@casual-simulation/aux-records 3.8.1 → 3.10.2

package/AuthController.js

@@ -10,7 +10,7 @@ import { hashHighEntropyPasswordWithSalt, hashLowEntropyPasswordWithSalt, verify
 import { fromByteArray } from 'base64-js';
 import { cleanupObject, isActiveSubscription, isStringValid } from './Utils';
 import { randomCode } from './CryptoUtils';
-import { getSubscription, } from './SubscriptionConfiguration';
+import { getContractFeatures, getSubscription, } from './SubscriptionConfiguration';
 import { parseConnectionToken, formatV1ConnectionKey, formatV1SessionKey, isSuperUserRole, parseSessionKey, verifyConnectionToken, } from '@casual-simulation/aux-common';
 import { DateTime } from 'luxon';
 import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse, } from '@simplewebauthn/server';
@@ -93,11 +93,12 @@ export class AuthController {
     set relyingParties(value) {
         this._webAuthNRelyingParties = value;
     }
-    constructor(authStore, messenger, configStore, privoClient = null, relyingParties = []) {
+    constructor(authStore, messenger, configStore, recordsStore, privoClient = null, relyingParties = []) {
         this._privoClient = null;
         this._store = authStore;
         this._messenger = messenger;
         this._config = configStore;
+        this._records = recordsStore;
         this._privoClient = privoClient;
         this._webAuthNRelyingParties = relyingParties;
         this._privoEnabled = this._privoClient !== null;
@@ -127,9 +128,8 @@ export class AuthController {
         this._privoClient = value;
     }
     async createAccount(request) {
-        var _a;
         try {
-            const createSession = (_a = request.createSession) !== null && _a !== void 0 ? _a : true;
+            const createSession = request.createSession ?? true;
             if (!isSuperUserRole(request.userRole)) {
                 return {
                     success: false,
@@ -178,8 +178,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error occurred while creating account', err);
             return {
                 success: false,
@@ -212,8 +212,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error occurred while issuing session', err);
             return {
                 success: false,
@@ -268,6 +268,13 @@ export class AuthController {
                 };
             }
         }
+        if (request.loginStudioId && request.comId) {
+            return {
+                success: false,
+                errorCode: 'unacceptable_request',
+                errorMessage: 'Cannot specify both loginStudioId and comId.',
+            };
+        }
         try {
             let newUser = false;
             const supported = await this._messenger.supportsAddressType(request.addressType);
@@ -280,7 +287,27 @@ export class AuthController {
                         : 'Phone numbers are not supported',
                 };
             }
-            let user = await this._store.findUserByAddress(request.address, request.addressType);
+            let loginStudioId = request.loginStudioId;
+            if (request.comId) {
+                const studio = await this._records.getStudioByComId(request.comId);
+                if (!studio) {
+                    return {
+                        success: false,
+                        errorCode: 'not_found',
+                        errorMessage: 'The specified comID was not found.',
+                    };
+                }
+                console.log(`[AuthController] [requestLogin] Logging into studio (${studio.id}) for comID: ${request.comId}.`);
+                loginStudioId = studio.id;
+            }
+            else if (request.customDomain) {
+                const customDomain = await this._records.getVerifiedCustomDomainByName(request.customDomain);
+                if (customDomain) {
+                    console.log(`[AuthController] [requestLogin] Logging into studio (${customDomain.studioId}) for custom domain: ${request.customDomain}.`);
+                    loginStudioId = customDomain.studioId;
+                }
+            }
+            let user = await this._store.findUserByAddress(request.address, request.addressType, loginStudioId);
             if (!user) {
                 newUser = true;
                 user = {
@@ -293,7 +320,9 @@ export class AuthController {
                         : null,
                     allSessionRevokeTimeMs: null,
                     currentLoginRequestId: null,
+                    loginStudioId: loginStudioId,
                 };
+                console.log(`[AuthController] [requestLogin] Creating new user (${user.id}).`);
