@antelopejs/dms 0.6.2 → 0.7.1

package/dist/routes/auth/invite.js.map

@@ -1 +1 @@
-{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../../src/routes/auth/invite.ts"],"names":[],"mappings":";;AAqBA,gDAsBC;AAGD,sCAWC;AAzDD,uEAAwD;AACxD,uEAAgE;AAChE,6FAAqE;AACrE,qDAAgF;AAEhF,mFAIqD;AAErD,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AACpD,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAQ/C,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,KAAa;IAEb,MAAM,gBAAgB,GAAG,MAAM,IAAA,wCAAQ,EACrC,oBAAe,EACf,mCAAc,CACf,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAA,2BAAM,EACJ,gBAAgB;QACd,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,EACrE,gBAAgB,EAChB,qBAAqB,CACtB,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC;IAC9C,IAAA,2BAAM,EACJ,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EACvC,gBAAgB,EAChB,sBAAsB,CACvB,CAAC;IACF,MAAM,IAAA,qCAAiB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAGM,KAAK,UAAU,aAAa,CACjC,UAAqB,EACrB,MAAc,EACd,QAAwB;IAExB,MAAM,UAAU,GAAG,MAAM,IAAA,gCAAY,EAAC;QACpC,GAAG,QAAQ;QACX,MAAM,EAAE,UAAU;QAClB,MAAM;KACP,CAAC,CAAC;IACH,MAAM,IAAA,4CAAwB,EAAC,UAAU,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../../src/routes/auth/invite.ts"],"names":[],"mappings":";;AAiFA,gDAYC;AAGD,sCAWC;AA3GD,6DAAuD;AACvD,uEAAwD;AACxD,uEAAgE;AAChE,6FAAqE;AACrE,qDAIsC;AACtC,2GAAuG;AAEvG,mFAIqD;AAErD,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AACpD,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAGtD,MAAM,uBAAuB,GAA2C;IACtE,QAAQ,EAAE,mBAAmB;IAC7B,SAAS,EAAE,sBAAsB;IACjC,QAAQ,EAAE,uBAAuB;IACjC,MAAM,EAAE,uBAAuB;IAC/B,OAAO,EAAE,sBAAsB;CAChC,CAAC;AAOF,SAAS,WAAW,CAAC,MAAkB,EAAE,KAAa;IACpD,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;AAC5D,CAAC;AAOD,KAAK,UAAU,oBAAoB,CACjC,KAAa,EACb,KAAa;IAEb,MAAM,UAAU,GAAG,MAAM,IAAA,wCAAQ,EAC/B,gDAAsB,EACtB,mCAAc,CACf,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,OAAO,uBAAuB,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,KAAa,EACb,KAAa;IAEb,MAAM,gBAAgB,GAAG,MAAM,IAAA,wCAAQ,EACrC,oBAAe,EACf,mCAAc,CACf,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,0BAAU,CAClB,gBAAgB,EAChB,MAAM,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CACzC,CAAC;IACJ,CAAC;IACD,IAAA,2BAAM,EACJ,WAAW,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,EAC3C,gBAAgB,EAChB,qBAAqB,CACtB,CAAC;IACF,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAGM,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,KAAa;IAEb,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChE,IAAA,2BAAM,EACJ,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EACvC,gBAAgB,EAChB,sBAAsB,CACvB,CAAC;IACF,MAAM,IAAA,qCAAiB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAGM,KAAK,UAAU,aAAa,CACjC,UAAqB,EACrB,MAAc,EACd,QAAwB;IAExB,MAAM,UAAU,GAAG,MAAM,IAAA,gCAAY,EAAC;QACpC,GAAG,QAAQ;QACX,MAAM,EAAE,UAAU;QAClB,MAAM;KACP,CAAC,CAAC;IACH,MAAM,IAAA,4CAAwB,EAAC,UAAU,CAAC,CAAC;AAC7C,CAAC"}

package/dist/routes/auth/login-throttle.d.ts

@@ -1,3 +1,5 @@
+export declare const LOGIN_WINDOW_MS: number;
+export declare const FAILURES_PER_ACCOUNT = 10;
 export declare function assertLoginAllowed(email: string, ip: string, now?: number): void;
 export declare function recordLoginFailure(email: string, ip: string, now?: number): void;
 export declare function clearLoginFailures(email: string): void;

package/dist/routes/auth/login-throttle.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.FAILURES_PER_ACCOUNT = exports.LOGIN_WINDOW_MS = void 0;
 exports.assertLoginAllowed = assertLoginAllowed;
 exports.recordLoginFailure = recordLoginFailure;
 exports.clearLoginFailures = clearLoginFailures;
@@ -7,12 +8,12 @@ const interface_api_util_1 = require("@antelopejs/interface-api-util");
 const attempt_limiter_1 = require("../../utils/attempt-limiter");
 const HTTP_TOO_MANY_REQUESTS = 429;
 const TOO_MANY_ATTEMPTS_MESSAGE = "error.too_many_sign_in_attempts";
-const LOGIN_WINDOW_MS = 15 * 60 * 1000;
-const FAILURES_PER_ACCOUNT = 10;
+exports.LOGIN_WINDOW_MS = 15 * 60 * 1000;
+exports.FAILURES_PER_ACCOUNT = 10;
 const FAILURES_PER_CLIENT = 50;
 const MAX_TRACKED_KEYS = 10_000;
-const accountFailures = new attempt_limiter_1.AttemptLimiter(FAILURES_PER_ACCOUNT, LOGIN_WINDOW_MS, MAX_TRACKED_KEYS);
-const clientFailures = new attempt_limiter_1.AttemptLimiter(FAILURES_PER_CLIENT, LOGIN_WINDOW_MS, MAX_TRACKED_KEYS);
+const accountFailures = new attempt_limiter_1.AttemptLimiter(exports.FAILURES_PER_ACCOUNT, exports.LOGIN_WINDOW_MS, MAX_TRACKED_KEYS);
+const clientFailures = new attempt_limiter_1.AttemptLimiter(FAILURES_PER_CLIENT, exports.LOGIN_WINDOW_MS, MAX_TRACKED_KEYS);
 function assertLoginAllowed(email, ip, now = Date.now()) {
     const isBlocked = accountFailures.isBlocked(email, now) ||
         (ip !== "" && clientFailures.isBlocked(ip, now));

package/dist/routes/auth/login-throttle.js.map

@@ -1 +1 @@
-{"version":3,"file":"login-throttle.js","sourceRoot":"","sources":["../../../src/routes/auth/login-throttle.ts"],"names":[],"mappings":";;AAgCA,gDASC;AAGD,gDAOC;AAGD,gDAEC;AAxDD,uEAAwD;AACxD,iEAA6D;AAE7D,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,yBAAyB,GAAG,iCAAiC,CAAC;AACpE,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAIhC,MAAM,eAAe,GAAG,IAAI,gCAAc,CACxC,oBAAoB,EACpB,eAAe,EACf,gBAAgB,CACjB,CAAC;AACF,MAAM,cAAc,GAAG,IAAI,gCAAc,CACvC,mBAAmB,EACnB,eAAe,EACf,gBAAgB,CACjB,CAAC;AASF,SAAgB,kBAAkB,CAChC,KAAa,EACb,EAAU,EACV,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,SAAS,GACb,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;QACrC,CAAC,EAAE,KAAK,EAAE,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,IAAA,2BAAM,EAAC,CAAC,SAAS,EAAE,sBAAsB,EAAE,yBAAyB,CAAC,CAAC;AACxE,CAAC;AAGD,SAAgB,kBAAkB,CAChC,KAAa,EACb,EAAU,EACV,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,EAAE,KAAK,EAAE;QAAE,cAAc,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAGD,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"login-throttle.js","sourceRoot":"","sources":["../../../src/routes/auth/login-throttle.ts"],"names":[],"mappings":";;;AAiCA,gDASC;AAGD,gDAOC;AAGD,gDAEC;AAzDD,uEAAwD;AACxD,iEAA6D;AAE7D,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,yBAAyB,GAAG,iCAAiC,CAAC;AAEvD,QAAA,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjC,QAAA,oBAAoB,GAAG,EAAE,CAAC;AAEvC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAIhC,MAAM,eAAe,GAAG,IAAI,gCAAc,CACxC,4BAAoB,EACpB,uBAAe,EACf,gBAAgB,CACjB,CAAC;AACF,MAAM,cAAc,GAAG,IAAI,gCAAc,CACvC,mBAAmB,EACnB,uBAAe,EACf,gBAAgB,CACjB,CAAC;AASF,SAAgB,kBAAkB,CAChC,KAAa,EACb,EAAU,EACV,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,SAAS,GACb,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC;QACrC,CAAC,EAAE,KAAK,EAAE,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,IAAA,2BAAM,EAAC,CAAC,SAAS,EAAE,sBAAsB,EAAE,yBAAyB,CAAC,CAAC;AACxE,CAAC;AAGD,SAAgB,kBAAkB,CAChC,KAAa,EACb,EAAU,EACV,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,eAAe,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,EAAE,KAAK,EAAE;QAAE,cAAc,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAGD,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/routes/auth/request-2fa-email.js

