@contember/engine-tenant-api 2.0.0-alpha.14 → 2.0.0-alpha.15

package/dist/development/src/model/authorization/PermissionActions.js.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionActions.js","sources":["../../../../../../packages/engine-tenant-api/src/model/authorization/PermissionActions.ts"],"sourcesContent":["import { Authorizator } from '@contember/authorization'\nimport { Acl } from '@contember/schema'\n\nnamespace PermissionActions {\n\texport enum Resources {\n\t\tsystem = 'system',\n\t\tentrypoint = 'entrypoint',\n\t\tperson = 'person',\n\t\tidentity = 'identity',\n\t\tproject = 'project',\n\t\tapiKey = 'apiKey',\n\t\tmailTemplate = 'mailTemplate',\n\t\tidp = 'idp',\n\t}\n\n\texport const IDENTITY_VIEW_PERMISSIONS = Authorizator.createAction(Resources.identity, 'viewPermissions')\n\texport const IDENTITY_ADD_GLOBAL_ROLES = (roles?: readonly string[]) => Authorizator.createAction(Resources.identity, 'addGlobalRoles', { roles })\n\texport const IDENTITY_REMOVE_GLOBAL_ROLES = (roles?: readonly string[]) => Authorizator.createAction(Resources.identity, 'removeGlobalRoles', { roles })\n\n\texport const PERSON_DISABLE = (roles?: readonly string[]) => Authorizator.createAction(Resources.person, 'disable', { roles })\n\n\texport const PERSON_VIEW = Authorizator.createAction(Resources.person, 'view')\n\texport const PERSON_SIGN_IN = Authorizator.createAction(Resources.person, 'signIn')\n\texport const PERSON_SIGN_UP = (roles?: readonly string[]) => Authorizator.createAction(Resources.person, 'signUp', { roles })\n\texport const PERSON_SIGN_OUT = Authorizator.createAction(Resources.person, 'signOut')\n\texport const PERSON_SETUP_OTP = Authorizator.createAction(Resources.person, 'setupOtp')\n\texport const PERSON_CHANGE_PROFILE = (roles?: readonly string[]) => Authorizator.createAction(Resources.person, 'changeProfile', { roles })\n\texport const PERSON_CHANGE_MY_PROFILE = Authorizator.createAction(Resources.person, 'changeMyProfile')\n\texport const PERSON_CHANGE_PASSWORD = (roles?: readonly string[]) => Authorizator.createAction(Resources.person, 'changePassword', { roles })\n\texport const PERSON_CHANGE_MY_PASSWORD = Authorizator.createAction(Resources.person, 'changeMyPassword')\n\texport const PERSON_RESET_PASSWORD = Authorizator.createAction(Resources.person, 'resetPassword')\n\texport const PERSON_CREATE_IDP_URL = Authorizator.createAction(Resources.person, 'createIdPUrl')\n\texport const PERSON_SIGN_IN_IDP = Authorizator.createAction(Resources.person, 'signInIdp')\n\texport const PERSON_CREATE_SESSION_KEY = (roles?: readonly string[]) => Authorizator.createAction(Resources.person, 'createSessionToken', { roles })\n\n\texport const PERSON_INVITE = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.person, 'invite', { memberships })\n\texport const PERSON_INVITE_UNMANAGED = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.person, 'invite_unmanaged', { memberships })\n\n\texport const PROJECT_VIEW = Authorizator.createAction(Resources.project, 'view')\n\texport const PROJECT_SET_SECRET = Authorizator.createAction(Resources.project, 'setSecret')\n\texport const PROJECT_UPDATE = Authorizator.createAction(Resources.project, 'update')\n\n\texport const PROJECT_CREATE = Authorizator.createAction(Resources.project, 'create')\n\texport const ENTRYPOINT_DEPLOY = Authorizator.createAction(Resources.entrypoint, 'deployEntrypoint')\n\n\texport const PROJECT_VIEW_MEMBER = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.project, 'viewMembers', { memberships })\n\texport const PROJECT_ADD_MEMBER = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.project, 'addMember', { memberships })\n\texport const PROJECT_REMOVE_MEMBER = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.project, 'removeMember', { memberships })\n\texport const PROJECT_UPDATE_MEMBER = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.project, 'updateMember', { memberships })\n\n\n\texport const API_KEY_CREATE = Authorizator.createAction(Resources.apiKey, 'create')\n\texport const API_KEY_CREATE_GLOBAL = (roles?: readonly string[]) => Authorizator.createAction(Resources.apiKey, 'createGlobal', { roles })\n\texport const API_KEY_DISABLE = Authorizator.createAction(Resources.apiKey, 'disable')\n\n\texport const MAIL_TEMPLATE_ADD = Authorizator.createAction(Resources.mailTemplate, 'add')\n\texport const MAIL_TEMPLATE_REMOVE = Authorizator.createAction(Resources.mailTemplate, 'remove')\n\texport const MAIL_TEMPLATE_LIST = Authorizator.createAction(Resources.mailTemplate, 'list')\n\n\texport const IDP_ADD = Authorizator.createAction(Resources.idp, 'add')\n\texport const IDP_UPDATE = Authorizator.createAction(Resources.idp, 'update')\n\texport const IDP_DISABLE = Authorizator.createAction(Resources.idp, 'disable')\n\texport const IDP_ENABLE = Authorizator.createAction(Resources.idp, 'enable')\n\texport const IDP_LIST = Authorizator.createAction(Resources.idp, 'list')\n}\n\nexport { PermissionActions }\n"],"names":["PermissionActions","Resources"],"mappings":";AAGU,IAAA;AAAA,CAAV,CAAUA,uBAAV;AACQ,GAAA,CAAKC,eAAL;AACNA,eAAA,QAAS,IAAA;AACTA,eAAA,YAAa,IAAA;AACbA,eAAA,QAAS,IAAA;AACTA,eAAA,UAAW,IAAA;AACXA,eAAA,SAAU,IAAA;AACVA,eAAA,QAAS,IAAA;AACTA,eAAA,cAAe,IAAA;AACfA,eAAA,KAAM,IAAA;AAAA,EAAA,GARKD,mBAAA,cAAAA,mBAAA,YAAA,CAAA,EAAA;AAWCA,qBAAA,4BAA4B,aAAa,aAAa,YAAoB,iBAAiB;AAC3FA,qBAAA,4BAA4B,CAAC,UAA8B,aAAa,aAAa,YAAoB,kBAAkB,EAAE,MAAA,CAAO;AACpIA,qBAAA,+BAA+B,CAAC,UAA8B,aAAa,aAAa,YAAoB,qBAAqB,EAAE,MAAA,CAAO;AAE1IA,qBAAA,iBAAiB,CAAC,UAA8B,aAAa,aAAa,UAAkB,WAAW,EAAE,MAAA,CAAO;AAEhHA,qBAAA,cAAc,aAAa,aAAa,UAAkB,MAAM;AAChEA,qBAAA,iBAAiB,aAAa,aAAa,UAAkB,QAAQ;AACrEA,qBAAA,iBAAiB,CAAC,UAA8B,aAAa,aAAa,UAAkB,UAAU,EAAE,MAAA,CAAO;AAC/GA,qBAAA,kBAAkB,aAAa,aAAa,UAAkB,SAAS;AACvEA,qBAAA,mBAAmB,aAAa,aAAa,UAAkB,UAAU;AACzEA,qBAAA,wBAAwB,CAAC,UAA8B,aAAa,aAAa,UAAkB,iBAAiB,EAAE,MAAA,CAAO;AAC7HA,qBAAA,2BAA2B,aAAa,aAAa,UAAkB,iBAAiB;AACxFA,qBAAA,yBAAyB,CAAC,UAA8B,aAAa,aAAa,UAAkB,kBAAkB,EAAE,MAAA,CAAO;AAC/HA,qBAAA,4BAA4B,aAAa,aAAa,UAAkB,kBAAkB;AAC1FA,qBAAA,wBAAwB,aAAa,aAAa,UAAkB,eAAe;AACnFA,qBAAA,wBAAwB,aAAa,aAAa,UAAkB,cAAc;AAClFA,qBAAA,qBAAqB,aAAa,aAAa,UAAkB,WAAW;AAC5EA,qBAAA,4BAA4B,CAAC,UAA8B,aAAa,aAAa,UAAkB,sBAAsB,EAAE,MAAA,CAAO;AAEtIA,qBAAA,gBAAgB,CAAC,gBAA2C,aAAa,aAAa,UAAkB,UAAU,EAAE,YAAA,CAAa;AACjIA,qBAAA,0BAA0B,CAAC,gBAA2C,aAAa,aAAa,UAAkB,oBAAoB,EAAE,YAAA,CAAa;AAErJA,qBAAA,eAAe,aAAa,aAAa,WAAmB,MAAM;AAClEA,qBAAA,qBAAqB,aAAa,aAAa,WAAmB,WAAW;AAC7EA,qBAAA,iBAAiB,aAAa,aAAa,WAAmB,QAAQ;AAEtEA,qBAAA,iBAAiB,aAAa,aAAa,WAAmB,QAAQ;AACtEA,qBAAA,oBAAoB,aAAa,aAAa,cAAsB,kBAAkB;AAEtFA,qBAAA,sBAAsB,CAAC,gBAA2C,aAAa,aAAa,WAAmB,eAAe,EAAE,YAAA,CAAa;AAC7IA,qBAAA,qBAAqB,CAAC,gBAA2C,aAAa,aAAa,WAAmB,aAAa,EAAE,YAAA,CAAa;AAC1IA,qBAAA,wBAAwB,CAAC,gBAA2C,aAAa,aAAa,WAAmB,gBAAgB,EAAE,YAAA,CAAa;AAChJA,qBAAA,wBAAwB,CAAC,gBAA2C,aAAa,aAAa,WAAmB,gBAAgB,EAAE,YAAA,CAAa;AAGhJA,qBAAA,iBAAiB,aAAa,aAAa,UAAkB,QAAQ;AACrEA,qBAAA,wBAAwB,CAAC,UAA8B,aAAa,aAAa,UAAkB,gBAAgB,EAAE,MAAA,CAAO;AAC5HA,qBAAA,kBAAkB,aAAa,aAAa,UAAkB,SAAS;AAEvEA,qBAAA,oBAAoB,aAAa,aAAa,gBAAwB,KAAK;AAC3EA,qBAAA,uBAAuB,aAAa,aAAa,gBAAwB,QAAQ;AACjFA,qBAAA,qBAAqB,aAAa,aAAa,gBAAwB,MAAM;AAE7EA,qBAAA,UAAU,aAAa,aAAa,OAAe,KAAK;AACxDA,qBAAA,aAAa,aAAa,aAAa,OAAe,QAAQ;AAC9DA,qBAAA,cAAc,aAAa,aAAa,OAAe,SAAS;AAChEA,qBAAA,aAAa,aAAa,aAAa,OAAe,QAAQ;AAC9DA,qBAAA,WAAW,aAAa,aAAa,OAAe,MAAM;AAAA,GA5D9D,sBAAA,oBAAA,CAAA,EAAA;"}
