@bluealba/pae-core 0.0.3 → 3.4.1-develop-1171

package/dist/src/authentication/entities/authentication-config.entity.d.ts

@@ -0,0 +1,84 @@
+import { ImpersonationMode } from "../impersonation";
+import { PasswordConstraints } from "../password-constraints";
+/**
+ * A set of configuration parameters for the platform authentication.
+ * This is the response of an endpoint used by the UI (SPA) to know which features are available
+ * and provide an accurate user-experience.
+ */
+export type AuthenticationConfig = {
+    /**
+     * The list of OAuth enabled authentication providers.
+     */
+    providers: AuthProvider[];
+    /**
+     * Tells whether the Platform allows to authenticate with password method
+     */
+    passwordMethodEnabled: boolean;
+    /**
+     * Tells whether the Platform allows users to sign-up/register by themselves
+     */
+    registerEnabled: boolean;
+    /**
+     * Tells whether the Platform allow admins to send invitations to create new users.
+     */
+    invitationsEnabled: boolean;
+    /**
+     * Amount of time in milliseconds the reset password request link will live for the reset password flow.
+     */
+    resetPasswordExpiration: number;
+    /**
+     * The Password Constraints
+     */
+    passwordConstraints: PasswordConstraints;
+    /**
+     * How long a Session remains valid before the user is required to re-authenticate. Unit: ms
+     */
+    sessionExpiration: number;
+    /**
+     * A secure key used to sign and verify JWT tokens.
+     */
+    jwtSecret: string;
+    /**
+     * Does session JWT include the original user of the idp?
+     */
+    sessionIncludeOrigUser: boolean;
+    /**
+     * Impersonation Data Flow Strategy.
+     */
+    impersonationMode: ImpersonationMode;
+    /**
+    * Can impersonate users that do not currently exist in the system ?
+    */
+    canImpersonateNonExistentUsers: boolean;
+    /**
+     * Indicates the platform is in multi-tenant mode.
+     * When true, the sign-in view should indicate that tenant selection/identification is required.
+     */
+    tenantRequired?: boolean;
+    /**
+     * Indicates that the tenant could not be resolved from the request in multi-tenant mode.
+     * When true, the sign-in view should prompt the user to specify a tenant.
+     */
+    tenantMissing?: boolean;
+    /**
+     * Indicates that the resolved tenant has no associated Identity Providers.
+     * When true, the sign-in view should display an appropriate message to the user.
+     */
+    noProvidersForTenant?: boolean;
+    /**
+     * The tenant ID that was resolved from the request.
+     * This helps the client understand which tenant context is active.
+     */
+    resolvedTenantId?: string;
+    /**
+     * The display name of the tenant that was resolved from the request.
+     * Used to show user-friendly tenant names in error messages and UI.
+     */
+    resolvedTenantDisplayName?: string;
+};
+export type AuthProvider = {
+    name: string;
+    path: string;
+    displayName: string;
+};
+//# sourceMappingURL=authentication-config.entity.d.ts.map

package/dist/src/authentication/entities/authentication-config.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-config.entity.d.ts","sourceRoot":"","sources":["../../../../src/authentication/entities/authentication-config.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IAEjC;;OAEG;IACH,SAAS,EAAE,YAAY,EAAE,CAAC;IAE1B;;OAEG;IACH,qBAAqB,EAAE,OAAO,CAAC;IAE/B;;OAEG;IACH,eAAe,EAAE,OAAO,CAAC;IAEzB;;OAEG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAE5B;;OAEG;IACH,uBAAuB,EAAE,MAAM,CAAC;IAEhC;;OAEG;IACH,mBAAmB,EAAE,mBAAmB,CAAC;IAGzC;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,sBAAsB,EAAE,OAAO,CAAC;IAEhC;;OAEG;IACH,iBAAiB,EAAE,iBAAiB,CAAC;IAGrC;;MAEE;IACF,8BAA8B,EAAE,OAAO,CAAC;IAExC;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAE/B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CAEpC,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB,CAAA"}

package/dist/src/authentication/entities/authentication-config.entity.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=authentication-config.entity.js.map

package/dist/src/authentication/entities/authentication-config.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-config.entity.js","sourceRoot":"","sources":["../../../../src/authentication/entities/authentication-config.entity.ts"],"names":[],"mappings":""}

