@antelopejs/dms 0.6.2 → 0.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (444) hide show
  1. package/CHANGELOG.md +30 -0
  2. package/dist/db/models/notification-feed-filter.d.ts +0 -1
  3. package/dist/db/models/notification-feed-filter.js +0 -4
  4. package/dist/db/models/notification-feed-filter.js.map +1 -1
  5. package/dist/db/models/signInAttempts.model.d.ts +18 -0
  6. package/dist/db/models/signInAttempts.model.js +83 -12
  7. package/dist/db/models/signInAttempts.model.js.map +1 -1
  8. package/dist/db/models/userEmailChanges.model.d.ts +8 -1
  9. package/dist/db/models/userEmailChanges.model.js +27 -2
  10. package/dist/db/models/userEmailChanges.model.js.map +1 -1
  11. package/dist/db/models/userNotificationPreferences.model.d.ts +0 -2
  12. package/dist/db/models/userNotificationPreferences.model.js +0 -13
  13. package/dist/db/models/userNotificationPreferences.model.js.map +1 -1
  14. package/dist/db/models/userNotifications.model.d.ts +5 -2
  15. package/dist/db/models/userNotifications.model.js +19 -2
  16. package/dist/db/models/userNotifications.model.js.map +1 -1
  17. package/dist/db/tables/signInAttempts.table.d.ts +2 -1
  18. package/dist/db/tables/signInAttempts.table.js +4 -0
  19. package/dist/db/tables/signInAttempts.table.js.map +1 -1
  20. package/dist/db/tables/userEmailChanges.table.d.ts +2 -1
  21. package/dist/db/tables/userEmailChanges.table.js +6 -1
  22. package/dist/db/tables/userEmailChanges.table.js.map +1 -1
  23. package/dist/db/tables/userNotificationPreferences.table.d.ts +0 -1
  24. package/dist/db/tables/userNotificationPreferences.table.js +0 -4
  25. package/dist/db/tables/userNotificationPreferences.table.js.map +1 -1
  26. package/dist/implementations/dms/nav-badges.d.ts +6 -4
  27. package/dist/implementations/dms/nav-badges.js +6 -5
  28. package/dist/implementations/dms/nav-badges.js.map +1 -1
  29. package/dist/implementations/dms/page.d.ts +1 -0
  30. package/dist/implementations/dms/page.js +46 -8
  31. package/dist/implementations/dms/page.js.map +1 -1
  32. package/dist/implementations/dms/permission-preview.d.ts +1 -1
  33. package/dist/implementations/dms/permission-preview.js +9 -4
  34. package/dist/implementations/dms/permission-preview.js.map +1 -1
  35. package/dist/implementations/dms-auth/index.d.ts +3 -2
  36. package/dist/implementations/dms-auth/index.js +39 -35
  37. package/dist/implementations/dms-auth/index.js.map +1 -1
  38. package/dist/implementations/dms-auth/token-session.d.ts +3 -0
  39. package/dist/implementations/dms-auth/token-session.js +22 -0
  40. package/dist/implementations/dms-auth/token-session.js.map +1 -0
  41. package/dist/implementations/dms-notifications/index.d.ts +0 -1
  42. package/dist/implementations/dms-notifications/index.js +0 -7
  43. package/dist/implementations/dms-notifications/index.js.map +1 -1
  44. package/dist/pages/settings/settings-index.js +3 -2
  45. package/dist/pages/settings/settings-index.js.map +1 -1
  46. package/dist/pages/settings/users/account-activity-feed.d.ts +1 -1
  47. package/dist/pages/settings/users/account-activity-feed.js +1 -1
  48. package/dist/pages/settings/users/account-activity-feed.js.map +1 -1
  49. package/dist/pages/settings/users/account-activity.d.ts +1 -1
  50. package/dist/pages/settings/users/account-activity.js +1 -1
  51. package/dist/pages/settings/users/account-activity.js.map +1 -1
  52. package/dist/pages/settings/users/account-credentials.d.ts +3 -0
  53. package/dist/pages/settings/users/account-credentials.js +2 -0
  54. package/dist/pages/settings/users/account-credentials.js.map +1 -1
  55. package/dist/pages/settings/users/current-password.d.ts +1 -1
  56. package/dist/pages/settings/users/current-password.js +23 -2
  57. package/dist/pages/settings/users/current-password.js.map +1 -1
  58. package/dist/pages/settings/users/email-change.d.ts +1 -1
  59. package/dist/pages/settings/users/email-change.js +33 -26
  60. package/dist/pages/settings/users/email-change.js.map +1 -1
  61. package/dist/pages/settings/users/invite-resend.js +0 -1
  62. package/dist/pages/settings/users/invite-resend.js.map +1 -1
  63. package/dist/pages/settings/users/invites.d.ts +1 -2
  64. package/dist/pages/settings/users/invites.js +21 -19
  65. package/dist/pages/settings/users/invites.js.map +1 -1
  66. package/dist/pages/settings/users/member-invite-batch.js +0 -1
  67. package/dist/pages/settings/users/member-invite-batch.js.map +1 -1
  68. package/dist/pages/settings/users/member-invite-form.js +10 -22
  69. package/dist/pages/settings/users/member-invite-form.js.map +1 -1
  70. package/dist/pages/settings/users/member-role-options.d.ts +6 -4
  71. package/dist/pages/settings/users/member-role-options.js +15 -4
  72. package/dist/pages/settings/users/member-role-options.js.map +1 -1
  73. package/dist/pages/settings/users/members.d.ts +2 -3
  74. package/dist/pages/settings/users/members.js +7 -12
  75. package/dist/pages/settings/users/members.js.map +1 -1
  76. package/dist/pages/settings/users/notifications.d.ts +1 -8
  77. package/dist/pages/settings/users/notifications.js +6 -38
  78. package/dist/pages/settings/users/notifications.js.map +1 -1
  79. package/dist/pages/settings/users/permission-tree-nodes.d.ts +1 -1
  80. package/dist/pages/settings/users/permission-tree-nodes.js +23 -9
  81. package/dist/pages/settings/users/permission-tree-nodes.js.map +1 -1
  82. package/dist/pages/settings/users/permission-warnings.d.ts +7 -0
  83. package/dist/pages/settings/users/permission-warnings.js +42 -0
  84. package/dist/pages/settings/users/permission-warnings.js.map +1 -0
  85. package/dist/pages/settings/users/profile-helpers.d.ts +1 -3
  86. package/dist/pages/settings/users/profile-helpers.js +0 -16
  87. package/dist/pages/settings/users/profile-helpers.js.map +1 -1
  88. package/dist/pages/settings/users/role-editor-store.js +6 -3
  89. package/dist/pages/settings/users/role-editor-store.js.map +1 -1
  90. package/dist/pages/settings/users/role-editor.d.ts +2 -1
  91. package/dist/pages/settings/users/role-editor.js +8 -4
  92. package/dist/pages/settings/users/role-editor.js.map +1 -1
  93. package/dist/pages/settings/users/role-preview.js +2 -1
  94. package/dist/pages/settings/users/role-preview.js.map +1 -1
  95. package/dist/pages/settings/users/roles.js +5 -1
  96. package/dist/pages/settings/users/roles.js.map +1 -1
  97. package/dist/pages/settings/users/security-attention.d.ts +4 -0
  98. package/dist/pages/settings/users/security-attention.js +23 -7
  99. package/dist/pages/settings/users/security-attention.js.map +1 -1
  100. package/dist/pages/settings/users/security.d.ts +2 -1
  101. package/dist/pages/settings/users/security.js +13 -2
  102. package/dist/pages/settings/users/security.js.map +1 -1
  103. package/dist/pages/settings/users/two-factor-operations.d.ts +2 -1
  104. package/dist/pages/settings/users/two-factor-operations.js +28 -29
  105. package/dist/pages/settings/users/two-factor-operations.js.map +1 -1
  106. package/dist/routes/auth/forgot-password.js +3 -0
  107. package/dist/routes/auth/forgot-password.js.map +1 -1
  108. package/dist/routes/auth/index.d.ts +1 -0
  109. package/dist/routes/auth/index.js +1 -0
  110. package/dist/routes/auth/index.js.map +1 -1
  111. package/dist/routes/auth/invite.js +28 -4
  112. package/dist/routes/auth/invite.js.map +1 -1
  113. package/dist/routes/auth/login-throttle.d.ts +2 -0
  114. package/dist/routes/auth/login-throttle.js +5 -4
  115. package/dist/routes/auth/login-throttle.js.map +1 -1
  116. package/dist/routes/auth/request-2fa-email.js +6 -18
  117. package/dist/routes/auth/request-2fa-email.js.map +1 -1
  118. package/dist/routes/auth/reset-code.d.ts +3 -0
  119. package/dist/routes/auth/reset-code.js +37 -0
  120. package/dist/routes/auth/reset-code.js.map +1 -0
  121. package/dist/routes/auth/reset-password.d.ts +2 -2
  122. package/dist/routes/auth/reset-password.js +5 -10
  123. package/dist/routes/auth/reset-password.js.map +1 -1
  124. package/dist/routes/auth/signup.js +10 -32
  125. package/dist/routes/auth/signup.js.map +1 -1
  126. package/dist/routes/auth/two-factor-throttle.d.ts +5 -0
  127. package/dist/routes/auth/two-factor-throttle.js +81 -0
  128. package/dist/routes/auth/two-factor-throttle.js.map +1 -0
  129. package/dist/routes/auth/validate-forgot-password-token.js +2 -8
  130. package/dist/routes/auth/validate-forgot-password-token.js.map +1 -1
