@antelopejs/dms 0.9.2 → 0.9.3

package/dist/test/integration/auth/current-password.test.js

@@ -1,66 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const chai_1 = require("chai");
-const auth_1 = require("../../helpers/auth");
-const db_1 = require("../../helpers/db");
-const emails_1 = require("../../helpers/emails");
-const page_1 = require("@antelopejs/interface-dms/page");
-const SECURITY = (0, page_1.pageRoutePath)("/settings/user/security");
-const HTTP_OK = 200;
-const HTTP_BAD_REQUEST = 400;
-const HTTP_TOO_MANY_REQUESTS = 429;
-const ATTEMPTS_PER_WINDOW = 10;
-const WRONG_PASSWORD = "Not-the-password-1";
-const NEW_PASSWORD = "Antelope26!";
-const INVALID_CURRENT_PASSWORD = "error.invalid_current_password";
-const TOO_MANY_ATTEMPTS = "error.too_many_current_password_attempts";
-const EMAIL_RATE_LIMITED = "error.rate_limited";
-const TEST_TIMEOUT_MS = 20 * 1000;
-function expectAnswer(response, status, body) {
-    (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(status);
-    (0, chai_1.expect)(response.data).to.equal(body);
-}
-describe("[integration] auth/current password re-check", function () {
-    this.timeout(TEST_TIMEOUT_MS);
-    let user;
-    let client;
-    let newEmail;
-    const changeEmail = (currentPassword) => client.post(`${SECURITY}/email`, { email: newEmail, currentPassword });
-    const changePassword = (currentPassword) => client.post(`${SECURITY}/password`, {
-        currentPassword,
-        password: NEW_PASSWORD,
-    });
-    const enableTotp = (currentPassword) => client.post(`${SECURITY}/two-factor/enable-totp`, { currentPassword });
-    before(emails_1.captureEmails);
-    beforeEach(async () => {
-        await (0, db_1.resetDatabase)();
-        user = await (0, auth_1.registerUser)({ owner: true });
-        client = (0, auth_1.authorizedClient)(user.accessToken);
-        newEmail = `moved-${Date.now()}@test.local`;
-    });
-    it("refuses every re-check past 10 wrong passwords, across the forms, the right one included", async () => {
-        for (let attempt = 0; attempt < ATTEMPTS_PER_WINDOW / 2; attempt++) {
-            expectAnswer(await changeEmail(WRONG_PASSWORD), HTTP_BAD_REQUEST, INVALID_CURRENT_PASSWORD);
-            expectAnswer(await changePassword(WRONG_PASSWORD), HTTP_BAD_REQUEST, INVALID_CURRENT_PASSWORD);
-        }
-        for (const check of [changePassword, changeEmail, enableTotp]) {
-            expectAnswer(await check(user.password), HTTP_TOO_MANY_REQUESTS, TOO_MANY_ATTEMPTS);
-        }
-    });
-    it("forgets the wrong passwords once the right one is given", async () => {
-        for (let attempt = 1; attempt < ATTEMPTS_PER_WINDOW; attempt++) {
-            await changePassword(WRONG_PASSWORD);
-        }
-        const accepted = await enableTotp(user.password);
-        (0, chai_1.expect)(accepted.status, JSON.stringify(accepted.data)).to.equal(HTTP_OK);
-        for (let attempt = 0; attempt < ATTEMPTS_PER_WINDOW; attempt++) {
-            expectAnswer(await changePassword(WRONG_PASSWORD), HTTP_BAD_REQUEST, INVALID_CURRENT_PASSWORD);
-        }
-    });
-    it("answers the once-a-minute wait of the email change before checking the password", async () => {
-        const first = await changeEmail(user.password);
-        (0, chai_1.expect)(first.status, JSON.stringify(first.data)).to.equal(HTTP_OK);
-        expectAnswer(await changeEmail(WRONG_PASSWORD), HTTP_TOO_MANY_REQUESTS, EMAIL_RATE_LIMITED);
-    });
-});
-//# sourceMappingURL=current-password.test.js.map

package/dist/test/integration/auth/current-password.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"current-password.