@antelopejs/dms 0.5.6 → 0.6.1

package/dist/test/helpers/derived-controller.js

@@ -0,0 +1,20 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.derivedController = derivedController;
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_data_api_1 = require("@antelopejs/interface-data-api");
+function derivedController(table, parent, location) {
+    let DerivedController = class DerivedController extends (0, interface_data_api_1.DataController)(table, {}, (0, interface_api_1.Controller)(location, parent)) {
+    };
+    DerivedController = __decorate([
+        (0, interface_data_api_1.RegisterDataController)()
+    ], DerivedController);
+    return DerivedController;
+}
+//# sourceMappingURL=derived-controller.js.map

package/dist/test/helpers/derived-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derived-controller.js","sourceRoot":"","sources":["../../../src/test/helpers/derived-controller.ts"],"names":[],"mappings":";;;;;;;;AAaA,8CAYC;AAzBD,6DAA6E;AAC7E,uEAGwC;AASxC,SAAgB,iBAAiB,CAC/B,KAAiB,EACjB,MAAS,EACT,QAAgB;IAGhB,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,IAAA,mCAAc,EAC5C,KAAK,EACL,EAAE,EACF,IAAA,0BAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAC7B;KAAG,CAAA;IAJE,iBAAiB;QADtB,IAAA,2CAAsB,GAAE;OACnB,iBAAiB,CAInB;IACJ,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/dist/test/integration/account-deletion.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/integration/account-deletion.test.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const interface_api_1 = require("@antelopejs/interface-api");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const constants_1 = require("@antelopejs/interface-dms/constants");
+const exportJobs_model_1 = require("@antelopejs/interface-dms/db/internal/exportJobs.model");
+const interface_file_storage_1 = require("@antelopejs/interface-file-storage");
+const chai_1 = require("chai");
+const signInAttempts_model_1 = require("../../db/models/signInAttempts.model");
+const userKnownDevices_model_1 = require("../../db/models/userKnownDevices.model");
+const account_data_store_1 = require("../../pages/settings/users/account-data-store");
+const export_jobs_1 = require("../../utils/export-jobs");
+const auth_1 = require("../helpers/auth");
+const db_2 = require("../helpers/db");
+const HTTP_OK = 200;
+const HTTP_CONFLICT = 409;
+const EXPORT_EXTENSION = "csv";
+const EXPORT_CONTENT_TYPE = "text/csv";
+async function storedExport(userId, jobId) {
+    const localPath = (0, node_path_1.join)((0, node_os_1.tmpdir)(), `${jobId}.${EXPORT_EXTENSION}`);
+    await (0, promises_1.writeFile)(localPath, "a,b\n1,2\n");
+    const resourceKey = await (0, export_jobs_1.uploadExportToStorage)(localPath, constants_1.DEFAULT_TENANT_ID, jobId, EXPORT_EXTENSION, EXPORT_CONTENT_TYPE);
+    const exports = (0, interface_database_decorators_1.GetModel)(exportJobs_model_1.ExportJobModel, constants_1.DEFAULT_TENANT_ID);
+    await exports.createNewJob({
+        jobId,
+        userId,
+        scope: "account-deletion-test",
+        context: null,
+        filename: "rows",
+        extension: EXPORT_EXTENSION,
+        contentType: EXPORT_CONTENT_TYPE,
+        delivery: "download",
+        retainUntilExpiry: true,
+    });
+    await exports.markAsCompleted(jobId, resourceKey);
+    return resourceKey;
+}
+describe("[integration] account deletion", () => {
+    beforeEach(db_2.resetDatabase);
+    it("deletes the exports the user started, and their files", async () => {
+        await (0, auth_1.registerUser)({ owner: true });
+        const member = await (0, auth_1.registerUser)();
+        const jobId = `deleted-${Date.now()}`;
+        const resourceKey = await storedExport(member.userId, jobId);
+        (0, chai_1.expect)(await (0, interface_file_storage_1.FileExists)(resourceKey)).to.equal(true);
+        const response = await (0, auth_1.authorizedClient)(member.accessToken).post("/settings/user/profile/account-deletion", { password: member.password, confirmation: member.email });
+        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
+        const exports = (0, interface_database_decorators_1.GetModel)(exportJobs_model_1.ExportJobModel, constants_1.DEFAULT_TENANT_ID);
+        (0, chai_1.expect)(await exports.get(jobId)).to.equal(undefined);
+        (0, chai_1.expect)(await (0, interface_file_storage_1.FileExists)(resourceKey)).to.equal(false);
+    });
+    it("removes the devices, sign-in attempts and sessions of the user", async () => {
+        await (0, auth_1.registerUser)({ owner: true });
+        const member = await (0, auth_1.registerUser)();
+        const { accessToken } = await (0, auth_1.loginUser)(member.email, member.password);
+        const devices = (0, interface_database_decorators_1.GetModel)(userKnownDevices_model_1.UserKnownDevicesModel);
+        const attempts = (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel);
+        await attempts.recordFailure(member.userId, new Date());
+        await attempts.claimAlert(member.userId, "burst", new Date());
+        const epoch = new Date(0);
+        (0, chai_1.expect)(await devices.listFingerprints(member.userId)).to.not.be.empty;
