@antelopejs/dms 0.6.2 → 0.7.1

package/dist/test/unit/sanitize-user.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-user.test.js","sourceRoot":"","sources":["../../../src/test/unit/sanitize-user.test.ts"],"names":[],"mappings":";;AACA,+BAA8B;AAC9B,6DAA8D;AAE9D,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,IAAI,GAAG;YACX,GAAG,EAAE,eAAe;YACpB,KAAK,EAAE,sBAAsB;YAC7B,eAAe,EAAE,kBAAkB;YACnC,sBAAsB,EAAE,gBAAgB;YACxC,qBAAqB,EAAE,UAAU;SACf,CAAC;QAErB,MAAM,SAAS,GAAG,IAAA,uBAAY,EAAC,IAAI,CAAC,CAAC;QAErC,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAC1D,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QACjE,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QAChE,IAAA,aAAM,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/unit/signup-email-validation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/signup-email-validation.test.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const config_1 = require("../../config");
+const signup_1 = require("../../routes/auth/signup");
+const fixtures_1 = require("../helpers/fixtures");
+const INVITEE_NAME = "Invitee";
+const INVITEE_PASSWORD = "InviteePassw0rd!";
+const USER_AGENT = "signup-validation-test";
+const IP = "127.0.0.1";
+function setEmailValidation(mustValidateEmail) {
+    (0, config_1.applyConfig)({ auth: { ...(0, config_1.getAuthConfig)(), mustValidateEmail } });
+}
+function buildDraft(email) {
+    return {
+        _id: `signup-validation-draft:${email}`,
+        email,
+        name: "Abandoned draft",
+        isValidated: false,
+        validationToken: "STALE1",
+        validationRequestedAt: new Date(),
+        language: "en",
+    };
+}
+async function signUpThroughInvite(scenario) {
+    let account = scenario.existingDraft;
+    const newUserId = `signup-validation:${scenario.email}`;
+    const userModel = {
+        getByEmail: async () => scenario.existingDraft,
+        get: async () => account,
+        getOwners: async () => [],
+        insert: async (row) => {
+            account = { ...row, _id: newUserId };
+            return [newUserId];
+        },
+        update: async (user) => {
+            account = user;
+        },
+    };
+    const { token } = await (0, fixtures_1.seedUserInvite)({
+        email: scenario.email,
+    });
+    await (0, signup_1.signup)(userModel, {}, {
+        name: INVITEE_NAME,
+        email: scenario.email,
+        password: INVITEE_PASSWORD,
+        token,
+    }, USER_AGENT, { ip: IP }).catch(() => undefined);
+    (0, chai_1.expect)(account, "signup wrote no account").to.not.equal(undefined);
+    return account;
+}
+function expectValidated(account) {
+    (0, chai_1.expect)(account.isValidated).to.equal(true);
+    (0, chai_1.expect)(account.validationToken).to.equal(null);
+    (0, chai_1.expect)(account.validationRequestedAt).to.equal(null);
+}
+describe("[unit] auth/signup — email validation of an invited account", () => {
+    afterEach(() => setEmailValidation(false));
+    describe("on an instance that does not validate emails", () => {
+        it("marks the new account verified", async () => {
+            expectValidated(await signUpThroughInvite({ email: "validation-off@acme.dev" }));
+        });
+        it("marks a taken-over draft verified", async () => {
+            const email = "validation-off-draft@acme.dev";
+            expectValidated(await signUpThroughInvite({ email, existingDraft: buildDraft(email) }));
+        });
+    });
+    describe("on an instance that validates emails", () => {
+        beforeEach(() => setEmailValidation(true));
+        it("marks the new account verified", async () => {
+            expectValidated(await signUpThroughInvite({ email: "validation-on@acme.dev" }));
+        });
+        it("marks a taken-over draft verified and drops its pending token", async () => {
+            const email = "validation-on-draft@acme.dev";
+            expectValidated(await signUpThroughInvite({ email, existingDraft: buildDraft(email) }));
+        });
+    });
+});
+//# sourceMappingURL=signup-email-validation.test.js.map

package/dist/test/unit/signup-email-validation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signup-email-validation.test.js","sourceRoot":"","sources":["../../../src/test/unit/signup-email-validation.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAM9B,yCAA0D;AAC1D,qDAAkD;AAClD,kDAAqD;AAErD,MAAM,YAAY,GAAG,SAAS,CAAC;AAC/B,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,MAAM,EAAE,GAAG,WAAW,CAAC;AAEvB,SAAS,kBAAkB,CAAC,iBAA0B;IACpD,IAAA,oBAAW,EAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAA,sBAAa,GAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAUD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO;QACL,GAAG,EAAE,2BAA2B,KAAK,EAAE;QACvC,KAAK;QACL,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,QAAQ;QACzB,qBAAqB,EAAE,IAAI,IAAI,EAAE;QACjC,QAAQ,EAAE,IAAI;KACI,CAAC;AACvB,CAAC;AAOD,KAAK,UAAU,mBAAmB,CAAC,QAAwB;IACzD,IAAI,OAAO,GAAqB,QAAQ,CAAC,aAAa,CAAC;IACvD,MAAM,SAAS,GAAG,qBAAqB,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG;QAChB,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,aAAa;QAC9C,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO;QACxB,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;QACzB,MAAM,EAAE,KAAK,EAAE,GAAkB,EAAE,EAAE;YACnC,OAAO,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,SAAS,EAAU,CAAC;YAC7C,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAU,EAAE,EAAE;YAC3B,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;KACsB,CAAC;IAG1B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAA,yBAAc,EAAC;QACrC,KAAK,EAAE,QAAQ,CAAC,KAAK;KACtB,CAAC,CAAC;IAEH,MAAM,IAAA,eAAM,EACV,SAAS,EACT,EAAkB,EAClB;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,gBAAgB;QAC1B,KAAK;KACN,EACD,UAAU,EACV,EAAE,EAAE,EAAE,EAAE,EAAE,CACX,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAEzB,IAAA,aAAM,EAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnE,OAAO,OAAe,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,OAAa;IACpC,IAAA,aAAM,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAA,aAAM,EAAC,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAA,aAAM,EAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,SAAS,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3C,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;QAG5D,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,eAAe,CACb,MAAM,mBAAmB,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAChE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,KAAK,GAAG,+BAA+B,CAAC;YAC9C,eAAe,CACb,MAAM,mBAAmB,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CACvE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAIH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;QACpD,UAAU,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAE3C,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,eAAe,CACb,MAAM,mBAAmB,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAC/D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,KAAK,GAAG,8BAA8B,CAAC;YAC7C,eAAe,CACb,MAAM,mBAAmB,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CACvE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/unit/validation/member-invite.schema.test.js