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/current-password.test.ts"],"names":[],"mappings":";;AACA,+BAA8B;AAC9B,6CAI4B;AAC5B,yCAAiD;AACjD,iDAAqD;AACrD,yDAA+D;AAM/D,MAAM,QAAQ,GAAG,IAAA,oBAAa,EAAC,yBAAyB,CAAC,CAAC;AAC1D,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAC5C,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAClE,MAAM,iBAAiB,GAAG,0CAA0C,CAAC;AACrE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAElC,SAAS,YAAY,CACnB,QAAuB,EACvB,MAAc,EACd,IAAY;IAEZ,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxE,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,QAAQ,CAAC,8CAA8C,EAAE;IACvD,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAE9B,IAAI,IAAoB,CAAC;IACzB,IAAI,MAAqB,CAAC;IAC1B,IAAI,QAAgB,CAAC;IAErB,MAAM,WAAW,GAAG,CAAC,eAAuB,EAAE,EAAE,CAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,CAAC,eAAuB,EAAE,EAAE,CACjD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,EAAE;QAClC,eAAe;QACf,QAAQ,EAAE,YAAY;KACvB,CAAC,CAAC;IACL,MAAM,UAAU,GAAG,CAAC,eAAuB,EAAE,EAAE,CAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,yBAAyB,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAGzE,MAAM,CAAC,sBAAa,CAAC,CAAC;IAEtB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,QAAQ,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,mBAAmB,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YACnE,YAAY,CACV,MAAM,WAAW,CAAC,cAAc,CAAC,EACjC,gBAAgB,EAChB,wBAAwB,CACzB,CAAC;YACF,YAAY,CACV,MAAM,cAAc,CAAC,cAAc,CAAC,EACpC,gBAAgB,EAChB,wBAAwB,CACzB,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;YAC9D,YAAY,CACV,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC1B,sBAAsB,EACtB,iBAAiB,CAClB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/D,MAAM,cAAc,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC/D,YAAY,CACV,MAAM,cAAc,CAAC,cAAc,CAAC,EACpC,gBAAgB,EAChB,wBAAwB,CACzB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnE,YAAY,CACV,MAAM,WAAW,CAAC,cAAc,CAAC,EACjC,sBAAsB,EACtB,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/login-throttle.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/test/integration/auth/login-throttle.test.js

@@ -1,88 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
-const chai_1 = require("chai");
-const config_1 = require("../../../config");
-const signInAttempts_model_1 = require("../../../db/models/signInAttempts.model");
-const auth_1 = require("../../helpers/auth");
-const db_1 = require("../../helpers/db");
-const http_1 = require("../../helpers/http");
-const HTTP_OK = 200;
-const HTTP_UNAUTHORIZED = 401;
-const HTTP_TOO_MANY_REQUESTS = 429;
-const FAILURES_PER_ACCOUNT = 10;
-const FAILURES_PER_CLIENT = 50;
-const WRONG_PASSWORD = "Wrong-password-1";
-const STORED_FAILURES = 30;
-const BURST_THRESHOLD = 5;
-const WINDOW_MS = 15 * 60 * 1000;
-let counter = 0;
-const next = () => (counter += 1);
-const freshEmail = () => `throttle-${Date.now()}-${next()}@test.local`;
-const freshClient = () => `203.0.113.${next()}`;
-async function signIn(email, password, client) {
-    const response = await (0, http_1.createClient)().post("/api/auth/login", { email, password }, { headers: { "x-forwarded-for": client } });
-    return response.status;
-}
-describe("[integration] auth/login throttle", () => {
-    let previousProxies;
-    let client;
-    before(() => {
-        previousProxies = (0, config_1.getAuthConfig)().trustedProxies;
-        (0, config_1.getAuthConfig)().trustedProxies = 1;
-    });
-    after(() => {
-        (0, config_1.getAuthConfig)().trustedProxies = previousProxies;
-    });
-    beforeEach(async () => {
-        await (0, db_1.resetDatabase)();
-        client = freshClient();
-    });
-    it("refuses an account its right password after too many wrong ones", async () => {
-        const user = await (0, auth_1.registerUser)();
-        for (let attempt = 0; attempt < FAILURES_PER_ACCOUNT; attempt++) {
-            (0, chai_1.expect)(await signIn(user.email, WRONG_PASSWORD, client)).to.equal(HTTP_UNAUTHORIZED);
-        }
-        (0, chai_1.expect)(await signIn(user.email, user.password, client)).to.equal(HTTP_TOO_MANY_REQUESTS);
-    });
-    it("throttles an unknown address the same, telling nothing of its existence", async () => {
-        const email = freshEmail();
-        for (let attempt = 0; attempt < FAILURES_PER_ACCOUNT; attempt++) {
-            (0, chai_1.expect)(await signIn(email, WRONG_PASSWORD, client)).to.equal(HTTP_UNAUTHORIZED);
-        }
-        (0, chai_1.expect)(await signIn(email, WRONG_PASSWORD, client)).to.equal(HTTP_TOO_MANY_REQUESTS);
-    });
-    it("forgets an account's failures once it signs in", async () => {
-        const user = await (0, auth_1.registerUser)();
-        for (let attempt = 0; attempt < FAILURES_PER_ACCOUNT - 1; attempt++) {
-            await signIn(user.email, WRONG_PASSWORD, client);
-        }
