B,yCAA0C;AAC1C,iDAIwB;AACxB,mEASiC;AACjC,6DAAyD;AAOlD,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,IAAA,qBAAc,EAAC,UAAU,EAAE;IACzE,WAAW,EAAE,gBAAgB;IAC7B,QAAQ,EAAE,uBAAY;IACtB,IAAI,EAAE,mBAAmB;IACzB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,qCAAqC;CACnD,CAAC;IAGA,MAAM,CAAC,eAAe,GAAG,IAAA,wBAAe,EAAC,mBAAmB,CAAC;SAC1D,IAAI,CAAC;QACJ,IAAI,EAAE,sCAAsC;QAC5C,IAAI,EAAE,YAAY;KACnB,CAAC;SACD,QAAQ,CAAC;QACR,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACpB,OAAO,CAAC,OAAO,CAAC,IAAA,sCAAiB,EAAC,IAAA,0CAAkB,EAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;KACtE,CAAC,CAAC;IAEL,MAAM,CAAC,iBAAiB,GAAG,IAAA,wBAAe,EAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC;QACrE,IAAI,EAAE,wCAAwC;QAC9C,IAAI,EAAE,eAAe;KACtB,CAAC,CAAC;IAEH,MAAM,CAAC,cAAc,GAAG,IAAA,wBAAe,EAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC;QAC/D,IAAI,EAAE,qCAAqC;QAC3C,IAAI,EAAE,sBAAsB;KAC7B,CAAC,CAAC;IAEH,MAAM,CAAC,kBAAkB,GAAG,IAAA,wBAAe,EAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC;QACvE,IAAI,EAAE,iCAAiC;QACvC,IAAI,EAAE,mBAAmB;KAC1B,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,GAAG,IAAA,wBAAe,EAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC;QACrE,IAAI,EAAE,+BAA+B;QACrC,IAAI,EAAE,cAAc;KACrB,CAAC,CAAC;IAMH,WAAW,CAAsB,YAA0B;QACzD,OAAO,IAAA,yCAAmB,EAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtD,CAAC;IAGD,cAAc,CACA,IAAa,EACP,SAAoB,EACjB,YAA0B,EACT,aAAqB;QAE3D,OAAO,IAAA,oCAAc,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;YACrC,SAAS;YACT,YAAY;YACZ,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAGD,kBAAkB,CACJ,IAAa,EACP,SAAoB;QAEtC,OAAO,IAAA,iCAAkB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IAGK,AAAN,KAAK,CAAC,kBAAkB,CACV,IAAa,EACP,SAAoB;QAEtC,MAAM,IAAA,iCAAkB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACrD,OAAO,IAAA,mBAAY,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAGD,iBAAiB;QACf,OAAO,IAAA,gCAAiB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAGD,kBAAkB;QAChB,OAAO,IAAA,0CAAkB,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAGD,UAAU,CACI,IAAa,EACP,SAAoB;QAEtC,OAAO,IAAA,sCAAc,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,CAAC;IAGD,WAAW,CACG,IAAa,EACP,SAAoB;QAEtC,OAAO,IAAA,wCAAgB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACtD,CAAC;IAGD,WAAW,CACG,IAAa,EACP,SAAoB;QAEtC,OAAO,IAAA,yCAAiB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAGD,gBAAgB,CACF,IAAa,EACP,SAAoB;QAEtC,OAAO,IAAA,8CAAsB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;IAGD,qBAAqB,CACP,IAAa,EACP,SAAoB;QAEtC,OAAO,IAAA,6CAAqB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3D,CAAC;IAGD,oBAAoB,CAAmB,SAAoB;QACzD,OAAO,IAAA,4CAAoB,EAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,CAAC;IAGD,yBAAyB,CAAmB,SAAoB;QAC9D,OAAO,IAAA,iDAAyB,EAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAGD,WAAW,CACY,YAA0B,EACT,aAAqB;QAE3D,OAAO,IAAA,kCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;IAClE,CAAC;IAGD,mBAAmB,CACC,SAAoB,EACjB,YAA0B,EACT,aAAqB;QAE3D,OAAO,IAAA,yCAAmB,EAAC,IAAI,CAAC,IAAI,EAAE;YACpC,SAAS;YACT,YAAY;YACZ,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAGD,aAAa,CACe,EAAU,EACf,YAA0B;QAE/C,OAAO,IAAA,mCAAa,EAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IACpD,CAAC;;AArKU,gEAA0B;AAwC7B;IADP,IAAA,+BAAsB,EAAC,0BAA0B,CAAC;;wDAChC;AAGnB;IADC,IAAA,mBAAG,EAAC,GAAG,CAAC;IACI,WAAA,IAAA,qCAAK,EAAC,iBAAY,CAAC,CAAA;;qCAAe,iBAAY;;6DAE1D;AAGD;IADC,IAAA,oBAAI,EAAC,WAAW,CAAC;IAEf,WAAA,IAAA,wBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;IAChB,WAAA,IAAA,qCAAK,EAAC,iBAAY,CAAC,CAAA;IACnB,WAAA,IAAA,yBAAS,EAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;;6CAFR,cAAS;QACH,iBAAY;;gEAQhD;AAGD;IADC,IAAA,oBAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,wBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;6CAAY,cAAS;;oEAGvC;AAGK;IADL,IAAA,oBAAI,EAAC,gBAAgB,CAAC;IAEpB,WAAA,IAAA,wBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;6CAAY,cAAS;;oEAIvC;AAGD;IADC,IAAA,sBAAM,EAAC,gBAAgB,CAAC;;;;mEAGxB;AAGD;IADC,IAAA,mBAAG,EAAC,aAAa,CAAC;;;;oEAGlB;AAGD;IADC,IAAA,oBAAI,EAAC,yBAAyB,CAAC;IAE7B,WAAA,IAAA,wBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;6CAAY,cAAS;;4DAGvC;AAGD;IADC,IAAA,oBAAI,EAAC,0BAA0B,CAAC;IAE9B,WAAA,IAAA,wBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;6CAAY,cAAS;;6DAGvC;AAGD;IADC,IAAA,oBAAI,EAAC,0BAA0B,CAAC;IAE9B,WAAA,IAAA,wBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;6CAAY,cAAS;;6DAGvC;AAGD;IADC,IAAA,oBAAI,EAAC,qBAAqB,CAAC;IAEzB,WAAA,IAAA,wBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;6CAAY,cAAS;;kEAGvC;AAGD;IADC,IAAA,oBAAI,EAAC,+BAA+B,CAAC;IAEnC,WAAA,IAAA,wBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;6CAAY,cAAS;;uEAGvC;AAGD;IADC,IAAA,oBAAI,EAAC,gCAAgC,CAAC;IACjB,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;qCAAY,cAAS;;sEAE1D;AAGD;IADC,IAAA,oBAAI,EAAC,gCAAgC,CAAC;IACZ,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;;qCAAY,cAAS;;2EAE/D;AAGD;IADC,IAAA,mBAAG,EAAC,WAAW,CAAC;IAEd,WAAA,IAAA,qCAAK,EAAC,iBAAY,CAAC,CAAA;IACnB,WAAA,IAAA,yBAAS,EAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;;qCADF,iBAAY;;6DAIhD;AAGD;IADC,IAAA,sBAAM,EAAC,iBAAiB,CAAC;IAEvB,WAAA,IAAA,qCAAK,EAAC,cAAS,CAAC,CAAA;IAChB,WAAA,IAAA,qCAAK,EAAC,iBAAY,CAAC,CAAA;IACnB,WAAA,IAAA,yBAAS,EAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;;qCAFR,cAAS;QACH,iBAAY;;qEAQhD;AAGD;IADC,IAAA,sBAAM,EAAC,eAAe,CAAC;IAErB,WAAA,IAAA,yBAAS,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACxB,WAAA,IAAA,qCAAK,EAAC,iBAAY,CAAC,CAAA;;6CAAe,iBAAY;;+DAGhD;qCArKU,0BAA0B;IADtC,IAAA,mBAAY,GAAE;GACF,0BAA0B,CAsKtC"}

