@antelopejs/dms 0.9.2 → 0.9.3

package/dist/test/integration/auth/two-factor-codes.test.js

@@ -1,338 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
-const db_1 = require("@antelopejs/interface-dms/auth/db");
-const chai_1 = require("chai");
-const _2fa_1 = require("2fa");
-const jsonwebtoken_1 = require("jsonwebtoken");
-const userNotifications_model_1 = require("../../../db/models/userNotifications.model");
-const dms_auth_1 = require("../../../implementations/dms-auth");
-const two_factor_codes_1 = require("../../../utils/two-factor-codes");
-const auth_1 = require("../../helpers/auth");
-const db_2 = require("../../helpers/db");
-const emails_1 = require("../../helpers/emails");
-const http_1 = require("../../helpers/http");
-const page_1 = require("@antelopejs/interface-dms/page");
-const TWO_FACTOR = (0, page_1.pageRoutePath)("/settings/user/security", "/two-factor");
-const HTTP_OK = 200;
-const HTTP_BAD_REQUEST = 400;
-const HTTP_UNAUTHORIZED = 401;
-const HTTP_TOO_MANY_REQUESTS = 429;
-const HTTP_INTERNAL_ERROR = 500;
-const TWO_FACTOR_EMAIL_TEMPLATE = "EmailTwoFactor";
-const ATTEMPTS_PER_CHALLENGE = 5;
-const WRONG_BACKUP_CODE = "WRONG000";
-const TOTP_STEP_MS = 30 * 1000;
-const TOTP_SAFE_MARGIN_MS = 3 * 1000;
-const TOTP_BOUNDARY_OVERSHOOT_MS = 50;
-const RATE_LIMIT_MS = 60 * 1000;
-const ATTEMPTS_PER_ACCOUNT = 10;
-const LOCKOUT_TITLE = "$dms.notifications.messages.two_factor_lockout.title";
-const NOTIFICATION_WAIT_MS = 5 * 1000;
-const POLL_INTERVAL_MS = 50;
-const TEST_TIMEOUT_MS = 20 * 1000;
-const SHA256_HEX = /^[0-9a-f]{64}$/;
-const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-async function currentTotpCode(secret) {
-    const leftInStep = TOTP_STEP_MS - (Date.now() % TOTP_STEP_MS);
-    if (leftInStep < TOTP_SAFE_MARGIN_MS) {
-        await sleep(leftInStep + TOTP_BOUNDARY_OVERSHOOT_MS);
-    }
-    return (0, _2fa_1.generateCode)(secret, (0, two_factor_codes_1.totpStepAt)(Date.now()));
-}
-async function enableTotp(client, user) {
-    const setup = await client.post(`${TWO_FACTOR}/enable-totp`, {
-        currentPassword: user.password,
-    });
-    (0, chai_1.expect)(setup.status, JSON.stringify(setup.data)).to.equal(HTTP_OK);
-    const { secret } = setup.data;
-    const code = await currentTotpCode(secret);
-    const confirmed = await client.post(`${TWO_FACTOR}/confirm-totp`, { code });
-    (0, chai_1.expect)(confirmed.status, JSON.stringify(confirmed.data)).to.equal(HTTP_OK);
-    return { secret, code, backupCodes: confirmed.data.backupCodes };
-}
-async function lastEmailedCode() {
-    const email = await (0, emails_1.lastRenderedEmail)(TWO_FACTOR_EMAIL_TEMPLATE);
-    const code = email?.props.verificationCode;
-    if (typeof code !== "string")
-        throw new Error("No two-factor code was sent");
-    return code;
-}
-async function signIn(user) {
-    const response = await (0, http_1.createClient)().post("/api/auth/login", {
-        email: user.email,
-        password: user.password,
-    });
-    (0, chai_1.expect)(response.data.requires_2fa, JSON.stringify(response.data)).to.equal(true);
-    return response.data.two_factor_token;
-}
-function verify(token, method, code) {
-    return (0, http_1.createClient)().post("/api/auth/verify-2fa", { token, code, method });
-}
-async function tryWrongCodes(token, count) {
-    for (let attempt = 0; attempt < count; attempt++) {
-        const refused = await verify(token, "backup", WRONG_BACKUP_CODE);
-        (0, chai_1.expect)(refused.status, JSON.stringify(refused.data)).to.equal(HTTP_UNAUTHORIZED);
-    }
-}
-async function lockoutNotifications(userId) {
-    const deadline = Date.now() + NOTIFICATION_WAIT_MS;
-    for (;;) {
-        const notifications = await (0, interface_database_decorators_1.GetModel)(userNotifications_model_1.UserNotificationsModel).getByUserId(userId);
-        const count = notifications.filter((notification) => notification.title === LOCKOUT_TITLE).length;
-        if (count > 0 || Date.now() > deadline)
-            return count;
-        await sleep(POLL_INTERVAL_MS);
-    }
-}
-async function storedUser(userId) {
-    const user = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(userId);
-    if (!user)
-        throw new Error(`No user ${userId}`);
-    return user;
-}
-const emailedCodeCount = () => emails_1.renderedEmails.filter((email) => email.template === TWO_FACTOR_EMAIL_TEMPLATE)
-    .length;
-async function duringEmailOutage(request) {
-    emails_1.emailOutage.isOn = true;
-    try {
-        return await request();
-    }
-    finally {
-        emails_1.emailOutage.isOn = false;
-    }
-}
-async function allowNextEmailCode(userId) {
-    const user = await storedUser(userId);
-    user.twoFactorEmailCodeRequestedAt = new Date(Date.now() - RATE_LIMIT_MS);
-    await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).update(user);
-}
-describe("[integration] auth/two-factor codes", function () {
-    this.timeout(TEST_TIMEOUT_MS);
-    let user;
-    let client;
-    const methods = async () => (await client.get(TWO_FACTOR)).data.methods;
-    const startEmailSetup = () => client.post(`${TWO_FACTOR}/enable-email`, {
-        currentPassword: user.password,
-    });
-    before(emails_1.captureEmails);
-    beforeEach(async () => {
-        emails_1.renderedEmails.length = 0;
-        await (0, db_2.resetDatabase)();
-        user = await (0, auth_1.registerUser)({ owner: true });
-        client = (0, auth_1.authorizedClient)(user.accessToken);
-    });
-    describe("sign-in challenge", () => {
-        it("is spent after 5 codes, even before the right one comes", async () => {
-            const { backupCodes } = await enableTotp(client, user);
-            const token = await signIn(user);
-            await tryWrongCodes(token, ATTEMPTS_PER_CHALLENGE);