@@ -9,11 +9,11 @@ const basePayload = {
     asTenantOwner: false,
 };
 describe("[unit] validation/member-invite.schema", () => {
-    it("accepts a payload without names when email validation is not skipped", () => {
+    it("accepts a payload without names", () => {
         const result = member_invite_schema_1.memberInviteSchema.safeParse(basePayload);
         (0, chai_1.expect)(result.success).to.equal(true);
     });
-    it("accepts optional names when email validation is not skipped", () => {
+    it("accepts optional names", () => {
         const result = member_invite_schema_1.memberInviteSchema.safeParse({
             ...basePayload,
             firstname: "Ada",
@@ -21,58 +21,23 @@ describe("[unit] validation/member-invite.schema", () => {
         });
         (0, chai_1.expect)(result.success).to.equal(true);
     });
-    it("rejects a payload without names when email validation is skipped", () => {
-        const result = member_invite_schema_1.memberInviteSchema.safeParse({
-            ...basePayload,
-            skipEmailValidation: true,
-        });
-        (0, chai_1.expect)(result.success).to.equal(false);
-        const paths = result.success
-            ? []
-            : result.error.issues.map((issue) => issue.path.join("."));
-        (0, chai_1.expect)(paths).to.include("firstname");
-        (0, chai_1.expect)(paths).to.include("lastname");
-    });
-    it("rejects a missing lastname alone when email validation is skipped", () => {
-        const result = member_invite_schema_1.memberInviteSchema.safeParse({
-            ...basePayload,
-            skipEmailValidation: true,
-            firstname: "Ada",
-        });
-        (0, chai_1.expect)(result.success).to.equal(false);
-        const paths = result.success
-            ? []
-            : result.error.issues.map((issue) => issue.path.join("."));
-        (0, chai_1.expect)(paths).to.deep.equal(["lastname"]);
-    });
-    it("accepts names with skipped email validation", () => {
-        const result = member_invite_schema_1.memberInviteSchema.safeParse({
-            ...basePayload,
-            skipEmailValidation: true,
-            firstname: "Ada",
-            lastname: "Lovelace",
-        });
-        (0, chai_1.expect)(result.success).to.equal(true);
-    });
-    it("accepts an empty firstname when email validation is not skipped", () => {
+    it("accepts an empty firstname", () => {
         const result = member_invite_schema_1.memberInviteSchema.safeParse({
             ...basePayload,
             firstname: "",
         });
         (0, chai_1.expect)(result.success).to.equal(true);
     });
-    it("rejects an empty firstname when email validation is skipped", () => {
+    it("ignores a retired skipEmailValidation flag", () => {
         const result = member_invite_schema_1.memberInviteSchema.safeParse({
             ...basePayload,
+            emails: ["ada@test.local", "grace@test.local"],
             skipEmailValidation: true,
-            firstname: "",
-            lastname: "Lovelace",
         });
-        (0, chai_1.expect)(result.success).to.equal(false);
-        const paths = result.success
-            ? []
-            : result.error.issues.map((issue) => issue.path.join("."));
-        (0, chai_1.expect)(paths).to.deep.equal(["firstname"]);
+        (0, chai_1.expect)(result.success).to.equal(true);
+        if (result.success) {
+            (0, chai_1.expect)(result.data).to.not.have.property("skipEmailValidation");
+        }
     });
     it("still requires at least one role for non-owners", () => {
         const result = member_invite_schema_1.memberInviteSchema.safeParse({
@@ -81,18 +46,15 @@ describe("[unit] validation/member-invite.schema", () => {
         });
         (0, chai_1.expect)(result.success).to.equal(false);
     });
-    it("treats a whitespace-only name as missing when validation is skipped", () => {
+    it("trims a whitespace-only name to nothing", () => {
         const result = member_invite_schema_1.memberInviteSchema.safeParse({
             ...basePayload,
-            skipEmailValidation: true,
             firstname: "   ",
-            lastname: "Lovelace",
         });
-        (0, chai_1.expect)(result.success).to.equal(false);
-        const paths = result.success
-            ? []
-            : result.error.issues.map((issue) => issue.path.join("."));
-        (0, chai_1.expect)(paths).to.deep.equal(["firstname"]);
+        (0, chai_1.expect)(result.success).to.equal(true);
+        if (result.success) {
+            (0, chai_1.expect)(result.data.firstname).to.equal("");
+        }
     });
     it("trims the names it accepts", () => {
         const result = member_invite_schema_1.memberInviteSchema.safeParse({

package/dist/test/unit/validation/member-invite.schema.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"member-invite.schema.test.js","sourceRoot":"","sources":["../../../../src/test/unit/validation/member-invite.schema.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,mFAGkD;AAElD,MAAM,WAAW,GAAG;IAClB,KAAK,EAAE,oBAAoB;IAC3B,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,KAAK;CACrB,CAAC;AAEF,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACzD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,UAAU;SACrB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO;YAC1B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO;YAC1B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,UAAU;SACrB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,UAAU;SACrB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO;YAC1B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,UAAU;SACrB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO;YAC1B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,SAAS,EAAE,SAAS;YACpB,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAA,aAAM,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAA,aAAM,EAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,6CAAsB,GAAG,CAAC,CAAC;SAClD,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"member-invite.schema.test.js","sourceRoot":"","sources":["../../../../src/test/unit/validation/member-invite.schema.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,mFAGkD;AAElD,MAAM,WAAW,GAAG;IAClB,KAAK,EAAE,oBAAoB;IAC3B,KAAK,EAAE,CAAC,QAAQ,CAAC;IACjB,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,KAAK;CACrB,CAAC;AAEF,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACzD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,UAAU;SACrB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAIH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,MAAM,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;YAC9C,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAA,aAAM,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAA,aAAM,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,SAAS,EAAE,SAAS;YACpB,QAAQ,EAAE,YAAY;SACvB,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAA,aAAM,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAA,aAAM,EAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,yCAAkB,CAAC,SAAS,CAAC;YAC1C,GAAG,WAAW;YACd,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,6CAAsB,GAAG,CAAC,CAAC;SAClD,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/account-notifications.d.ts

@@ -15,4 +15,9 @@ export interface FailedSignInsAlert {
     hasTwoFactor: boolean;
 }
 export declare function notifyFailedSignIns(userId: string, { count, windowMinutes, hasTwoFactor }: FailedSignInsAlert): Promise<void>;
+export interface TwoFactorLockoutAlert {
+    count: number;
+    windowMinutes: number;
+}
+export declare function notifyTwoFactorLockout(userId: string, { count, windowMinutes }: TwoFactorLockoutAlert, burstId: string): Promise<void>;
 export declare function notifyWelcome(userId: string, name: string): Promise<void>;