+{"version":3,"file":"PermissionActions.js","sources":["../../../../../../packages/engine-tenant-api/src/model/authorization/PermissionActions.ts"],"sourcesContent":["import { Authorizator } from '@contember/authorization'\nimport { Acl } from '@contember/schema'\n\nnamespace PermissionActions {\n\texport enum Resources {\n\t\tsystem = 'system',\n\t\tentrypoint = 'entrypoint',\n\t\tperson = 'person',\n\t\tidentity = 'identity',\n\t\tproject = 'project',\n\t\tapiKey = 'apiKey',\n\t\tmailTemplate = 'mailTemplate',\n\t\tidp = 'idp',\n\t}\n\n\n\texport const CONFIGURE = Authorizator.createAction(Resources.system, 'configure')\n\texport const CONFIG_VIEW = Authorizator.createAction(Resources.system, 'viewConfig')\n\n\texport const IDENTITY_VIEW_PERMISSIONS = Authorizator.createAction(Resources.identity, 'viewPermissions')\n\texport const IDENTITY_ADD_GLOBAL_ROLES = (roles?: readonly string[]) => Authorizator.createAction(Resources.identity, 'addGlobalRoles', { roles })\n\texport const IDENTITY_REMOVE_GLOBAL_ROLES = (roles?: readonly string[]) => Authorizator.createAction(Resources.identity, 'removeGlobalRoles', { roles })\n\n\texport const PERSON_DISABLE = (roles?: readonly string[]) => Authorizator.createAction(Resources.person, 'disable', { roles })\n\n\texport const PERSON_VIEW = Authorizator.createAction(Resources.person, 'view')\n\texport const PERSON_SIGN_IN = Authorizator.createAction(Resources.person, 'signIn')\n\texport const PERSON_SIGN_UP = (roles?: readonly string[]) => Authorizator.createAction(Resources.person, 'signUp', { roles })\n\texport const PERSON_SIGN_OUT = Authorizator.createAction(Resources.person, 'signOut')\n\texport const PERSON_SETUP_OTP = Authorizator.createAction(Resources.person, 'setupOtp')\n\texport const PERSON_CHANGE_PROFILE = (roles?: readonly string[]) => Authorizator.createAction(Resources.person, 'changeProfile', { roles })\n\texport const PERSON_CHANGE_MY_PROFILE = Authorizator.createAction(Resources.person, 'changeMyProfile')\n\texport const PERSON_TOGGLE_PASSWORDLESS = Authorizator.createAction(Resources.person, 'togglePasswordless')\n\texport const PERSON_CHANGE_PASSWORD = (roles?: readonly string[]) => Authorizator.createAction(Resources.person, 'changePassword', { roles })\n\texport const PERSON_CHANGE_MY_PASSWORD = Authorizator.createAction(Resources.person, 'changeMyPassword')\n\texport const PERSON_RESET_PASSWORD = Authorizator.createAction(Resources.person, 'resetPassword')\n\texport const PERSON_CREATE_IDP_URL = Authorizator.createAction(Resources.person, 'createIdPUrl')\n\texport const PERSON_SIGN_IN_IDP = Authorizator.createAction(Resources.person, 'signInIdp')\n\texport const PERSON_REQUEST_PASSWORDLESS_SIGN_IN = Authorizator.createAction(Resources.person, 'requestPasswordlessSignIn')\n\texport const PERSON_PASSWORDLESS_SIGN_IN = Authorizator.createAction(Resources.person, 'passwordlessSignIn')\n\texport const PERSON_CREATE_SESSION_KEY = (roles?: readonly string[]) => Authorizator.createAction(Resources.person, 'createSessionToken', { roles })\n\n\texport const PERSON_INVITE = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.person, 'invite', { memberships })\n\texport const PERSON_INVITE_UNMANAGED = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.person, 'invite_unmanaged', { memberships })\n\n\texport const PROJECT_VIEW = Authorizator.createAction(Resources.project, 'view')\n\texport const PROJECT_SET_SECRET = Authorizator.createAction(Resources.project, 'setSecret')\n\texport const PROJECT_UPDATE = Authorizator.createAction(Resources.project, 'update')\n\n\texport const PROJECT_CREATE = Authorizator.createAction(Resources.project, 'create')\n\texport const ENTRYPOINT_DEPLOY = Authorizator.createAction(Resources.entrypoint, 'deployEntrypoint')\n\n\texport const PROJECT_VIEW_MEMBER = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.project, 'viewMembers', { memberships })\n\texport const PROJECT_ADD_MEMBER = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.project, 'addMember', { memberships })\n\texport const PROJECT_REMOVE_MEMBER = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.project, 'removeMember', { memberships })\n\texport const PROJECT_UPDATE_MEMBER = (memberships: readonly Acl.Membership[]) => Authorizator.createAction(Resources.project, 'updateMember', { memberships })\n\n\n\texport const API_KEY_CREATE = Authorizator.createAction(Resources.apiKey, 'create')\n\texport const API_KEY_CREATE_GLOBAL = (roles?: readonly string[]) => Authorizator.createAction(Resources.apiKey, 'createGlobal', { roles })\n\texport const API_KEY_DISABLE = Authorizator.createAction(Resources.apiKey, 'disable')\n\n\texport const MAIL_TEMPLATE_ADD = Authorizator.createAction(Resources.mailTemplate, 'add')\n\texport const MAIL_TEMPLATE_REMOVE = Authorizator.createAction(Resources.mailTemplate, 'remove')\n\texport const MAIL_TEMPLATE_LIST = Authorizator.createAction(Resources.mailTemplate, 'list')\n\n\texport const IDP_ADD = Authorizator.createAction(Resources.idp, 'add')\n\texport const IDP_UPDATE = Authorizator.createAction(Resources.idp, 'update')\n\texport const IDP_DISABLE = Authorizator.createAction(Resources.idp, 'disable')\n\texport const IDP_ENABLE = Authorizator.createAction(Resources.idp, 'enable')\n\texport const IDP_LIST = Authorizator.createAction(Resources.idp, 'list')\n}\n\nexport { PermissionActions }\n"],"names":["PermissionActions","Resources"],"mappings":";AAGU,IAAA;AAAA,CAAV,CAAUA,uBAAV;AACQ,GAAA,CAAKC,eAAL;AACNA,eAAA,QAAS,IAAA;AACTA,eAAA,YAAa,IAAA;AACbA,eAAA,QAAS,IAAA;AACTA,eAAA,UAAW,IAAA;AACXA,eAAA,SAAU,IAAA;AACVA,eAAA,QAAS,IAAA;AACTA,eAAA,cAAe,IAAA;AACfA,eAAA,KAAM,IAAA;AAAA,EAAA,GARKD,mBAAA,cAAAA,mBAAA,YAAA,CAAA,EAAA;AAYCA,qBAAA,YAAY,aAAa,aAAa,UAAkB,WAAW;AACnEA,qBAAA,cAAc,aAAa,aAAa,UAAkB,YAAY;AAEtEA,qBAAA,4BAA4B,aAAa,aAAa,YAAoB,iBAAiB;AAC3FA,qBAAA,4BAA4B,CAAC,UAA8B,aAAa,aAAa,YAAoB,kBAAkB,EAAE,MAAA,CAAO;AACpIA,qBAAA,+BAA+B,CAAC,UAA8B,aAAa,aAAa,YAAoB,qBAAqB,EAAE,MAAA,CAAO;AAE1IA,qBAAA,iBAAiB,CAAC,UAA8B,aAAa,aAAa,UAAkB,WAAW,EAAE,MAAA,CAAO;AAEhHA,qBAAA,cAAc,aAAa,aAAa,UAAkB,MAAM;AAChEA,qBAAA,iBAAiB,aAAa,aAAa,UAAkB,QAAQ;AACrEA,qBAAA,iBAAiB,CAAC,UAA8B,aAAa,aAAa,UAAkB,UAAU,EAAE,MAAA,CAAO;AAC/GA,qBAAA,kBAAkB,aAAa,aAAa,UAAkB,SAAS;AACvEA,qBAAA,mBAAmB,aAAa,aAAa,UAAkB,UAAU;AACzEA,qBAAA,wBAAwB,CAAC,UAA8B,aAAa,aAAa,UAAkB,iBAAiB,EAAE,MAAA,CAAO;AAC7HA,qBAAA,2BAA2B,aAAa,aAAa,UAAkB,iBAAiB;AACxFA,qBAAA,6BAA6B,aAAa,aAAa,UAAkB,oBAAoB;AAC7FA,qBAAA,yBAAyB,CAAC,UAA8B,aAAa,aAAa,UAAkB,kBAAkB,EAAE,MAAA,CAAO;AAC/HA,qBAAA,4BAA4B,aAAa,aAAa,UAAkB,kBAAkB;AAC1FA,qBAAA,wBAAwB,aAAa,aAAa,UAAkB,eAAe;AACnFA,qBAAA,wBAAwB,aAAa,aAAa,UAAkB,cAAc;AAClFA,qBAAA,qBAAqB,aAAa,aAAa,UAAkB,WAAW;AAC5EA,qBAAA,sCAAsC,aAAa,aAAa,UAAkB,2BAA2B;AAC7GA,qBAAA,8BAA8B,aAAa,aAAa,UAAkB,oBAAoB;AAC9FA,qBAAA,4BAA4B,CAAC,UAA8B,aAAa,aAAa,UAAkB,sBAAsB,EAAE,MAAA,CAAO;AAEtIA,qBAAA,gBAAgB,CAAC,gBAA2C,aAAa,aAAa,UAAkB,UAAU,EAAE,YAAA,CAAa;AACjIA,qBAAA,0BAA0B,CAAC,gBAA2C,aAAa,aAAa,UAAkB,oBAAoB,EAAE,YAAA,CAAa;AAErJA,qBAAA,eAAe,aAAa,aAAa,WAAmB,MAAM;AAClEA,qBAAA,qBAAqB,aAAa,aAAa,WAAmB,WAAW;AAC7EA,qBAAA,iBAAiB,aAAa,aAAa,WAAmB,QAAQ;AAEtEA,qBAAA,iBAAiB,aAAa,aAAa,WAAmB,QAAQ;AACtEA,qBAAA,oBAAoB,aAAa,aAAa,cAAsB,kBAAkB;AAEtFA,qBAAA,sBAAsB,CAAC,gBAA2C,aAAa,aAAa,WAAmB,eAAe,EAAE,YAAA,CAAa;AAC7IA,qBAAA,qBAAqB,CAAC,gBAA2C,aAAa,aAAa,WAAmB,aAAa,EAAE,YAAA,CAAa;AAC1IA,qBAAA,wBAAwB,CAAC,gBAA2C,aAAa,aAAa,WAAmB,gBAAgB,EAAE,YAAA,CAAa;AAChJA,qBAAA,wBAAwB,CAAC,gBAA2C,aAAa,aAAa,WAAmB,gBAAgB,EAAE,YAAA,CAAa;AAGhJA,qBAAA,iBAAiB,aAAa,aAAa,UAAkB,QAAQ;AACrEA,qBAAA,wBAAwB,CAAC,UAA8B,aAAa,aAAa,UAAkB,gBAAgB,EAAE,MAAA,CAAO;AAC5HA,qBAAA,kBAAkB,aAAa,aAAa,UAAkB,SAAS;AAEvEA,qBAAA,oBAAoB,aAAa,aAAa,gBAAwB,KAAK;AAC3EA,qBAAA,uBAAuB,aAAa,aAAa,gBAAwB,QAAQ;AACjFA,qBAAA,qBAAqB,aAAa,aAAa,gBAAwB,MAAM;AAE7EA,qBAAA,UAAU,aAAa,aAAa,OAAe,KAAK;AACxDA,qBAAA,aAAa,aAAa,aAAa,OAAe,QAAQ;AAC9DA,qBAAA,cAAc,aAAa,aAAa,OAAe,SAAS;AAChEA,qBAAA,aAAa,aAAa,aAAa,OAAe,QAAQ;AAC9DA,qBAAA,WAAW,aAAa,aAAa,OAAe,MAAM;AAAA,GAnE9D,sBAAA,oBAAA,CAAA,EAAA;"}

