@betterportal/auth-default 10.6.20 → 10.6.22

package/lib/plugins/service-betterportal-auth-default/bp-routes/register/_renderer.bootstrap5/GET.js.map

@@ -1 +1 @@
-{"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-default/bp-routes/register/_renderer.bootstrap5/GET.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAI9B,qFAAqF;AACrF,SAAS,UAAU,CAAC,GAAuB,EAAE,QAAgB;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc;IACrB,2EAA2E;IAC3E,2DAA2D;IAC3D,OAAO,EAAE,CAAC;;;;;;;;;;;;;;OAcL,CAAC,CAAC;AACT,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe,EAAE,KAAa;IAC/D,OAAO,CACL,wBACU,GAAG,gBACA,mBAAmB,eACpB,UAAU,aACZ,WAAW,iBACN,OAAO,YAEpB,cAAK,KAAK,EAAC,oCAAoC,YAC7C,cAAK,KAAK,EAAC,kCAAkC,EAAC,IAAI,EAAC,QAAQ,YAAC,eAAM,KAAK,EAAC,iBAAiB,YAAE,KAAK,GAAQ,GAAM,GAC1G,GACF,CACP,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAkB;IACpC,OAAO,CACL,eAAK,KAAK,EAAC,gBAAgB,EAAC,KAAK,EAAC,mBAAmB,aACnD,cAAK,KAAK,EAAC,yBAAyB,YAClC,eAAK,KAAK,EAAC,WAAW,aACpB,aAAI,KAAK,EAAC,6BAA6B,mCAAwB,EAC/D,YAAG,KAAK,EAAC,uCAAuC,kHAE5C,EACJ,gBACE,EAAE,EAAC,kBAAkB,aACb,MAAM,eACJ,UAAU,aACZ,WAAW,aAEnB,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,2BAAmB,EAC5C,gBAAO,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,UAAU,EAAC,YAAY,EAAC,UAAU,EAAC,QAAQ,QAAC,SAAS,SAAG,IACjG,EACN,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,sBAAc,EACvC,gBAAO,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,OAAO,EAAC,YAAY,EAAC,OAAO,GAAG,IACzE,EACN,eAAK,KAAK,EAAC,MAAM,aACf,iBAAO,KAAK,EAAC,YAAY,4BAAY,eAAM,KAAK,EAAC,sBAAsB,8BAAqB,IAAQ,EACpG,gBAAO,IAAI,EAAC,UAAU,EAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,UAAU,EAAC,YAAY,EAAC,cAAc,EAAC,SAAS,EAAC,GAAG,EAAC,QAAQ,SAAG,IAC7G,EACN,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,mCAA2B,EACpD,gBAAO,IAAI,EAAC,UAAU,EAAC,KAAK,EAAC,cAAc,EAAC,EAAE,EAAC,qBAAqB,EAAC,YAAY,EAAC,cAAc,EAAC,SAAS,EAAC,GAAG,EAAC,QAAQ,SAAG,IACtH,EACN,cAAK,KAAK,EAAE,sBAAsB,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAC,mBAAmB,YAChH,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAChD,EACN,iBAAQ,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,uBAAuB,qCAA8B,IAC5E,IACH,GACF,EACN,2BAAS,cAAc,EAAE,GAAU,IAC/B,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAkB;IACvC,mEAAmE;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,CACL,cAAK,KAAK,EAAC,gBAAgB,EAAC,KAAK,EAAC,mBAAmB,YACnD,cAAK,KAAK,EAAC,yBAAyB,YAClC,eAAK,KAAK,EAAC,uBAAuB,aAChC,aAAI,KAAK,EAAC,iBAAiB,8BAAmB,EAC9C,eAAK,KAAK,EAAC,0BAA0B,aACnC,2BAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAU,2CACjC,EACN,YAAG,KAAK,EAAC,2BAA2B,yCAA6B,EAChE,IAAI,CAAC,QAAQ;4BACZ,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,2BAA2B,CAAC;4BAC/F,CAAC,CAAC,YAAG,KAAK,EAAC,sBAAsB,EAAC,IAAI,EAAC,QAAQ,wBAAY,IACzD,GACF,GACF,CACP,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,2BAA2B,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,CACL,cAAK,KAAK,EAAC,gBAAgB,EAAC,KAAK,EAAC,mBAAmB,YACnD,eAAK,KAAK,EAAC,uBAAuB,yCAAyB,YAAG,IAAI,EAAC,QAAQ,wBAAY,iBAAe,GAClG,CACP,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-default/bp-routes/register/_renderer.bootstrap5/GET.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAI9B,qFAAqF;AACrF,SAAS,UAAU,CAAC,GAAuB,EAAE,QAAgB;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc;IACrB,2EAA2E;IAC3E,2DAA2D;IAC3D,OAAO,EAAE,CAAC;;;;;;;;;;;;;;OAcL,CAAC,CAAC;AACT,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe,EAAE,KAAa;IAC/D,OAAO,CACL,wBACU,GAAG,gBACA,mBAAmB,eACpB,UAAU,aACZ,WAAW,iBACN,OAAO,YAEpB,cAAK,KAAK,EAAC,oCAAoC,YAC7C,cAAK,KAAK,EAAC,kCAAkC,EAAC,IAAI,EAAC,QAAQ,YAAC,eAAM,KAAK,EAAC,iBAAiB,YAAE,KAAK,GAAQ,GAAM,GAC1G,GACF,CACP,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAkB;IACpC,OAAO,CACL,eAAK,KAAK,EAAC,gBAAgB,EAAC,KAAK,EAAC,mBAAmB,aACnD,cAAK,KAAK,EAAC,yBAAyB,YAClC,eAAK,KAAK,EAAC,WAAW,aACpB,aAAI,KAAK,EAAC,6BAA6B,mCAAwB,EAC/D,YAAG,KAAK,EAAC,uCAAuC,kHAE5C,EACJ,gBACE,EAAE,EAAC,kBAAkB,aACb,MAAM,eACJ,UAAU,aACZ,WAAW,aAEnB,eAAK,KAAK,EAAC,MAAM,aAAC,gBAAO,KAAK,EAAC,YAAY,uCAA+B,EAAA,gBAAO,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,UAAU,EAAC,IAAI,EAAC,YAAY,EAAC,QAAQ,QAAC,YAAY,EAAC,KAAK,GAAG,IAAM,EAC5K,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,2BAAmB,EAC5C,gBAAO,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,UAAU,EAAC,YAAY,EAAC,UAAU,EAAC,QAAQ,QAAC,SAAS,SAAG,IACjG,EACN,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,sBAAc,EACvC,gBAAO,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,OAAO,EAAC,YAAY,EAAC,OAAO,GAAG,IACzE,EACN,eAAK,KAAK,EAAC,MAAM,aACf,iBAAO,KAAK,EAAC,YAAY,4BAAY,eAAM,KAAK,EAAC,sBAAsB,+BAAsB,IAAQ,EACrG,gBAAO,IAAI,EAAC,UAAU,EAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,UAAU,EAAC,YAAY,EAAC,cAAc,EAAC,SAAS,EAAC,IAAI,EAAC,QAAQ,SAAG,IAC9G,EACN,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,mCAA2B,EACpD,gBAAO,IAAI,EAAC,UAAU,EAAC,KAAK,EAAC,cAAc,EAAC,EAAE,EAAC,qBAAqB,EAAC,YAAY,EAAC,cAAc,EAAC,SAAS,EAAC,IAAI,EAAC,QAAQ,SAAG,IACvH,EACN,cAAK,KAAK,EAAE,sBAAsB,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAC,mBAAmB,YAChH,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAChD,EACN,iBAAQ,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,uBAAuB,qCAA8B,IAC5E,IACH,GACF,EACN,2BAAS,cAAc,EAAE,GAAU,IAC/B,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAkB;IACvC,mEAAmE;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,CACL,cAAK,KAAK,EAAC,gBAAgB,EAAC,KAAK,EAAC,mBAAmB,YACnD,cAAK,KAAK,EAAC,yBAAyB,YAClC,eAAK,KAAK,EAAC,uBAAuB,aAChC,aAAI,KAAK,EAAC,iBAAiB,8BAAmB,EAC9C,eAAK,KAAK,EAAC,0BAA0B,aACnC,2BAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAU,2CACjC,EACN,YAAG,KAAK,EAAC,2BAA2B,yCAA6B,EAChE,IAAI,CAAC,QAAQ;4BACZ,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,2BAA2B,CAAC;4BAC/F,CAAC,CAAC,YAAG,KAAK,EAAC,sBAAsB,EAAC,IAAI,EAAC,QAAQ,wBAAY,IACzD,GACF,GACF,CACP,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,2BAA2B,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,CACL,cAAK,KAAK,EAAC,gBAAgB,EAAC,KAAK,EAAC,mBAAmB,YACnD,eAAK,KAAK,EAAC,uBAAuB,yCAAyB,YAAG,IAAI,EAAC,QAAQ,wBAAY,iBAAe,GAClG,CACP,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/GET.d.ts

