@contember/engine-tenant-api 2.0.0-alpha.14 → 2.0.0-alpha.15

package/src/schema/tenant.graphql.ts

@@ -20,6 +20,8 @@ const schema: DocumentNode = gql`
 
 		identityProviders: [IdentityProvider!]!
 		mailTemplates: [MailTemplateData!]!
+		
+		configuration: Config!
 	}
 
 	type Mutation {
@@ -45,6 +47,14 @@ const schema: DocumentNode = gql`
 			redirectUrl: String @deprecated(reason: "use data.redirectUrl"),
 			sessionData: Json @deprecated(reason: "use data.sessionData"),
 		): SignInIDPResponse
+		
+		# passwordless sign in
+		initSignInPasswordless(email: String!, options: InitSignInPasswordlessOptions): InitSignInPasswordlessResponse
+		signInPasswordless(requestId: String!, validationType: PasswordlessValidationType!, token: String!, expiration: Int, mfaOtp: String): SignInPasswordlessResponse
+		activatePasswordlessOtp(requestId: String!, token: String!, otpHash: String!): ActivatePasswordlessOtpResponse
+
+        enableMyPasswordless: ToggleMyPasswordlessResponse
+        disableMyPasswordless: ToggleMyPasswordlessResponse
 
 		# IDP management
 		addIDP(identityProvider: String!, type: String!, configuration: Json!, options: IDPOptions): AddIDPResponse
@@ -95,6 +105,8 @@ const schema: DocumentNode = gql`
 		): CreateProjectResponse
 		setProjectSecret(projectSlug: String!, key: String!, value: String!): SetProjectSecretResponse
 		updateProject(projectSlug: String!, name: String, config: Json, mergeConfig: Boolean): UpdateProjectResponse
+		
+		configure(config: ConfigInput!): ConfigureResponse
 
 		addProjectMailTemplate(template: MailTemplate!): AddMailTemplateResponse
 		@deprecated(reason: "use addMailTemplate")
@@ -103,6 +115,49 @@ const schema: DocumentNode = gql`
 		@deprecated(reason: "use removeMailTemplate")
 
 	}
+	
+	# === configure ===
+	
+	type Config {
+		passwordless: ConfigPasswordless!
+	}
+	
+	type ConfigPasswordless {
+		enabled: ConfigPolicy!
+		url: String
+		expirationMinutes: Int!
+	}
+	
+	input ConfigInput {
+		passwordless: ConfigPasswordlessInput
+	}
+	
+	enum ConfigPolicy {
+		always
+		never
+		optIn
+		optOut
+	}
+	
+	input ConfigPasswordlessInput {
+		enabled: ConfigPolicy
+		url: String
+		expirationMinutes: Int
+	}
+	
+	type ConfigureResponse {
+		ok: Boolean!
+		error: ConfigureError
+	}
+	
+	type ConfigureError {
+		code: ConfigureErrorCode!
+		developerMessage: String!
+	}
+	
+	enum ConfigureErrorCode {
+		INVALID_CONFIG
+	}
 
 	# === signUp ===
 	type SignUpResponse {
@@ -418,6 +473,98 @@ const schema: DocumentNode = gql`
 		initReturnsConfig: Boolean
 	}
 
+	# === passwordless sign in ===
+	
+	type InitSignInPasswordlessResponse {
+		ok: Boolean!
+		error: InitSignInPasswordlessError
+		result: InitSignInPasswordlessResult
+	}
+	
+	type InitSignInPasswordlessError {
+		code: InitSignInPasswordlessErrorCode!
+		developerMessage: String!
+	}
+	
+	enum InitSignInPasswordlessErrorCode {
+		PERSON_NOT_FOUND
+		
+		PASSWORDLESS_DISABLED
+	}
+	
+	type InitSignInPasswordlessResult {
+		requestId: String!
+		expiresAt: DateTime!
+	}
+
+	input InitSignInPasswordlessOptions {
+		mailVariant: String
+		mailProject: String
+	}
+	
+	type SignInPasswordlessResponse {
+		ok: Boolean!
+		error: SignInPasswordlessError
+		result: SignInPasswordlessResult
+	}
+	
+	enum PasswordlessValidationType {
+		otp
+		token
+	}
+	
+	type SignInPasswordlessError {
+		code: SignInPasswordlessErrorCode!
+		developerMessage: String!
+	}
+	
+	enum SignInPasswordlessErrorCode {
+		TOKEN_NOT_FOUND
+		TOKEN_INVALID
+		TOKEN_EXPIRED
+		TOKEN_USED
+		PERSON_DISABLED
+		OTP_REQUIRED
+		INVALID_OTP_TOKEN
+	}
+	
+	type SignInPasswordlessResult implements CommonSignInResult {
+		token: String!
+		person: Person!
+	}
+	
+	type ActivatePasswordlessOtpResponse {
+		ok: Boolean!
+		error: ActivatePasswordlessOtpError
+	}
+	
+	type ActivatePasswordlessOtpError {
+		code: ActivatePasswordlessOtpErrorCode!
+		developerMessage: String!
+	}
+	
+	enum ActivatePasswordlessOtpErrorCode {
+		TOKEN_NOT_FOUND
+		TOKEN_INVALID
+		TOKEN_EXPIRED
+		TOKEN_USED
+	}
+	
+	type ToggleMyPasswordlessResponse {
+		ok: Boolean!
+		error: ToggleMyPasswordlessError
+	}
+	
+	type ToggleMyPasswordlessError {
+		code: ToggleMyPasswordlessErrorCode!
+		developerMessage: String!
+	}
+	
+	enum ToggleMyPasswordlessErrorCode {
+		CANNOT_TOGGLE
+        NOT_A_PERSON
+	}
+	
 