package/dist/pages/settings/users/shortcuts.js

@@ -9,15 +9,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ShortcutsSettingsController = void 0;
 const page_1 = require("@antelopejs/interface-dms/page");
 const custom_1 = require("@antelopejs/interface-dms/base/custom");
-const layouts_1 = require("@antelopejs/interface-dms/base/layouts");
 const category_1 = require("./category");
 let ShortcutsSettingsController = class ShortcutsSettingsController extends (0, page_1.PageController)("shortcuts", {
     displayName: "$menu.shortcuts",
     category: category_1.userCategory,
     icon: "i-ph-keyboard",
-    order: 3,
+    order: 6,
     description: "$page.settings.description.shortcuts",
-}, (0, layouts_1.FormPageLayout)()) {
+}) {
     static shortcutsComponent = (0, custom_1.CustomComponent)("DmsSettingsShortcuts").meta({
         name: "$menu.shortcuts",
         icon: "i-ph-keyboard",

package/dist/pages/settings/users/shortcuts.js.map

@@ -1 +1 @@
-{"version":3,"file":"shortcuts.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/shortcuts.ts"],"names":[],"mappings":";;;;;;;;;AAAA,yDAA8E;AAC9E,kEAAwE;AACxE,oEAAwE;AACxE,yCAA0C;AAGnC,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,IAAA,qBAAc,EAC7D,WAAW,EACX;IACE,WAAW,EAAE,iBAAiB;IAC9B,QAAQ,EAAE,uBAAY;IACtB,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,sCAAsC;CACpD,EACD,IAAA,wBAAc,GAAE,CACjB;IACC,MAAM,CAAC,kBAAkB,GAAG,IAAA,wBAAe,EAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC;QACvE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,eAAe;KACtB,CAAC,CAAC;;AAdQ,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAY,GAAE;GACF,2BAA2B,CAevC"}
+{"version":3,"file":"shortcuts.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/shortcuts.ts"],"names":[],"mappings":";;;;;;;;;AAAA,yDAA8E;AAC9E,kEAAwE;AACxE,yCAA0C;AAGnC,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,IAAA,qBAAc,EAAC,WAAW,EAAE;IAC3E,WAAW,EAAE,iBAAiB;IAC9B,QAAQ,EAAE,uBAAY;IACtB,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,sCAAsC;CACpD,CAAC;IACA,MAAM,CAAC,kBAAkB,GAAG,IAAA,wBAAe,EAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC;QACvE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,eAAe;KACtB,CAAC,CAAC;;AAVQ,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAY,GAAE;GACF,2BAA2B,CAWvC"}