-            const spent = await verify(token, "backup", backupCodes[0]);
-            (0, chai_1.expect)(spent.status).to.equal(HTTP_TOO_MANY_REQUESTS);
-            (0, chai_1.expect)(JSON.stringify(spent.data)).to.include("error.too_many_2fa_attempts");
-            const fresh = await verify(await signIn(user), "backup", backupCodes[0]);
-            (0, chai_1.expect)(fresh.status, JSON.stringify(fresh.data)).to.equal(HTTP_OK);
-        });
-        it("gives two sign-ins in the same second a challenge each", async () => {
-            const { backupCodes } = await enableTotp(client, user);
-            const { tenantId } = (0, jsonwebtoken_1.decode)(await signIn(user));
-            const stored = await storedUser(user.userId);
-            const [first, second] = [
-                (0, dms_auth_1.generateTwoFactorToken)(tenantId, stored),
-                (0, dms_auth_1.generateTwoFactorToken)(tenantId, stored),
-            ];
-            (0, chai_1.expect)(first.token).to.not.equal(second.token);
-            await tryWrongCodes(first.token, ATTEMPTS_PER_CHALLENGE);
-            const other = await verify(second.token, "backup", backupCodes[0]);
-            (0, chai_1.expect)(other.status, JSON.stringify(other.data)).to.equal(HTTP_OK);
-        });
-        it("opens one session, whatever code comes next", async () => {
-            const { backupCodes } = await enableTotp(client, user);
-            const token = await signIn(user);
-            const first = await verify(token, "backup", backupCodes[0]);
-            (0, chai_1.expect)(first.status, JSON.stringify(first.data)).to.equal(HTTP_OK);
-            const second = await verify(token, "backup", backupCodes[1]);
-            (0, chai_1.expect)(second.status).to.equal(HTTP_UNAUTHORIZED);
-            (0, chai_1.expect)(JSON.stringify(second.data)).to.include("error.2fa_challenge_used");
-        });
-        it("refuses every code once the account took 10 wrong ones, even after a new sign-in", async () => {
-            const { backupCodes } = await enableTotp(client, user);
-            const challenges = ATTEMPTS_PER_ACCOUNT / ATTEMPTS_PER_CHALLENGE;
-            for (let challenge = 0; challenge < challenges; challenge++) {
-                await tryWrongCodes(await signIn(user), ATTEMPTS_PER_CHALLENGE);
-            }
-            const locked = await verify(await signIn(user), "backup", backupCodes[0]);
-            (0, chai_1.expect)(locked.status).to.equal(HTTP_TOO_MANY_REQUESTS);
-            (0, chai_1.expect)(JSON.stringify(locked.data)).to.include("error.too_many_2fa_attempts_account");
-            (0, chai_1.expect)(await lockoutNotifications(user.userId)).to.equal(1);
-        });
-        it("forgets the account's wrong codes once a right one comes", async () => {
-            const { backupCodes } = await enableTotp(client, user);
-            await tryWrongCodes(await signIn(user), ATTEMPTS_PER_CHALLENGE);
-            await tryWrongCodes(await signIn(user), ATTEMPTS_PER_CHALLENGE - 1);
-            const right = await verify(await signIn(user), "backup", backupCodes[0]);
-            (0, chai_1.expect)(right.status, JSON.stringify(right.data)).to.equal(HTTP_OK);
-            await tryWrongCodes(await signIn(user), ATTEMPTS_PER_CHALLENGE);
-            const next = await verify(await signIn(user), "backup", backupCodes[1]);
-            (0, chai_1.expect)(next.status, JSON.stringify(next.data)).to.equal(HTTP_OK);
-        });
-        it("sends no more email codes for a spent challenge", async () => {
-            await startEmailSetup();
-            await client.post(`${TWO_FACTOR}/confirm-email`, {
-                code: await lastEmailedCode(),
-            });
-            const token = await signIn(user);
-            await tryWrongCodes(token, ATTEMPTS_PER_CHALLENGE);
-            await allowNextEmailCode(user.userId);
-            const response = await (0, http_1.createClient)().post("/api/auth/request-2fa-email", { token });
-            (0, chai_1.expect)(response.status).to.equal(HTTP_TOO_MANY_REQUESTS);
-            (0, chai_1.expect)(JSON.stringify(response.data)).to.include("error.too_many_2fa_attempts");
-        });
-        it("stores the emailed code hashed, and signs in with it once", async () => {
-            await startEmailSetup();
-            await client.post(`${TWO_FACTOR}/confirm-email`, {
-                code: await lastEmailedCode(),
-            });
-            await allowNextEmailCode(user.userId);
-            const token = await signIn(user);
-            const requested = await (0, http_1.createClient)().post("/api/auth/request-2fa-email", { token });
-            (0, chai_1.expect)(requested.status, JSON.stringify(requested.data)).to.equal(HTTP_OK);
-            const code = await lastEmailedCode();
-            const stored = (await storedUser(user.userId)).twoFactorEmailCode;
-            (0, chai_1.expect)(stored).to.match(SHA256_HEX);
-            (0, chai_1.expect)(stored).to.not.equal(code);
-            (0, chai_1.expect)((await verify(token, "email", code)).status).to.equal(HTTP_OK);
-            (0, chai_1.expect)((await verify(token, "email", code)).status).to.equal(HTTP_UNAUTHORIZED);
-        });
-    });
-    describe("authenticator codes", () => {
-        it("refuses a code already accepted, at sign-in and on the Security page", async () => {
-            const { code } = await enableTotp(client, user);
-            (0, chai_1.expect)((await verify(await signIn(user), "totp", code)).status).to.equal(HTTP_UNAUTHORIZED);
-            const regenerated = await client.post(`${TWO_FACTOR}/regenerate-backup`, {
-                code,
-            });
-            (0, chai_1.expect)(regenerated.status).to.equal(HTTP_UNAUTHORIZED);