@@ -0,0 +1,34 @@
+export { title, description } from "./index.js";
+import * as av from "anyvali";
+import { type JsonObject } from "@betterportal/framework";
+export declare const operationId = "auth.social.view";
+export declare const auth: {
+    required: boolean;
+    permissions: never[];
+};
+export declare const cacheHints: {
+    ttlSeconds: number;
+    varyBy: never[];
+};
+export declare const dependencies: readonly [{
+    readonly operationId: "auth.social";
+    readonly method: "POST";
+}, {
+    readonly operationId: "auth.account";
+    readonly method: "POST";
+}];
+export declare const QuerySchema: av.ObjectSchema<{
+    code: av.OptionalSchema<av.StringSchema>;
+    state: av.OptionalSchema<av.StringSchema>;
+    error: av.OptionalSchema<av.StringSchema>;
+}>;
+export declare const ResponseSchema: av.BaseSchema<unknown, JsonObject>;
+declare const _default: import("@betterportal/framework").RouteHandler<Record<string, string>, {
+    code?: string | undefined;
+    state?: string | undefined;
+    error?: string | undefined;
+}, Record<string, string>, Record<string, unknown>, JsonObject, import("../../index.js").PluginFeature, {
+    [x: string]: unknown;
+}>;
+export default _default;
+//# sourceMappingURL=GET.d.ts.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/GET.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/social/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAI5E,eAAO,MAAM,WAAW,qBAAqB,CAAC;AAC9C,eAAO,MAAM,IAAI;;;CAAuC,CAAC;AACzD,eAAO,MAAM,UAAU;;;CAAgC,CAAC;AACxD,eAAO,MAAM,YAAY;;;;;;EAA6G,CAAC;AACvI,eAAO,MAAM,WAAW;;;;EAAkH,CAAC;AAC3I,eAAO,MAAM,cAAc,oCAAmB,CAAC;;;;;;;;AAC/C,wBASG"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/GET.js

@@ -0,0 +1,26 @@
+export { title, description } from "./index.js";
+import * as av from "anyvali";
+import { JsonObjectSchema } from "@betterportal/framework";
+import { createHandler } from "../../.bp-generated/route-runtime.js";
+import { socialConnections } from "../../../../social.js";
+import { AuthError } from "../../../../identity.js";
+export const operationId = "auth.social.view";
+export const auth = { required: false, permissions: [] };
+export const cacheHints = { ttlSeconds: 0, varyBy: [] };
+export const dependencies = [{ operationId: "auth.social", method: "POST" }, { operationId: "auth.account", method: "POST" }];
+export const QuerySchema = av.object({ code: av.optional(av.string()), state: av.optional(av.string()), error: av.optional(av.string()) });
+export const ResponseSchema = JsonObjectSchema;
+export default createHandler({ response: ResponseSchema, query: QuerySchema }, (ctx) => {
+    ctx.responseHeaders?.set("Cache-Control", "no-store");
+    ctx.responseHeaders?.set("Referrer-Policy", "no-referrer");
+    try {
+        return { status: "ok", endpoint: ctx.routeUrl?.("social.index", { absolute: true }) ?? "/social", signedIn: !!ctx.user, code: String(ctx.query.code ?? ""), state: String(ctx.query.state ?? ""), error: String(ctx.query.error ?? ""), connections: socialConnections(ctx.plugin.runtime, { tenantId: ctx.tenant.id, appId: ctx.app.id }).map(c => ({ id: c.id, title: c.kind })) };
+    }
+    catch (error) {
+        if (!(error instanceof AuthError))
+            throw error;
+        ctx.setStatus?.(error.status);
+        return { status: "error", message: error.message, connections: [] };
+    }
+});
+//# sourceMappingURL=GET.js.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/social/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAmB,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAC9C,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACxD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAU,CAAC;AACvI,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AAC3I,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAC/C,eAAe,aAAa,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,GAAG,EAAc,EAAE;IACjG,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAAC,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAClH,IAAI,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IACvX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC;YAAE,MAAM,KAAK,CAAC;QAC/C,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACtE,CAAC;AACH,CAAC,CAAC,CAAC"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/POST.d.ts