@@ -1,30 +1,18 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.request2FAEmail = request2FAEmail;
 const interface_api_util_1 = require("@antelopejs/interface-api-util");
 const auth_1 = require("@antelopejs/interface-dms/auth");
-const randomstring_1 = __importDefault(require("randomstring"));
+const two_factor_codes_1 = require("../../utils/two-factor-codes");
 const auth_schema_1 = require("../../validation/auth.schema");
-const constants_1 = require("./constants");
+const issue_message_1 = require("../../validation/issue-message");
+const two_factor_throttle_1 = require("./two-factor-throttle");
 async function request2FAEmail(userModel, body) {
-    const { token } = (0, interface_api_util_1.assertValidation)(body, (v) => auth_schema_1.authSchema.request2FAEmail.parse(v));
+    const { token } = (0, interface_api_util_1.assertValidation)(body, (v) => auth_schema_1.authSchema.request2FAEmail.parse(v), issue_message_1.firstIssueMessage);
     const { user } = await (0, auth_1.validateTwoFactorToken)(token);
     (0, interface_api_util_1.assert)(user.twoFactorMethods?.includes("email"), 400, "error.2fa_email_not_enabled");
-    const isRateLimited = user.twoFactorEmailCodeRequestedAt &&
-        Date.now() - new Date(user.twoFactorEmailCodeRequestedAt).getTime() <
-            constants_1.TWO_FACTOR_RATE_LIMIT_MS;
-    (0, interface_api_util_1.assert)(!isRateLimited, 429, "error.rate_limited");
-    const code = randomstring_1.default.generate({
-        length: 6,
-        charset: "numeric",
-    });
-    user.twoFactorEmailCode = code;
-    user.twoFactorEmailCodeRequestedAt = new Date();
-    await userModel.update(user);
-    await (0, auth_1.send2FAEmail)(user, code);
+    await (0, two_factor_throttle_1.assertTwoFactorChallengeOpen)(user._id, token);
+    await (0, two_factor_codes_1.sendNewEmailCode)(userModel, user);
     return { success: true };
 }
 //# sourceMappingURL=request-2fa-email.js.map

package/dist/routes/auth/request-2fa-email.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-2fa-email.js","sourceRoot":"","sources":["../../../src/routes/auth/request-2fa-email.ts"],"names":[],"mappings":";;;;;AAYA,0CAkCC;AA9CD,uEAA0E;AAC1E,yDAGwC;AAExC,gEAAwC;AACxC,8DAA0D;AAC1D,2CAAuD;AAIhD,KAAK,UAAU,eAAe,CACnC,SAAoB,EACpB,IAAa;IAEb,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAC7C,wBAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CACpC,CAAC;IAEF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,6BAAsB,EAAC,KAAK,CAAC,CAAC;IAErD,IAAA,2BAAM,EACJ,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,EACxC,GAAG,EACH,6BAA6B,CAC9B,CAAC;IAEF,MAAM,aAAa,GACjB,IAAI,CAAC,6BAA6B;QAClC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,OAAO,EAAE;YACjE,oCAAwB,CAAC;IAC7B,IAAA,2BAAM,EAAC,CAAC,aAAa,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAElD,MAAM,IAAI,GAAG,sBAAY,CAAC,QAAQ,CAAC;QACjC,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IAEH,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,6BAA6B,GAAG,IAAI,IAAI,EAAE,CAAC;IAChD,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE7B,MAAM,IAAA,mBAAY,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"request-2fa-email.js","sourceRoot":"","sources":["../../../src/routes/auth/request-2fa-email.ts"],"names":[],"mappings":";;AAUA,0CAsBC;AAhCD,uEAA0E;AAC1E,yDAAwE;AAExE,mEAAgE;AAChE,8DAA0D;AAC1D,kEAAmE;AACnE,+DAAqE;AAI9D,KAAK,UAAU,eAAe,CACnC,SAAoB,EACpB,IAAa;IAEb,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,qCAAgB,EAChC,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAC1C,iCAAiB,CAClB,CAAC;IAEF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAA,6BAAsB,EAAC,KAAK,CAAC,CAAC;IAErD,IAAA,2BAAM,EACJ,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,EACxC,GAAG,EACH,6BAA6B,CAC9B,CAAC;IAEF,MAAM,IAAA,kDAA4B,EAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,IAAA,mCAAgB,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAExC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/routes/auth/reset-code.d.ts

@@ -0,0 +1,3 @@
+import type { User, UserModel } from "@antelopejs/interface-dms/auth/db";
+export declare const MAX_RESET_CODE_ATTEMPTS = 5;
+export declare function assertResetCode(userModel: UserModel, email: string, code: string): Promise<User>;

package/dist/routes/auth/reset-code.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_RESET_CODE_ATTEMPTS = void 0;
+exports.assertResetCode = assertResetCode;
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const config_1 = require("../../config");
+const signInAttempts_model_1 = require("../../db/models/signInAttempts.model");
+const HTTP_BAD_REQUEST = 400;
+const INVALID_CODE_MESSAGE = "error.invalid_or_expired_token";
+exports.MAX_RESET_CODE_ATTEMPTS = 5;
+function hasLiveResetCode(user, now) {
+    return (!!user?.forgotPasswordToken &&
+        !!user.forgotPasswordRequestedAt &&
+        now - user.forgotPasswordRequestedAt.getTime() <
+            (0, config_1.getAuthConfig)().passwordRecoverTokenLifetime);
+}
+function normalizeResetCode(code) {
+    return code.trim().toUpperCase();
+}
+async function assertResetCode(userModel, email, code) {
+    const user = await userModel.getByEmail(email);
+    (0, interface_api_util_1.assert)(hasLiveResetCode(user, Date.now()), HTTP_BAD_REQUEST, INVALID_CODE_MESSAGE);
+    const attempts = (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel);
+    const tries = await attempts.recordResetCodeAttempt(user._id, user.forgotPasswordRequestedAt, new Date());
+    const isMatch = tries <= exports.MAX_RESET_CODE_ATTEMPTS &&
+        normalizeResetCode(code) === user.forgotPasswordToken;
+    if (!isMatch && tries >= exports.MAX_RESET_CODE_ATTEMPTS) {
+        const account = user;
+        account.forgotPasswordToken = null;
+        await userModel.update(account);
+    }
+    (0, interface_api_util_1.assert)(isMatch, HTTP_BAD_REQUEST, INVALID_CODE_MESSAGE);
+    await attempts.clearResetCodeAttempts(user._id);
+    return user;
+}
+//# sourceMappingURL=reset-code.js.map

package/dist/routes/auth/reset-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-code.js","sourceRoot":"","sources":["../../../src/routes/auth/reset-code.ts"],"names":[],"mappings":";;;AA6CA,0CA8BC;AA3ED,uEAAwD;AACxD,6FAAqE;AAErE,yCAA6C;AAC7C,+EAA2E;AAE3E,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAEjD,QAAA,uBAAuB,GAAG,CAAC,CAAC;AAOzC,SAAS,gBAAgB,CACvB,IAAsB,EACtB,GAAW;IAEX,OAAO,CACL,CAAC,CAAC,IAAI,EAAE,mBAAmB;QAC3B,CAAC,CAAC,IAAI,CAAC,yBAAyB;QAChC,GAAG,GAAG,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE;YAC5C,IAAA,sBAAa,GAAE,CAAC,4BAA4B,CAC/C,CAAC;AACJ,CAAC;AAGD,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACnC,CAAC;AAcM,KAAK,UAAU,eAAe,CACnC,SAAoB,EACpB,KAAa,EACb,IAAY;IAEZ,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAA,2BAAM,EACJ,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAClC,gBAAgB,EAChB,oBAAoB,CACrB,CAAC;IACF,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CACjD,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,yBAAyB,EAC9B,IAAI,IAAI,EAAE,CACX,CAAC;IACF,MAAM,OAAO,GACX,KAAK,IAAI,+BAAuB;QAChC,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC;IACxD,IAAI,CAAC,OAAO,IAAI,KAAK,IAAI,+BAAuB,EAAE,CAAC;QAGjD,MAAM,OAAO,GAAS,IAAI,CAAC;QAC3B,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;QACnC,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,IAAA,2BAAM,EAAC,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;IACxD,MAAM,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/routes/auth/reset-password.d.ts