-            const disabled = await client.post(`${TWO_FACTOR}/disable`, {
-                method: "totp",
-                code,
-            });
-            (0, chai_1.expect)(disabled.status).to.equal(HTTP_UNAUTHORIZED);
-            (0, chai_1.expect)(await methods()).to.include("totp");
-        });
-        it("accepts a later code once, and never an earlier one", async () => {
-            const { secret } = await enableTotp(client, user);
-            const userModel = (0, interface_database_decorators_1.GetModel)(db_1.UserModel);
-            const later = Date.now() + 10 * TOTP_STEP_MS;
-            const laterCode = (0, _2fa_1.generateCode)(secret, (0, two_factor_codes_1.totpStepAt)(later));
-            const earlier = Date.now() + 5 * TOTP_STEP_MS;
-            const earlierCode = (0, _2fa_1.generateCode)(secret, (0, two_factor_codes_1.totpStepAt)(earlier));
-            const accept = async (code, now) => (0, two_factor_codes_1.acceptTotpCode)(userModel, await storedUser(user.userId), secret, code, now);
-            (0, chai_1.expect)(await accept(laterCode, later)).to.equal(true);
-            (0, chai_1.expect)(await accept(laterCode, later)).to.equal(false);
-            (0, chai_1.expect)(await accept(earlierCode, earlier)).to.equal(false);
-            (0, chai_1.expect)(await signIn(user)).to.be.a("string");
-        });
-        it("lets only one of two concurrent uses of a code through", async () => {
-            const { secret } = await enableTotp(client, user);
-            const userModel = (0, interface_database_decorators_1.GetModel)(db_1.UserModel);
-            const later = Date.now() + 3 * TOTP_STEP_MS;
-            const code = (0, _2fa_1.generateCode)(secret, (0, two_factor_codes_1.totpStepAt)(later));
-            const [first, second] = await Promise.all([
-                storedUser(user.userId),
-                storedUser(user.userId),
-            ]);
-            const outcomes = await Promise.all([
-                (0, two_factor_codes_1.acceptTotpCode)(userModel, first, secret, code, later),
-                (0, two_factor_codes_1.acceptTotpCode)(userModel, second, secret, code, later),
-            ]);
-            (0, chai_1.expect)(outcomes.filter(Boolean)).to.have.length(1);
-        });
-    });
-    describe("turning email codes on", () => {
-        it("waits for the code sent to the account address", async () => {
-            const started = await startEmailSetup();
-            (0, chai_1.expect)(started.status, JSON.stringify(started.data)).to.equal(HTTP_OK);
-            (0, chai_1.expect)(await methods()).to.not.include("email");
-            const code = await lastEmailedCode();
-            const wrong = code === "000000" ? "000001" : "000000";
-            const refused = await client.post(`${TWO_FACTOR}/confirm-email`, {
-                code: wrong,
-            });
-            (0, chai_1.expect)(refused.status).to.equal(HTTP_UNAUTHORIZED);
-            (0, chai_1.expect)(await methods()).to.not.include("email");
-            const confirmed = await client.post(`${TWO_FACTOR}/confirm-email`, {
-                code,
-            });
-            (0, chai_1.expect)(confirmed.status, JSON.stringify(confirmed.data)).to.equal(HTTP_OK);
-            (0, chai_1.expect)(confirmed.data.backupCodes).to.have.length.greaterThan(0);
-            (0, chai_1.expect)(await methods()).to.include("email");
-        });
-        it("refuses a confirmation that no setup started", async () => {
-            const response = await client.post(`${TWO_FACTOR}/confirm-email`, {
-                code: "123456",
-            });
-            (0, chai_1.expect)(response.status).to.equal(HTTP_BAD_REQUEST);
-            (0, chai_1.expect)(await methods()).to.not.include("email");
-        });
-        it("resends the code of a setup in progress, and only then", async () => {
-            const unstarted = await client.post(`${TWO_FACTOR}/request-email-code`);
-            (0, chai_1.expect)(unstarted.status).to.equal(HTTP_BAD_REQUEST);
-            await startEmailSetup();
-            const first = await lastEmailedCode();
-            await allowNextEmailCode(user.userId);
-            const resent = await client.post(`${TWO_FACTOR}/request-email-code`);
-            (0, chai_1.expect)(resent.status, JSON.stringify(resent.data)).to.equal(HTTP_OK);
-            const second = await lastEmailedCode();
-            if (first !== second) {
-                const stale = await client.post(`${TWO_FACTOR}/confirm-email`, {
-                    code: first,
-                });
-                (0, chai_1.expect)(stale.status).to.equal(HTTP_UNAUTHORIZED);
-            }
-            const confirmed = await client.post(`${TWO_FACTOR}/confirm-email`, {
-                code: second,
-            });
-            (0, chai_1.expect)(confirmed.status).to.equal(HTTP_OK);
-        });
-        it("reopens a setup whose code is still valid, without sending another", async () => {
-            await startEmailSetup();
-            const code = await lastEmailedCode();
-            const reopened = await startEmailSetup();
-            (0, chai_1.expect)(reopened.status, JSON.stringify(reopened.data)).to.equal(HTTP_OK);
-            (0, chai_1.expect)(emailedCodeCount()).to.equal(1);
-            const resent = await client.post(`${TWO_FACTOR}/request-email-code`);
-            (0, chai_1.expect)(resent.status).to.equal(HTTP_TOO_MANY_REQUESTS);
-            const confirmed = await client.post(`${TWO_FACTOR}/confirm-email`, {
-                code,
-            });
-            (0, chai_1.expect)(confirmed.status, JSON.stringify(confirmed.data)).to.equal(HTTP_OK);
-        });
-        it("keeps no code and starts no wait when the email could not be sent", async () => {
