@antelopejs/dms 0.6.1 → 0.7.0

package/dist/test/integration/auth/two-factor-codes.test.js

@@ -0,0 +1,335 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const chai_1 = require("chai");
+const _2fa_1 = require("2fa");
+const jsonwebtoken_1 = require("jsonwebtoken");
+const userNotifications_model_1 = require("../../../db/models/userNotifications.model");
+const dms_auth_1 = require("../../../implementations/dms-auth");
+const two_factor_codes_1 = require("../../../utils/two-factor-codes");
+const auth_1 = require("../../helpers/auth");
+const db_2 = require("../../helpers/db");
+const emails_1 = require("../../helpers/emails");
+const http_1 = require("../../helpers/http");
+const TWO_FACTOR = "/settings/user/security/two-factor";
+const HTTP_OK = 200;
+const HTTP_BAD_REQUEST = 400;
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_TOO_MANY_REQUESTS = 429;
+const HTTP_INTERNAL_ERROR = 500;
+const TWO_FACTOR_EMAIL_TEMPLATE = "EmailTwoFactor";
+const ATTEMPTS_PER_CHALLENGE = 5;
+const WRONG_BACKUP_CODE = "WRONG000";
+const TOTP_STEP_MS = 30 * 1000;
+const TOTP_SAFE_MARGIN_MS = 3 * 1000;
+const RATE_LIMIT_MS = 60 * 1000;
+const ATTEMPTS_PER_ACCOUNT = 10;
+const LOCKOUT_TITLE = "$dms.notifications.messages.two_factor_lockout.title";
+const NOTIFICATION_WAIT_MS = 5 * 1000;
+const POLL_INTERVAL_MS = 50;
+const TEST_TIMEOUT_MS = 20 * 1000;
+const SHA256_HEX = /^[0-9a-f]{64}$/;
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function currentTotpCode(secret) {
+    const leftInStep = TOTP_STEP_MS - (Date.now() % TOTP_STEP_MS);
+    if (leftInStep < TOTP_SAFE_MARGIN_MS)
+        await sleep(leftInStep);
+    return (0, _2fa_1.generateCode)(secret, (0, two_factor_codes_1.totpStepAt)(Date.now()));
+}
+async function enableTotp(client, user) {
+    const setup = await client.post(`${TWO_FACTOR}/enable-totp`, {
+        currentPassword: user.password,
+    });
+    (0, chai_1.expect)(setup.status, JSON.stringify(setup.data)).to.equal(HTTP_OK);
+    const { secret } = setup.data;
+    const code = await currentTotpCode(secret);
+    const confirmed = await client.post(`${TWO_FACTOR}/confirm-totp`, { code });
+    (0, chai_1.expect)(confirmed.status, JSON.stringify(confirmed.data)).to.equal(HTTP_OK);
+    return { secret, code, backupCodes: confirmed.data.backupCodes };
+}
+async function lastEmailedCode() {
+    const email = await (0, emails_1.lastRenderedEmail)(TWO_FACTOR_EMAIL_TEMPLATE);
+    const code = email?.props.verificationCode;
+    if (typeof code !== "string")
+        throw new Error("No two-factor code was sent");
+    return code;
+}
+async function signIn(user) {
+    const response = await (0, http_1.createClient)().post("/api/auth/login", {
+        email: user.email,
+        password: user.password,
+    });
+    (0, chai_1.expect)(response.data.requires_2fa, JSON.stringify(response.data)).to.equal(true);
+    return response.data.two_factor_token;
+}
+function verify(token, method, code) {
+    return (0, http_1.createClient)().post("/api/auth/verify-2fa", { token, code, method });
+}
+async function tryWrongCodes(token, count) {
+    for (let attempt = 0; attempt < count; attempt++) {
+        const refused = await verify(token, "backup", WRONG_BACKUP_CODE);
+        (0, chai_1.expect)(refused.status, JSON.stringify(refused.data)).to.equal(HTTP_UNAUTHORIZED);
+    }
+}
+async function lockoutNotifications(userId) {
+    const deadline = Date.now() + NOTIFICATION_WAIT_MS;
+    for (;;) {
+        const notifications = await (0, interface_database_decorators_1.GetModel)(userNotifications_model_1.UserNotificationsModel).getByUserId(userId);
+        const count = notifications.filter((notification) => notification.title === LOCKOUT_TITLE).length;
+        if (count > 0 || Date.now() > deadline)
+            return count;
+        await sleep(POLL_INTERVAL_MS);
+    }
+}
+async function storedUser(userId) {
+    const user = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(userId);
+    if (!user)
+        throw new Error(`No user ${userId}`);
+    return user;
+}
+const emailedCodeCount = () => emails_1.renderedEmails.filter((email) => email.template === TWO_FACTOR_EMAIL_TEMPLATE)
+    .length;
+async function duringEmailOutage(request) {
+    emails_1.emailOutage.isOn = true;
+    try {
+        return await request();
+    }
+    finally {
+        emails_1.emailOutage.isOn = false;
+    }
+}
+async function allowNextEmailCode(userId) {
+    const user = await storedUser(userId);
+    user.twoFactorEmailCodeRequestedAt = new Date(Date.now() - RATE_LIMIT_MS);
+    await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).update(user);
+}
+describe("[integration] auth/two-factor codes", function () {
+    this.timeout(TEST_TIMEOUT_MS);
+    let user;
+    let client;
+    const methods = async () => (await client.get(TWO_FACTOR)).data.methods;
+    const startEmailSetup = () => client.post(`${TWO_FACTOR}/enable-email`, {
+        currentPassword: user.password,
+    });
+    before(emails_1.captureEmails);
+    beforeEach(async () => {
+        emails_1.renderedEmails.length = 0;
+        await (0, db_2.resetDatabase)();
+        user = await (0, auth_1.registerUser)({ owner: true });
+        client = (0, auth_1.authorizedClient)(user.accessToken);
+    });
+    describe("sign-in challenge", () => {
+        it("is spent after 5 codes, even before the right one comes", async () => {
+            const { backupCodes } = await enableTotp(client, user);
+            const token = await signIn(user);
+            await tryWrongCodes(token, ATTEMPTS_PER_CHALLENGE);
+            const spent = await verify(token, "backup", backupCodes[0]);
+            (0, chai_1.expect)(spent.status).to.equal(HTTP_TOO_MANY_REQUESTS);
+            (0, chai_1.expect)(JSON.stringify(spent.data)).to.include("error.too_many_2fa_attempts");
+            const fresh = await verify(await signIn(user), "backup", backupCodes[0]);
+            (0, chai_1.expect)(fresh.status, JSON.stringify(fresh.data)).to.equal(HTTP_OK);
+        });