package/dist/utils/account-notifications.js

@@ -10,6 +10,7 @@ exports.notifyTwoFactorDisabled = notifyTwoFactorDisabled;
 exports.notifyBackupCodesRegenerated = notifyBackupCodesRegenerated;
 exports.notifyBackupCodeUsed = notifyBackupCodeUsed;
 exports.notifyFailedSignIns = notifyFailedSignIns;
+exports.notifyTwoFactorLockout = notifyTwoFactorLockout;
 exports.notifyWelcome = notifyWelcome;
 const notifications_1 = require("@antelopejs/interface-dms/notifications");
 const notification_emitter_1 = require("./notification-emitter");
@@ -34,6 +35,7 @@ const templates = {
     backupCodesRegenerated: securityTemplate("backup_codes_regenerated", "i-ph-arrows-clockwise", "neutral"),
     backupCodeUsed: securityTemplate("backup_code_used", "i-ph-lifebuoy", "warning"),
     failedSignIns: securityTemplate("failed_sign_ins", "i-ph-warning-octagon", "error"),
+    twoFactorLockout: securityTemplate("two_factor_lockout", "i-ph-shield-warning", "error"),
     welcome: {
         icon: "i-ph-hand-waving",
         subject: notifications_1.AccountSubject,
@@ -126,6 +128,12 @@ function notifyFailedSignIns(userId, { count, windowMinutes, hasTwoFactor }) {
         descriptionKey: hasTwoFactor ? "description_two_factor" : "description",
     });
 }
+function notifyTwoFactorLockout(userId, { count, windowMinutes }, burstId) {
+    return (0, notification_emitter_1.emitNotification)(userId, templates.twoFactorLockout, {
+        params: { count, minutes: windowMinutes },
+        idempotencyKey: `two-factor-lockout:${burstId}`,
+    });
+}
 function notifyWelcome(userId, name) {
     return (0, notification_emitter_1.emitNotification)(userId, templates.welcome, name ? { params: { name } } : { titleKey: "title_anonymous" });
 }