                 if (!(await this._validateAddress(request.address, request.addressType))) {
                     console.log(`[AuthController] [requestLogin] Login attempt rejected for new user with address (type: ${request.addressType}) that is not allowed.`);
                     return {
@@ -332,7 +361,7 @@ export class AuthController {
                 if (newUser) {
                     const result = await this._store.saveNewUser(user);
                     if (result.success === false) {
-                        user = await this._store.findUserByAddress(request.address, request.addressType);
+                        user = await this._store.findUserByAddress(request.address, request.addressType, loginStudioId);
                         if (!user) {
                             console.log('[AuthController] Could not find user even though it is supposed to already exist.');
                             return {
@@ -365,8 +394,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error Occurred while Creating Login Request', err);
             return {
                 success: false,
@@ -497,8 +526,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error occurred while completing login request', err);
             return {
                 success: false,
@@ -557,8 +586,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error occurred while requesting Privo login', err);
             return {
                 success: false,
@@ -628,8 +657,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error occurred while processing Privo authorization code', err);
             return {
                 success: false,
@@ -639,7 +668,6 @@ export class AuthController {
         }
     }
     async completeOpenIDLogin(request) {
-        var _a, _b, _c, _d;
         try {
             if (!this._privoClient) {
                 return {
@@ -747,12 +775,12 @@ export class AuthController {
                 };
             }
             const privacyFeatures = getPrivacyFeaturesFromPermissions(config.featureIds, result.userInfo.permissions);
-            if (((_a = user.privacyFeatures) === null || _a === void 0 ? void 0 : _a.publishData) !==
+            if (user.privacyFeatures?.publishData !==
                 privacyFeatures.publishData ||
-                ((_b = user.privacyFeatures) === null || _b === void 0 ? void 0 : _b.allowPublicData) !==
+                user.privacyFeatures?.allowPublicData !==
                     privacyFeatures.allowPublicData ||
-                ((_c = user.privacyFeatures) === null || _c === void 0 ? void 0 : _c.allowAI) !== privacyFeatures.allowAI ||
-                ((_d = user.privacyFeatures) === null || _d === void 0 ? void 0 : _d.allowPublicInsts) !==
+                user.privacyFeatures?.allowAI !== privacyFeatures.allowAI ||
+                user.privacyFeatures?.allowPublicInsts !==
                     privacyFeatures.allowPublicInsts) {
                 console.log(`[AuthController] [completeOpenIDLogin] Updating user privacy features.`);
                 user = {
@@ -785,8 +813,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error occurred while completing Privo login', err);
             return {
                 success: false,
@@ -946,8 +974,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error(`[AuthController] Error occurred while requesting Privo sign up`, err);
             return {
                 success: false,
@@ -957,7 +985,6 @@ export class AuthController {
         }
     }
     async requestWebAuthnRegistration(request) {
-        var _a;
         try {
             if (this._webAuthNRelyingParties.length <= 0) {
                 return {
@@ -987,7 +1014,7 @@ export class AuthController {
                 rpName: relyingParty.name,
                 rpID: relyingParty.id,
                 userID: user.id,
-                userName: (_a = user.email) !== null && _a !== void 0 ? _a : user.phoneNumber,
+                userName: user.email ?? user.phoneNumber,
                 attestationType: 'none',
                 excludeCredentials: authenticators.map((auth) => ({
                     id: base64URLStringToBuffer(auth.credentialId),
@@ -1008,8 +1035,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error(`[AuthController] Error occurred while requesting WebAuthn registration options`, err);
             return {
                 success: false,
@@ -1092,8 +1119,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error(`[AuthController] Error occurred while completing WebAuthn registration`, err);
             return {
                 success: false,