package/dist/development/src/model/authorization/PermissionsFactory.cjs

@@ -19,9 +19,12 @@ class PermissionsFactory {
     permissions.allow(Roles.TenantRole.LOGIN, PermissionActions.PermissionActions.PERSON_RESET_PASSWORD);
     permissions.allow(Roles.TenantRole.LOGIN, PermissionActions.PermissionActions.PERSON_CREATE_IDP_URL);
     permissions.allow(Roles.TenantRole.LOGIN, PermissionActions.PermissionActions.PERSON_SIGN_IN_IDP);
+    permissions.allow(Roles.TenantRole.LOGIN, PermissionActions.PermissionActions.PERSON_PASSWORDLESS_SIGN_IN);
+    permissions.allow(Roles.TenantRole.LOGIN, PermissionActions.PermissionActions.PERSON_REQUEST_PASSWORDLESS_SIGN_IN);
     permissions.allow(Roles.TenantRole.PERSON, PermissionActions.PermissionActions.PERSON_VIEW);
     permissions.allow(Roles.TenantRole.PERSON, PermissionActions.PermissionActions.PERSON_CHANGE_MY_PASSWORD);
     permissions.allow(Roles.TenantRole.PERSON, PermissionActions.PermissionActions.PERSON_CHANGE_MY_PROFILE);
+    permissions.allow(Roles.TenantRole.PERSON, PermissionActions.PermissionActions.PERSON_TOGGLE_PASSWORDLESS);
     permissions.allow(Roles.TenantRole.PERSON, PermissionActions.PermissionActions.PERSON_SIGN_OUT);
     permissions.allow(Roles.TenantRole.PERSON, PermissionActions.PermissionActions.PERSON_SETUP_OTP);
     permissions.allow(Roles.TenantRole.PROJECT_MEMBER, PermissionActions.PermissionActions.PROJECT_VIEW);
@@ -51,6 +54,8 @@ class PermissionsFactory {
     permissions.allow(Roles.TenantRole.PROJECT_ADMIN, PermissionActions.PermissionActions.IDP_ENABLE);
     permissions.allow(Roles.TenantRole.PROJECT_ADMIN, PermissionActions.PermissionActions.IDP_LIST);
     permissions.allow(Roles.TenantRole.PROJECT_ADMIN, PermissionActions.PermissionActions.ENTRYPOINT_DEPLOY);
+    permissions.allow(Roles.TenantRole.PROJECT_ADMIN, PermissionActions.PermissionActions.CONFIGURE);
+    permissions.allow(Roles.TenantRole.PROJECT_ADMIN, PermissionActions.PermissionActions.CONFIG_VIEW);
     permissions.allow(Roles.TenantRole.PROJECT_CREATOR, PermissionActions.PermissionActions.PROJECT_CREATE);
     permissions.allow(Roles.TenantRole.ENTRYPOINT_DEPLOYER, PermissionActions.PermissionActions.ENTRYPOINT_DEPLOY);
     return permissions;