package/dist/src/authentication/entities/authentication-parameters.entity.d.ts

@@ -0,0 +1,101 @@
+export type AuthenticationParamName = 'authentication:password:enabled' | 'authentication:password:reset-expiration' | 'authentication:password:register-enabled' | 'authentication:password:invitations-enabled' | 'authentication:password:constraints' | 'authentication:session:expiration' | 'authentication:session:jwt-secret' | 'authentication:session:include-orig-user' | 'authentication:impersonation:mode' | 'authentication:impersonation:non-existent-users';
+export type PlatformParameterDefinition = {
+    name: AuthenticationParamName;
+    defaultValue?: string | number | boolean | object;
+    /**
+     * Converts an incoming value from the service/DTO into the actual value that will be stored in the DB
+     */
+    format?: (v: any) => any;
+    parse?: (v: any) => any;
+};
+/**
+ * The definition of all the parameters related to Authentication.
+ * These are potential Platform Parameters stored in the Platform DB having the "name" specified here.
+ * As the current "Platform Parameters" concept are just runtime values when using them in a service
+ * we need to define their metadata, define "which are the parameters" that can take some values.
+ * For the moment this is our first usage, so this will probably evolve from using/experimenting.
+ *
+ * History: These used to be environmental variables
+ */
+export declare const AuthenticationParameters: {
+    /**
+     * Is password method enabled ?
+     */
+    AUTHENTICATION_PASSWORD_ENABLED: {
+        name: "authentication:password:enabled";
+        defaultValue: false;
+    };
+    /**
+     * How long the reset password link sent will live ?
+     */
+    AUTHENTICATION_PASSWORD_RESET_EXPIRATION: {
+        name: "authentication:password:reset-expiration";
+        defaultValue: number;
+        parse: (text: string, reviver?: (this: any, key: string, value: any) => any) => any;
+    };
+    /**
+     * Can users register by themselves
+     */
+    AUTHENTICATION_REGISTER_ENABLED: {
+        name: "authentication:password:register-enabled";
+        defaultValue: false;
+    };
+    /**
+     * Can admin's invite other users to sign-up (password) ?
+     */
+    AUTHENTICATION_INVITATIONS_ENABLED: {
+        name: "authentication:password:invitations-enabled";
+        defaultValue: false;
+    };
+    /**
+     * The password constraints
+     */
+    AUTHENTICATION_PASSWORD_CONSTRAINTS: {
+        name: "authentication:password:constraints";
+        defaultValue: import("../password-constraints").PasswordConstraints;
+    };
+    /**
+     * How long a Session remains valid before the user is required to re-authenticate
+     */
+    AUTHENTICATION_SESSION_EXPIRATION: {
+        name: "authentication:session:expiration";
+        defaultValue: number;
+    };
+    /**
+     * A secure key used to sign and verify JWT tokens.
+     */
+    AUTHENTICATION_SESSION_JWT_SECRET: {
+        name: "authentication:session:jwt-secret";
+        defaultValue: string;
+        format: {
+            (value: any, replacer?: (this: any, key: string, value: any) => any, space?: string | number): string;
+            (value: any, replacer?: (number | string)[] | null, space?: string | number): string;
+        };
+    };
+    /**
+     * Does session JWT include the original user of the idp?
+     */
+    AUTHENTICATION_SESSION_INCLUDE_ORIG_USER: {
+        name: "authentication:session:include-orig-user";
+        defaultValue: false;
+    };
+    /**
+     * Impersonation Data Flow Strategy
+     */
+    AUTHENTICATION_IMPERSONATION_MODE: {
+        name: "authentication:impersonation:mode";
+        defaultValue: import("../impersonation").ImpersonationMode;
+        format: {
+            (value: any, replacer?: (this: any, key: string, value: any) => any, space?: string | number): string;
+            (value: any, replacer?: (number | string)[] | null, space?: string | number): string;
+        };
+    };
+    /**
+     * Can impersonate users that do not currently exist in the system ?
+     */
+    AUTHENTICATION_IMPERSONATION_NON_EXISTENT_USERS: {
+        name: "authentication:impersonation:non-existent-users";
+        defaultValue: false;
+    };
+};
+//# sourceMappingURL=authentication-parameters.entity.d.ts.map