@@ -1142,8 +1169,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error(`[AuthController] Error occurred while requesting WebAuthn login`, err);
             return {
                 success: false,
@@ -1260,8 +1287,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error(`[AuthController] Error occurred while requesting WebAuthn login`, err);
             return {
                 success: false,
@@ -1298,8 +1325,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error(`[AuthController] Error occurred while listing user authenticators`, err);
             return {
                 success: false,
@@ -1331,8 +1358,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error(`[AuthController] Error occurred while deleting a user authenticator`, err);
             return {
                 success: false,
@@ -1431,16 +1458,16 @@ export class AuthController {
                 userId: session.userId,
                 sessionId: session.sessionId,
                 allSessionsRevokedTimeMs: userInfo.allSessionRevokeTimeMs,
-                subscriptionId: subscriptionId !== null && subscriptionId !== void 0 ? subscriptionId : undefined,
-                subscriptionTier: subscriptionTier !== null && subscriptionTier !== void 0 ? subscriptionTier : undefined,
+                subscriptionId: subscriptionId ?? undefined,
+                subscriptionTier: subscriptionTier ?? undefined,
                 privacyFeatures: userInfo.privacyFeatures,
                 role: userInfo.role,
             };
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while validating a session key', err);
             return {
                 success: false,
@@ -1545,15 +1572,15 @@ export class AuthController {
                 recordName: recordName,
                 inst: inst,
                 allSessionsRevokedTimeMs: userInfo.allSessionRevokeTimeMs,
-                subscriptionId: subscriptionId !== null && subscriptionId !== void 0 ? subscriptionId : undefined,
-                subscriptionTier: subscriptionTier !== null && subscriptionTier !== void 0 ? subscriptionTier : undefined,
+                subscriptionId: subscriptionId ?? undefined,
+                subscriptionTier: subscriptionTier ?? undefined,
                 privacyFeatures: userInfo.privacyFeatures,
             };
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while validating a connection token', err);
             return {
                 success: false,
@@ -1563,7 +1590,6 @@ export class AuthController {
         }
     }
     async revokeSession(request) {
-        var _a;
         if (typeof request.userId !== 'string' || request.userId === '') {
             return {
                 success: false,
@@ -1628,7 +1654,7 @@ export class AuthController {
             await this._store.saveSession(newSession);
             let logoutUrl;
             if (session.oidProvider === PRIVO_OPEN_ID_PROVIDER) {
-                logoutUrl = await this._privoClient.generateLogoutUrl((_a = session.oidIdToken) !== null && _a !== void 0 ? _a : session.oidAccessToken);
+                logoutUrl = await this._privoClient.generateLogoutUrl(session.oidIdToken ?? session.oidAccessToken);
             }
             return {
                 success: true,
@@ -1637,8 +1663,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while revoking session', err);
             return {
                 success: false,
@@ -1686,8 +1712,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while revoking all sessions', err);
             return {
                 success: false,
@@ -1753,8 +1779,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while replacing session', err);
             return {
                 success: false,
@@ -1829,8 +1855,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while listing sessions', err);
             return {
                 success: false,
@@ -1844,100 +1870,30 @@ export class AuthController {
      * @param request The request.
      */
     async getUserInfo(request) {
-        var _a, _b, _c, _d, _e;
-        if (typeof request.userId !== 'string' || request.userId === '') {
-            return {
-                success: false,
-                errorCode: 'unacceptable_user_id',
-                errorMessage: 'The given userId is invalid. It must be a string.',
-            };
-        }
-        else if (typeof request.sessionKey !== 'string' ||
-            request.sessionKey === '') {
-            return {
-                success: false,
-                errorCode: 'unacceptable_session_key',
-                errorMessage: 'The given session key is invalid. It must be a string.',