-        (0, chai_1.expect)(await signIn(user.email, user.password, client)).to.equal(HTTP_OK);
-        (0, chai_1.expect)(await signIn(user.email, WRONG_PASSWORD, client)).to.equal(HTTP_UNAUTHORIZED);
-    });
-    describe("per client address", () => {
-        it("refuses a client that failed too often, whichever accounts it tried", async () => {
-            for (let attempt = 0; attempt < FAILURES_PER_CLIENT; attempt++) {
-                await signIn(freshEmail(), WRONG_PASSWORD, client);
-            }
-            const user = await (0, auth_1.registerUser)();
-            (0, chai_1.expect)(await signIn(user.email, user.password, client)).to.equal(HTTP_TOO_MANY_REQUESTS);
-            (0, chai_1.expect)(await signIn(user.email, user.password, freshClient())).to.equal(HTTP_OK);
-        });
-    });
-    it("reads a bounded burst however many failures are stored", async () => {
-        const user = await (0, auth_1.registerUser)();
-        const attempts = (0, interface_database_decorators_1.GetModel)(signInAttempts_model_1.SignInAttemptsModel);
-        const now = new Date();
-        for (let stored = 0; stored < STORED_FAILURES; stored++) {
-            await attempts.recordFailure(user.userId, now);
-        }
-        const since = new Date(now.getTime() - WINDOW_MS);
-        (0, chai_1.expect)(await attempts.listBurst(user.userId, since, BURST_THRESHOLD)).to.have.length(BURST_THRESHOLD);
-        await attempts.claimAlert(user.userId, "burst", now);
-        const burst = await attempts.listBurst(user.userId, since, BURST_THRESHOLD);
-        (0, chai_1.expect)(burst.filter((row) => row.kind === "alerted")).to.have.length(1);
-        (0, chai_1.expect)(burst).to.have.length(BURST_THRESHOLD + 1);
-    });
-});
-//# sourceMappingURL=login-throttle.test.js.map

package/dist/test/integration/auth/login-throttle.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login-throttle.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/login-throttle.test.ts"],"names":[],"mappings":";;AAAA,6FAAqE;AACrE,+BAA8B;AAC9B,4CAAgD;AAChD,kFAA8E;AAC9E,6CAAkD;AAClD,yCAAiD;AACjD,6CAAkD;AAOlD,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAC1C,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjC,IAAI,OAAO,GAAG,CAAC,CAAC;AAChB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;AAClC,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,aAAa,CAAC;AACvE,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;AAEhD,KAAK,UAAU,MAAM,CAAC,KAAa,EAAE,QAAgB,EAAE,MAAc;IACnE,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CACxC,iBAAiB,EACjB,EAAE,KAAK,EAAE,QAAQ,EAAE,EACnB,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,CAC3C,CAAC;IACF,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,IAAI,eAAmC,CAAC;IACxC,IAAI,MAAc,CAAC;IAEnB,MAAM,CAAC,GAAG,EAAE;QACV,eAAe,GAAG,IAAA,sBAAa,GAAE,CAAC,cAAc,CAAC;QACjD,IAAA,sBAAa,GAAE,CAAC,cAAc,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,IAAA,sBAAa,GAAE,CAAC,cAAc,GAAG,eAAe,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,MAAM,GAAG,WAAW,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAClC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,EAAE,OAAO,EAAE,EAAE,CAAC;YAChE,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC9D,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,EAAE,OAAO,EAAE,EAAE,CAAC;YAChE,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC1D,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC1D,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAClC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YACpE,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QACD,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,iBAAiB,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC/D,MAAM,MAAM,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;YAClC,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC9D,sBAAsB,CACvB,CAAC;YACF,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CACrE,OAAO,CACR,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAA,wCAAQ,EAAC,0CAAmB,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,eAAe,EAAE,MAAM,EAAE,EAAE,CAAC;YACxD,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC;QAClD,IAAA,aAAM,EACJ,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,CAC9D,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAClC,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;QAC5E,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxE,IAAA,aAAM,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/password-reset.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/test/integration/auth/password-reset.test.js