-            const failed = await duringEmailOutage(startEmailSetup);
-            (0, chai_1.expect)(failed.status).to.be.at.least(HTTP_INTERNAL_ERROR);
-            const stored = await storedUser(user.userId);
-            (0, chai_1.expect)(stored.twoFactorEmailCode ?? null).to.equal(null);
-            (0, chai_1.expect)(stored.twoFactorEmailCodeRequestedAt ?? null).to.equal(null);
-            const retried = await startEmailSetup();
-            (0, chai_1.expect)(retried.status, JSON.stringify(retried.data)).to.equal(HTTP_OK);
-            const confirmed = await client.post(`${TWO_FACTOR}/confirm-email`, {
-                code: await lastEmailedCode(),
-            });
-            (0, chai_1.expect)(confirmed.status, JSON.stringify(confirmed.data)).to.equal(HTTP_OK);
-        });
-        it("keeps the previous code and its wait when a resend could not be sent", async () => {
-            await startEmailSetup();
-            await allowNextEmailCode(user.userId);
-            const before = await storedUser(user.userId);
-            const failed = await duringEmailOutage(() => client.post(`${TWO_FACTOR}/request-email-code`));
-            (0, chai_1.expect)(failed.status).to.be.at.least(HTTP_INTERNAL_ERROR);
-            const after = await storedUser(user.userId);
-            (0, chai_1.expect)(after.twoFactorEmailCode).to.equal(before.twoFactorEmailCode);
-            (0, chai_1.expect)(after.twoFactorEmailCodeRequestedAt).to.deep.equal(before.twoFactorEmailCodeRequestedAt);
-            const resent = await client.post(`${TWO_FACTOR}/request-email-code`);
-            (0, chai_1.expect)(resent.status, JSON.stringify(resent.data)).to.equal(HTTP_OK);
-        });
-    });
-});
-//# sourceMappingURL=two-factor-codes.test.js.map

package/dist/test/integration/auth/two-factor-codes.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"two-factor-codes.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/two-factor-codes.test.ts"],"names":[],"mappings":";;AAAA,6FAAqE;AACrE,0DAAyE;AAEzE,+BAA8B;AAC9B,8BAAmC;AACnC,+CAAuD;AACvD,wFAAoF;AACpF,gEAA2E;AAC3E,sEAA6E;AAC7E,6CAI4B;AAC5B,yCAAiD;AACjD,iDAK8B;AAC9B,6CAAkD;AAClD,yDAA+D;AAO/D,MAAM,UAAU,GAAG,IAAA,oBAAa,EAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;AAC3E,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AACnD,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AACrC,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC;AAG/B,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,CAAC;AAGrC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,aAAa,GAAG,sDAAsD,CAAC;AAC7E,MAAM,oBAAoB,GAAG,CAAC,GAAG,IAAI,CAAC;AACtC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEhF,KAAK,UAAU,eAAe,CAAC,MAAc;IAC3C,MAAM,UAAU,GAAG,YAAY,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC;IAC9D,IAAI,UAAU,GAAG,mBAAmB,EAAE,CAAC;QACrC,MAAM,KAAK,CAAC,UAAU,GAAG,0BAA0B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAA,mBAAY,EAAC,MAAM,EAAE,IAAA,6BAAU,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAQD,KAAK,UAAU,UAAU,CACvB,MAAqB,EACrB,IAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,cAAc,EAAE;QAC3D,eAAe,EAAE,IAAI,CAAC,QAAQ;KAC/B,CAAC,CAAC;IACH,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,IAA0B,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,MAAM,KAAK,GAAG,MAAM,IAAA,0BAAiB,EAAC,yBAAyB,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,gBAAgB,CAAC;IAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAoB;IACxC,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC5D,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CACxE,IAAI,CACL,CAAC;IACF,OAAO,QAAQ,CAAC,IAAI,CAAC,gBAA0B,CAAC;AAClD,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,MAAc,EAAE,IAAY;IACzD,OAAO,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,KAAa;IACvD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACjE,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC3D,iBAAiB,CAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAGD,KAAK,UAAU,oBAAoB,CAAC,MAAc;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,CAAC;IACnD,SAAS,CAAC;QACR,MAAM,aAAa,GAAG,MAAM,IAAA,wCAAQ,EAAC,gDAAsB,CAAC,CAAC,WAAW,CACtE,MAAM,CACP,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAChC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,KAAK,aAAa,CACvD,CAAC,MAAM,CAAC;QACT,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrD,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,MAAM,IAAI,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,gBAAgB,GAAG,GAAW,EAAE,CACpC,uBAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,yBAAyB,CAAC;KAC3E,MAAM,CAAC;AAGZ,KAAK,UAAU,iBAAiB,CAAI,OAAyB;IAC3D,oBAAW,CAAC,IAAI,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,EAAE,CAAC;IACzB,CAAC;YAAS,CAAC;QACT,oBAAW,CAAC,IAAI,GAAG,KAAK,CAAC;IAC3B,CAAC;AACH,CAAC;AAID,KAAK,UAAU,kBAAkB,CAAC,MAAc;IAC9C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,6BAA6B,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,CAAC;IAC1E,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE;IAC9C,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAE9B,IAAI,IAAoB,CAAC;IACzB,IAAI,MAAqB,CAAC;IAE1B,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CACzB,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAmB,CAAC;IAE1D,MAAM,eAAe,GAAG,GAAG,EAAE,CAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,eAAe,EAAE;QACxC,eAAe,EAAE,IAAI,CAAC,QAAQ;KAC/B,CAAC,CAAC;IAEL,MAAM,CAAC,sBAAa,CAAC,CAAC;IAEtB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,uBAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,aAAa,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAEnD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACtD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC3C,6BAA6B,CAC9B,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,qBAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAe,CAAC;YAC9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG;gBACtB,IAAA,iCAAsB,EAAC,QAAQ,EAAE,MAAM,CAAC;gBACxC,IAAA,iCAAsB,EAAC,QAAQ,EAAE,MAAM,CAAC;aACzC,CAAC;YACF,IAAA,aAAM,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE/C,MAAM,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACnE,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEnE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAClD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC5C,0BAA0B,CAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;YAChG,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,oBAAoB,GAAG,sBAAsB,CAAC;YACjE,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC;gBAC5D,MAAM,aAAa,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACvD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC5C,qCAAqC,CACtC,CAAC;YACF,IAAA,aAAM,EAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,MAAM,aAAa,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAChE,MAAM,aAAa,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,sBAAsB,GAAG,CAAC,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEnE,MAAM,aAAa,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,IAAA,aAAM,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBAC/C,IAAI,EAAE,MAAM,eAAe,EAAE;aAC9B,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,aAAa,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YACnD,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEtC,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CACxC,6BAA6B,EAC7B,EAAE,KAAK,EAAE,CACV,CAAC;YACF,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACzD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC9C,6BAA6B,CAC9B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBAC/C,IAAI,EAAE,MAAM,eAAe,EAAE;aAC9B,CAAC,CAAC;YACH,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,SAAS,GAAG,MAAM,IAAA,mBAAY,GAAE,CAAC,IAAI,CACzC,6BAA6B,EAC7B,EAAE,KAAK,EAAE,CACV,CAAC;YACF,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,OAAO,CACR,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC;YAErC,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAClE,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtE,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAC1D,iBAAiB,CAClB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEhD,IAAA,aAAM,EAAC,CAAC,MAAM,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CACtE,iBAAiB,CAClB,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,oBAAoB,EAAE;gBACvE,IAAI;aACL,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,UAAU,EAAE;gBAC1D,MAAM,EAAE,MAAM;gBACd,IAAI;aACL,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACpD,IAAA,aAAM,EAAC,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAA,mBAAY,EAAC,MAAM,EAAE,IAAA,6BAAU,EAAC,KAAK,CAAC,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,YAAY,CAAC;YAC9C,MAAM,WAAW,GAAG,IAAA,mBAAY,EAAC,MAAM,EAAE,IAAA,6BAAU,EAAC,OAAO,CAAC,CAAC,CAAC;YAE9D,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE,CACjD,IAAA,iCAAc,EACZ,SAAS,EACT,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAC7B,MAAM,EACN,IAAI,EACJ,GAAG,CACJ,CAAC;YACJ,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvD,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAG3D,IAAA,aAAM,EAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,YAAY,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAA,mBAAY,EAAC,MAAM,EAAE,IAAA,6BAAU,EAAC,KAAK,CAAC,CAAC,CAAC;YACrD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACxC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;aACxB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACjC,IAAA,iCAAc,EAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;gBACrD,IAAA,iCAAc,EAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;aACvD,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;YACxC,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvE,IAAA,aAAM,EAAC,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YAEtD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBAC/D,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACnD,IAAA,aAAM,EAAC,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAEhD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBACjE,IAAI;aACL,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,OAAO,CACR,CAAC;YACF,IAAA,aAAM,EAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACjE,IAAA,aAAM,EAAC,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBAChE,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACnD,IAAA,aAAM,EAAC,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;YACxE,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAEpD,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;YACtC,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;YACrE,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;YAEvC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;oBAC7D,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;gBACH,IAAA,aAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBACjE,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,eAAe,EAAE,CAAC;YAErC,MAAM,QAAQ,GAAG,MAAM,eAAe,EAAE,CAAC;YACzC,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzE,IAAA,aAAM,EAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;YACrE,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAEvD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBACjE,IAAI;aACL,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,OAAO,CACR,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;YACjF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;YACxD,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAA,aAAM,EAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzD,IAAA,aAAM,EAAC,MAAM,CAAC,6BAA6B,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEpE,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;YACxC,IAAA,aAAM,EAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,gBAAgB,EAAE;gBACjE,IAAI,EAAE,MAAM,eAAe,EAAE;aAC9B,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC/D,OAAO,CACR,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACpF,MAAM,eAAe,EAAE,CAAC;YACxB,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAE7C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,CAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAChD,CAAC;YACF,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAA,aAAM,EAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACrE,IAAA,aAAM,EAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CACvD,MAAM,CAAC,6BAA6B,CACrC,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,qBAAqB,CAAC,CAAC;YACrE,IAAA,aAAM,EAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/two-factor-password.