package/dist/utils/account-notifications.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-notifications.js","sourceRoot":"","sources":["../../src/utils/account-notifications.ts"],"names":[],"mappings":";;AAyGA,wCAmBC;AAED,sDAEC;AAGD,kDAOC;AAED,wDAOC;AAED,gDAOC;AAED,wDAKC;AAED,0DAKC;AAQD,oEAQC;AAUD,oDASC;AAUD,kDAQC;AAED,sCAMC;AAtOD,2EAGiD;AACjD,iEAKgC;AAChC,6DAA4E;AAC5E,uDAAuD;AAGvD,SAAS,gBAAgB,CACvB,SAAiB,EACjB,IAAY,EACZ,IAAkC;IAElC,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,+BAAe;QACxB,SAAS;QACT,MAAM,EAAE,yCAAkB,CAAC,QAAQ;QACnC,IAAI;KACL,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG;IAChB,QAAQ,EAAE,gBAAgB,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS,CAAC;IAClE,qBAAqB,EAAE,gBAAgB,CACrC,0BAA0B,EAC1B,cAAc,EACd,SAAS,CACV;IACD,eAAe,EAAE,gBAAgB,CAAC,kBAAkB,EAAE,UAAU,EAAE,SAAS,CAAC;IAC5E,gBAAgB,EAAE,gBAAgB,CAChC,oBAAoB,EACpB,sBAAsB,EACtB,SAAS,CACV;IACD,aAAa,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,UAAU,EAAE,SAAS,CAAC;IACxE,YAAY,EAAE,gBAAgB,CAC5B,eAAe,EACf,sBAAsB,EACtB,SAAS,CACV;IACD,sBAAsB,EAAE,gBAAgB,CACtC,0BAA0B,EAC1B,uBAAuB,EACvB,SAAS,CACV;IACD,cAAc,EAAE,gBAAgB,CAC9B,kBAAkB,EAClB,eAAe,EACf,SAAS,CACV;IACD,aAAa,EAAE,gBAAgB,CAC7B,iBAAiB,EACjB,sBAAsB,EACtB,OAAO,CACR;IACD,OAAO,EAAE;QACP,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,8BAAc;QACvB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,yCAAkB,CAAC,QAAQ;QACnC,IAAI,EAAE,SAAS;KAChB;CAC6C,CAAC;AAEjD,MAAM,kBAAkB,GAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAChE,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,iBAAiB,GAAG;IACxB,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;IACvD,QAAQ,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE;CAClD,CAAC;AAEX,SAAS,iBAAiB,CACxB,KAAqC,EACrC,MAAc;IAEd,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpD,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,yBAAyB,CAAC;IAC9B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,gBAAgB,CAAC,cAAc,KAAK,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3E,CAAC;AAGD,SAAS,aAAa,CAAC,MAAoB;IACzC,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;SACnD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC;AAC7D,CAAC;AAMD,SAAgB,cAAc,CAC5B,IAAoC,EACpC,MAAoB;IAEpB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;IACtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,CAAC,OAAO,GAAG,IAAA,oCAAkB,EAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAA,uCAAgB,EACrB,IAAI,CAAC,GAAG,EACR,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,qBAAqB,EACnE;QACE,GAAG,QAAQ;QACX,MAAM;QACN,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,wBAAwB;KAC1E,CACF,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CAAC,MAAc;IAClD,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;AAC7D,CAAC;AAGD,SAAgB,mBAAmB,CACjC,MAAc,EACd,KAAa;IAEb,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,aAAa,EAAE;QACvD,MAAM,EAAE,EAAE,KAAK,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,sBAAsB,CACpC,MAAc,EACd,YAAoB;IAEpB,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,gBAAgB,EAAE;QAC1D,MAAM,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;KACnC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,kBAAkB,CAChC,MAAc,EACd,QAAgB;IAEhB,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,YAAY,EAAE;QACtD,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,sBAAsB,CACpC,MAAc,EACd,MAAc;IAEd,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,uBAAuB,CACrC,MAAc,EACd,MAAc;IAEd,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,sBAAsB,GAAqC;IAC/D,CAAC,EAAE,kBAAkB;IACrB,CAAC,EAAE,iBAAiB;CACrB,CAAC;AAGF,SAAgB,4BAA4B,CAC1C,MAAc,EACd,aAAqB;IAErB,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,sBAAsB,EAAE;QAChE,MAAM,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;QAChC,cAAc,EAAE,sBAAsB,CAAC,aAAa,CAAC,IAAI,aAAa;KACvE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,IAAI,qCAAgB,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAGD,SAAgB,oBAAoB,CAClC,MAAc,EACd,IAAY;IAEZ,OAAO,IAAA,uCAAgB,EACrB,MAAM,EACN,EAAE,GAAG,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,IAAA,uCAAkB,EAAC,IAAI,CAAC,EAAE,EAC/D,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CACrD,CAAC;AACJ,CAAC;AAUD,SAAgB,mBAAmB,CACjC,MAAc,EACd,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAsB;IAE1D,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,aAAa,EAAE;QACvD,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;QACzC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,aAAa;KACxE,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,aAAa,CAAC,MAAc,EAAE,IAAY;IACxD,OAAO,IAAA,uCAAgB,EACrB,MAAM,EACN,SAAS,CAAC,OAAO,EACjB,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAC9D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"account-notifications.js","sourceRoot":"","sources":["../../src/utils/account-notifications.ts"],"names":[],"mappings":";;AA8GA,wCAmBC;AAED,sDAEC;AAGD,kDAOC;AAED,wDAOC;AAED,gDAOC;AAED,wDAKC;AAED,0DAKC;AAQD,oEAQC;AAUD,oDASC;AAUD,kDAQC;AAcD,wDASC;AAED,sCAMC;AAlQD,2EAGiD;AACjD,iEAKgC;AAChC,6DAA4E;AAC5E,uDAAuD;AAGvD,SAAS,gBAAgB,CACvB,SAAiB,EACjB,IAAY,EACZ,IAAkC;IAElC,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,+BAAe;QACxB,SAAS;QACT,MAAM,EAAE,yCAAkB,CAAC,QAAQ;QACnC,IAAI;KACL,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG;IAChB,QAAQ,EAAE,gBAAgB,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS,CAAC;IAClE,qBAAqB,EAAE,gBAAgB,CACrC,0BAA0B,EAC1B,cAAc,EACd,SAAS,CACV;IACD,eAAe,EAAE,gBAAgB,CAAC,kBAAkB,EAAE,UAAU,EAAE,SAAS,CAAC;IAC5E,gBAAgB,EAAE,gBAAgB,CAChC,oBAAoB,EACpB,sBAAsB,EACtB,SAAS,CACV;IACD,aAAa,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,UAAU,EAAE,SAAS,CAAC;IACxE,YAAY,EAAE,gBAAgB,CAC5B,eAAe,EACf,sBAAsB,EACtB,SAAS,CACV;IACD,sBAAsB,EAAE,gBAAgB,CACtC,0BAA0B,EAC1B,uBAAuB,EACvB,SAAS,CACV;IACD,cAAc,EAAE,gBAAgB,CAC9B,kBAAkB,EAClB,eAAe,EACf,SAAS,CACV;IACD,aAAa,EAAE,gBAAgB,CAC7B,iBAAiB,EACjB,sBAAsB,EACtB,OAAO,CACR;IACD,gBAAgB,EAAE,gBAAgB,CAChC,oBAAoB,EACpB,qBAAqB,EACrB,OAAO,CACR;IACD,OAAO,EAAE;QACP,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,8BAAc;QACvB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,yCAAkB,CAAC,QAAQ;QACnC,IAAI,EAAE,SAAS;KAChB;CAC6C,CAAC;AAEjD,MAAM,kBAAkB,GAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAChE,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,iBAAiB,GAAG;IACxB,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;IACvD,QAAQ,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE;CAClD,CAAC;AAEX,SAAS,iBAAiB,CACxB,KAAqC,EACrC,MAAc;IAEd,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpD,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,yBAAyB,CAAC;IAC9B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,gBAAgB,CAAC,cAAc,KAAK,IAAI,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3E,CAAC;AAGD,SAAS,aAAa,CAAC,MAAoB;IACzC,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QAChC,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;SACnD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC;AAC7D,CAAC;AAMD,SAAgB,cAAc,CAC5B,IAAoC,EACpC,MAAoB;IAEpB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;IACtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,CAAC,OAAO,GAAG,IAAA,oCAAkB,EAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAA,uCAAgB,EACrB,IAAI,CAAC,GAAG,EACR,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,qBAAqB,EACnE;QACE,GAAG,QAAQ;QACX,MAAM;QACN,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,wBAAwB;KAC1E,CACF,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CAAC,MAAc;IAClD,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;AAC7D,CAAC;AAGD,SAAgB,mBAAmB,CACjC,MAAc,EACd,KAAa;IAEb,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,aAAa,EAAE;QACvD,MAAM,EAAE,EAAE,KAAK,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,sBAAsB,CACpC,MAAc,EACd,YAAoB;IAEpB,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,gBAAgB,EAAE;QAC1D,MAAM,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;KACnC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,kBAAkB,CAChC,MAAc,EACd,QAAgB;IAEhB,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,YAAY,EAAE;QACtD,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,sBAAsB,CACpC,MAAc,EACd,MAAc;IAEd,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,uBAAuB,CACrC,MAAc,EACd,MAAc;IAEd,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,sBAAsB,GAAqC;IAC/D,CAAC,EAAE,kBAAkB;IACrB,CAAC,EAAE,iBAAiB;CACrB,CAAC;AAGF,SAAgB,4BAA4B,CAC1C,MAAc,EACd,aAAqB;IAErB,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,sBAAsB,EAAE;QAChE,MAAM,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;QAChC,cAAc,EAAE,sBAAsB,CAAC,aAAa,CAAC,IAAI,aAAa;KACvE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,IAAI,qCAAgB,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAGD,SAAgB,oBAAoB,CAClC,MAAc,EACd,IAAY;IAEZ,OAAO,IAAA,uCAAgB,EACrB,MAAM,EACN,EAAE,GAAG,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,IAAA,uCAAkB,EAAC,IAAI,CAAC,EAAE,EAC/D,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CACrD,CAAC;AACJ,CAAC;AAUD,SAAgB,mBAAmB,CACjC,MAAc,EACd,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAsB;IAE1D,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,aAAa,EAAE;QACvD,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;QACzC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,aAAa;KACxE,CAAC,CAAC;AACL,CAAC;AAcD,SAAgB,sBAAsB,CACpC,MAAc,EACd,EAAE,KAAK,EAAE,aAAa,EAAyB,EAC/C,OAAe;IAEf,OAAO,IAAA,uCAAgB,EAAC,MAAM,EAAE,SAAS,CAAC,gBAAgB,EAAE;QAC1D,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;QACzC,cAAc,EAAE,sBAAsB,OAAO,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,aAAa,CAAC,MAAc,EAAE,IAAY;IACxD,OAAO,IAAA,uCAAgB,EACrB,MAAM,EACN,SAAS,CAAC,OAAO,EACjB,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAC9D,CAAC;AACJ,CAAC"}

package/dist/utils/notification-emitter.d.ts

@@ -3,7 +3,7 @@ export declare const NOTIFICATION_LINKS: {
     readonly settings: "/settings";
     readonly security: "/settings/user/security";
     readonly members: "/settings/workspace/members";
-    readonly invites: "/settings/workspace/members/invites";
+    readonly invites: "/settings/workspace/invites";
     readonly roles: "/settings/workspace/roles";
 };
 export interface NotificationTemplate {

package/dist/utils/notification-emitter.js

@@ -10,7 +10,7 @@ exports.NOTIFICATION_LINKS = {
     settings: "/settings",
     security: "/settings/user/security",
     members: "/settings/workspace/members",
-    invites: "/settings/workspace/members/invites",
+    invites: "/settings/workspace/invites",
     roles: "/settings/workspace/roles",
 };
 function messageKey(messageId, field) {