 	# === invite ===
 
@@ -671,6 +818,7 @@ const schema: DocumentNode = gql`
 		email: String
 		name: String
 		otpEnabled: Boolean!
+		passwordlessEnabled: Boolean
 		identity: Identity!
 	}
 
@@ -831,15 +979,15 @@ const schema: DocumentNode = gql`
 
 	# === mails ===
 	
-    type MailTemplateData {
-        projectSlug: String
-        type: MailType!
-        variant: String
-        subject: String!
-        content: String!
-        useLayout: Boolean!
-        replyTo: String
-    }
+	type MailTemplateData {
+		projectSlug: String
+		type: MailType!
+		variant: String
+		subject: String!
+		content: String!
+		useLayout: Boolean!
+		replyTo: String
+	}
 	
 	input MailTemplate {
 		projectSlug: String
@@ -856,6 +1004,7 @@ const schema: DocumentNode = gql`
 		EXISTING_USER_INVITED
 		NEW_USER_INVITED
 		RESET_PASSWORD_REQUEST
+		PASSWORDLESS_SIGN_IN
 	}
 
 	input MailTemplateIdentifier {
@@ -879,7 +1028,7 @@ const schema: DocumentNode = gql`
 	enum AddMailTemplateErrorCode {
 		MISSING_VARIABLE
 		PROJECT_NOT_FOUND
-        INVALID_REPLY_EMAIL_FORMAT
+		INVALID_REPLY_EMAIL_FORMAT
 	}
 
 	type RemoveMailTemplateResponse {
@@ -908,6 +1057,7 @@ const schema: DocumentNode = gql`
 	enum CheckResetPasswordTokenCode {
 		REQUEST_NOT_FOUND
 		TOKEN_NOT_FOUND
+		TOKEN_INVALID
 		TOKEN_USED
 		TOKEN_EXPIRED
 	}
@@ -941,6 +1091,7 @@ const schema: DocumentNode = gql`
 
 	enum ResetPasswordErrorCode {
 		TOKEN_NOT_FOUND
+		TOKEN_INVALID
 		TOKEN_USED
 		TOKEN_EXPIRED
 

package/tests/cases/integration/mocked/inviteMutations.test.ts

@@ -11,7 +11,7 @@ import { createMembershipSql } from './sql/createMembershipSql'
 import { createPersonSql } from './sql/createPersonSql'
 import { disableOneOffKeySql } from './sql/disableOneOffKeySql'
 import { test } from 'vitest'
-import { createPasswordResetSql } from './sql/createPasswordResetSql'
+import { createPersonTokenSql } from './sql/createPersonTokenSql'
 import { getMailTemplateSql } from './sql/getMailTemplateSql'
 
 test('invite a new person', async () => {
@@ -125,7 +125,7 @@ test('invite a new person with password reset', async () => {
 				getPersonByEmailSql({ email, response: null }),
 				createIdentitySql({ roles: ['person'], identityId }),
 				createPersonSql({ identityId, personId, email }),
-				createPasswordResetSql({ personId, tokenHash: '9692e67b8378a6f6753f97782d458aa757e947eab2fbdf6b5c187b74561eb78f', resetId: passwordTokenId }),
+				createPersonTokenSql({ personId, tokenHash: '9692e67b8378a6f6753f97782d458aa757e947eab2fbdf6b5c187b74561eb78f', resetId: passwordTokenId, type: 'password_reset' }),
 				createMembershipSql({ membershipId, projectId, identityId, role: 'editor' }),
 				patchVariablesSql({
 					id: variableId,

package/tests/cases/integration/mocked/sql/{createPasswordResetSql.ts → createPersonTokenSql.ts}

@@ -1,13 +1,14 @@
 import { SQL } from '../../../../src/tags'
 import { ExpectedQuery } from '@contember/database-tester'
 
-export const createPasswordResetSql = (args: {
+export const createPersonTokenSql = (args: {
 	resetId: string
 	tokenHash: string
 	personId: string
+	type: string
 }): ExpectedQuery => ({
-	sql: SQL`INSERT INTO "tenant"."person_password_reset" ("id", "token_hash", "person_id", "expires_at", "created_at", "used_at")
-	         VALUES (?, ?, ?, ?, ?, ?)`,
+	sql: SQL`INSERT INTO "tenant"."person_token" ("id", "token_hash", "person_id", "expires_at", "created_at", "used_at", "type")
+	         VALUES (?, ?, ?, ?, ?, ?, ?)`,
 	parameters: [
 		args.resetId,
 		args.tokenHash,
@@ -15,6 +16,7 @@ export const createPasswordResetSql = (args: {
 		(val: any) => val instanceof Date,
 		(val: any) => val instanceof Date,
 		null,
+		args.type,
 	],
 	response: { rowCount: 1 },
 })

package/tests/cases/integration/mocked/sql/getPersonByEmailSql.ts

@@ -5,7 +5,7 @@ export const getPersonByEmailSql = (args: {
 	email: string
 	response: null | { personId: string; password: string; identityId: string; roles: string[]; otpUri?: string }
 }): ExpectedQuery => ({
-	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "identity"."roles"
+	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "person"."passwordless_enabled", "identity"."roles"
 	         FROM "tenant"."person"
 		              INNER JOIN "tenant"."identity" AS "identity" ON "identity"."id" = "person"."identity_id"
 	         WHERE "person"."email" = ?`,
@@ -22,6 +22,7 @@ export const getPersonByEmailSql = (args: {
 					otp_uri: args.response.otpUri,
 					otp_activated_at: args.response.otpUri ? new Date() : null,
 					disabled_at: null,
+					passwordless_enabled: null,
 				},
 			  ]
 			: [],