package/dist/development/src/model/authorization/PermissionsFactory.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionsFactory.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/authorization/PermissionsFactory.ts"],"sourcesContent":["import { Permissions } from '@contember/authorization'\nimport { PermissionActions } from './PermissionActions'\nimport { TenantRole } from './Roles'\n\nconst allowedRoles = new Set<string>([TenantRole.LOGIN, TenantRole.PROJECT_ADMIN, TenantRole.ENTRYPOINT_DEPLOYER])\n\nconst projectAdminAllowedInputRoles = ({ roles }: {roles?: readonly string[]}) => {\n\treturn roles === undefined || roles.every(it => allowedRoles.has(it))\n}\n\nconst forbiddenRoles = new Set<string>([TenantRole.SUPER_ADMIN, TenantRole.PROJECT_CREATOR])\n\nconst projectAdminUseRolesVerifier = ({ roles }: { roles?: readonly string[] }) => {\n\treturn roles === undefined || roles.every(it => !forbiddenRoles.has(it))\n}\n\nclass PermissionsFactory {\n\tpublic create(): Permissions {\n\t\tconst permissions = new Permissions()\n\n\t\tpermissions.allow(TenantRole.SUPER_ADMIN, { resource: Permissions.ALL, privilege: Permissions.ALL })\n\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_RESET_PASSWORD)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_CREATE_IDP_URL)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN_IDP)\n\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_VIEW)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PASSWORD)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PROFILE)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SIGN_OUT)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SETUP_OTP)\n\n\t\tpermissions.allow(TenantRole.PROJECT_MEMBER, PermissionActions.PROJECT_VIEW)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE_GLOBAL(), projectAdminAllowedInputRoles)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_SIGN_UP(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CREATE_SESSION_KEY(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_DISABLE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PROFILE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PASSWORD(), projectAdminUseRolesVerifier)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_ADD_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_UPDATE_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_REMOVE_MEMBER([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE_UNMANAGED([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_REMOVE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_UPDATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ENABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.ENTRYPOINT_DEPLOY)\n\n\t\tpermissions.allow(TenantRole.PROJECT_CREATOR, PermissionActions.PROJECT_CREATE)\n\t\tpermissions.allow(TenantRole.ENTRYPOINT_DEPLOYER, PermissionActions.ENTRYPOINT_DEPLOY)\n\n\t\treturn permissions\n\t}\n}\n\nexport { PermissionsFactory }\n"],"names":["TenantRole","Permissions","PermissionActions"],"mappings":";;;;;AAIA,MAAM,eAAmB,oBAAA,IAAY,CAACA,iBAAW,OAAOA,MAAW,WAAA,eAAeA,MAAAA,WAAW,mBAAmB,CAAC;AAEjH,MAAM,gCAAgC,CAAC,EAAE,YAAyC;AAC1E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,aAAa,IAAI,EAAE,CAAC;AACrE;AAEA,MAAM,qCAAqB,IAAY,CAACA,MAAAA,WAAW,aAAaA,MAAA,WAAW,eAAe,CAAC;AAE3F,MAAM,+BAA+B,CAAC,EAAE,YAA2C;AAC3E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,CAAC,eAAe,IAAI,EAAE,CAAC;AACxE;AAEA,MAAM,mBAAmB;AAAA,EACjB,SAAsB;AACtB,UAAA,cAAc,IAAIC,cAAAA;AAEZ,gBAAA,MAAMD,iBAAW,aAAa,EAAE,UAAUC,0BAAY,KAAK,WAAWA,0BAAY,IAAK,CAAA;AAEnG,gBAAY,MAAMD,MAAA,WAAW,OAAOE,kBAAA,kBAAkB,cAAc;AACpE,gBAAY,MAAMF,MAAA,WAAW,OAAOE,kBAAA,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAMF,MAAA,WAAW,OAAOE,kBAAA,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAMF,MAAA,WAAW,OAAOE,kBAAA,kBAAkB,kBAAkB;AAExE,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,WAAW;AAClE,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,yBAAyB;AAChF,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,wBAAwB;AAC/E,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,eAAe;AACtE,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,gBAAgB;AAEvE,gBAAY,MAAMF,MAAA,WAAW,gBAAgBE,kBAAA,kBAAkB,YAAY;AAE3E,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,YAAY;AAC1E,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,cAAc;AAC5E,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,eAAe;AAC7E,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,sBAAA,GAAyB,6BAA6B;AAEpH,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,eAAA,GAAkB,6BAA6B;AAC7G,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,0BAAA,GAA6B,6BAA6B;AACxH,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,6BAAA,GAAgC,6BAA6B;AAC3H,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,0BAAA,GAA6B,4BAA4B;AACvH,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,eAAA,GAAkB,4BAA4B;AAC5G,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,sBAAA,GAAyB,4BAA4B;AACnH,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,uBAAA,GAA0B,4BAA4B;AAEpH,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,oBAAoB,CAAE,CAAA,CAAC;AACrF,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,mBAAmB,CAAE,CAAA,CAAC;AACpF,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AACvF,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AAEvF,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,cAAc,CAAE,CAAA,CAAC;AAC/E,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,wBAAwB,CAAE,CAAA,CAAC;AAEzF,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,iBAAiB;AAC/E,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,oBAAoB;AAClF,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,kBAAkB;AAEhF,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,OAAO;AACrE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,UAAU;AACxE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,WAAW;AACzE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,UAAU;AACxE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,QAAQ;AAEtE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,iBAAiB;AAE/E,gBAAY,MAAMF,MAAA,WAAW,iBAAiBE,kBAAA,kBAAkB,cAAc;AAC9E,gBAAY,MAAMF,MAAA,WAAW,qBAAqBE,kBAAA,kBAAkB,iBAAiB;AAE9E,WAAA;AAAA,EACR;AACD;;"}
+{"version":3,"file":"PermissionsFactory.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/authorization/PermissionsFactory.ts"],"sourcesContent":["import { Permissions } from '@contember/authorization'\nimport { PermissionActions } from './PermissionActions'\nimport { TenantRole } from './Roles'\n\nconst allowedRoles = new Set<string>([TenantRole.LOGIN, TenantRole.PROJECT_ADMIN, TenantRole.ENTRYPOINT_DEPLOYER])\n\nconst projectAdminAllowedInputRoles = ({ roles }: {roles?: readonly string[]}) => {\n\treturn roles === undefined || roles.every(it => allowedRoles.has(it))\n}\n\nconst forbiddenRoles = new Set<string>([TenantRole.SUPER_ADMIN, TenantRole.PROJECT_CREATOR])\n\nconst projectAdminUseRolesVerifier = ({ roles }: { roles?: readonly string[] }) => {\n\treturn roles === undefined || roles.every(it => !forbiddenRoles.has(it))\n}\n\nclass PermissionsFactory {\n\tpublic create(): Permissions {\n\t\tconst permissions = new Permissions()\n\n\t\tpermissions.allow(TenantRole.SUPER_ADMIN, { resource: Permissions.ALL, privilege: Permissions.ALL })\n\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_RESET_PASSWORD)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_CREATE_IDP_URL)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN_IDP)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_PASSWORDLESS_SIGN_IN)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_REQUEST_PASSWORDLESS_SIGN_IN)\n\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_VIEW)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PASSWORD)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PROFILE)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_TOGGLE_PASSWORDLESS)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SIGN_OUT)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SETUP_OTP)\n\n\t\tpermissions.allow(TenantRole.PROJECT_MEMBER, PermissionActions.PROJECT_VIEW)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE_GLOBAL(), projectAdminAllowedInputRoles)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_SIGN_UP(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CREATE_SESSION_KEY(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_DISABLE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PROFILE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PASSWORD(), projectAdminUseRolesVerifier)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_ADD_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_UPDATE_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_REMOVE_MEMBER([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE_UNMANAGED([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_REMOVE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_UPDATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ENABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.ENTRYPOINT_DEPLOY)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.CONFIGURE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.CONFIG_VIEW)\n\n\t\tpermissions.allow(TenantRole.PROJECT_CREATOR, PermissionActions.PROJECT_CREATE)\n\t\tpermissions.allow(TenantRole.ENTRYPOINT_DEPLOYER, PermissionActions.ENTRYPOINT_DEPLOY)\n\n\t\treturn permissions\n\t}\n}\n\nexport { PermissionsFactory }\n"],"names":["TenantRole","Permissions","PermissionActions"],"mappings":";;;;;AAIA,MAAM,eAAmB,oBAAA,IAAY,CAACA,iBAAW,OAAOA,MAAW,WAAA,eAAeA,MAAAA,WAAW,mBAAmB,CAAC;AAEjH,MAAM,gCAAgC,CAAC,EAAE,YAAyC;AAC1E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,aAAa,IAAI,EAAE,CAAC;AACrE;AAEA,MAAM,qCAAqB,IAAY,CAACA,MAAAA,WAAW,aAAaA,MAAA,WAAW,eAAe,CAAC;AAE3F,MAAM,+BAA+B,CAAC,EAAE,YAA2C;AAC3E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,CAAC,eAAe,IAAI,EAAE,CAAC;AACxE;AAEA,MAAM,mBAAmB;AAAA,EACjB,SAAsB;AACtB,UAAA,cAAc,IAAIC,cAAAA;AAEZ,gBAAA,MAAMD,iBAAW,aAAa,EAAE,UAAUC,0BAAY,KAAK,WAAWA,0BAAY,IAAK,CAAA;AAEnG,gBAAY,MAAMD,MAAA,WAAW,OAAOE,kBAAA,kBAAkB,cAAc;AACpE,gBAAY,MAAMF,MAAA,WAAW,OAAOE,kBAAA,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAMF,MAAA,WAAW,OAAOE,kBAAA,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAMF,MAAA,WAAW,OAAOE,kBAAA,kBAAkB,kBAAkB;AACxE,gBAAY,MAAMF,MAAA,WAAW,OAAOE,kBAAA,kBAAkB,2BAA2B;AACjF,gBAAY,MAAMF,MAAA,WAAW,OAAOE,kBAAA,kBAAkB,mCAAmC;AAEzF,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,WAAW;AAClE,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,yBAAyB;AAChF,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,wBAAwB;AAC/E,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,0BAA0B;AACjF,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,eAAe;AACtE,gBAAY,MAAMF,MAAA,WAAW,QAAQE,kBAAA,kBAAkB,gBAAgB;AAEvE,gBAAY,MAAMF,MAAA,WAAW,gBAAgBE,kBAAA,kBAAkB,YAAY;AAE3E,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,YAAY;AAC1E,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,cAAc;AAC5E,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,eAAe;AAC7E,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,sBAAA,GAAyB,6BAA6B;AAEpH,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,eAAA,GAAkB,6BAA6B;AAC7G,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,0BAAA,GAA6B,6BAA6B;AACxH,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,6BAAA,GAAgC,6BAA6B;AAC3H,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,0BAAA,GAA6B,4BAA4B;AACvH,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,eAAA,GAAkB,4BAA4B;AAC5G,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,sBAAA,GAAyB,4BAA4B;AACnH,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,uBAAA,GAA0B,4BAA4B;AAEpH,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,oBAAoB,CAAE,CAAA,CAAC;AACrF,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,mBAAmB,CAAE,CAAA,CAAC;AACpF,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AACvF,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AAEvF,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,cAAc,CAAE,CAAA,CAAC;AAC/E,gBAAY,MAAMF,iBAAW,eAAeE,kBAAAA,kBAAkB,wBAAwB,CAAE,CAAA,CAAC;AAEzF,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,iBAAiB;AAC/E,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,oBAAoB;AAClF,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,kBAAkB;AAEhF,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,OAAO;AACrE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,UAAU;AACxE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,WAAW;AACzE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,UAAU;AACxE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,QAAQ;AAEtE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,iBAAiB;AAC/E,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,SAAS;AACvE,gBAAY,MAAMF,MAAA,WAAW,eAAeE,kBAAA,kBAAkB,WAAW;AAEzE,gBAAY,MAAMF,MAAA,WAAW,iBAAiBE,kBAAA,kBAAkB,cAAc;AAC9E,gBAAY,MAAMF,MAAA,WAAW,qBAAqBE,kBAAA,kBAAkB,iBAAiB;AAE9E,WAAA;AAAA,EACR;AACD;;"}

package/dist/development/src/model/authorization/PermissionsFactory.js

@@ -17,9 +17,12 @@ class PermissionsFactory {
     permissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_RESET_PASSWORD);
     permissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_CREATE_IDP_URL);
     permissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN_IDP);
+    permissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_PASSWORDLESS_SIGN_IN);
+    permissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_REQUEST_PASSWORDLESS_SIGN_IN);
     permissions.allow(TenantRole.PERSON, PermissionActions.PERSON_VIEW);
     permissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PASSWORD);
     permissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PROFILE);
+    permissions.allow(TenantRole.PERSON, PermissionActions.PERSON_TOGGLE_PASSWORDLESS);
     permissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SIGN_OUT);
     permissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SETUP_OTP);
     permissions.allow(TenantRole.PROJECT_MEMBER, PermissionActions.PROJECT_VIEW);
@@ -49,6 +52,8 @@ class PermissionsFactory {
     permissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ENABLE);
     permissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_LIST);
     permissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.ENTRYPOINT_DEPLOY);
+    permissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.CONFIGURE);
+    permissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.CONFIG_VIEW);
     permissions.allow(TenantRole.PROJECT_CREATOR, PermissionActions.PROJECT_CREATE);
     permissions.allow(TenantRole.ENTRYPOINT_DEPLOYER, PermissionActions.ENTRYPOINT_DEPLOY);
     return permissions;

