@contember/engine-tenant-api 1.3.0-alpha.7 → 1.3.0-beta.1

package/src/schema/tenant.graphql.ts

@@ -34,12 +34,12 @@ const schema: DocumentNode = gql`
 			redirectUrl: String @deprecated(reason: "use data.redirectUrl")
 		): InitSignInIDPResponse
 		signInIDP(
-			identityProvider: String!, 
+			identityProvider: String!,
 			data: Json,
 			expiration: Int
-            idpResponse: IDPResponseInput, @deprecated(reason: "pass idpResponse.url as data.url")
-			redirectUrl: String @deprecated(reason: "use data.redirectUrl"), 
-			sessionData: Json @deprecated(reason: "use data.sessionData"), 
+			idpResponse: IDPResponseInput, @deprecated(reason: "pass idpResponse.url as data.url")
+			redirectUrl: String @deprecated(reason: "use data.redirectUrl"),
+			sessionData: Json @deprecated(reason: "use data.sessionData"),
 		): SignInIDPResponse
 
 		# IDP management
@@ -52,6 +52,8 @@ const schema: DocumentNode = gql`
 		confirmOtp(otpToken: String!): ConfirmOtpResponse
 		disableOtp: DisableOtpResponse
 
+		disablePerson(personId: String!): DisablePersonResponse
+
 		createResetPasswordRequest(email: String!, options: CreateResetPasswordRequestOptions): CreatePasswordResetRequestResponse
 		resetPassword(token: String!, password: String!): ResetPasswordResponse
 
@@ -73,6 +75,8 @@ const schema: DocumentNode = gql`
 		createApiKey(projectSlug: String!, memberships: [MembershipInput!]!, description: String!, tokenHash: String): CreateApiKeyResponse
 		createGlobalApiKey(description: String!, roles: [String!], tokenHash: String): CreateApiKeyResponse
 		disableApiKey(id: String!): DisableApiKeyResponse
+		addGlobalIdentityRoles(identityId: String!, roles: [String!]!): AddGlobalIdentityRolesResponse
+		removeGlobalIdentityRoles(identityId: String!, roles: [String!]!): RemoveGlobalIdentityRolesResponse
 
 		addMailTemplate(template: MailTemplate!): AddMailTemplateResponse
 		removeMailTemplate(templateIdentifier: MailTemplateIdentifier!): RemoveMailTemplateResponse
@@ -89,10 +93,10 @@ const schema: DocumentNode = gql`
 		updateProject(projectSlug: String!, name: String, config: Json, mergeConfig: Boolean): UpdateProjectResponse
 
 		addProjectMailTemplate(template: MailTemplate!): AddMailTemplateResponse
-			@deprecated(reason: "use addMailTemplate")
+		@deprecated(reason: "use addMailTemplate")
 
 		removeProjectMailTemplate(templateIdentifier: MailTemplateIdentifier!): RemoveMailTemplateResponse
-			@deprecated(reason: "use removeMailTemplate")
+		@deprecated(reason: "use removeMailTemplate")
 
 	}
 
@@ -143,6 +147,7 @@ const schema: DocumentNode = gql`
 	enum SignInErrorCode {
 		UNKNOWN_EMAIL
 		INVALID_PASSWORD
+		PERSON_DISABLED
 		NO_PASSWORD_SET
 		OTP_REQUIRED
 		INVALID_OTP_TOKEN
@@ -169,6 +174,7 @@ const schema: DocumentNode = gql`
 	enum CreateSessionTokenErrorCode {
 		UNKNOWN_EMAIL
 		UNKNOWN_PERSON_ID
+		PERSON_DISABLED
 	}
 
 	type CreateSessionTokenResult implements CommonSignInResult{
@@ -191,7 +197,8 @@ const schema: DocumentNode = gql`
 	}
 
 	enum SignOutErrorCode {
-		NOT_A_PERSON
+		NOT_A_PERSON,
+		NOT_POSSIBLE_SIGN_OUT_WITH_PERMANENT_API_KEY
 	}
 
 	# === changePassword ===
@@ -253,7 +260,7 @@ const schema: DocumentNode = gql`
 
 	enum InitSignInIDPErrorCode {
 		PROVIDER_NOT_FOUND
-        IDP_VALIDATION_FAILED
+		IDP_VALIDATION_FAILED
 	}
 
 	input IDPResponseInput {
@@ -278,6 +285,7 @@ const schema: DocumentNode = gql`
 		IDP_VALIDATION_FAILED
 