@@ -0,0 +1,31 @@
+export { title, description } from "./index.js";
+import * as av from "anyvali";
+import { type JsonObject } from "@betterportal/framework";
+export declare const operationId = "auth.social";
+export declare const auth: {
+    required: boolean;
+    permissions: never[];
+};
+export declare const cacheHints: {
+    ttlSeconds: number;
+    varyBy: never[];
+};
+export declare const RequestSchema: av.ObjectSchema<{
+    action: av.StringSchema;
+    connection: av.OptionalSchema<av.StringSchema>;
+    id: av.OptionalSchema<av.StringSchema>;
+    secret: av.OptionalSchema<av.StringSchema>;
+    code: av.OptionalSchema<av.StringSchema>;
+}>;
+export declare const ResponseSchema: av.BaseSchema<unknown, JsonObject>;
+declare const _default: import("@betterportal/framework").RouteHandler<Record<string, string>, Record<string, unknown>, Record<string, string>, {
+    action: string;
+    connection?: string | undefined;
+    id?: string | undefined;
+    secret?: string | undefined;
+    code?: string | undefined;
+}, JsonObject, import("../../index.js").PluginFeature, {
+    [x: string]: unknown;
+}>;
+export default _default;
+//# sourceMappingURL=POST.d.ts.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/POST.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"POST.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/social/POST.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAI5E,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,IAAI;;;CAAuC,CAAC;AACzD,eAAO,MAAM,UAAU;;;CAAgC,CAAC;AACxD,eAAO,MAAM,aAAa;;;;;;EAA2K,CAAC;AACtM,eAAO,MAAM,cAAc,oCAAmB,CAAC;;;;;;;;;;AAC/C,wBAEG"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/POST.js

@@ -0,0 +1,23 @@
+export { title, description } from "./index.js";
+import * as av from "anyvali";
+import { JsonObjectSchema } from "@betterportal/framework";
+import { createHandler } from "../../.bp-generated/route-runtime.js";
+import { socialPost } from "../../../../social.js";
+import { AuthError } from "../../../../identity.js";
+export const operationId = "auth.social";
+export const auth = { required: false, permissions: [] };
+export const cacheHints = { ttlSeconds: 0, varyBy: [] };
+export const RequestSchema = av.object({ action: av.string(), connection: av.optional(av.string()), id: av.optional(av.string()), secret: av.optional(av.string()), code: av.optional(av.string()) });
+export const ResponseSchema = JsonObjectSchema;
+export default createHandler({ response: ResponseSchema, request: RequestSchema }, async (ctx) => {
+    try {
+        return await socialPost(ctx);
+    }
+    catch (error) {
+        if (!(error instanceof AuthError))
+            throw error;
+        ctx.setStatus?.(error.status);
+        return { status: "error", message: error.message };
+    }
+});
+//# sourceMappingURL=POST.js.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/POST.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"POST.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/social/POST.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAmB,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;AACzC,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AACtM,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAC/C,eAAe,aAAa,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,GAAG,EAAuB,EAAE;IACpH,IAAI,CAAC;QAAC,OAAO,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC;YAAE,MAAM,KAAK,CAAC;QAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC5L,CAAC,CAAC,CAAC"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/_renderer.bootstrap5/GET.d.ts

@@ -0,0 +1,3 @@
+import type { HtmlRenderable } from "@betterportal/framework";
+export declare function render(data: Record<string, any>): HtmlRenderable;
+//# sourceMappingURL=GET.d.ts.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/_renderer.bootstrap5/GET.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.d.ts","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-default/bp-routes/social/_renderer.bootstrap5/GET.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,cAAc,CAmChE"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/_renderer.bootstrap5/GET.js

@@ -0,0 +1,36 @@
+import { jsx as _jsx, jsxs as _jsxs } from "jsx-htmx/jsx-runtime";
+/** @jsxImportSource jsx-htmx */
+import { js } from "jsx-htmx";
+export function render(data) {
+    return _jsxs("section", { id: "bp-social-ui", class: "container py-4", style: "max-width:540px", "data-endpoint": data.endpoint, "data-code": data.code, "data-state": data.state, children: [_jsx("h2", { children: data.signedIn ? "Link a sign-in provider" : "Sign in" }), _jsx("p", { role: "status", children: data.message ?? (data.error ? "The provider declined sign-in. Try again." : "") }), data.connections.map((c) => _jsxs("button", { class: "btn btn-outline-primary m-2", "data-connection": c.id, "data-action": data.signedIn ? "link" : "start", children: ["Continue with ", c.title] })), _jsx("script", { children: js(`(() => {
+      const root = document.getElementById("bp-social-ui"); if (!root) return;
+      const status = root.querySelector('[role="status"]');
+      const api = window.BetterPortalAuth;
+      const send = async (body, endpoint = root.dataset.endpoint) => {
+        if (!api) throw new Error("Open sign-in inside your app.");
+        const response = await api.fetch(endpoint, { method: "POST", headers: { "Content-Type": "application/json", Accept: "application/json" }, body: JSON.stringify(body) });
+        const result = await response.json(); if (!response.ok) throw new Error(result.message || "Sign-in failed."); return result;
+      };
+      root.querySelectorAll("[data-connection]").forEach(button => button.addEventListener("click", async () => {
+        button.disabled = true;
+        try { const result = await send({ action: button.dataset.action, connection: button.dataset.connection }); sessionStorage.setItem("bp.oauth." + result.id, result.secret); location.assign(result.authorizationUrl); }
+        catch (error) { status.textContent = error.message; button.disabled = false; }
+      }));
+      if (root.dataset.code && root.dataset.state) void (async () => {
+        const id = root.dataset.state; const secret = sessionStorage.getItem("bp.oauth." + id); sessionStorage.removeItem("bp.oauth." + id);
+        history.replaceState(null, "", location.pathname);
+        if (!secret) { status.textContent = "Sign-in was started in a different app or browser. Start again."; return; }
+        try {
+          let result = await send({ action: "complete", id, secret, code: root.dataset.code });
+          if (result.challenge) {
+            const factor = await api.factor(result.challenge); if (!factor) { status.textContent = "Sign-in cancelled."; return; }
+            result = await send({ action: "login.complete", id: result.challenge.id, secret: result.challenge.secret, ...factor }, result.accountUrl);
+          }
+          status.textContent = result.message || "Signed in.";
+          if (result.recoveryCodes?.length) { const pre = document.createElement("pre"); pre.textContent = "Save your recovery codes:\\n" + result.recoveryCodes.join("\\n"); status.append(pre); }
+          if (result.next) { const link = document.createElement("a"); link.href = result.next; link.textContent = "Continue"; link.className = "btn btn-primary d-block"; status.append(link); }
+        } catch (error) { status.textContent = error.message; }
+      })();
+    })()`) })] });
+}
+//# sourceMappingURL=GET.js.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/_renderer.bootstrap5/GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-default/bp-routes/social/_renderer.bootstrap5/GET.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAE9B,MAAM,UAAU,MAAM,CAAC,IAAyB;IAC9C,OAAO,mBAAS,EAAE,EAAC,cAAc,EAAC,KAAK,EAAC,gBAAgB,EAAC,KAAK,EAAC,iBAAiB,mBAAgB,IAAI,CAAC,QAAQ,eAAa,IAAI,CAAC,IAAI,gBAAc,IAAI,CAAC,KAAK,aACzJ,uBAAK,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,GAAM,EAAA,YAAG,IAAI,EAAC,QAAQ,YAAE,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,EAAE,CAAC,GAAK,EACrK,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,kBAAQ,KAAK,EAAC,6BAA6B,qBAAkB,CAAC,CAAC,EAAE,iBAAe,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,+BAAiB,CAAC,CAAC,KAAK,IAAU,CAAC,EACrL,2BAAS,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SA6BP,CAAC,GAAU,IACR,CAAC;AACb,CAAC"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/index.d.ts