-            };
-        }
         try {
-            const keyResult = await this.validateSessionKey(request.sessionKey);
-            if (keyResult.success === false) {
-                return keyResult;
-            }
-            else if (!isSuperUserRole(keyResult.role) &&
-                keyResult.userId !== request.userId) {
-                console.log('[AuthController] [getUserInfo] Request User ID doesnt match session key User ID!');
+            const requestedUserId = request.requestedUserId ?? request.userId;
+            if (!isSuperUserRole(request.userRole) &&
+                request.userId !== requestedUserId) {
                 return {
                     success: false,
-                    errorCode: 'invalid_key',
-                    errorMessage: INVALID_KEY_ERROR_MESSAGE,
+                    errorCode: 'not_authorized',
+                    errorMessage: 'You are not authorized to perform this action.',
                 };
             }
-            const result = await this._store.findUser(request.userId);
+            const result = await this._store.findUser(requestedUserId);
             if (!result) {
-                throw new Error('Unable to find user even though a valid session key was presented!');
-            }
-            const { hasActiveSubscription, subscriptionTier: tier } = await this._getSubscriptionInfo(result);
-            let privacyFeatures;
-            let displayName = null;
-            let email = result.email;
-            let name = result.name;
-            const privoConfig = await this._config.getPrivoConfiguration();
-            if (privoConfig && result.privoServiceId) {
-                const userInfo = await this._privoClient.getUserInfo(result.privoServiceId);
-                privacyFeatures = getPrivacyFeaturesFromPermissions(privoConfig.featureIds, userInfo.permissions);
-                displayName = userInfo.displayName;
-                email = userInfo.email;
-                name = userInfo.givenName;
-                if (((_a = result.privacyFeatures) === null || _a === void 0 ? void 0 : _a.publishData) !==
-                    privacyFeatures.publishData ||
-                    ((_b = result.privacyFeatures) === null || _b === void 0 ? void 0 : _b.allowPublicData) !==
-                        privacyFeatures.allowPublicData ||
-                    ((_c = result.privacyFeatures) === null || _c === void 0 ? void 0 : _c.allowAI) !==
-                        privacyFeatures.allowAI ||
-                    ((_d = result.privacyFeatures) === null || _d === void 0 ? void 0 : _d.allowPublicInsts) !==
-                        privacyFeatures.allowPublicInsts) {
-                    await this._store.saveUser({
-                        ...result,
-                        privacyFeatures: {
-                            ...privacyFeatures,
-                        },
-                    });
-                }
-            }
-            else if (result.privacyFeatures) {
-                privacyFeatures = {
-                    ...result.privacyFeatures,
-                };
-            }
-            else {
-                privacyFeatures = {
-                    publishData: true,
-                    allowPublicData: true,
-                    allowAI: true,
-                    allowPublicInsts: true,
+                return {
+                    success: false,
+                    errorCode: 'user_not_found',
+                    errorMessage: 'The user was not found.',
                 };
             }
-            return {
-                success: true,
-                userId: result.id,
-                name: name,
-                displayName,
-                email: email,
-                phoneNumber: result.phoneNumber,
-                avatarPortraitUrl: result.avatarPortraitUrl,
-                avatarUrl: result.avatarUrl,
-                hasActiveSubscription: hasActiveSubscription,
-                subscriptionTier: tier !== null && tier !== void 0 ? tier : null,
-                privacyFeatures: privacyFeatures,
-                role: (_e = result.role) !== null && _e !== void 0 ? _e : 'none',
-            };
+            return await this.getPrivateInfoForUser(result);
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while getting user info', err);
             return {
                 success: false,
@@ -1946,6 +1902,106 @@ export class AuthController {
             };
         }
     }
+    /**
+     * Gets the user info for the given auth user.
+     *
+     * Not for public use.
+     * @param user The user to get the info for.