package/dist/pages/settings/users/two-factor-operations.d.ts

@@ -0,0 +1,33 @@
+import type { User, UserModel } from "@antelopejs/interface-dms/auth/db";
+export interface TwoFactorStatus {
+    methods: string[];
+    hasBackupCodes: boolean;
+    backupCodesLeft: number;
+    backupCodesTotal: number;
+    backupCodesGeneratedAt: Date | null;
+    backupCodesSavedAt: Date | null;
+}
+export interface TotpSetup {
+    secret: string;
+    manualKey: string;
+    otpAuthUrl: string;
+    qrCode: string;
+}
+export interface MethodEnabledResult {
+    success: true;
+    backupCodes?: string[];
+}
+export interface BackupCodesResult {
+    backupCodes: string[];
+}
+export interface SuccessResult {
+    success: true;
+}
+export declare function getTwoFactorStatus(user: User): TwoFactorStatus;
+export declare function startTotpSetup(user: User, body: unknown, userModel: UserModel): Promise<TotpSetup>;
+export declare function confirmTotpSetup(user: User, body: unknown, userModel: UserModel): Promise<MethodEnabledResult>;
+export declare function enableEmailMethod(user: User, body: unknown, userModel: UserModel): Promise<MethodEnabledResult>;
+export declare function disableTwoFactorMethod(user: User, body: unknown, userModel: UserModel): Promise<SuccessResult>;
+export declare function regenerateBackupCodes(user: User, body: unknown, userModel: UserModel): Promise<BackupCodesResult>;
+export declare function markBackupCodesSaved(user: User, userModel: UserModel): Promise<TwoFactorStatus>;
+export declare function requestTwoFactorEmailCode(user: User, userModel: UserModel): Promise<SuccessResult>;