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/test/integration/auth/two-factor-password.test.js

@@ -1,45 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const chai_1 = require("chai");
-const auth_1 = require("../../helpers/auth");
-const db_1 = require("../../helpers/db");
-const emails_1 = require("../../helpers/emails");
-const page_1 = require("@antelopejs/interface-dms/page");
-const TWO_FACTOR = (0, page_1.pageRoutePath)("/settings/user/security", "/two-factor");
-const LEGACY_TWO_FACTOR = (0, page_1.pageRoutePath)("/settings/user/profile", "/two-factor");
-const HTTP_OK = 200;
-const HTTP_BAD_REQUEST = 400;
-const HTTP_NOT_FOUND = 404;
-const INVALID_CURRENT_PASSWORD = "error.invalid_current_password";
-const TEST_TIMEOUT_MS = 20 * 1000;
-describe("[integration] auth/adding a two-factor method", function () {
-    this.timeout(TEST_TIMEOUT_MS);
-    let user;
-    let client;
-    before(emails_1.captureEmails);
-    beforeEach(async () => {
-        await (0, db_1.resetDatabase)();
-        user = await (0, auth_1.registerUser)({ owner: true });
-        client = (0, auth_1.authorizedClient)(user.accessToken);
-    });
-    for (const route of ["enable-totp", "enable-email"]) {
-        it(`refuses ${route} without the current password, or with a wrong one`, async () => {
-            for (const body of [{}, { currentPassword: "Not-the-password-1" }]) {
-                const response = await client.post(`${TWO_FACTOR}/${route}`, body);
-                (0, chai_1.expect)(response.status).to.equal(HTTP_BAD_REQUEST);
-                (0, chai_1.expect)(JSON.stringify(response.data)).to.include(INVALID_CURRENT_PASSWORD);
-            }
-        });
-        it(`accepts ${route} with the current password`, async () => {
-            const response = await client.post(`${TWO_FACTOR}/${route}`, {
-                currentPassword: user.password,
-            });
-            (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_OK);
-        });
-        it(`no longer serves ${route} under the profile`, async () => {
-            const response = await client.post(`${LEGACY_TWO_FACTOR}/${route}`, {});
-            (0, chai_1.expect)(response.status).to.equal(HTTP_NOT_FOUND);
-        });
-    }
-});
-//# sourceMappingURL=two-factor-password.test.js.map

package/dist/test/integration/auth/two-factor-password.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"two-factor-password.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/two-factor-password.test.ts"],"names":[],"mappings":";;AACA,+BAA8B;AAC9B,6CAI4B;AAC5B,yCAAiD;AACjD,iDAAqD;AACrD,yDAA+D;AAK/D,MAAM,UAAU,GAAG,IAAA,oBAAa,EAAC,yBAAyB,EAAE,aAAa,CAAC,CAAC;AAC3E,MAAM,iBAAiB,GAAG,IAAA,oBAAa,EACrC,wBAAwB,EACxB,aAAa,CACd,CAAC;AACF,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAGlE,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAElC,QAAQ,CAAC,+CAA+C,EAAE;IACxD,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAE9B,IAAI,IAAoB,CAAC;IACzB,IAAI,MAAqB,CAAC;IAG1B,MAAM,CAAC,sBAAa,CAAC,CAAC;IAEtB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;QACpD,EAAE,CAAC,WAAW,KAAK,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClF,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;gBACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;gBACnE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACnD,IAAA,aAAM,EAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAC9C,wBAAwB,CACzB,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,KAAK,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,IAAI,KAAK,EAAE,EAAE;gBAC3D,eAAe,EAAE,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,KAAK,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACxE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/test/integration/auth/two-factor-token.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/test/integration/auth/two-factor-token.test.js

@@ -1,92 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
-const db_1 = require("@antelopejs/interface-dms/auth/db");
-const chai_1 = require("chai");
-const jsonwebtoken_1 = require("jsonwebtoken");
-const dms_auth_1 = require("../../../implementations/dms-auth");
-const token_secret_1 = require("../../../implementations/dms-auth/token-secret");
-const auth_1 = require("../../helpers/auth");
-const db_2 = require("../../helpers/db");
-const http_1 = require("../../helpers/http");
-const TWO_FACTOR_ROUTES = [
-    "/api/auth/verify-2fa",
-    "/api/auth/request-2fa-email",
-];
-const HTTP_BAD_REQUEST = 400;
-const HTTP_UNAUTHORIZED = 401;
-const INVALID_TWO_FACTOR_TOKEN = "error.invalid_2fa_token";
-const TWO_FACTOR_PURPOSE = "2fa";
-const UNKNOWN_USER_ID = "no-such-user";
-const FOREIGN_SECRET = "not-the-instance-secret";
-const SECONDS_PER_MINUTE = 60;
-const TOTP_CODE = "123456";
-function post(route, body) {
-    return (0, http_1.createClient)().post(route, body);
-}
-function attempt(route, token) {
-    return post(route, { token, code: TOTP_CODE, method: "totp" });
-}
-async function userSecret(userId) {