+     * @returns
+     */
+    async getPrivateInfoForUser(user) {
+        const { hasActiveSubscription, subscriptionTier: tier } = await this._getSubscriptionInfo(user);
+        const { privacyFeatures, displayName, email, name } = await this._getUserPrivoInfo(user);
+        // let accountBalance: number | null = undefined;
+        // let accountCurrency: string | null = undefined;
+        // if (this._financialController && user.accountId) {
+        //     const account = await this._financialController.getAccount(
+        //         user.accountId
+        //     );
+        //     if (isSuccess(account)) {
+        //         accountBalance = getAccountBalance(account.value);
+        //         accountCurrency = getAccountCurrency(account.value);
+        //     } else {
+        //         console.error(
+        //             '[AuthController] Error getting account balance for user',
+        //             account.error
+        //         );
+        //     }
+        // }
+        const subscriptionConfig = await this._config.getSubscriptionConfiguration();
+        const contractFeatures = getContractFeatures(subscriptionConfig, user.subscriptionStatus, user.subscriptionId, 'user', user.subscriptionPeriodStartMs, user.subscriptionPeriodEndMs);
+        return {
+            success: true,
+            userId: user.id,
+            name: name,
+            displayName,
+            email: email,
+            phoneNumber: user.phoneNumber,
+            avatarPortraitUrl: user.avatarPortraitUrl,
+            avatarUrl: user.avatarUrl,
+            hasActiveSubscription: hasActiveSubscription,
+            subscriptionTier: tier ?? null,
+            privacyFeatures: privacyFeatures,
+            role: user.role ?? 'none',
+            // accountId: user.accountId,
+            // accountBalance,
+            // accountCurrency,
+            requestedRate: user.requestedRate,
+            stripeAccountId: user.stripeAccountId,
+            stripeAccountRequirementsStatus: user.stripeAccountRequirementsStatus,
+            stripeAccountStatus: user.stripeAccountStatus,
+            contractFeatures: contractFeatures.allowed
+                ? contractFeatures
+                : undefined,
+        };
+    }
+    async _getUserPrivoInfo(user) {
+        let privacyFeatures;
+        let displayName = null;
+        let email = user.email;
+        let name = user.name;
+        const privoConfig = await this._config.getPrivoConfiguration();
+        if (privoConfig && user.privoServiceId) {
+            const userInfo = await this._privoClient.getUserInfo(user.privoServiceId);
+            privacyFeatures = getPrivacyFeaturesFromPermissions(privoConfig.featureIds, userInfo.permissions);
+            displayName = userInfo.displayName;
+            email = userInfo.email;
+            name = userInfo.givenName;
+            if (user.privacyFeatures?.publishData !==
+                privacyFeatures.publishData ||
+                user.privacyFeatures?.allowPublicData !==
+                    privacyFeatures.allowPublicData ||
+                user.privacyFeatures?.allowAI !== privacyFeatures.allowAI ||
+                user.privacyFeatures?.allowPublicInsts !==
+                    privacyFeatures.allowPublicInsts) {
+                await this._store.saveUser({
+                    ...user,
+                    privacyFeatures: {
+                        ...privacyFeatures,
+                    },
+                });
+            }
+        }
+        else if (user.privacyFeatures) {
+            privacyFeatures = {
+                ...user.privacyFeatures,
+            };
+        }
+        else {
+            privacyFeatures = {
+                publishData: true,
+                allowPublicData: true,
+                allowAI: true,
+                allowPublicInsts: true,
+            };
+        }
+        return {
+            privacyFeatures,
+            displayName,
+            email,
+            name,
+        };
+    }
     /**
      * Gets the public information for a specific user.
      * @param userId The ID of the user whose information is being requested.
@@ -1984,8 +2040,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while getting user info', err);
             return {
                 success: false,
@@ -2004,10 +2060,20 @@ export class AuthController {
         return {
             hasActiveSubscription: !!sub &&
                 isActiveSubscription(user.subscriptionStatus, user.subscriptionPeriodStartMs, user.subscriptionPeriodEndMs),
-            subscriptionId: sub === null || sub === void 0 ? void 0 : sub.id,
+            subscriptionId: sub?.id,
             subscriptionTier: tier,
         };
     }
+    /**
+     * Gets the subscription information for a user.
+     *
+     * Not for public use.
+     * @param user The user to get the subscription information for.
+     * @returns
+     */
+    getUserSubscriptionInfo(user) {
+        return this._getSubscriptionInfo(user);
+    }
     /**
      * Attempts to update a user's metadata.
      * @param request The request for the operation.
@@ -2072,8 +2138,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while getting user info', err);
             return {
                 success: false,
@@ -2086,7 +2152,6 @@ export class AuthController {
      * Attempts to request a change in privacy features for a user.