package/dist/src/authentication/entities/authentication-parameters.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-parameters.entity.d.ts","sourceRoot":"","sources":["../../../../src/authentication/entities/authentication-parameters.entity.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,uBAAuB,GACjC,iCAAiC,GACjC,0CAA0C,GAC1C,0CAA0C,GAC1C,6CAA6C,GAC7C,qCAAqC,GACrC,mCAAmC,GACnC,mCAAmC,GACnC,0CAA0C,GAC1C,mCAAmC,GACnC,iDAAiD,CAAC;AAEpD,MAAM,MAAM,2BAA2B,GAAG;IACxC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IAClD;;OAEG;IACH,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG,CAAC;CACzB,CAAA;AAGD;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB;IAEnC;;OAEG;;;;;IAMH;;OAEG;;;;;;IAOH;;OAEG;;;;;IAMH;;OAEG;;;;;IASH;;OAEG;;;;;IAMH;;OAEG;;;;;IAMH;;OAEG;;;;;;;;;IAQH;;OAEG;;;;;IAMH;;OAEG;;;;;;;;;IAOH;;OAEG;;;;;CAMkD,CAAA"}

package/dist/src/authentication/entities/authentication-parameters.entity.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticationParameters = void 0;
+const impersonation_1 = require("../impersonation");
+const password_constraints_1 = require("../password-constraints");
+/**
+ * The definition of all the parameters related to Authentication.
+ * These are potential Platform Parameters stored in the Platform DB having the "name" specified here.
+ * As the current "Platform Parameters" concept are just runtime values when using them in a service
+ * we need to define their metadata, define "which are the parameters" that can take some values.
+ * For the moment this is our first usage, so this will probably evolve from using/experimenting.
+ *
+ * History: These used to be environmental variables
+ */
+exports.AuthenticationParameters = {
+    /**
+     * Is password method enabled ?
+     */
+    AUTHENTICATION_PASSWORD_ENABLED: {
+        name: 'authentication:password:enabled',
+        defaultValue: false,
+    },
+    /**
+     * How long the reset password link sent will live ?
+     */
+    AUTHENTICATION_PASSWORD_RESET_EXPIRATION: {
+        name: 'authentication:password:reset-expiration',
+        defaultValue: 30 * 60 * 1000, // 30min in ms
+        parse: JSON.parse,
+    },
+    /**
+     * Can users register by themselves
+     */
+    AUTHENTICATION_REGISTER_ENABLED: {
+        name: 'authentication:password:register-enabled',
+        defaultValue: false
+    },
+    /**
+     * Can admin's invite other users to sign-up (password) ?
+     */
+    AUTHENTICATION_INVITATIONS_ENABLED: {
+        name: 'authentication:password:invitations-enabled',
+        defaultValue: false
+    },
+    // TODO: add more for invitations
+    /**
+     * The password constraints
+     */
+    AUTHENTICATION_PASSWORD_CONSTRAINTS: {
+        name: 'authentication:password:constraints',
+        defaultValue: password_constraints_1.DEFAULT_PASSWORD_CONSTRAINTS,
+    },
+    /**
+     * How long a Session remains valid before the user is required to re-authenticate
+     */
+    AUTHENTICATION_SESSION_EXPIRATION: {
+        name: 'authentication:session:expiration',
+        defaultValue: 1000 * 60 * 60 * 24, // Default: 1 day in ms
+    },
+    /**
+     * A secure key used to sign and verify JWT tokens.
+     */
+    AUTHENTICATION_SESSION_JWT_SECRET: {
+        name: 'authentication:session:jwt-secret',
+        defaultValue: '',
+        format: JSON.stringify,
+    },
+    /**
+     * Does session JWT include the original user of the idp?
+     */
+    AUTHENTICATION_SESSION_INCLUDE_ORIG_USER: {
+        name: 'authentication:session:include-orig-user',
+        defaultValue: false
+    },
+    /**
+     * Impersonation Data Flow Strategy
+     */
+    AUTHENTICATION_IMPERSONATION_MODE: {
+        name: 'authentication:impersonation:mode',
+        defaultValue: impersonation_1.DEFAULT_IMPERSONATION_MODE,
+        format: JSON.stringify,
+    },
+    /**
+     * Can impersonate users that do not currently exist in the system ?
+     */
+    AUTHENTICATION_IMPERSONATION_NON_EXISTENT_USERS: {
+        name: 'authentication:impersonation:non-existent-users',
+        defaultValue: false
+    },
+};
+//# sourceMappingURL=authentication-parameters.entity.js.map