package/dist/development/src/model/authorization/PermissionsFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionsFactory.js","sources":["../../../../../../packages/engine-tenant-api/src/model/authorization/PermissionsFactory.ts"],"sourcesContent":["import { Permissions } from '@contember/authorization'\nimport { PermissionActions } from './PermissionActions'\nimport { TenantRole } from './Roles'\n\nconst allowedRoles = new Set<string>([TenantRole.LOGIN, TenantRole.PROJECT_ADMIN, TenantRole.ENTRYPOINT_DEPLOYER])\n\nconst projectAdminAllowedInputRoles = ({ roles }: {roles?: readonly string[]}) => {\n\treturn roles === undefined || roles.every(it => allowedRoles.has(it))\n}\n\nconst forbiddenRoles = new Set<string>([TenantRole.SUPER_ADMIN, TenantRole.PROJECT_CREATOR])\n\nconst projectAdminUseRolesVerifier = ({ roles }: { roles?: readonly string[] }) => {\n\treturn roles === undefined || roles.every(it => !forbiddenRoles.has(it))\n}\n\nclass PermissionsFactory {\n\tpublic create(): Permissions {\n\t\tconst permissions = new Permissions()\n\n\t\tpermissions.allow(TenantRole.SUPER_ADMIN, { resource: Permissions.ALL, privilege: Permissions.ALL })\n\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_RESET_PASSWORD)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_CREATE_IDP_URL)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN_IDP)\n\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_VIEW)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PASSWORD)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PROFILE)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SIGN_OUT)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SETUP_OTP)\n\n\t\tpermissions.allow(TenantRole.PROJECT_MEMBER, PermissionActions.PROJECT_VIEW)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE_GLOBAL(), projectAdminAllowedInputRoles)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_SIGN_UP(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CREATE_SESSION_KEY(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_DISABLE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PROFILE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PASSWORD(), projectAdminUseRolesVerifier)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_ADD_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_UPDATE_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_REMOVE_MEMBER([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE_UNMANAGED([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_REMOVE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_UPDATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ENABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.ENTRYPOINT_DEPLOY)\n\n\t\tpermissions.allow(TenantRole.PROJECT_CREATOR, PermissionActions.PROJECT_CREATE)\n\t\tpermissions.allow(TenantRole.ENTRYPOINT_DEPLOYER, PermissionActions.ENTRYPOINT_DEPLOY)\n\n\t\treturn permissions\n\t}\n}\n\nexport { PermissionsFactory }\n"],"names":[],"mappings":";;;AAIA,MAAM,eAAmB,oBAAA,IAAY,CAAC,WAAW,OAAO,WAAW,eAAe,WAAW,mBAAmB,CAAC;AAEjH,MAAM,gCAAgC,CAAC,EAAE,YAAyC;AAC1E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,aAAa,IAAI,EAAE,CAAC;AACrE;AAEA,MAAM,qCAAqB,IAAY,CAAC,WAAW,aAAa,WAAW,eAAe,CAAC;AAE3F,MAAM,+BAA+B,CAAC,EAAE,YAA2C;AAC3E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,CAAC,eAAe,IAAI,EAAE,CAAC;AACxE;AAEA,MAAM,mBAAmB;AAAA,EACjB,SAAsB;AACtB,UAAA,cAAc,IAAI;AAEZ,gBAAA,MAAM,WAAW,aAAa,EAAE,UAAU,YAAY,KAAK,WAAW,YAAY,IAAK,CAAA;AAEnG,gBAAY,MAAM,WAAW,OAAO,kBAAkB,cAAc;AACpE,gBAAY,MAAM,WAAW,OAAO,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAM,WAAW,OAAO,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAM,WAAW,OAAO,kBAAkB,kBAAkB;AAExE,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,WAAW;AAClE,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,yBAAyB;AAChF,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,wBAAwB;AAC/E,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,eAAe;AACtE,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,gBAAgB;AAEvE,gBAAY,MAAM,WAAW,gBAAgB,kBAAkB,YAAY;AAE3E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,YAAY;AAC1E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,cAAc;AAC5E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAe;AAC7E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAA,GAAyB,6BAA6B;AAEpH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAA,GAAkB,6BAA6B;AAC7G,gBAAY,MAAM,WAAW,eAAe,kBAAkB,0BAAA,GAA6B,6BAA6B;AACxH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,6BAAA,GAAgC,6BAA6B;AAC3H,gBAAY,MAAM,WAAW,eAAe,kBAAkB,0BAAA,GAA6B,4BAA4B;AACvH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAA,GAAkB,4BAA4B;AAC5G,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAA,GAAyB,4BAA4B;AACnH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,uBAAA,GAA0B,4BAA4B;AAEpH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,oBAAoB,CAAE,CAAA,CAAC;AACrF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,mBAAmB,CAAE,CAAA,CAAC;AACpF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AACvF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AAEvF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,cAAc,CAAE,CAAA,CAAC;AAC/E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,wBAAwB,CAAE,CAAA,CAAC;AAEzF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,iBAAiB;AAC/E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,oBAAoB;AAClF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,kBAAkB;AAEhF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,OAAO;AACrE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,UAAU;AACxE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,WAAW;AACzE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,UAAU;AACxE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,QAAQ;AAEtE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,iBAAiB;AAE/E,gBAAY,MAAM,WAAW,iBAAiB,kBAAkB,cAAc;AAC9E,gBAAY,MAAM,WAAW,qBAAqB,kBAAkB,iBAAiB;AAE9E,WAAA;AAAA,EACR;AACD;"}
+{"version":3,"file":"PermissionsFactory.js","sources":["../../../../../../packages/engine-tenant-api/src/model/authorization/PermissionsFactory.ts"],"sourcesContent":["import { Permissions } from '@contember/authorization'\nimport { PermissionActions } from './PermissionActions'\nimport { TenantRole } from './Roles'\n\nconst allowedRoles = new Set<string>([TenantRole.LOGIN, TenantRole.PROJECT_ADMIN, TenantRole.ENTRYPOINT_DEPLOYER])\n\nconst projectAdminAllowedInputRoles = ({ roles }: {roles?: readonly string[]}) => {\n\treturn roles === undefined || roles.every(it => allowedRoles.has(it))\n}\n\nconst forbiddenRoles = new Set<string>([TenantRole.SUPER_ADMIN, TenantRole.PROJECT_CREATOR])\n\nconst projectAdminUseRolesVerifier = ({ roles }: { roles?: readonly string[] }) => {\n\treturn roles === undefined || roles.every(it => !forbiddenRoles.has(it))\n}\n\nclass PermissionsFactory {\n\tpublic create(): Permissions {\n\t\tconst permissions = new Permissions()\n\n\t\tpermissions.allow(TenantRole.SUPER_ADMIN, { resource: Permissions.ALL, privilege: Permissions.ALL })\n\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_RESET_PASSWORD)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_CREATE_IDP_URL)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN_IDP)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_PASSWORDLESS_SIGN_IN)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_REQUEST_PASSWORDLESS_SIGN_IN)\n\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_VIEW)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PASSWORD)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PROFILE)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_TOGGLE_PASSWORDLESS)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SIGN_OUT)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SETUP_OTP)\n\n\t\tpermissions.allow(TenantRole.PROJECT_MEMBER, PermissionActions.PROJECT_VIEW)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE_GLOBAL(), projectAdminAllowedInputRoles)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_SIGN_UP(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CREATE_SESSION_KEY(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_DISABLE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PROFILE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PASSWORD(), projectAdminUseRolesVerifier)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_ADD_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_UPDATE_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_REMOVE_MEMBER([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE_UNMANAGED([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_REMOVE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_UPDATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ENABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.ENTRYPOINT_DEPLOY)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.CONFIGURE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.CONFIG_VIEW)\n\n\t\tpermissions.allow(TenantRole.PROJECT_CREATOR, PermissionActions.PROJECT_CREATE)\n\t\tpermissions.allow(TenantRole.ENTRYPOINT_DEPLOYER, PermissionActions.ENTRYPOINT_DEPLOY)\n\n\t\treturn permissions\n\t}\n}\n\nexport { PermissionsFactory }\n"],"names":[],"mappings":";;;AAIA,MAAM,eAAmB,oBAAA,IAAY,CAAC,WAAW,OAAO,WAAW,eAAe,WAAW,mBAAmB,CAAC;AAEjH,MAAM,gCAAgC,CAAC,EAAE,YAAyC;AAC1E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,aAAa,IAAI,EAAE,CAAC;AACrE;AAEA,MAAM,qCAAqB,IAAY,CAAC,WAAW,aAAa,WAAW,eAAe,CAAC;AAE3F,MAAM,+BAA+B,CAAC,EAAE,YAA2C;AAC3E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,CAAC,eAAe,IAAI,EAAE,CAAC;AACxE;AAEA,MAAM,mBAAmB;AAAA,EACjB,SAAsB;AACtB,UAAA,cAAc,IAAI;AAEZ,gBAAA,MAAM,WAAW,aAAa,EAAE,UAAU,YAAY,KAAK,WAAW,YAAY,IAAK,CAAA;AAEnG,gBAAY,MAAM,WAAW,OAAO,kBAAkB,cAAc;AACpE,gBAAY,MAAM,WAAW,OAAO,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAM,WAAW,OAAO,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAM,WAAW,OAAO,kBAAkB,kBAAkB;AACxE,gBAAY,MAAM,WAAW,OAAO,kBAAkB,2BAA2B;AACjF,gBAAY,MAAM,WAAW,OAAO,kBAAkB,mCAAmC;AAEzF,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,WAAW;AAClE,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,yBAAyB;AAChF,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,wBAAwB;AAC/E,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,0BAA0B;AACjF,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,eAAe;AACtE,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,gBAAgB;AAEvE,gBAAY,MAAM,WAAW,gBAAgB,kBAAkB,YAAY;AAE3E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,YAAY;AAC1E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,cAAc;AAC5E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAe;AAC7E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAA,GAAyB,6BAA6B;AAEpH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAA,GAAkB,6BAA6B;AAC7G,gBAAY,MAAM,WAAW,eAAe,kBAAkB,0BAAA,GAA6B,6BAA6B;AACxH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,6BAAA,GAAgC,6BAA6B;AAC3H,gBAAY,MAAM,WAAW,eAAe,kBAAkB,0BAAA,GAA6B,4BAA4B;AACvH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAA,GAAkB,4BAA4B;AAC5G,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAA,GAAyB,4BAA4B;AACnH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,uBAAA,GAA0B,4BAA4B;AAEpH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,oBAAoB,CAAE,CAAA,CAAC;AACrF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,mBAAmB,CAAE,CAAA,CAAC;AACpF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AACvF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AAEvF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,cAAc,CAAE,CAAA,CAAC;AAC/E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,wBAAwB,CAAE,CAAA,CAAC;AAEzF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,iBAAiB;AAC/E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,oBAAoB;AAClF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,kBAAkB;AAEhF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,OAAO;AACrE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,UAAU;AACxE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,WAAW;AACzE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,UAAU;AACxE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,QAAQ;AAEtE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,iBAAiB;AAC/E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,SAAS;AACvE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,WAAW;AAEzE,gBAAY,MAAM,WAAW,iBAAiB,kBAAkB,cAAc;AAC9E,gBAAY,MAAM,WAAW,qBAAqB,kBAAkB,iBAAiB;AAE9E,WAAA;AAAA,EACR;AACD;"}

package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.cjs

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class UpdateConfigurationCommand {
+  constructor(configuration) {
+    this.configuration = configuration;
+  }
+  async execute({ db }) {
+    const result = await Database.UpdateBuilder.create().table("config").where({ id: "singleton" }).values({
+      passwordless_enabled: this.configuration.passwordless?.enabled,
+      passwordless_url: this.configuration.passwordless?.url,
+      passwordless_expiration_minutes: this.configuration.passwordless?.expirationMinutes
+    }).execute(db);
+    if (!result) {
+      throw new Error("Configuration not found");
+    }
+  }
+}
+exports.UpdateConfigurationCommand = UpdateConfigurationCommand;
+//# sourceMappingURL=UpdateConfigurationCommand.cjs.map