      */
     async requestPrivacyFeaturesChange(request) {
-        var _a;
         try {
             if (!this._privoClient) {
                 return {
@@ -2127,7 +2192,7 @@ export class AuthController {
                     errorMessage: 'Privo features are not supported on this server.',
                 };
             }
-            const result = await this._privoClient.resendConsentRequest(user.privoServiceId, (_a = user.privoParentServiceId) !== null && _a !== void 0 ? _a : user.privoServiceId);
+            const result = await this._privoClient.resendConsentRequest(user.privoServiceId, user.privoParentServiceId ?? user.privoServiceId);
             if (result.success === false) {
                 return result;
             }
@@ -2138,8 +2203,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while requesting a change in privacy features', err);
             return {
                 success: false,
@@ -2161,8 +2226,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while listing email rules', err);
             return {
                 success: false,
@@ -2184,8 +2249,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while listing email rules', err);
             return {
                 success: false,
@@ -2223,8 +2288,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while checking if email address is valid', err);
             return {
                 success: false,
@@ -2268,8 +2333,8 @@ export class AuthController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[AuthController] Error ocurred while checking if display name is valid', err);
             return {
                 success: false,
@@ -2286,7 +2351,6 @@ export class AuthController {
      * @param ipAddress The IP address that the session is being issued to. Should be null if the ip address is not known.
      */
     async _issueSession({ userId, lifetimeMs, previousSession, ipAddress, requestId, ...rest }) {
-        var _a, _b, _c, _d, _e;
         const now = Date.now();
         const newSessionId = fromByteArray(randomBytes(SESSION_ID_BYTE_LENGTH));
         const newSessionSecret = fromByteArray(randomBytes(SESSION_SECRET_BYTE_LENGTH));
@@ -2295,13 +2359,13 @@ export class AuthController {
             ...rest,
             userId: userId,
             sessionId: newSessionId,
-            requestId: requestId !== null && requestId !== void 0 ? requestId : null,
+            requestId: requestId ?? null,
             secretHash: this._hashHighEntropyPasswordWithSalt(newSessionSecret, newSessionId),
             connectionSecret: newConnectionSecret,
             grantedTimeMs: now,
             revokeTimeMs: null,
             expireTimeMs: lifetimeMs ? now + lifetimeMs : null,
-            previousSessionId: (_a = previousSession === null || previousSession === void 0 ? void 0 : previousSession.sessionId) !== null && _a !== void 0 ? _a : null,
+            previousSessionId: previousSession?.sessionId ?? null,
             nextSessionId: null,
             ipAddress: ipAddress,
         };
@@ -2327,10 +2391,10 @@ export class AuthController {
             connectionKey: formatV1ConnectionKey(userId, newSessionId, newConnectionSecret, newSession.expireTimeMs),
             expireTimeMs: newSession.expireTimeMs,
             metadata: {
-                hasUserAuthenticator: (_b = metadata === null || metadata === void 0 ? void 0 : metadata.hasUserAuthenticator) !== null && _b !== void 0 ? _b : false,
-                userAuthenticatorCredentialIds: (_c = metadata === null || metadata === void 0 ? void 0 : metadata.userAuthenticatorCredentialIds) !== null && _c !== void 0 ? _c : [],
-                hasPushSubscription: (_d = metadata === null || metadata === void 0 ? void 0 : metadata.hasPushSubscription) !== null && _d !== void 0 ? _d : false,
-                pushSubscriptionIds: (_e = metadata === null || metadata === void 0 ? void 0 : metadata.pushSubscriptionIds) !== null && _e !== void 0 ? _e : [],
+                hasUserAuthenticator: metadata?.hasUserAuthenticator ?? false,
+                userAuthenticatorCredentialIds: metadata?.userAuthenticatorCredentialIds ?? [],
+                hasPushSubscription: metadata?.hasPushSubscription ?? false,
+                pushSubscriptionIds: metadata?.pushSubscriptionIds ?? [],
             },
         };
         console.log(`[AuthController] [issueSession userId: ${userId} newSessionId: ${newSessionId} expiresAt: ${newSession.expireTimeMs}] Issued session.`);