@@ -1,126 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
-const db_1 = require("@antelopejs/interface-dms/auth/db");
-const chai_1 = require("chai");
-const auth_1 = require("../../helpers/auth");
-const db_2 = require("../../helpers/db");
-const http_1 = require("../../helpers/http");
-const NEW_PASSWORD = "Recovered26!";
-const WRONG_CODE = "000000";
-const MAX_ATTEMPTS = 5;
-const PARALLEL_GUESSES = 12;
-const HTTP_BAD_REQUEST = 400;
-const HTTP_UNAUTHORIZED = 401;
-const HTTP_MULTIPLE_CHOICES = 300;
-const PAST_RATE_LIMIT_MS = 2 * 60 * 1000;
-async function requestCode(email) {
-    const response = await (0, http_1.createClient)().post("/api/auth/forgot-password", {
-        email,
-    });
-    (0, chai_1.expect)(response.status).to.be.below(HTTP_MULTIPLE_CHOICES);
-    const user = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).getByEmail(email);
-    (0, chai_1.expect)(user?.forgotPasswordToken).to.be.a("string");
-    return user?.forgotPasswordToken;
-}
-function validateCode(email, token) {
-    return (0, http_1.createClient)().post("/api/auth/validate-forgot-password-token", {
-        email,
-        token,
-    });
-}
-function resetPassword(email, token) {
-    return (0, http_1.createClient)().post("/api/auth/reset-password", {
-        email,
-        token,
-        password: NEW_PASSWORD,
-    });
-}
-async function storedCode(email) {
-    return (await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).getByEmail(email))?.forgotPasswordToken;
-}
-async function meStatus(accessToken) {
-    return (await (0, auth_1.authorizedClient)(accessToken).get("/api/auth/me")).status;
-}
-async function refreshStatus(refreshToken) {
-    const response = await (0, http_1.createClient)().post("/api/auth/refresh", {
-        token: refreshToken,
-    });
-    return response.status;
-}
-async function expectSignedOut(device) {
-    (0, chai_1.expect)(await meStatus(device.accessToken)).to.equal(HTTP_UNAUTHORIZED);
-    (0, chai_1.expect)(await refreshStatus(device.refreshToken)).to.equal(HTTP_UNAUTHORIZED);
-}
-describe("[integration] auth/password reset", () => {
-    let user;
-    beforeEach(async () => {
-        await (0, db_2.resetDatabase)();
-        user = await (0, auth_1.registerUser)();
-    });
-    it("signs out every session once the password is reset", async () => {
-        const otherDevice = await (0, auth_1.loginUser)(user.email, user.password);
-        const code = await requestCode(user.email);
-        const response = await resetPassword(user.email, code);
-        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.be.below(HTTP_MULTIPLE_CHOICES);
-        await expectSignedOut(user);
-        await expectSignedOut(otherDevice);
-        (0, chai_1.expect)(await (0, interface_database_decorators_1.GetModel)(db_1.SessionModel).getByUserId(user.userId)).to.have.length(0);
-        const signedIn = await (0, auth_1.loginUser)(user.email, NEW_PASSWORD);
-        (0, chai_1.expect)(await meStatus(signedIn.accessToken)).to.be.below(HTTP_MULTIPLE_CHOICES);
-    });
-    it("accepts the code typed in lowercase", async () => {
-        const code = (await requestCode(user.email)).toLowerCase();
-        const validated = await validateCode(user.email, code);
-        (0, chai_1.expect)(validated.status, JSON.stringify(validated.data)).to.be.below(HTTP_MULTIPLE_CHOICES);
-        const reset = await resetPassword(user.email, code);
-        (0, chai_1.expect)(reset.status, JSON.stringify(reset.data)).to.be.below(HTTP_MULTIPLE_CHOICES);
-    });
-    describe("attempt limit", () => {
-        it("still takes the right code after one try fewer than the limit", async () => {
-            const code = await requestCode(user.email);
-            for (let attempt = 1; attempt < MAX_ATTEMPTS; attempt++) {
-                (0, chai_1.expect)((await validateCode(user.email, WRONG_CODE)).status).to.equal(HTTP_BAD_REQUEST);