package/dist/utils/notification-emitter.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification-emitter.js","sourceRoot":"","sources":["../../src/utils/notification-emitter.ts"],"names":[],"mappings":";;;AA+CA,4CA8BC;AAGD,wDAQC;AAxFD,gEAA6D;AAC7D,2EAAuE;AAMvE,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAGzC,QAAA,kBAAkB,GAAG;IAChC,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,yBAAyB;IACnC,OAAO,EAAE,6BAA6B;IACtC,OAAO,EAAE,qCAAqC;IAC9C,KAAK,EAAE,2BAA2B;CAC1B,CAAC;AAuBX,SAAS,UAAU,CAAC,SAAiB,EAAE,KAAa;IAClD,OAAO,GAAG,eAAe,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;AACpD,CAAC;AAMM,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,QAA8B,EAC9B,WAAiC,EAAE;IAEnC,MAAM,EACJ,MAAM,GAAG,EAAE,EACX,QAAQ,GAAG,OAAO,EAClB,cAAc,GAAG,aAAa,GAC/B,GAAG,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,MAAM,WAAW,GACf,QAAQ,CAAC,cAAc,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC;QAClD,MAAM,IAAA,4BAAY,GAAE;aACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;aACnB,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;aAC/C,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;aAC3D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;aACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;aACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;aACnB,MAAM,CAAC,MAAM,CAAC;aACd,KAAK,EAAE;aACP,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,KAAK,CACX,sCAAsC,QAAQ,CAAC,SAAS,SAAS,MAAM,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,sBAAsB,CAC1C,OAA0B,EAC1B,QAA8B,EAC9B,WAAiC,EAAE;IAEnC,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CACtE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"notification-emitter.js","sourceRoot":"","sources":["../../src/utils/notification-emitter.ts"],"names":[],"mappings":";;;AA+CA,4CA8BC;AAGD,wDAQC;AAxFD,gEAA6D;AAC7D,2EAAuE;AAMvE,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAGzC,QAAA,kBAAkB,GAAG;IAChC,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,yBAAyB;IACnC,OAAO,EAAE,6BAA6B;IACtC,OAAO,EAAE,6BAA6B;IACtC,KAAK,EAAE,2BAA2B;CAC1B,CAAC;AAuBX,SAAS,UAAU,CAAC,SAAiB,EAAE,KAAa;IAClD,OAAO,GAAG,eAAe,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;AACpD,CAAC;AAMM,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,QAA8B,EAC9B,WAAiC,EAAE;IAEnC,MAAM,EACJ,MAAM,GAAG,EAAE,EACX,QAAQ,GAAG,OAAO,EAClB,cAAc,GAAG,aAAa,GAC/B,GAAG,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,MAAM,WAAW,GACf,QAAQ,CAAC,cAAc,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC;QAClD,MAAM,IAAA,4BAAY,GAAE;aACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;aACnB,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;aAC/C,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;aAC3D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;aACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;aACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;aACnB,MAAM,CAAC,MAAM,CAAC;aACd,KAAK,EAAE;aACP,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,KAAK,CACX,sCAAsC,QAAQ,CAAC,SAAS,SAAS,MAAM,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,sBAAsB,CAC1C,OAA0B,EAC1B,QAA8B,EAC9B,WAAiC,EAAE;IAEnC,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CACtE,CAAC;AACJ,CAAC"}

package/dist/utils/notification-tones.d.ts

@@ -1,4 +1,5 @@
 import type { NotificationTone } from "@antelopejs/interface-dms/notifications/types";
-export declare const LOW_BACKUP_CODES = 2;
+export declare const LOW_BACKUP_CODES = 3;
 export declare function backupCodeUsedTone(left: number): NotificationTone;
 export declare function rolesChangedTone(roleCount: number): NotificationTone;
+export declare function resolveNotificationTone(tone: NotificationTone | null | undefined, isRead: boolean): NotificationTone;

package/dist/utils/notification-tones.js

@@ -3,11 +3,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.LOW_BACKUP_CODES = void 0;
 exports.backupCodeUsedTone = backupCodeUsedTone;
 exports.rolesChangedTone = rolesChangedTone;
-exports.LOW_BACKUP_CODES = 2;
+exports.resolveNotificationTone = resolveNotificationTone;
+exports.LOW_BACKUP_CODES = 3;
 function backupCodeUsedTone(left) {
     return left <= exports.LOW_BACKUP_CODES ? "error" : "warning";
 }
 function rolesChangedTone(roleCount) {
     return roleCount === 0 ? "warning" : "neutral";
 }
+function resolveNotificationTone(tone, isRead) {
+    return tone ?? (isRead ? "neutral" : "primary");
+}
 //# sourceMappingURL=notification-tones.js.map

package/dist/utils/notification-tones.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification-tones.js","sourceRoot":"","sources":["../../src/utils/notification-tones.ts"],"names":[],"mappings":";;;AAsBA,gDAEC;AAQD,4CAEC;AApBY,QAAA,gBAAgB,GAAG,CAAC,CAAC;AAQlC,SAAgB,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,IAAI,wBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAQD,SAAgB,gBAAgB,CAAC,SAAiB;IAChD,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC"}
+{"version":3,"file":"notification-tones.js","sourceRoot":"","sources":["../../src/utils/notification-tones.ts"],"names":[],"mappings":";;;AAyBA,gDAEC;AAQD,4CAEC;AAWD,0DAKC;AApCY,QAAA,gBAAgB,GAAG,CAAC,CAAC;AAQlC,SAAgB,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,IAAI,wBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAQD,SAAgB,gBAAgB,CAAC,SAAiB;IAChD,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAWD,SAAgB,uBAAuB,CACrC,IAAyC,EACzC,MAAe;IAEf,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAClD,CAAC"}

package/dist/utils/one-time-code.d.ts

@@ -0,0 +1,3 @@
+export declare function generateCode(): string;
+export declare function hashCode(userId: string, code: string): string;
+export declare function hashesMatch(left: string, right: string): boolean;

package/dist/utils/one-time-code.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateCode = generateCode;
+exports.hashCode = hashCode;
+exports.hashesMatch = hashesMatch;
+const node_crypto_1 = require("node:crypto");
+const CODE_DIGITS = 6;
+const CODE_RANGE = 10 ** CODE_DIGITS;
+function generateCode() {
+    return (0, node_crypto_1.randomInt)(0, CODE_RANGE).toString().padStart(CODE_DIGITS, "0");
+}
+function hashCode(userId, code) {
+    return (0, node_crypto_1.createHash)("sha256")
+        .update(JSON.stringify([userId, code]))
+        .digest("hex");
+}
+function hashesMatch(left, right) {
+    const [a, b] = [Buffer.from(left), Buffer.from(right)];
+    return a.length === b.length && (0, node_crypto_1.timingSafeEqual)(a, b);
+}
+//# sourceMappingURL=one-time-code.js.map

package/dist/utils/one-time-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"one-time-code.js","sourceRoot":"","sources":["../../src/utils/one-time-code.ts"],"names":[],"mappings":";;AAQA,oCAEC;AAMD,4BAIC;AAGD,kCAGC;AAxBD,6CAAqE;AAErE,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,UAAU,GAAG,EAAE,IAAI,WAAW,CAAC;AAGrC,SAAgB,YAAY;IAC1B,OAAO,IAAA,uBAAS,EAAC,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACxE,CAAC;AAMD,SAAgB,QAAQ,CAAC,MAAc,EAAE,IAAY;IACnD,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;SACtC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAGD,SAAgB,WAAW,CAAC,IAAY,EAAE,KAAa;IACrD,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,IAAA,6BAAe,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/utils/sign-in-monitor.d.ts