+        it("gives two sign-ins in the same second a challenge each", async () => {
+            const { backupCodes } = await enableTotp(client, user);
+            const { tenantId } = (0, jsonwebtoken_1.decode)(await signIn(user));
+            const stored = await storedUser(user.userId);
+            const [first, second] = [
+                (0, dms_auth_1.generateTwoFactorToken)(tenantId, stored),
+                (0, dms_auth_1.generateTwoFactorToken)(tenantId, stored),
+            ];
+            (0, chai_1.expect)(first.token).to.not.equal(second.token);
+            await tryWrongCodes(first.token, ATTEMPTS_PER_CHALLENGE);
+            const other = await verify(second.token, "backup", backupCodes[0]);
+            (0, chai_1.expect)(other.status, JSON.stringify(other.data)).to.equal(HTTP_OK);
+        });
+        it("opens one session, whatever code comes next", async () => {
+            const { backupCodes } = await enableTotp(client, user);
+            const token = await signIn(user);
+            const first = await verify(token, "backup", backupCodes[0]);
+            (0, chai_1.expect)(first.status, JSON.stringify(first.data)).to.equal(HTTP_OK);
+            const second = await verify(token, "backup", backupCodes[1]);
+            (0, chai_1.expect)(second.status).to.equal(HTTP_UNAUTHORIZED);
+            (0, chai_1.expect)(JSON.stringify(second.data)).to.include("error.2fa_challenge_used");
+        });
+        it("refuses every code once the account took 10 wrong ones, even after a new sign-in", async () => {
+            const { backupCodes } = await enableTotp(client, user);
+            const challenges = ATTEMPTS_PER_ACCOUNT / ATTEMPTS_PER_CHALLENGE;
+            for (let challenge = 0; challenge < challenges; challenge++) {
+                await tryWrongCodes(await signIn(user), ATTEMPTS_PER_CHALLENGE);
+            }
+            const locked = await verify(await signIn(user), "backup", backupCodes[0]);
+            (0, chai_1.expect)(locked.status).to.equal(HTTP_TOO_MANY_REQUESTS);
+            (0, chai_1.expect)(JSON.stringify(locked.data)).to.include("error.too_many_2fa_attempts_account");
+            (0, chai_1.expect)(await lockoutNotifications(user.userId)).to.equal(1);
+        });
+        it("forgets the account's wrong codes once a right one comes", async () => {
+            const { backupCodes } = await enableTotp(client, user);
+            await tryWrongCodes(await signIn(user), ATTEMPTS_PER_CHALLENGE);
+            await tryWrongCodes(await signIn(user), ATTEMPTS_PER_CHALLENGE - 1);
+            const right = await verify(await signIn(user), "backup", backupCodes[0]);
+            (0, chai_1.expect)(right.status, JSON.stringify(right.data)).to.equal(HTTP_OK);
+            await tryWrongCodes(await signIn(user), ATTEMPTS_PER_CHALLENGE);
+            const next = await verify(await signIn(user), "backup", backupCodes[1]);
+            (0, chai_1.expect)(next.status, JSON.stringify(next.data)).to.equal(HTTP_OK);
+        });
+        it("sends no more email codes for a spent challenge", async () => {
+            await startEmailSetup();
+            await client.post(`${TWO_FACTOR}/confirm-email`, {
+                code: await lastEmailedCode(),
+            });
+            const token = await signIn(user);
+            await tryWrongCodes(token, ATTEMPTS_PER_CHALLENGE);
+            await allowNextEmailCode(user.userId);
+            const response = await (0, http_1.createClient)().post("/api/auth/request-2fa-email", { token });
+            (0, chai_1.expect)(response.status).to.equal(HTTP_TOO_MANY_REQUESTS);
+            (0, chai_1.expect)(JSON.stringify(response.data)).to.include("error.too_many_2fa_attempts");
+        });
+        it("stores the emailed code hashed, and signs in with it once", async () => {
+            await startEmailSetup();
+            await client.post(`${TWO_FACTOR}/confirm-email`, {
+                code: await lastEmailedCode(),
+            });
+            await allowNextEmailCode(user.userId);
+            const token = await signIn(user);
+            const requested = await (0, http_1.createClient)().post("/api/auth/request-2fa-email", { token });
+            (0, chai_1.expect)(requested.status, JSON.stringify(requested.data)).to.equal(HTTP_OK);
+            const code = await lastEmailedCode();
+            const stored = (await storedUser(user.userId)).twoFactorEmailCode;
+            (0, chai_1.expect)(stored).to.match(SHA256_HEX);
+            (0, chai_1.expect)(stored).to.not.equal(code);
+            (0, chai_1.expect)((await verify(token, "email", code)).status).to.equal(HTTP_OK);
+            (0, chai_1.expect)((await verify(token, "email", code)).status).to.equal(HTTP_UNAUTHORIZED);
+        });
+    });
+    describe("authenticator codes", () => {
+        it("refuses a code already accepted, at sign-in and on the Security page", async () => {
+            const { code } = await enableTotp(client, user);
+            (0, chai_1.expect)((await verify(await signIn(user), "totp", code)).status).to.equal(HTTP_UNAUTHORIZED);
+            const regenerated = await client.post(`${TWO_FACTOR}/regenerate-backup`, {
+                code,
+            });
+            (0, chai_1.expect)(regenerated.status).to.equal(HTTP_UNAUTHORIZED);
+            const disabled = await client.post(`${TWO_FACTOR}/disable`, {
+                method: "totp",
+                code,
+            });
+            (0, chai_1.expect)(disabled.status).to.equal(HTTP_UNAUTHORIZED);
+            (0, chai_1.expect)(await methods()).to.include("totp");
+        });
+        it("accepts a later code once, and never an earlier one", async () => {
+            const { secret } = await enableTotp(client, user);
+            const userModel = (0, interface_database_decorators_1.GetModel)(db_1.UserModel);
+            const later = Date.now() + 10 * TOTP_STEP_MS;
+            const laterCode = (0, _2fa_1.generateCode)(secret, (0, two_factor_codes_1.totpStepAt)(later));
+            const earlier = Date.now() + 5 * TOTP_STEP_MS;