@@ -0,0 +1,3 @@
+export declare const title = "Social sign-in";
+export declare const description = "Sign in with Google, Microsoft or GitHub, or link a provider to your account.";
+//# sourceMappingURL=index.d.ts.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/social/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,KAAK,mBAAmB,CAAC;AACtC,eAAO,MAAM,WAAW,kFAAkF,CAAC"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/index.js

@@ -0,0 +1,3 @@
+export const title = "Social sign-in";
+export const description = "Sign in with Google, Microsoft or GitHub, or link a provider to your account.";
+//# sourceMappingURL=index.js.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/social/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/social/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,KAAK,GAAG,gBAAgB,CAAC;AACtC,MAAM,CAAC,MAAM,WAAW,GAAG,+EAA+E,CAAC"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/GET.d.ts

@@ -0,0 +1,32 @@
+export { title, description } from "./index.js";
+import * as av from "anyvali";
+export declare const operationId = "auth.users.view";
+export declare const auth: {
+    required: boolean;
+    permissions: {
+        serviceId: string;
+        viewId: string;
+        permissions: "read"[];
+    }[];
+};
+export declare const cacheHints: {
+    ttlSeconds: number;
+    varyBy: never[];
+};
+export declare const dependencies: readonly [{
+    readonly operationId: "auth.users.manage";
+    readonly method: "POST";
+}];
+export declare const ResponseSchema: av.BaseSchema<unknown, import("@betterportal/framework").JsonObject>;
+export declare const QuerySchema: av.ObjectSchema<{
+    after: av.OptionalSchema<av.StringSchema>;
+    mailAfter: av.OptionalSchema<av.StringSchema>;
+}>;
+declare const _default: import("@betterportal/framework").RouteHandler<Record<string, string>, {
+    after?: string | undefined;
+    mailAfter?: string | undefined;
+}, Record<string, string>, Record<string, unknown>, import("@betterportal/framework").JsonObject, import("../../index.js").PluginFeature, {
+    [x: string]: unknown;
+}>;
+export default _default;
+//# sourceMappingURL=GET.d.ts.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/GET.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/users/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAI9B,eAAO,MAAM,WAAW,oBAAoB,CAAC;AAC7C,eAAO,MAAM,IAAI;;;;;;;CAA2I,CAAC;AAC7J,eAAO,MAAM,UAAU;;;CAAgC,CAAC;AACxD,eAAO,MAAM,YAAY;;;EAAkE,CAAC;AAC5F,eAAO,MAAM,cAAc,sEAAmB,CAAC;AAC/C,eAAO,MAAM,WAAW;;;EAAsF,CAAC;;;;;;;AAC/G,wBAyBG"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/GET.js

@@ -0,0 +1,39 @@
+export { title, description } from "./index.js";
+import * as av from "anyvali";
+import { JsonObjectSchema } from "@betterportal/framework";
+import { createHandler } from "../../.bp-generated/route-runtime.js";
+export const operationId = "auth.users.view";
+export const auth = { required: true, permissions: [{ serviceId: "org.betterportal.auth.default", viewId: "users.index", permissions: ["read"] }] };
+export const cacheHints = { ttlSeconds: 0, varyBy: [] };
+export const dependencies = [{ operationId: "auth.users.manage", method: "POST" }];
+export const ResponseSchema = JsonObjectSchema;
+export const QuerySchema = av.object({ after: av.optional(av.string()), mailAfter: av.optional(av.string()) });
+export default createHandler({ response: ResponseSchema, query: QuerySchema }, async (ctx) => {
+    const runtime = ctx.plugin.runtime;
+    const scope = { tenantId: ctx.tenant.id, appId: ctx.app.id };
+    const policy = await runtime.policy(scope);
+    const dir = { tenantId: scope.tenantId, appId: policy.isolation === "app" ? scope.appId : "" };
+    ctx.responseHeaders?.set("Cache-Control", "no-store");
+    return runtime.identity.storage.transaction(scope, async (tx) => {
+        const query = ctx.query;
+        const mailPage = await tx.failedMail(scope, { after: query?.mailAfter, limit: 101 });
+        const page = await tx.page("user", dir, { after: query?.after, limit: 101 });
+        const users = page.slice(0, 100);
+        const groups = await tx.list("group", dir);
+        return {
+            nextUrl: page.length > 100 ? ctx.routeUrl?.("users.index", { absolute: true, query: { after: users.at(-1).id, ...(query?.mailAfter ? { mailAfter: query.mailAfter } : {}) } }) ?? "" : "",
+            mailNextUrl: mailPage.length > 100 ? ctx.routeUrl?.("users.index", { absolute: true, query: { mailAfter: mailPage[99].id, ...(query?.after ? { after: query.after } : {}) } }) ?? "" : "",
+            status: "ok", endpoint: ctx.routeUrl?.("users.index", { absolute: true }) ?? "/users", isolation: policy.isolation, mode: runtime.identity.storage.mode, roleIds: policy.allowedRoleIds, canManageDirectory: policy.isolation === "app" || policy.canManageDirectory === true,
+            users: await Promise.all(users.map(async (u) => {
+                const roles = (await tx.get("roles", u.id, scope))?.roles ?? [];
+                const groupRoles = groups.filter(g => g.members.includes(u.id)).flatMap(g => g.appRoles[scope.appId] ?? []);
+                return { id: u.id, username: u.username, email: u.email ?? "", name: u.name ?? "", enabled: u.enabled, emailVerified: u.emailVerified, roles, effectiveRoles: [...new Set([...roles, ...groupRoles])].filter(id => policy.allowedRoleIds.includes(id) || id === "*") };
+            })),
+            invitations: (await tx.list("challenge", scope)).filter(c => c.purpose === "invite" && Number(c.expiresAt) > Date.now()).map(c => ({ id: c.id, email: String(c.data.email), expiresAt: Number(c.expiresAt) })),
+            groups: groups.map(g => ({ id: g.id, name: String(g.name), members: g.members, roles: g.appRoles[scope.appId] ?? [] })),
+            mail: mailPage.slice(0, 100).map(m => ({ id: m.id, state: String(m.state), attempts: Number(m.attempts) })),
+            audit: (await tx.page("audit", scope, { limit: 100, descending: true })).map(a => ({ id: a.id, actor: String(a.actor), event: String(a.event), at: Number(a.at) }))
+        };
+    });
+});
+//# sourceMappingURL=GET.js.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/users/GET.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAC7C,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,+BAA+B,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,MAAe,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7J,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACxD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAU,CAAC;AAC5F,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAC/C,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/G,eAAe,aAAa,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;IACzF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;IAAC,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAAC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7I,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC/F,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IACtD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAC,EAAE,EAAC,EAAE;QAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAiD,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAO,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;YAC1L,WAAW,EAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;YACzL,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,kBAAkB,EAAE,MAAM,CAAC,SAAS,KAAK,KAAK,IAAI,MAAM,CAAC,kBAAkB,KAAK,IAAI;YAC7Q,KAAK,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,CAAC,EAAC,EAAE;gBAC3C,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,KAAiB,IAAI,EAAE,CAAC;gBAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC,OAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC,QAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBACxJ,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;YACzQ,CAAC,CAAC,CAAC;YACH,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,CAAC,CAAC,IAAgC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3O,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAmB,EAAE,KAAK,EAAG,CAAC,CAAC,QAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjK,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC3G,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SACpK,CAAC;IACF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/POST.d.ts