+        (0, chai_1.expect)(await attempts.listBurst(member.userId, epoch, 10)).to.have.length(2);
+        (0, chai_1.expect)(await (0, interface_database_decorators_1.GetModel)(db_1.SessionModel).getByUserId(member.userId)).to.not.be
+            .empty;
+        const response = await (0, auth_1.authorizedClient)(accessToken).post("/settings/user/profile/account-deletion", { password: member.password, confirmation: member.email });
+        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
+        (0, chai_1.expect)(await devices.listFingerprints(member.userId)).to.deep.equal([]);
+        (0, chai_1.expect)(await attempts.listBurst(member.userId, epoch, 10)).to.deep.equal([]);
+        (0, chai_1.expect)(await (0, interface_database_decorators_1.GetModel)(db_1.SessionModel).getByUserId(member.userId)).to.deep.equal([]);
+    });
+    it("refuses the last owner however it is reached", async () => {
+        const owner = await (0, auth_1.registerUser)({ owner: true });
+        const user = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(owner.userId);
+        const refusal = await (0, account_data_store_1.deleteAccount)(user).then(() => undefined, (error) => error);
+        (0, chai_1.expect)(refusal).to.be.instanceOf(interface_api_1.HTTPResult);
+        (0, chai_1.expect)(refusal.getStatus()).to.equal(HTTP_CONFLICT);
+        (0, chai_1.expect)(await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(owner.userId)).to.not.equal(undefined);
+    });
+});
+//# sourceMappingURL=account-deletion.test.js.map

package/dist/test/integration/account-deletion.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-deletion.test.js","sourceRoot":"","sources":["../../../src/test/integration/account-deletion.test.ts"],"names":[],"mappings":";;AAAA,+CAA6C;AAC7C,qCAAiC;AACjC,yCAAiC;AACjC,6DAAuD;AACvD,6FAAqE;AACrE,0DAA4E;AAC5E,mEAAwE;AACxE,6FAAwF;AACxF,+EAAgE;AAChE,+BAA8B;AAC9B,+EAA2E;AAC3E,mFAA+E;AAC/E,sFAA8E;AAC9E,yDAAgE;AAChE,0CAA4E;AAC5E,sCAA8C;AAK9C,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa;IACvD,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,GAAG,KAAK,IAAI,gBAAgB,EAAE,CAAC,CAAC;IACjE,MAAM,IAAA,oBAAS,EAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,IAAA,mCAAqB,EAC7C,SAAS,EACT,6BAAiB,EACjB,KAAK,EACL,gBAAgB,EAChB,mBAAmB,CACpB,CAAC;IACF,MAAM,OAAO,GAAG,IAAA,wCAAQ,EAAC,iCAAc,EAAE,6BAAiB,CAAC,CAAC;IAC5D,MAAM,OAAO,CAAC,YAAY,CAAC;QACzB,KAAK;QACL,MAAM;QACN,KAAK,EAAE,uBAAuB;QAC9B,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,gBAAgB;QAC3B,WAAW,EAAE,mBAAmB;QAChC,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAClD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,UAAU,CAAC,kBAAa,CAAC,CAAC;IAE1B,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QACpC,MAAM,KAAK,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAA,aAAM,EAAC,MAAM,IAAA,mCAAU,EAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAgB,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAC9D,yCAAyC,EACzC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,EAAE,CAC1D,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEzE,MAAM,OAAO,GAAG,IAAA,wCAAQ,EAAC,iCAAc,EAAE,6BAAiB,CAAC,CAAC;QAC5D,IAAA,aAAM,EAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrD,IAAA,aAAM,EAAC,MAAM,IAAA,mCAAU,EAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QACpC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,gBAAS,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,IAAA,wCAAQ,EAAC,8CAAqB,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;QAC/C,MAAM,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAA,aAAM,EAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC;QACtE,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CACvE,CAAC,CACF,CAAC;QACF,IAAA,aAAM,EAAC,MAAM,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE;aACtE,KAAK,CAAC;QAET,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAgB,EAAC,WAAW,CAAC,CAAC,IAAI,CACvD,yCAAyC,EACzC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,EAAE,CAC1D,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEzE,IAAA,aAAM,EAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxE,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CACtE,EAAE,CACH,CAAC;QACF,IAAA,aAAM,EACJ,MAAM,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CACxD,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,KAAK,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,IAAA,kCAAa,EAAC,IAAK,CAAC,CAAC,IAAI,CAC7C,GAAG,EAAE,CAAC,SAAS,EACf,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,CAC1B,CAAC;QACF,IAAA,aAAM,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,0BAAU,CAAC,CAAC;QAC7C,IAAA,aAAM,EAAE,OAAsB,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACpE,IAAA,aAAM,EAAC,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/auth-key-rotation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/integration/auth/auth-key-rotation.test.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const chai_1 = require("chai");
+const jsonwebtoken_1 = require("jsonwebtoken");
+const auth_1 = require("../../helpers/auth");
+const db_2 = require("../../helpers/db");
+const http_1 = require("../../helpers/http");
+const SECURITY = "/settings/user/security";
+const NEW_PASSWORD = "Rotated26!";
+const HTTP_OK = 200;
+const HTTP_UNAUTHORIZED = 401;