+            const earlierCode = (0, _2fa_1.generateCode)(secret, (0, two_factor_codes_1.totpStepAt)(earlier));
+            const accept = async (code, now) => (0, two_factor_codes_1.acceptTotpCode)(userModel, await storedUser(user.userId), secret, code, now);
+            (0, chai_1.expect)(await accept(laterCode, later)).to.equal(true);
+            (0, chai_1.expect)(await accept(laterCode, later)).to.equal(false);
+            (0, chai_1.expect)(await accept(earlierCode, earlier)).to.equal(false);
+            (0, chai_1.expect)(await signIn(user)).to.be.a("string");
+        });
+        it("lets only one of two concurrent uses of a code through", async () => {
+            const { secret } = await enableTotp(client, user);
+            const userModel = (0, interface_database_decorators_1.GetModel)(db_1.UserModel);
+            const later = Date.now() + 3 * TOTP_STEP_MS;
+            const code = (0, _2fa_1.generateCode)(secret, (0, two_factor_codes_1.totpStepAt)(later));
+            const [first, second] = await Promise.all([
+                storedUser(user.userId),
+                storedUser(user.userId),
+            ]);
+            const outcomes = await Promise.all([
+                (0, two_factor_codes_1.acceptTotpCode)(userModel, first, secret, code, later),
+                (0, two_factor_codes_1.acceptTotpCode)(userModel, second, secret, code, later),
+            ]);
+            (0, chai_1.expect)(outcomes.filter(Boolean)).to.have.length(1);
+        });
+    });
+    describe("turning email codes on", () => {
+        it("waits for the code sent to the account address", async () => {
+            const started = await startEmailSetup();
+            (0, chai_1.expect)(started.status, JSON.stringify(started.data)).to.equal(HTTP_OK);
+            (0, chai_1.expect)(await methods()).to.not.include("email");
+            const code = await lastEmailedCode();
+            const wrong = code === "000000" ? "000001" : "000000";
+            const refused = await client.post(`${TWO_FACTOR}/confirm-email`, {
+                code: wrong,
+            });
+            (0, chai_1.expect)(refused.status).to.equal(HTTP_UNAUTHORIZED);
+            (0, chai_1.expect)(await methods()).to.not.include("email");
+            const confirmed = await client.post(`${TWO_FACTOR}/confirm-email`, {
+                code,
+            });
+            (0, chai_1.expect)(confirmed.status, JSON.stringify(confirmed.data)).to.equal(HTTP_OK);
+            (0, chai_1.expect)(confirmed.data.backupCodes).to.have.length.greaterThan(0);
+            (0, chai_1.expect)(await methods()).to.include("email");
+        });
+        it("refuses a confirmation that no setup started", async () => {
+            const response = await client.post(`${TWO_FACTOR}/confirm-email`, {
+                code: "123456",
+            });
+            (0, chai_1.expect)(response.status).to.equal(HTTP_BAD_REQUEST);
+            (0, chai_1.expect)(await methods()).to.not.include("email");
+        });
+        it("resends the code of a setup in progress, and only then", async () => {
+            const unstarted = await client.post(`${TWO_FACTOR}/request-email-code`);
+            (0, chai_1.expect)(unstarted.status).to.equal(HTTP_BAD_REQUEST);
+            await startEmailSetup();
+            const first = await lastEmailedCode();
+            await allowNextEmailCode(user.userId);
+            const resent = await client.post(`${TWO_FACTOR}/request-email-code`);
+            (0, chai_1.expect)(resent.status, JSON.stringify(resent.data)).to.equal(HTTP_OK);
+            const second = await lastEmailedCode();
+            if (first !== second) {
+                const stale = await client.post(`${TWO_FACTOR}/confirm-email`, {
+                    code: first,
+                });
+                (0, chai_1.expect)(stale.status).to.equal(HTTP_UNAUTHORIZED);
+            }
+            const confirmed = await client.post(`${TWO_FACTOR}/confirm-email`, {
+                code: second,
+            });
+            (0, chai_1.expect)(confirmed.status).to.equal(HTTP_OK);
+        });
+        it("reopens a setup whose code is still valid, without sending another", async () => {
+            await startEmailSetup();
+            const code = await lastEmailedCode();
+            const reopened = await startEmailSetup();
+            (0, chai_1.expect)(reopened.status, JSON.stringify(reopened.data)).to.equal(HTTP_OK);
+            (0, chai_1.expect)(emailedCodeCount()).to.equal(1);
+            const resent = await client.post(`${TWO_FACTOR}/request-email-code`);
+            (0, chai_1.expect)(resent.status).to.equal(HTTP_TOO_MANY_REQUESTS);
+            const confirmed = await client.post(`${TWO_FACTOR}/confirm-email`, {
+                code,
+            });
+            (0, chai_1.expect)(confirmed.status, JSON.stringify(confirmed.data)).to.equal(HTTP_OK);
+        });
+        it("keeps no code and starts no wait when the email could not be sent", async () => {
+            const failed = await duringEmailOutage(startEmailSetup);
+            (0, chai_1.expect)(failed.status).to.be.at.least(HTTP_INTERNAL_ERROR);
+            const stored = await storedUser(user.userId);
+            (0, chai_1.expect)(stored.twoFactorEmailCode ?? null).to.equal(null);
+            (0, chai_1.expect)(stored.twoFactorEmailCodeRequestedAt ?? null).to.equal(null);
+            const retried = await startEmailSetup();
+            (0, chai_1.expect)(retried.status, JSON.stringify(retried.data)).to.equal(HTTP_OK);
+            const confirmed = await client.post(`${TWO_FACTOR}/confirm-email`, {
+                code: await lastEmailedCode(),
+            });
+            (0, chai_1.expect)(confirmed.status, JSON.stringify(confirmed.data)).to.equal(HTTP_OK);
+        });
+        it("keeps the previous code and its wait when a resend could not be sent", async () => {
+            await startEmailSetup();
+            await allowNextEmailCode(user.userId);
+            const before = await storedUser(user.userId);