-            }
-            (0, chai_1.expect)((await validateCode(user.email, code)).status).to.be.below(HTTP_MULTIPLE_CHOICES);
-            (0, chai_1.expect)((await resetPassword(user.email, code)).status).to.be.below(HTTP_MULTIPLE_CHOICES);
-        });
-        it("withdraws the code after too many wrong ones", async () => {
-            const code = await requestCode(user.email);
-            for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
-                (0, chai_1.expect)((await validateCode(user.email, WRONG_CODE)).status).to.equal(HTTP_BAD_REQUEST);
-            }
-            (0, chai_1.expect)((await validateCode(user.email, code)).status).to.equal(HTTP_BAD_REQUEST);
-            (0, chai_1.expect)((await resetPassword(user.email, code)).status).to.equal(HTTP_BAD_REQUEST);
-            (0, chai_1.expect)(await storedCode(user.email)).to.equal(null);
-            (0, chai_1.expect)(await (0, auth_1.loginUser)(user.email, user.password)).to.have.property("accessToken");
-        });
-        it("counts wrong codes sent at the same time against one budget", async () => {
-            const code = await requestCode(user.email);
-            await Promise.all(Array.from({ length: PARALLEL_GUESSES }, () => validateCode(user.email, WRONG_CODE)));
-            (0, chai_1.expect)((await resetPassword(user.email, code)).status).to.equal(HTTP_BAD_REQUEST);
-        });
-        it("lets a new code be requested once the previous one was withdrawn", async () => {
-            await requestCode(user.email);
-            for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
-                await validateCode(user.email, WRONG_CODE);
-            }
-            await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).update(user.userId, {
-                forgotPasswordRequestedAt: new Date(Date.now() - PAST_RATE_LIMIT_MS),
-            });
-            const code = await requestCode(user.email);
-            (0, chai_1.expect)((await resetPassword(user.email, code)).status).to.be.below(HTTP_MULTIPLE_CHOICES);
-        });
-        it("refuses a withdrawn code as it refuses an unknown address", async () => {
-            await requestCode(user.email);
-            for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
-                await validateCode(user.email, WRONG_CODE);
-            }
-            const withdrawn = await validateCode(user.email, WRONG_CODE);
-            const unknown = await validateCode("nobody@test.local", WRONG_CODE);
-            (0, chai_1.expect)(withdrawn.status).to.equal(unknown.status);
-            (0, chai_1.expect)(withdrawn.data).to.deep.equal(unknown.data);
-        });
-    });
-});
-//# sourceMappingURL=password-reset.test.js.map

package/dist/test/integration/auth/password-reset.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password-reset.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/password-reset.test.ts"],"names":[],"mappings":";;AAAA,6FAAqE;AACrE,0DAA4E;AAC5E,+BAA8B;AAC9B,6CAK4B;AAC5B,yCAAiD;AACjD,6CAAkD;AAMlD,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,MAAM,UAAU,GAAG,QAAQ,CAAC;AAC5B,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAOzC,KAAK,UAAU,WAAW,CAAC,KAAa;IACtC,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE;QACtE,KAAK;KACN,CAAC,CAAC;IACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzD,IAAA,aAAM,EAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO,IAAI,EAAE,mBAA6B,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,OAAO,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,0CAA0C,EAAE;QACrE,KAAK;QACL,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa;IACjD,OAAO,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE;QACrD,KAAK;QACL,KAAK;QACL,QAAQ,EAAE,YAAY;KACvB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAa;IACrC,OAAO,CAAC,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,WAAmB;IACzC,OAAO,CAAC,MAAM,IAAA,uBAAgB,EAAC,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,YAAoB;IAC/C,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE;QAC9D,KAAK,EAAE,YAAY;KACpB,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAiB;IAC9C,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACvE,IAAA,aAAM,EAAC,MAAM,