package/dist/src/authentication/entities/authentication-parameters.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-parameters.entity.js","sourceRoot":"","sources":["../../../../src/authentication/entities/authentication-parameters.entity.ts"],"names":[],"mappings":";;;AAAA,oDAA8D;AAC9D,kEAAuE;AAyBvE;;;;;;;;GAQG;AACU,QAAA,wBAAwB,GAAG;IAEtC;;OAEG;IACH,+BAA+B,EAAE;QAC/B,IAAI,EAAE,iCAAiC;QACvC,YAAY,EAAE,KAAK;KACpB;IAED;;OAEG;IACH,wCAAwC,EAAE;QACxC,IAAI,EAAE,0CAA0C;QAChD,YAAY,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc;QAC5C,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB;IAED;;OAEG;IACH,+BAA+B,EAAE;QAC/B,IAAI,EAAE,0CAA0C;QAChD,YAAY,EAAE,KAAK;KACpB;IAED;;OAEG;IACH,kCAAkC,EAAE;QAClC,IAAI,EAAE,6CAA6C;QACnD,YAAY,EAAE,KAAK;KACpB;IAED,iCAAiC;IAGjC;;OAEG;IACH,mCAAmC,EAAE;QACnC,IAAI,EAAE,qCAAqC;QAC3C,YAAY,EAAE,mDAA4B;KAC3C;IAED;;OAEG;IACH,iCAAiC,EAAE;QACjC,IAAI,EAAE,mCAAmC;QACzC,YAAY,EAAE,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,uBAAuB;KAC3D;IAED;;OAEG;IACH,iCAAiC,EAAE;QACjC,IAAI,EAAE,mCAAmC;QACzC,YAAY,EAAE,EAAE;QAChB,MAAM,EAAE,IAAI,CAAC,SAAS;KACvB;IAGD;;OAEG;IACH,wCAAwC,EAAE;QACxC,IAAI,EAAE,0CAA0C;QAChD,YAAY,EAAE,KAAK;KACpB;IAED;;OAEG;IACH,iCAAiC,EAAE;QACjC,IAAI,EAAE,mCAAmC;QACzC,YAAY,EAAE,0CAA0B;QACxC,MAAM,EAAE,IAAI,CAAC,SAAS;KACvB;IAED;;OAEG;IACH,+CAA+C,EAAE;QAC/C,IAAI,EAAE,iDAAiD;QACvD,YAAY,EAAE,KAAK;KACpB;CAEoD,CAAA"}

package/dist/src/authentication/entities/can-impersonate.entity.d.ts

@@ -0,0 +1,7 @@
+import { CanImpersonateResponseDTO } from "../dto/can-impersonate-response.dto";
+export declare class CanImpersonate {
+    allowed: boolean;
+    restrictedTo?: string[];
+    static fromDTO(dto: CanImpersonateResponseDTO): CanImpersonate;
+}
+//# sourceMappingURL=can-impersonate.entity.d.ts.map

package/dist/src/authentication/entities/can-impersonate.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-impersonate.entity.d.ts","sourceRoot":"","sources":["../../../../src/authentication/entities/can-impersonate.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAEhF,qBAAa,cAAc;IACzB,OAAO,EAAE,OAAO,CAAS;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAM;IAE7B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,yBAAyB,GAAG,cAAc;CAM/D"}

package/dist/src/authentication/entities/can-impersonate.entity.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CanImpersonate = void 0;
+class CanImpersonate {
+    constructor() {
+        this.allowed = false;
+        this.restrictedTo = [];
+    }
+    static fromDTO(dto) {
+        const canImpersonate = new CanImpersonate();
+        canImpersonate.allowed = dto.allowed;
+        canImpersonate.restrictedTo = dto.restrictedTo;
+        return canImpersonate;
+    }
+}
+exports.CanImpersonate = CanImpersonate;
+//# sourceMappingURL=can-impersonate.entity.js.map

package/dist/src/authentication/entities/can-impersonate.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"can-impersonate.entity.js","sourceRoot":"","sources":["../../../../src/authentication/entities/can-impersonate.entity.ts"],"names":[],"mappings":";;;AAEA,MAAa,cAAc;IAA3B;QACE,YAAO,GAAY,KAAK,CAAC;QACzB,iBAAY,GAAc,EAAE,CAAC;IAQ/B,CAAC;IANC,MAAM,CAAC,OAAO,CAAC,GAA8B;QAC3C,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;QAC5C,cAAc,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACrC,cAAc,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;QAC/C,OAAO,cAAc,CAAC;IACxB,CAAC;CACF;AAVD,wCAUC"}