+            const failed = await duringEmailOutage(() => client.post(`${TWO_FACTOR}/request-email-code`));
+            (0, chai_1.expect)(failed.status).to.be.at.least(HTTP_INTERNAL_ERROR);
+            const after = await storedUser(user.userId);
+            (0, chai_1.expect)(after.twoFactorEmailCode).to.equal(before.twoFactorEmailCode);
+            (0, chai_1.expect)(after.twoFactorEmailCodeRequestedAt).to.deep.equal(before.twoFactorEmailCodeRequestedAt);
+            const resent = await client.post(`${TWO_FACTOR}/request-email-code`);
+            (0, chai_1.expect)(resent.status, JSON.stringify(resent.data)).to.equal(HTTP_OK);
+        });
+    });
+});
+//# sourceMappingURL=two-factor-codes.test.js.map

package/dist/test/integration/auth/two-factor-codes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-codes.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/two-factor-codes.test.ts"],"names":[],"mappings":";;AAAA,6FAAqE;AACrE,0DAAyE;AAEzE,+BAA8B;AAC9B,8BAAmC;AACnC,+CAAuD;AACvD,wFAAoF;AACpF,gEAA2E;AAC3E,sEAA6E;AAC7E,6CAI4B;AAC5B,yCAAiD;AACjD,iDAK8B;AAC9B,6CAAkD;AAOlD,MAAM,UAAU,GAAG,oCAAoC,CAAC;AACxD,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AACnD,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AACrC,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC;AAG/B,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,CAAC;AACrC,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,aAAa,GAAG,sDAAsD,CAAC;AAC7E,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,CAAC;AACtC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEhF,KAAK,UAAU,eAAe,CAAC,MAAc;IAC3C,MAAM,UAAU,GAAG,YAAY,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC;IAC9D,IAAI,UAAU,GAAG,mBAAmB;QAAE,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9D,OAAO,IAAA,mBAAY,EAAC,MAAM,EAAE,IAAA,6BAAU,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAQD,KAAK,UAAU,UAAU,CACvB,MAAqB,EACrB,IAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,cAAc,EAAE;QAC3D,eAAe,EAAE,IAAI,CAAC,QAAQ;KAC/B,CAAC,CAAC;IACH,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAA0B,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,MAAM,KAAK,GAAG,MAAM,IAAA,0BAAiB,EAAC,yBAAyB,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,gBAAgB,CAAC;IAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAoB;IACxC,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC5D,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CACxE,IAAI,CACL,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,CAAC,gBAA0B,CAAC;AAClD,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,MAAc,EAAE,IAAY;IACzD,OAAO,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,KAAa;IACvD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACjE,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC3D,iBAAiB,CAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAGD,KAAK,UAAU,oBAAoB,CAAC,MAAc;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,CAAC;IACnD,SAAS,CAAC;QACR,MAAM,aAAa,GAAG,MAAM,IAAA,wCAAQ,EAAC,gDAAsB,CAAC,CAAC,WAAW,CACtE,MAAM,CACP,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAChC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,KAAK,aAAa,CACvD,CAAC,MAAM,CAAC;QACT,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrD,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,MAAM,IAAI,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,gBAAgB,GAAG,GAAW,EAAE,CACpC,uBAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,yBAAyB,CAAC;KAC3E,MAAM,CAAC;AAGZ,KAAK,UAAU,iBAAiB,CAAI,OAAyB;IAC3D,oBAAW,CAAC,IAAI,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;YAAS,CAAC;QACT,oBAAW,CAAC,IAAI,GAAG,KAAK,CAAC;IAC3B,CAAC;AACH,CAAC;AAID,KAAK,UAAU,kBAAkB,CAAC,MAAc;IAC9C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,6BAA6B,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,CAAC;IAC1E,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE;IAC9C,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAE9B,IAAI,IAAoB,CAAC;IACzB,IAAI,MAAqB,CAAC;IAE1B,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CACzB,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAmB,CAAC;IAE1D,MAAM,eAAe,GAAG,GAAG,EAAE,CAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,eAAe,EAAE;QACxC,eAAe,EAAE,IAAI,CAAC,QAAQ;KAC/B,CAAC,CAAC;IAEL,MAAM,CAAC,sBAAa,CAAC,CAAC;IAEtB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,uBAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,aAAa,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAEnD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACtD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC3C,6BAA6B,CAC9B,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,qBAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAe,CAAC;YAC9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG;gBACtB,IAAA,iCAAsB,EAAC,QAAQ,EAAE,MAAM,CAAC;gBACxC,IAAA,iCAAsB,EAAC,QAAQ,EAAE,MAAM,CAAC;aACzC,CAAC;YACF,IAAA,aAAM,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE/C,MAAM,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACnE,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAClD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC5C,0BAA0B,CAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;YAChG,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,oBAAoB,GAAG,sBAAsB,CAAC;YACjE,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC;gBAC5D,MAAM,aAAa,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACvD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC5C,qCAAqC,CACtC,CAAC;YACF,IAAA,aAAM,EAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,aAAa,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAChE,MAAM,aAAa,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,sBAAsB,GAAG,CAAC,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEnE,MAAM,aAAa,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,IAAA,aAAM,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBAC/C,IAAI,EAAE,MAAM,eAAe,EAAE;aAC9B,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,aAAa,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YACnD,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEtC,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