package/tests/cases/integration/mocked/sql/getPersonByIdSql.ts

@@ -5,7 +5,7 @@ export const getPersonByIdSql = (args: {
 	personId: string
 	response: { personId: string; password: string; identityId: string; roles: string[]; email: string; name?: string }
 }): ExpectedQuery => ({
-	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "identity"."roles"
+	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "person"."passwordless_enabled", "identity"."roles"
 	         FROM "tenant"."person"
 		              INNER JOIN "tenant"."identity" AS "identity" ON "identity"."id" = "person"."identity_id"
 	         WHERE "person"."id" = ?`,

package/tests/cases/integration/mocked/sql/getPersonByIdentity.ts

@@ -5,7 +5,7 @@ export const getPersonByIdentity = (args: {
 	identityId: string
 	response: null | { personId: string; password: string; roles: string[]; email: string; name?: string; otpUri?: string }
 }): ExpectedQuery => ({
-	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "identity"."roles"
+	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "person"."passwordless_enabled", "identity"."roles"
 	         FROM "tenant"."person"
 		              INNER JOIN "tenant"."identity" AS "identity" ON "identity"."id" = "person"."identity_id"
 	         WHERE "person"."identity_id" = ?`,

package/tests/cases/integration/mocked/sql/getPersonByIdpSql.ts

@@ -6,7 +6,7 @@ export const getPersonByIdpSql = (args: {
 	externalIdentifier: string
 	response: null | { personId: string; password?: string; identityId: string; email: string; roles: string[]; otpUri?: string }
 }): ExpectedQuery => ({
-	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "identity"."roles"
+	sql: SQL`SELECT "person"."id", "person"."password_hash", "person"."otp_uri", "person"."otp_activated_at", "person"."identity_id", "person"."email", "person"."name", "person"."disabled_at", "person"."passwordless_enabled", "identity"."roles"
 	         FROM "tenant"."person"
 		        INNER JOIN "tenant"."identity" AS "identity" ON "identity"."id" = "person"."identity_id"
 				INNER JOIN  "tenant"."person_identity_provider" as "idp" on  "idp"."person_id" = "person"."id"

package/dist/development/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.cjs

@@ -1,30 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("@contember/database");
-require("../../type/ApiKey.cjs");
-const SavePasswordResetRequestCommand = require("./SavePasswordResetRequestCommand.cjs");
-const tokenUtils = require("../../utils/tokenUtils.cjs");
-class CreatePasswordResetRequestCommand {
-  constructor(personId, expirationMinutes) {
-    this.personId = personId;
-    this.expirationMinutes = expirationMinutes;
-  }
-  async execute({ db, providers, bus }) {
-    const token = await tokenUtils.generateToken(providers);
-    const tokenHash = tokenUtils.computeTokenHash(token);
-    await bus.execute(new SavePasswordResetRequestCommand.SavePasswordResetRequestCommand(
-      this.personId,
-      tokenHash,
-      this.expirationMinutes
-    ));
-    return new CreatePasswordResetRequestResult(token);
-  }
-}
-class CreatePasswordResetRequestResult {
-  constructor(token) {
-    this.token = token;
-  }
-}
-exports.CreatePasswordResetRequestCommand = CreatePasswordResetRequestCommand;
-exports.CreatePasswordResetRequestResult = CreatePasswordResetRequestResult;
-//# sourceMappingURL=CreatePasswordResetRequestCommand.cjs.map

package/dist/development/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"CreatePasswordResetRequestCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { computeTokenHash, generateToken } from '../../utils'\nimport { SavePasswordResetRequestCommand } from './SavePasswordResetRequestCommand'\n\nexport class CreatePasswordResetRequestCommand implements Command<CreatePasswordResetRequestResult> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly expirationMinutes?: number,\n\t) {}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<CreatePasswordResetRequestResult> {\n\t\tconst token = await generateToken(providers)\n\t\tconst tokenHash = computeTokenHash(token)\n\t\tawait bus.execute(new SavePasswordResetRequestCommand(\n\t\t\tthis.personId,\n\t\t\ttokenHash,\n\t\t\tthis.expirationMinutes,\n\t\t))\n\n\t\treturn new CreatePasswordResetRequestResult(token)\n\t}\n}\nexport class CreatePasswordResetRequestResult {\n\tconstructor(public readonly token: string) {}\n}\n"],"names":["generateToken","computeTokenHash","SavePasswordResetRequestCommand"],"mappings":";;;;;;AAIO,MAAM,kCAAuF;AAAA,EACnG,YACkB,UACA,mBAChB;AAFgB,SAAA,WAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,WAAW,OAAgE;AACxF,UAAA,QAAQ,MAAMA,yBAAc,SAAS;AACrC,UAAA,YAAYC,4BAAiB,KAAK;AAClC,UAAA,IAAI,QAAQ,IAAIC,gCAAA;AAAA,MACrB,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,IAAA,CACL;AAEM,WAAA,IAAI,iCAAiC,KAAK;AAAA,EAClD;AACD;AACO,MAAM,iCAAiC;AAAA,EAC7C,YAA4B,OAAe;AAAf,SAAA,QAAA;AAAA,EAAgB;AAC7C;;;"}

package/dist/development/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.js