 		PERSON_NOT_FOUND
+		PERSON_DISABLED
 		PERSON_ALREADY_EXISTS
 	}
 
@@ -329,8 +337,8 @@ const schema: DocumentNode = gql`
 	}
 
 	enum DisableIDPErrorCode {
-        NOT_FOUND
-    }
+		NOT_FOUND
+	}
 
 	type EnableIDPResponse {
 		error: EnableIDPError
@@ -343,14 +351,14 @@ const schema: DocumentNode = gql`
 	}
 
 	enum EnableIDPErrorCode {
-        NOT_FOUND
+		NOT_FOUND
 	}
 
 	type IdentityProvider {
 		slug: String!
 		type: String!
 		configuration: Json!
-		disabledAt: DateTime!
+		disabledAt: DateTime
 		options: IDPOptionsOutput!
 	}
 
@@ -527,7 +535,50 @@ const schema: DocumentNode = gql`
 	enum DisableApiKeyErrorCode {
 		KEY_NOT_FOUND
 	}
+	# === addGlobalIdentityRoles ===
+
+	type AddGlobalIdentityRolesResponse {
+		ok: Boolean!
+		error: AddGlobalIdentityRolesError
+		result: AddGlobalIdentityRolesResult
+	}
+
+	type AddGlobalIdentityRolesResult {
+		identity: Identity!
+	}
+
+	type AddGlobalIdentityRolesError {
+		code: AddGlobalIdentityRolesErrorCode!
+		developerMessage: String!
+	}
+
+	enum AddGlobalIdentityRolesErrorCode {
+		IDENTITY_NOT_FOUND
+		INVALID_ROLE
+	}
+
+
+	# === removeGlobalIdentityRoles ===
+
+	type RemoveGlobalIdentityRolesResponse {
+		ok: Boolean!
+		error: RemoveGlobalIdentityRolesError
+		result: RemoveGlobalIdentityRolesResult
+	}
+
+	type RemoveGlobalIdentityRolesError {
+		code: RemoveGlobalIdentityRolesErrorCode!
+		developerMessage: String!
+	}
+
+	type RemoveGlobalIdentityRolesResult {
+		identity: Identity!
+	}
 
+	enum RemoveGlobalIdentityRolesErrorCode {
+		IDENTITY_NOT_FOUND
+		INVALID_ROLE
+	}
 	# === common ===
 
 	# === variables ===
@@ -714,6 +765,21 @@ const schema: DocumentNode = gql`
 		OTP_NOT_ACTIVE
 	}
 
+	type DisablePersonResponse {
+		ok: Boolean!
+		error: DisablePersonError
+	}
+
+	type DisablePersonError {
+		code: DisablePersonErrorCode!
+		developerMessage: String!
+	}
+
+	enum DisablePersonErrorCode {
+		PERSON_ALREADY_DISABLED
+		PERSON_NOT_FOUND
+	}
+
 	# === mails ===
 
 	input MailTemplate {
@@ -859,20 +925,30 @@ const schema: DocumentNode = gql`
 
 	type SetProjectSecretResponse {
 		ok: Boolean!
-		#error: SetProjectSecretResponseError
+		error: SetProjectSecretError
 	}
 
-	#	type SetProjectSecretResponseError {
-	#		code: SetProjectSecretResponseErrorCode!
-	#		developerMessage: String!
-	#	}
-	#
-	#	enum SetProjectSecretResponseErrorCode {
-	#	}
+	type SetProjectSecretError {
+		code: SetProjectSecretErrorCode!
+		developerMessage: String!
+	}
+
+	enum SetProjectSecretErrorCode {
+		PROJECT_NOT_FOUND
+	}
 
 	type UpdateProjectResponse {
 		ok: Boolean!
-		#error: UpdateProjectConfigResponseError
+		error: UpdateProjectError
+	}
+
+	type UpdateProjectError {
+		code: UpdateProjectErrorCode!
+		developerMessage: String!
+	}
+
+	enum UpdateProjectErrorCode {
+		PROJECT_NOT_FOUND
 	}
 `
 