package/dist/pages/settings/users/two-factor-operations.js

@@ -0,0 +1,156 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getTwoFactorStatus = getTwoFactorStatus;
+exports.startTotpSetup = startTotpSetup;
+exports.confirmTotpSetup = confirmTotpSetup;
+exports.enableEmailMethod = enableEmailMethod;
+exports.disableTwoFactorMethod = disableTwoFactorMethod;
+exports.regenerateBackupCodes = regenerateBackupCodes;
+exports.markBackupCodesSaved = markBackupCodesSaved;
+exports.requestTwoFactorEmailCode = requestTwoFactorEmailCode;
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const auth_1 = require("@antelopejs/interface-dms/auth");
+const _2fa_1 = require("2fa");
+const randomstring_1 = __importDefault(require("randomstring"));
+const constants_1 = require("../../../routes/auth/constants");
+const account_notifications_1 = require("../../../utils/account-notifications");
+const auth_schema_1 = require("../../../validation/auth.schema");
+const security_schema_1 = require("../../../validation/security.schema");
+const current_password_1 = require("./current-password");
+const profile_helpers_1 = require("./profile-helpers");
+const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
+const HTTP_BAD_REQUEST = 400;
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_TOO_MANY_REQUESTS = 429;
+const EMAIL_CODE_LENGTH = 6;
+const QR_MODULE_SIZE = 6;
+const QR_MARGIN = 3;
+const OTP_AUTH_SECRET_PARAM = "secret";
+const methodsOf = (user) => user.twoFactorMethods || [];
+function getTwoFactorStatus(user) {
+    const backupCodesLeft = (user.twoFactorBackupCodes || []).length;
+    return {
+        methods: methodsOf(user),
+        hasBackupCodes: backupCodesLeft > 0,
+        backupCodesLeft,
+        backupCodesTotal: profile_helpers_1.BACKUP_CODE_COUNT,
+        backupCodesGeneratedAt: user.twoFactorBackupCodesGeneratedAt ?? null,
+        backupCodesSavedAt: user.twoFactorBackupCodesSavedAt ?? null,
+    };
+}
+function renderQrCode(user, secret) {
+    return new Promise((resolve, reject) => {
+        (0, _2fa_1.generateGoogleQR)(profile_helpers_1.DMS_ISSUER, user.email, secret, { size: QR_MODULE_SIZE, margin: QR_MARGIN }, (error, dataUrl) => (error ? reject(error) : resolve(dataUrl)));
+    });
+}
+async function assertMayAddMethod(user, body, userModel) {
+    const { currentPassword } = (0, interface_api_util_1.assertValidation)(body ?? {}, (value) => security_schema_1.securitySchema.addTwoFactorMethod.parse(value));
+    await (0, current_password_1.assertCurrentPasswordIfSet)(userModel, user, currentPassword);
+}
+async function startTotpSetup(user, body, userModel) {
+    await assertMayAddMethod(user, body, userModel);
+    const secret = await (0, profile_helpers_1.generateTotpSecret)();
+    const otpAuthUrl = (0, _2fa_1.generateUrl)(profile_helpers_1.DMS_ISSUER, user.email, secret);
+    user.twoFactorPendingSecret = secret;
+    await userModel.update(user);
+    return {
+        secret,
+        manualKey: new URL(otpAuthUrl).searchParams.get(OTP_AUTH_SECRET_PARAM) ?? secret,
+        otpAuthUrl,
+        qrCode: await renderQrCode(user, secret),
+    };
+}
+function issueBackupCodes(user) {
+    const codes = (0, profile_helpers_1.generateBackupCodes)();
+    user.twoFactorBackupCodes = codes.hashed;
+    user.twoFactorBackupCodesGeneratedAt = new Date();
+    user.twoFactorBackupCodesSavedAt = null;
+    return codes.plaintext;
+}
+function enableMethod(user, method) {
+    const methods = methodsOf(user);
+    if (!methods.includes(method))
+        methods.push(method);
+    user.twoFactorMethods = methods;
+    const isFirstMethod = methods.length === 1;
+    const hasNoCodes = (user.twoFactorBackupCodes || []).length === 0;
+    return isFirstMethod || hasNoCodes ? issueBackupCodes(user) : undefined;
+}
+async function confirmTotpSetup(user, body, userModel) {
+    const { code } = (0, interface_api_util_1.assertValidation)(body, (value) => auth_schema_1.authSchema.confirmTotp.parse(value));
+    (0, interface_api_util_1.assert)(user.twoFactorPendingSecret, HTTP_BAD_REQUEST, "error.totp_not_setup");