@@ -1,30 +0,0 @@
-import "@contember/database";
-import "../../type/ApiKey.js";
-import { SavePasswordResetRequestCommand } from "./SavePasswordResetRequestCommand.js";
-import { generateToken, computeTokenHash } from "../../utils/tokenUtils.js";
-class CreatePasswordResetRequestCommand {
-  constructor(personId, expirationMinutes) {
-    this.personId = personId;
-    this.expirationMinutes = expirationMinutes;
-  }
-  async execute({ db, providers, bus }) {
-    const token = await generateToken(providers);
-    const tokenHash = computeTokenHash(token);
-    await bus.execute(new SavePasswordResetRequestCommand(
-      this.personId,
-      tokenHash,
-      this.expirationMinutes
-    ));
-    return new CreatePasswordResetRequestResult(token);
-  }
-}
-class CreatePasswordResetRequestResult {
-  constructor(token) {
-    this.token = token;
-  }
-}
-export {
-  CreatePasswordResetRequestCommand,
-  CreatePasswordResetRequestResult
-};
-//# sourceMappingURL=CreatePasswordResetRequestCommand.js.map

package/dist/development/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CreatePasswordResetRequestCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { computeTokenHash, generateToken } from '../../utils'\nimport { SavePasswordResetRequestCommand } from './SavePasswordResetRequestCommand'\n\nexport class CreatePasswordResetRequestCommand implements Command<CreatePasswordResetRequestResult> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly expirationMinutes?: number,\n\t) {}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<CreatePasswordResetRequestResult> {\n\t\tconst token = await generateToken(providers)\n\t\tconst tokenHash = computeTokenHash(token)\n\t\tawait bus.execute(new SavePasswordResetRequestCommand(\n\t\t\tthis.personId,\n\t\t\ttokenHash,\n\t\t\tthis.expirationMinutes,\n\t\t))\n\n\t\treturn new CreatePasswordResetRequestResult(token)\n\t}\n}\nexport class CreatePasswordResetRequestResult {\n\tconstructor(public readonly token: string) {}\n}\n"],"names":[],"mappings":";;;;AAIO,MAAM,kCAAuF;AAAA,EACnG,YACkB,UACA,mBAChB;AAFgB,SAAA,WAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,WAAW,OAAgE;AACxF,UAAA,QAAQ,MAAM,cAAc,SAAS;AACrC,UAAA,YAAY,iBAAiB,KAAK;AAClC,UAAA,IAAI,QAAQ,IAAI;AAAA,MACrB,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,IAAA,CACL;AAEM,WAAA,IAAI,iCAAiC,KAAK;AAAA,EAClD;AACD;AACO,MAAM,iCAAiC;AAAA,EAC7C,YAA4B,OAAe;AAAf,SAAA,QAAA;AAAA,EAAgB;AAC7C;"}

package/dist/development/src/model/commands/passwordReset/ResetPasswordCommand.cjs

@@ -1,38 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const Database = require("@contember/database");
-require("../../type/ApiKey.cjs");
-const ChangePasswordCommand = require("../person/ChangePasswordCommand.cjs");
-const exceptions = require("../../../exceptions.cjs");
-const Response = require("../../utils/Response.cjs");
-const tokenUtils = require("../../utils/tokenUtils.cjs");
-class ResetPasswordCommand {
-  constructor(token, password) {
-    this.token = token;
-    this.password = password;
-  }
-  async execute({ db, providers, bus }) {
-    const tokenHash = tokenUtils.computeTokenHash(this.token);
-    const result = (await Database.SelectBuilder.create().from("person_password_reset").select("id").select("person_id").select("used_at").select("expires_at").where({ token_hash: tokenHash }).getResult(db))[0] || null;
-    if (!result) {
-      return new Response.ResponseError("TOKEN_NOT_FOUND", "Token was not found");
-    }
-    if (result.used_at) {
-      return new Response.ResponseError("TOKEN_USED", `Token was used at ${result.used_at.toISOString()}`);
-    }
-    const now = providers.now();
-    if (result.expires_at < now) {
-      return new Response.ResponseError("TOKEN_EXPIRED", `Token expired at ${result.expires_at.toISOString()}`);
-    }
-    const count = await Database.UpdateBuilder.create().table("person_password_reset").where({ id: result.id }).where((expr) => expr.isNull("used_at")).values({
-      used_at: now
-    }).execute(db);
-    if (count === 0) {
-      throw new exceptions.ImplementationException();
-    }
-    await bus.execute(new ChangePasswordCommand.ChangePasswordCommand(result.person_id, this.password));
-    return new Response.ResponseOk(null);
-  }
-}
-exports.ResetPasswordCommand = ResetPasswordCommand;
-//# sourceMappingURL=ResetPasswordCommand.cjs.map