package/tests/cases/integration/db/updateRoles.test.ts

@@ -0,0 +1,74 @@
+import { testTenantDb } from '../../../src/testTenantDb'
+import { GQL } from '../../../src/tags'
+import { assert, test } from 'vitest'
+import { signUpMutation } from '../mocked/gql/signUp'
+import { TenantRole } from '../../../../src'
+
+
+test('manage global roles', testTenantDb(async ({ tester }) => {
+	const result = await tester.execute(
+		signUpMutation({
+			email: 'john@doe.com',
+			password: 'abcdxy',
+		}),
+		{
+			roles: [TenantRole.SUPER_ADMIN],
+		},
+	)
+	assert.isOk(result.data.signUp.ok)
+	const identity = result.data.signUp.result.person.identity.id
+	assert.deepStrictEqual(result.data.signUp.result.person.identity.roles, [TenantRole.PERSON])
+
+	const resultAddRole = await tester.execute(GQL`
+			mutation {
+				addGlobalIdentityRoles(identityId: "${identity}", roles: ["project_admin", "super_admin"]) {
+					ok
+					result {
+						identity {
+							roles
+						}
+					}
+				}
+			}
+		`, {
+		roles: [TenantRole.SUPER_ADMIN],
+	})
+
+	assert.deepStrictEqual(resultAddRole.data, {
+		addGlobalIdentityRoles: {
+			ok: true,
+			result: {
+				identity: {
+					roles: [TenantRole.PERSON, TenantRole.PROJECT_ADMIN, TenantRole.SUPER_ADMIN],
+				},
+			},
+		},
+	})
+
+
+	const resultRemoveRole = await tester.execute(GQL`
+			mutation {
+				removeGlobalIdentityRoles(identityId: "${identity}", roles: ["project_admin", "super_admin"]) {
+					ok
+					result {
+						identity {
+							roles
+						}
+					}
+				}
+			}
+		`, {
+		roles: [TenantRole.SUPER_ADMIN],
+	})
+
+	assert.deepStrictEqual(resultRemoveRole.data, {
+		removeGlobalIdentityRoles: {
+			ok: true,
+			result: {
+				identity: {
+					roles: [TenantRole.PERSON],
+				},
+			},
+		},
+	})
+}))

package/tests/cases/integration/mocked/confirmOtpMutation.test.ts

@@ -73,7 +73,7 @@ test('confirm otp mutation with invalid code', async () => {
 			data: {
 				confirmOtp: {
 					ok: false,
-					errors: [{ code: ConfirmOtpErrorCode.InvalidOtpToken }],
+					errors: [{ code: 'INVALID_OTP_TOKEN' }],
 				},
 			},
 		},

package/tests/cases/integration/mocked/gql/signUp.ts

@@ -11,6 +11,10 @@ export const signUpMutation = (variables: { email: string; password: string }):
 			result {
 				person {
 					id
+					identity {
+						id
+						roles
+					}
 				}
 			}
 		}

package/tests/cases/integration/mocked/signInMutation.test.ts

@@ -81,6 +81,40 @@ test('signs in', async () => {
 	})
 })
 
+test('signs in - normalize email', async () => {
+	const email = 'John@doe.com '
+	const password = '123'
+	const identityId = testUuid(2)
+	const personId = testUuid(7)
+	const projectId = testUuid(10)
+	const apiKeyId = testUuid(1)
+	await executeTenantTest({
+		query: signInMutation({ email, password }),
+		executes: [
+			getPersonByEmailSql({ email, response: null }),
+			getPersonByEmailSql({ email: 'john@doe.com', response: { personId, identityId, password, roles: [] } }),
+			createSessionKeySql({ apiKeyId: apiKeyId, identityId: identityId }),
+			getIdentityProjectsSql({ identityId: identityId, projectId: projectId }),
+			selectMembershipsSql({
+				identityId: identityId,
+				projectId,
+				membershipsResponse: [{ role: 'editor', variables: [{ name: 'locale', values: ['cs'] }] }],
+			}),
+		],
+		return: {
+			data: {
+				signIn: {
+					ok: true,
+					errors: [],
+					result: {
+						token: '0000000000000000000000000000000000000000',
+					},
+				},
+			},
+		},
+	})
+})
+
 test('sign in - invalid password', async () => {
 	const email = 'john@doe.com'
 	const password = '123'
@@ -93,7 +127,7 @@ test('sign in - invalid password', async () => {
 			data: {
 				signIn: {
 					ok: false,
-					errors: [{ code: SignInErrorCode.InvalidPassword }],
+					errors: [{ code: 'INVALID_PASSWORD' }],
 					result: null,
 				},
 			},
@@ -115,7 +149,7 @@ test('otp token not provided', async () => {
 			data: {
 				signIn: {
 					ok: false,
-					errors: [{ code: SignInErrorCode.OtpRequired }],
+					errors: [{ code: 'OTP_REQUIRED' }],
 					result: null,
 				},
 			},
@@ -144,7 +178,7 @@ test('sign in - invalid otp token', async () => {
 			data: {
 				signIn: {
 					ok: false,
-					errors: [{ code: SignInErrorCode.InvalidOtpToken }],
+					errors: [{ code: 'INVALID_OTP_TOKEN' }],
 					result: null,
 				},
 			},