  131. package/dist/routes/auth/validate-invite-token.d.ts +1 -0
  132. package/dist/routes/auth/validate-invite-token.js +11 -0
  133. package/dist/routes/auth/validate-invite-token.js.map +1 -0
  134. package/dist/routes/auth/verify-2fa.js +10 -13
  135. package/dist/routes/auth/verify-2fa.js.map +1 -1
  136. package/dist/routes/auth.d.ts +1 -0
  137. package/dist/routes/auth.js +11 -1
  138. package/dist/routes/auth.js.map +1 -1
  139. package/dist/test/helpers/auth.d.ts +0 -1
  140. package/dist/test/helpers/auth.js +0 -1
  141. package/dist/test/helpers/auth.js.map +1 -1
  142. package/dist/test/helpers/emails.d.ts +10 -0
  143. package/dist/test/helpers/emails.js +36 -0
  144. package/dist/test/helpers/emails.js.map +1 -0
  145. package/dist/test/helpers/fixtures.d.ts +0 -1
  146. package/dist/test/helpers/fixtures.js +1 -2
  147. package/dist/test/helpers/fixtures.js.map +1 -1
  148. package/dist/test/helpers/page-access.d.ts +1 -0
  149. package/dist/test/helpers/page-access.js +6 -1
  150. package/dist/test/helpers/page-access.js.map +1 -1
  151. package/dist/test/integration/auth/current-password.test.d.ts +1 -0
  152. package/dist/test/integration/auth/current-password.test.js +65 -0
  153. package/dist/test/integration/auth/current-password.test.js.map +1 -0
  154. package/dist/test/integration/auth/password-reset.test.d.ts +1 -0
  155. package/dist/test/integration/auth/password-reset.test.js +126 -0
  156. package/dist/test/integration/auth/password-reset.test.js.map +1 -0
  157. package/dist/test/integration/auth/session-revocation.test.d.ts +1 -0
  158. package/dist/test/integration/auth/session-revocation.test.js +45 -0
  159. package/dist/test/integration/auth/session-revocation.test.js.map +1 -0
  160. package/dist/test/integration/auth/two-factor-codes.test.d.ts +1 -0
  161. package/dist/test/integration/auth/two-factor-codes.test.js +335 -0
  162. package/dist/test/integration/auth/two-factor-codes.test.js.map +1 -0
  163. package/dist/test/integration/auth/two-factor-password.test.js +5 -1
  164. package/dist/test/integration/auth/two-factor-password.test.js.map +1 -1
  165. package/dist/test/integration/auth/two-factor-token.test.d.ts +1 -0
  166. package/dist/test/integration/auth/two-factor-token.test.js +92 -0
  167. package/dist/test/integration/auth/two-factor-token.test.js.map +1 -0
  168. package/dist/test/integration/email-change.test.js +36 -0
  169. package/dist/test/integration/email-change.test.js.map +1 -1
  170. package/dist/test/integration/invite-extension-edit.test.js +0 -1
  171. package/dist/test/integration/invite-extension-edit.test.js.map +1 -1
  172. package/dist/test/integration/invite-link-status.test.d.ts +1 -0
  173. package/dist/test/integration/invite-link-status.test.js +110 -0
  174. package/dist/test/integration/invite-link-status.test.js.map +1 -0
  175. package/dist/test/integration/invite-resolution.test.js +0 -3
  176. package/dist/test/integration/invite-resolution.test.js.map +1 -1
  177. package/dist/test/integration/member-settings-access.test.js +17 -0
  178. package/dist/test/integration/member-settings-access.test.js.map +1 -1
  179. package/dist/test/integration/notification-unread-badge.test.d.ts +1 -0
  180. package/dist/test/integration/notification-unread-badge.test.js +92 -0
  181. package/dist/test/integration/notification-unread-badge.test.js.map +1 -0
  182. package/dist/test/integration/permission-warnings.test.d.ts +1 -0
  183. package/dist/test/integration/permission-warnings.test.js +71 -0
  184. package/dist/test/integration/permission-warnings.test.js.map +1 -0
  185. package/dist/test/integration/removed-member-notifications.test.d.ts +1 -0
  186. package/dist/test/integration/removed-member-notifications.test.js +80 -0
  187. package/dist/test/integration/removed-member-notifications.test.js.map +1 -0
  188. package/dist/test/integration/role-permission-ancestors.test.d.ts +1 -0
  189. package/dist/test/integration/role-permission-ancestors.test.js +146 -0
  190. package/dist/test/integration/role-permission-ancestors.test.js.map +1 -0
  191. package/dist/test/integration/tenant-lifecycle.test.js +0 -4
  192. package/dist/test/integration/tenant-lifecycle.test.js.map +1 -1
  193. package/dist/test/unit/auth-session-revocation.test.d.ts +1 -0
  194. package/dist/test/unit/auth-session-revocation.test.js +105 -0
  195. package/dist/test/unit/auth-session-revocation.test.js.map +1 -0
  196. package/dist/test/unit/db/email-normalization.test.js +0 -1
  197. package/dist/test/unit/db/email-normalization.test.js.map +1 -1
  198. package/dist/test/unit/db/notification-feed-filter.test.js +0 -16
  199. package/dist/test/unit/db/notification-feed-filter.test.js.map +1 -1
  200. package/dist/test/unit/db/notification-inbox.test.js +63 -13
  201. package/dist/test/unit/db/notification-inbox.test.js.map +1 -1
  202. package/dist/test/unit/db/notification-preferences.test.js +0 -17
  203. package/dist/test/unit/db/notification-preferences.test.js.map +1 -1
  204. package/dist/test/unit/implementations/dms/empty-menu-group.test.d.ts +1 -0
  205. package/dist/test/unit/implementations/dms/empty-menu-group.test.js +133 -0
  206. package/dist/test/unit/implementations/dms/empty-menu-group.test.js.map +1 -0
  207. package/dist/test/unit/implementations/dms/layout-banners.test.js +2 -1
  208. package/dist/test/unit/implementations/dms/layout-banners.test.js.map +1 -1
  209. package/dist/test/unit/implementations/dms/menu-hidden-blocks.test.d.ts +1 -0
  210. package/dist/test/unit/implementations/dms/menu-hidden-blocks.test.js +149 -0
  211. package/dist/test/unit/implementations/dms/menu-hidden-blocks.test.js.map +1 -0
  212. package/dist/test/unit/implementations/dms/nav-badges.test.js +55 -4
  213. package/dist/test/unit/implementations/dms/nav-badges.test.js.map +1 -1
  214. package/dist/test/unit/implementations/dms/page-all-components-hidden.test.d.ts +1 -0
  215. package/dist/test/unit/implementations/dms/page-all-components-hidden.test.js +118 -0
  216. package/dist/test/unit/implementations/dms/page-all-components-hidden.test.js.map +1 -0
  217. package/dist/test/unit/implementations/dms/permission-preview-aggregate.test.js +16 -0
  218. package/dist/test/unit/implementations/dms/permission-preview-aggregate.test.js.map +1 -1
  219. package/dist/test/unit/implementations/dms/permission-preview-cost.test.js +5 -3
  220. package/dist/test/unit/implementations/dms/permission-preview-cost.test.js.map +1 -1
  221. package/dist/test/unit/implementations/dms/permission-preview-menu.test.js +29 -3
  222. package/dist/test/unit/implementations/dms/permission-preview-menu.test.js.map +1 -1
  223. package/dist/test/unit/implementations/dms/quick-actions-button.test.js +4 -2
  224. package/dist/test/unit/implementations/dms/quick-actions-button.test.js.map +1 -1
  225. package/dist/test/unit/implementations/dms/user-permissions-gate.test.js +2 -1
  226. package/dist/test/unit/implementations/dms/user-permissions-gate.test.js.map +1 -1
  227. package/dist/test/unit/implementations/dms-base/table-view-shared-controller.test.js +2 -1
  228. package/dist/test/unit/implementations/dms-base/table-view-shared-controller.test.js.map +1 -1
  229. package/dist/test/unit/interfaces/dms/component-children-permissions.test.js +7 -2
  230. package/dist/test/unit/interfaces/dms/component-children-permissions.test.js.map +1 -1
  231. package/dist/test/unit/interfaces/dms/form-watch-permissions.test.d.ts +1 -0
  232. package/dist/test/unit/interfaces/dms/form-watch-permissions.test.js +133 -0
  233. package/dist/test/unit/interfaces/dms/form-watch-permissions.test.js.map +1 -0
  234. package/dist/test/unit/interfaces/dms/has-permission-ancestors.test.d.ts +1 -0
  235. package/dist/test/unit/interfaces/dms/has-permission-ancestors.test.js +149 -0
  236. package/dist/test/unit/interfaces/dms/has-permission-ancestors.test.js.map +1 -0
  237. package/dist/test/unit/interfaces/dms/invite-extension.test.js +13 -0
  238. package/dist/test/unit/interfaces/dms/invite-extension.test.js.map +1 -1
  239. package/dist/test/unit/interfaces/dms/member-access.test.js +27 -1
  240. package/dist/test/unit/interfaces/dms/member-access.test.js.map +1 -1
  241. package/dist/test/unit/interfaces/dms/nav-badge-tones.test.d.ts +1 -0
  242. package/dist/test/unit/interfaces/dms/nav-badge-tones.test.js +31 -0
  243. package/dist/test/unit/interfaces/dms/nav-badge-tones.test.js.map +1 -0