package/dist/development/src/model/commands/passwordReset/ResetPasswordCommand.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"ResetPasswordCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/passwordReset/ResetPasswordCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { SelectBuilder, UpdateBuilder } from '@contember/database'\nimport { computeTokenHash } from '../../utils'\nimport { ImplementationException } from '../../../exceptions'\nimport { ChangePasswordCommand } from '../person/ChangePasswordCommand'\nimport { Response, ResponseError, ResponseOk } from '../../utils/Response'\n\nexport class ResetPasswordCommand implements Command<ResetPasswordCommandResponse> {\n\tconstructor(private readonly token: string, private readonly password: string) {}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<ResetPasswordCommandResponse> {\n\t\tconst tokenHash = computeTokenHash(this.token)\n\n\t\tconst result =\n\t\t\t(\n\t\t\t\tawait SelectBuilder.create<{ used_at: null | Date; expires_at: Date; id: string; person_id: string }>()\n\t\t\t\t\t.from('person_password_reset')\n\t\t\t\t\t.select('id')\n\t\t\t\t\t.select('person_id')\n\t\t\t\t\t.select('used_at')\n\t\t\t\t\t.select('expires_at')\n\t\t\t\t\t.where({ token_hash: tokenHash })\n\t\t\t\t\t.getResult(db)\n\t\t\t)[0] || null\n\t\tif (!result) {\n\t\t\treturn new ResponseError('TOKEN_NOT_FOUND', 'Token was not found')\n\t\t}\n\t\tif (result.used_at) {\n\t\t\treturn new ResponseError('TOKEN_USED', `Token was used at ${result.used_at.toISOString()}`)\n\t\t}\n\t\tconst now = providers.now()\n\t\tif (result.expires_at < now) {\n\t\t\treturn new ResponseError('TOKEN_EXPIRED', `Token expired at ${result.expires_at.toISOString()}`)\n\t\t}\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_password_reset')\n\t\t\t.where({ id: result.id })\n\t\t\t.where(expr => expr.isNull('used_at'))\n\t\t\t.values({\n\t\t\t\tused_at: now,\n\t\t\t})\n\t\t\t.execute(db)\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\n\t\tawait bus.execute(new ChangePasswordCommand(result.person_id, this.password))\n\n\t\treturn new ResponseOk(null)\n\t}\n}\nexport type ResetPasswordCommandErrorCode =\n\t|  'TOKEN_NOT_FOUND'\n\t|  'TOKEN_USED'\n\t|  'TOKEN_EXPIRED'\n\nexport type ResetPasswordCommandResponse = Response<null, ResetPasswordCommandErrorCode>\n"],"names":["computeTokenHash","SelectBuilder","ResponseError","UpdateBuilder","ImplementationException","ChangePasswordCommand","ResponseOk"],"mappings":";;;;;;;;AAOO,MAAM,qBAAsE;AAAA,EAClF,YAA6B,OAAgC,UAAkB;AAAlD,SAAA,QAAA;AAAgC,SAAA,WAAA;AAAA,EAAmB;AAAA,EAEhF,MAAM,QAAQ,EAAE,IAAI,WAAW,OAA4D;AACpF,UAAA,YAAYA,WAAAA,iBAAiB,KAAK,KAAK;AAE7C,UAAM,UAEJ,MAAMC,uBAAc,OAClB,EAAA,KAAK,uBAAuB,EAC5B,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,SAAS,EAChB,OAAO,YAAY,EACnB,MAAM,EAAE,YAAY,UAAW,CAAA,EAC/B,UAAU,EAAE,GACb,CAAC,KAAK;AACT,QAAI,CAAC,QAAQ;AACL,aAAA,IAAIC,SAAc,cAAA,mBAAmB,qBAAqB;AAAA,IAClE;AACA,QAAI,OAAO,SAAS;AACZ,aAAA,IAAIA,SAAAA,cAAc,cAAc,qBAAqB,OAAO,QAAQ,aAAa,EAAE;AAAA,IAC3F;AACM,UAAA,MAAM,UAAU;AAClB,QAAA,OAAO,aAAa,KAAK;AACrB,aAAA,IAAIA,SAAAA,cAAc,iBAAiB,oBAAoB,OAAO,WAAW,aAAa,EAAE;AAAA,IAChG;AACM,UAAA,QAAQ,MAAMC,SAAAA,cAAc,OAAA,EAChC,MAAM,uBAAuB,EAC7B,MAAM,EAAE,IAAI,OAAO,GAAI,CAAA,EACvB,MAAM,CAAA,SAAQ,KAAK,OAAO,SAAS,CAAC,EACpC,OAAO;AAAA,MACP,SAAS;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AACZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAIC,WAAwB,wBAAA;AAAA,IACnC;AAEM,UAAA,IAAI,QAAQ,IAAIC,sBAAA,sBAAsB,OAAO,WAAW,KAAK,QAAQ,CAAC;AAErE,WAAA,IAAIC,SAAAA,WAAW,IAAI;AAAA,EAC3B;AACD;;"}

package/dist/development/src/model/commands/passwordReset/ResetPasswordCommand.js

@@ -1,38 +0,0 @@
-import { SelectBuilder, UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
-import "../../type/ApiKey.js";
-import { ChangePasswordCommand } from "../person/ChangePasswordCommand.js";
-import { ImplementationException } from "../../../exceptions.js";
-import { ResponseError, ResponseOk } from "../../utils/Response.js";
-import { computeTokenHash } from "../../utils/tokenUtils.js";
-class ResetPasswordCommand {
-  constructor(token, password) {
-    this.token = token;
-    this.password = password;
-  }
-  async execute({ db, providers, bus }) {
-    const tokenHash = computeTokenHash(this.token);
-    const result = (await SelectBuilder.create().from("person_password_reset").select("id").select("person_id").select("used_at").select("expires_at").where({ token_hash: tokenHash }).getResult(db))[0] || null;
-    if (!result) {
-      return new ResponseError("TOKEN_NOT_FOUND", "Token was not found");
-    }
-    if (result.used_at) {
-      return new ResponseError("TOKEN_USED", `Token was used at ${result.used_at.toISOString()}`);
-    }
-    const now = providers.now();
-    if (result.expires_at < now) {
-      return new ResponseError("TOKEN_EXPIRED", `Token expired at ${result.expires_at.toISOString()}`);
-    }
-    const count = await UpdateBuilder$1.create().table("person_password_reset").where({ id: result.id }).where((expr) => expr.isNull("used_at")).values({
-      used_at: now
-    }).execute(db);
-    if (count === 0) {
-      throw new ImplementationException();
-    }
-    await bus.execute(new ChangePasswordCommand(result.person_id, this.password));
-    return new ResponseOk(null);
-  }
-}
-export {
-  ResetPasswordCommand
-};
-//# sourceMappingURL=ResetPasswordCommand.js.map