package/dist/src/authentication/entities/impersonation-config.entity.d.ts

@@ -0,0 +1,10 @@
+import { CreateImpersonationConfigResponseDTO } from "../dto/create-impersonation-config-response.dto";
+export declare class ImpersonationConfig {
+    id: number;
+    username: string;
+    createdAt: Date;
+    createdBy: string;
+    restrictedTo?: string[];
+    static fromDTO(dto: CreateImpersonationConfigResponseDTO): ImpersonationConfig;
+}
+//# sourceMappingURL=impersonation-config.entity.d.ts.map

package/dist/src/authentication/entities/impersonation-config.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"impersonation-config.entity.d.ts","sourceRoot":"","sources":["../../../../src/authentication/entities/impersonation-config.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,iDAAiD,CAAC;AAEvG,qBAAa,mBAAmB;IAC9B,EAAE,EAAE,MAAM,CAAK;IACf,QAAQ,EAAE,MAAM,CAAM;IACtB,SAAS,EAAE,IAAI,CAAc;IAC7B,SAAS,EAAE,MAAM,CAAM;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAM;IAE7B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,oCAAoC,GAAG,mBAAmB;CAQ/E"}

package/dist/src/authentication/entities/impersonation-config.entity.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ImpersonationConfig = void 0;
+class ImpersonationConfig {
+    constructor() {
+        this.id = 0;
+        this.username = '';
+        this.createdAt = new Date();
+        this.createdBy = '';
+        this.restrictedTo = [];
+    }
+    static fromDTO(dto) {
+        const impersonationConfig = new ImpersonationConfig();
+        impersonationConfig.id = dto.id;
+        impersonationConfig.username = dto.name;
+        impersonationConfig.createdBy = dto.created_by;
+        impersonationConfig.createdAt = new Date(dto.created_at);
+        return impersonationConfig;
+    }
+}
+exports.ImpersonationConfig = ImpersonationConfig;
+//# sourceMappingURL=impersonation-config.entity.js.map

package/dist/src/authentication/entities/impersonation-config.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"impersonation-config.entity.js","sourceRoot":"","sources":["../../../../src/authentication/entities/impersonation-config.entity.ts"],"names":[],"mappings":";;;AAEA,MAAa,mBAAmB;IAAhC;QACE,OAAE,GAAW,CAAC,CAAC;QACf,aAAQ,GAAW,EAAE,CAAC;QACtB,cAAS,GAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,cAAS,GAAW,EAAE,CAAC;QACvB,iBAAY,GAAc,EAAE,CAAC;IAU/B,CAAC;IARC,MAAM,CAAC,OAAO,CAAC,GAAyC;QACtD,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtD,mBAAmB,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;QAChC,mBAAmB,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC;QACxC,mBAAmB,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC;QAC/C,mBAAmB,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;CACF;AAfD,kDAeC"}

package/dist/src/authentication/impersonation.d.ts

@@ -0,0 +1,9 @@
+export declare const IMPERSONATION_MODES: {
+    readonly QUERY_PARAM: "queryParams";
+    readonly COOKIE: "cookie";
+};
+export declare const DEFAULT_IMPERSONATION_MODE: ImpersonationMode;
+export declare const IMPERSONATION_USER_NAME_PARAM_KEY = "impersonate";
+export declare const IMPERSONATION_USER_DISPLAY_NAME_PARAM_KEY = "impersonate-display-name";
+export type ImpersonationMode = typeof IMPERSONATION_MODES[keyof typeof IMPERSONATION_MODES];
+//# sourceMappingURL=impersonation.d.ts.map

package/dist/src/authentication/impersonation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"impersonation.d.ts","sourceRoot":"","sources":["../../../src/authentication/impersonation.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB;;;CAGtB,CAAC;AAEX,eAAO,MAAM,0BAA0B,EAAE,iBAA8C,CAAC;AAExF,eAAO,MAAM,iCAAiC,gBAAgB,CAAC;AAC/D,eAAO,MAAM,yCAAyC,6BAA6B,CAAC;AAEpF,MAAM,MAAM,iBAAiB,GAAG,OAAO,mBAAmB,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/src/authentication/impersonation.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IMPERSONATION_USER_DISPLAY_NAME_PARAM_KEY = exports.IMPERSONATION_USER_NAME_PARAM_KEY = exports.DEFAULT_IMPERSONATION_MODE = exports.IMPERSONATION_MODES = void 0;
+exports.IMPERSONATION_MODES = {
+    QUERY_PARAM: 'queryParams',
+    COOKIE: 'cookie'
+};
+exports.DEFAULT_IMPERSONATION_MODE = exports.IMPERSONATION_MODES.COOKIE;
+exports.IMPERSONATION_USER_NAME_PARAM_KEY = 'impersonate';
+exports.IMPERSONATION_USER_DISPLAY_NAME_PARAM_KEY = 'impersonate-display-name';
+//# sourceMappingURL=impersonation.js.map