+    (0, interface_api_util_1.assert)((0, _2fa_1.verifyTOTP)(user.twoFactorPendingSecret, code), HTTP_UNAUTHORIZED, "error.invalid_2fa_code");
+    user.twoFactorSecret = user.twoFactorPendingSecret;
+    user.twoFactorPendingSecret = null;
+    const backupCodes = enableMethod(user, "totp");
+    await userModel.update(user);
+    (0, fire_and_forget_1.fireAndForget)((0, account_notifications_1.notifyTwoFactorEnabled)(user._id, "totp"), "two-factor enabled notification");
+    return { success: true, backupCodes };
+}
+async function enableEmailMethod(user, body, userModel) {
+    await assertMayAddMethod(user, body, userModel);
+    const backupCodes = enableMethod(user, "email");
+    await userModel.update(user);
+    (0, fire_and_forget_1.fireAndForget)((0, account_notifications_1.notifyTwoFactorEnabled)(user._id, "email"), "two-factor enabled notification");
+    return { success: true, backupCodes };
+}
+function clearTwoFactorLeftovers(user) {
+    user.twoFactorBackupCodes = [];
+    user.twoFactorBackupCodesGeneratedAt = null;
+    user.twoFactorBackupCodesSavedAt = null;
+    user.twoFactorEmailCode = null;
+    user.twoFactorEmailCodeRequestedAt = null;
+}
+async function disableTwoFactorMethod(user, body, userModel) {
+    const { method, code } = (0, interface_api_util_1.assertValidation)(body, (value) => auth_schema_1.authSchema.disableTwoFactor.parse(value));
+    (0, interface_api_util_1.assert)((0, profile_helpers_1.verifyUserCode)(user, code, method), HTTP_UNAUTHORIZED, "error.invalid_2fa_code");
+    const methods = methodsOf(user).filter((entry) => entry !== method);
+    user.twoFactorMethods = methods;
+    if (method === "totp")
+        user.twoFactorSecret = null;
+    if (methods.length === 0)
+        clearTwoFactorLeftovers(user);
+    await userModel.update(user);
+    (0, fire_and_forget_1.fireAndForget)((0, account_notifications_1.notifyTwoFactorDisabled)(user._id, method), "two-factor disabled notification");
+    return { success: true };
+}
+function isValidCodeForAnyMethod(user, code) {
+    const methods = methodsOf(user);
+    return methods.some((method) => (0, profile_helpers_1.verifyUserCode)(user, code, method));
+}
+async function regenerateBackupCodes(user, body, userModel) {
+    const { code } = (0, interface_api_util_1.assertValidation)(body, (value) => auth_schema_1.authSchema.regenerateBackup.parse(value));
+    (0, interface_api_util_1.assert)(methodsOf(user).length > 0, HTTP_BAD_REQUEST, "error.2fa_not_enabled");
+    (0, interface_api_util_1.assert)(isValidCodeForAnyMethod(user, code), HTTP_UNAUTHORIZED, "error.invalid_2fa_code");
+    const previousCount = user.twoFactorBackupCodes?.length ?? 0;
+    const backupCodes = issueBackupCodes(user);
+    await userModel.update(user);
+    (0, fire_and_forget_1.fireAndForget)((0, account_notifications_1.notifyBackupCodesRegenerated)(user._id, previousCount), "backup codes regenerated notification");
+    return { backupCodes };
+}
+async function markBackupCodesSaved(user, userModel) {
+    (0, interface_api_util_1.assert)((user.twoFactorBackupCodes || []).length > 0, HTTP_BAD_REQUEST, "error.no_backup_codes");
+    user.twoFactorBackupCodesSavedAt = new Date();
+    await userModel.update(user);
+    return getTwoFactorStatus(user);
+}
+async function requestTwoFactorEmailCode(user, userModel) {
+    (0, interface_api_util_1.assert)(methodsOf(user).includes("email"), HTTP_BAD_REQUEST, "error.2fa_email_not_enabled");
+    const isRateLimited = !!user.twoFactorEmailCodeRequestedAt &&
+        Date.now() - new Date(user.twoFactorEmailCodeRequestedAt).getTime() <
+            constants_1.TWO_FACTOR_RATE_LIMIT_MS;
+    (0, interface_api_util_1.assert)(!isRateLimited, HTTP_TOO_MANY_REQUESTS, "error.rate_limited");
+    const code = randomstring_1.default.generate({
+        length: EMAIL_CODE_LENGTH,
+        charset: "numeric",
+    });
+    user.twoFactorEmailCode = code;
+    user.twoFactorEmailCodeRequestedAt = new Date();
+    await userModel.update(user);
+    await (0, auth_1.send2FAEmail)(user, code);
+    return { success: true };
+}
+//# sourceMappingURL=two-factor-operations.js.map