package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateConfigurationCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/configuration/UpdateConfigurationCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ConfigInput } from '../../../schema'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class UpdateConfigurationCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly configuration: ConfigInput,\n\t) {\n\t}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('config')\n\t\t\t.where({ id: 'singleton' })\n\t\t\t.values({\n\t\t\t\tpasswordless_enabled: this.configuration.passwordless?.enabled,\n\t\t\t\tpasswordless_url: this.configuration.passwordless?.url,\n\t\t\t\tpasswordless_expiration_minutes: this.configuration.passwordless?.expirationMinutes,\n\t\t\t})\n\t\t\t.execute(db)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\t}\n\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAIO,MAAM,2BAAoD;AAAA,EAChE,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,SAAS,MAAMA,SAAAA,cAAc,OAAA,EACjC,MAAM,QAAQ,EACd,MAAM,EAAE,IAAI,YAAa,CAAA,EACzB,OAAO;AAAA,MACP,sBAAsB,KAAK,cAAc,cAAc;AAAA,MACvD,kBAAkB,KAAK,cAAc,cAAc;AAAA,MACnD,iCAAiC,KAAK,cAAc,cAAc;AAAA,IAAA,CAClE,EACA,QAAQ,EAAE;AACZ,QAAI,CAAC,QAAQ;AACN,YAAA,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAAA,EACD;AAED;;"}

package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.js

@@ -0,0 +1,20 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class UpdateConfigurationCommand {
+  constructor(configuration) {
+    this.configuration = configuration;
+  }
+  async execute({ db }) {
+    const result = await UpdateBuilder$1.create().table("config").where({ id: "singleton" }).values({
+      passwordless_enabled: this.configuration.passwordless?.enabled,
+      passwordless_url: this.configuration.passwordless?.url,
+      passwordless_expiration_minutes: this.configuration.passwordless?.expirationMinutes
+    }).execute(db);
+    if (!result) {
+      throw new Error("Configuration not found");
+    }
+  }
+}
+export {
+  UpdateConfigurationCommand
+};
+//# sourceMappingURL=UpdateConfigurationCommand.js.map

package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateConfigurationCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/configuration/UpdateConfigurationCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ConfigInput } from '../../../schema'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class UpdateConfigurationCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly configuration: ConfigInput,\n\t) {\n\t}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('config')\n\t\t\t.where({ id: 'singleton' })\n\t\t\t.values({\n\t\t\t\tpasswordless_enabled: this.configuration.passwordless?.enabled,\n\t\t\t\tpasswordless_url: this.configuration.passwordless?.url,\n\t\t\t\tpasswordless_expiration_minutes: this.configuration.passwordless?.expirationMinutes,\n\t\t\t})\n\t\t\t.execute(db)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\t}\n\n}\n"],"names":["UpdateBuilder"],"mappings":";AAIO,MAAM,2BAAoD;AAAA,EAChE,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,SAAS,MAAMA,gBAAc,OAAA,EACjC,MAAM,QAAQ,EACd,MAAM,EAAE,IAAI,YAAa,CAAA,EACzB,OAAO;AAAA,MACP,sBAAsB,KAAK,cAAc,cAAc;AAAA,MACvD,kBAAkB,KAAK,cAAc,cAAc;AAAA,MACnD,iCAAiC,KAAK,cAAc,cAAc;AAAA,IAAA,CAClE,EACA,QAAQ,EAAE;AACZ,QAAI,CAAC,QAAQ;AACN,YAAA,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAAA,EACD;AAED;"}

package/dist/development/src/model/commands/person/CreatePersonCommand.cjs

@@ -27,7 +27,8 @@ class CreatePersonCommand {
       identity_id: this.data.identityId,
       otp_uri: null,
       otp_activated_at: null,
-      disabled_at: null
+      disabled_at: null,
+      passwordless_enabled: null
     };
   }
 }

package/dist/development/src/model/commands/person/CreatePersonCommand.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"CreatePersonCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/CreatePersonCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { PersonRow } from '../../queries'\nimport { InsertBuilder, Literal } from '@contember/database'\nimport { MaybePassword } from '../../dtos/Password'\nimport { normalizeEmail } from '../../utils/email'\n\nexport class CreatePersonCommand implements Command<Omit<PersonRow, 'roles'>> {\n\tconstructor(private readonly data: {\n\t\tidentityId: string\n\t\temail?: string\n\t\tname?: string\n\t\tpassword: MaybePassword\n\t\tidpOnly?: boolean\n\t}) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<Omit<PersonRow, 'roles'>> {\n\t\tconst id = providers.uuid()\n\n\t\tconst password_hash = await this.data.password.getHash(providers)\n\t\tconst email = this.data.email ? normalizeEmail(this.data.email) : null\n\t\tconst name = this.data.name ?? this.data.email?.split('@')[0] ?? null\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person')\n\t\t\t.values({\n\t\t\t\tid: id,\n\t\t\t\temail,\n\t\t\t\tname: name,\n\t\t\t\tpassword_hash,\n\t\t\t\tidentity_id: this.data.identityId,\n\t\t\t\tidp_only: this.data.idpOnly ?? false,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn {\n\t\t\tid,\n\t\t\temail,\n\t\t\tname,\n\t\t\tpassword_hash, identity_id:\n\t\t\tthis.data.identityId,\n\t\t\totp_uri: null,\n\t\t\totp_activated_at: null,\n\t\t\tdisabled_at: null,\n\t\t}\n\t}\n}\n"],"names":["email","normalizeEmail","InsertBuilder"],"mappings":";;;;AAMO,MAAM,oBAAiE;AAAA,EAC7E,YAA6B,MAM1B;AAN0B,SAAA,OAAA;AAAA,EAMzB;AAAA,EAEJ,MAAM,QAAQ,EAAE,IAAI,aAA8D;AAC3E,UAAA,KAAK,UAAU;AAErB,UAAM,gBAAgB,MAAM,KAAK,KAAK,SAAS,QAAQ,SAAS;AAC1D,UAAAA,UAAQ,KAAK,KAAK,QAAQC,qBAAe,KAAK,KAAK,KAAK,IAAI;AAC5D,UAAA,OAAO,KAAK,KAAK,QAAQ,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AACjE,UAAMC,SAAAA,cAAc,OAAO,EACzB,KAAK,QAAQ,EACb,OAAO;AAAA,MACP;AAAA,MAAA,OACAF;AAAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,KAAK,KAAK;AAAA,MACvB,UAAU,KAAK,KAAK,WAAW;AAAA,IAAA,CAC/B,EACA,QAAQ,EAAE;AAEL,WAAA;AAAA,MACN;AAAA,MAAA,OACAA;AAAAA,MACA;AAAA,MACA;AAAA,MAAe,aACf,KAAK,KAAK;AAAA,MACV,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,aAAa;AAAA,IAAA;AAAA,EAEf;AACD;;"}
+{"version":3,"file":"CreatePersonCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/CreatePersonCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { PersonRow } from '../../queries'\nimport { InsertBuilder, Literal } from '@contember/database'\nimport { MaybePassword } from '../../dtos/Password'\nimport { normalizeEmail } from '../../utils/email'\n\nexport class CreatePersonCommand implements Command<Omit<PersonRow, 'roles'>> {\n\tconstructor(private readonly data: {\n\t\tidentityId: string\n\t\temail?: string\n\t\tname?: string\n\t\tpassword: MaybePassword\n\t\tidpOnly?: boolean\n\t}) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<Omit<PersonRow, 'roles'>> {\n\t\tconst id = providers.uuid()\n\n\t\tconst password_hash = await this.data.password.getHash(providers)\n\t\tconst email = this.data.email ? normalizeEmail(this.data.email) : null\n\t\tconst name = this.data.name ?? this.data.email?.split('@')[0] ?? null\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person')\n\t\t\t.values({\n\t\t\t\tid: id,\n\t\t\t\temail,\n\t\t\t\tname: name,\n\t\t\t\tpassword_hash,\n\t\t\t\tidentity_id: this.data.identityId,\n\t\t\t\tidp_only: this.data.idpOnly ?? false,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn {\n\t\t\tid,\n\t\t\temail,\n\t\t\tname,\n\t\t\tpassword_hash, identity_id:\n\t\t\tthis.data.identityId,\n\t\t\totp_uri: null,\n\t\t\totp_activated_at: null,\n\t\t\tdisabled_at: null,\n\t\t\tpasswordless_enabled: null,\n\t\t}\n\t}\n}\n"],"names":["email","normalizeEmail","InsertBuilder"],"mappings":";;;;AAMO,MAAM,oBAAiE;AAAA,EAC7E,YAA6B,MAM1B;AAN0B,SAAA,OAAA;AAAA,EAMzB;AAAA,EAEJ,MAAM,QAAQ,EAAE,IAAI,aAA8D;AAC3E,UAAA,KAAK,UAAU;AAErB,UAAM,gBAAgB,MAAM,KAAK,KAAK,SAAS,QAAQ,SAAS;AAC1D,UAAAA,UAAQ,KAAK,KAAK,QAAQC,qBAAe,KAAK,KAAK,KAAK,IAAI;AAC5D,UAAA,OAAO,KAAK,KAAK,QAAQ,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AACjE,UAAMC,SAAAA,cAAc,OAAO,EACzB,KAAK,QAAQ,EACb,OAAO;AAAA,MACP;AAAA,MAAA,OACAF;AAAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,KAAK,KAAK;AAAA,MACvB,UAAU,KAAK,KAAK,WAAW;AAAA,IAAA,CAC/B,EACA,QAAQ,EAAE;AAEL,WAAA;AAAA,MACN;AAAA,MAAA,OACAA;AAAAA,MACA;AAAA,MACA;AAAA,MAAe,aACf,KAAK,KAAK;AAAA,MACV,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,aAAa;AAAA,MACb,sBAAsB;AAAA,IAAA;AAAA,EAExB;AACD;;"}

package/dist/development/src/model/commands/person/CreatePersonCommand.js

@@ -25,7 +25,8 @@ class CreatePersonCommand {
       identity_id: this.data.identityId,
       otp_uri: null,
       otp_activated_at: null,
-      disabled_at: null
+      disabled_at: null,
+      passwordless_enabled: null
     };
   }
 }