package/dist/src/authentication/impersonation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"impersonation.js","sourceRoot":"","sources":["../../../src/authentication/impersonation.ts"],"names":[],"mappings":";;;AAAa,QAAA,mBAAmB,GAAG;IACjC,WAAW,EAAE,aAAa;IAC1B,MAAM,EAAE,QAAQ;CACR,CAAC;AAEE,QAAA,0BAA0B,GAAsB,2BAAmB,CAAC,MAAM,CAAC;AAE3E,QAAA,iCAAiC,GAAG,aAAa,CAAC;AAClD,QAAA,yCAAyC,GAAG,0BAA0B,CAAC"}

package/dist/src/authentication/index.d.ts

@@ -1,2 +1,24 @@
-export * from './auth-user.interface';
+export { createPAEAuthenticationService } from './authentication.service';
+export { CanImpersonate } from './entities/can-impersonate.entity';
+export { ApiKey } from './entities/api-key.entity';
+export { type AuthenticationConfig } from './entities/authentication-config.entity';
+export { type PasswordConstraints } from './password-constraints';
+export { DEFAULT_PASSWORD_CONSTRAINTS } from './password-constraints';
+export { AuthenticationParameters } from './entities/authentication-parameters.entity';
+export { type AuthenticationParamName } from './entities/authentication-parameters.entity';
+export { type PlatformParameterDefinition } from './entities/authentication-parameters.entity';
+export { UserDTO } from './dto/user.dto';
+export { UserIdentityDTO } from './dto/user-identity.dto';
+export * from './dto/group.dto';
+export { InvitationDTO } from './dto/invitation.dto';
+export { CreateInvitationRequest } from './dto/create-invitation-request.dto';
+export { default as InvitationTokenPayload } from './types/InvitationTokenPayload';
+export * from './dto/oauth-provider.dto';
+export * from './impersonation';
+export { ImpersonationConfigsResponseDTO } from './dto/impersonation-config-response.dto';
+export * from './anonymous-user';
+export * from './is-anonymous-user';
+export { BaseUser } from './domain/base-user.interface';
+export { RequestUser } from './domain/request-user.interface';
+export * from './utils';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/authentication/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authentication/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/authentication/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAE1E,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAEnD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,yCAAyC,CAAA;AACnF,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAEtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,KAAK,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAE/F,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,cAAc,iBAAiB,CAAA;AAE/B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,OAAO,EAAE,OAAO,IAAI,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AAElF,cAAc,0BAA0B,CAAA;AAExC,cAAc,iBAAiB,CAAA;AAC/B,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAA;AAEzF,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAE9D,cAAc,SAAS,CAAC"}

package/dist/src/authentication/index.js

@@ -14,5 +14,21 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./auth-user.interface"), exports);
+exports.AuthenticationParameters = exports.DEFAULT_PASSWORD_CONSTRAINTS = exports.ApiKey = exports.CanImpersonate = exports.createPAEAuthenticationService = void 0;
+var authentication_service_1 = require("./authentication.service");
+Object.defineProperty(exports, "createPAEAuthenticationService", { enumerable: true, get: function () { return authentication_service_1.createPAEAuthenticationService; } });
+var can_impersonate_entity_1 = require("./entities/can-impersonate.entity");
+Object.defineProperty(exports, "CanImpersonate", { enumerable: true, get: function () { return can_impersonate_entity_1.CanImpersonate; } });
+var api_key_entity_1 = require("./entities/api-key.entity");
+Object.defineProperty(exports, "ApiKey", { enumerable: true, get: function () { return api_key_entity_1.ApiKey; } });
+var password_constraints_1 = require("./password-constraints");
+Object.defineProperty(exports, "DEFAULT_PASSWORD_CONSTRAINTS", { enumerable: true, get: function () { return password_constraints_1.DEFAULT_PASSWORD_CONSTRAINTS; } });
+var authentication_parameters_entity_1 = require("./entities/authentication-parameters.entity");
+Object.defineProperty(exports, "AuthenticationParameters", { enumerable: true, get: function () { return authentication_parameters_entity_1.AuthenticationParameters; } });
+__exportStar(require("./dto/group.dto"), exports);
+__exportStar(require("./dto/oauth-provider.dto"), exports);
+__exportStar(require("./impersonation"), exports);
+__exportStar(require("./anonymous-user"), exports);
+__exportStar(require("./is-anonymous-user"), exports);
+__exportStar(require("./utils"), exports);
 //# sourceMappingURL=index.js.map