package/dist/pages/settings/users/two-factor-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-operations.js","sourceRoot":"","sources":["../../../../src/pages/settings/users/two-factor-operations.ts"],"names":[],"mappings":";;;;;AA8EA,gDAUC;AAmCD,wCAiBC;AA6BD,4CAuBC;AAQD,8CAaC;AAiBD,wDAuBC;AAeD,sDAsBC;AAUD,oDAYC;AAQD,8DAuBC;AApVD,uEAA0E;AAC1E,yDAA8D;AAE9D,8BAAgE;AAChE,gEAAwC;AACxC,8DAA0E;AAC1E,gFAI8C;AAC9C,iEAA6D;AAC7D,yEAAqE;AACrE,yDAAgE;AAChE,uDAM2B;AAC3B,qFAAgF;AAIhF,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,qBAAqB,GAAG,QAAQ,CAAC;AAqCvC,MAAM,SAAS,GAAG,CAAC,IAAU,EAAY,EAAE,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;AAMxE,SAAgB,kBAAkB,CAAC,IAAU;IAC3C,MAAM,eAAe,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACjE,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC;QACxB,cAAc,EAAE,eAAe,GAAG,CAAC;QACnC,eAAe;QACf,gBAAgB,EAAE,mCAAiB;QACnC,sBAAsB,EAAE,IAAI,CAAC,+BAA+B,IAAI,IAAI;QACpE,kBAAkB,EAAE,IAAI,CAAC,2BAA2B,IAAI,IAAI;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAU,EAAE,MAAc;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAA,uBAAgB,EACd,4BAAU,EACV,IAAI,CAAC,KAAK,EACV,MAAM,EACN,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,EAC3C,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAC/D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAID,KAAK,UAAU,kBAAkB,CAC/B,IAAU,EACV,IAAa,EACb,SAAoB;IAEpB,MAAM,EAAE,eAAe,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CACjE,gCAAc,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAC/C,CAAC;IACF,MAAM,IAAA,6CAA0B,EAAC,SAAS,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;AACrE,CAAC;AAUM,KAAK,UAAU,cAAc,CAClC,IAAU,EACV,IAAa,EACb,SAAoB;IAEpB,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,IAAA,oCAAkB,GAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAA,kBAAW,EAAC,4BAAU,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,sBAAsB,GAAG,MAAM,CAAC;IACrC,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO;QACL,MAAM;QACN,SAAS,EACP,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,MAAM;QACvE,UAAU;QACV,MAAM,EAAE,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAU;IAClC,MAAM,KAAK,GAAG,IAAA,qCAAmB,GAAE,CAAC;IACpC,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC,MAAM,CAAC;IACzC,IAAI,CAAC,+BAA+B,GAAG,IAAI,IAAI,EAAE,CAAC;IAClD,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC;IACxC,OAAO,KAAK,CAAC,SAAS,CAAC;AACzB,CAAC;AAGD,SAAS,YAAY,CACnB,IAAU,EACV,MAAuB;IAEvB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAChC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IAClE,OAAO,aAAa,IAAI,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAQM,KAAK,UAAU,gBAAgB,CACpC,IAAU,EACV,IAAa,EACb,SAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAChD,wBAAU,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CACpC,CAAC;IACF,IAAA,2BAAM,EAAC,IAAI,CAAC,sBAAsB,EAAE,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;IAC9E,IAAA,2BAAM,EACJ,IAAA,iBAAU,EAAC,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,EAC7C,iBAAiB,EACjB,wBAAwB,CACzB,CAAC;IACF,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC;IACnD,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;IACnC,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAA,+BAAa,EACX,IAAA,8CAAsB,EAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EACxC,iCAAiC,CAClC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AACxC,CAAC;AAQM,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,IAAa,EACb,SAAoB;IAEpB,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAA,+BAAa,EACX,IAAA,8CAAsB,EAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EACzC,iCAAiC,CAClC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAU;IACzC,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC;IAC/B,IAAI,CAAC,+BAA+B,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,2BAA2B,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,6BAA6B,GAAG,IAAI,CAAC;AAC5C,CAAC;AASM,KAAK,UAAU,sBAAsB,CAC1C,IAAU,EACV,IAAa,EACb,SAAoB;IAEpB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACxD,wBAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CACzC,CAAC;IACF,IAAA,2BAAM,EACJ,IAAA,gCAAc,EAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAClC,iBAAiB,EACjB,wBAAwB,CACzB,CAAC;IACF,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAChC,IAAI,MAAM,KAAK,MAAM;QAAE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAA,+BAAa,EACX,IAAA,+CAAuB,EAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EACzC,kCAAkC,CACnC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAU,EAAE,IAAY;IACvD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAsB,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,gCAAc,EAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACtE,CAAC;AAUM,KAAK,UAAU,qBAAqB,CACzC,IAAU,EACV,IAAa,EACb,SAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAChD,wBAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CACzC,CAAC;IACF,IAAA,2BAAM,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IAC9E,IAAA,2BAAM,EACJ,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,EACnC,iBAAiB,EACjB,wBAAwB,CACzB,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,EAAE,MAAM,IAAI,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAA,+BAAa,EACX,IAAA,oDAA4B,EAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EACrD,uCAAuC,CACxC,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,CAAC;AACzB,CAAC;AAUM,KAAK,UAAU,oBAAoB,CACxC,IAAU,EACV,SAAoB;IAEpB,IAAA,2BAAM,EACJ,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAC5C,gBAAgB,EAChB,uBAAuB,CACxB,CAAC;IACF,IAAI,CAAC,2BAA2B,GAAG,IAAI,IAAI,EAAE,CAAC;IAC9C,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAQM,KAAK,UAAU,yBAAyB,CAC7C,IAAU,EACV,SAAoB;IAEpB,IAAA,2BAAM,EACJ,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EACjC,gBAAgB,EAChB,6BAA6B,CAC9B,CAAC;IACF,MAAM,aAAa,GACjB,CAAC,CAAC,IAAI,CAAC,6BAA6B;QACpC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,OAAO,EAAE;YACjE,oCAAwB,CAAC;IAC7B,IAAA,2BAAM,EAAC,CAAC,aAAa,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,sBAAY,CAAC,QAAQ,CAAC;QACjC,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,6BAA6B,GAAG,IAAI,IAAI,EAAE,CAAC;IAChD,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,IAAA,mBAAY,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/routes/auth/client-ip.js

