@candesk/contracts 6.28.0 → 6.29.0

package/dist/events/auth/auth.events.d.ts

@@ -11,4 +11,6 @@ export declare const AUTH_EVENTS: {
     readonly STAFF_EMAIL_ASSIGNED: 'auth.staff-email.assigned';
     readonly STAFF_DEACTIVATED: 'auth.staff.deactivated';
     readonly STAFF_ACTIVATED: 'auth.staff.activated';
+    readonly TOTP_ENABLED: 'auth.totp.enabled';
+    readonly TOTP_DISABLED: 'auth.totp.disabled';
 };

package/dist/events/auth/auth.events.js

@@ -13,5 +13,7 @@ exports.AUTH_EVENTS = {
     STAFF_EMAIL_CHANGED: 'auth.staff-email.changed',
     STAFF_EMAIL_ASSIGNED: 'auth.staff-email.assigned',
     STAFF_DEACTIVATED: 'auth.staff.deactivated',
-    STAFF_ACTIVATED: 'auth.staff.activated'
+    STAFF_ACTIVATED: 'auth.staff.activated',
+    TOTP_ENABLED: 'auth.totp.enabled',
+    TOTP_DISABLED: 'auth.totp.disabled'
 };

package/dist/events/auth/index.d.ts

@@ -11,3 +11,5 @@ export * from './staff-email-changed.interface';
 export * from './staff-invited.interface';
 export * from './telegram-linked.interface';
 export * from './telegram-unlinked.interface';
+export * from './totp-disabled.interface';
+export * from './totp-enabled.interface';

package/dist/events/auth/index.js

@@ -27,3 +27,5 @@ __exportStar(require("./staff-email-changed.interface"), exports);
 __exportStar(require("./staff-invited.interface"), exports);
 __exportStar(require("./telegram-linked.interface"), exports);
 __exportStar(require("./telegram-unlinked.interface"), exports);
+__exportStar(require("./totp-disabled.interface"), exports);
+__exportStar(require("./totp-enabled.interface"), exports);

package/dist/events/auth/totp-disabled.interface.d.ts

@@ -0,0 +1,3 @@
+export interface TotpDisabledEvent {
+    email: string;
+}

package/dist/events/auth/totp-disabled.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/events/auth/totp-enabled.interface.d.ts

@@ -0,0 +1,3 @@
+export interface TotpEnabledEvent {
+    email: string;
+}

package/dist/events/auth/totp-enabled.interface.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/gen/account.d.ts