package/dist/development/src/model/commands/passwordReset/ResetPasswordCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ResetPasswordCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/passwordReset/ResetPasswordCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { SelectBuilder, UpdateBuilder } from '@contember/database'\nimport { computeTokenHash } from '../../utils'\nimport { ImplementationException } from '../../../exceptions'\nimport { ChangePasswordCommand } from '../person/ChangePasswordCommand'\nimport { Response, ResponseError, ResponseOk } from '../../utils/Response'\n\nexport class ResetPasswordCommand implements Command<ResetPasswordCommandResponse> {\n\tconstructor(private readonly token: string, private readonly password: string) {}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<ResetPasswordCommandResponse> {\n\t\tconst tokenHash = computeTokenHash(this.token)\n\n\t\tconst result =\n\t\t\t(\n\t\t\t\tawait SelectBuilder.create<{ used_at: null | Date; expires_at: Date; id: string; person_id: string }>()\n\t\t\t\t\t.from('person_password_reset')\n\t\t\t\t\t.select('id')\n\t\t\t\t\t.select('person_id')\n\t\t\t\t\t.select('used_at')\n\t\t\t\t\t.select('expires_at')\n\t\t\t\t\t.where({ token_hash: tokenHash })\n\t\t\t\t\t.getResult(db)\n\t\t\t)[0] || null\n\t\tif (!result) {\n\t\t\treturn new ResponseError('TOKEN_NOT_FOUND', 'Token was not found')\n\t\t}\n\t\tif (result.used_at) {\n\t\t\treturn new ResponseError('TOKEN_USED', `Token was used at ${result.used_at.toISOString()}`)\n\t\t}\n\t\tconst now = providers.now()\n\t\tif (result.expires_at < now) {\n\t\t\treturn new ResponseError('TOKEN_EXPIRED', `Token expired at ${result.expires_at.toISOString()}`)\n\t\t}\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_password_reset')\n\t\t\t.where({ id: result.id })\n\t\t\t.where(expr => expr.isNull('used_at'))\n\t\t\t.values({\n\t\t\t\tused_at: now,\n\t\t\t})\n\t\t\t.execute(db)\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\n\t\tawait bus.execute(new ChangePasswordCommand(result.person_id, this.password))\n\n\t\treturn new ResponseOk(null)\n\t}\n}\nexport type ResetPasswordCommandErrorCode =\n\t|  'TOKEN_NOT_FOUND'\n\t|  'TOKEN_USED'\n\t|  'TOKEN_EXPIRED'\n\nexport type ResetPasswordCommandResponse = Response<null, ResetPasswordCommandErrorCode>\n"],"names":["UpdateBuilder"],"mappings":";;;;;;AAOO,MAAM,qBAAsE;AAAA,EAClF,YAA6B,OAAgC,UAAkB;AAAlD,SAAA,QAAA;AAAgC,SAAA,WAAA;AAAA,EAAmB;AAAA,EAEhF,MAAM,QAAQ,EAAE,IAAI,WAAW,OAA4D;AACpF,UAAA,YAAY,iBAAiB,KAAK,KAAK;AAE7C,UAAM,UAEJ,MAAM,cAAc,OAClB,EAAA,KAAK,uBAAuB,EAC5B,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,SAAS,EAChB,OAAO,YAAY,EACnB,MAAM,EAAE,YAAY,UAAW,CAAA,EAC/B,UAAU,EAAE,GACb,CAAC,KAAK;AACT,QAAI,CAAC,QAAQ;AACL,aAAA,IAAI,cAAc,mBAAmB,qBAAqB;AAAA,IAClE;AACA,QAAI,OAAO,SAAS;AACZ,aAAA,IAAI,cAAc,cAAc,qBAAqB,OAAO,QAAQ,aAAa,EAAE;AAAA,IAC3F;AACM,UAAA,MAAM,UAAU;AAClB,QAAA,OAAO,aAAa,KAAK;AACrB,aAAA,IAAI,cAAc,iBAAiB,oBAAoB,OAAO,WAAW,aAAa,EAAE;AAAA,IAChG;AACM,UAAA,QAAQ,MAAMA,gBAAc,OAAA,EAChC,MAAM,uBAAuB,EAC7B,MAAM,EAAE,IAAI,OAAO,GAAI,CAAA,EACvB,MAAM,CAAA,SAAQ,KAAK,OAAO,SAAS,CAAC,EACpC,OAAO;AAAA,MACP,SAAS;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AACZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAI,wBAAwB;AAAA,IACnC;AAEM,UAAA,IAAI,QAAQ,IAAI,sBAAsB,OAAO,WAAW,KAAK,QAAQ,CAAC;AAErE,WAAA,IAAI,WAAW,IAAI;AAAA,EAC3B;AACD;"}

package/dist/development/src/model/commands/passwordReset/SavePasswordResetRequestCommand.cjs