+const PAST_GRACE_MS = 60_000;
+async function meStatus(accessToken) {
+    return (await (0, auth_1.authorizedClient)(accessToken).get("/api/auth/me")).status;
+}
+async function refreshStatus(refreshToken) {
+    const response = await (0, http_1.createClient)().post("/api/auth/refresh", {
+        token: refreshToken,
+    });
+    return response.status;
+}
+async function redeem(handoff) {
+    return (0, http_1.createClient)().post(handoff.endpoint, handoff.payload);
+}
+describe("[integration] auth/auth key rotation", () => {
+    let user;
+    let thisDevice;
+    let otherDevice;
+    beforeEach(async () => {
+        await (0, db_2.resetDatabase)();
+        user = await (0, auth_1.registerUser)({ owner: true });
+        thisDevice = (0, auth_1.authorizedClient)(user.accessToken);
+        otherDevice = await (0, auth_1.loginUser)(user.email, user.password);
+    });
+    const expectRotated = async (handoff) => {
+        (0, chai_1.expect)(handoff?.endpoint).to.equal("/api/auth/session-handoff");
+        (0, chai_1.expect)(await meStatus(otherDevice.accessToken)).to.equal(HTTP_UNAUTHORIZED);
+        (0, chai_1.expect)(await refreshStatus(otherDevice.refreshToken)).to.equal(HTTP_UNAUTHORIZED);
+        (0, chai_1.expect)(await meStatus(user.accessToken)).to.equal(HTTP_UNAUTHORIZED);
+        const redeemed = await redeem(handoff);
+        (0, chai_1.expect)(redeemed.status, JSON.stringify(redeemed.data)).to.equal(HTTP_OK);
+        (0, chai_1.expect)(redeemed.data.user?.email).to.equal(user.email);
+        (0, chai_1.expect)(await meStatus(redeemed.data.access_token)).to.equal(HTTP_OK);
+        (0, chai_1.expect)(await refreshStatus(redeemed.data.refresh_token)).to.equal(HTTP_OK);
+        const sessions = await (0, auth_1.authorizedClient)(redeemed.data.access_token).get(`${SECURITY}/sessions`);
+        (0, chai_1.expect)(sessions.data).to.have.length(1);
+        (0, chai_1.expect)(sessions.data[0].isCurrent).to.equal(true);
+    };
+    it("rotates on a password change and keeps this device signed in", async () => {
+        const response = await thisDevice.post(`${SECURITY}/password`, {
+            currentPassword: user.password,
+            password: NEW_PASSWORD,
+        });
+        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
+        (0, chai_1.expect)(response.data.signedOutSessions).to.equal(1);
+        await expectRotated(response.data.sessionHandoff);
+    });
+    it("rotates on signing out the other sessions and keeps this device signed in", async () => {
+        const response = await thisDevice.delete(`${SECURITY}/other-sessions`);
+        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
+        (0, chai_1.expect)(response.data.count).to.equal(1);
+        await expectRotated(response.data.sessionHandoff);
+    });
+    it("hands a session back once only", async () => {
+        const response = await thisDevice.delete(`${SECURITY}/other-sessions`);
+        const handoff = response.data.sessionHandoff;
+        (0, chai_1.expect)((await redeem(handoff)).status).to.equal(HTTP_OK);
+        const { sessionId } = (0, jsonwebtoken_1.decode)(handoff.payload.token);
+        await (0, interface_database_decorators_1.GetModel)(db_1.SessionModel).update(sessionId, {
+            refreshTokenRotatedAt: new Date(Date.now() - PAST_GRACE_MS),
+        });
+        (0, chai_1.expect)((await redeem(handoff)).status).to.equal(HTTP_UNAUTHORIZED);
+    });
+});
+//# sourceMappingURL=auth-key-rotation.test.js.map

package/dist/test/integration/auth/auth-key-rotation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-key-rotation.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/auth-key-rotation.test.ts"],"names":[],"mappings":";;AAAA,6FAAqE;AACrE,0DAAiE;AAEjE,+BAA8B;AAC9B,+CAAsC;AACtC,6CAK4B;AAC5B,yCAAiD;AACjD,6CAAkD;AAMlD,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AAC3C,MAAM,YAAY,GAAG,YAAY,CAAC;AAClC,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,aAAa,GAAG,MAAM,CAAC;AAoB7B,KAAK,UAAU,QAAQ,CAAC,WAAmB;IACzC,OAAO,CAAC,MAAM,IAAA,uBAAgB,EAAC,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,YAAoB;IAC/C,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE;QAC9D,KAAK,EAAE,YAAY;KACpB,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,OAAuB;IAC3C,OAAO,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,IAAI,IAAoB,CAAC;IACzB,IAAI,UAAyB,CAAC;IAC9B,IAAI,WAAsB,CAAC;IAE3B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,UAAU,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChD,WAAW,GAAG,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,KAAK,EAAE,OAAmC,EAAE,EAAE;QAClE,IAAA,aAAM,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAChE,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC5E,IAAA,aAAM,EAAC,MAAM,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC5D,iBAAiB,CAClB,CAAC;QACF,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAErE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAyB,CAAC,CAAC;QACzD,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,IAAA,aAAM,EAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAE3E,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAgB,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CACrE,GAAG,QAAQ,WAAW,CACvB,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxC,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,EAAE;YAC7D,eAAe,EAAE,IAAI,CAAC,QAAQ;YAC9B,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,QAAQ,iBAAiB,CAAC,CAAC;QACvE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,QAAQ,iBAAiB,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAgC,CAAC;QAC/D,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAGzD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,qBAAM,EAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAkB,CAAC;QACrE,MAAM,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE;YAC7C,qBAAqB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;SAC5D,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/login-throttle.