@@ -1,5 +1,6 @@
 import { type User } from "@antelopejs/interface-dms/auth/db";
 import { type ClientOrigin } from "./sign-in-country";
+export declare const ATTEMPT_RETENTION_MS: number;
 export declare function recordSignIn(user: User, userAgent: string, origin: ClientOrigin): Promise<void>;
 export declare function rememberSignInDevice(userId: string, userAgent: string, origin: ClientOrigin): Promise<void>;
 export declare function recordFailedPassword(user: User): Promise<void>;

package/dist/utils/sign-in-monitor.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.ATTEMPT_RETENTION_MS = void 0;
 exports.recordSignIn = recordSignIn;
 exports.rememberSignInDevice = rememberSignInDevice;
 exports.recordFailedPassword = recordFailedPassword;
@@ -16,7 +17,7 @@ const sign_in_devices_1 = require("./sign-in-devices");
 const user_agent_1 = require("./user-agent");
 const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
 const MS_PER_MINUTE = 60 * 1000;
-const ATTEMPT_RETENTION_MS = 24 * 60 * MS_PER_MINUTE;
+exports.ATTEMPT_RETENTION_MS = 24 * 60 * MS_PER_MINUTE;
 function logFailure(what, userId, error) {
     logging_1.Logging.Error(`[DMS] Could not ${what} for "${userId}": ${String(error)}`);
 }
@@ -72,7 +73,7 @@ async function recordFailedPassword(user) {
         const now = new Date();
         const attempts = (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel);
         await attempts.recordFailure(user._id, now);
-        await attempts.pruneBefore(user._id, new Date(now.getTime() - ATTEMPT_RETENTION_MS));
+        await attempts.pruneBefore(user._id, new Date(now.getTime() - exports.ATTEMPT_RETENTION_MS));
         await alertOnBurst(user, now);
     }
     catch (error) {

package/dist/utils/sign-in-monitor.js.map

@@ -1 +1 @@
-{"version":3,"file":"sign-in-monitor.js","sourceRoot":"","sources":["../../src/utils/sign-in-monitor.ts"],"names":[],"mappings":";;AA6CA,oCA6BC;AAGD,oDAkBC;AAyBD,oDAaC;AAGD,oDAMC;AA9ID,gEAA6D;AAC7D,6FAAqE;AACrE,0DAA4E;AAC5E,4EAAwE;AACxE,gFAA4E;AAC5E,mEAA8E;AAC9E,uDAI2B;AAC3B,uDAAqE;AACrE,uDAAyE;AACzE,6CAA8C;AAC9C,qFAAgF;AAEhF,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;AAErD,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc,EAAE,KAAc;IAC9D,iBAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,SAAS,MAAM,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,MAAc;IACnD,MAAM,QAAQ,GAAG,MAAM,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC,GAAG,CACjB,CAAC,OAAO,EAAE,EAAE,CACV,IAAA,sCAAoB,EAClB,IAAA,2BAAc,EAAC,OAAO,CAAC,SAAS,CAAC,EACjC,IAAA,+BAAa,EAAC,OAAO,CAAC,EAAE,CAAC,CAC1B,CAAC,WAAW,CAChB,CAAC;AACJ,CAAC;AAYM,KAAK,UAAU,YAAY,CAChC,IAAU,EACV,SAAiB,EACjB,MAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,sCAAoB,EACjC,IAAA,2BAAc,EAAC,SAAS,CAAC,EACzB,MAAM,CAAC,OAAO,CACf,CAAC;QACF,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjE,IAAA,wCAAQ,EAAC,8CAAqB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YAC1D,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,gCAAc,EAAC,MAAM,CAAC,WAAW,EAAE;YAC9C,iBAAiB;YACjB,mBAAmB;YACnB,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,IAAA,wCAAQ,EAAC,8CAAqB,CAAC,CAAC,QAAQ,CAC5C,IAAI,CAAC,GAAG,EACR,MAAM,CAAC,WAAW,EAClB,IAAI,IAAI,EAAE,CACX,CAAC;QACF,IAAI,IAAI,KAAK,KAAK;YAChB,IAAA,+BAAa,EAAC,IAAA,sCAAc,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,2BAA2B,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,SAAiB,EACjB,MAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,sCAAoB,EACjC,IAAA,2BAAc,EAAC,SAAS,CAAC,EACzB,MAAM,CAAC,OAAO,CACf,CAAC;QACF,MAAM,IAAA,wCAAQ,EAAC,8CAAqB,CAAC,CAAC,QAAQ,CAC5C,MAAM,EACN,MAAM,CAAC,WAAW,EAClB,IAAI,IAAI,EAAE,CACX,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,6BAA6B,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAU,EAAE,GAAS;IAC/C,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,CACtC,IAAI,CAAC,GAAG,EACR,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,0CAAwB,CAAC,EAClD,0CAAwB,CACzB,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAA,uCAAqB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO;IAClE,MAAM,IAAA,2CAAmB,EAAC,IAAI,CAAC,GAAG,EAAE;QAClC,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,0CAAwB,GAAG,aAAa;QACvD,YAAY,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;KACvD,CAAC,CAAC;AACL,CAAC;AAQM,KAAK,UAAU,oBAAoB,CAAC,IAAU;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;QAC/C,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,QAAQ,CAAC,WAAW,CACxB,IAAI,CAAC,GAAG,EACR,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,oBAAoB,CAAC,CAC/C,CAAC;QACF,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,2BAA2B,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,oBAAoB,CAAC,MAAc;IACvD,IAAI,CAAC;QACH,MAAM,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,2BAA2B,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}
+{"version":3,"file":"sign-in-monitor.js","sourceRoot":"","sources":["../../src/utils/sign-in-monitor.ts"],"names":[],"mappings":";;;AA6CA,oCA6BC;AAGD,oDAkBC;AAyBD,oDAaC;AAGD,oDAMC;AA9ID,gEAA6D;AAC7D,6FAAqE;AACrE,0DAA4E;AAC5E,4EAAwE;AACxE,gFAA4E;AAC5E,mEAA8E;AAC9E,uDAI2B;AAC3B,uDAAqE;AACrE,uDAAyE;AACzE,6CAA8C;AAC9C,qFAAgF;AAEhF,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnB,QAAA,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC;AAE5D,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc,EAAE,KAAc;IAC9D,iBAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,SAAS,MAAM,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,MAAc;IACnD,MAAM,QAAQ,GAAG,MAAM,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC,GAAG,CACjB,CAAC,OAAO,EAAE,EAAE,CACV,IAAA,sCAAoB,EAClB,IAAA,2BAAc,EAAC,OAAO,CAAC,SAAS,CAAC,EACjC,IAAA,+BAAa,EAAC,OAAO,CAAC,EAAE,CAAC,CAC1B,CAAC,WAAW,CAChB,CAAC;AACJ,CAAC;AAYM,KAAK,UAAU,YAAY,CAChC,IAAU,EACV,SAAiB,EACjB,MAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,sCAAoB,EACjC,IAAA,2BAAc,EAAC,SAAS,CAAC,EACzB,MAAM,CAAC,OAAO,CACf,CAAC;QACF,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjE,IAAA,wCAAQ,EAAC,8CAAqB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YAC1D,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;SAClC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,gCAAc,EAAC,MAAM,CAAC,WAAW,EAAE;YAC9C,iBAAiB;YACjB,mBAAmB;YACnB,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,IAAA,wCAAQ,EAAC,8CAAqB,CAAC,CAAC,QAAQ,CAC5C,IAAI,CAAC,GAAG,EACR,MAAM,CAAC,WAAW,EAClB,IAAI,IAAI,EAAE,CACX,CAAC;QACF,IAAI,IAAI,KAAK,KAAK;YAChB,IAAA,+BAAa,EAAC,IAAA,sCAAc,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,2BAA2B,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,SAAiB,EACjB,MAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,sCAAoB,EACjC,IAAA,2BAAc,EAAC,SAAS,CAAC,EACzB,MAAM,CAAC,OAAO,CACf,CAAC;QACF,MAAM,IAAA,wCAAQ,EAAC,8CAAqB,CAAC,CAAC,QAAQ,CAC5C,MAAM,EACN,MAAM,CAAC,WAAW,EAClB,IAAI,IAAI,EAAE,CACX,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,6BAA6B,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAU,EAAE,GAAS;IAC/C,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,CACtC,IAAI,CAAC,GAAG,EACR,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,0CAAwB,CAAC,EAClD,0CAAwB,CACzB,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAA,uCAAqB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAAE,OAAO;IAClE,MAAM,IAAA,2CAAmB,EAAC,IAAI,CAAC,GAAG,EAAE;QAClC,KAAK,EAAE,QAAQ;QACf,aAAa,EAAE,0CAAwB,GAAG,aAAa;QACvD,YAAY,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;KACvD,CAAC,CAAC;AACL,CAAC;AAQM,KAAK,UAAU,oBAAoB,CAAC,IAAU;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;QAC/C,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,QAAQ,CAAC,WAAW,CACxB,IAAI,CAAC,GAAG,EACR,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,4BAAoB,CAAC,CAC/C,CAAC;QACF,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,2BAA2B,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,oBAAoB,CAAC,MAAc;IACvD,IAAI,CAAC;QACH,MAAM,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,2BAA2B,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/utils/two-factor-codes.d.ts