@@ -0,0 +1,41 @@
+export { title, description } from "./index.js";
+import * as av from "anyvali";
+export declare const operationId = "auth.users.manage";
+export declare const auth: {
+    required: boolean;
+    elevation: {
+        minimum: "mfa";
+    };
+    permissions: {
+        serviceId: string;
+        viewId: string;
+        permissions: "update"[];
+    }[];
+};
+export declare const cacheHints: {
+    ttlSeconds: number;
+    varyBy: never[];
+};
+export declare const RequestSchema: av.ObjectSchema<{
+    action: av.StringSchema;
+    id: av.OptionalSchema<av.StringSchema>;
+    email: av.OptionalSchema<av.StringSchema>;
+    name: av.OptionalSchema<av.StringSchema>;
+    enabled: av.OptionalSchema<av.BoolSchema>;
+    roles: av.OptionalSchema<av.ArraySchema<av.StringSchema>>;
+    members: av.OptionalSchema<av.ArraySchema<av.StringSchema>>;
+}>;
+export declare const ResponseSchema: av.BaseSchema<unknown, import("@betterportal/framework").JsonObject>;
+declare const _default: import("@betterportal/framework").RouteHandler<Record<string, string>, Record<string, unknown>, Record<string, string>, {
+    action: string;
+    id?: string | undefined;
+    email?: string | undefined;
+    name?: string | undefined;
+    enabled?: boolean | undefined;
+    roles?: string[] | undefined;
+    members?: string[] | undefined;
+}, import("@betterportal/framework").JsonObject, import("../../index.js").PluginFeature, {
+    [x: string]: unknown;
+}>;
+export default _default;
+//# sourceMappingURL=POST.d.ts.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/POST.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"POST.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/users/POST.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAK9B,eAAO,MAAM,WAAW,sBAAsB,CAAC;AAC/C,eAAO,MAAM,IAAI;;;;;;;;;;CAAqL,CAAC;AACvM,eAAO,MAAM,UAAU;;;CAAgC,CAAC;AACxD,eAAO,MAAM,aAAa;;;;;;;;EAA6P,CAAC;AACxR,eAAO,MAAM,cAAc,sEAAmB,CAAC;;;;;;;;;;;;AAC/C,wBAoDG"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/POST.js