@@ -6,7 +6,6 @@ const node_net_1 = require("node:net");
 const FORWARDED_FOR_SEPARATOR = ",";
 const IPV4_MAPPED_PREFIX = "::ffff:";
 const NO_TRUSTED_PROXY = 0;
-const LEGACY_TRUST_PROXY_HOPS = 1;
 function normalizeAddress(address) {
     const unmapped = address.slice(IPV4_MAPPED_PREFIX.length);
     const isMappedIPv4 = address.toLowerCase().startsWith(IPV4_MAPPED_PREFIX) && (0, node_net_1.isIPv4)(unmapped);
@@ -33,10 +32,8 @@ function isProxyCount(value) {
         value >= NO_TRUSTED_PROXY);
 }
 function trustedProxyCount(authConfig) {
-    if (isProxyCount(authConfig.trustedProxies))
-        return authConfig.trustedProxies;
-    return authConfig.oauth?.trustProxy
-        ? LEGACY_TRUST_PROXY_HOPS
+    return isProxyCount(authConfig.trustedProxies)
+        ? authConfig.trustedProxies
         : NO_TRUSTED_PROXY;
 }
 //# sourceMappingURL=client-ip.js.map

package/dist/routes/auth/client-ip.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-ip.js","sourceRoot":"","sources":["../../../src/routes/auth/client-ip.ts"],"names":[],"mappings":";;AAmDA,0CAUC;AAiBD,8CAKC;AAnFD,uCAAkC;AAGlC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AACrC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAclC,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,YAAY,GAChB,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,IAAA,iBAAM,EAAC,QAAQ,CAAC,CAAC;IAC3E,OAAO,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AAC3C,CAAC;AAED,SAAS,8BAA8B,CACrC,YAAgC;IAEhC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;SACxB,KAAK,CAAC,uBAAuB,CAAC;SAC9B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,OAAO,EAAE,CAAC;AACf,CAAC;AAgBD,SAAgB,eAAe,CAC7B,MAA2B,EAC3B,cAAsB;IAEtB,MAAM,SAAS,GAAG;QAChB,MAAM,CAAC,aAAa,IAAI,EAAE;QAC1B,GAAG,8BAA8B,CAAC,MAAM,CAAC,YAAY,CAAC;KACvD,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,KAAK,IAAI,gBAAgB,CAC1B,CAAC;AACJ,CAAC;AASD,SAAgB,iBAAiB,CAAC,UAAsB;IACtD,IAAI,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,UAAU,CAAC,cAAc,CAAC;IAC9E,OAAO,UAAU,CAAC,KAAK,EAAE,UAAU;QACjC,CAAC,CAAC,uBAAuB;QACzB,CAAC,CAAC,gBAAgB,CAAC;AACvB,CAAC"}
+{"version":3,"file":"client-ip.js","sourceRoot":"","sources":["../../../src/routes/auth/client-ip.ts"],"names":[],"mappings":";;AAkDA,0CAUC;AAiBD,8CAIC;AAjFD,uCAAkC;AAGlC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AACrC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAc3B,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,YAAY,GAChB,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,IAAA,iBAAM,EAAC,QAAQ,CAAC,CAAC;IAC3E,OAAO,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AAC3C,CAAC;AAED,SAAS,8BAA8B,CACrC,YAAgC;IAEhC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;SACxB,KAAK,CAAC,uBAAuB,CAAC;SAC9B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,OAAO,EAAE,CAAC;AACf,CAAC;AAgBD,SAAgB,eAAe,CAC7B,MAA2B,EAC3B,cAAsB;IAEtB,MAAM,SAAS,GAAG;QAChB,MAAM,CAAC,aAAa,IAAI,EAAE;QAC1B,GAAG,8BAA8B,CAAC,MAAM,CAAC,YAAY,CAAC;KACvD,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC3B,KAAK,IAAI,gBAAgB,CAC1B,CAAC;AACJ,CAAC;AASD,SAAgB,iBAAiB,CAAC,UAAsB;IACtD,OAAO,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC;QAC5C,CAAC,CAAC,UAAU,CAAC,cAAc;QAC3B,CAAC,CAAC,gBAAgB,CAAC;AACvB,CAAC"}

package/dist/routes/auth/index.d.ts

@@ -8,6 +8,7 @@ export * from "./refresh";
 export * from "./request-2fa-email";
 export * from "./request-email-verification";
 export * from "./reset-password";
+export * from "./session-handoff";
 export * from "./session-response";
 export * from "./signup";
 export * from "./switch-tenant";

package/dist/routes/auth/index.js

@@ -24,6 +24,7 @@ __exportStar(require("./refresh"), exports);
 __exportStar(require("./request-2fa-email"), exports);
 __exportStar(require("./request-email-verification"), exports);
 __exportStar(require("./reset-password"), exports);
+__exportStar(require("./session-handoff"), exports);
 __exportStar(require("./session-response"), exports);
 __exportStar(require("./signup"), exports);
 __exportStar(require("./switch-tenant"), exports);

package/dist/routes/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,oDAAkC;AAClC,0CAAwB;AACxB,2CAAyB;AACzB,uCAAqB;AACrB,0CAAwB;AACxB,4CAA0B;AAC1B,sDAAoC;AACpC,+DAA6C;AAC7C,mDAAiC;AACjC,qDAAmC;AACnC,2CAAyB;AACzB,kDAAgC;AAChC,0CAAwB;AACxB,mEAAiD;AACjD,+CAA6B;AAC7B,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,oDAAkC;AAClC,0CAAwB;AACxB,2CAAyB;AACzB,uCAAqB;AACrB,0CAAwB;AACxB,4CAA0B;AAC1B,sDAAoC;AACpC,+DAA6C;AAC7C,mDAAiC;AACjC,oDAAkC;AAClC,qDAAmC;AACnC,2CAAyB;AACzB,kDAAgC;AAChC,0CAAwB;AACxB,mEAAiD;AACjD,+CAA6B;AAC7B,iDAA+B"}

package/dist/routes/auth/login-throttle.d.ts

@@ -0,0 +1,3 @@
+export declare function assertLoginAllowed(email: string, ip: string, now?: number): void;
+export declare function recordLoginFailure(email: string, ip: string, now?: number): void;
+export declare function clearLoginFailures(email: string): void;

package/dist/routes/auth/login-throttle.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertLoginAllowed = assertLoginAllowed;
+exports.recordLoginFailure = recordLoginFailure;
+exports.clearLoginFailures = clearLoginFailures;
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const attempt_limiter_1 = require("../../utils/attempt-limiter");
+const HTTP_TOO_MANY_REQUESTS = 429;
+const TOO_MANY_ATTEMPTS_MESSAGE = "error.too_many_sign_in_attempts";
+const LOGIN_WINDOW_MS = 15 * 60 * 1000;
+const FAILURES_PER_ACCOUNT = 10;
+const FAILURES_PER_CLIENT = 50;
+const MAX_TRACKED_KEYS = 10_000;
+const accountFailures = new attempt_limiter_1.AttemptLimiter(FAILURES_PER_ACCOUNT, LOGIN_WINDOW_MS, MAX_TRACKED_KEYS);
+const clientFailures = new attempt_limiter_1.AttemptLimiter(FAILURES_PER_CLIENT, LOGIN_WINDOW_MS, MAX_TRACKED_KEYS);
+function assertLoginAllowed(email, ip, now = Date.now()) {
+    const isBlocked = accountFailures.isBlocked(email, now) ||
+        (ip !== "" && clientFailures.isBlocked(ip, now));
+    (0, interface_api_util_1.assert)(!isBlocked, HTTP_TOO_MANY_REQUESTS, TOO_MANY_ATTEMPTS_MESSAGE);
+}
+function recordLoginFailure(email, ip, now = Date.now()) {
+    accountFailures.recordFailure(email, now);
+    if (ip !== "")
+        clientFailures.recordFailure(ip, now);
+}
+function clearLoginFailures(email) {
+    accountFailures.reset(email);
+}
+//# sourceMappingURL=login-throttle.js.map