@@ -20,6 +20,7 @@ export interface GetAccountResponse {
     role: Role;
     isTelegramLinked: boolean;
     isIdentityVerified: boolean;
+    isTotpEnabled: boolean;
 }
 export interface InitEmailChangeRequest {
     email: string;
@@ -88,6 +89,26 @@ export interface SetIdentityVerifiedRequest {
 export interface SetIdentityVerifiedResponse {
     ok: boolean;
 }
+export interface SetupTotpRequest {
+    userId: string;
+}
+export interface SetupTotpResponse {
+    secret: string;
+    uri: string;
+}
+export interface EnableTotpRequest {
+    userId: string;
+    code: string;
+}
+export interface EnableTotpResponse {
+    ok: boolean;
+}
+export interface DisableTotpRequest {
+    userId: string;
+}
+export interface DisableTotpResponse {
+    ok: boolean;
+}
 export interface CreateStaffAccountRequest {
     email: string;
     role: Role;
@@ -148,6 +169,13 @@ export interface ChangeStaffEmailRequest {
 export interface ChangeStaffEmailResponse {
     account: StaffAccount | undefined;
 }
+export interface ResetStaffTotpRequest {
+    id: string;
+    adminId: string;
+}
+export interface ResetStaffTotpResponse {
+    account: StaffAccount | undefined;
+}
 export interface StaffAccount {
     id: string;
     email: string;
@@ -155,6 +183,7 @@ export interface StaffAccount {
     createdAt: string;
     isActive: boolean;
     lastActiveAt?: string | undefined;
+    isTotpEnabled: boolean;
 }
 export interface AccountService {
     getAccount(request: GetAccountRequest): Promise<GetAccountResponse>;
@@ -167,6 +196,9 @@ export interface AccountService {
     initAccountDeletion(request: InitAccountDeletionRequest): Promise<InitAccountDeletionResponse>;
     confirmAccountDeletion(request: ConfirmAccountDeletionRequest): Promise<ConfirmAccountDeletionResponse>;
     setIdentityVerified(request: SetIdentityVerifiedRequest): Promise<SetIdentityVerifiedResponse>;
+    setupTotp(request: SetupTotpRequest): Promise<SetupTotpResponse>;
+    enableTotp(request: EnableTotpRequest): Promise<EnableTotpResponse>;
+    disableTotp(request: DisableTotpRequest): Promise<DisableTotpResponse>;
     createStaffAccount(request: CreateStaffAccountRequest): Promise<CreateStaffAccountResponse>;
     sendStaffInvite(request: SendStaffInviteRequest): Promise<SendStaffInviteResponse>;
     getStaffAccount(request: GetStaffAccountRequest): Promise<GetStaffAccountResponse>;
@@ -175,4 +207,5 @@ export interface AccountService {
     changeStaffRole(request: ChangeStaffRoleRequest): Promise<ChangeStaffRoleResponse>;
     setStaffActive(request: SetStaffActiveRequest): Promise<SetStaffActiveResponse>;
     changeStaffEmail(request: ChangeStaffEmailRequest): Promise<ChangeStaffEmailResponse>;
+    resetStaffTotp(request: ResetStaffTotpRequest): Promise<ResetStaffTotpResponse>;
 }

package/dist/gen/auth.d.ts

@@ -1,11 +1,16 @@
 import type { Empty } from "./google/protobuf/empty";
 export declare const protobufPackage = "auth.v1";
 export declare const protobufFileName = "auth.proto";
+export declare enum LoginMethod {
+    EMAIL = 0,
+    TOTP = 1,
+    UNRECOGNIZED = -1
+}
 export interface SendOtpRequest {
     email: string;
 }
 export interface SendOtpResponse {
-    ok: boolean;
+    method: LoginMethod;
 }
 export interface VerifyOtpRequest {
     email: string;

package/dist/gen/auth.js

@@ -5,6 +5,12 @@
 //   protoc               v3.21.12
 // source: auth.proto
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.protobufFileName = exports.protobufPackage = void 0;
+exports.LoginMethod = exports.protobufFileName = exports.protobufPackage = void 0;
 exports.protobufPackage = "auth.v1";
 exports.protobufFileName = "auth.proto";
+var LoginMethod;
+(function (LoginMethod) {
+    LoginMethod[LoginMethod["EMAIL"] = 0] = "EMAIL";
+    LoginMethod[LoginMethod["TOTP"] = 1] = "TOTP";
+    LoginMethod[LoginMethod["UNRECOGNIZED"] = -1] = "UNRECOGNIZED";
+})(LoginMethod || (exports.LoginMethod = LoginMethod = {}));