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AAC/E,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,IAAI,IAAoB,CAAC;IAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,WAAW,GAAG,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE3C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvD,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAChE,qBAAqB,CACtB,CAAC;QAEF,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;QACnC,IAAA,aAAM,EACJ,MAAM,IAAA,wCAAQ,EAAC,iBAAY,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CACtD,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CACtD,qBAAqB,CACtB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,IAAI,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAE3D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvD,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAClE,qBAAqB,CACtB,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpD,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAC1D,qBAAqB,CACtB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,IAAA,aAAM,EAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAClE,gBAAgB,CACjB,CAAC;YACJ,CAAC;YAED,IAAA,aAAM,EAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAC/D,qBAAqB,CACtB,CAAC;YACF,IAAA,aAAM,EAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAChE,qBAAqB,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,IAAA,aAAM,EAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAClE,gBAAgB,CACjB,CAAC;YACJ,CAAC;YAED,IAAA,aAAM,EAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAC5D,gBAAgB,CACjB,CAAC;YACF,IAAA,aAAM,EAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAC7D,gBAAgB,CACjB,CAAC;YACF,IAAA,aAAM,EAAC,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,IAAA,aAAM,EAAC,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CACjE,aAAa,CACd,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAC5C,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CACrC,CACF,CAAC;YAEF,IAAA,aAAM,EAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAC7D,gBAAgB,CACjB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC5C,yBAAyB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC;aACrE,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAA,aAAM,EAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAChE,qBAAqB,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxD,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;YACpE,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClD,IAAA,aAAM,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/session-revocation.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/test/integration/auth/session-revocation.test.js

@@ -1,46 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const chai_1 = require("chai");
-const auth_1 = require("../../helpers/auth");
-const db_1 = require("../../helpers/db");
-const page_1 = require("@antelopejs/interface-dms/page");
-const SESSIONS_URL = (0, page_1.pageRoutePath)("/settings/user/security", "/sessions");
-const LOGOUT_URL = "/api/auth/logout";
-const ME_URL = "/api/auth/me";
-const HTTP_OK = 200;
-const HTTP_NO_CONTENT = 204;
-const HTTP_UNAUTHORIZED = 401;
-async function meStatus(accessToken) {
-    return (await (0, auth_1.authorizedClient)(accessToken).get(ME_URL)).status;
-}
-async function currentSessionId(accessToken) {
-    const response = await (0, auth_1.authorizedClient)(accessToken).get(SESSIONS_URL);
-    (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
-    const current = response.data.find((entry) => entry.isCurrent);
-    if (!current)
-        throw new Error("No current session listed");
-    return current._id;
-}
-describe("[integration] auth/session revocation", () => {
-    let user;
-    let otherDevice;
-    beforeEach(async () => {
-        await (0, db_1.resetDatabase)();
-        user = await (0, auth_1.registerUser)({ owner: true });
-        otherDevice = await (0, auth_1.loginUser)(user.email, user.password);
-    });
-    it("cuts off a session signed out from the Security page", async () => {
-        const otherSessionId = await currentSessionId(otherDevice.accessToken);
-        const response = await (0, auth_1.authorizedClient)(user.accessToken).delete(`${SESSIONS_URL}/${otherSessionId}`);
-        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