package/tests/cases/integration/mocked/signOutMutation.test.ts

@@ -4,9 +4,12 @@ import { GQL, SQL } from '../../../src/tags'
 import { disableApiKey } from './sql/disableApiKeySql'
 import { getPersonByIdentity } from './sql/getPersonByIdentity'
 import { test } from 'vitest'
+import { getApiKeySql } from './sql/getApiKeySql'
+import { ApiKey } from '../../../../src'
 
 test('sign out', async () => {
 	const personId = testUuid(1)
+
 	await executeTenantTest({
 		query: GQL`mutation {
           signOut {
@@ -23,6 +26,10 @@ test('sign out', async () => {
 					email: 'john@doe.com',
 				},
 			}),
+			getApiKeySql({
+				apiKeyId: authenticatedApiKeyId,
+				response: { personId: personId, identityId: authenticatedIdentityId, apiKeyType: ApiKey.Type.SESSION },
+			}),
 			disableApiKey({ id: authenticatedApiKeyId }),
 		],
 		return: {
@@ -38,6 +45,7 @@ test('sign out', async () => {
 test('sign out all', async () => {
 	const identityId = authenticatedIdentityId
 	const personId = testUuid(1)
+
 	await executeTenantTest({
 		query: GQL`mutation {
           signOut(all: true) {
@@ -54,6 +62,10 @@ test('sign out all', async () => {
 					roles: [],
 				},
 			}),
+			getApiKeySql({
+				apiKeyId: authenticatedApiKeyId,
+				response: { personId: personId, identityId: authenticatedIdentityId, apiKeyType: ApiKey.Type.SESSION },
+			}),
 			{
 				sql: SQL`update "tenant"."api_key" set "disabled_at" = ? where "identity_id" = ?`,
 				parameters: [(val: any) => val instanceof Date, identityId],
@@ -70,6 +82,52 @@ test('sign out all', async () => {
 	})
 })
 
+test('sign out - permanent api key', async () => {
+	const identityId = authenticatedIdentityId
+	const personId = testUuid(1)
+
+	await executeTenantTest({
+		query: GQL`mutation {
+          signOut(all: true) {
+            ok,
+            error {
+              code
+            }
+          }
+        }`,
+		executes: [
+			getPersonByIdentity({
+				identityId,
+				response: {
+					password: '',
+					personId: personId,
+					email: 'john@doe.com',
+					roles: [],
+				},
+			}),
+			getApiKeySql({
+				apiKeyId: authenticatedApiKeyId,
+				response: { personId: personId, identityId: authenticatedIdentityId, apiKeyType: ApiKey.Type.PERMANENT },
+			}),
+			{
+				sql: SQL`update "tenant"."api_key" set "disabled_at" = ? where "identity_id" = ?`,
+				parameters: [(val: any) => val instanceof Date, identityId],
+				response: { rowCount: 1 },
+			},
+		],
+		return: {
+			data: {
+				signOut: {
+					ok: false,
+					error: {
+						code: 'NOT_POSSIBLE_SIGN_OUT_WITH_PERMANENT_API_KEY',
+					},
+				},
+			},
+		},
+	})
+})
+
 test('sign out - not a person', async () => {
 	await executeTenantTest({
 		query: GQL`mutation {

package/tests/cases/integration/mocked/signUpMutation.test.ts

@@ -24,6 +24,11 @@ test('signs up a new user', async () => {
 				createPersonSql({ personId, email, password, identityId }),
 			),
 			disableOneOffKeySql({ id: testUuid(998) }),
+			{
+				sql: SQL`select "id", "description", "roles"  from "tenant"."identity"  where "id" in (?)`,
+				parameters: [testUuid(1)],
+				response: { rows: [{ id: testUuid(1), description: '', roles: ['person'] }] },
+			},
 			{
 				sql: SQL`select
                        "project"."id",
@@ -44,6 +49,10 @@ test('signs up a new user', async () => {
 					result: {
 						person: {
 							id: personId,
+							identity: {
+								id: identityId,
+								roles: ['person'],
+							},
 						},
 					},
 				},