package/dist/nest/account.d.ts

@@ -21,6 +21,7 @@ export interface GetAccountResponse {
     role: Role;
     isTelegramLinked: boolean;
     isIdentityVerified: boolean;
+    isTotpEnabled: boolean;
 }
 export interface InitEmailChangeRequest {
     email: string;
@@ -89,6 +90,26 @@ export interface SetIdentityVerifiedRequest {
 export interface SetIdentityVerifiedResponse {
     ok: boolean;
 }
+export interface SetupTotpRequest {
+    userId: string;
+}
+export interface SetupTotpResponse {
+    secret: string;
+    uri: string;
+}
+export interface EnableTotpRequest {
+    userId: string;
+    code: string;
+}
+export interface EnableTotpResponse {
+    ok: boolean;
+}
+export interface DisableTotpRequest {
+    userId: string;
+}
+export interface DisableTotpResponse {
+    ok: boolean;
+}
 export interface CreateStaffAccountRequest {
     email: string;
     role: Role;
@@ -149,6 +170,13 @@ export interface ChangeStaffEmailRequest {
 export interface ChangeStaffEmailResponse {
     account: StaffAccount | undefined;
 }
+export interface ResetStaffTotpRequest {
+    id: string;
+    adminId: string;
+}
+export interface ResetStaffTotpResponse {
+    account: StaffAccount | undefined;
+}
 export interface StaffAccount {
     id: string;
     email: string;
@@ -156,6 +184,7 @@ export interface StaffAccount {
     createdAt: string;
     isActive: boolean;
     lastActiveAt?: string | undefined;
+    isTotpEnabled: boolean;
 }
 export declare const ACCOUNT_V1_PACKAGE_NAME = "account.v1";
 export interface AccountServiceClient {
@@ -169,6 +198,9 @@ export interface AccountServiceClient {
     initAccountDeletion(request: InitAccountDeletionRequest): Observable<InitAccountDeletionResponse>;
     confirmAccountDeletion(request: ConfirmAccountDeletionRequest): Observable<ConfirmAccountDeletionResponse>;
     setIdentityVerified(request: SetIdentityVerifiedRequest): Observable<SetIdentityVerifiedResponse>;
+    setupTotp(request: SetupTotpRequest): Observable<SetupTotpResponse>;
+    enableTotp(request: EnableTotpRequest): Observable<EnableTotpResponse>;
+    disableTotp(request: DisableTotpRequest): Observable<DisableTotpResponse>;
     createStaffAccount(request: CreateStaffAccountRequest): Observable<CreateStaffAccountResponse>;
     sendStaffInvite(request: SendStaffInviteRequest): Observable<SendStaffInviteResponse>;
     getStaffAccount(request: GetStaffAccountRequest): Observable<GetStaffAccountResponse>;
@@ -177,6 +209,7 @@ export interface AccountServiceClient {
     changeStaffRole(request: ChangeStaffRoleRequest): Observable<ChangeStaffRoleResponse>;
     setStaffActive(request: SetStaffActiveRequest): Observable<SetStaffActiveResponse>;
     changeStaffEmail(request: ChangeStaffEmailRequest): Observable<ChangeStaffEmailResponse>;
+    resetStaffTotp(request: ResetStaffTotpRequest): Observable<ResetStaffTotpResponse>;
 }
 export interface AccountServiceController {
     getAccount(request: GetAccountRequest): Promise<GetAccountResponse> | Observable<GetAccountResponse> | GetAccountResponse;
@@ -189,6 +222,9 @@ export interface AccountServiceController {
     initAccountDeletion(request: InitAccountDeletionRequest): Promise<InitAccountDeletionResponse> | Observable<InitAccountDeletionResponse> | InitAccountDeletionResponse;
     confirmAccountDeletion(request: ConfirmAccountDeletionRequest): Promise<ConfirmAccountDeletionResponse> | Observable<ConfirmAccountDeletionResponse> | ConfirmAccountDeletionResponse;
     setIdentityVerified(request: SetIdentityVerifiedRequest): Promise<SetIdentityVerifiedResponse> | Observable<SetIdentityVerifiedResponse> | SetIdentityVerifiedResponse;
+    setupTotp(request: SetupTotpRequest): Promise<SetupTotpResponse> | Observable<SetupTotpResponse> | SetupTotpResponse;
+    enableTotp(request: EnableTotpRequest): Promise<EnableTotpResponse> | Observable<EnableTotpResponse> | EnableTotpResponse;
+    disableTotp(request: DisableTotpRequest): Promise<DisableTotpResponse> | Observable<DisableTotpResponse> | DisableTotpResponse;
     createStaffAccount(request: CreateStaffAccountRequest): Promise<CreateStaffAccountResponse> | Observable<CreateStaffAccountResponse> | CreateStaffAccountResponse;
     sendStaffInvite(request: SendStaffInviteRequest): Promise<SendStaffInviteResponse> | Observable<SendStaffInviteResponse> | SendStaffInviteResponse;
     getStaffAccount(request: GetStaffAccountRequest): Promise<GetStaffAccountResponse> | Observable<GetStaffAccountResponse> | GetStaffAccountResponse;
@@ -197,6 +233,7 @@ export interface AccountServiceController {
     changeStaffRole(request: ChangeStaffRoleRequest): Promise<ChangeStaffRoleResponse> | Observable<ChangeStaffRoleResponse> | ChangeStaffRoleResponse;
     setStaffActive(request: SetStaffActiveRequest): Promise<SetStaffActiveResponse> | Observable<SetStaffActiveResponse> | SetStaffActiveResponse;
     changeStaffEmail(request: ChangeStaffEmailRequest): Promise<ChangeStaffEmailResponse> | Observable<ChangeStaffEmailResponse> | ChangeStaffEmailResponse;
+    resetStaffTotp(request: ResetStaffTotpRequest): Promise<ResetStaffTotpResponse> | Observable<ResetStaffTotpResponse> | ResetStaffTotpResponse;
 }
 export declare function AccountServiceControllerMethods(): (constructor: Function) => void;
 export declare const ACCOUNT_SERVICE_NAME = "AccountService";