  244. package/dist/test/unit/interfaces/dms/page-extension.test.js +4 -1
  245. package/dist/test/unit/interfaces/dms/page-extension.test.js.map +1 -1
  246. package/dist/test/unit/interfaces/dms/permission-requirements.test.d.ts +1 -0
  247. package/dist/test/unit/interfaces/dms/permission-requirements.test.js +144 -0
  248. package/dist/test/unit/interfaces/dms/permission-requirements.test.js.map +1 -0
  249. package/dist/test/unit/interfaces/dms-base/layout-header-actions.test.js +6 -2
  250. package/dist/test/unit/interfaces/dms-base/layout-header-actions.test.js.map +1 -1
  251. package/dist/test/unit/interfaces/dms-base/lists-and-settings-catalog.test.js +1 -1
  252. package/dist/test/unit/interfaces/dms-base/lists-and-settings-catalog.test.js.map +1 -1
  253. package/dist/test/unit/interfaces/dms-base/table-view-export-permission.test.js +2 -1
  254. package/dist/test/unit/interfaces/dms-base/table-view-export-permission.test.js.map +1 -1
  255. package/dist/test/unit/interfaces/dms-base/table-view-reduced-chrome.test.js +2 -1
  256. package/dist/test/unit/interfaces/dms-base/table-view-reduced-chrome.test.js.map +1 -1
  257. package/dist/test/unit/interfaces/dms-base/table-view-shared-controller-permissions.test.js +2 -1
  258. package/dist/test/unit/interfaces/dms-base/table-view-shared-controller-permissions.test.js.map +1 -1
  259. package/dist/test/unit/pages/settings/account-activity-feed.test.js +2 -2
  260. package/dist/test/unit/pages/settings/account-activity-feed.test.js.map +1 -1
  261. package/dist/test/unit/pages/settings/account-activity.test.js +11 -2
  262. package/dist/test/unit/pages/settings/account-activity.test.js.map +1 -1
  263. package/dist/test/unit/pages/settings/invite-email-delivery.test.js +0 -1
  264. package/dist/test/unit/pages/settings/invite-email-delivery.test.js.map +1 -1
  265. package/dist/test/unit/pages/settings/invite-email-validation-option.test.d.ts +1 -0
  266. package/dist/test/unit/pages/settings/invite-email-validation-option.test.js +33 -0
  267. package/dist/test/unit/pages/settings/invite-email-validation-option.test.js.map +1 -0
  268. package/dist/test/unit/pages/settings/member-lists-page-size.test.d.ts +1 -0
  269. package/dist/test/unit/pages/settings/member-lists-page-size.test.js +22 -0
  270. package/dist/test/unit/pages/settings/member-lists-page-size.test.js.map +1 -0
  271. package/dist/test/unit/pages/settings/member-table-widths.test.js +2 -2
  272. package/dist/test/unit/pages/settings/member-table-widths.test.js.map +1 -1
  273. package/dist/test/unit/pages/settings/members-page.test.js +7 -10
  274. package/dist/test/unit/pages/settings/members-page.test.js.map +1 -1
  275. package/dist/test/unit/pages/settings/notifications-access-gate.test.js +3 -10
  276. package/dist/test/unit/pages/settings/notifications-access-gate.test.js.map +1 -1
  277. package/dist/test/unit/pages/settings/permission-tree-nodes.test.js +57 -0
  278. package/dist/test/unit/pages/settings/permission-tree-nodes.test.js.map +1 -1
  279. package/dist/test/unit/pages/settings/permission-warnings.test.d.ts +1 -0
  280. package/dist/test/unit/pages/settings/permission-warnings.test.js +49 -0
  281. package/dist/test/unit/pages/settings/permission-warnings.test.js.map +1 -0
  282. package/dist/test/unit/pages/settings/role-editor.test.js +16 -0
  283. package/dist/test/unit/pages/settings/role-editor.test.js.map +1 -1
  284. package/dist/test/unit/pages/settings/role-preview.test.js +7 -0
  285. package/dist/test/unit/pages/settings/role-preview.test.js.map +1 -1
  286. package/dist/test/unit/pages/settings/security-attention.test.d.ts +1 -0
  287. package/dist/test/unit/pages/settings/security-attention.test.js +74 -0
  288. package/dist/test/unit/pages/settings/security-attention.test.js.map +1 -0
  289. package/dist/test/unit/sanitize-user.test.d.ts +1 -0
  290. package/dist/test/unit/sanitize-user.test.js +21 -0
  291. package/dist/test/unit/sanitize-user.test.js.map +1 -0
  292. package/dist/test/unit/signup-email-validation.test.d.ts +1 -0
  293. package/dist/test/unit/signup-email-validation.test.js +79 -0
  294. package/dist/test/unit/signup-email-validation.test.js.map +1 -0
  295. package/dist/test/unit/validation/member-invite.schema.test.js +14 -52
  296. package/dist/test/unit/validation/member-invite.schema.test.js.map +1 -1
  297. package/dist/utils/account-notifications.d.ts +5 -0
  298. package/dist/utils/account-notifications.js +8 -0
  299. package/dist/utils/account-notifications.js.map +1 -1
  300. package/dist/utils/notification-emitter.d.ts +1 -1
  301. package/dist/utils/notification-emitter.js +1 -1
  302. package/dist/utils/notification-emitter.js.map +1 -1
  303. package/dist/utils/notification-tones.d.ts +2 -1
  304. package/dist/utils/notification-tones.js +5 -1
  305. package/dist/utils/notification-tones.js.map +1 -1
  306. package/dist/utils/one-time-code.d.ts +3 -0
  307. package/dist/utils/one-time-code.js +21 -0
  308. package/dist/utils/one-time-code.js.map +1 -0
  309. package/dist/utils/sign-in-monitor.d.ts +1 -0
  310. package/dist/utils/sign-in-monitor.js +3 -2
  311. package/dist/utils/sign-in-monitor.js.map +1 -1
  312. package/dist/utils/two-factor-codes.d.ts +10 -0
  313. package/dist/utils/two-factor-codes.js +76 -0
  314. package/dist/utils/two-factor-codes.js.map +1 -0
  315. package/dist/validation/auth.schema.d.ts +17 -0
  316. package/dist/validation/auth.schema.js +17 -6
  317. package/dist/validation/auth.schema.js.map +1 -1
  318. package/dist/validation/issue-message.d.ts +1 -0
  319. package/dist/validation/issue-message.js +9 -0
  320. package/dist/validation/issue-message.js.map +1 -0
  321. package/dist/validation/member-invite.schema.d.ts +1 -25
  322. package/dist/validation/member-invite.schema.js +2 -23
  323. package/dist/validation/member-invite.schema.js.map +1 -1
  324. package/frontend-vue/dms.frontend.ts +2 -0
  325. package/frontend-vue/layers/dms-auth/app/custom-pages/auth/forgot-validation.vue +3 -0
  326. package/frontend-vue/layers/dms-auth/app/custom-pages/auth/signup.vue +105 -5
  327. package/frontend-vue/layers/dms-auth/i18n/locales/auth-en-GB.json +20 -4
  328. package/frontend-vue/layers/dms-auth/i18n/locales/auth-fr-FR.json +20 -4
  329. package/frontend-vue/layers/dms-core/app/composables/useFieldErrors.ts +3 -2
  330. package/frontend-vue/layers/dms-core/app/types/menu.ts +15 -0
  331. package/frontend-vue/layers/dms-core/i18n/locales/core-en-GB.json +4 -1
  332. package/frontend-vue/layers/dms-core/i18n/locales/core-fr-FR.json +4 -1
  333. package/frontend-vue/layers/dms-layout/app/assets/css/main.css +20 -0
  334. package/frontend-vue/layers/dms-layout/app/build/components/layout/CommandPaletteAssistantAnswer.vue +75 -0
  335. package/frontend-vue/layers/dms-layout/app/build/components/layout/DashboardFrame.vue +22 -0
  336. package/frontend-vue/layers/dms-layout/app/build/components/layout/DashboardHeader.vue +24 -10
  337. package/frontend-vue/layers/dms-layout/app/build/components/layout/DashboardSidePanel.vue +139 -0
  338. package/frontend-vue/layers/dms-layout/app/build/components/layout/Footer.vue +4 -2
  339. package/frontend-vue/layers/dms-layout/app/build/components/layout/GithubStarPrompt.vue +90 -0
  340. package/frontend-vue/layers/dms-layout/app/build/components/layout/SidePanelHost.vue +17 -0
  341. package/frontend-vue/layers/dms-layout/app/build/components/notification/NotificationPopover.vue +25 -43
  342. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/members/MemberRolePicker.vue +24 -2
  343. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/notification/NotificationMatrixCategory.vue +70 -25
  344. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/notification/NotificationPreferencesForm.vue +25 -10
  345. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/notification/notificationDisplay.ts +41 -5
  346. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/profile/ProfilePreferencesSummary.vue +2 -1
  347. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/profile/ProfileSecuritySummary.vue +20 -4
  348. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/roles/RoleEditor.vue +21 -0
  349. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/roles/RolePermissionArea.vue +16 -2
  350. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/roles/RolePermissionBranch.vue +1 -0
  351. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/roles/RolePermissionLeaf.vue +13 -1