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/integration/auth/login-throttle.test.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const chai_1 = require("chai");
+const config_1 = require("../../../config");
+const signInAttempts_model_1 = require("../../../db/models/signInAttempts.model");
+const auth_1 = require("../../helpers/auth");
+const db_1 = require("../../helpers/db");
+const http_1 = require("../../helpers/http");
+const HTTP_OK = 200;
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_TOO_MANY_REQUESTS = 429;
+const FAILURES_PER_ACCOUNT = 10;
+const FAILURES_PER_CLIENT = 50;
+const WRONG_PASSWORD = "Wrong-password-1";
+const STORED_FAILURES = 30;
+const BURST_THRESHOLD = 5;
+const WINDOW_MS = 15 * 60 * 1000;
+let counter = 0;
+const next = () => (counter += 1);
+const freshEmail = () => `throttle-${Date.now()}-${next()}@test.local`;
+const freshClient = () => `203.0.113.${next()}`;
+async function signIn(email, password, client) {
+    const response = await (0, http_1.createClient)().post("/api/auth/login", { email, password }, { headers: { "x-forwarded-for": client } });
+    return response.status;
+}
+describe("[integration] auth/login throttle", () => {
+    let previousProxies;
+    let client;
+    before(() => {
+        previousProxies = (0, config_1.getAuthConfig)().trustedProxies;
+        (0, config_1.getAuthConfig)().trustedProxies = 1;
+    });
+    after(() => {
+        (0, config_1.getAuthConfig)().trustedProxies = previousProxies;
+    });
+    beforeEach(async () => {
+        await (0, db_1.resetDatabase)();
+        client = freshClient();
+    });
+    it("refuses an account its right password after too many wrong ones", async () => {
+        const user = await (0, auth_1.registerUser)();
+        for (let attempt = 0; attempt < FAILURES_PER_ACCOUNT; attempt++) {
+            (0, chai_1.expect)(await signIn(user.email, WRONG_PASSWORD, client)).to.equal(HTTP_UNAUTHORIZED);
+        }
+        (0, chai_1.expect)(await signIn(user.email, user.password, client)).to.equal(HTTP_TOO_MANY_REQUESTS);
+    });
+    it("throttles an unknown address the same, telling nothing of its existence", async () => {
+        const email = freshEmail();
+        for (let attempt = 0; attempt < FAILURES_PER_ACCOUNT; attempt++) {
+            (0, chai_1.expect)(await signIn(email, WRONG_PASSWORD, client)).to.equal(HTTP_UNAUTHORIZED);
+        }
+        (0, chai_1.expect)(await signIn(email, WRONG_PASSWORD, client)).to.equal(HTTP_TOO_MANY_REQUESTS);
+    });
+    it("forgets an account's failures once it signs in", async () => {
+        const user = await (0, auth_1.registerUser)();
+        for (let attempt = 0; attempt < FAILURES_PER_ACCOUNT - 1; attempt++) {
+            await signIn(user.email, WRONG_PASSWORD, client);
+        }
+        (0, chai_1.expect)(await signIn(user.email, user.password, client)).to.equal(HTTP_OK);
+        (0, chai_1.expect)(await signIn(user.email, WRONG_PASSWORD, client)).to.equal(HTTP_UNAUTHORIZED);
+    });
+    describe("per client address", () => {
+        it("refuses a client that failed too often, whichever accounts it tried", async () => {
+            for (let attempt = 0; attempt < FAILURES_PER_CLIENT; attempt++) {
+                await signIn(freshEmail(), WRONG_PASSWORD, client);
+            }
+            const user = await (0, auth_1.registerUser)();
+            (0, chai_1.expect)(await signIn(user.email, user.password, client)).to.equal(HTTP_TOO_MANY_REQUESTS);
+            (0, chai_1.expect)(await signIn(user.email, user.password, freshClient())).to.equal(HTTP_OK);
+        });
+    });
+    it("reads a bounded burst however many failures are stored", async () => {
+        const user = await (0, auth_1.registerUser)();
+        const attempts = (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel);
+        const now = new Date();
+        for (let stored = 0; stored < STORED_FAILURES; stored++) {
+            await attempts.recordFailure(user.userId, now);
+        }
+        const since = new Date(now.getTime() - WINDOW_MS);
+        (0, chai_1.expect)(await attempts.listBurst(user.userId, since, BURST_THRESHOLD)).to.have.length(BURST_THRESHOLD);
+        await attempts.claimAlert(user.userId, "burst", now);
+        const burst = await attempts.listBurst(user.userId, since, BURST_THRESHOLD);
+        (0, chai_1.expect)(burst.filter((row) => row.kind === "alerted")).to.have.length(1);