@@ -0,0 +1,10 @@
+import type { User, UserModel } from "@antelopejs/interface-dms/auth/db";
+export type TwoFactorMethod = "totp" | "email";
+export declare function assertEmailCodeNotRateLimited(user: User, now?: number): void;
+export declare function sendNewEmailCode(userModel: UserModel, user: User, now?: number): Promise<void>;
+export declare function isEmailCodeExpired(user: User, now?: number): boolean;
+export declare function emailCodeMatches(user: User, code: string): boolean;
+export declare function consumeEmailCode(user: User): void;
+export declare function totpStepAt(now: number): number;
+export declare function acceptTotpCode(userModel: UserModel, user: User, secret: string, code: string, now?: number): Promise<boolean>;
+export declare function verifyTwoFactorCode(userModel: UserModel, user: User, method: TwoFactorMethod, code: string): Promise<boolean>;

package/dist/utils/two-factor-codes.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertEmailCodeNotRateLimited = assertEmailCodeNotRateLimited;
+exports.sendNewEmailCode = sendNewEmailCode;
+exports.isEmailCodeExpired = isEmailCodeExpired;
+exports.emailCodeMatches = emailCodeMatches;
+exports.consumeEmailCode = consumeEmailCode;
+exports.totpStepAt = totpStepAt;
+exports.acceptTotpCode = acceptTotpCode;
+exports.verifyTwoFactorCode = verifyTwoFactorCode;
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const auth_1 = require("@antelopejs/interface-dms/auth");
+const _2fa_1 = require("2fa");
+const constants_1 = require("../routes/auth/constants");
+const one_time_code_1 = require("./one-time-code");
+const HTTP_TOO_MANY_REQUESTS = 429;
+const MS_PER_SECOND = 1000;
+const TOTP_STEP_SECONDS = 30;
+const NO_ACCEPTED_STEP = -1;
+const msSince = (date, now) => date ? now - new Date(date).getTime() : Number.POSITIVE_INFINITY;
+function assertEmailCodeNotRateLimited(user, now = Date.now()) {
+    const isRateLimited = msSince(user.twoFactorEmailCodeRequestedAt, now) < constants_1.TWO_FACTOR_RATE_LIMIT_MS;
+    (0, interface_api_util_1.assert)(!isRateLimited, HTTP_TOO_MANY_REQUESTS, "error.rate_limited");
+}
+async function sendNewEmailCode(userModel, user, now = Date.now()) {
+    assertEmailCodeNotRateLimited(user, now);
+    const code = (0, one_time_code_1.generateCode)();
+    await (0, auth_1.send2FAEmail)(user, code);
+    user.twoFactorEmailCode = (0, one_time_code_1.hashCode)(user._id, code);
+    user.twoFactorEmailCodeRequestedAt = new Date(now);
+    await userModel.update(user);
+}
+function isEmailCodeExpired(user, now = Date.now()) {
+    return (msSince(user.twoFactorEmailCodeRequestedAt, now) >
+        constants_1.TWO_FACTOR_EMAIL_CODE_LIFETIME_MS);
+}
+function emailCodeMatches(user, code) {
+    return (!!user.twoFactorEmailCode &&
+        (0, one_time_code_1.hashesMatch)(user.twoFactorEmailCode, (0, one_time_code_1.hashCode)(user._id, code)));
+}
+function consumeEmailCode(user) {
+    user.twoFactorEmailCode = null;
+    user.twoFactorEmailCodeRequestedAt = null;
+}
+function totpStepAt(now) {
+    return Math.floor(now / MS_PER_SECOND / TOTP_STEP_SECONDS);
+}
+async function acceptTotpCode(userModel, user, secret, code, now = Date.now()) {
+    const step = totpStepAt(now);
+    if ((0, _2fa_1.generateCode)(secret, step) !== code)
+        return false;
+    const claimed = await userModel.table
+        .getAll(user._id)
+        .filter((row) => row.key("twoFactorTotpLastStep").default(NO_ACCEPTED_STEP).lt(step))
+        .update({ twoFactorTotpLastStep: step })
+        .run();
+    if (claimed === 0)
+        return false;
+    user.twoFactorTotpLastStep = step;
+    return true;
+}
+const CODE_VERIFIERS = {
+    totp: async (userModel, user, code) => !!user.twoFactorSecret &&
+        (await acceptTotpCode(userModel, user, user.twoFactorSecret, code)),
+    email: async (_userModel, user, code) => {
+        if (isEmailCodeExpired(user) || !emailCodeMatches(user, code)) {
+            return false;
+        }
+        consumeEmailCode(user);
+        return true;
+    },
+};
+function verifyTwoFactorCode(userModel, user, method, code) {
+    return CODE_VERIFIERS[method](userModel, user, code);
+}
+//# sourceMappingURL=two-factor-codes.js.map