@@ -1,2 +1,2 @@
-import type { UserModel } from "@antelopejs/interface-dms/auth/db";
-export declare function resetPassword(userModel: UserModel, body: unknown): Promise<void>;
+import type { SessionModel, UserModel } from "@antelopejs/interface-dms/auth/db";
+export declare function resetPassword(userModel: UserModel, sessionModel: SessionModel, body: unknown): Promise<void>;

package/dist/routes/auth/reset-password.js

@@ -2,24 +2,19 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resetPassword = resetPassword;
 const interface_api_util_1 = require("@antelopejs/interface-api-util");
-const config_1 = require("../../config");
+const account_credentials_1 = require("../../pages/settings/users/account-credentials");
 const account_notifications_1 = require("../../utils/account-notifications");
 const auth_schema_1 = require("../../validation/auth.schema");
 const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
-async function resetPassword(userModel, body) {
-    const config = (0, config_1.getAuthConfig)();
+const reset_code_1 = require("./reset-code");
+async function resetPassword(userModel, sessionModel, body) {
     const { email, token, password } = (0, interface_api_util_1.assertValidation)(body, (v) => auth_schema_1.authSchema.reset.parse(v));
-    const user = await userModel.getByEmail(email);
-    const isTokenValid = user?.forgotPasswordToken === token &&
-        user?.forgotPasswordRequestedAt &&
-        Date.now() - user.forgotPasswordRequestedAt.getTime() <
-            config.passwordRecoverTokenLifetime;
-    (0, interface_api_util_1.assert)(isTokenValid && user, 400, "error.invalid_or_expired_token");
+    const user = await (0, reset_code_1.assertResetCode)(userModel, email, token);
     user.forgotPasswordToken = null;
     user.forgotPasswordRequestedAt = null;
     user.password = password;
     user.passwordChangedAt = new Date();
-    await userModel.update(user);
+    await (0, account_credentials_1.revokeAllSessions)(user, sessionModel, userModel);
     (0, fire_and_forget_1.fireAndForget)((0, account_notifications_1.notifyPasswordReset)(user._id, user.email), "password reset notification");
 }
 //# sourceMappingURL=reset-password.js.map

package/dist/routes/auth/reset-password.js.map

@@ -1 +1 @@
-{"version":3,"file":"reset-password.js","sourceRoot":"","sources":["../../../src/routes/auth/reset-password.ts"],"names":[],"mappings":";;AAOA,sCA6BC;AApCD,uEAA0E;AAE1E,yCAA6C;AAC7C,6EAAwE;AACxE,8DAA0D;AAC1D,qFAAgF;AAEzE,KAAK,UAAU,aAAa,CACjC,SAAoB,EACpB,IAAa;IAEb,MAAM,MAAM,GAAG,IAAA,sBAAa,GAAE,CAAC;IAC/B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9D,wBAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAC1B,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,YAAY,GAChB,IAAI,EAAE,mBAAmB,KAAK,KAAK;QACnC,IAAI,EAAE,yBAAyB;QAC/B,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE;YACnD,MAAM,CAAC,4BAA4B,CAAC;IAExC,IAAA,2BAAM,EAAC,YAAY,IAAI,IAAI,EAAE,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAEpE,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;IACtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzB,IAAI,CAAC,iBAAiB,GAAG,IAAI,IAAI,EAAE,CAAC;IAEpC,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE7B,IAAA,+BAAa,EACX,IAAA,2CAAmB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,EACzC,6BAA6B,CAC9B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"reset-password.js","sourceRoot":"","sources":["../../../src/routes/auth/reset-password.ts"],"names":[],"mappings":";;AAeA,sCAoBC;AAnCD,uEAAkE;AAKlE,wFAAmF;AACnF,6EAAwE;AACxE,8DAA0D;AAC1D,qFAAgF;AAChF,6CAA+C;AAMxC,KAAK,UAAU,aAAa,CACjC,SAAoB,EACpB,YAA0B,EAC1B,IAAa;IAEb,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9D,wBAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAC1B,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,IAAA,4BAAe,EAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAE5D,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;IACtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzB,IAAI,CAAC,iBAAiB,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,IAAA,uCAAiB,EAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAEvD,IAAA,+BAAa,EACX,IAAA,2CAAmB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,EACzC,6BAA6B,CAC9B,CAAC;AACJ,CAAC"}

package/dist/routes/auth/signup.js

@@ -1,7 +1,4 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.signupLanguage = signupLanguage;
 exports.signup = signup;
@@ -10,35 +7,21 @@ const interface_database_1 = require("@antelopejs/interface-database");
 const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
 const db_1 = require("@antelopejs/interface-dms/db");
 const auth_1 = require("@antelopejs/interface-dms/auth");
-const randomstring_1 = __importDefault(require("randomstring"));
-const config_1 = require("../../config");
 const auth_key_1 = require("../../utils/auth-key");
-const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
 const sign_in_monitor_1 = require("../../utils/sign-in-monitor");
 const auth_schema_1 = require("../../validation/auth.schema");
 const invite_1 = require("./invite");
 const session_response_1 = require("./session-response");
-const VALIDATION_TOKEN_LENGTH = 6;
 const DEFAULT_LANGUAGE = "en";
-function buildValidationFields(invite) {
-    const config = (0, config_1.getAuthConfig)();
-    const shouldValidate = config.mustValidateEmail && !invite.skipEmailValidation;
-    return {
-        isValidated: invite.skipEmailValidation || false,
-        validationToken: shouldValidate
-            ? randomstring_1.default.generate({
-                length: VALIDATION_TOKEN_LENGTH,
-                capitalization: "uppercase",
-            })
-            : undefined,
-        validationRequestedAt: shouldValidate ? new Date() : undefined,
-    };
-}
+const INVITE_SIGNUP_VALIDATION = {
+    isValidated: true,
+    validationToken: null,
+    validationRequestedAt: null,
+};
 function signupLanguage(lang, invite) {
     return lang || invite.language || DEFAULT_LANGUAGE;
 }
 async function createNewUser(userModel, { name, email, password, lang, invite }) {
-    const validation = buildValidationFields(invite);
     const result = await userModel.insert({
         createdAt: new Date(),
         updatedAt: new Date(),
@@ -46,23 +29,23 @@ async function createNewUser(userModel, { name, email, password, lang, invite })
         email: email.toLowerCase(),
         password,
         authKey: (0, auth_key_1.generateAuthKey)(),
-        ...validation,
+        ...INVITE_SIGNUP_VALIDATION,
         owner: false,
         language: signupLanguage(lang, invite),
     });
     return result?.[0];
 }
 async function overwriteUnvalidatedUser(userModel, existingUser, { name, email, password, lang, invite }) {
-    const validation = buildValidationFields(invite);
     existingUser.createdAt = new Date();
     existingUser.updatedAt = new Date();
     existingUser.name = name;
     existingUser.email = email.toLowerCase();
     existingUser.password = password;
     existingUser.authKey = (0, auth_key_1.generateAuthKey)();
-    existingUser.validationToken = validation.validationToken;
-    existingUser.validationRequestedAt = validation.validationRequestedAt;
-    existingUser.isValidated = validation.isValidated;
+    existingUser.isValidated = INVITE_SIGNUP_VALIDATION.isValidated;
+    existingUser.validationToken = INVITE_SIGNUP_VALIDATION.validationToken;
+    existingUser.validationRequestedAt =
+        INVITE_SIGNUP_VALIDATION.validationRequestedAt;
     existingUser.language = signupLanguage(lang, invite);
     await userModel.update(existingUser);
     return existingUser._id;
@@ -85,7 +68,6 @@ async function resolveOverwritableAccount(userModel, email) {
 }
 async function signup(userModel, sessionModel, body, userAgent, origin) {
     const { name, email, password, token, lang } = (0, interface_api_util_1.assertValidation)(body, (v) => auth_schema_1.authSchema.signup.parse(v));
-    const config = (0, config_1.getAuthConfig)();
     const resolvedInvite = await (0, invite_1.resolveValidInvite)(token, email);
     const { invite: existingInvite, tenantId } = resolvedInvite;
     const existingUser = await resolveOverwritableAccount(userModel, email);
@@ -99,10 +81,6 @@ async function signup(userModel, sessionModel, body, userAgent, origin) {
     await (0, invite_1.consumeInvite)(userModel, user._id, resolvedInvite);
     const refreshedUser = await userModel.get(user._id);
     (0, interface_api_util_1.assert)(refreshedUser, 500, `New user not found : \nID:${user._id}`);
-    const shouldSendValidation = config.mustValidateEmail && !existingInvite.skipEmailValidation;
-    if (shouldSendValidation) {
-        (0, fire_and_forget_1.fireAndForget)((0, auth_1.sendEmailValidationEmail)(refreshedUser), `validation email to "${refreshedUser.email}"`);
-    }
     await (0, auth_1.announceRegistration)(userModel, refreshedUser, tenantId);
     await (0, sign_in_monitor_1.rememberSignInDevice)(refreshedUser._id, userAgent, origin);
     return (0, session_response_1.issueAuthResponse)(sessionModel, tenantId, refreshedUser, userAgent, origin);