-        (0, chai_1.expect)(await meStatus(otherDevice.accessToken)).to.equal(HTTP_UNAUTHORIZED);
-        (0, chai_1.expect)(await meStatus(user.accessToken)).to.equal(HTTP_OK);
-    });
-    it("cuts off a logged-out session, a copied token included", async () => {
-        const response = await (0, auth_1.authorizedClient)(otherDevice.accessToken).post(LOGOUT_URL, { token: otherDevice.refreshToken });
-        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_NO_CONTENT);
-        (0, chai_1.expect)(await meStatus(otherDevice.accessToken)).to.equal(HTTP_UNAUTHORIZED);
-        (0, chai_1.expect)(await meStatus(user.accessToken)).to.equal(HTTP_OK);
-    });
-});
-//# sourceMappingURL=session-revocation.test.js.map

package/dist/test/integration/auth/session-revocation.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-revocation.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/session-revocation.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,6CAK4B;AAC5B,yCAAiD;AACjD,yDAA+D;AAM/D,MAAM,YAAY,GAAG,IAAA,oBAAa,EAAC,yBAAyB,EAAE,WAAW,CAAC,CAAC;AAC3E,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,MAAM,MAAM,GAAG,cAAc,CAAC;AAC9B,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAY9B,KAAK,UAAU,QAAQ,CAAC,WAAmB;IACzC,OAAO,CAAC,MAAM,IAAA,uBAAgB,EAAC,WAAW,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACjD,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAgB,EAAC,WAAW,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,OAAO,GAAI,QAAQ,CAAC,IAAuB,CAAC,IAAI,CACpD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAC3B,CAAC;IACF,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,GAAG,CAAC;AACrB,CAAC;AAED,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,IAAI,IAAoB,CAAC;IACzB,IAAI,WAAsB,CAAC;IAE3B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,WAAW,GAAG,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAEvE,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAC9D,GAAG,YAAY,IAAI,cAAc,EAAE,CACpC,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEzE,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC5E,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAA,uBAAgB,EAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,CACnE,UAAU,EACV,EAAE,KAAK,EAAE,WAAW,CAAC,YAAY,EAAE,CACpC,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC7D,eAAe,CAChB,CAAC;QAEF,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC5E,IAAA,aAAM,EAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/sign-in-country.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/test/integration/auth/sign-in-country.test.js

@@ -1,76 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const chai_1 = require("chai");
-const config_1 = require("../../../config");
-const sign_in_country_1 = require("../../../utils/sign-in-country");
-const auth_1 = require("../../helpers/auth");
-const db_1 = require("../../helpers/db");
-const http_1 = require("../../helpers/http");
-const page_1 = require("@antelopejs/interface-dms/page");
-const COUNTRY_HEADER = "CF-IPCountry";
-const CHROME_ON_WINDOWS = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36";
-const NEW_LOGIN_TITLE = "$dms.notifications.messages.new_login.title_browser_os";
-const HTTP_OK = 200;
-const POLL_INTERVAL_MS = 50;
-const POLL_ATTEMPTS = 40;
-const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-describe("[integration] auth/sign-in country", () => {
-    let previous;
-    let email;
-    let password;
-    let owner;
-    const signIn = async (country) => {
-        const response = await (0, http_1.createClient)().post("/api/auth/login", { email, password }, {
-            headers: {
-                "user-agent": CHROME_ON_WINDOWS,
-                [COUNTRY_HEADER]: country,
-            },
-        });
-        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
-    };
-    const newSignInNotices = async () => {
-        const response = await owner.get((0, page_1.pageRoutePath)("/settings/user/notifications", "/list"));
-        (0, chai_1.expect)(response.status).to.equal(HTTP_OK);
-        return response.data.filter((notification) => notification.title === NEW_LOGIN_TITLE);
-    };
-    const waitForNotices = async (count) => {