+        (0, chai_1.expect)(burst).to.have.length(BURST_THRESHOLD + 1);
+    });
+});
+//# sourceMappingURL=login-throttle.test.js.map

package/dist/test/integration/auth/login-throttle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-throttle.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/login-throttle.test.ts"],"names":[],"mappings":";;AAAA,6FAAqE;AACrE,+BAA8B;AAC9B,4CAAgD;AAChD,kFAA8E;AAC9E,6CAAkD;AAClD,yCAAiD;AACjD,6CAAkD;AAOlD,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAC1C,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjC,IAAI,OAAO,GAAG,CAAC,CAAC;AAChB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;AAClC,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,aAAa,CAAC;AACvE,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;AAEhD,KAAK,UAAU,MAAM,CAAC,KAAa,EAAE,QAAgB,EAAE,MAAc;IACnE,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CACxC,iBAAiB,EACjB,EAAE,KAAK,EAAE,QAAQ,EAAE,EACnB,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,CAC3C,CAAC;IACF,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,IAAI,eAAmC,CAAC;IACxC,IAAI,MAAc,CAAC;IAEnB,MAAM,CAAC,GAAG,EAAE;QACV,eAAe,GAAG,IAAA,sBAAa,GAAE,CAAC,cAAc,CAAC;QACjD,IAAA,sBAAa,GAAE,CAAC,cAAc,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,IAAA,sBAAa,GAAE,CAAC,cAAc,GAAG,eAAe,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,MAAM,GAAG,WAAW,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAClC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,EAAE,OAAO,EAAE,EAAE,CAAC;YAChE,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC9D,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,EAAE,OAAO,EAAE,EAAE,CAAC;YAChE,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC1D,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC1D,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAClC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YACpE,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QACD,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,iBAAiB,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC/D,MAAM,MAAM,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;YAClC,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC9D,sBAAsB,CACvB,CAAC;YACF,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CACrE,OAAO,CACR,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC;YACxD,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC;QAClD,IAAA,aAAM,EACJ,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,CAC9D,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAClC,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;QAC5E,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxE,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/sign-in-country.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/integration/auth/sign-in-country.test.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const config_1 = require("../../../config");
+const sign_in_country_1 = require("../../../utils/sign-in-country");
+const auth_1 = require("../../helpers/auth");
+const db_1 = require("../../helpers/db");
+const http_1 = require("../../helpers/http");
+const COUNTRY_HEADER = "CF-IPCountry";
+const CHROME_ON_WINDOWS = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36";
+const NEW_LOGIN_TITLE = "$dms.notifications.messages.new_login.title_browser_os";
+const HTTP_OK = 200;
+const POLL_INTERVAL_MS = 50;
+const POLL_ATTEMPTS = 40;
+const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+describe("[integration] auth/sign-in country", () => {
+    let previous;
+    let email;
+    let password;
+    let owner;
+    const signIn = async (country) => {
+        const response = await (0, http_1.createClient)().post("/api/auth/login", { email, password }, {
+            headers: {
+                "user-agent": CHROME_ON_WINDOWS,
+                [COUNTRY_HEADER]: country,
+            },
+        });
+        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
+    };
+    const newSignInNotices = async () => {
+        const response = await owner.get("/settings/user/notifications/list");
+        (0, chai_1.expect)(response.status).to.equal(HTTP_OK);
+        return response.data.filter((notification) => notification.title === NEW_LOGIN_TITLE);
+    };
+    const waitForNotices = async (count) => {
+        for (let attempt = 0; attempt < POLL_ATTEMPTS; attempt++) {
+            const notices = await newSignInNotices();
+            if (notices.length >= count)
+                return notices;
+            await delay(POLL_INTERVAL_MS);
+        }
+        return newSignInNotices();
+    };
+    before(async () => {
+        previous = (0, config_1.getAuthConfig)().signInCountry;
+        (0, config_1.getAuthConfig)().signInCountry = { header: COUNTRY_HEADER, database: false };
+        (0, sign_in_country_1.resetCountryLookup)();
+        await (0, db_1.resetDatabase)();
+        const user = await (0, auth_1.registerUser)({ owner: true });
+        ({ email, password } = user);
+        owner = (0, auth_1.authorizedClient)(user.accessToken);
+    });
+    after(() => {
+        (0, config_1.getAuthConfig)().signInCountry = previous;
+        (0, sign_in_country_1.resetCountryLookup)();
+    });