package/dist/routes/auth/signup.js.map

@@ -1 +1 @@
-{"version":3,"file":"signup.js","sourceRoot":"","sources":["../../../src/routes/auth/signup.ts"],"names":[],"mappings":";;;;;AAkDA,wCAKC;AA2GD,wBAsDC;AAxND,uEAA0E;AAC1E,uEAAgE;AAChE,6FAAqE;AACrE,qDAGsC;AACtC,yDAGwC;AAKxC,gEAAwC;AACxC,yCAA6C;AAC7C,mDAAuD;AACvD,qFAAgF;AAEhF,iEAAmE;AACnE,8DAA0D;AAC1D,qCAA6D;AAC7D,yDAAuD;AAGvD,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,SAAS,qBAAqB,CAAC,MAAkB;IAC/C,MAAM,MAAM,GAAG,IAAA,sBAAa,GAAE,CAAC;IAC/B,MAAM,cAAc,GAClB,MAAM,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAE1D,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,mBAAmB,IAAI,KAAK;QAChD,eAAe,EAAE,cAAc;YAC7B,CAAC,CAAC,sBAAY,CAAC,QAAQ,CAAC;gBACpB,MAAM,EAAE,uBAAuB;gBAC/B,cAAc,EAAE,WAAW;aAC5B,CAAC;YACJ,CAAC,CAAC,SAAS;QACb,qBAAqB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;KAC/D,CAAC;AACJ,CAAC;AAMD,SAAgB,cAAc,CAC5B,IAAwB,EACxB,MAAkB;IAElB,OAAO,IAAI,IAAI,MAAM,CAAC,QAAQ,IAAI,gBAAgB,CAAC;AACrD,CAAC;AAYD,KAAK,UAAU,aAAa,CAC1B,SAAoB,EACpB,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAiB;IAEtD,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC;QACpC,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1B,QAAQ;QACR,OAAO,EAAE,IAAA,0BAAe,GAAE;QAC1B,GAAG,UAAU;QACb,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC;KACvC,CAAC,CAAC;IACH,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,SAAoB,EACpB,YAAgE,EAChE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAiB;IAEtD,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,YAAY,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,YAAY,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC;IACzB,YAAY,CAAC,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACzC,YAAY,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACjC,YAAY,CAAC,OAAO,GAAG,IAAA,0BAAe,GAAE,CAAC;IACzC,YAAY,CAAC,eAAe,GAAG,UAAU,CAAC,eAAyB,CAAC;IACpE,YAAY,CAAC,qBAAqB,GAAG,UAAU,CAAC,qBAA6B,CAAC;IAC9E,YAAY,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAClD,YAAY,CAAC,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrC,OAAO,YAAY,CAAC,GAAG,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,SAAoB,EACpB,YAA0D,EAC1D,OAAsB;IAEtB,MAAM,MAAM,GAAG,YAAY;QACzB,CAAC,CAAC,MAAM,wBAAwB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC;QAClE,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE5C,IAAA,2BAAM,EAAC,MAAM,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;IAEjD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,IAAA,2BAAM,EAAC,IAAI,EAAE,GAAG,EAAE,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAuBD,KAAK,UAAU,0BAA0B,CACvC,SAAoB,EACpB,KAAa;IAEb,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,MAAM,kBAAkB,GACtB,CAAC,CAAC,YAAY;QACd,CAAC,MAAM,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,mCAAc,CAAC,CAAC,YAAY,CAC7D,YAAY,CAAC,GAAG,CACjB,CAAC,CAAC;IACL,IAAA,2BAAM,EACJ,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,kBAAkB,CAAC,EACnE,GAAG,EACH,0BAA0B,CAC3B,CAAC;IACF,OAAO,YAAY,CAAC;AACtB,CAAC;AAEM,KAAK,UAAU,MAAM,CAC1B,SAAoB,EACpB,YAA0B,EAC1B,IAAa,EACb,SAAiB,EACjB,MAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAC1E,wBAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3B,CAAC;IAEF,MAAM,MAAM,GAAG,IAAA,sBAAa,GAAE,CAAC;IAM/B,MAAM,cAAc,GAAG,MAAM,IAAA,2BAAkB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC;IAE5D,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAExE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,YAAY,EAAE;QAC3D,IAAI;QACJ,KAAK;QACL,QAAQ;QACR,IAAI;QACJ,MAAM,EAAE,cAAc;KACvB,CAAC,CAAC;IAEH,MAAM,IAAA,sBAAa,EAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAEzD,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,IAAA,2BAAM,EAAC,aAAa,EAAE,GAAG,EAAE,6BAA6B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAEpE,MAAM,oBAAoB,GACxB,MAAM,CAAC,iBAAiB,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC;IAClE,IAAI,oBAAoB,EAAE,CAAC;QACzB,IAAA,+BAAa,EACX,IAAA,+BAAwB,EAAC,aAAa,CAAC,EACvC,wBAAwB,aAAa,CAAC,KAAK,GAAG,CAC/C,CAAC;IACJ,CAAC;IAED,MAAM,IAAA,2BAAoB,EAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC/D,MAAM,IAAA,sCAAoB,EAAC,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAEjE,OAAO,IAAA,oCAAiB,EACtB,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,SAAS,EACT,MAAM,CACP,CAAC;AACJ,CAAC"}
+{"version":3,"file":"signup.js","sourceRoot":"","sources":["../../../src/routes/auth/signup.ts"],"names":[],"mappings":";;AA6CA,wCAKC;AA0GD,wBA2CC;AAvMD,uEAA0E;AAC1E,uEAAgE;AAChE,6FAAqE;AACrE,qDAGsC;AACtC,yDAAsE;AAMtE,mDAAuD;AAEvD,iEAAmE;AACnE,8DAA0D;AAC1D,qCAA6D;AAC7D,yDAAuD;AAGvD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAc9B,MAAM,wBAAwB,GAAqB;IACjD,WAAW,EAAE,IAAI;IACjB,eAAe,EAAE,IAAI;IACrB,qBAAqB,EAAE,IAAI;CAC5B,CAAC;AAMF,SAAgB,cAAc,CAC5B,IAAwB,EACxB,MAAkB;IAElB,OAAO,IAAI,IAAI,MAAM,CAAC,QAAQ,IAAI,gBAAgB,CAAC;AACrD,CAAC;AAYD,KAAK,UAAU,aAAa,CAC1B,SAAoB,EACpB,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAiB;IAEtD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC;QACpC,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1B,QAAQ;QACR,OAAO,EAAE,IAAA,0BAAe,GAAE;QAC1B,GAAG,wBAAwB;QAC3B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC;KACvC,CAAC,CAAC;IACH,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,SAAoB,EACpB,YAAgE,EAChE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAiB;IAEtD,YAAY,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,YAAY,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC;IACzB,YAAY,CAAC,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACzC,YAAY,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACjC,YAAY,CAAC,OAAO,GAAG,IAAA,0BAAe,GAAE,CAAC;IACzC,YAAY,CAAC,WAAW,GAAG,wBAAwB,CAAC,WAAW,CAAC;IAChE,YAAY,CAAC,eAAe,GAAG,wBAAwB,CAAC,eAAe,CAAC;IACxE,YAAY,CAAC,qBAAqB;QAChC,wBAAwB,CAAC,qBAAqB,CAAC;IACjD,YAAY,CAAC,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrC,OAAO,YAAY,CAAC,GAAG,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,SAAoB,EACpB,YAA0D,EAC1D,OAAsB;IAEtB,MAAM,MAAM,GAAG,YAAY;QACzB,CAAC,CAAC,MAAM,wBAAwB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC;QAClE,CAAC,CAAC,MAAM,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE5C,IAAA,2BAAM,EAAC,MAAM,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;IAEjD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,IAAA,2BAAM,EAAC,IAAI,EAAE,GAAG,EAAE,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAuBD,KAAK,UAAU,0BAA0B,CACvC,SAAoB,EACpB,KAAa;IAEb,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,MAAM,kBAAkB,GACtB,CAAC,CAAC,YAAY;QACd,CAAC,MAAM,IAAA,wCAAQ,EAAC,sBAAiB,EAAE,mCAAc,CAAC,CAAC,YAAY,CAC7D,YAAY,CAAC,GAAG,CACjB,CAAC,CAAC;IACL,IAAA,2BAAM,EACJ,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,kBAAkB,CAAC,EACnE,GAAG,EACH,0BAA0B,CAC3B,CAAC;IACF,OAAO,YAAY,CAAC;AACtB,CAAC;AAEM,KAAK,UAAU,MAAM,CAC1B,SAAoB,EACpB,YAA0B,EAC1B,IAAa,EACb,SAAiB,EACjB,MAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAC1E,wBAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3B,CAAC;IAMF,MAAM,cAAc,GAAG,MAAM,IAAA,2BAAkB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC;IAE5D,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAExE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,YAAY,EAAE;QAC3D,IAAI;QACJ,KAAK;QACL,QAAQ;QACR,IAAI;QACJ,MAAM,EAAE,cAAc;KACvB,CAAC,CAAC;IAEH,MAAM,IAAA,sBAAa,EAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAEzD,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,IAAA,2BAAM,EAAC,aAAa,EAAE,GAAG,EAAE,6BAA6B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAEpE,MAAM,IAAA,2BAAoB,EAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC/D,MAAM,IAAA,sCAAoB,EAAC,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAEjE,OAAO,IAAA,oCAAiB,EACtB,YAAY,EACZ,QAAQ,EACR,aAAa,EACb,SAAS,EACT,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/routes/auth/two-factor-throttle.d.ts