@@ -0,0 +1,103 @@
+export { title, description } from "./index.js";
+import * as av from "anyvali";
+import { JsonObjectSchema, uuidv7 } from "@betterportal/framework";
+import { createHandler } from "../../.bp-generated/route-runtime.js";
+import { accountLink } from "../../../../account.js";
+import { AuthError, isValidEmail } from "../../../../identity.js";
+export const operationId = "auth.users.manage";
+export const auth = { required: true, elevation: { minimum: "mfa" }, permissions: [{ serviceId: "org.betterportal.auth.default", viewId: "users.index", permissions: ["update"] }] };
+export const cacheHints = { ttlSeconds: 0, varyBy: [] };
+export const RequestSchema = av.object({ action: av.string(), id: av.optional(av.string()), email: av.optional(av.string()), name: av.optional(av.string()), enabled: av.optional(av.bool()), roles: av.optional(av.array(av.string())), members: av.optional(av.array(av.string())) });
+export const ResponseSchema = JsonObjectSchema;
+export default createHandler({ response: ResponseSchema, request: RequestSchema }, async (ctx) => {
+    const runtime = ctx.plugin.runtime;
+    const identity = runtime.identity;
+    const scope = { tenantId: ctx.tenant.id, appId: ctx.app.id };
+    const policy = await runtime.policy(scope);
+    const dir = { tenantId: scope.tenantId, appId: policy.isolation === "app" ? scope.appId : "" };
+    const body = ctx.request;
+    try {
+        if (policy.isolation === "tenant" && !policy.canManageDirectory && ["disable", "sessions.revoke", "group.save", "group.delete"].includes(body.action))
+            throw new AuthError("Use the tenant's designated directory administration app to manage shared accounts and groups.", 403);
+        const roles = [...new Set(body.roles ?? [])];
+        if (roles.some(id => id === "*" || !policy.allowedRoleIds.includes(id)))
+            throw new AuthError("Choose existing app roles. Root cannot be provisioned here.");
+        await identity.storage.transaction(scope, async (tx) => {
+            const actor = await tx.get("user", ctx.user.sub, dir);
+            if (!actor?.enabled)
+                throw new AuthError("Account unavailable.", 401);
+            await identity.assertActiveSession(tx, scope, ctx.user, actor);
+            if (body.action === "invite") {
+                if (policy.registration === "closed")
+                    throw new AuthError("Registration is closed.");
+                const email = (body.email ?? "").trim().toLowerCase();
+                if (!isValidEmail(email))
+                    throw new AuthError("Enter a valid email.");
+                const ticket = await identity.challengeInTransaction(tx, scope, "invite", { email, roles }, undefined, 86400);
+                const link = accountLink(ctx, "invite.accept", ticket);
+                if (!link)
+                    throw new AuthError("Mount the account page before inviting users.");
+                await runtime.mail.enqueue(tx, scope, email, `Invitation to ${ctx.app.title}`, `Accept your invitation: ${link}\nThis invitation expires in 24 hours.`);
+            }
+            else if (body.action === "invite.revoke") {
+                const challenge = await tx.get("challenge", body.id ?? "", scope);
+                if (!challenge || challenge.purpose !== "invite")
+                    throw new AuthError("Invitation unavailable.", 404);
+                await tx.remove("challenge", challenge.id, scope);
+            }
+            else if (body.action === "roles" || body.action === "disable" || body.action === "sessions.revoke") {
+                const user = await tx.get("user", body.id ?? "", dir);
+                if (!user)
+                    throw new AuthError("User unavailable.", 404);
+                const current = await tx.get("roles", user.id, scope);
+                if (user.bootstrapAdmin || current?.roles?.includes("*"))
+                    throw new AuthError("The bootstrap administrator cannot be modified through this interface.", 403);
+                if (body.action === "roles")
+                    await tx.put("roles", scope, { id: user.id, roles, initialized: true });
+                else {
+                    if (body.action === "disable")
+                        user.enabled = body.enabled === true;
+                    user.refreshVersion++;
+                    await tx.put("user", dir, user);
+                }
+            }
+            else if (body.action === "group.save") {
+                const id = body.id || uuidv7();
+                if (body.id && !await tx.get("group", id, dir))
+                    throw new AuthError("Group unavailable.", 404);
+                const members = [...new Set(body.members ?? [])];
+                for (const member of members)
+                    if (!await tx.get("user", member, dir))
+                        throw new AuthError("Group member belongs to a different directory.");
+                const existing = await tx.get("group", id, dir);
+                await tx.put("group", dir, { id, name: (body.name ?? "Group").slice(0, 200), members, appRoles: { ...(existing?.appRoles ?? {}), [scope.appId]: roles } });
+            }
+            else if (body.action === "group.roles") {
+                const group = await tx.get("group", body.id ?? "", dir);
+                if (!group)
+                    throw new AuthError("Group unavailable.", 404);
+                await tx.put("group", dir, { ...group, appRoles: { ...group.appRoles, [scope.appId]: roles } });
+            }
+            else if (body.action === "group.delete") {
+                await tx.remove("group", body.id ?? "", dir);
+            }
+            else if (body.action === "mail.retry") {
+                const mail = await tx.get("mail", body.id ?? "", scope);
+                if (!mail || mail.state !== "failed")
+                    throw new AuthError("Failed delivery unavailable.");
+                await tx.put("mail", scope, { ...mail, attempts: 0, nextAttempt: Date.now(), state: "pending" });
+            }
+            else
+                throw new AuthError("Unknown admin action.");
+            await identity.audit(tx, scope, ctx.user.sub, `admin.${body.action}`, { id: body.id ?? "", roles });
+        });
+        return { status: "ok", message: "Saved." };
+    }
+    catch (error) {
+        if (!(error instanceof AuthError))
+            throw error;
+        ctx.setStatus?.(error.status);
+        return { status: "error", message: error.message };
+    }
+});
+//# sourceMappingURL=POST.js.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/POST.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"POST.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/users/POST.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAa,MAAM,yBAAyB,CAAC;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAC/C,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAc,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,+BAA+B,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,QAAiB,CAAC,EAAE,CAAC,EAAE,CAAC;AACvM,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AACxR,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAC/C,eAAe,aAAa,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;IAC7F,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;IAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAAC,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAAC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChL,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAAC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAyC,CAAC;IAC3J,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,gGAAgG,EAAE,GAAG,CAAC,CAAC;QAClR,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;QAC5J,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAC,EAAE,EAAC,EAAE;YACnD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAO,MAAM,EAAE,GAAG,CAAC,IAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,KAAK,EAAE,OAAO;gBAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;YACtE,MAAM,QAAQ,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAK,EAAE,KAAK,CAAC,CAAC;YAChE,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ;oBAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;gBACrF,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACtD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;gBACtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC9G,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;gBACvD,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;gBAChF,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,2BAA2B,IAAI,wCAAwC,CAAC,CAAC;YAC1J,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC3C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;gBAClE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ;oBAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;gBACtG,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBACrG,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,CAAO,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5D,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBACtD,IAAI,IAAI,CAAC,cAAc,IAAK,OAAO,EAAE,KAA8B,EAAE,QAAQ,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,wEAAwE,EAAE,GAAG,CAAC,CAAC;gBACvL,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;oBAAE,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;qBAChG,CAAC;oBAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;wBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;oBAAC,IAAI,CAAC,cAAc,EAAE,CAAC;oBAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;YACvI,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACxC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;gBAC/B,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;gBAC/F,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;gBACjD,KAAK,MAAM,MAAM,IAAI,OAAO;oBAAE,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;gBAC5I,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;gBAChD,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAkB,IAAI,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACvK,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;gBACxD,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;gBAC3D,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAI,KAAK,CAAC,QAAmB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9G,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBAC1C,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/C,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;gBACxD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;gBAC1F,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YACnG,CAAC;;gBAAM,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;YACpD,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAK,CAAC,GAAG,EAAE,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC;YAAE,MAAM,KAAK,CAAC;QAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxJ,CAAC,CAAC,CAAC"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/_renderer.bootstrap5/GET.d.ts

@@ -0,0 +1,3 @@
+import type { HtmlRenderable } from "@betterportal/framework";
+export declare function render(data: Record<string, any>): HtmlRenderable;
+//# sourceMappingURL=GET.d.ts.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/_renderer.bootstrap5/GET.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.d.ts","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-default/bp-routes/users/_renderer.bootstrap5/GET.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,cAAc,CA4BhE"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/_renderer.bootstrap5/GET.js