package/dist/development/src/model/commands/person/CreatePersonCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"CreatePersonCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/CreatePersonCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { PersonRow } from '../../queries'\nimport { InsertBuilder, Literal } from '@contember/database'\nimport { MaybePassword } from '../../dtos/Password'\nimport { normalizeEmail } from '../../utils/email'\n\nexport class CreatePersonCommand implements Command<Omit<PersonRow, 'roles'>> {\n\tconstructor(private readonly data: {\n\t\tidentityId: string\n\t\temail?: string\n\t\tname?: string\n\t\tpassword: MaybePassword\n\t\tidpOnly?: boolean\n\t}) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<Omit<PersonRow, 'roles'>> {\n\t\tconst id = providers.uuid()\n\n\t\tconst password_hash = await this.data.password.getHash(providers)\n\t\tconst email = this.data.email ? normalizeEmail(this.data.email) : null\n\t\tconst name = this.data.name ?? this.data.email?.split('@')[0] ?? null\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person')\n\t\t\t.values({\n\t\t\t\tid: id,\n\t\t\t\temail,\n\t\t\t\tname: name,\n\t\t\t\tpassword_hash,\n\t\t\t\tidentity_id: this.data.identityId,\n\t\t\t\tidp_only: this.data.idpOnly ?? false,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn {\n\t\t\tid,\n\t\t\temail,\n\t\t\tname,\n\t\t\tpassword_hash, identity_id:\n\t\t\tthis.data.identityId,\n\t\t\totp_uri: null,\n\t\t\totp_activated_at: null,\n\t\t\tdisabled_at: null,\n\t\t}\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";;AAMO,MAAM,oBAAiE;AAAA,EAC7E,YAA6B,MAM1B;AAN0B,SAAA,OAAA;AAAA,EAMzB;AAAA,EAEJ,MAAM,QAAQ,EAAE,IAAI,aAA8D;AAC3E,UAAA,KAAK,UAAU;AAErB,UAAM,gBAAgB,MAAM,KAAK,KAAK,SAAS,QAAQ,SAAS;AAC1D,UAAA,QAAQ,KAAK,KAAK,QAAQ,eAAe,KAAK,KAAK,KAAK,IAAI;AAC5D,UAAA,OAAO,KAAK,KAAK,QAAQ,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AACjE,UAAMA,gBAAc,OAAO,EACzB,KAAK,QAAQ,EACb,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,KAAK,KAAK;AAAA,MACvB,UAAU,KAAK,KAAK,WAAW;AAAA,IAAA,CAC/B,EACA,QAAQ,EAAE;AAEL,WAAA;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAAe,aACf,KAAK,KAAK;AAAA,MACV,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,aAAa;AAAA,IAAA;AAAA,EAEf;AACD;"}
+{"version":3,"file":"CreatePersonCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/CreatePersonCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { PersonRow } from '../../queries'\nimport { InsertBuilder, Literal } from '@contember/database'\nimport { MaybePassword } from '../../dtos/Password'\nimport { normalizeEmail } from '../../utils/email'\n\nexport class CreatePersonCommand implements Command<Omit<PersonRow, 'roles'>> {\n\tconstructor(private readonly data: {\n\t\tidentityId: string\n\t\temail?: string\n\t\tname?: string\n\t\tpassword: MaybePassword\n\t\tidpOnly?: boolean\n\t}) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<Omit<PersonRow, 'roles'>> {\n\t\tconst id = providers.uuid()\n\n\t\tconst password_hash = await this.data.password.getHash(providers)\n\t\tconst email = this.data.email ? normalizeEmail(this.data.email) : null\n\t\tconst name = this.data.name ?? this.data.email?.split('@')[0] ?? null\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person')\n\t\t\t.values({\n\t\t\t\tid: id,\n\t\t\t\temail,\n\t\t\t\tname: name,\n\t\t\t\tpassword_hash,\n\t\t\t\tidentity_id: this.data.identityId,\n\t\t\t\tidp_only: this.data.idpOnly ?? false,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn {\n\t\t\tid,\n\t\t\temail,\n\t\t\tname,\n\t\t\tpassword_hash, identity_id:\n\t\t\tthis.data.identityId,\n\t\t\totp_uri: null,\n\t\t\totp_activated_at: null,\n\t\t\tdisabled_at: null,\n\t\t\tpasswordless_enabled: null,\n\t\t}\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";;AAMO,MAAM,oBAAiE;AAAA,EAC7E,YAA6B,MAM1B;AAN0B,SAAA,OAAA;AAAA,EAMzB;AAAA,EAEJ,MAAM,QAAQ,EAAE,IAAI,aAA8D;AAC3E,UAAA,KAAK,UAAU;AAErB,UAAM,gBAAgB,MAAM,KAAK,KAAK,SAAS,QAAQ,SAAS;AAC1D,UAAA,QAAQ,KAAK,KAAK,QAAQ,eAAe,KAAK,KAAK,KAAK,IAAI;AAC5D,UAAA,OAAO,KAAK,KAAK,QAAQ,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AACjE,UAAMA,gBAAc,OAAO,EACzB,KAAK,QAAQ,EACb,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,KAAK,KAAK;AAAA,MACvB,UAAU,KAAK,KAAK,WAAW;AAAA,IAAA,CAC/B,EACA,QAAQ,EAAE;AAEL,WAAA;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAAe,aACf,KAAK,KAAK;AAAA,MACV,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,aAAa;AAAA,MACb,sBAAsB;AAAA,IAAA;AAAA,EAExB;AACD;"}

package/dist/development/src/model/commands/person/TogglePersonPasswordlessCommand.cjs

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class TogglePersonPasswordlessCommand {
+  constructor(personId, value) {
+    this.personId = personId;
+    this.value = value;
+  }
+  async execute({ db }) {
+    await Database.UpdateBuilder.create().table("person").values({
+      passwordless_enabled: this.value
+    }).where({
+      id: this.personId
+    }).execute(db);
+  }
+}
+exports.TogglePersonPasswordlessCommand = TogglePersonPasswordlessCommand;
+//# sourceMappingURL=TogglePersonPasswordlessCommand.cjs.map

package/dist/development/src/model/commands/person/TogglePersonPasswordlessCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TogglePersonPasswordlessCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/TogglePersonPasswordlessCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class TogglePersonPasswordlessCommand implements Command<void> {\n\tconstructor(private readonly personId: string, private readonly value: boolean | null) { }\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('person')\n\t\t\t.values({\n\t\t\t\tpasswordless_enabled: this.value,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.personId,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAGO,MAAM,gCAAyD;AAAA,EACrE,YAA6B,UAAmC,OAAuB;AAA1D,SAAA,WAAA;AAAmC,SAAA,QAAA;AAAA,EAAyB;AAAA,EAEzF,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAMA,SAAAA,cAAc,OAAO,EACzB,MAAM,QAAQ,EACd,OAAO;AAAA,MACP,sBAAsB,KAAK;AAAA,IAC3B,CAAA,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/development/src/model/commands/person/TogglePersonPasswordlessCommand.js

@@ -0,0 +1,18 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class TogglePersonPasswordlessCommand {
+  constructor(personId, value) {
+    this.personId = personId;
+    this.value = value;
+  }
+  async execute({ db }) {
+    await UpdateBuilder$1.create().table("person").values({
+      passwordless_enabled: this.value
+    }).where({
+      id: this.personId
+    }).execute(db);
+  }
+}
+export {
+  TogglePersonPasswordlessCommand
+};
+//# sourceMappingURL=TogglePersonPasswordlessCommand.js.map

package/dist/development/src/model/commands/person/TogglePersonPasswordlessCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TogglePersonPasswordlessCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/TogglePersonPasswordlessCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class TogglePersonPasswordlessCommand implements Command<void> {\n\tconstructor(private readonly personId: string, private readonly value: boolean | null) { }\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('person')\n\t\t\t.values({\n\t\t\t\tpasswordless_enabled: this.value,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.personId,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";AAGO,MAAM,gCAAyD;AAAA,EACrE,YAA6B,UAAmC,OAAuB;AAA1D,SAAA,WAAA;AAAmC,SAAA,QAAA;AAAA,EAAyB;AAAA,EAEzF,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAMA,gBAAc,OAAO,EACzB,MAAM,QAAQ,EACd,OAAO;AAAA,MACP,sBAAsB,KAAK;AAAA,IAC3B,CAAA,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/development/src/model/commands/personToken/ActivateOtpCommand.cjs

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+const exceptions = require("../../../exceptions.cjs");
+class ActivateOtpCommand {
+  constructor(id, otpHash) {
+    this.id = id;
+    this.otpHash = otpHash;
+  }
+  async execute({ db, providers }) {
+    const count = await Database.UpdateBuilder.create().table("person_token").where({ id: this.id }).values({
+      otp_hash: this.otpHash
+    }).execute(db);
+    if (count === 0) {
+      throw new exceptions.ImplementationException();
+    }
+  }
+}
+exports.ActivateOtpCommand = ActivateOtpCommand;
+//# sourceMappingURL=ActivateOtpCommand.cjs.map

package/dist/development/src/model/commands/personToken/ActivateOtpCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivateOtpCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/ActivateOtpCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class ActivateOtpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t\tprivate readonly otpHash: string,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.values({\n\t\t\t\totp_hash: this.otpHash,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder","ImplementationException"],"mappings":";;;;AAIO,MAAM,mBAA4C;AAAA,EACxD,YACkB,IACA,SAChB;AAFgB,SAAA,KAAA;AACA,SAAA,UAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,QAAQ,MAAMA,SAAAA,cAAc,SAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,OAAO;AAAA,MACP,UAAU,KAAK;AAAA,IAAA,CACf,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAIC,WAAwB,wBAAA;AAAA,IACnC;AAAA,EACD;AACD;;"}

package/dist/development/src/model/commands/personToken/ActivateOtpCommand.js

@@ -0,0 +1,20 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+import { ImplementationException } from "../../../exceptions.js";
+class ActivateOtpCommand {
+  constructor(id, otpHash) {
+    this.id = id;
+    this.otpHash = otpHash;
+  }
+  async execute({ db, providers }) {
+    const count = await UpdateBuilder$1.create().table("person_token").where({ id: this.id }).values({
+      otp_hash: this.otpHash
+    }).execute(db);
+    if (count === 0) {
+      throw new ImplementationException();
+    }
+  }
+}
+export {
+  ActivateOtpCommand
+};
+//# sourceMappingURL=ActivateOtpCommand.js.map

package/dist/development/src/model/commands/personToken/ActivateOtpCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivateOtpCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/ActivateOtpCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class ActivateOtpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t\tprivate readonly otpHash: string,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.values({\n\t\t\t\totp_hash: this.otpHash,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;AAIO,MAAM,mBAA4C;AAAA,EACxD,YACkB,IACA,SAChB;AAFgB,SAAA,KAAA;AACA,SAAA,UAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,QAAQ,MAAMA,gBAAc,SAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,OAAO;AAAA,MACP,UAAU,KAAK;AAAA,IAAA,CACf,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAI,wBAAwB;AAAA,IACnC;AAAA,EACD;AACD;"}

package/dist/development/src/model/commands/personToken/CreatePersonTokenCommand.cjs