package/dist/nest/account.js

@@ -34,6 +34,9 @@ function AccountServiceControllerMethods() {
             "initAccountDeletion",
             "confirmAccountDeletion",
             "setIdentityVerified",
+            "setupTotp",
+            "enableTotp",
+            "disableTotp",
             "createStaffAccount",
             "sendStaffInvite",
             "getStaffAccount",
@@ -42,6 +45,7 @@ function AccountServiceControllerMethods() {
             "changeStaffRole",
             "setStaffActive",
             "changeStaffEmail",
+            "resetStaffTotp",
         ];
         for (const method of grpcMethods) {
             const descriptor = Reflect.getOwnPropertyDescriptor(constructor.prototype, method);

package/dist/nest/auth.d.ts

@@ -2,11 +2,16 @@ import { Observable } from "rxjs";
 import { Empty } from "./google/protobuf/empty";
 export declare const protobufPackage = "auth.v1";
 export declare const protobufFileName = "auth.proto";
+export declare enum LoginMethod {
+    EMAIL = 0,
+    TOTP = 1,
+    UNRECOGNIZED = -1
+}
 export interface SendOtpRequest {
     email: string;
 }
 export interface SendOtpResponse {
-    ok: boolean;
+    method: LoginMethod;
 }
 export interface VerifyOtpRequest {
     email: string;

package/dist/nest/auth.js

@@ -5,12 +5,18 @@
 //   protoc               v3.21.12
 // source: auth.proto
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AUTH_SERVICE_NAME = exports.AUTH_V1_PACKAGE_NAME = exports.protobufFileName = exports.protobufPackage = void 0;
+exports.AUTH_SERVICE_NAME = exports.AUTH_V1_PACKAGE_NAME = exports.LoginMethod = exports.protobufFileName = exports.protobufPackage = void 0;
 exports.AuthServiceControllerMethods = AuthServiceControllerMethods;
 /* eslint-disable */
 const microservices_1 = require("@nestjs/microservices");
 exports.protobufPackage = "auth.v1";
 exports.protobufFileName = "auth.proto";
+var LoginMethod;
+(function (LoginMethod) {
+    LoginMethod[LoginMethod["EMAIL"] = 0] = "EMAIL";
+    LoginMethod[LoginMethod["TOTP"] = 1] = "TOTP";
+    LoginMethod[LoginMethod["UNRECOGNIZED"] = -1] = "UNRECOGNIZED";
+})(LoginMethod || (exports.LoginMethod = LoginMethod = {}));
 exports.AUTH_V1_PACKAGE_NAME = "auth.v1";
 function AuthServiceControllerMethods() {
     return function (constructor) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@candesk/contracts",
-	"version": "6.28.0",
+	"version": "6.29.0",
 	"description": "Protobuf contracts for CanDesk microservices",
 	"author": {
 		"name": "Alexander Schulz",