+    it("names the country of a device signing in from a new one, never the address", async () => {
+        await signIn("FR");
+        const [first] = await waitForNotices(1);
+        (0, chai_1.expect)(first.params?.country).to.equal("France");
+        (0, chai_1.expect)(first.params).to.not.have.property("ip");
+    });
+    it("stays quiet when the device signs in again from the same country", async () => {
+        await signIn("FR");
+        await delay(POLL_INTERVAL_MS * 4);
+        (0, chai_1.expect)(await newSignInNotices()).to.have.length(1);
+    });
+    it("alerts when the same browser and system sign in from another country", async () => {
+        await signIn("BR");
+        const notices = await waitForNotices(2);
+        (0, chai_1.expect)(notices).to.have.length(2);
+        (0, chai_1.expect)(notices.map((notice) => notice.params?.country)).to.include("Brazil");
+    });
+});
+//# sourceMappingURL=sign-in-country.test.js.map

package/dist/test/integration/auth/sign-in-country.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-in-country.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/sign-in-country.test.ts"],"names":[],"mappings":";;AACA,+BAA8B;AAC9B,4CAA0E;AAC1E,oEAAoE;AACpE,6CAAoE;AACpE,yCAAiD;AACjD,6CAAkD;AAMlD,MAAM,cAAc,GAAG,cAAc,CAAC;AACtC,MAAM,iBAAiB,GACrB,iHAAiH,CAAC;AACpH,MAAM,eAAe,GACnB,wDAAwD,CAAC;AAC3D,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,aAAa,GAAG,EAAE,CAAC;AAOzB,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEhF,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAI,QAAyC,CAAC;IAC9C,IAAI,KAAa,CAAC;IAClB,IAAI,QAAgB,CAAC;IACrB,IAAI,KAAoB,CAAC;IAEzB,MAAM,MAAM,GAAG,KAAK,EAAE,OAAe,EAAE,EAAE;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CACxC,iBAAiB,EACjB,EAAE,KAAK,EAAE,QAAQ,EAAE,EACnB;YACE,OAAO,EAAE;gBACP,YAAY,EAAE,iBAAiB;gBAC/B,CAAC,cAAc,CAAC,EAAE,OAAO;aAC1B;SACF,CACF,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3E,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,IAAmC,EAAE;QACjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACtE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAQ,QAAQ,CAAC,IAA6B,CAAC,MAAM,CACnD,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,KAAK,eAAe,CACzD,CAAC;IACJ,CAAC,CAAC;IAGF,MAAM,cAAc,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;QAC7C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC5C,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC,CAAC;IAEF,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,QAAQ,GAAG,IAAA,sBAAa,GAAE,CAAC,aAAa,CAAC;QACzC,IAAA,sBAAa,GAAE,CAAC,aAAa,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5E,IAAA,oCAAkB,GAAE,CAAC;QACrB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7B,KAAK,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,IAAA,sBAAa,GAAE,CAAC,aAAa,GAAG,QAAQ,CAAC;QACzC,IAAA,oCAAkB,GAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC;QACxC,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC;QAClC,IAAA,aAAM,EAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC;QACxC,IAAA,aAAM,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClC,IAAA,aAAM,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAChE,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/two-factor-password.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/integration/auth/two-factor-password.test.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const auth_1 = require("../../helpers/auth");
+const db_1 = require("../../helpers/db");
+const TWO_FACTOR = "/settings/user/security/two-factor";
+const LEGACY_TWO_FACTOR = "/settings/user/profile/two-factor";
+const HTTP_OK = 200;
+const HTTP_BAD_REQUEST = 400;
+const HTTP_NOT_FOUND = 404;
+const INVALID_CURRENT_PASSWORD = "error.invalid_current_password";
+describe("[integration] auth/adding a two-factor method", () => {
+    let user;
+    let client;
+    beforeEach(async () => {
+        await (0, db_1.resetDatabase)();
+        user = await (0, auth_1.registerUser)({ owner: true });
+        client = (0, auth_1.authorizedClient)(user.accessToken);
+    });
+    for (const route of ["enable-totp", "enable-email"]) {
+        it(`refuses ${route} without the current password, or with a wrong one`, async () => {
+            for (const body of [{}, { currentPassword: "Not-the-password-1" }]) {
+                const response = await client.post(`${TWO_FACTOR}/${route}`, body);
+                (0, chai_1.expect)(response.status).to.equal(HTTP_BAD_REQUEST);
+                (0, chai_1.expect)(JSON.stringify(response.data)).to.include(INVALID_CURRENT_PASSWORD);
+            }
+        });
+        it(`accepts ${route} with the current password`, async () => {
+            const response = await client.post(`${TWO_FACTOR}/${route}`, {
+                currentPassword: user.password,
+            });
+            (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
+        });
+        it(`no longer serves ${route} under the profile`, async () => {
+            const response = await client.post(`${LEGACY_TWO_FACTOR}/${route}`, {});
+            (0, chai_1.expect)(response.status).to.equal(HTTP_NOT_FOUND);
+        });
+    }
+});
+//# sourceMappingURL=two-factor-password.test.js.map