-    const stored = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(userId);
-    if (!stored)
-        throw new Error(`No user ${userId}`);
-    return (0, token_secret_1.generateSecret)(stored.authKey);
-}
-function tenantOf(user) {
-    return (0, jsonwebtoken_1.decode)(user.accessToken).tenantId;
-}
-async function badTokens(user) {
-    const tenantId = tenantOf(user);
-    const claims = { id: user.userId, tenantId, purpose: TWO_FACTOR_PURPOSE };
-    const secret = await userSecret(user.userId);
-    const nowSeconds = Math.floor(Date.now() / 1000);
-    return {
-        "an unknown user": (0, jsonwebtoken_1.sign)({ ...claims, id: UNKNOWN_USER_ID }, FOREIGN_SECRET),
-        "a bad signature": (0, jsonwebtoken_1.sign)(claims, FOREIGN_SECRET),
-        "an expired challenge": (0, jsonwebtoken_1.sign)({ ...claims, exp: nowSeconds - SECONDS_PER_MINUTE }, secret),
-        "another purpose": (0, jsonwebtoken_1.sign)({ ...claims, purpose: "refresh" }, secret),
-    };
-}
-describe("[integration] auth/two-factor token", () => {
-    let user;
-    beforeEach(async () => {
-        await (0, db_2.resetDatabase)();
-        user = await (0, auth_1.registerUser)({ owner: true });
-    });
-    for (const route of TWO_FACTOR_ROUTES) {
-        it(`refuses a token that is no JWT with a 401 on ${route}`, async () => {
-            const response = await attempt(route, "abc");
-            (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_UNAUTHORIZED);
-            (0, chai_1.expect)(response.data).to.equal(INVALID_TWO_FACTOR_TOKEN);
-        });
-        it(`answers every bad token alike on ${route}`, async () => {
-            for (const [problem, token] of Object.entries(await badTokens(user))) {
-                const response = await attempt(route, token);
-                (0, chai_1.expect)(response.status, problem).to.equal(HTTP_UNAUTHORIZED);
-                (0, chai_1.expect)(response.data, problem).to.equal(INVALID_TWO_FACTOR_TOKEN);
-            }
-        });
-        it(`names the missing token on ${route}`, async () => {
-            for (const body of [{}, { token: "" }]) {
-                const response = await post(route, {
-                    ...body,
-                    code: TOTP_CODE,
-                    method: "totp",
-                });
-                (0, chai_1.expect)(response.status, JSON.stringify(body)).to.equal(HTTP_BAD_REQUEST);
-                (0, chai_1.expect)(response.data).to.equal(INVALID_TWO_FACTOR_TOKEN);
-            }
-        });
-    }
-    it("still takes a genuine token past the token check", async () => {
-        const stored = await (0, interface_database_decorators_1.GetModel)(db_1.UserModel).get(user.userId);
-        if (!stored)
-            throw new Error(`No user ${user.userId}`);
-        const { token } = (0, dms_auth_1.generateTwoFactorToken)(tenantOf(user), stored);
-        const response = await post("/api/auth/request-2fa-email", { token });
-        (0, chai_1.expect)(response.status, JSON.stringify(response.data)).to.equal(HTTP_BAD_REQUEST);
-        (0, chai_1.expect)(response.data).to.equal("error.2fa_email_not_enabled");
-    });
-});
-//# sourceMappingURL=two-factor-token.test.js.map

package/dist/test/integration/auth/two-factor-token.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"two-factor-token.test.js","sourceRoot":"","sources":["../../../../src/test/integration/auth/two-factor-token.test.ts"],"names":[],"mappings":";;AAAA,6FAAqE;AACrE,0DAA8D;AAC9D,+BAA8B;AAC9B,+CAA6D;AAC7D,gEAA2E;AAC3E,iFAAgF;AAChF,6CAAuE;AACvE,yCAAiD;AACjD,6CAAkD;AAMlD,MAAM,iBAAiB,GAAG;IACxB,sBAAsB;IACtB,6BAA6B;CAC9B,CAAC;AACF,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAC3D,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,eAAe,GAAG,cAAc,CAAC;AACvC,MAAM,cAAc,GAAG,yBAAyB,CAAC;AACjD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC;AAE3B,SAAS,IAAI,CAAC,KAAa,EAAE,IAA6B;IACxD,OAAO,IAAA,mBAAY,GAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,KAAa;IAC3C,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAClD,OAAO,IAAA,6BAAc,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAoB;IACpC,OAAQ,IAAA,qBAAM,EAAC,IAAI,CAAC,WAAW,CAAgB,CAAC,QAAkB,CAAC;AACrE,CAAC;AAGD,KAAK,UAAU,SAAS,CACtB,IAAoB;IAEpB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,OAAO;QACL,iBAAiB,EAAE,IAAA,mBAAI,EAAC,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,cAAc,CAAC;QAC3E,iBAAiB,EAAE,IAAA,mBAAI,EAAC,MAAM,EAAE,cAAc,CAAC;QAC/C,sBAAsB,EAAE,IAAA,mBAAI,EAC1B,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,kBAAkB,EAAE,EACnD,MAAM,CACP;QACD,iBAAiB,EAAE,IAAA,mBAAI,EAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,IAAI,IAAoB,CAAC;IAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAA,kBAAa,GAAE,CAAC;QACtB,IAAI,GAAG,MAAM,IAAA,mBAAY,EAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,EAAE,CAAC,gDAAgD,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC7D,iBAAiB,CAClB,CAAC;YACF,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;YACzD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACrE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC7C,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAC7D,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;YACnD,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE;oBACjC,GAAG,IAAI;oBACP,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,MAAM;iBACf,CAAC,CAAC;gBACH,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CACpD,gBAAgB,CACjB,CAAC;gBACF,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,IAAA,wCAAQ,EAAC,cAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,iCAAsB,EAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,IAAA,aAAM,EAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC7D,gBAAgB,CACjB,CAAC;QACF,IAAA,aAAM,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/integration/derived-controller.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/test/integration/derived-controller.test.js