CACxC,6BAA6B,EAC7B,EAAE,KAAK,EAAE,CACV,CAAC;YACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACzD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC9C,6BAA6B,CAC9B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBAC/C,IAAI,EAAE,MAAM,eAAe,EAAE;aAC9B,CAAC,CAAC;YACH,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,SAAS,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CACzC,6BAA6B,EAC7B,EAAE,KAAK,EAAE,CACV,CAAC;YACF,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,OAAO,CACR,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC;YAErC,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAClE,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAC1D,iBAAiB,CAClB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEhD,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CACtE,iBAAiB,CAClB,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,oBAAoB,EAAE;gBACvE,IAAI;aACL,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,UAAU,EAAE;gBAC1D,MAAM,EAAE,MAAM;gBACd,IAAI;aACL,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACpD,IAAA,aAAM,EAAC,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAA,mBAAY,EAAC,MAAM,EAAE,IAAA,6BAAU,EAAC,KAAK,CAAC,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,YAAY,CAAC;YAC9C,MAAM,WAAW,GAAG,IAAA,mBAAY,EAAC,MAAM,EAAE,IAAA,6BAAU,EAAC,OAAO,CAAC,CAAC,CAAC;YAE9D,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE,CACjD,IAAA,iCAAc,EACZ,SAAS,EACT,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAC7B,MAAM,EACN,IAAI,EACJ,GAAG,CACJ,CAAC;YACJ,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAG3D,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,YAAY,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAA,mBAAY,EAAC,MAAM,EAAE,IAAA,6BAAU,EAAC,KAAK,CAAC,CAAC,CAAC;YACrD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACxC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;aACxB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACjC,IAAA,iCAAc,EAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;gBACrD,IAAA,iCAAc,EAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;aACvD,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;YACxC,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvE,IAAA,aAAM,EAAC,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YAEtD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBAC/D,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACnD,IAAA,aAAM,EAAC,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEhD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBACjE,IAAI;aACL,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,OAAO,CACR,CAAC;YACF,IAAA,aAAM,EAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACjE,IAAA,aAAM,EAAC,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBAChE,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACnD,IAAA,aAAM,EAAC,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;YACxE,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAEpD,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;YACtC,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;YACrE,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;YAEvC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;oBAC7D,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;gBACH,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBACjE,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC;YAErC,MAAM,QAAQ,GAAG,MAAM,eAAe,EAAE,CAAC;YACzC,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzE,IAAA,aAAM,EAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;YACrE,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAEvD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBACjE,IAAI;aACL,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,OAAO,CACR,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;YACjF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;YACxD,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAA,aAAM,EAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzD,IAAA,aAAM,EAAC,MAAM,CAAC,6BAA6B,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEpE,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;YACxC,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBACjE,IAAI,EAAE,MAAM,eAAe,EAAE;aAC9B,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,OAAO,CACR,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAE7C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAChD,CAAC;YACF,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAA,aAAM,EAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACrE,IAAA,aAAM,EAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CACvD,MAAM,CAAC,6BAA6B,CACrC,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;YACrE,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/two-factor-password.test.js

@@ -3,15 +3,19 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const chai_1 = require("chai");
 const auth_1 = require("../../helpers/auth");
 const db_1 = require("../../helpers/db");
+const emails_1 = require("../../helpers/emails");
 const TWO_FACTOR = "/settings/user/security/two-factor";
 const LEGACY_TWO_FACTOR = "/settings/user/profile/two-factor";
 const HTTP_OK = 200;
 const HTTP_BAD_REQUEST = 400;
 const HTTP_NOT_FOUND = 404;
 const INVALID_CURRENT_PASSWORD = "error.invalid_current_password";
-describe("[integration] auth/adding a two-factor method", () => {
+const TEST_TIMEOUT_MS = 20 * 1000;
+describe("[integration] auth/adding a two-factor method", function () {
+    this.timeout(TEST_TIMEOUT_MS);
     let user;
     let client;
+    before(emails_1.captureEmails);
     beforeEach(async () => {
         await (0, db_1.resetDatabase)();
         user = await (0, auth_1.registerUser)({ owner: true });