package/dist/test/integration/auth/two-factor-password.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-password.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/two-factor-password.test.ts"],"names":[],"mappings":";;AACA,+BAA8B;AAC9B,6CAI4B;AAC5B,yCAAiD;AAKjD,MAAM,UAAU,GAAG,oCAAoC,CAAC;AACxD,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;AAC9D,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAElE,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,IAAI,IAAoB,CAAC;IACzB,IAAI,MAAqB,CAAC;IAE1B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;QACpD,EAAE,CAAC,WAAW,KAAK,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClF,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;gBACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;gBACnE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACnD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC9C,wBAAwB,CACzB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,KAAK,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,KAAK,EAAE,EAAE;gBAC3D,eAAe,EAAE,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,KAAK,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACxE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/test/integration/derived-controller.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/integration/derived-controller.test.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const interface_file_storage_1 = require("@antelopejs/interface-file-storage");
+const chai_1 = require("chai");
+const constants_1 = require("@antelopejs/interface-dms/constants");
+const db_1 = require("@antelopejs/interface-dms/db");
+const attachments_1 = require("../helpers/attachments");
+const auth_1 = require("../helpers/auth");
+const db_2 = require("../helpers/db");
+const BASE = "/api/derived-controller/base-notes";
+const DERIVED = "/api/derived-controller/derived-notes";
+const BASE_SLUG = "/base-notes";
+const DERIVED_SLUG = "/derived-notes";
+const DERIVED_TABLE = "derived-notes.content";
+const BASE_TABLE = "base-notes.content";
+const METADATA = "/api/files/metadata";
+const HTTP_OK = 200;
+const HTTP_FORBIDDEN = 403;
+async function ownerClient() {
+    const owner = await (0, auth_1.registerUser)({ owner: true });
+    return (0, auth_1.authorizedClient)(owner.accessToken);
+}
+async function tableOptions(client, slug) {
+    const layout = await client.get("/dms/pagelayout", { params: { slug } });
+    (0, chai_1.expect)(layout.status, JSON.stringify(layout.data)).to.equal(HTTP_OK);
+    return layout.data.components.content.options;
+}
+async function listTitles(client, location, search) {
+    const list = await client.get(`${location}/list`, { params: { search } });
+    (0, chai_1.expect)(list.status, JSON.stringify(list.data)).to.equal(HTTP_OK);
+    return list.data.results.map((note) => note.title);
+}
+async function memberAdding(table) {
+    const page = table.split(".")[0];
+    const [role] = await (0, interface_database_decorators_1.GetModel)(db_1.RoleModel, constants_1.DEFAULT_TENANT_ID).insert({
+        name: `Adds through ${table}`,
+        permissions: [page, table, `${table}.add`],
+    });
+    const member = await (0, auth_1.registerUser)({ roles_ids: [role] });
+    return (0, auth_1.authorizedClient)(member.accessToken);
+}
+describe("[integration] a data controller derived from another", () => {
+    beforeEach(db_2.resetDatabase);
+    it("serves its routes at its own location, over the parent's rows", async () => {
+        const client = await ownerClient();
+        const created = await client.post(`${DERIVED}/new`, { title: "Alpha" });
+        (0, chai_1.expect)(created.status, JSON.stringify(created.data)).to.equal(HTTP_OK);
+        await client.post(`${BASE}/new`, { title: "Beta" });
+        (0, chai_1.expect)(await listTitles(client, DERIVED)).to.have.members([
+            "Alpha",
+            "Beta",
+        ]);
+        (0, chai_1.expect)(await listTitles(client, BASE)).to.have.members(["Alpha", "Beta"]);
+    });
+    it("inherits the parent's fields: mandatory, searchable, listed", async () => {
+        const client = await ownerClient();
+        const missingTitle = await client.post(`${DERIVED}/new`, {});
+        (0, chai_1.expect)(missingTitle.status).to.not.equal(HTTP_OK);
+        await client.post(`${DERIVED}/new`, { title: "Alpha" });
+        await client.post(`${DERIVED}/new`, { title: "Beta" });
+        (0, chai_1.expect)(await listTitles(client, DERIVED, "Alp")).to.deep.equal(["Alpha"]);
+    });
+    it("serves a working TableView of its own, next to the parent's writing one", async () => {
+        const client = await ownerClient();
+        const derived = await tableOptions(client, DERIVED_SLUG);
+        const base = await tableOptions(client, BASE_SLUG);
+        (0, chai_1.expect)(derived.location).to.equal(DERIVED);
+        (0, chai_1.expect)(base.location).to.equal(BASE);
+        (0, chai_1.expect)(derived.columns.map((column) => column.id)).to.have.members(["title", "file"]);
+        (0, chai_1.expect)(derived.formComponents.new).to.not.equal(undefined);
+        (0, chai_1.expect)(derived.formComponents.edit).to.not.equal(undefined);
+    });
+    it("saves a file staged from its own TableView through its own routes", async () => {