@@ -0,0 +1,5 @@
+export declare const TWO_FACTOR_ATTEMPTS_PER_CHALLENGE = 5;
+export declare const TWO_FACTOR_ATTEMPTS_PER_ACCOUNT = 10;
+export declare const TWO_FACTOR_WINDOW_MS: number;
+export declare function answerTwoFactorChallenge(userId: string, token: string, checkCode: () => Promise<void>, now?: Date): Promise<void>;
+export declare function assertTwoFactorChallengeOpen(userId: string, token: string): Promise<void>;

package/dist/routes/auth/two-factor-throttle.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TWO_FACTOR_WINDOW_MS = exports.TWO_FACTOR_ATTEMPTS_PER_ACCOUNT = exports.TWO_FACTOR_ATTEMPTS_PER_CHALLENGE = void 0;
+exports.answerTwoFactorChallenge = answerTwoFactorChallenge;
+exports.assertTwoFactorChallengeOpen = assertTwoFactorChallengeOpen;
+const node_crypto_1 = require("node:crypto");
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
+const signInAttempts_model_1 = require("../../db/models/signInAttempts.model");
+const account_notifications_1 = require("../../utils/account-notifications");
+const sign_in_monitor_1 = require("../../utils/sign-in-monitor");
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_TOO_MANY_REQUESTS = 429;
+const CHALLENGE_SPENT_MESSAGE = "error.too_many_2fa_attempts";
+const ACCOUNT_LOCKED_MESSAGE = "error.too_many_2fa_attempts_account";
+const CHALLENGE_USED_MESSAGE = "error.2fa_challenge_used";
+const MS_PER_MINUTE = 60 * 1000;
+exports.TWO_FACTOR_ATTEMPTS_PER_CHALLENGE = 5;
+exports.TWO_FACTOR_ATTEMPTS_PER_ACCOUNT = 10;
+exports.TWO_FACTOR_WINDOW_MS = 60 * MS_PER_MINUTE;
+function challengeKey(token) {
+    return (0, node_crypto_1.createHash)("sha256").update(token).digest("hex");
+}
+function windowStart(now) {
+    return new Date(now.getTime() - exports.TWO_FACTOR_WINDOW_MS);
+}
+function assertTriesLeft(tries, pending) {
+    (0, interface_api_util_1.assert)(tries.accountTries + pending <= exports.TWO_FACTOR_ATTEMPTS_PER_ACCOUNT, HTTP_TOO_MANY_REQUESTS, ACCOUNT_LOCKED_MESSAGE);
+    (0, interface_api_util_1.assert)(tries.challengeTries + pending <= exports.TWO_FACTOR_ATTEMPTS_PER_CHALLENGE, HTTP_TOO_MANY_REQUESTS, CHALLENGE_SPENT_MESSAGE);
+}
+async function assertChallengeOpen(userId, challenge, now) {
+    const attempts = (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel);
+    const [isUsed, tries] = await Promise.all([
+        attempts.isTwoFactorChallengeUsed(challenge),
+        attempts.countTwoFactorAttempts(userId, challenge, windowStart(now)),
+    ]);
+    (0, interface_api_util_1.assert)(!isUsed, HTTP_UNAUTHORIZED, CHALLENGE_USED_MESSAGE);
+    assertTriesLeft(tries, 1);
+}
+async function claimAttempt(userId, challenge, now) {
+    await assertChallengeOpen(userId, challenge, now);
+    const attempts = (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel);
+    const tries = await attempts.recordTwoFactorAttempt(userId, challenge, windowStart(now), now);
+    await attempts.pruneBefore(userId, new Date(now.getTime() - sign_in_monitor_1.ATTEMPT_RETENTION_MS));
+    assertTriesLeft(tries, 0);
+    return tries;
+}
+async function closeChallenge(userId, challenge, now) {
+    const attempts = (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel);
+    const isClaimed = await attempts.claimTwoFactorChallenge(userId, challenge, now);
+    (0, interface_api_util_1.assert)(isClaimed, HTTP_UNAUTHORIZED, CHALLENGE_USED_MESSAGE);
+    await attempts.clearTwoFactorAttempts(userId);
+}
+async function warnOfLockout(userId, now) {
+    const oldest = await (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel).oldestTwoFactorAttempt(userId, windowStart(now));
+    if (oldest === undefined)
+        return;
+    await (0, account_notifications_1.notifyTwoFactorLockout)(userId, {
+        count: exports.TWO_FACTOR_ATTEMPTS_PER_ACCOUNT,
+        windowMinutes: exports.TWO_FACTOR_WINDOW_MS / MS_PER_MINUTE,
+    }, oldest);
+}
+async function answerTwoFactorChallenge(userId, token, checkCode, now = new Date()) {
+    const challenge = challengeKey(token);
+    const tries = await claimAttempt(userId, challenge, now);
+    try {
+        await checkCode();
+    }
+    catch (error) {
+        if (tries.accountTries >= exports.TWO_FACTOR_ATTEMPTS_PER_ACCOUNT) {
+            (0, fire_and_forget_1.fireAndForget)(warnOfLockout(userId, now), "two-factor lockout notification");
+        }
+        throw error;
+    }
+    await closeChallenge(userId, challenge, now);
+}
+async function assertTwoFactorChallengeOpen(userId, token) {
+    await assertChallengeOpen(userId, challengeKey(token), new Date());
+}
+//# sourceMappingURL=two-factor-throttle.js.map

package/dist/routes/auth/two-factor-throttle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"two-factor-throttle.js","sourceRoot":"","sources":["../../../src/routes/auth/two-factor-throttle.ts"],"names":[],"mappings":";;;AAkJA,4DAoBC;AAMD,oEAKC;AAjLD,6CAAyC;AACzC,uEAAwD;AACxD,6FAAqE;AACrE,qFAAgF;AAChF,+EAG8C;AAC9C,6EAA2E;AAC3E,iEAAmE;AAEnE,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,uBAAuB,GAAG,6BAA6B,CAAC;AAC9D,MAAM,sBAAsB,GAAG,qCAAqC,CAAC;AACrE,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAC1D,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAKnB,QAAA,iCAAiC,GAAG,CAAC,CAAC;AAKtC,QAAA,+BAA+B,GAAG,EAAE,CAAC;AAKrC,QAAA,oBAAoB,GAAG,EAAE,GAAG,aAAa,CAAC;AAKvD,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,GAAS;IAC5B,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,4BAAoB,CAAC,CAAC;AACxD,CAAC;AAID,SAAS,eAAe,CAAC,KAAqB,EAAE,OAAe;IAC7D,IAAA,2BAAM,EACJ,KAAK,CAAC,YAAY,GAAG,OAAO,IAAI,uCAA+B,EAC/D,sBAAsB,EACtB,sBAAsB,CACvB,CAAC;IACF,IAAA,2BAAM,EACJ,KAAK,CAAC,cAAc,GAAG,OAAO,IAAI,yCAAiC,EACnE,sBAAsB,EACtB,uBAAuB,CACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,MAAc,EACd,SAAiB,EACjB,GAAS;IAET,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;IAC/C,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxC,QAAQ,CAAC,wBAAwB,CAAC,SAAS,CAAC;QAC5C,QAAQ,CAAC,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;KACrE,CAAC,CAAC;IACH,IAAA,2BAAM,EAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IAC3D,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC;AAKD,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,SAAiB,EACjB,GAAS;IAET,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CACjD,MAAM,EACN,SAAS,EACT,WAAW,CAAC,GAAG,CAAC,EAChB,GAAG,CACJ,CAAC;IACF,MAAM,QAAQ,CAAC,WAAW,CACxB,MAAM,EACN,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,sCAAoB,CAAC,CAC/C,CAAC;IACF,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,KAAK,UAAU,cAAc,CAC3B,MAAc,EACd,SAAiB,EACjB,GAAS;IAET,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,uBAAuB,CACtD,MAAM,EACN,SAAS,EACT,GAAG,CACJ,CAAC;IACF,IAAA,2BAAM,EAAC,SAAS,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IAC7D,MAAM,QAAQ,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAID,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,GAAS;IACpD,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC,sBAAsB,CACvE,MAAM,EACN,WAAW,CAAC,GAAG,CAAC,CACjB,CAAC;IACF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO;IACjC,MAAM,IAAA,8CAAsB,EAC1B,MAAM,EACN;QACE,KAAK,EAAE,uCAA+B;QACtC,aAAa,EAAE,4BAAoB,GAAG,aAAa;KACpD,EACD,MAAM,CACP,CAAC;AACJ,CAAC;AAcM,KAAK,UAAU,wBAAwB,CAC5C,MAAc,EACd,KAAa,EACb,SAA8B,EAC9B,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,YAAY,IAAI,uCAA+B,EAAE,CAAC;YAC1D,IAAA,+BAAa,EACX,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,iCAAiC,CAClC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAMM,KAAK,UAAU,4BAA4B,CAChD,MAAc,EACd,KAAa;IAEb,MAAM,mBAAmB,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC"}

package/dist/routes/auth/validate-forgot-password-token.js

@@ -2,16 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateForgotPasswordToken = validateForgotPasswordToken;
 const interface_api_util_1 = require("@antelopejs/interface-api-util");
-const config_1 = require("../../config");
 const auth_schema_1 = require("../../validation/auth.schema");
+const reset_code_1 = require("./reset-code");
 async function validateForgotPasswordToken(userModel, body) {
-    const config = (0, config_1.getAuthConfig)();
     const { email, token } = (0, interface_api_util_1.assertValidation)(body, (v) => auth_schema_1.authSchema.validateForgotPasswordToken.parse(v));
-    const user = await userModel.getByEmail(email);
-    const isTokenValid = user?.forgotPasswordToken === token &&
-        user?.forgotPasswordRequestedAt &&
-        Date.now() - user.forgotPasswordRequestedAt.getTime() <
-            config.passwordRecoverTokenLifetime;
-    (0, interface_api_util_1.assert)(isTokenValid, 400, "error.invalid_or_expired_token");
+    await (0, reset_code_1.assertResetCode)(userModel, email, token);
 }
 //# sourceMappingURL=validate-forgot-password-token.js.map