package/dist/routes/auth/login-throttle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-throttle.js","sourceRoot":"","sources":["../../../src/routes/auth/login-throttle.ts"],"names":[],"mappings":";;AAgCA,gDASC;AAGD,gDAOC;AAGD,gDAEC;AAxDD,uEAAwD;AACxD,iEAA6D;AAE7D,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,yBAAyB,GAAG,iCAAiC,CAAC;AACpE,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAIhC,MAAM,eAAe,GAAG,IAAI,gCAAc,CACxC,oBAAoB,EACpB,eAAe,EACf,gBAAgB,CACjB,CAAC;AACF,MAAM,cAAc,GAAG,IAAI,gCAAc,CACvC,mBAAmB,EACnB,eAAe,EACf,gBAAgB,CACjB,CAAC;AASF,SAAgB,kBAAkB,CAChC,KAAa,EACb,EAAU,EACV,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,SAAS,GACb,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;QACrC,CAAC,EAAE,KAAK,EAAE,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,IAAA,2BAAM,EAAC,CAAC,SAAS,EAAE,sBAAsB,EAAE,yBAAyB,CAAC,CAAC;AACxE,CAAC;AAGD,SAAgB,kBAAkB,CAChC,KAAa,EACb,EAAU,EACV,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,EAAE,KAAK,EAAE;QAAE,cAAc,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAGD,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/routes/auth/login.d.ts

@@ -1,3 +1,4 @@
 import type { SessionModel, UserModel } from "@antelopejs/interface-dms/auth/db";
+import type { ClientOrigin } from "../../utils/sign-in-country";
 import { type LoginOutcome } from "./session-response";
-export declare function login(userModel: UserModel, sessionModel: SessionModel, body: unknown, userAgent: string, ip: string): Promise<LoginOutcome>;
+export declare function login(userModel: UserModel, sessionModel: SessionModel, body: unknown, userAgent: string, origin: ClientOrigin): Promise<LoginOutcome>;

package/dist/routes/auth/login.js

@@ -2,15 +2,27 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.login = login;
 const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const sign_in_monitor_1 = require("../../utils/sign-in-monitor");
 const auth_schema_1 = require("../../validation/auth.schema");
+const login_throttle_1 = require("./login-throttle");
 const session_response_1 = require("./session-response");
+const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
 const HTTP_UNAUTHORIZED = 401;
 const INVALID_CREDENTIALS_MESSAGE = "error.invalid_credentials";
-async function login(userModel, sessionModel, body, userAgent, ip) {
+async function login(userModel, sessionModel, body, userAgent, origin) {
     const { email, password } = (0, interface_api_util_1.assertValidation)(body, (v) => auth_schema_1.authSchema.login.parse(v));
-    const user = await userModel.getByEmail(email.toLowerCase());
+    const normalizedEmail = email.toLowerCase();
+    (0, login_throttle_1.assertLoginAllowed)(normalizedEmail, origin.ip);
+    const user = await userModel.getByEmail(normalizedEmail);
+    const isPasswordValid = !!user && user.testHash("password", password);
+    if (!isPasswordValid)
+        (0, login_throttle_1.recordLoginFailure)(normalizedEmail, origin.ip);
     (0, interface_api_util_1.assert)(user, HTTP_UNAUTHORIZED, INVALID_CREDENTIALS_MESSAGE);
-    (0, interface_api_util_1.assert)(user.testHash("password", password), HTTP_UNAUTHORIZED, INVALID_CREDENTIALS_MESSAGE);
-    return (0, session_response_1.resolveLoginOutcome)(sessionModel, user, userAgent, ip);
+    (0, fire_and_forget_1.fireAndForget)(isPasswordValid
+        ? (0, sign_in_monitor_1.clearFailedPasswords)(user._id)
+        : (0, sign_in_monitor_1.recordFailedPassword)(user), "failed password bookkeeping");
+    (0, interface_api_util_1.assert)(isPasswordValid, HTTP_UNAUTHORIZED, INVALID_CREDENTIALS_MESSAGE);
+    (0, login_throttle_1.clearLoginFailures)(normalizedEmail);
+    return (0, session_response_1.resolveLoginOutcome)(sessionModel, user, userAgent, origin);
 }
 //# sourceMappingURL=login.js.map