package/tests/cases/integration/mocked/sql/getApiKeySql.ts

@@ -0,0 +1,33 @@
+import { SQL } from '../../../../src/tags'
+import { ExpectedQuery } from '@contember/database-tester'
+import { ApiKey } from '../../../../../src'
+
+export const getApiKeySql = (args: {
+	apiKeyId: string
+	response: { identityId: string; personId: string; apiKeyType: ApiKey.Type }
+}): ExpectedQuery => ({
+	sql: SQL
+	`select "api_key"."id", "api_key"."type", "api_key"."identity_id", "api_key"."disabled_at", "api_key"."expires_at", "identity"."roles", "api_key"."expiration", "person"."id" as "person_id"
+		from "tenant"."api_key"
+    	inner join "tenant"."identity" as "identity" on "api_key"."identity_id" = "identity"."id"
+    	left join "tenant"."person" as "person" on "person"."identity_id" = "identity"."id"
+		where "api_key"."id" = ?
+	`,
+	parameters: [args.apiKeyId],
+	response: {
+		rows: args.response
+			? [
+				{
+					id: args.apiKeyId,
+					type: args.response.apiKeyType,
+					identity_id: args.response.identityId,
+					disabled_at: null,
+					expires_at: null,
+					expiration: null,
+					roles: [],
+					person_id: args.response.personId,
+				},
+			]
+			: [],
+	},
+})

package/tests/cases/integration/mocked/sql/getPersonByEmailSql.ts

@@ -5,7 +5,7 @@ export const getPersonByEmailSql = (args: {
 	email: string
 	response: null | { personId: string; password: string; identityId: string; roles: string[]; otpUri?: string }
 }): ExpectedQuery => ({
-	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "identity"."roles"
+	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "identity"."roles"
 	         FROM "tenant"."person"
 		              INNER JOIN "tenant"."identity" AS "identity" ON "identity"."id" = "person"."identity_id"
 	         WHERE "person"."email" = ?`,
@@ -21,6 +21,7 @@ export const getPersonByEmailSql = (args: {
 					email: args.email,
 					otp_uri: args.response.otpUri,
 					otp_activated_at: args.response.otpUri ? new Date() : null,
+					disabled_at: null,
 				},
 			  ]
 			: [],

package/tests/cases/integration/mocked/sql/getPersonByIdSql.ts

@@ -5,7 +5,7 @@ export const getPersonByIdSql = (args: {
 	personId: string
 	response: { personId: string; password: string; identityId: string; roles: string[]; email: string }
 }): ExpectedQuery => ({
-	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "identity"."roles"
+	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "identity"."roles"
 	         FROM "tenant"."person"
 		              INNER JOIN "tenant"."identity" AS "identity" ON "identity"."id" = "person"."identity_id"
 	         WHERE "person"."id" = ?`,

package/tests/cases/integration/mocked/sql/getPersonByIdentity.ts

@@ -5,7 +5,7 @@ export const getPersonByIdentity = (args: {
 	identityId: string
 	response: null | { personId: string; password: string; roles: string[]; email: string; otpUri?: string }
 }): ExpectedQuery => ({
-	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "identity"."roles"
+	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "identity"."roles"
 	         FROM "tenant"."person"
 		              INNER JOIN "tenant"."identity" AS "identity" ON "identity"."id" = "person"."identity_id"
 	         WHERE "person"."identity_id" = ?`,

package/tests/cases/integration/mocked/sql/getPersonByIdpSql.ts

@@ -6,7 +6,7 @@ export const getPersonByIdpSql = (args: {
 	externalIdentifier: string
 	response: null | { personId: string; password?: string; identityId: string; email: string; roles: string[]; otpUri?: string }
 }): ExpectedQuery => ({
-	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "identity"."roles"
+	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "identity"."roles"
 	         FROM "tenant"."person"
 		        INNER JOIN "tenant"."identity" AS "identity" ON "identity"."id" = "person"."identity_id"
 				INNER JOIN  "tenant"."person_identity_provider" as "idp" on  "idp"."person_id" = "person"."id"
@@ -24,6 +24,7 @@ export const getPersonByIdpSql = (args: {
 					email: args.response.email,
 					otp_uri: args.response.otpUri,
 					otp_activated_at: args.response.otpUri ? new Date() : null,
+					disabled_at: null,
 				},
 			  ]
 			: [],