package/dist/test/integration/auth/two-factor-password.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"two-factor-password.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/two-factor-password.test.ts"],"names":[],"mappings":";;AACA,+BAA8B;AAC9B,6CAI4B;AAC5B,yCAAiD;AAKjD,MAAM,UAAU,GAAG,oCAAoC,CAAC;AACxD,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;AAC9D,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAElE,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,IAAI,IAAoB,CAAC;IACzB,IAAI,MAAqB,CAAC;IAE1B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;QACpD,EAAE,CAAC,WAAW,KAAK,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClF,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;gBACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;gBACnE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACnD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC9C,wBAAwB,CACzB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,KAAK,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,KAAK,EAAE,EAAE;gBAC3D,eAAe,EAAE,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,KAAK,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACxE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"two-factor-password.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/two-factor-password.test.ts"],"names":[],"mappings":";;AACA,+BAA8B;AAC9B,6CAI4B;AAC5B,yCAAiD;AACjD,iDAAqD;AAKrD,MAAM,UAAU,GAAG,oCAAoC,CAAC;AACxD,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;AAC9D,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAGlE,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAElC,QAAQ,CAAC,+CAA+C,EAAE;IACxD,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAE9B,IAAI,IAAoB,CAAC;IACzB,IAAI,MAAqB,CAAC;IAG1B,MAAM,CAAC,sBAAa,CAAC,CAAC;IAEtB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;QACpD,EAAE,CAAC,WAAW,KAAK,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClF,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;gBACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;gBACnE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACnD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC9C,wBAAwB,CACzB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,KAAK,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,KAAK,EAAE,EAAE;gBAC3D,eAAe,EAAE,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,KAAK,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACxE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/two-factor-token.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/integration/auth/two-factor-token.test.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const db_1 = require("@antelopejs/interface-dms/auth/db");
+const chai_1 = require("chai");
+const jsonwebtoken_1 = require("jsonwebtoken");
+const dms_auth_1 = require("../../../implementations/dms-auth");
+const token_secret_1 = require("../../../implementations/dms-auth/token-secret");
+const auth_1 = require("../../helpers/auth");
+const db_2 = require("../../helpers/db");
+const http_1 = require("../../helpers/http");
+const TWO_FACTOR_ROUTES = [
+    "/api/auth/verify-2fa",
+    "/api/auth/request-2fa-email",
+];
+const HTTP_BAD_REQUEST = 400;
+const HTTP_UNAUTHORIZED = 401;
+const INVALID_TWO_FACTOR_TOKEN = "error.invalid_2fa_token";
+const TWO_FACTOR_PURPOSE = "2fa";
+const UNKNOWN_USER_ID = "no-such-user";
+const FOREIGN_SECRET = "not-the-instance-secret";
+const SECONDS_PER_MINUTE = 60;
+const TOTP_CODE = "123456";
+function post(route, body) {
+    return (0, http_1.createClient)().post(route, body);
+}
+function attempt(route, token) {
+    return post(route, { token, code: TOTP_CODE, method: "totp" });
+}
+async function userSecret(userId) {
+    const stored = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(userId);
+    if (!stored)
+        throw new Error(`No user ${userId}`);
+    return (0, token_secret_1.generateSecret)(stored.authKey);
+}
+function tenantOf(user) {
+    return (0, jsonwebtoken_1.decode)(user.accessToken).tenantId;
+}
+async function badTokens(user) {
+    const tenantId = tenantOf(user);
+    const claims = { id: user.userId, tenantId, purpose: TWO_FACTOR_PURPOSE };
+    const secret = await userSecret(user.userId);
+    const nowSeconds = Math.floor(Date.now() / 1000);
+    return {
+        "an unknown user": (0, jsonwebtoken_1.sign)({ ...claims, id: UNKNOWN_USER_ID }, FOREIGN_SECRET),
+        "a bad signature": (0, jsonwebtoken_1.sign)(claims, FOREIGN_SECRET),
+        "an expired challenge": (0, jsonwebtoken_1.sign)({ ...claims, exp: nowSeconds - SECONDS_PER_MINUTE }, secret),
+        "another purpose": (0, jsonwebtoken_1.sign)({ ...claims, purpose: "refresh" }, secret),
+    };
+}
+describe("[integration] auth/two-factor token", () => {
+    let user;
+    beforeEach(async () => {
+        await (0, db_2.resetDatabase)();
+        user = await (0, auth_1.registerUser)({ owner: true });
+    });
+    for (const route of TWO_FACTOR_ROUTES) {
+        it(`refuses a token that is no JWT with a 401 on ${route}`, async () => {
+            const response = await attempt(route, "abc");
+            (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_UNAUTHORIZED);
+            (0, chai_1.expect)(response.data).to.equal(INVALID_TWO_FACTOR_TOKEN);
+        });
+        it(`answers every bad token alike on ${route}`, async () => {
+            for (const [problem, token] of Object.entries(await badTokens(user))) {
+                const response = await attempt(route, token);
+                (0, chai_1.expect)(response.status, problem).to.equal(HTTP_UNAUTHORIZED);
+                (0, chai_1.expect)(response.data, problem).to.equal(INVALID_TWO_FACTOR_TOKEN);
+            }
+        });
+        it(`names the missing token on ${route}`, async () => {
+            for (const body of [{}, { token: "" }]) {
+                const response = await post(route, {
+                    ...body,
+                    code: TOTP_CODE,
+                    method: "totp",
+                });
+                (0, chai_1.expect)(response.status, JSON.stringify(body)).to.equal(HTTP_BAD_REQUEST);
+                (0, chai_1.expect)(response.data).to.equal(INVALID_TWO_FACTOR_TOKEN);
+            }
+        });
+    }
+    it("still takes a genuine token past the token check", async () => {
+        const stored = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(user.userId);
+        if (!stored)
+            throw new Error(`No user ${user.userId}`);