  352. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/roles/RolePermissionTree.vue +9 -0
  353. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/roles/RolePermissionWarning.vue +46 -0
  354. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/roles/role-permissions.ts +108 -29
  355. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/roles/role-types.ts +2 -0
  356. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/security/SecurityDialogFrame.vue +6 -6
  357. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/security/SecurityEmail.vue +7 -1
  358. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/security/SecuritySessions.vue +5 -4
  359. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/security/SecurityStatus.vue +4 -3
  360. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/security/SecurityTwoFactor.vue +54 -18
  361. package/frontend-vue/layers/dms-layout/app/build/components/pages/settings/shell/SettingsNav.vue +13 -8
  362. package/frontend-vue/layers/dms-layout/app/build/composables/command-palette/assistantGroups.ts +143 -0
  363. package/frontend-vue/layers/dms-layout/app/build/composables/command-palette/useCommandPaletteAssistantMode.ts +249 -0
  364. package/frontend-vue/layers/dms-layout/app/build/composables/general/useGithubStarPrompt.ts +178 -0
  365. package/frontend-vue/layers/dms-layout/app/build/composables/layout/sidePanelState.ts +191 -0
  366. package/frontend-vue/layers/dms-layout/app/build/composables/layout/useHeaderActionControls.ts +51 -0
  367. package/frontend-vue/layers/dms-layout/app/build/composables/layout/useSidePanelWidth.ts +113 -0
  368. package/frontend-vue/layers/dms-layout/app/build/composables/navigation/useCategoryNavCards.ts +17 -10
  369. package/frontend-vue/layers/dms-layout/app/build/composables/notification/useNotificationGroupsOpen.ts +45 -0
  370. package/frontend-vue/layers/dms-layout/app/build/composables/settings/profile/useProfilePreferences.ts +8 -1
  371. package/frontend-vue/layers/dms-layout/app/build/composables/settings/security/useSecurityOverview.ts +50 -3
  372. package/frontend-vue/layers/dms-layout/app/build/composables/settings/useSettingsNavigation.ts +3 -0
  373. package/frontend-vue/layers/dms-layout/app/build/utils/categoryPages.ts +1 -2
  374. package/frontend-vue/layers/dms-layout/app/build/utils/github-repository.ts +5 -0
  375. package/frontend-vue/layers/dms-layout/app/components/layout/DashboardSearch.vue +109 -7
  376. package/frontend-vue/layers/dms-layout/app/components/navigation/NavigationMenu.vue +19 -9
  377. package/frontend-vue/layers/dms-layout/app/composables/notification/useNotifications.ts +22 -40
  378. package/frontend-vue/layers/dms-layout/app/composables/useAppSidePanels.ts +96 -0
  379. package/frontend-vue/layers/dms-layout/app/composables/useCommandPaletteAssistant.ts +129 -0
  380. package/frontend-vue/layers/dms-layout/app/composables/useHeaderActions.ts +33 -11
  381. package/frontend-vue/layers/dms-layout/app/composables/useSidePanel.ts +41 -0
  382. package/frontend-vue/layers/dms-layout/app/pages/[...slug].vue +15 -0
  383. package/frontend-vue/layers/dms-layout/app/plugins/notification-stream.client.ts +1 -7
  384. package/frontend-vue/layers/dms-layout/app/plugins/side-panel-host.ts +13 -0
  385. package/frontend-vue/layers/dms-layout/app/types/page.ts +4 -0
  386. package/frontend-vue/layers/dms-layout/i18n/locales/layout-en-GB.json +43 -13
  387. package/frontend-vue/layers/dms-layout/i18n/locales/layout-fr-FR.json +43 -13
  388. package/frontend-vue/layers/dms-ui/app/build/components/form/FormLoadError.vue +45 -0
  389. package/frontend-vue/layers/dms-ui/app/build/components/modal/ModalEscHint.vue +28 -0
  390. package/frontend-vue/layers/dms-ui/app/build/composables/form/floatingSaveBars.ts +38 -0
  391. package/frontend-vue/layers/dms-ui/app/build/composables/form/formRecordLoad.ts +66 -0
  392. package/frontend-vue/layers/dms-ui/app/build/composables/navigation/useNavBadges.ts +50 -9
  393. package/frontend-vue/layers/dms-ui/app/build/composables/table/useTable.ts +7 -1
  394. package/frontend-vue/layers/dms-ui/app/build/composables/table-view/utils/chrome.ts +2 -2
  395. package/frontend-vue/layers/dms-ui/app/build/types/tree.ts +14 -10
  396. package/frontend-vue/layers/dms-ui/app/build/utils/navBadge.ts +12 -0
  397. package/frontend-vue/layers/dms-ui/app/build/utils/tone.ts +22 -0
  398. package/frontend-vue/layers/dms-ui/app/components/activity-feed/ActivityFeed.vue +117 -82
  399. package/frontend-vue/layers/dms-ui/app/components/blocks/NavCardGridBlock.vue +12 -1
  400. package/frontend-vue/layers/dms-ui/app/components/card/NavCard.vue +16 -1
  401. package/frontend-vue/layers/dms-ui/app/components/confirm/ConfirmModal.vue +7 -8
  402. package/frontend-vue/layers/dms-ui/app/components/form/Form.vue +28 -6
  403. package/frontend-vue/layers/dms-ui/app/components/form/components/Display.vue +5 -1
  404. package/frontend-vue/layers/dms-ui/app/components/save-bar/SaveBar.vue +4 -0
  405. package/frontend-vue/layers/dms-ui/app/components/status-pill/StatusPill.vue +7 -2
  406. package/frontend-vue/layers/dms-ui/app/components/table-view/TableView.vue +7 -2
  407. package/frontend-vue/layers/dms-ui/app/composables/form/useForm.ts +48 -34
  408. package/frontend-vue/layers/dms-ui/app/composables/table-view/types/config.ts +13 -3
  409. package/frontend-vue/layers/dms-ui/i18n/locales/ui-en-GB.json +16 -14
  410. package/frontend-vue/layers/dms-ui/i18n/locales/ui-fr-FR.json +16 -14
  411. package/frontend-vue/package.json +2 -2
  412. package/frontend-vue/pnpm-lock.yaml +5 -5
  413. package/frontend-vue/tests/activity-feed-fill-height.test.ts +107 -0
  414. package/frontend-vue/tests/category-nav-cards.test.ts +21 -13
  415. package/frontend-vue/tests/command-palette-assistant.test.ts +344 -0
  416. package/frontend-vue/tests/fixtures/dashboard-search-stub.ts +91 -0
  417. package/frontend-vue/tests/forgot-validation-resend.test.ts +234 -0
  418. package/frontend-vue/tests/form-display-options.test.ts +64 -0
  419. package/frontend-vue/tests/form-load-error.test.ts +160 -0
  420. package/frontend-vue/tests/form-saved-before-success.test.ts +110 -0
  421. package/frontend-vue/tests/github-star-prompt.test.ts +328 -0
  422. package/frontend-vue/tests/header-actions.test.ts +191 -0
  423. package/frontend-vue/tests/invites-edit-modal.test.ts +157 -0
  424. package/frontend-vue/tests/member-role-picker.test.ts +26 -0
  425. package/frontend-vue/tests/menu-hidden-page.test.ts +93 -0
  426. package/frontend-vue/tests/nav-badge-tones.test.ts +274 -0
  427. package/frontend-vue/tests/nav-card-badge.test.ts +69 -0
  428. package/frontend-vue/tests/nav-card-grid-empty-category.test.ts +163 -0
  429. package/frontend-vue/tests/notification-popover-errors.test.ts +71 -37
  430. package/frontend-vue/tests/notification-preferences-groups.test.ts +268 -0
  431. package/frontend-vue/tests/notification-tone-contract.test.ts +70 -0
  432. package/frontend-vue/tests/page-fill-height.test.ts +9 -1
  433. package/frontend-vue/tests/page-no-visible-blocks.test.ts +202 -0
  434. package/frontend-vue/tests/profile-preferences-summary.test.ts +26 -2
  435. package/frontend-vue/tests/profile-security-summary.test.ts +121 -0
  436. package/frontend-vue/tests/role-permission-tree.test.ts +102 -8
  437. package/frontend-vue/tests/role-permissions.test.ts +178 -56
  438. package/frontend-vue/tests/side-panels.test.ts +470 -0
  439. package/frontend-vue/tests/signup-invitation-link.test.ts +71 -2
  440. package/frontend-vue/tests/table-actions-column-width.test.ts +51 -1
  441. package/frontend-vue/tests/table-view-chrome.test.ts +2 -2
  442. package/frontend-vue/tests/vue-inventory.test.ts +1 -1
  443. package/package.json +2 -2
  444. package/skills/dms/REFERENCE.md +1 -1
@@ -18,7 +18,6 @@ async function registerUser(options = {}) {
18
18
  email,
19
19
  owner: options.owner,
20
20
  roles_ids: options.roles_ids,
21
- skipEmailValidation: options.skipEmailValidation ?? true,
22
21
  });
23
22
  const client = (0, http_1.createClient)();
24
23
  const response = await client.post("/api/auth/signup", {
@@ -1 +1 @@
1