+        const client = await ownerClient();
+        const { formComponents } = await tableOptions(client, DERIVED_SLUG);
+        const token = (0, attachments_1.findUploadToken)(formComponents.new, `${DERIVED}#file`);
+        (0, chai_1.expect)(token).to.be.a("string");
+        const upload = await (0, attachments_1.uploadAttachment)({
+            client,
+            content: Buffer.from("derived controller file"),
+            mimetype: "text/plain",
+            claims: {},
+            filename: "note.txt",
+            token,
+        });
+        const saved = await client.post(`${DERIVED}/new`, {
+            title: "With a file",
+            file: upload.key,
+        });
+        (0, chai_1.expect)(saved.status, JSON.stringify(saved.data)).to.equal(HTTP_OK);
+        const promoted = await client.get(METADATA, {
+            params: { resourceKey: (0, interface_file_storage_1.stripStagingPrefix)(upload.key) },
+        });
+        (0, chai_1.expect)(promoted.status, JSON.stringify(promoted.data)).to.equal(HTTP_OK);
+    });
+    it("guards its writes with its own TableView's permission", async () => {
+        const throughDerived = await memberAdding(DERIVED_TABLE);
+        const throughBase = await memberAdding(BASE_TABLE);
+        (0, chai_1.expect)((await throughDerived.post(`${DERIVED}/new`, { title: "Mine" })).status).to.equal(HTTP_OK);
+        (0, chai_1.expect)((await throughBase.post(`${DERIVED}/new`, { title: "Not mine" })).status).to.equal(HTTP_FORBIDDEN);
+        (0, chai_1.expect)((await throughDerived.post(`${BASE}/new`, { title: "Not mine" })).status).to.equal(HTTP_FORBIDDEN);
+    });
+});
+//# sourceMappingURL=derived-controller.test.js.map

package/dist/test/integration/derived-controller.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derived-controller.test.js","sourceRoot":"","sources":["../../../src/test/integration/derived-controller.test.ts"],"names":[],"mappings":";;AAAA,6FAAqE;AACrE,+EAAwE;AAExE,+BAA8B;AAC9B,mEAAwE;AACxE,qDAAyD;AACzD,wDAA2E;AAC3E,0CAAiE;AACjE,sCAA8C;AAM9C,MAAM,IAAI,GAAG,oCAAoC,CAAC;AAClD,MAAM,OAAO,GAAG,uCAAuC,CAAC;AACxD,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,MAAM,UAAU,GAAG,oBAAoB,CAAC;AACxC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AACvC,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,cAAc,GAAG,GAAG,CAAC;AAY3B,KAAK,UAAU,WAAW;IACxB,MAAM,KAAK,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,OAAO,IAAA,uBAAgB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAqB,EAAE,IAAY;IAC7D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACzE,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAAqB,EACrB,QAAgB,EAChB,MAAe;IAEf,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1E,IAAA,aAAM,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,OAAQ,IAAI,CAAC,IAAI,CAAC,OAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAGD,KAAK,UAAU,YAAY,CAAC,KAAa;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,EAAE,6BAAiB,CAAC,CAAC,MAAM,CAAC;QACjE,IAAI,EAAE,gBAAgB,KAAK,EAAE;QAC7B,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,MAAM,CAAC;KAC3C,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,IAAA,uBAAgB,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,UAAU,CAAC,kBAAa,CAAC,CAAC;IAE1B,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACxE,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEpD,IAAA,aAAM,EAAC,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;YACxD,OAAO;YACP,MAAM;SACP,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAA,aAAM,EAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvD,IAAA,aAAM,EAAC,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAEnD,IAAA,aAAM,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAA,aAAM,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,IAAA,aAAM,EACH,OAAO,CAAC,OAA6B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAClE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACrC,IAAA,aAAM,EAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAA,aAAM,EAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;QACnC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,IAAA,6BAAe,EAAC,cAAc,CAAC,GAAG,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;QACrE,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAgB,EAAC;YACpC,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC;YAC/C,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,UAAU;YACpB,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE;YAChD,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,MAAM,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,EAAE,WAAW,EAAE,IAAA,2CAAkB,EAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACxD,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,cAAc,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;QAEnD,IAAA,aAAM,EACJ,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CACxE,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpB,IAAA,aAAM,EACJ,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CACzE,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC3B,IAAA,aAAM,EACJ,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CACzE,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/email-change.test.d.ts

@@ -0,0 +1 @@
+export {};