package/dist/routes/auth/validate-forgot-password-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-forgot-password-token.js","sourceRoot":"","sources":["../../../src/routes/auth/validate-forgot-password-token.ts"],"names":[],"mappings":";;AAKA,kEAiBC;AAtBD,uEAA0E;AAE1E,yCAA6C;AAC7C,8DAA0D;AAEnD,KAAK,UAAU,2BAA2B,CAC/C,SAAoB,EACpB,IAAa;IAEb,MAAM,MAAM,GAAG,IAAA,sBAAa,GAAE,CAAC;IAC/B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACpD,wBAAU,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAChD,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,YAAY,GAChB,IAAI,EAAE,mBAAmB,KAAK,KAAK;QACnC,IAAI,EAAE,yBAAyB;QAC/B,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE;YACnD,MAAM,CAAC,4BAA4B,CAAC;IAExC,IAAA,2BAAM,EAAC,YAAY,EAAE,GAAG,EAAE,gCAAgC,CAAC,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"validate-forgot-password-token.js","sourceRoot":"","sources":["../../../src/routes/auth/validate-forgot-password-token.ts"],"names":[],"mappings":";;AAKA,kEAQC;AAbD,uEAAkE;AAElE,8DAA0D;AAC1D,6CAA+C;AAExC,KAAK,UAAU,2BAA2B,CAC/C,SAAoB,EACpB,IAAa;IAEb,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACpD,wBAAU,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAChD,CAAC;IACF,MAAM,IAAA,4BAAe,EAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC"}

package/dist/routes/auth/validate-invite-token.d.ts

@@ -0,0 +1 @@
+export declare function validateInviteToken(body: unknown): Promise<void>;

package/dist/routes/auth/validate-invite-token.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateInviteToken = validateInviteToken;
+const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const auth_schema_1 = require("../../validation/auth.schema");
+const invite_1 = require("./invite");
+async function validateInviteToken(body) {
+    const { token, email } = (0, interface_api_util_1.assertValidation)(body, (v) => auth_schema_1.authSchema.validateInviteToken.parse(v));
+    await (0, invite_1.resolveValidInvite)(token, email);
+}
+//# sourceMappingURL=validate-invite-token.js.map

package/dist/routes/auth/validate-invite-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-invite-token.js","sourceRoot":"","sources":["../../../src/routes/auth/validate-invite-token.ts"],"names":[],"mappings":";;AAQA,kDAKC;AAbD,uEAAkE;AAClE,8DAA0D;AAC1D,qCAA8C;AAMvC,KAAK,UAAU,mBAAmB,CAAC,IAAa;IACrD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACpD,wBAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CACxC,CAAC;IACF,MAAM,IAAA,2BAAkB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC"}

package/dist/routes/auth/verify-2fa.js

@@ -7,28 +7,25 @@ exports.verify2FA = verify2FA;
 const node_crypto_1 = __importDefault(require("node:crypto"));
 const interface_api_util_1 = require("@antelopejs/interface-api-util");
 const auth_1 = require("@antelopejs/interface-dms/auth");
-const _2fa_1 = require("2fa");
 const account_notifications_1 = require("../../utils/account-notifications");
 const sign_in_monitor_1 = require("../../utils/sign-in-monitor");
+const two_factor_codes_1 = require("../../utils/two-factor-codes");
 const auth_schema_1 = require("../../validation/auth.schema");
-const constants_1 = require("./constants");
+const issue_message_1 = require("../../validation/issue-message");
+const two_factor_throttle_1 = require("./two-factor-throttle");
 const fire_and_forget_1 = require("@antelopejs/interface-dms/utils/fire-and-forget");
 const verifyMethods = {
-    async totp({ user, code }) {
+    async totp({ user, code, userModel }) {
         (0, interface_api_util_1.assert)(user.twoFactorMethods?.includes("totp"), 401, "error.2fa_method_not_enabled");
         (0, interface_api_util_1.assert)(user.twoFactorSecret, 401, "error.2fa_not_configured");
-        (0, interface_api_util_1.assert)((0, _2fa_1.verifyTOTP)(user.twoFactorSecret, code), 401, "error.invalid_2fa_code");
+        (0, interface_api_util_1.assert)(await (0, two_factor_codes_1.acceptTotpCode)(userModel, user, user.twoFactorSecret, code), 401, "error.invalid_2fa_code");
     },
     async email({ user, code, userModel }) {
         (0, interface_api_util_1.assert)(user.twoFactorMethods?.includes("email"), 401, "error.2fa_method_not_enabled");
         (0, interface_api_util_1.assert)(user.twoFactorEmailCode, 401, "error.2fa_code_expired");
-        const isExpired = !user.twoFactorEmailCodeRequestedAt ||
-            Date.now() - new Date(user.twoFactorEmailCodeRequestedAt).getTime() >
-                constants_1.TWO_FACTOR_EMAIL_CODE_LIFETIME_MS;
-        (0, interface_api_util_1.assert)(!isExpired, 401, "error.2fa_code_expired");
-        (0, interface_api_util_1.assert)(user.twoFactorEmailCode === code, 401, "error.invalid_2fa_code");
-        user.twoFactorEmailCode = null;
-        user.twoFactorEmailCodeRequestedAt = null;
+        (0, interface_api_util_1.assert)(!(0, two_factor_codes_1.isEmailCodeExpired)(user), 401, "error.2fa_code_expired");
+        (0, interface_api_util_1.assert)((0, two_factor_codes_1.emailCodeMatches)(user, code), 401, "error.invalid_2fa_code");
+        (0, two_factor_codes_1.consumeEmailCode)(user);
         await userModel.update(user);
     },
     async backup({ user, code, userModel }) {
@@ -41,13 +38,13 @@ const verifyMethods = {
     },
 };
 async function verify2FA(userModel, sessionModel, body, userAgent, origin) {
-    const { token, code, method } = (0, interface_api_util_1.assertValidation)(body, (v) => auth_schema_1.authSchema.verify2FA.parse(v));
+    const { token, code, method } = (0, interface_api_util_1.assertValidation)(body, (v) => auth_schema_1.authSchema.verify2FA.parse(v), issue_message_1.firstIssueMessage);
     const twoFactorPayload = await (0, auth_1.validateTwoFactorToken)(token);
     const { user, tenantId } = twoFactorPayload;
     (0, interface_api_util_1.assert)(tenantId, 401, "error.invalid_token");
     const verifier = verifyMethods[method];
     (0, interface_api_util_1.assert)(verifier, 400, "error.invalid_2fa_method");
-    await verifier({ user, code, userModel });
+    await (0, two_factor_throttle_1.answerTwoFactorChallenge)(user._id, token, () => verifier({ user, code, userModel }));
     if (method === "backup") {
         (0, fire_and_forget_1.fireAndForget)((0, account_notifications_1.notifyBackupCodeUsed)(user._id, user.twoFactorBackupCodes?.length ?? 0), "backup code used notification");
     }