- {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/test/helpers/auth.ts"],"names":[],"mappings":";;AA8BA,oCAmCC;AAED,8BAiBC;AAED,4CAIC;AAzFD,yCAA4C;AAC5C,iCAAsC;AAEtC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AACzC,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,YAAY,GAAG,IAAI,CAAC;AAoB1B,SAAS,WAAW;IAClB,OAAO,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,aAAa,CAAC;AAClF,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,UAAyB,EAAE;IAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IAEtD,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAc,EAAC;QAClC,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI;KACzD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;QACrD,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;QAClC,KAAK;QACL,QAAQ;QACR,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;QAClC,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QACvC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa;QACzC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG;KAChC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,SAAS,CAC7B,KAAa,EACb,QAAgB;IAEhB,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE3E,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,iBAAiB,QAAQ,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QACvC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa;KAC1C,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;IAC9B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC"}
1
+ {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/test/helpers/auth.ts"],"names":[],"mappings":";;AA6BA,oCAkCC;AAED,8BAiBC;AAED,4CAIC;AAvFD,yCAA4C;AAC5C,iCAAsC;AAEtC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AACzC,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,YAAY,GAAG,IAAI,CAAC;AAmB1B,SAAS,WAAW;IAClB,OAAO,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,aAAa,CAAC;AAClF,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,UAAyB,EAAE;IAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IAEtD,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAc,EAAC;QAClC,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;QACrD,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;QAClC,KAAK;QACL,QAAQ;QACR,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;QAClC,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CACvE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QACvC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa;QACzC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG;KAChC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,SAAS,CAC7B,KAAa,EACb,QAAgB;IAEhB,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE3E,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,iBAAiB,QAAQ,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY;QACvC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa;KAC1C,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;IAC9B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC"}
@@ -0,0 +1,10 @@
1
+ export interface RenderedEmail {
2
+ template: string;
3
+ props: Record<string, unknown>;
4
+ }
5
+ export declare const renderedEmails: RenderedEmail[];
6
+ export declare const emailOutage: {
7
+ isOn: boolean;
8
+ };
9
+ export declare function captureEmails(): void;
10
+ export declare function lastRenderedEmail(template: string, matches?: (props: Record<string, unknown>) => boolean): Promise<RenderedEmail | undefined>;
@@ -0,0 +1,36 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.emailOutage = exports.renderedEmails = void 0;
4
+ exports.captureEmails = captureEmails;
5
+ exports.lastRenderedEmail = lastRenderedEmail;
6
+ const interface_core_1 = require("@antelopejs/interface-core");
7
+ const html_render_1 = require("@antelopejs/interface-dms/html-render");
8
+ const interface_email_1 = require("@antelopejs/interface-email");
9
+ const POLL_INTERVAL_MS = 20;
10
+ const POLL_ATTEMPTS = 50;
11
+ exports.renderedEmails = [];
12
+ exports.emailOutage = { isOn: false };
13
+ function captureEmails() {
14
+ (0, interface_core_1.ImplementInterface)({ GenerateHtml: html_render_1.GenerateHtml }, {
15
+ GenerateHtml: async (template, props) => {
16
+ if (exports.emailOutage.isOn)
17
+ throw new Error("Email outage");
18
+ exports.renderedEmails.push({
19
+ template: template.name,
20
+ props: props,
21
+ });
22
+ return "<p>email</p>";
23
+ },
24
+ });
25
+ (0, interface_core_1.ImplementInterface)({ Send: interface_email_1.Send }, { Send: async () => ({ success: true, status: "sent" }) });
26
+ }
27
+ async function lastRenderedEmail(template, matches = () => true) {
28
+ for (let attempt = 0; attempt < POLL_ATTEMPTS; attempt++) {
29
+ const email = exports.renderedEmails.findLast((entry) => entry.template === template && matches(entry.props));
30
+ if (email)
31
+ return email;
32
+ await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));
33
+ }
34
+ return undefined;
35
+ }
36
+ //# sourceMappingURL=emails.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"emails.js","sourceRoot":"","sources":["../../../src/test/helpers/emails.ts"],"names":[],"mappings":";;;AA8BA,sCAkBC;AAGD,8CAYC;AA/DD,+DAAgE;AAChE,uEAG+C;AAC/C,iEAAmD;AAEnD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,aAAa,GAAG,EAAE,CAAC;AAOZ,QAAA,cAAc,GAAoB,EAAE,CAAC;AAQrC,QAAA,WAAW,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAO3C,SAAgB,aAAa;IAC3B,IAAA,mCAAkB,EAChB,EAAE,YAAY,EAAZ,0BAAY,EAAE,EAChB;QACE,YAAY,EAAE,KAAK,EAAE,QAAyB,EAAE,KAAc,EAAE,EAAE;YAChE,IAAI,mBAAW,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;YACtD,sBAAc,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,KAAK,EAAE,KAAgC;aACxC,CAAC,CAAC;YACH,OAAO,cAAc,CAAC;QACxB,CAAC;KACF,CACF,CAAC;IACF,IAAA,mCAAkB,EAChB,EAAE,IAAI,EAAJ,sBAAI,EAAE,EACR,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,EAAE,CACnE,CAAC;AACJ,CAAC;AAGM,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,UAAuD,GAAG,EAAE,CAAC,IAAI;IAEjE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,sBAAc,CAAC,QAAQ,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAC/D,CAAC;QACF,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
@@ -5,7 +5,6 @@ export interface UserInviteSeed {
5
5
  roles_ids?: string[];
6
6
  language?: string;
7
7
  owner?: boolean;
8
- skipEmailValidation?: boolean;
9
8
  lifetimeMs?: number;
10
9
  }
11
10
  export interface SeededUserInvite {
@@ -23,7 +23,6 @@ async function seedUserInvite(invite) {
23
23
  token,
24
24
  asTenantOwner: invite.owner ?? false,
25
25
  expiresAt: new Date(Date.now() + (invite.lifetimeMs ?? MILLISECONDS_IN_HOUR)),
26
- skipEmailValidation: invite.skipEmailValidation ?? true,
27
26
  });
28
27
  return { token, email: invite.email };
29
28
  }
@@ -40,7 +39,7 @@ async function updateUserByEmail(email, update) {
40
39
  if (!user) {
41
40
  throw new Error(`User not found: ${email}`);
42
41
  }
43
- await model.update(user._id, update);
42
+ await model.update(Object.assign(user, update));
44
43
  }
45
44
  async function seedGeneralSettings(overrides = {}) {
46
45
  const model = (0, interface_database_decorators_1.GetModel)(db_1.SystemStateModel);
@@ -1 +1 @@
1
- {"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../../src/test/helpers/fixtures.ts"],"names":[],"mappings":";;AA8BA,wCAiBC;AAED,0CAMC;AAED,8CAUC;AAUD,kDAcC;AAED,gDAMC;AAED,wDAKC;AA1GD,6CAAyC;AACzC,6FAAqE;AACrE,iCAA4C;AAC5C,mEAAwE;AACxE,gEAAsE;AAEtE,qEAAqE;AAGrE,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAqBhC,KAAK,UAAU,cAAc,CAClC,MAAsB;IAEtB,MAAM,KAAK,GAAG,IAAA,wBAAU,GAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,wBAAe,EAAE,6BAAiB,CAAC,CAAC;IAC3D,MAAM,KAAK,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QACjC,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;QACpC,SAAS,EAAE,IAAI,IAAI,CACjB,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC,CACzD;QACD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;KACxD,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACxC,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,MAAM,IAAI,GAAG,MAAM,IAAA,wCAAQ,EAAC,kBAAS,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,MAAqB;IAErB,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,kBAAS,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAUM,KAAK,UAAU,mBAAmB,CACvC,YAAiC,EAAE;IAEnC,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,qBAAgB,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;IACxC,MAAM,KAAK,CAAC,YAAY,CAAC;QAKvB,GAAG,OAAO;QACV,aAAa,EAAE,SAAS,CAAC,aAAa,IAAI,KAAK;QAC/C,SAAS,EAAE,IAAI,IAAI,EAAE;KAC6B,CAAC,CAAC;AACxD,CAAC;AAEM,KAAK,UAAU,kBAAkB;IAItC,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,qBAAgB,CAAC,CAAC,SAAS,EAAE,CAAC;IAC5D,OAAQ,MAA8C,IAAI,IAAI,CAAC;AACjE,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,IAAA,wCAAQ,EAAC,wBAAe,EAAE,6BAAiB,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5E,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AAC5D,CAAC"}