package/dist/src/authentication/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authentication/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/authentication/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,mEAA0E;AAAjE,wIAAA,8BAA8B,OAAA;AAEvC,4EAAmE;AAA1D,wHAAA,cAAc,OAAA;AACvB,4DAAmD;AAA1C,wGAAA,MAAM,OAAA;AAIf,+DAAsE;AAA7D,oIAAA,4BAA4B,OAAA;AAErC,gGAAuF;AAA9E,4IAAA,wBAAwB,OAAA;AAMjC,kDAA+B;AAO/B,2DAAwC;AAExC,kDAA+B;AAG/B,mDAAiC;AACjC,sDAAoC;AAKpC,0CAAwB"}

package/dist/src/authentication/is-anonymous-user.d.ts

@@ -0,0 +1,18 @@
+import { AuthUser } from "../auth/domain/auth-user.interface";
+/**
+ * Determines if the provided user is an anonymous user.
+ *
+ * @param user - The user object to check.
+ * @returns `true` if the user is anonymous, otherwise `false`.
+ */
+export declare const isAnonymousUser: (user: AuthUser) => boolean;
+/**
+ * Determines if the provided user is authenticated.
+ *
+ * Returns `true` if the user is not anonymous, otherwise returns `false`.
+ *
+ * @param user - The user object to check.
+ * @returns `true` if the user is authenticated, `false` otherwise.
+ */
+export declare const isAuthenticatedUser: (user: AuthUser) => boolean;
+//# sourceMappingURL=is-anonymous-user.d.ts.map

package/dist/src/authentication/is-anonymous-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-anonymous-user.d.ts","sourceRoot":"","sources":["../../../src/authentication/is-anonymous-user.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAG9D;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAI,MAAM,QAAQ,YAE7C,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM,QAAQ,YAEjD,CAAA"}

package/dist/src/authentication/is-anonymous-user.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAuthenticatedUser = exports.isAnonymousUser = void 0;
+const anonymous_user_1 = require("./anonymous-user");
+/**
+ * Determines if the provided user is an anonymous user.
+ *
+ * @param user - The user object to check.
+ * @returns `true` if the user is anonymous, otherwise `false`.
+ */
+const isAnonymousUser = (user) => {
+    return user.id === anonymous_user_1.ANONYMOUS_USER.id;
+};
+exports.isAnonymousUser = isAnonymousUser;
+/**
+ * Determines if the provided user is authenticated.
+ *
+ * Returns `true` if the user is not anonymous, otherwise returns `false`.
+ *
+ * @param user - The user object to check.
+ * @returns `true` if the user is authenticated, `false` otherwise.
+ */
+const isAuthenticatedUser = (user) => {
+    return !(0, exports.isAnonymousUser)(user);
+};
+exports.isAuthenticatedUser = isAuthenticatedUser;
+//# sourceMappingURL=is-anonymous-user.js.map

package/dist/src/authentication/is-anonymous-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-anonymous-user.js","sourceRoot":"","sources":["../../../src/authentication/is-anonymous-user.ts"],"names":[],"mappings":";;;AACA,qDAAkD;AAElD;;;;;GAKG;AACI,MAAM,eAAe,GAAG,CAAC,IAAc,EAAE,EAAE;IAChD,OAAO,IAAI,CAAC,EAAE,KAAK,+BAAc,CAAC,EAAE,CAAC;AACvC,CAAC,CAAA;AAFY,QAAA,eAAe,mBAE3B;AAED;;;;;;;GAOG;AACI,MAAM,mBAAmB,GAAG,CAAC,IAAc,EAAE,EAAE;IACpD,OAAO,CAAC,IAAA,uBAAe,EAAC,IAAI,CAAC,CAAC;AAChC,CAAC,CAAA;AAFY,QAAA,mBAAmB,uBAE/B"}