@@ -1,105 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
-const interface_file_storage_1 = require("@antelopejs/interface-file-storage");
-const chai_1 = require("chai");
-const constants_1 = require("@antelopejs/interface-dms/constants");
-const db_1 = require("@antelopejs/interface-dms/db");
-const attachments_1 = require("../helpers/attachments");
-const auth_1 = require("../helpers/auth");
-const db_2 = require("../helpers/db");
-const BASE = "/api/derived-controller/base-notes";
-const DERIVED = "/api/derived-controller/derived-notes";
-const BASE_SLUG = "/base-notes";
-const DERIVED_SLUG = "/derived-notes";
-const DERIVED_TABLE = "derived-notes.content";
-const BASE_TABLE = "base-notes.content";
-const METADATA = "/api/files/metadata";
-const HTTP_OK = 200;
-const HTTP_FORBIDDEN = 403;
-async function ownerClient() {
-    const owner = await (0, auth_1.registerUser)({ owner: true });
-    return (0, auth_1.authorizedClient)(owner.accessToken);
-}
-async function tableOptions(client, slug) {
-    const layout = await client.get("/dms/pagelayout", { params: { slug } });
-    (0, chai_1.expect)(layout.status, JSON.stringify(layout.data)).to.equal(HTTP_OK);
-    return layout.data.components.content.options;
-}
-async function listTitles(client, location, search) {
-    const list = await client.get(`${location}/list`, { params: { search } });
-    (0, chai_1.expect)(list.status, JSON.stringify(list.data)).to.equal(HTTP_OK);
-    return list.data.results.map((note) => note.title);
-}
-async function memberAdding(table) {
-    const page = table.split(".")[0];
-    const [role] = await (0, interface_database_decorators_1.GetModel)(db_1.RoleModel, constants_1.DEFAULT_TENANT_ID).insert({
-        name: `Adds through ${table}`,
-        permissions: [page, table, `${table}.add`],
-    });
-    const member = await (0, auth_1.registerUser)({ roles_ids: [role] });
-    return (0, auth_1.authorizedClient)(member.accessToken);
-}
-describe("[integration] a data controller derived from another", () => {
-    beforeEach(db_2.resetDatabase);
-    it("serves its routes at its own location, over the parent's rows", async () => {
-        const client = await ownerClient();
-        const created = await client.post(`${DERIVED}/new`, { title: "Alpha" });
-        (0, chai_1.expect)(created.status, JSON.stringify(created.data)).to.equal(HTTP_OK);
-        await client.post(`${BASE}/new`, { title: "Beta" });
-        (0, chai_1.expect)(await listTitles(client, DERIVED)).to.have.members([
-            "Alpha",
-            "Beta",
-        ]);
-        (0, chai_1.expect)(await listTitles(client, BASE)).to.have.members(["Alpha", "Beta"]);
-    });
-    it("inherits the parent's fields: mandatory, searchable, listed", async () => {
-        const client = await ownerClient();
-        const missingTitle = await client.post(`${DERIVED}/new`, {});
-        (0, chai_1.expect)(missingTitle.status).to.not.equal(HTTP_OK);
-        await client.post(`${DERIVED}/new`, { title: "Alpha" });
-        await client.post(`${DERIVED}/new`, { title: "Beta" });
-        (0, chai_1.expect)(await listTitles(client, DERIVED, "Alp")).to.deep.equal(["Alpha"]);
-    });
-    it("serves a working TableView of its own, next to the parent's writing one", async () => {
-        const client = await ownerClient();
-        const derived = await tableOptions(client, DERIVED_SLUG);
-        const base = await tableOptions(client, BASE_SLUG);
-        (0, chai_1.expect)(derived.location).to.equal(DERIVED);
-        (0, chai_1.expect)(base.location).to.equal(BASE);
-        (0, chai_1.expect)(derived.columns.map((column) => column.id)).to.have.members(["title", "file"]);
-        (0, chai_1.expect)(derived.formComponents.new).to.not.equal(undefined);
-        (0, chai_1.expect)(derived.formComponents.edit).to.not.equal(undefined);
-    });
-    it("saves a file staged from its own TableView through its own routes", async () => {
-        const client = await ownerClient();
-        const { formComponents } = await tableOptions(client, DERIVED_SLUG);
-        const token = (0, attachments_1.findUploadToken)(formComponents.new, `${DERIVED}#file`);
-        (0, chai_1.expect)(token).to.be.a("string");
-        const upload = await (0, attachments_1.uploadAttachment)({
-            client,
-            content: Buffer.from("derived controller file"),
-            mimetype: "text/plain",
-            claims: {},
-            filename: "note.txt",
-            token,
-        });
-        const saved = await client.post(`${DERIVED}/new`, {
-            title: "With a file",
-            file: upload.key,
-        });
-        (0, chai_1.expect)(saved.status, JSON.stringify(saved.data)).to.equal(HTTP_OK);
-        const promoted = await client.get(METADATA, {
-            params: { resourceKey: (0, interface_file_storage_1.stripStagingPrefix)(upload.key) },
-        });
-        (0, chai_1.expect)(promoted.status, JSON.stringify(promoted.data)).to.equal(HTTP_OK);
-    });
-    it("guards its writes with its own TableView's permission", async () => {
-        const throughDerived = await memberAdding(DERIVED_TABLE);
-        const throughBase = await memberAdding(BASE_TABLE);
-        (0, chai_1.expect)((await throughDerived.post(`${DERIVED}/new`, { title: "Mine" })).status).to.equal(HTTP_OK);
-        (0, chai_1.expect)((await throughBase.post(`${DERIVED}/new`, { title: "Not mine" })).status).to.equal(HTTP_FORBIDDEN);
-        (0, chai_1.expect)((await throughDerived.post(`${BASE}/new`, { title: "Not mine" })).status).to.equal(HTTP_FORBIDDEN);
-    });
-});
-//# sourceMappingURL=derived-controller.test.js.map