package/tests/cases/unit/authorization/membershipAwareAccessNode.test.ts

@@ -11,6 +11,7 @@ const aclSchemaAdminCanManageEditorWithMatchingVariables: Acl.Schema = {
 			entities: {},
 			variables: {},
 			tenant: {
+				invite: true,
 				manage: {
 					editor: {
 						variables: { site: 'site' },
@@ -41,3 +42,38 @@ test('admin cannot assign editor role with different variable', async () => {
 	const node = new AclSchemaAccessNodeFactory().create(aclSchemaAdminCanManageEditorWithMatchingVariables, adminOfSiteA)
 	assert.notOk(await node.isAllowed(aclEvaluator, PermissionActions.PROJECT_ADD_MEMBER(editorOfSiteB)))
 })
+
+test('admin can invite editor role with matching variable', async () => {
+	const node = new AclSchemaAccessNodeFactory().create(aclSchemaAdminCanManageEditorWithMatchingVariables, adminOfSiteA)
+
+	assert.ok(await node.isAllowed(aclEvaluator, PermissionActions.PERSON_INVITE(editorOfSiteA)))
+})
+
+
+const aclSchemaForInviteOnly: Acl.Schema = {
+	roles: {
+		admin: {
+			entities: {},
+			variables: {},
+			tenant: {
+				invite: {
+					public: true,
+				},
+				manage: {
+					lorem: true,
+				},
+			},
+		},
+	},
+}
+
+
+test('admin can invite public. cannat manage public, cannot invite lorem', async () => {
+	const node = new AclSchemaAccessNodeFactory().create(aclSchemaForInviteOnly, [{ role: 'admin', variables: [] }])
+
+	assert.ok(await node.isAllowed(aclEvaluator, PermissionActions.PERSON_INVITE([{ role: 'public', variables: [] }])))
+
+	assert.notOk(await node.isAllowed(aclEvaluator, PermissionActions.PERSON_INVITE([{ role: 'lorem', variables: [] }])))
+
+	assert.notOk(await node.isAllowed(aclEvaluator, PermissionActions.PROJECT_REMOVE_MEMBER([{ role: 'public', variables: [] }])))
+})

package/dist/src/model/queries/apiKey/ApiKeyByTokenQuery.d.ts

@@ -1,22 +0,0 @@
-import { DatabaseQueryable, DatabaseQuery } from '@contember/database';
-import { ApiKey } from '../../type';
-declare class ApiKeyByTokenQuery extends DatabaseQuery<ApiKeyByTokenQuery.Result> {
-    private readonly token;
-    constructor(token: string);
-    fetch({ db }: DatabaseQueryable): Promise<ApiKeyByTokenQuery.Result>;
-}
-declare namespace ApiKeyByTokenQuery {
-    type Result = null | Row;
-    type Row = {
-        readonly id: string;
-        readonly type: ApiKey.Type;
-        readonly identity_id: string;
-        readonly disabled_at: Date | null;
-        readonly expires_at: Date | null;
-        readonly expiration: number | null;
-        readonly roles: string[];
-        readonly person_id: string | null;
-    };
-}
-export { ApiKeyByTokenQuery };
-//# sourceMappingURL=ApiKeyByTokenQuery.d.ts.map

package/dist/src/model/queries/apiKey/ApiKeyByTokenQuery.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApiKeyByTokenQuery.d.ts","sourceRoot":"","sources":["../../../../../src/model/queries/apiKey/ApiKeyByTokenQuery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAA2B,MAAM,qBAAqB,CAAA;AAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAGnC,cAAM,kBAAmB,SAAQ,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,MAAM;IAIpC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC;CAuB1E;AAED,kBAAU,kBAAkB,CAAC;IAC5B,KAAY,MAAM,GAAG,IAAI,GAAG,GAAG,CAAA;IAC/B,KAAY,GAAG,GAAG;QACjB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAA;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;QACjC,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAA;QAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;QAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAA;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KACjC,CAAA;CACD;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAA"}