package/dist/src/authentication/password-constraints.d.ts

@@ -0,0 +1,10 @@
+export type PasswordConstraints = {
+    lowerCaseRequired: boolean;
+    upperCaseRequired: boolean;
+    symbolRequired: boolean;
+    digitRequired: boolean;
+    minLength: number;
+    maxLength: number;
+};
+export declare const DEFAULT_PASSWORD_CONSTRAINTS: PasswordConstraints;
+//# sourceMappingURL=password-constraints.d.ts.map

package/dist/src/authentication/password-constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-constraints.d.ts","sourceRoot":"","sources":["../../../src/authentication/password-constraints.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG;IAChC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAA;AAED,eAAO,MAAM,4BAA4B,EAAE,mBAO1C,CAAA"}

package/dist/src/authentication/password-constraints.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_PASSWORD_CONSTRAINTS = void 0;
+exports.DEFAULT_PASSWORD_CONSTRAINTS = {
+    lowerCaseRequired: false,
+    upperCaseRequired: false,
+    symbolRequired: false,
+    digitRequired: false,
+    minLength: 8,
+    maxLength: 100,
+};
+//# sourceMappingURL=password-constraints.js.map

package/dist/src/authentication/password-constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-constraints.js","sourceRoot":"","sources":["../../../src/authentication/password-constraints.ts"],"names":[],"mappings":";;;AASa,QAAA,4BAA4B,GAAwB;IAC/D,iBAAiB,EAAE,KAAK;IACxB,iBAAiB,EAAE,KAAK;IACxB,cAAc,EAAE,KAAK;IACrB,aAAa,EAAE,KAAK;IACpB,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,GAAG;CACf,CAAA"}

package/dist/src/authentication/types/InvitationTokenPayload.d.ts

@@ -0,0 +1,15 @@
+/**
+ * JWT payload type for User Invitation
+ */
+type CreateInvitationTokenPayload = {
+    /**
+     * invitation id
+     */
+    id: string;
+    /**
+     * user email
+     */
+    email: string;
+};
+export default CreateInvitationTokenPayload;
+//# sourceMappingURL=InvitationTokenPayload.d.ts.map

package/dist/src/authentication/types/InvitationTokenPayload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvitationTokenPayload.d.ts","sourceRoot":"","sources":["../../../../src/authentication/types/InvitationTokenPayload.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,KAAK,4BAA4B,GAAG;IAClC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,eAAe,4BAA4B,CAAC"}

package/dist/src/authentication/types/InvitationTokenPayload.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=InvitationTokenPayload.js.map

package/dist/src/authentication/types/InvitationTokenPayload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvitationTokenPayload.js","sourceRoot":"","sources":["../../../../src/authentication/types/InvitationTokenPayload.ts"],"names":[],"mappings":""}

package/dist/src/authentication/utils/index.d.ts

@@ -0,0 +1,2 @@
+export { normalizeUsername, compareUsernames, isSameUser, isUsernameInArray, } from './user-comparison';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/authentication/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/authentication/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,iBAAiB,GAClB,MAAM,mBAAmB,CAAC"}

package/dist/src/authentication/utils/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isUsernameInArray = exports.isSameUser = exports.compareUsernames = exports.normalizeUsername = void 0;
+var user_comparison_1 = require("./user-comparison");
+Object.defineProperty(exports, "normalizeUsername", { enumerable: true, get: function () { return user_comparison_1.normalizeUsername; } });
+Object.defineProperty(exports, "compareUsernames", { enumerable: true, get: function () { return user_comparison_1.compareUsernames; } });
+Object.defineProperty(exports, "isSameUser", { enumerable: true, get: function () { return user_comparison_1.isSameUser; } });
+Object.defineProperty(exports, "isUsernameInArray", { enumerable: true, get: function () { return user_comparison_1.isUsernameInArray; } });
+//# sourceMappingURL=index.js.map

package/dist/src/authentication/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/authentication/utils/index.ts"],"names":[],"mappings":";;;AAAA,qDAK2B;AAJzB,oHAAA,iBAAiB,OAAA;AACjB,mHAAA,gBAAgB,OAAA;AAChB,6GAAA,UAAU,OAAA;AACV,oHAAA,iBAAiB,OAAA"}