@@ -1,24 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const Database = require("@contember/database");
-const time = require("../../utils/time.cjs");
-const PASSWORD_RESET_EXPIRATION = 60;
-class SavePasswordResetRequestCommand {
-  constructor(personId, tokenHash, expirationMinutes = PASSWORD_RESET_EXPIRATION) {
-    this.personId = personId;
-    this.tokenHash = tokenHash;
-    this.expirationMinutes = expirationMinutes;
-  }
-  async execute({ db, providers }) {
-    await Database.InsertBuilder.create().into("person_password_reset").values({
-      id: providers.uuid(),
-      token_hash: this.tokenHash,
-      person_id: this.personId,
-      expires_at: time.plusMinutes(providers.now(), this.expirationMinutes),
-      created_at: providers.now(),
-      used_at: null
-    }).execute(db);
-  }
-}
-exports.SavePasswordResetRequestCommand = SavePasswordResetRequestCommand;
-//# sourceMappingURL=SavePasswordResetRequestCommand.cjs.map

package/dist/development/src/model/commands/passwordReset/SavePasswordResetRequestCommand.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"SavePasswordResetRequestCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/passwordReset/SavePasswordResetRequestCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { InsertBuilder } from '@contember/database'\nimport { plusMinutes } from '../../utils/time'\nimport { TokenHash } from '../../utils'\n\nconst PASSWORD_RESET_EXPIRATION = 60\n\nexport class SavePasswordResetRequestCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly tokenHash: TokenHash,\n\t\tprivate readonly expirationMinutes: number = PASSWORD_RESET_EXPIRATION,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person_password_reset')\n\t\t\t.values({\n\t\t\t\tid: providers.uuid(),\n\t\t\t\ttoken_hash: this.tokenHash,\n\t\t\t\tperson_id: this.personId,\n\t\t\t\texpires_at: plusMinutes(providers.now(), this.expirationMinutes),\n\t\t\t\tcreated_at: providers.now(),\n\t\t\t\tused_at: null,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["InsertBuilder","plusMinutes"],"mappings":";;;;AAKA,MAAM,4BAA4B;AAE3B,MAAM,gCAAyD;AAAA,EACrE,YACkB,UACA,WACA,oBAA4B,2BAC5C;AAHgB,SAAA,WAAA;AACA,SAAA,YAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAMA,SAAAA,cAAc,OAAO,EACzB,KAAK,uBAAuB,EAC5B,OAAO;AAAA,MACP,IAAI,UAAU,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,MACjB,WAAW,KAAK;AAAA,MAChB,YAAYC,KAAY,YAAA,UAAU,IAAI,GAAG,KAAK,iBAAiB;AAAA,MAC/D,YAAY,UAAU,IAAI;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/development/src/model/commands/passwordReset/SavePasswordResetRequestCommand.js

@@ -1,24 +0,0 @@
-import { InsertBuilder as InsertBuilder$1 } from "@contember/database";
-import { plusMinutes } from "../../utils/time.js";
-const PASSWORD_RESET_EXPIRATION = 60;
-class SavePasswordResetRequestCommand {
-  constructor(personId, tokenHash, expirationMinutes = PASSWORD_RESET_EXPIRATION) {
-    this.personId = personId;
-    this.tokenHash = tokenHash;
-    this.expirationMinutes = expirationMinutes;
-  }
-  async execute({ db, providers }) {
-    await InsertBuilder$1.create().into("person_password_reset").values({
-      id: providers.uuid(),
-      token_hash: this.tokenHash,
-      person_id: this.personId,
-      expires_at: plusMinutes(providers.now(), this.expirationMinutes),
-      created_at: providers.now(),
-      used_at: null
-    }).execute(db);
-  }
-}
-export {
-  SavePasswordResetRequestCommand
-};
-//# sourceMappingURL=SavePasswordResetRequestCommand.js.map

package/dist/development/src/model/commands/passwordReset/SavePasswordResetRequestCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"SavePasswordResetRequestCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/passwordReset/SavePasswordResetRequestCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { InsertBuilder } from '@contember/database'\nimport { plusMinutes } from '../../utils/time'\nimport { TokenHash } from '../../utils'\n\nconst PASSWORD_RESET_EXPIRATION = 60\n\nexport class SavePasswordResetRequestCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly tokenHash: TokenHash,\n\t\tprivate readonly expirationMinutes: number = PASSWORD_RESET_EXPIRATION,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person_password_reset')\n\t\t\t.values({\n\t\t\t\tid: providers.uuid(),\n\t\t\t\ttoken_hash: this.tokenHash,\n\t\t\t\tperson_id: this.personId,\n\t\t\t\texpires_at: plusMinutes(providers.now(), this.expirationMinutes),\n\t\t\t\tcreated_at: providers.now(),\n\t\t\t\tused_at: null,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";;AAKA,MAAM,4BAA4B;AAE3B,MAAM,gCAAyD;AAAA,EACrE,YACkB,UACA,WACA,oBAA4B,2BAC5C;AAHgB,SAAA,WAAA;AACA,SAAA,YAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAMA,gBAAc,OAAO,EACzB,KAAK,uBAAuB,EAC5B,OAAO;AAAA,MACP,IAAI,UAAU,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,MACjB,WAAW,KAAK;AAAA,MAChB,YAAY,YAAY,UAAU,IAAI,GAAG,KAAK,iBAAiB;AAAA,MAC/D,YAAY,UAAU,IAAI;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/production/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.cjs