-        for (let attempt = 0; attempt < POLL_ATTEMPTS; attempt++) {
-            const notices = await newSignInNotices();
-            if (notices.length >= count)
-                return notices;
-            await delay(POLL_INTERVAL_MS);
-        }
-        return newSignInNotices();
-    };
-    before(async () => {
-        previous = (0, config_1.getAuthConfig)().signInCountry;
-        (0, config_1.getAuthConfig)().signInCountry = { header: COUNTRY_HEADER, database: false };
-        (0, sign_in_country_1.resetCountryLookup)();
-        await (0, db_1.resetDatabase)();
-        const user = await (0, auth_1.registerUser)({ owner: true });
-        ({ email, password } = user);
-        owner = (0, auth_1.authorizedClient)(user.accessToken);
-    });
-    after(() => {
-        (0, config_1.getAuthConfig)().signInCountry = previous;
-        (0, sign_in_country_1.resetCountryLookup)();
-    });
-    it("names the country of a device signing in from a new one, never the address", async () => {
-        await signIn("FR");
-        const [first] = await waitForNotices(1);
-        (0, chai_1.expect)(first.params?.country).to.equal("France");
-        (0, chai_1.expect)(first.params).to.not.have.property("ip");
-    });
-    it("stays quiet when the device signs in again from the same country", async () => {
-        await signIn("FR");
-        await delay(POLL_INTERVAL_MS * 4);
-        (0, chai_1.expect)(await newSignInNotices()).to.have.length(1);
-    });
-    it("alerts when the same browser and system sign in from another country", async () => {
-        await signIn("BR");
-        const notices = await waitForNotices(2);
-        (0, chai_1.expect)(notices).to.have.length(2);
-        (0, chai_1.expect)(notices.map((notice) => notice.params?.country)).to.include("Brazil");
-    });
-});
-//# sourceMappingURL=sign-in-country.test.js.map

package/dist/test/integration/auth/sign-in-country.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sign-in-country.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/sign-in-country.test.ts"],"names":[],"mappings":";;AACA,+BAA8B;AAC9B,4CAA0E;AAC1E,oEAAoE;AACpE,6CAAoE;AACpE,yCAAiD;AACjD,6CAAkD;AAClD,yDAA+D;AAM/D,MAAM,cAAc,GAAG,cAAc,CAAC;AACtC,MAAM,iBAAiB,GACrB,iHAAiH,CAAC;AACpH,MAAM,eAAe,GACnB,wDAAwD,CAAC;AAC3D,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,aAAa,GAAG,EAAE,CAAC;AAOzB,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEhF,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAI,QAAyC,CAAC;IAC9C,IAAI,KAAa,CAAC;IAClB,IAAI,QAAgB,CAAC;IACrB,IAAI,KAAoB,CAAC;IAEzB,MAAM,MAAM,GAAG,KAAK,EAAE,OAAe,EAAE,EAAE;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CACxC,iBAAiB,EACjB,EAAE,KAAK,EAAE,QAAQ,EAAE,EACnB;YACE,OAAO,EAAE;gBACP,YAAY,EAAE,iBAAiB;gBAC/B,CAAC,cAAc,CAAC,EAAE,OAAO;aAC1B;SACF,CACF,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3E,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,IAAmC,EAAE;QACjE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAC9B,IAAA,oBAAa,EAAC,8BAA8B,EAAE,OAAO,CAAC,CACvD,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAQ,QAAQ,CAAC,IAA6B,CAAC,MAAM,CACnD,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,KAAK,eAAe,CACzD,CAAC;IACJ,CAAC,CAAC;IAGF,MAAM,cAAc,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;QAC7C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;gBAAE,OAAO,OAAO,CAAC;YAC5C,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC,CAAC;IAEF,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,QAAQ,GAAG,IAAA,sBAAa,GAAE,CAAC,aAAa,CAAC;QACzC,IAAA,sBAAa,GAAE,CAAC,aAAa,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC5E,IAAA,oCAAkB,GAAE,CAAC;QACrB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7B,KAAK,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,EAAE;QACT,IAAA,sBAAa,GAAE,CAAC,aAAa,GAAG,QAAQ,CAAC;QACzC,IAAA,oCAAkB,GAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC;QACxC,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC;QAClC,IAAA,aAAM,EAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC;QACxC,IAAA,aAAM,EAAC,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClC,IAAA,aAAM,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAChE,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/two-factor-codes.test.d.ts

@@ -1 +0,0 @@
-export {};