package/dist/routes/auth/verify-2fa.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-2fa.js","sourceRoot":"","sources":["../../../src/routes/auth/verify-2fa.ts"],"names":[],"mappings":";;;;;AAgFA,8BAiDC;AAjID,8DAAiC;AACjC,uEAA0E;AAC1E,yDAMwC;AAKxC,8BAAiC;AACjC,6EAAyE;AAEzE,iEAA2D;AAC3D,8DAA0D;AAC1D,2CAAgE;AAEhE,qFAAgF;AAUhF,MAAM,aAAa,GAGf;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;QACvB,IAAA,2BAAM,EACJ,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,EACvC,GAAG,EACH,8BAA8B,CAC/B,CAAC;QACF,IAAA,2BAAM,EAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAC9D,IAAA,2BAAM,EACJ,IAAA,iBAAU,EAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,EACtC,GAAG,EACH,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QACnC,IAAA,2BAAM,EACJ,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,EACxC,GAAG,EACH,8BAA8B,CAC/B,CAAC;QACF,IAAA,2BAAM,EAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;QAE/D,MAAM,SAAS,GACb,CAAC,IAAI,CAAC,6BAA6B;YACnC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,OAAO,EAAE;gBACjE,6CAAiC,CAAC;QACtC,IAAA,2BAAM,EAAC,CAAC,SAAS,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;QAClD,IAAA,2BAAM,EAAC,IAAI,CAAC,kBAAkB,KAAK,IAAI,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;QAExE,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,6BAA6B,GAAG,IAAI,CAAC;QAC1C,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,IAAA,2BAAM,EAAC,IAAI,CAAC,oBAAoB,EAAE,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAA,2BAAM,EAAC,UAAU,IAAI,CAAC,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;QAE1D,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACF,CAAC;AAEK,KAAK,UAAU,SAAS,CAC7B,SAAoB,EACpB,YAA0B,EAC1B,IAAa,EACb,SAAiB,EACjB,MAAoB;IAEpB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAA,qCAAgB,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3D,wBAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAC9B,CAAC;IAEF,MAAM,gBAAgB,GAAG,MAAM,IAAA,6BAAsB,EAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC;IAC5C,IAAA,2BAAM,EAAC,QAAQ,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAsB,CAAC,CAAC;IACvD,IAAA,2BAAM,EAAC,QAAQ,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAClD,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAA,+BAAa,EACX,IAAA,4CAAoB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,IAAI,CAAC,CAAC,EACtE,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,IAAA,8BAAY,EAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAE5C,MAAM,SAAS,GAAG,MAAM,IAAA,oBAAa,EACnC,YAAY,EACZ,IAAI,CAAC,GAAG,EACR,SAAS,EACT,MAAM,CAAC,EAAE,CACV,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,IAAA,0BAAmB,EAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,MAAM,IAAA,2BAAoB,EACjD,QAAQ,EACR,IAAI,EACJ,SAAS,CACV,CAAC;IAEF,MAAM,YAAY,CAAC,mBAAmB,CAAC,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAE1E,OAAO;QACL,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE,eAAe,CAAC,KAAK;QACnC,UAAU,EAAE,eAAe,CAAC,SAAS;QACrC,aAAa,EAAE,gBAAgB,CAAC,KAAK;QACrC,IAAI,EAAE,MAAM,IAAA,mBAAY,EAAC,IAAI,CAAC;KAC/B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"verify-2fa.js","sourceRoot":"","sources":["../../../src/routes/auth/verify-2fa.ts"],"names":[],"mappings":";;;;;AAgFA,8BAqDC;AArID,8DAAiC;AACjC,uEAA0E;AAC1E,yDAMwC;AAKxC,6EAAyE;AAEzE,iEAA2D;AAC3D,mEAKsC;AACtC,8DAA0D;AAC1D,kEAAmE;AACnE,+DAAiE;AAEjE,qFAAgF;AAUhF,MAAM,aAAa,GAGf;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,IAAA,2BAAM,EACJ,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,EACvC,GAAG,EACH,8BAA8B,CAC/B,CAAC;QACF,IAAA,2BAAM,EAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAC9D,IAAA,2BAAM,EACJ,MAAM,IAAA,iCAAc,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,EACjE,GAAG,EACH,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QACnC,IAAA,2BAAM,EACJ,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,EACxC,GAAG,EACH,8BAA8B,CAC/B,CAAC;QACF,IAAA,2BAAM,EAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;QAC/D,IAAA,2BAAM,EAAC,CAAC,IAAA,qCAAkB,EAAC,IAAI,CAAC,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACjE,IAAA,2BAAM,EAAC,IAAA,mCAAgB,EAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,wBAAwB,CAAC,CAAC;QAEpE,IAAA,mCAAgB,EAAC,IAAI,CAAC,CAAC;QACvB,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QACpC,IAAA,2BAAM,EAAC,IAAI,CAAC,oBAAoB,EAAE,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAA,2BAAM,EAAC,UAAU,IAAI,CAAC,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;QAE1D,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACF,CAAC;AAEK,KAAK,UAAU,SAAS,CAC7B,SAAoB,EACpB,YAA0B,EAC1B,IAAa,EACb,SAAiB,EACjB,MAAoB;IAEpB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAA,qCAAgB,EAC9C,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EACpC,iCAAiB,CAClB,CAAC;IAEF,MAAM,gBAAgB,GAAG,MAAM,IAAA,6BAAsB,EAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC;IAC5C,IAAA,2BAAM,EAAC,QAAQ,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAsB,CAAC,CAAC;IACvD,IAAA,2BAAM,EAAC,QAAQ,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAClD,MAAM,IAAA,8CAAwB,EAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CACnD,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CACpC,CAAC;IACF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAA,+BAAa,EACX,IAAA,4CAAoB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,IAAI,CAAC,CAAC,EACtE,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,MAAM,IAAA,8BAAY,EAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAE5C,MAAM,SAAS,GAAG,MAAM,IAAA,oBAAa,EACnC,YAAY,EACZ,IAAI,CAAC,GAAG,EACR,SAAS,EACT,MAAM,CAAC,EAAE,CACV,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,IAAA,0BAAmB,EAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,MAAM,IAAA,2BAAoB,EACjD,QAAQ,EACR,IAAI,EACJ,SAAS,CACV,CAAC;IAEF,MAAM,YAAY,CAAC,mBAAmB,CAAC,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAE1E,OAAO;QACL,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE,eAAe,CAAC,KAAK;QACnC,UAAU,EAAE,eAAe,CAAC,SAAS;QACrC,aAAa,EAAE,gBAAgB,CAAC,KAAK;QACrC,IAAI,EAAE,MAAM,IAAA,mBAAY,EAAC,IAAI,CAAC;KAC/B,CAAC;AACJ,CAAC"}

package/dist/routes/auth.d.ts

@@ -14,6 +14,7 @@ export declare class AuthController extends AuthController_base {
     private get clientIp();
     private get clientOrigin();
     signup(body: unknown): Promise<AuthResponse>;
+    validateInviteToken(body: unknown): Promise<void>;
     login(body: unknown): Promise<AuthResponse | TwoFactorRequiredResponse | TenantAssignmentRequiredResponse>;
     oauthAuthorizeUrl(provider: string): OAuthAuthorizeUrl;
     oauthCallback(provider: string, body: unknown): Promise<LoginOutcome>;

package/dist/routes/auth.js

@@ -66,6 +66,9 @@ class AuthController extends (0, interface_api_1.Controller)("/api/auth") {
     signup(body) {
         return authRoutes.signup(this.userModel, this.sessionModel, body, this.userAgent || "", this.clientOrigin);
     }
+    validateInviteToken(body) {
+        return authRoutes.validateInviteToken(body);
+    }
     login(body) {
         return authRoutes.login(this.userModel, this.sessionModel, body, this.userAgent || "", this.clientOrigin);
     }
@@ -118,7 +121,7 @@ class AuthController extends (0, interface_api_1.Controller)("/api/auth") {
         return authRoutes.validateForgotPasswordToken(this.userModel, body);
     }
     resetPassword(body) {
-        return authRoutes.resetPassword(this.userModel, body);
+        return authRoutes.resetPassword(this.userModel, this.sessionModel, body);
     }
 }
 exports.AuthController = AuthController;
@@ -153,6 +156,13 @@ __decorate([
     __metadata("design:paramtypes", [Object]),
     __metadata("design:returntype", Promise)
 ], AuthController.prototype, "signup", null);
+__decorate([
+    (0, interface_api_1.Post)("/validate-invite-token"),
+    __param(0, (0, interface_api_1.JSONBody)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "validateInviteToken", null);
 __decorate([
     (0, interface_api_1.Post)("/login"),
     __param(0, (0, interface_api_1.JSONBody)()),