@@ -1,30 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-require("@contember/database");
-require("../../type/ApiKey.cjs");
-const SavePasswordResetRequestCommand = require("./SavePasswordResetRequestCommand.cjs");
-const tokenUtils = require("../../utils/tokenUtils.cjs");
-class CreatePasswordResetRequestCommand {
-  constructor(personId, expirationMinutes) {
-    this.personId = personId;
-    this.expirationMinutes = expirationMinutes;
-  }
-  async execute({ db, providers, bus }) {
-    const token = await tokenUtils.generateToken(providers);
-    const tokenHash = tokenUtils.computeTokenHash(token);
-    await bus.execute(new SavePasswordResetRequestCommand.SavePasswordResetRequestCommand(
-      this.personId,
-      tokenHash,
-      this.expirationMinutes
-    ));
-    return new CreatePasswordResetRequestResult(token);
-  }
-}
-class CreatePasswordResetRequestResult {
-  constructor(token) {
-    this.token = token;
-  }
-}
-exports.CreatePasswordResetRequestCommand = CreatePasswordResetRequestCommand;
-exports.CreatePasswordResetRequestResult = CreatePasswordResetRequestResult;
-//# sourceMappingURL=CreatePasswordResetRequestCommand.cjs.map

package/dist/production/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"CreatePasswordResetRequestCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { computeTokenHash, generateToken } from '../../utils'\nimport { SavePasswordResetRequestCommand } from './SavePasswordResetRequestCommand'\n\nexport class CreatePasswordResetRequestCommand implements Command<CreatePasswordResetRequestResult> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly expirationMinutes?: number,\n\t) {}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<CreatePasswordResetRequestResult> {\n\t\tconst token = await generateToken(providers)\n\t\tconst tokenHash = computeTokenHash(token)\n\t\tawait bus.execute(new SavePasswordResetRequestCommand(\n\t\t\tthis.personId,\n\t\t\ttokenHash,\n\t\t\tthis.expirationMinutes,\n\t\t))\n\n\t\treturn new CreatePasswordResetRequestResult(token)\n\t}\n}\nexport class CreatePasswordResetRequestResult {\n\tconstructor(public readonly token: string) {}\n}\n"],"names":["generateToken","computeTokenHash","SavePasswordResetRequestCommand"],"mappings":";;;;;;AAIO,MAAM,kCAAuF;AAAA,EACnG,YACkB,UACA,mBAChB;AAFgB,SAAA,WAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,WAAW,OAAgE;AACxF,UAAA,QAAQ,MAAMA,yBAAc,SAAS;AACrC,UAAA,YAAYC,4BAAiB,KAAK;AAClC,UAAA,IAAI,QAAQ,IAAIC,gCAAA;AAAA,MACrB,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,IAAA,CACL;AAEM,WAAA,IAAI,iCAAiC,KAAK;AAAA,EAClD;AACD;AACO,MAAM,iCAAiC;AAAA,EAC7C,YAA4B,OAAe;AAAf,SAAA,QAAA;AAAA,EAAgB;AAC7C;;;"}

package/dist/production/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.js

@@ -1,30 +0,0 @@
-import "@contember/database";
-import "../../type/ApiKey.js";
-import { SavePasswordResetRequestCommand } from "./SavePasswordResetRequestCommand.js";
-import { generateToken, computeTokenHash } from "../../utils/tokenUtils.js";
-class CreatePasswordResetRequestCommand {
-  constructor(personId, expirationMinutes) {
-    this.personId = personId;
-    this.expirationMinutes = expirationMinutes;
-  }
-  async execute({ db, providers, bus }) {
-    const token = await generateToken(providers);
-    const tokenHash = computeTokenHash(token);
-    await bus.execute(new SavePasswordResetRequestCommand(
-      this.personId,
-      tokenHash,
-      this.expirationMinutes
-    ));
-    return new CreatePasswordResetRequestResult(token);
-  }
-}
-class CreatePasswordResetRequestResult {
-  constructor(token) {
-    this.token = token;
-  }
-}
-export {
-  CreatePasswordResetRequestCommand,
-  CreatePasswordResetRequestResult
-};
-//# sourceMappingURL=CreatePasswordResetRequestCommand.js.map

package/dist/production/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CreatePasswordResetRequestCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { computeTokenHash, generateToken } from '../../utils'\nimport { SavePasswordResetRequestCommand } from './SavePasswordResetRequestCommand'\n\nexport class CreatePasswordResetRequestCommand implements Command<CreatePasswordResetRequestResult> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly expirationMinutes?: number,\n\t) {}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<CreatePasswordResetRequestResult> {\n\t\tconst token = await generateToken(providers)\n\t\tconst tokenHash = computeTokenHash(token)\n\t\tawait bus.execute(new SavePasswordResetRequestCommand(\n\t\t\tthis.personId,\n\t\t\ttokenHash,\n\t\t\tthis.expirationMinutes,\n\t\t))\n\n\t\treturn new CreatePasswordResetRequestResult(token)\n\t}\n}\nexport class CreatePasswordResetRequestResult {\n\tconstructor(public readonly token: string) {}\n}\n"],"names":[],"mappings":";;;;AAIO,MAAM,kCAAuF;AAAA,EACnG,YACkB,UACA,mBAChB;AAFgB,SAAA,WAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,WAAW,OAAgE;AACxF,UAAA,QAAQ,MAAM,cAAc,SAAS;AACrC,UAAA,YAAY,iBAAiB,KAAK;AAClC,UAAA,IAAI,QAAQ,IAAI;AAAA,MACrB,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,IAAA,CACL;AAEM,WAAA,IAAI,iCAAiC,KAAK;AAAA,EAClD;AACD;AACO,MAAM,iCAAiC;AAAA,EAC7C,YAA4B,OAAe;AAAf,SAAA,QAAA;AAAA,EAAgB;AAC7C;"}