+        const { token } = (0, dms_auth_1.generateTwoFactorToken)(tenantOf(user), stored);
+        const response = await post("/api/auth/request-2fa-email", { token });
+        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_BAD_REQUEST);
+        (0, chai_1.expect)(response.data).to.equal("error.2fa_email_not_enabled");
+    });
+});
+//# sourceMappingURL=two-factor-token.test.js.map

package/dist/test/integration/auth/two-factor-token.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-token.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/two-factor-token.test.ts"],"names":[],"mappings":";;AAAA,6FAAqE;AACrE,0DAA8D;AAC9D,+BAA8B;AAC9B,+CAA6D;AAC7D,gEAA2E;AAC3E,iFAAgF;AAChF,6CAAuE;AACvE,yCAAiD;AACjD,6CAAkD;AAMlD,MAAM,iBAAiB,GAAG;IACxB,sBAAsB;IACtB,6BAA6B;CAC9B,CAAC;AACF,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAC3D,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,eAAe,GAAG,cAAc,CAAC;AACvC,MAAM,cAAc,GAAG,yBAAyB,CAAC;AACjD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC;AAE3B,SAAS,IAAI,CAAC,KAAa,EAAE,IAA6B;IACxD,OAAO,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,KAAa;IAC3C,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAClD,OAAO,IAAA,6BAAc,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAoB;IACpC,OAAQ,IAAA,qBAAM,EAAC,IAAI,CAAC,WAAW,CAAgB,CAAC,QAAkB,CAAC;AACrE,CAAC;AAGD,KAAK,UAAU,SAAS,CACtB,IAAoB;IAEpB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,OAAO;QACL,iBAAiB,EAAE,IAAA,mBAAI,EAAC,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,cAAc,CAAC;QAC3E,iBAAiB,EAAE,IAAA,mBAAI,EAAC,MAAM,EAAE,cAAc,CAAC;QAC/C,sBAAsB,EAAE,IAAA,mBAAI,EAC1B,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,kBAAkB,EAAE,EACnD,MAAM,CACP;QACD,iBAAiB,EAAE,IAAA,mBAAI,EAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,IAAI,IAAoB,CAAC;IAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,EAAE,CAAC,gDAAgD,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC7D,iBAAiB,CAClB,CAAC;YACF,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;YACzD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACrE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC7C,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAC7D,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;YACnD,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE;oBACjC,GAAG,IAAI;oBACP,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;gBACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CACpD,gBAAgB,CACjB,CAAC;gBACF,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,iCAAsB,EAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC7D,gBAAgB,CACjB,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/email-change.test.js

@@ -5,12 +5,15 @@ const html_render_1 = require("@antelopejs/interface-dms/html-render");
 const chai_1 = require("chai");
 const auth_1 = require("../helpers/auth");
 const db_1 = require("../helpers/db");
+const fixtures_1 = require("../helpers/fixtures");
 const SECURITY = "/settings/user/security";
 const HTTP_OK = 200;
 const HTTP_BAD_REQUEST = 400;
 const HTTP_TOO_MANY_REQUESTS = 429;
 const CODE_TEMPLATE = "EmailChangeVerification";
 const NOTICE_TEMPLATE = "EmailChangeNotice";
+const MAX_CODE_ATTEMPTS = 5;
+const TOO_MANY_ATTEMPTS = "error.email_change_too_many_attempts";
 const POLL_INTERVAL_MS = 20;
 const POLL_ATTEMPTS = 50;
 const rendered = [];
@@ -52,6 +55,7 @@ describe("[integration] sign-in email change", () => {
         email: newEmail,
         currentPassword: user.password,
     });
+    const confirm = (code) => client.post(`${SECURITY}/email/confirm`, { code });
     before(captureRenderedEmails);
     beforeEach(async () => {
         rendered.length = 0;
@@ -88,6 +92,38 @@ describe("[integration] sign-in email change", () => {
         await request();
         (0, chai_1.expect)((await request()).status).to.equal(HTTP_TOO_MANY_REQUESTS);
     });
+    it("keeps the once-a-minute limit through a cancel", async () => {
+        await request();
+        await client.delete(`${SECURITY}/email/pending`);
+        (0, chai_1.expect)((await request()).status).to.equal(HTTP_TOO_MANY_REQUESTS);
+    });
+    it("sends one code a minute to an address, whatever the account", async () => {
+        await request();
+        const other = await (0, auth_1.registerUser)();
+        const otherRequest = await (0, auth_1.authorizedClient)(other.accessToken).post(`${SECURITY}/email`, { email: newEmail, currentPassword: other.password });
+        (0, chai_1.expect)(otherRequest.status).to.equal(HTTP_TOO_MANY_REQUESTS);
+    });
+    it("burns the code after too many tries, the right one included", async () => {
+        await request();
+        const code = await codeSentTo(newEmail);
+        const wrong = code === "000000" ? "000001" : "000000";
+        for (let attempt = 1; attempt < MAX_CODE_ATTEMPTS; attempt++) {
+            (0, chai_1.expect)((await confirm(wrong)).status).to.equal(HTTP_BAD_REQUEST);
+        }
+        const burnt = await confirm(wrong);
+        (0, chai_1.expect)(burnt.status).to.equal(HTTP_TOO_MANY_REQUESTS);
+        (0, chai_1.expect)(burnt.data).to.equal(TOO_MANY_ATTEMPTS);
+        (0, chai_1.expect)((await confirm(code)).status).to.equal(HTTP_BAD_REQUEST);
+        (0, chai_1.expect)(await currentEmail()).to.equal(user.email);
+        (0, chai_1.expect)((await client.get(SECURITY)).data.pendingEmail).to.equal(null);
+    });
+    it("marks the new address validated: the code proves it", async () => {
+        await (0, fixtures_1.updateUserByEmail)(user.email, { isValidated: false });
+        await request();
+        const confirmed = await confirm(await codeSentTo(newEmail));
+        (0, chai_1.expect)(confirmed.status, JSON.stringify(confirmed.data)).to.equal(HTTP_OK);
+        (0, chai_1.expect)((await (0, fixtures_1.findUserByEmail)(newEmail)).isValidated).to.equal(true);
+    });
     it("drops a cancelled change", async () => {
         await request();
         const code = await codeSentTo(newEmail);