package/proto/account.proto

@@ -18,6 +18,10 @@ service AccountService {
 
   rpc SetIdentityVerified(SetIdentityVerifiedRequest) returns (SetIdentityVerifiedResponse);
 
+  rpc SetupTotp(SetupTotpRequest) returns (SetupTotpResponse);
+  rpc EnableTotp(EnableTotpRequest) returns (EnableTotpResponse);
+  rpc DisableTotp(DisableTotpRequest) returns (DisableTotpResponse);
+
   rpc CreateStaffAccount(CreateStaffAccountRequest) returns (CreateStaffAccountResponse);
   rpc SendStaffInvite(SendStaffInviteRequest) returns (SendStaffInviteResponse);
   rpc GetStaffAccount(GetStaffAccountRequest) returns (GetStaffAccountResponse);
@@ -26,6 +30,7 @@ service AccountService {
   rpc ChangeStaffRole(ChangeStaffRoleRequest) returns (ChangeStaffRoleResponse);
   rpc SetStaffActive(SetStaffActiveRequest) returns (SetStaffActiveResponse);
   rpc ChangeStaffEmail(ChangeStaffEmailRequest) returns (ChangeStaffEmailResponse);
+  rpc ResetStaffTotp(ResetStaffTotpRequest) returns (ResetStaffTotpResponse);
 }
 
 message GetAccountRequest {
@@ -41,6 +46,7 @@ message GetAccountResponse {
     Role role = 6;
     bool is_telegram_linked = 7;
     bool is_identity_verified = 8;
+    bool is_totp_enabled = 9;
 }
 
 message InitEmailChangeRequest {
@@ -122,6 +128,32 @@ message SetIdentityVerifiedResponse {
     bool ok = 1;
 }
 
+message SetupTotpRequest {
+    string user_id = 1;
+}
+
+message SetupTotpResponse {
+    string secret = 1;
+    string uri = 2;
+}
+
+message EnableTotpRequest {
+    string user_id = 1;
+    string code = 2;
+}
+
+message EnableTotpResponse {
+    bool ok = 1;
+}
+
+message DisableTotpRequest {
+    string user_id = 1;
+}
+
+message DisableTotpResponse {
+    bool ok = 1;
+}
+
 message CreateStaffAccountRequest {
     string email = 1;
     Role role = 2;
@@ -197,6 +229,15 @@ message ChangeStaffEmailResponse {
     StaffAccount account = 1;
 }
 
+message ResetStaffTotpRequest {
+    string id = 1;
+    string admin_id = 2;
+}
+
+message ResetStaffTotpResponse {
+    StaffAccount account = 1;
+}
+
 message StaffAccount {
     string id = 1;
     string email = 2;
@@ -205,6 +246,7 @@ message StaffAccount {
     bool is_active = 5;
     reserved 6;
     optional string last_active_at = 7;
+    bool is_totp_enabled = 8;
 }
 
 enum Role {

package/proto/auth.proto

@@ -27,7 +27,13 @@ message SendOtpRequest {
 }
 
 message SendOtpResponse {
-  bool ok = 1;
+  reserved 1;
+  LoginMethod method = 2;
+}
+
+enum LoginMethod {
+  EMAIL = 0;
+  TOTP = 1;
 }
 
 message VerifyOtpRequest {