@@ -0,0 +1,19 @@
+import { jsx as _jsx, jsxs as _jsxs } from "jsx-htmx/jsx-runtime";
+/** @jsxImportSource jsx-htmx */
+import { js } from "jsx-htmx";
+export function render(data) {
+    return _jsxs("section", { id: "bp-users-ui", class: "container py-4", "data-endpoint": data.endpoint ?? "/users", children: [_jsx("h2", { children: "Users and groups" }), _jsxs("p", { children: [data.mode, " mode \u00B7 ", data.isolation === "tenant" ? "Accounts shared within this tenant" : "Accounts isolated to this app"] }), _jsx("p", { role: "status", "aria-live": "polite" }), _jsxs("p", { children: ["Available role IDs: ", (data.roleIds ?? []).join(", ") || "None configured"] }), _jsxs("form", { class: "border p-3 mb-3", "data-bp-no-route": "", children: [_jsx("h3", { children: "Invite user" }), _jsx("input", { type: "hidden", name: "action", value: "invite" }), _jsxs("label", { class: "form-label", children: ["Email", _jsx("input", { class: "form-control", type: "email", name: "email", required: true })] }), _jsxs("label", { class: "form-label ms-2", children: ["Role IDs (comma separated)", _jsx("input", { class: "form-control", name: "roles" })] }), _jsx("button", { class: "btn btn-primary ms-2", type: "submit", children: "Send invitation" })] }), _jsx("div", { class: "table-responsive", children: _jsxs("table", { class: "table", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { children: "User" }), _jsx("th", { children: "Roles" }), _jsx("th", { children: "Account" })] }) }), _jsx("tbody", { children: (data.users ?? []).map((u) => _jsxs("tr", { children: [_jsxs("td", { children: [u.email || u.username, _jsx("small", { class: "d-block", children: u.id })] }), _jsx("td", { children: _jsxs("form", { "data-bp-no-route": "", children: [_jsx("input", { type: "hidden", name: "action", value: "roles" }), _jsx("input", { type: "hidden", name: "id", value: u.id }), _jsx("input", { "aria-label": "Role IDs", class: "form-control", name: "roles", value: u.roles.join(",") }), _jsx("button", { class: "btn btn-sm btn-primary", type: "submit", children: "Save roles" })] }) }), _jsx("td", { children: data.canManageDirectory ? _jsxs("form", { "data-bp-no-route": "", children: [_jsx("input", { type: "hidden", name: "action", value: "disable" }), _jsx("input", { type: "hidden", name: "id", value: u.id }), _jsx("input", { type: "hidden", name: "enabled", value: String(!u.enabled) }), _jsx("button", { class: "btn btn-sm btn-outline-danger", type: "submit", children: u.enabled ? "Disable" : "Enable" })] }) : (u.enabled ? "Enabled" : "Disabled") })] })) })] }) }), data.nextUrl ? _jsx("a", { class: "btn btn-outline-secondary mb-3", href: data.nextUrl, "hx-get": data.nextUrl, "hx-target": "#bp-main", children: "Next users" }) : null, _jsx("h3", { children: "Pending invitations" }), (data.invitations ?? []).map((invite) => _jsxs("form", { "data-bp-no-route": "", children: [_jsx("input", { type: "hidden", name: "action", value: "invite.revoke" }), _jsx("input", { type: "hidden", name: "id", value: invite.id }), _jsxs("span", { children: [invite.email, " "] }), _jsx("button", { class: "btn btn-sm btn-outline-danger", type: "submit", children: "Revoke invitation" })] })), _jsx("h3", { children: "Groups" }), data.canManageDirectory ? [...(data.groups ?? []), { id: "", name: "", members: [], roles: [] }].map((g) => _jsxs("form", { class: "border p-3 mb-3", "data-bp-no-route": "", children: [_jsx("input", { type: "hidden", name: "action", value: "group.save" }), _jsx("input", { type: "hidden", name: "id", value: g.id }), _jsxs("label", { class: "form-label d-block", children: ["Name", _jsx("input", { class: "form-control", name: "name", value: g.name, required: true })] }), _jsxs("label", { class: "form-label d-block", children: ["Member user IDs (comma separated)", _jsx("input", { class: "form-control", name: "members", value: g.members.join(",") })] }), _jsxs("label", { class: "form-label d-block", children: ["App role IDs (comma separated)", _jsx("input", { class: "form-control", name: "roles", value: g.roles.join(",") })] }), _jsx("button", { class: "btn btn-primary", type: "submit", children: "Save group" })] })) : _jsx("p", { children: "Manage shared groups in the tenant\u2019s directory administration app." }), data.canManageDirectory ? (data.groups ?? []).map((g) => _jsxs("form", { "data-bp-no-route": "", children: [_jsx("input", { type: "hidden", name: "action", value: "group.delete" }), _jsx("input", { type: "hidden", name: "id", value: g.id }), _jsxs("span", { children: [g.name, " "] }), _jsx("button", { class: "btn btn-sm btn-outline-danger", type: "submit", children: "Delete group" })] })) : null, !data.canManageDirectory ? (data.groups ?? []).map((g) => _jsxs("form", { class: "border p-3 mb-3", "data-bp-no-route": "", children: [_jsx("input", { type: "hidden", name: "action", value: "group.roles" }), _jsx("input", { type: "hidden", name: "id", value: g.id }), _jsxs("label", { class: "form-label", children: [g.name, ": role IDs in this app", _jsx("input", { class: "form-control", name: "roles", value: g.roles.join(",") })] }), _jsx("button", { class: "btn btn-sm btn-primary", type: "submit", children: "Save app mapping" })] })) : null, _jsx("h3", { children: "Failed email deliveries" }), (data.mail ?? []).map((m) => _jsxs("form", { "data-bp-no-route": "", children: [_jsx("input", { type: "hidden", name: "action", value: "mail.retry" }), _jsx("input", { type: "hidden", name: "id", value: m.id }), _jsxs("span", { children: [m.id, " \u00B7 ", m.attempts, " attempts "] }), _jsx("button", { class: "btn btn-sm btn-secondary", type: "submit", children: "Retry" })] })), data.mailNextUrl ? _jsx("a", { class: "btn btn-outline-secondary my-3", href: data.mailNextUrl, "hx-get": data.mailNextUrl, "hx-target": "#bp-main", children: "More failed deliveries" }) : null, _jsx("h3", { class: "mt-3", children: "Recent account events" }), _jsx("ul", { children: (data.audit ?? []).map((a) => _jsxs("li", { children: [new Date(a.at).toISOString(), " \u00B7 ", a.event, " \u00B7 ", a.actor] })) }), _jsx("script", { children: js(`(() => {
+      const root = document.getElementById("bp-users-ui"); if (!root) return;
+      root.querySelectorAll("form").forEach(form => form.addEventListener("submit", async event => {
+        event.preventDefault(); event.stopPropagation(); const button = form.querySelector("button"); button.disabled = true;
+        try {
+          const data = Object.fromEntries(new FormData(form)); for (const key of ["roles", "members"]) if (key in data) data[key] = data[key].split(",").map(s => s.trim()).filter(Boolean);