1
+ {"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../../src/test/helpers/fixtures.ts"],"names":[],"mappings":";;AA6BA,wCAgBC;AAED,0CAMC;AAED,8CAYC;AAUD,kDAcC;AAED,gDAMC;AAED,wDAKC;AA1GD,6CAAyC;AACzC,6FAAqE;AACrE,iCAA4C;AAC5C,mEAAwE;AACxE,gEAAsE;AAEtE,qEAAqE;AAGrE,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAoBhC,KAAK,UAAU,cAAc,CAClC,MAAsB;IAEtB,MAAM,KAAK,GAAG,IAAA,wBAAU,GAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,wBAAe,EAAE,6BAAiB,CAAC,CAAC;IAC3D,MAAM,KAAK,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QACjC,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;QACpC,SAAS,EAAE,IAAI,IAAI,CACjB,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC,CACzD;KACF,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACxC,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,MAAM,IAAI,GAAG,MAAM,IAAA,wCAAQ,EAAC,kBAAS,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,MAAqB;IAErB,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,kBAAS,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IAGD,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAClD,CAAC;AAUM,KAAK,UAAU,mBAAmB,CACvC,YAAiC,EAAE;IAEnC,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,qBAAgB,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;IACxC,MAAM,KAAK,CAAC,YAAY,CAAC;QAKvB,GAAG,OAAO;QACV,aAAa,EAAE,SAAS,CAAC,aAAa,IAAI,KAAK;QAC/C,SAAS,EAAE,IAAI,IAAI,EAAE;KAC6B,CAAC,CAAC;AACxD,CAAC;AAEM,KAAK,UAAU,kBAAkB;IAItC,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,qBAAgB,CAAC,CAAC,SAAS,EAAE,CAAC;IAC5D,OAAQ,MAA8C,IAAI,IAAI,CAAC;AACjE,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,IAAA,wCAAQ,EAAC,wBAAe,EAAE,6BAAiB,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5E,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AAC5D,CAAC"}
@@ -7,6 +7,7 @@ export interface PageAccessModels {
7
7
  roleModel: RoleModel;
8
8
  }
9
9
  export declare function stubPageAccessModels(grantedPermissions: string[]): PageAccessModels;
10
+ export declare function stubExactPermissionModels(permissions: string[]): PageAccessModels;
10
11
  export declare function registerTestPage(controller: ControllerClass): Promise<() => void>;
11
12
  export interface TestCategory {
12
13
  category: CategoryInfo;
@@ -1,18 +1,23 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.stubPageAccessModels = stubPageAccessModels;
4
+ exports.stubExactPermissionModels = stubExactPermissionModels;
4
5
  exports.registerTestPage = registerTestPage;
5
6
  exports.registerTestCategory = registerTestCategory;
6
7
  exports.denyingTenantGate = denyingTenantGate;
7
8
  const interface_core_1 = require("@antelopejs/interface-core");
8
9
  const page_1 = require("@antelopejs/interface-dms/page");
10
+ const permission_ids_1 = require("@antelopejs/interface-dms/internal/permission-ids");
9
11
  function stubPageAccessModels(grantedPermissions) {
12
+ return stubExactPermissionModels((0, permission_ids_1.withPermissionAncestors)(grantedPermissions));
13
+ }
14
+ function stubExactPermissionModels(permissions) {
10
15
  return {
11
16
  memberModel: {
12
17
  getByUser: async () => ({ roleIds: ["role-1"] }),
13
18
  },
14
19
  roleModel: {
15
- getBy: async () => [{ permissions: grantedPermissions }],
20
+ getBy: async () => [{ permissions }],
16
21
  },
17
22
  };
18
23
  }
@@ -1 +1 @@
1
- {"version":3,"file":"page-access.js","sourceRoot":"","sources":["../../../src/test/helpers/page-access.ts"],"names":[],"mappings":";;AA6BA,oDAWC;AAMD,4CAUC;AAYD,oDASC;AAMD,8CAaC;AA1FD,+DAAyD;AAKzD,yDAMwC;AAYxC,SAAgB,oBAAoB,CAClC,kBAA4B;IAE5B,OAAO;QACL,WAAW,EAAE;YACX,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;SACjB;QACjC,SAAS,EAAE;YACT,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;SACjC;KAC1B,CAAC;AACJ,CAAC;AAMM,KAAK,UAAU,gBAAgB,CACpC,UAA2B;IAE3B,MAAM,IAAI,GAAG,IAAA,4BAAW,EAAC,UAAU,EAAE,mBAAY,CAAC,CAAC;IACnD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,EAAE,CAAC,eAAqB,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACvE,CAAC;AAYD,SAAgB,oBAAoB,CAClC,EAAU,EACV,OAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAA,eAAQ,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,GAAG,EAAE,CAAC,eAAqB,CAAC,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC;KAC3E,CAAC;AACJ,CAAC;AAMD,SAAgB,iBAAiB,CAC/B,EAAU,EACV,cAAsB,EACtB,IAAI,GAAG,GAAG,EAAE,SAAS;IAErB,OAAO;QACL,EAAE;QACF,KAAK,EAAE,CAAC;QACR,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAC1B,QAAQ,KAAK,cAAc;YACzB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE;YAC1B,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;KACxB,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"page-access.js","sourceRoot":"","sources":["../../../src/test/helpers/page-access.ts"],"names":[],"mappings":";;AA+BA,oDAIC;AAMD,8DAWC;AAMD,4CAUC;AAYD,oDASC;AAMD,8CAaC;AAtGD,+DAAyD;AAKzD,yDAMwC;AAExC,sFAA4F;AAY5F,SAAgB,oBAAoB,CAClC,kBAA4B;IAE5B,OAAO,yBAAyB,CAAC,IAAA,wCAAuB,EAAC,kBAAkB,CAAC,CAAC,CAAC;AAChF,CAAC;AAMD,SAAgB,yBAAyB,CACvC,WAAqB;IAErB,OAAO;QACL,WAAW,EAAE;YACX,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;SACjB;QACjC,SAAS,EAAE;YACT,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;SACb;KAC1B,CAAC;AACJ,CAAC;AAMM,KAAK,UAAU,gBAAgB,CACpC,UAA2B;IAE3B,MAAM,IAAI,GAAG,IAAA,4BAAW,EAAC,UAAU,EAAE,mBAAY,CAAC,CAAC;IACnD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,EAAE,CAAC,eAAqB,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACvE,CAAC;AAYD,SAAgB,oBAAoB,CAClC,EAAU,EACV,OAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAA,eAAQ,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,GAAG,EAAE,CAAC,eAAqB,CAAC,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC;KAC3E,CAAC;AACJ,CAAC;AAMD,SAAgB,iBAAiB,CAC/B,EAAU,EACV,cAAsB,EACtB,IAAI,GAAG,GAAG,EAAE,SAAS;IAErB,OAAO;QACL,EAAE;QACF,KAAK,EAAE,CAAC;QACR,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAC1B,QAAQ,KAAK,cAAc;YACzB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE;YAC1B,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;KACxB,CAAC;AACJ,CAAC"}
@@ -0,0 +1,65 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ const chai_1 = require("chai");
4
+ const auth_1 = require("../../helpers/auth");
5
+ const db_1 = require("../../helpers/db");
6
+ const emails_1 = require("../../helpers/emails");
7
+ const SECURITY = "/settings/user/security";
8
+ const HTTP_OK = 200;
9
+ const HTTP_BAD_REQUEST = 400;
10
+ const HTTP_TOO_MANY_REQUESTS = 429;
11
+ const ATTEMPTS_PER_WINDOW = 10;
12
+ const WRONG_PASSWORD = "Not-the-password-1";
13
+ const NEW_PASSWORD = "Antelope26!";
14
+ const INVALID_CURRENT_PASSWORD = "error.invalid_current_password";
15
+ const TOO_MANY_ATTEMPTS = "error.too_many_current_password_attempts";
16
+ const EMAIL_RATE_LIMITED = "error.rate_limited";
17
+ const TEST_TIMEOUT_MS = 20 * 1000;
18
+ function expectAnswer(response, status, body) {
19
+ (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(status);
20
+ (0, chai_1.expect)(response.data).to.equal(body);
21
+ }
22
+ describe("[integration] auth/current password re-check", function () {
23
+ this.timeout(TEST_TIMEOUT_MS);
24
+ let user;
25
+ let client;
26
+ let newEmail;
27
+ const changeEmail = (currentPassword) => client.post(`${SECURITY}/email`, { email: newEmail, currentPassword });
28
+ const changePassword = (currentPassword) => client.post(`${SECURITY}/password`, {
29
+ currentPassword,
30
+ password: NEW_PASSWORD,
31
+ });
32
+ const enableTotp = (currentPassword) => client.post(`${SECURITY}/two-factor/enable-totp`, { currentPassword });
33
+ before(emails_1.captureEmails);
34
+ beforeEach(async () => {
35
+ await (0, db_1.resetDatabase)();
36
+ user = await (0, auth_1.registerUser)({ owner: true });
37
+ client = (0, auth_1.authorizedClient)(user.accessToken);
38
+ newEmail = `moved-${Date.now()}@test.local`;
39
+ });
40
+ it("refuses every re-check past 10 wrong passwords, across the forms, the right one included", async () => {
41
+ for (let attempt = 0; attempt < ATTEMPTS_PER_WINDOW / 2; attempt++) {
42
+ expectAnswer(await changeEmail(WRONG_PASSWORD), HTTP_BAD_REQUEST, INVALID_CURRENT_PASSWORD);
43
+ expectAnswer(await changePassword(WRONG_PASSWORD), HTTP_BAD_REQUEST, INVALID_CURRENT_PASSWORD);
44
+ }
45
+ for (const check of [changePassword, changeEmail, enableTotp]) {
46
+ expectAnswer(await check(user.password), HTTP_TOO_MANY_REQUESTS, TOO_MANY_ATTEMPTS);
47
+ }