package/dist/utils/two-factor-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-codes.js","sourceRoot":"","sources":["../../src/utils/two-factor-codes.ts"],"names":[],"mappings":";;AA2BA,sEAOC;AAOD,4CAWC;AAED,gDAKC;AAGD,4CAKC;AAGD,4CAGC;AAGD,gCAEC;AAYD,wCAoBC;AAuBD,kDAOC;AAxID,uEAAwD;AACxD,yDAA8D;AAE9D,8BAAuD;AACvD,wDAGkC;AAClC,mDAAsE;AAItE,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,MAAM,gBAAgB,GAAG,CAAC,CAAC,CAAC;AAE5B,MAAM,OAAO,GAAG,CAAC,IAA6B,EAAE,GAAW,EAAU,EAAE,CACrE,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;AAGnE,SAAgB,6BAA6B,CAC3C,IAAU,EACV,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,CAAC,GAAG,oCAAwB,CAAC;IAC9E,IAAA,2BAAM,EAAC,CAAC,aAAa,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;AACvE,CAAC;AAOM,KAAK,UAAU,gBAAgB,CACpC,SAAoB,EACpB,IAAU,EACV,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,6BAA6B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAA,4BAAY,GAAE,CAAC;IAC5B,MAAM,IAAA,mBAAY,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,kBAAkB,GAAG,IAAA,wBAAQ,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,6BAA6B,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAgB,kBAAkB,CAAC,IAAU,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC7D,OAAO,CACL,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,CAAC;QAChD,6CAAiC,CAClC,CAAC;AACJ,CAAC;AAGD,SAAgB,gBAAgB,CAAC,IAAU,EAAE,IAAY;IACvD,OAAO,CACL,CAAC,CAAC,IAAI,CAAC,kBAAkB;QACzB,IAAA,2BAAW,EAAC,IAAI,CAAC,kBAAkB,EAAE,IAAA,wBAAQ,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAC/D,CAAC;AACJ,CAAC;AAGD,SAAgB,gBAAgB,CAAC,IAAU;IACzC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,6BAA6B,GAAG,IAAI,CAAC;AAC5C,CAAC;AAGD,SAAgB,UAAU,CAAC,GAAW;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,aAAa,GAAG,iBAAiB,CAAC,CAAC;AAC7D,CAAC;AAYM,KAAK,UAAU,cAAc,CAClC,SAAoB,EACpB,IAAU,EACV,MAAc,EACd,IAAY,EACZ,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAGhB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,IAAA,mBAAgB,EAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK;SAClC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAChB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACd,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CACpE;SACA,MAAM,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;SACvC,GAAG,EAAE,CAAC;IACT,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,cAAc,GAGhB;IACF,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CACpC,CAAC,CAAC,IAAI,CAAC,eAAe;QACtB,CAAC,MAAM,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACrE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACtC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC;AAOF,SAAgB,mBAAmB,CACjC,SAAoB,EACpB,IAAU,EACV,MAAuB,EACvB,IAAY;IAEZ,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC"}

package/dist/validation/auth.schema.d.ts

@@ -86,6 +86,16 @@ export declare const authSchema: {
     }, {
         email: string;
     }>;
+    validateInviteToken: z.ZodObject<{
+        token: z.ZodString;
+        email: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        token: string;
+        email: string;
+    }, {
+        token: string;
+        email: string;
+    }>;
     validateForgotPasswordToken: z.ZodObject<{
         token: z.ZodString;
         email: z.ZodString;
@@ -136,6 +146,13 @@ export declare const authSchema: {
     }, {
         code: string;
     }>;
+    confirmEmailMethod: z.ZodObject<{
+        code: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        code: string;
+    }, {
+        code: string;
+    }>;
     disableTwoFactor: z.ZodObject<{
         method: z.ZodEnum<["totp", "email"]>;
         code: z.ZodString;

package/dist/validation/auth.schema.js

@@ -39,6 +39,10 @@ const password_1 = require("./password");
 const MAX_OAUTH_EXCHANGE_VALUE_LENGTH = 2048;
 const MAX_LANGUAGE_TAG_LENGTH = 35;
 const MAX_INVITE_TOKEN_LENGTH = 256;
+const INVALID_2FA_TOKEN = "error.invalid_2fa_token";
+const twoFactorToken = z
+    .string({ message: INVALID_2FA_TOKEN })
+    .min(1, INVALID_2FA_TOKEN);
 exports.authSchema = {
     signup: z.object({
         name: z.string(),
@@ -74,6 +78,10 @@ exports.authSchema = {
     forgot: z.object({
         email: z.string().email(),
     }),
+    validateInviteToken: z.object({
+        token: z.string().max(MAX_INVITE_TOKEN_LENGTH),
+        email: z.string().email(),
+    }),
     validateForgotPasswordToken: z.object({
         token: z.string(),
         email: z.string().email(),
@@ -84,14 +92,17 @@ exports.authSchema = {
         password: password_1.passwordSchema,
     }),
     verify2FA: z.object({
-        token: z.string(),
+        token: twoFactorToken,
+        code: z.string({ message: "error.invalid_2fa_code" }),
+        method: z.enum(["totp", "email", "backup"], {
+            message: "error.invalid_2fa_method",
+        }),
+    }, { message: INVALID_2FA_TOKEN }),
+    request2FAEmail: z.object({ token: twoFactorToken }, { message: INVALID_2FA_TOKEN }),
+    confirmTotp: z.object({
         code: z.string(),
-        method: z.enum(["totp", "email", "backup"]),
     }),
-    request2FAEmail: z.object({
-        token: z.string(),
-    }),
-    confirmTotp: z.object({
+    confirmEmailMethod: z.object({
         code: z.string(),
     }),
     disableTwoFactor: z.object({

package/dist/validation/auth.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../../src/validation/auth.schema.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEzB,yCAA4C;AAE5C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEvB,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;KACzB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;KAC5C,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC"}
+{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../../src/validation/auth.schema.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEzB,yCAA4C;AAE5C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAIpD,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;KACtC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAEhB,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;KACzB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CACjB;QACE,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;QACrD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;YAC1C,OAAO,EAAE,0BAA0B;SACpC,CAAC;KACH,EACD,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAC/B;IACD,eAAe,EAAE,CAAC,CAAC,MAAM,CACvB,EAAE,KAAK,EAAE,cAAc,EAAE,EACzB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAC/B;IACD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC"}