package/dist/routes/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAQmC;AACnC,6FAAkE;AAClE,yDAA6D;AAC7D,0DAI2C;AAC3C,sCAA0C;AAC1C,8DAGkC;AAClC,yDAA2C;AAS3C,MAAa,cAAe,SAAQ,IAAA,0BAAU,EAAC,WAAW,CAAC;IAmBzD,IAAY,QAAQ;QAClB,OAAO,UAAU,CAAC,eAAe,CAC/B;YACE,aAAa,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa;YAClE,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,EACD,UAAU,CAAC,iBAAiB,CAAC,IAAA,sBAAa,GAAE,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED,IAAY,YAAY;QACtB,OAAO,IAAA,qCAAmB,EACxB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CACvC,CAAC;IACJ,CAAC;IAGD,MAAM,CAAa,IAAa;QAC9B,OAAO,UAAU,CAAC,MAAM,CACtB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,YAAY,CAClB,CAAC;IACJ,CAAC;IAGD,KAAK,CACS,IAAa;QAIzB,OAAO,UAAU,CAAC,KAAK,CACrB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,YAAY,CAClB,CAAC;IACJ,CAAC;IAGD,iBAAiB,CACQ,QAAgB;QAEvC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAGD,aAAa,CACY,QAAgB,EAC3B,IAAa;QAEzB,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC,aAAa,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,QAAQ;YACpB,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,YAAY;SAC1B,CAAC,CAAC;IACL,CAAC;IAGD,SAAS,CAAa,IAAa;QACjC,OAAO,UAAU,CAAC,SAAS,CACzB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,YAAY,CAClB,CAAC;IACJ,CAAC;IAGD,cAAc,CAAa,IAAa;QACtC,OAAO,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAGD,eAAe,CAAa,IAAa;QACvC,OAAO,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAGD,OAAO,CAAa,IAAa;QAC/B,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IAGD,YAAY,CAAa,IAAa;QACpC,OAAO,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAGD,EAAE,CAAgB,IAAU;QAC1B,OAAO,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAGD,MAAM,CAAgB,IAAU,EAAc,IAAa;QACzD,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAGD,WAAW,CACM,IAAU,EACb,IAAa;QAEzB,OAAO,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAGD,wBAAwB,CAAgB,IAAU;QAChD,OAAO,UAAU,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAGD,cAAc,CAAa,IAAa;QACtC,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAGD,2BAA2B,CAAa,IAAa;QACnD,OAAO,UAAU,CAAC,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;IAGD,aAAa,CAAa,IAAa;QACrC,OAAO,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;CACF;AA1JD,wCA0JC;AAxJS;IADP,IAAA,qCAAK,EAAC,cAAS,CAAC;8BACE,cAAS;iDAAC;AAGrB;IADP,IAAA,qCAAK,EAAC,iBAAY,CAAC;8BACE,iBAAY;oDAAC;AAG3B;IADP,IAAA,yBAAS,EAAC,YAAY,EAAE,QAAQ,CAAC;;iDACR;AAGlB;IADP,IAAA,yBAAS,EAAC,iBAAiB,EAAE,QAAQ,CAAC;;oDACV;AAGrB;IADP,IAAA,yBAAS,EAAC,mBAAmB,EAAE,QAAQ,CAAC;;wDACR;AAGzB;IADP,IAAA,uBAAO,GAAE;;sDAC6B;AAoBvC;IADC,IAAA,oBAAI,EAAC,SAAS,CAAC;IACR,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;4CAQjB;AAGD;IADC,IAAA,oBAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;2CAWZ;AAGD;IADC,IAAA,mBAAG,EAAC,gCAAgC,CAAC;IAEnC,WAAA,IAAA,yBAAS,EAAC,UAAU,CAAC,CAAA;;;;uDAIvB;AAGD;IADC,IAAA,oBAAI,EAAC,2BAA2B,CAAC;IAE/B,WAAA,IAAA,yBAAS,EAAC,UAAU,CAAC,CAAA;IACrB,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;mDAWZ;AAGD;IADC,IAAA,oBAAI,EAAC,aAAa,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;+CAQpB;AAGD;IADC,IAAA,oBAAI,EAAC,kBAAkB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;oDAEzB;AAGD;IADC,IAAA,oBAAI,EAAC,oBAAoB,CAAC;IACV,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;qDAE1B;AAGD;IADC,IAAA,oBAAI,EAAC,UAAU,CAAC;IACR,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;6CAElB;AAGD;IADC,IAAA,oBAAI,EAAC,gBAAgB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;kDAEvB;AAGD;IADC,IAAA,mBAAG,EAAC,KAAK,CAAC;IACP,WAAA,IAAA,kBAAW,GAAE,CAAA;;;;wCAEhB;AAGD;IADC,IAAA,oBAAI,EAAC,SAAS,CAAC;IACR,WAAA,IAAA,kBAAW,GAAE,CAAA;IAAc,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;4CAE5C;AAGD;IADC,IAAA,oBAAI,EAAC,eAAe,CAAC;IAEnB,WAAA,IAAA,kBAAW,GAAE,CAAA;IACb,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;iDAGZ;AAGD;IADC,IAAA,mBAAG,EAAC,6BAA6B,CAAC;IACT,WAAA,IAAA,kBAAW,GAAE,CAAA;;;;8DAEtC;AAGD;IADC,IAAA,oBAAI,EAAC,kBAAkB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;oDAEzB;AAGD;IADC,IAAA,oBAAI,EAAC,iCAAiC,CAAC;IACX,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;iEAEtC;AAGD;IADC,IAAA,oBAAI,EAAC,iBAAiB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;mDAExB"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAQmC;AACnC,6FAAkE;AAClE,yDAA6D;AAC7D,0DAI2C;AAC3C,sCAA0C;AAC1C,8DAGkC;AAClC,yDAA2C;AAS3C,MAAa,cAAe,SAAQ,IAAA,0BAAU,EAAC,WAAW,CAAC;IAmBzD,IAAY,QAAQ;QAClB,OAAO,UAAU,CAAC,eAAe,CAC/B;YACE,aAAa,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa;YAClE,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,EACD,UAAU,CAAC,iBAAiB,CAAC,IAAA,sBAAa,GAAE,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED,IAAY,YAAY;QACtB,OAAO,IAAA,qCAAmB,EACxB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CACvC,CAAC;IACJ,CAAC;IAGD,MAAM,CAAa,IAAa;QAC9B,OAAO,UAAU,CAAC,MAAM,CACtB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,YAAY,CAClB,CAAC;IACJ,CAAC;IAGD,mBAAmB,CAAa,IAAa;QAC3C,OAAO,UAAU,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAGD,KAAK,CACS,IAAa;QAIzB,OAAO,UAAU,CAAC,KAAK,CACrB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,YAAY,CAClB,CAAC;IACJ,CAAC;IAGD,iBAAiB,CACQ,QAAgB;QAEvC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAGD,aAAa,CACY,QAAgB,EAC3B,IAAa;QAEzB,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnD,OAAO,UAAU,CAAC,aAAa,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,QAAQ;YACpB,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAC/B,MAAM,EAAE,IAAI,CAAC,YAAY;SAC1B,CAAC,CAAC;IACL,CAAC;IAGD,SAAS,CAAa,IAAa;QACjC,OAAO,UAAU,CAAC,SAAS,CACzB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,YAAY,CAClB,CAAC;IACJ,CAAC;IAGD,cAAc,CAAa,IAAa;QACtC,OAAO,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAGD,eAAe,CAAa,IAAa;QACvC,OAAO,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAGD,OAAO,CAAa,IAAa;QAC/B,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IAGD,YAAY,CAAa,IAAa;QACpC,OAAO,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAGD,EAAE,CAAgB,IAAU;QAC1B,OAAO,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAGD,MAAM,CAAgB,IAAU,EAAc,IAAa;QACzD,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAGD,WAAW,CACM,IAAU,EACb,IAAa;QAEzB,OAAO,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAGD,wBAAwB,CAAgB,IAAU;QAChD,OAAO,UAAU,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAGD,cAAc,CAAa,IAAa;QACtC,OAAO,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAGD,2BAA2B,CAAa,IAAa;QACnD,OAAO,UAAU,CAAC,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;IAGD,aAAa,CAAa,IAAa;QACrC,OAAO,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;CACF;AA/JD,wCA+JC;AA7JS;IADP,IAAA,qCAAK,EAAC,cAAS,CAAC;8BACE,cAAS;iDAAC;AAGrB;IADP,IAAA,qCAAK,EAAC,iBAAY,CAAC;8BACE,iBAAY;oDAAC;AAG3B;IADP,IAAA,yBAAS,EAAC,YAAY,EAAE,QAAQ,CAAC;;iDACR;AAGlB;IADP,IAAA,yBAAS,EAAC,iBAAiB,EAAE,QAAQ,CAAC;;oDACV;AAGrB;IADP,IAAA,yBAAS,EAAC,mBAAmB,EAAE,QAAQ,CAAC;;wDACR;AAGzB;IADP,IAAA,uBAAO,GAAE;;sDAC6B;AAoBvC;IADC,IAAA,oBAAI,EAAC,SAAS,CAAC;IACR,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;4CAQjB;AAGD;IADC,IAAA,oBAAI,EAAC,wBAAwB,CAAC;IACV,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;yDAE9B;AAGD;IADC,IAAA,oBAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;2CAWZ;AAGD;IADC,IAAA,mBAAG,EAAC,gCAAgC,CAAC;IAEnC,WAAA,IAAA,yBAAS,EAAC,UAAU,CAAC,CAAA;;;;uDAIvB;AAGD;IADC,IAAA,oBAAI,EAAC,2BAA2B,CAAC;IAE/B,WAAA,IAAA,yBAAS,EAAC,UAAU,CAAC,CAAA;IACrB,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;mDAWZ;AAGD;IADC,IAAA,oBAAI,EAAC,aAAa,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;+CAQpB;AAGD;IADC,IAAA,oBAAI,EAAC,kBAAkB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;oDAEzB;AAGD;IADC,IAAA,oBAAI,EAAC,oBAAoB,CAAC;IACV,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;qDAE1B;AAGD;IADC,IAAA,oBAAI,EAAC,UAAU,CAAC;IACR,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;6CAElB;AAGD;IADC,IAAA,oBAAI,EAAC,gBAAgB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;kDAEvB;AAGD;IADC,IAAA,mBAAG,EAAC,KAAK,CAAC;IACP,WAAA,IAAA,kBAAW,GAAE,CAAA;;;;wCAEhB;AAGD;IADC,IAAA,oBAAI,EAAC,SAAS,CAAC;IACR,WAAA,IAAA,kBAAW,GAAE,CAAA;IAAc,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;4CAE5C;AAGD;IADC,IAAA,oBAAI,EAAC,eAAe,CAAC;IAEnB,WAAA,IAAA,kBAAW,GAAE,CAAA;IACb,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;iDAGZ;AAGD;IADC,IAAA,mBAAG,EAAC,6BAA6B,CAAC;IACT,WAAA,IAAA,kBAAW,GAAE,CAAA;;;;8DAEtC;AAGD;IADC,IAAA,oBAAI,EAAC,kBAAkB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;oDAEzB;AAGD;IADC,IAAA,oBAAI,EAAC,iCAAiC,CAAC;IACX,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;iEAEtC;AAGD;IADC,IAAA,oBAAI,EAAC,iBAAiB,CAAC;IACT,WAAA,IAAA,wBAAQ,GAAE,CAAA;;;;mDAExB"}

package/dist/test/helpers/auth.d.ts

@@ -13,7 +13,6 @@ export interface SignupOptions {
     lang?: string;
     owner?: boolean;
     roles_ids?: string[];
-    skipEmailValidation?: boolean;
 }
 export declare function registerUser(options?: SignupOptions): Promise<RegisteredUser>;
 export declare function loginUser(email: string, password: string): Promise<{