48
+ });
49
+ it("forgets the wrong passwords once the right one is given", async () => {
50
+ for (let attempt = 1; attempt < ATTEMPTS_PER_WINDOW; attempt++) {
51
+ await changePassword(WRONG_PASSWORD);
52
+ }
53
+ const accepted = await enableTotp(user.password);
54
+ (0, chai_1.expect)(accepted.status, JSON.stringify(accepted.data)).to.equal(HTTP_OK);
55
+ for (let attempt = 0; attempt < ATTEMPTS_PER_WINDOW; attempt++) {
56
+ expectAnswer(await changePassword(WRONG_PASSWORD), HTTP_BAD_REQUEST, INVALID_CURRENT_PASSWORD);
57
+ }
58
+ });
59
+ it("answers the once-a-minute wait of the email change before checking the password", async () => {
60
+ const first = await changeEmail(user.password);
61
+ (0, chai_1.expect)(first.status, JSON.stringify(first.data)).to.equal(HTTP_OK);
62
+ expectAnswer(await changeEmail(WRONG_PASSWORD), HTTP_TOO_MANY_REQUESTS, EMAIL_RATE_LIMITED);
63
+ });
64
+ });
65
+ //# sourceMappingURL=current-password.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"current-password.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/current-password.test.ts"],"names":[],"mappings":";;AACA,+BAA8B;AAC9B,6CAI4B;AAC5B,yCAAiD;AACjD,iDAAqD;AAMrD,MAAM,QAAQ,GAAG,yBAAyB,CAAC;AAC3C,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAC5C,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAClE,MAAM,iBAAiB,GAAG,0CAA0C,CAAC;AACrE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAElC,SAAS,YAAY,CACnB,QAAuB,EACvB,MAAc,EACd,IAAY;IAEZ,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,QAAQ,CAAC,8CAA8C,EAAE;IACvD,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAE9B,IAAI,IAAoB,CAAC;IACzB,IAAI,MAAqB,CAAC;IAC1B,IAAI,QAAgB,CAAC;IAErB,MAAM,WAAW,GAAG,CAAC,eAAuB,EAAE,EAAE,CAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,CAAC,eAAuB,EAAE,EAAE,CACjD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,EAAE;QAClC,eAAe;QACf,QAAQ,EAAE,YAAY;KACvB,CAAC,CAAC;IACL,MAAM,UAAU,GAAG,CAAC,eAAuB,EAAE,EAAE,CAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,yBAAyB,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAGzE,MAAM,CAAC,sBAAa,CAAC,CAAC;IAEtB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,QAAQ,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,mBAAmB,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YACnE,YAAY,CACV,MAAM,WAAW,CAAC,cAAc,CAAC,EACjC,gBAAgB,EAChB,wBAAwB,CACzB,CAAC;YACF,YAAY,CACV,MAAM,cAAc,CAAC,cAAc,CAAC,EACpC,gBAAgB,EAChB,wBAAwB,CACzB,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;YAC9D,YAAY,CACV,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC1B,sBAAsB,EACtB,iBAAiB,CAClB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/D,MAAM,cAAc,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/D,YAAY,CACV,MAAM,cAAc,CAAC,cAAc,CAAC,EACpC,gBAAgB,EAChB,wBAAwB,CACzB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnE,YAAY,CACV,MAAM,WAAW,CAAC,cAAc,CAAC,EACjC,sBAAsB,EACtB,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,126 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
4
+ const db_1 = require("@antelopejs/interface-dms/auth/db");
5
+ const chai_1 = require("chai");
6
+ const auth_1 = require("../../helpers/auth");
7
+ const db_2 = require("../../helpers/db");
8
+ const http_1 = require("../../helpers/http");
9
+ const NEW_PASSWORD = "Recovered26!";
10
+ const WRONG_CODE = "000000";
11
+ const MAX_ATTEMPTS = 5;
12
+ const PARALLEL_GUESSES = 12;
13
+ const HTTP_BAD_REQUEST = 400;
14
+ const HTTP_UNAUTHORIZED = 401;
15
+ const HTTP_MULTIPLE_CHOICES = 300;
16
+ const PAST_RATE_LIMIT_MS = 2 * 60 * 1000;
17
+ async function requestCode(email) {
18
+ const response = await (0, http_1.createClient)().post("/api/auth/forgot-password", {
19
+ email,
20
+ });
21
+ (0, chai_1.expect)(response.status).to.be.below(HTTP_MULTIPLE_CHOICES);
22
+ const user = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).getByEmail(email);
23
+ (0, chai_1.expect)(user?.forgotPasswordToken).to.be.a("string");
24
+ return user?.forgotPasswordToken;
25
+ }
26
+ function validateCode(email, token) {
27
+ return (0, http_1.createClient)().post("/api/auth/validate-forgot-password-token", {
28
+ email,
29
+ token,
30
+ });
31
+ }
32
+ function resetPassword(email, token) {
33
+ return (0, http_1.createClient)().post("/api/auth/reset-password", {
34
+ email,
35
+ token,
36
+ password: NEW_PASSWORD,
37
+ });
38
+ }
39
+ async function storedCode(email) {
40
+ return (await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).getByEmail(email))?.forgotPasswordToken;
41
+ }
42
+ async function meStatus(accessToken) {
43
+ return (await (0, auth_1.authorizedClient)(accessToken).get("/api/auth/me")).status;
44
+ }
45
+ async function refreshStatus(refreshToken) {
46
+ const response = await (0, http_1.createClient)().post("/api/auth/refresh", {
47
+ token: refreshToken,
48
+ });
49
+ return response.status;
50
+ }
51
+ async function expectSignedOut(device) {
52
+ (0, chai_1.expect)(await meStatus(device.accessToken)).to.equal(HTTP_UNAUTHORIZED);
53
+ (0, chai_1.expect)(await refreshStatus(device.refreshToken)).to.equal(HTTP_UNAUTHORIZED);
54
+ }
55
+ describe("[integration] auth/password reset", () => {
56
+ let user;
57
+ beforeEach(async () => {
58
+ await (0, db_2.resetDatabase)();
59
+ user = await (0, auth_1.registerUser)();
60
+ });
61
+ it("signs out every session once the password is reset", async () => {
62
+ const otherDevice = await (0, auth_1.loginUser)(user.email, user.password);
63
+ const code = await requestCode(user.email);
64
+ const response = await resetPassword(user.email, code);
65
+ (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.be.below(HTTP_MULTIPLE_CHOICES);
66
+ await expectSignedOut(user);
67
+ await expectSignedOut(otherDevice);
68
+ (0, chai_1.expect)(await (0, interface_database_decorators_1.GetModel)(db_1.SessionModel).getByUserId(user.userId)).to.have.length(0);
69
+ const signedIn = await (0, auth_1.loginUser)(user.email, NEW_PASSWORD);
70
+ (0, chai_1.expect)(await meStatus(signedIn.accessToken)).to.be.below(HTTP_MULTIPLE_CHOICES);
71
+ });
72
+ it("accepts the code typed in lowercase", async () => {
73
+ const code = (await requestCode(user.email)).toLowerCase();
74
+ const validated = await validateCode(user.email, code);
75
+ (0, chai_1.expect)(validated.status, JSON.stringify(validated.data)).to.be.below(HTTP_MULTIPLE_CHOICES);
76
+ const reset = await resetPassword(user.email, code);
77
+ (0, chai_1.expect)(reset.status, JSON.stringify(reset.data)).to.be.below(HTTP_MULTIPLE_CHOICES);
78
+ });
79
+ describe("attempt limit", () => {
80
+ it("still takes the right code after one try fewer than the limit", async () => {
81
+ const code = await requestCode(user.email);
82
+ for (let attempt = 1; attempt < MAX_ATTEMPTS; attempt++) {
83
+ (0, chai_1.expect)((await validateCode(user.email, WRONG_CODE)).status).to.equal(HTTP_BAD_REQUEST);
84
+ }
85
+ (0, chai_1.expect)((await validateCode(user.email, code)).status).to.be.below(HTTP_MULTIPLE_CHOICES);
86
+ (0, chai_1.expect)((await resetPassword(user.email, code)).status).to.be.below(HTTP_MULTIPLE_CHOICES);
87
+ });
88
+ it("withdraws the code after too many wrong ones", async () => {
89
+ const code = await requestCode(user.email);
90
+ for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
91
+ (0, chai_1.expect)((await validateCode(user.email, WRONG_CODE)).status).to.equal(HTTP_BAD_REQUEST);
92
+ }
93
+ (0, chai_1.expect)((await validateCode(user.email, code)).status).to.equal(HTTP_BAD_REQUEST);
94
+ (0, chai_1.expect)((await resetPassword(user.email, code)).status).to.equal(HTTP_BAD_REQUEST);
95
+ (0, chai_1.expect)(await storedCode(user.email)).to.equal(null);
96
+ (0, chai_1.expect)(await (0, auth_1.loginUser)(user.email, user.password)).to.have.property("accessToken");
97
+ });
98
+ it("counts wrong codes sent at the same time against one budget", async () => {
99
+ const code = await requestCode(user.email);
100
+ await Promise.all(Array.from({ length: PARALLEL_GUESSES }, () => validateCode(user.email, WRONG_CODE)));
101
+ (0, chai_1.expect)((await resetPassword(user.email, code)).status).to.equal(HTTP_BAD_REQUEST);
102
+ });
103
+ it("lets a new code be requested once the previous one was withdrawn", async () => {
104
+ await requestCode(user.email);
105
+ for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
106
+ await validateCode(user.email, WRONG_CODE);
107
+ }
108
+ await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).update(user.userId, {
109