package/dist/test/integration/email-change.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-change.test.js","sourceRoot":"","sources":["../../../src/test/integration/email-change.test.ts"],"names":[],"mappings":";;AAAA,+DAAgE;AAChE,uEAG+C;AAE/C,+BAA8B;AAC9B,0CAIyB;AACzB,sCAA8C;AAK9C,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AAC3C,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAC5C,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,aAAa,GAAG,EAAE,CAAC;AAYzB,MAAM,QAAQ,GAAoB,EAAE,CAAC;AAKrC,SAAS,qBAAqB;IAC5B,IAAA,mCAAkB,EAChB,EAAE,YAAY,EAAZ,0BAAY,EAAE,EAChB;QACE,YAAY,EAAE,KAAK,EAAE,QAAyB,EAAE,KAAc,EAAE,EAAE;YAChE,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,KAAK,EAAE,KAAyB;aACjC,CAAC,CAAC;YACH,OAAO,cAAc,CAAC;QACxB,CAAC;KACF,CACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,QAAgB;IACtD,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAC5E,CAAC;AACJ,CAAC;AAGD,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,QAAgB;IAClE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,MAAM,IAAI,GAAG,CAAC,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;IAC7E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAI,IAAoB,CAAC;IACzB,IAAI,MAAqB,CAAC;IAC1B,IAAI,QAAgB,CAAC;IAErB,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE,CAC9B,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAe,CAAC;IAE1D,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,QAAQ,EAAE;QAC/B,KAAK,EAAE,QAAQ;QACf,eAAe,EAAE,IAAI,CAAC,QAAQ;KAC/B,CAAC,CAAC;IAEL,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAE9B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,QAAQ,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC;QACjC,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAA,aAAM,EAAC,MAAM,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,IAAA,aAAM,EAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvD,IAAA,aAAM,EAAC,MAAM,kBAAkB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CACtE,SAAS,CACV,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,gBAAgB,EAAE;YAC7D,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAClD,IAAA,aAAM,EAAC,MAAM,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAA,aAAM,EAAC,MAAM,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,OAAO,EAAE,CAAC;QAChB,IAAA,aAAM,EAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,gBAAgB,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAA,aAAM,EAAC,MAAM,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"email-change.test.js","sourceRoot":"","sources":["../../../src/test/integration/email-change.test.ts"],"names":[],"mappings":";;AAAA,+DAAgE;AAChE,uEAG+C;AAE/C,+BAA8B;AAC9B,0CAIyB;AACzB,sCAA8C;AAC9C,kDAAyE;AAKzE,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AAC3C,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAC5C,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,iBAAiB,GAAG,sCAAsC,CAAC;AACjE,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,aAAa,GAAG,EAAE,CAAC;AAYzB,MAAM,QAAQ,GAAoB,EAAE,CAAC;AAKrC,SAAS,qBAAqB;IAC5B,IAAA,mCAAkB,EAChB,EAAE,YAAY,EAAZ,0BAAY,EAAE,EAChB;QACE,YAAY,EAAE,KAAK,EAAE,QAAyB,EAAE,KAAc,EAAE,EAAE;YAChE,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,KAAK,EAAE,KAAyB;aACjC,CAAC,CAAC;YACH,OAAO,cAAc,CAAC;QACxB,CAAC;KACF,CACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,QAAgB;IACtD,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAC5E,CAAC;AACJ,CAAC;AAGD,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,QAAgB;IAClE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,MAAM,IAAI,GAAG,CAAC,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC;IAC7E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAI,IAAoB,CAAC;IACzB,IAAI,MAAqB,CAAC;IAC1B,IAAI,QAAgB,CAAC;IAErB,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE,CAC9B,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAe,CAAC;IAE1D,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,QAAQ,EAAE;QAC/B,KAAK,EAAE,QAAQ;QACf,eAAe,EAAE,IAAI,CAAC,QAAQ;KAC/B,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAErD,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAE9B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,QAAQ,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC;QACjC,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAA,aAAM,EAAC,MAAM,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,IAAA,aAAM,EAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvD,IAAA,aAAM,EAAC,MAAM,kBAAkB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CACtE,SAAS,CACV,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,gBAAgB,EAAE;YAC7D,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAClD,IAAA,aAAM,EAAC,MAAM,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAA,aAAM,EAAC,MAAM,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,OAAO,EAAE,CAAC;QAChB,IAAA,aAAM,EAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,gBAAgB,CAAC,CAAC;QACjD,IAAA,aAAM,EAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QACnC,MAAM,YAAY,GAAG,MAAM,IAAA,uBAAgB,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CACjE,GAAG,QAAQ,QAAQ,EACnB,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,CAAC,QAAQ,EAAE,CACrD,CAAC;QACF,IAAA,aAAM,EAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7D,IAAA,aAAM,EAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACtD,IAAA,aAAM,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAE/C,IAAA,aAAM,EAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChE,IAAA,aAAM,EAAC,MAAM,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,IAAA,4BAAiB,EAAC,IAAI,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAA,aAAM,EAAC,CAAC,MAAM,IAAA,0BAAe,EAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,gBAAgB,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAA,aAAM,EAAC,MAAM,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/invite-extension-edit.test.js

@@ -63,7 +63,6 @@ describe("Pending invite edit with extension payloads (MongoDB adapter)", () =>
             roles_ids: [],
             asTenantOwner: false,
             expiresAt: new Date(Date.now() + FUTURE_MS),
-            skipEmailValidation: false,
             extensions: {
                 scope: { access: "all" },
                 frozen: { value: "kept" },