+          if ("enabled" in data) data.enabled = data.enabled === "true";
+          const endpoint = new URL(root.dataset.endpoint, location.href).href;
+          const result = await window.BetterPortalAuth.fetch(endpoint, { method: "POST", headers: { "Content-Type": "application/json", Accept: "application/json" }, body: JSON.stringify(data) });
+          const body = await result.json(); root.querySelector('[role="status"]').textContent = body.message || (result.ok ? "Saved. Reload this page to see changes." : "Request failed.");
+        } catch (error) { root.querySelector('[role="status"]').textContent = error.message; } finally { button.disabled = false; }
+      }));
+    })()`) })] });
+}
+//# sourceMappingURL=GET.js.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/_renderer.bootstrap5/GET.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GET.js","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-auth-default/bp-routes/users/_renderer.bootstrap5/GET.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAE9B,MAAM,UAAU,MAAM,CAAC,IAAyB;IAC9C,OAAO,mBAAS,EAAE,EAAC,aAAa,EAAC,KAAK,EAAC,gBAAgB,mBAAgB,IAAI,CAAC,QAAQ,IAAI,QAAQ,aAC9F,4CAAyB,EAAA,wBAAI,IAAI,CAAC,IAAI,mBAAU,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,+BAA+B,IAAK,EACzJ,YAAG,IAAI,EAAC,QAAQ,eAAW,QAAQ,GAAG,EAAA,gDAAwB,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,IAAK,EACvH,gBAAM,KAAK,EAAC,iBAAiB,sBAAkB,EAAE,aAAC,uCAAoB,EAAA,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,QAAQ,GAAG,EAAA,iBAAO,KAAK,EAAC,YAAY,sBAAM,gBAAO,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,QAAQ,SAAG,IAAQ,EAAA,iBAAO,KAAK,EAAC,iBAAiB,2CAA2B,gBAAO,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,OAAO,GAAG,IAAQ,EAAA,iBAAQ,KAAK,EAAC,sBAAsB,EAAC,IAAI,EAAC,QAAQ,gCAAyB,IAAO,EACha,cAAK,KAAK,EAAC,kBAAkB,YAAC,iBAAO,KAAK,EAAC,OAAO,aAAC,0BAAO,yBAAI,gCAAa,EAAA,iCAAc,EAAA,mCAAgB,IAAK,GAAQ,EAAA,0BAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,yBAAI,yBAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,EAAC,gBAAO,KAAK,EAAC,SAAS,YAAE,CAAC,CAAC,EAAE,GAAS,IAAK,EAAA,uBAAI,oCAAuB,EAAE,aAAC,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,OAAO,GAAG,EAAA,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAI,EAAA,8BAAkB,UAAU,EAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAI,EAAA,iBAAQ,KAAK,EAAC,wBAAwB,EAAC,IAAI,EAAC,QAAQ,2BAAoB,IAAO,GAAK,EAAA,uBAAK,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,oCAAuB,EAAE,aAAC,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,SAAS,GAAG,EAAA,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAI,EAAA,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAI,EAAA,iBAAQ,KAAK,EAAC,+BAA+B,EAAC,IAAI,EAAC,QAAQ,YAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,GAAU,IAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAM,IAAK,CAAC,GAAS,IAAQ,GAAM,EAC56B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,YAAG,KAAK,EAAC,gCAAgC,EAAC,IAAI,EAAE,IAAI,CAAC,OAAO,YAAU,IAAI,CAAC,OAAO,eAAY,UAAU,2BAAe,CAAC,CAAC,CAAC,IAAI,EAC9I,+CAA4B,EAAC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAW,EAAE,EAAE,CAAC,oCAAuB,EAAE,aAAC,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,eAAe,GAAG,EAAA,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAE,MAAM,CAAC,EAAE,GAAI,EAAA,2BAAO,MAAM,CAAC,KAAK,SAAS,EAAA,iBAAQ,KAAK,EAAC,+BAA+B,EAAC,IAAI,EAAC,QAAQ,kCAA2B,IAAO,CAAC,EAC7U,kCAAe,EAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,gBAAM,KAAK,EAAC,iBAAiB,sBAAkB,EAAE,aAAC,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,YAAY,GAAG,EAAA,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAI,EAAA,iBAAO,KAAK,EAAC,oBAAoB,qBAAK,gBAAO,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,SAAG,IAAQ,EAAA,iBAAO,KAAK,EAAC,oBAAoB,kDAAkC,gBAAO,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAI,IAAQ,EAAA,iBAAO,KAAK,EAAC,oBAAoB,+CAA+B,gBAAO,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAI,IAAQ,EAAA,iBAAQ,KAAK,EAAC,iBAAiB,EAAC,IAAI,EAAC,QAAQ,2BAAoB,IAAO,CAAC,CAAC,CAAC,CAAC,kGAAyE,EAC9zB,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,oCAAuB,EAAE,aAAC,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,cAAc,GAAG,EAAA,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAI,EAAA,2BAAO,CAAC,CAAC,IAAI,SAAS,EAAA,iBAAQ,KAAK,EAAC,+BAA+B,EAAC,IAAI,EAAC,QAAQ,6BAAsB,IAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EACtT,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,gBAAM,KAAK,EAAC,iBAAiB,sBAAkB,EAAE,aAAC,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,aAAa,GAAG,EAAA,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAI,EAAA,iBAAO,KAAK,EAAC,YAAY,aAAE,CAAC,CAAC,IAAI,4BAAuB,gBAAO,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAI,IAAQ,EAAA,iBAAQ,KAAK,EAAC,wBAAwB,EAAC,IAAI,EAAC,QAAQ,iCAA0B,IAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAC3b,mDAAgC,EAAC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,oCAAuB,EAAE,aAAC,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,YAAY,GAAG,EAAA,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAI,EAAA,2BAAO,CAAC,CAAC,EAAE,cAAK,CAAC,CAAC,QAAQ,kBAAkB,EAAA,iBAAQ,KAAK,EAAC,0BAA0B,EAAC,IAAI,EAAC,QAAQ,sBAAe,IAAO,CAAC,EAC3T,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAG,KAAK,EAAC,gCAAgC,EAAC,IAAI,EAAE,IAAI,CAAC,WAAW,YAAU,IAAI,CAAC,WAAW,eAAY,UAAU,uCAA2B,CAAC,CAAC,CAAC,IAAI,EACtK,aAAI,KAAK,EAAC,MAAM,sCAA2B,EAAA,uBAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,yBAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,cAAK,CAAC,CAAC,KAAK,cAAK,CAAC,CAAC,KAAK,IAAM,CAAC,GAAM,EACzJ,2BAAS,EAAE,CAAC;;;;;;;;;;;;SAYP,CAAC,GAAU,IACR,CAAC;AACb,CAAC"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/index.d.ts

@@ -0,0 +1,3 @@
+export declare const title = "Users and groups";
+export declare const description = "Manage users, group membership, invitations and app roles.";
+//# sourceMappingURL=index.d.ts.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/users/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,KAAK,qBAAqB,CAAC;AACxC,eAAO,MAAM,WAAW,+DAA+D,CAAC"}

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/index.js

@@ -0,0 +1,3 @@
+export const title = "Users and groups";
+export const description = "Manage users, group membership, invitations and app roles.";
+//# sourceMappingURL=index.js.map

package/lib/plugins/service-betterportal-auth-default/bp-routes/users/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-auth-default/bp-routes/users/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,KAAK,GAAG,kBAAkB,CAAC;AACxC,MAAM,CAAC,MAAM,WAAW,GAAG,4DAA4D,CAAC"}