+ forgotPasswordRequestedAt: new Date(Date.now() - PAST_RATE_LIMIT_MS),
110
+ });
111
+ const code = await requestCode(user.email);
112
+ (0, chai_1.expect)((await resetPassword(user.email, code)).status).to.be.below(HTTP_MULTIPLE_CHOICES);
113
+ });
114
+ it("refuses a withdrawn code as it refuses an unknown address", async () => {
115
+ await requestCode(user.email);
116
+ for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
117
+ await validateCode(user.email, WRONG_CODE);
118
+ }
119
+ const withdrawn = await validateCode(user.email, WRONG_CODE);
120
+ const unknown = await validateCode("nobody@test.local", WRONG_CODE);
121
+ (0, chai_1.expect)(withdrawn.status).to.equal(unknown.status);
122
+ (0, chai_1.expect)(withdrawn.data).to.deep.equal(unknown.data);
123
+ });
124
+ });
125
+ });
126
+ //# sourceMappingURL=password-reset.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"password-reset.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/password-reset.test.ts"],"names":[],"mappings":";;AAAA,6FAAqE;AACrE,0DAA4E;AAC5E,+BAA8B;AAC9B,6CAK4B;AAC5B,yCAAiD;AACjD,6CAAkD;AAMlD,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,MAAM,UAAU,GAAG,QAAQ,CAAC;AAC5B,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAOzC,KAAK,UAAU,WAAW,CAAC,KAAa;IACtC,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE;QACtE,KAAK;KACN,CAAC,CAAC;IACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzD,IAAA,aAAM,EAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO,IAAI,EAAE,mBAA6B,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,OAAO,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,0CAA0C,EAAE;QACrE,KAAK;QACL,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa;IACjD,OAAO,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;QACrD,KAAK;QACL,KAAK;QACL,QAAQ,EAAE,YAAY;KACvB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAa;IACrC,OAAO,CAAC,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,WAAmB;IACzC,OAAO,CAAC,MAAM,IAAA,uBAAgB,EAAC,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,YAAoB;IAC/C,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE;QAC9D,KAAK,EAAE,YAAY;KACpB,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAiB;IAC9C,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACvE,IAAA,aAAM,EAAC,MAAM,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAC/E,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,IAAI,IAAoB,CAAC;IAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,WAAW,GAAG,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE3C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvD,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAChE,qBAAqB,CACtB,CAAC;QAEF,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACnC,IAAA,aAAM,EACJ,MAAM,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CACtD,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CACtD,qBAAqB,CACtB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAE3D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvD,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAClE,qBAAqB,CACtB,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpD,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAC1D,qBAAqB,CACtB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,IAAA,aAAM,EAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAClE,gBAAgB,CACjB,CAAC;YACJ,CAAC;YAED,IAAA,aAAM,EAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAC/D,qBAAqB,CACtB,CAAC;YACF,IAAA,aAAM,EAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAChE,qBAAqB,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,IAAA,aAAM,EAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAClE,gBAAgB,CACjB,CAAC;YACJ,CAAC;YAED,IAAA,aAAM,EAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAC5D,gBAAgB,CACjB,CAAC;YACF,IAAA,aAAM,EAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAC7D,gBAAgB,CACjB,CAAC;YACF,IAAA,aAAM,EAAC,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,IAAA,aAAM,EAAC,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CACjE,aAAa,CACd,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAC5C,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CACrC,CACF,CAAC;YAEF,IAAA,aAAM,EAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAC7D,gBAAgB,CACjB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC5C,yBAAyB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC;aACrE,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAA,aAAM,EAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAChE,qBAAqB,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;YACpE,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClD,IAAA,aAAM,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,45 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ const chai_1 = require("chai");
4
+ const auth_1 = require("../../helpers/auth");
5
+ const db_1 = require("../../helpers/db");
6
+ const SESSIONS_URL = "/settings/user/security/sessions";
7
+ const LOGOUT_URL = "/api/auth/logout";
8
+ const ME_URL = "/api/auth/me";
9
+ const HTTP_OK = 200;
10
+ const HTTP_NO_CONTENT = 204;
11
+ const HTTP_UNAUTHORIZED = 401;
12
+ async function meStatus(accessToken) {
13
+ return (await (0, auth_1.authorizedClient)(accessToken).get(ME_URL)).status;
14
+ }
15
+ async function currentSessionId(accessToken) {
16
+ const response = await (0, auth_1.authorizedClient)(accessToken).get(SESSIONS_URL);
17
+ (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
18
+ const current = response.data.find((entry) => entry.isCurrent);
19
+ if (!current)
20
+ throw new Error("No current session listed");
21
+ return current._id;
22
+ }
23
+ describe("[integration] auth/session revocation", () => {
24
+ let user;
25
+ let otherDevice;
26
+ beforeEach(async () => {
27
+ await (0, db_1.resetDatabase)();
28
+ user = await (0, auth_1.registerUser)({ owner: true });
29
+ otherDevice = await (0, auth_1.loginUser)(user.email, user.password);
30
+ });
31
+ it("cuts off a session signed out from the Security page", async () => {
32
+ const otherSessionId = await currentSessionId(otherDevice.accessToken);
33
+ const response = await (0, auth_1.authorizedClient)(user.accessToken).delete(`${SESSIONS_URL}/${otherSessionId}`);
34
+ (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
35
+ (0, chai_1.expect)(await meStatus(otherDevice.accessToken)).to.equal(HTTP_UNAUTHORIZED);
36
+ (0, chai_1.expect)(await meStatus(user.accessToken)).to.equal(HTTP_OK);
37
+ });
38
+ it("cuts off a logged-out session, a copied token included", async () => {
39
+ const response = await (0, auth_1.authorizedClient)(otherDevice.accessToken).post(LOGOUT_URL, { token: otherDevice.refreshToken });
40
+ (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_NO_CONTENT);
41
+ (0, chai_1.expect)(await meStatus(otherDevice.accessToken)).to.equal(HTTP_UNAUTHORIZED);
42
+ (0, chai_1.expect)(await meStatus(user.accessToken)).to.equal(HTTP_OK);
43
+ });
44
+ });
45
+ //# sourceMappingURL=session-revocation.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"session-revocation.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/session-revocation.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,6CAK4B;AAC5B,yCAAiD;AAMjD,MAAM,YAAY,GAAG,kCAAkC,CAAC;AACxD,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,MAAM,MAAM,GAAG,cAAc,CAAC;AAC9B,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAY9B,KAAK,UAAU,QAAQ,CAAC,WAAmB;IACzC,OAAO,CAAC,MAAM,IAAA,uBAAgB,EAAC,WAAW,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACjD,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAgB,EAAC,WAAW,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,OAAO,GAAI,QAAQ,CAAC,IAAuB,CAAC,IAAI,CACpD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAC3B,CAAC;IACF,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,GAAG,CAAC;AACrB,CAAC;AAED,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAI,IAAoB,CAAC;IACzB,IAAI,WAAsB,CAAC;IAE3B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,WAAW,GAAG,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAC9D,GAAG,YAAY,IAAI,cAAc,EAAE,CACpC,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEzE,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC5E,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAgB,EAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,CACnE,UAAU,EACV,EAAE,KAAK,EAAE,WAAW,CAAC,YAAY,EAAE,CACpC,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC7D,eAAe,CAChB,CAAC;QAEF,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC5E,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}