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("@contember/database");
+require("../../type/ApiKey.cjs");
+const SavePersonTokenCommand = require("./SavePersonTokenCommand.cjs");
+const expirations = require("../../consts/expirations.cjs");
+const tokenUtils = require("../../utils/tokenUtils.cjs");
+class CreatePersonTokenCommand {
+  constructor(personId, type, expirationMinutes) {
+    this.personId = personId;
+    this.type = type;
+    this.expirationMinutes = expirationMinutes;
+  }
+  static createPasswordResetRequest(personId, expirationMinutes = expirations.PASSWORD_RESET_EXPIRATION_MINUTES) {
+    return new CreatePersonTokenCommand(personId, "password_reset", expirationMinutes);
+  }
+  static createPasswordlessRequest(personId, expirationMinutes) {
+    return new CreatePersonTokenCommand(personId, "passwordless", expirationMinutes);
+  }
+  async execute({ db, providers, bus }) {
+    const token = await tokenUtils.generateToken(providers);
+    const tokenHash = tokenUtils.computeTokenHash(token);
+    const result = await bus.execute(new SavePersonTokenCommand.SavePersonTokenCommand(
+      this.personId,
+      tokenHash,
+      this.type,
+      this.expirationMinutes
+    ));
+    return { ...result, token };
+  }
+}
+exports.CreatePersonTokenCommand = CreatePersonTokenCommand;
+//# sourceMappingURL=CreatePersonTokenCommand.cjs.map

package/dist/development/src/model/commands/personToken/CreatePersonTokenCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreatePersonTokenCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/CreatePersonTokenCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { computeTokenHash, generateToken } from '../../utils'\nimport { SavePersonTokenCommand } from './SavePersonTokenCommand'\nimport { PersonToken } from '../../type'\nimport { PASSWORD_RESET_EXPIRATION_MINUTES } from '../../consts/expirations'\n\nexport class CreatePersonTokenCommand implements Command<CreatePersonTokenCommand.Result> {\n\tprivate constructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly type: PersonToken.Type,\n\t\tprivate readonly expirationMinutes: number,\n\t) {}\n\n\tstatic createPasswordResetRequest(personId: string, expirationMinutes: number = PASSWORD_RESET_EXPIRATION_MINUTES): CreatePersonTokenCommand {\n\t\treturn new CreatePersonTokenCommand(personId, 'password_reset', expirationMinutes)\n\t}\n\n\tstatic createPasswordlessRequest(personId: string, expirationMinutes: number): CreatePersonTokenCommand {\n\t\treturn new CreatePersonTokenCommand(personId, 'passwordless', expirationMinutes)\n\t}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<CreatePersonTokenCommand.Result> {\n\t\tconst token = await generateToken(providers)\n\t\tconst tokenHash = computeTokenHash(token)\n\t\tconst result = await bus.execute(new SavePersonTokenCommand(\n\t\t\tthis.personId,\n\t\t\ttokenHash,\n\t\t\tthis.type,\n\t\t\tthis.expirationMinutes,\n\t\t))\n\n\t\treturn { ...result, token }\n\t}\n}\n\nnamespace CreatePersonTokenCommand {\n\texport interface Result {\n\t\treadonly id: string\n\t\treadonly token: string\n\t\treadonly expiresAt: Date\n\t}\n}\n"],"names":["PASSWORD_RESET_EXPIRATION_MINUTES","generateToken","computeTokenHash","SavePersonTokenCommand"],"mappings":";;;;;;;AAMO,MAAM,yBAA6E;AAAA,EACjF,YACU,UACA,MACA,mBAChB;AAHgB,SAAA,WAAA;AACA,SAAA,OAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,OAAO,2BAA2B,UAAkB,oBAA4BA,+CAA6D;AAC5I,WAAO,IAAI,yBAAyB,UAAU,kBAAkB,iBAAiB;AAAA,EAClF;AAAA,EAEA,OAAO,0BAA0B,UAAkB,mBAAqD;AACvG,WAAO,IAAI,yBAAyB,UAAU,gBAAgB,iBAAiB;AAAA,EAChF;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,WAAW,OAA+D;AACvF,UAAA,QAAQ,MAAMC,yBAAc,SAAS;AACrC,UAAA,YAAYC,4BAAiB,KAAK;AACxC,UAAM,SAAS,MAAM,IAAI,QAAQ,IAAIC,uBAAA;AAAA,MACpC,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,IAAA,CACL;AAEM,WAAA,EAAE,GAAG,QAAQ;EACrB;AACD;;"}

package/dist/development/src/model/commands/personToken/CreatePersonTokenCommand.js

@@ -0,0 +1,33 @@
+import "@contember/database";
+import "../../type/ApiKey.js";
+import { SavePersonTokenCommand } from "./SavePersonTokenCommand.js";
+import { PASSWORD_RESET_EXPIRATION_MINUTES } from "../../consts/expirations.js";
+import { generateToken, computeTokenHash } from "../../utils/tokenUtils.js";
+class CreatePersonTokenCommand {
+  constructor(personId, type, expirationMinutes) {
+    this.personId = personId;
+    this.type = type;
+    this.expirationMinutes = expirationMinutes;
+  }
+  static createPasswordResetRequest(personId, expirationMinutes = PASSWORD_RESET_EXPIRATION_MINUTES) {
+    return new CreatePersonTokenCommand(personId, "password_reset", expirationMinutes);
+  }
+  static createPasswordlessRequest(personId, expirationMinutes) {
+    return new CreatePersonTokenCommand(personId, "passwordless", expirationMinutes);
+  }
+  async execute({ db, providers, bus }) {
+    const token = await generateToken(providers);
+    const tokenHash = computeTokenHash(token);
+    const result = await bus.execute(new SavePersonTokenCommand(
+      this.personId,
+      tokenHash,
+      this.type,
+      this.expirationMinutes
+    ));
+    return { ...result, token };
+  }
+}
+export {
+  CreatePersonTokenCommand
+};
+//# sourceMappingURL=CreatePersonTokenCommand.js.map

package/dist/development/src/model/commands/personToken/CreatePersonTokenCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreatePersonTokenCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/CreatePersonTokenCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { computeTokenHash, generateToken } from '../../utils'\nimport { SavePersonTokenCommand } from './SavePersonTokenCommand'\nimport { PersonToken } from '../../type'\nimport { PASSWORD_RESET_EXPIRATION_MINUTES } from '../../consts/expirations'\n\nexport class CreatePersonTokenCommand implements Command<CreatePersonTokenCommand.Result> {\n\tprivate constructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly type: PersonToken.Type,\n\t\tprivate readonly expirationMinutes: number,\n\t) {}\n\n\tstatic createPasswordResetRequest(personId: string, expirationMinutes: number = PASSWORD_RESET_EXPIRATION_MINUTES): CreatePersonTokenCommand {\n\t\treturn new CreatePersonTokenCommand(personId, 'password_reset', expirationMinutes)\n\t}\n\n\tstatic createPasswordlessRequest(personId: string, expirationMinutes: number): CreatePersonTokenCommand {\n\t\treturn new CreatePersonTokenCommand(personId, 'passwordless', expirationMinutes)\n\t}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<CreatePersonTokenCommand.Result> {\n\t\tconst token = await generateToken(providers)\n\t\tconst tokenHash = computeTokenHash(token)\n\t\tconst result = await bus.execute(new SavePersonTokenCommand(\n\t\t\tthis.personId,\n\t\t\ttokenHash,\n\t\t\tthis.type,\n\t\t\tthis.expirationMinutes,\n\t\t))\n\n\t\treturn { ...result, token }\n\t}\n}\n\nnamespace CreatePersonTokenCommand {\n\texport interface Result {\n\t\treadonly id: string\n\t\treadonly token: string\n\t\treadonly expiresAt: Date\n\t}\n}\n"],"names":[],"mappings":";;;;;AAMO,MAAM,yBAA6E;AAAA,EACjF,YACU,UACA,MACA,mBAChB;AAHgB,SAAA,WAAA;AACA,SAAA,OAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,OAAO,2BAA2B,UAAkB,oBAA4B,mCAA6D;AAC5I,WAAO,IAAI,yBAAyB,UAAU,kBAAkB,iBAAiB;AAAA,EAClF;AAAA,EAEA,OAAO,0BAA0B,UAAkB,mBAAqD;AACvG,WAAO,IAAI,yBAAyB,UAAU,gBAAgB,iBAAiB;AAAA,EAChF;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,WAAW,OAA+D;AACvF,UAAA,QAAQ,MAAM,cAAc,SAAS;AACrC,UAAA,YAAY,iBAAiB,KAAK;AACxC,UAAM,SAAS,MAAM,IAAI,QAAQ,IAAI;AAAA,MACpC,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,IAAA,CACL;AAEM,WAAA,EAAE,GAAG,QAAQ;EACrB;AACD;"}

package/dist/development/src/model/commands/personToken/IncreaseOtpAttemptCommand.cjs

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+const exceptions = require("../../../exceptions.cjs");
+class IncreaseOtpAttemptCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    const count = await Database.UpdateBuilder.create().table("person_token").where({ id: this.id }).values({
+      otp_attempts: new Database.Literal("otp_attempts + 1")
+    }).execute(db);
+    if (count === 0) {
+      throw new exceptions.ImplementationException();
+    }
+  }
+}
+exports.IncreaseOtpAttemptCommand = IncreaseOtpAttemptCommand;
+//# sourceMappingURL=IncreaseOtpAttemptCommand.cjs.map

package/dist/development/src/model/commands/personToken/IncreaseOtpAttemptCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"IncreaseOtpAttemptCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/IncreaseOtpAttemptCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { Literal, UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class IncreaseOtpAttemptCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.values({\n\t\t\t\totp_attempts: new Literal('otp_attempts + 1'),\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder","Literal","ImplementationException"],"mappings":";;;;AAIO,MAAM,0BAAmD;AAAA,EAC/D,YACkB,IAChB;AADgB,SAAA,KAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,QAAQ,MAAMA,SAAAA,cAAc,SAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,OAAO;AAAA,MACP,cAAc,IAAIC,SAAA,QAAQ,kBAAkB;AAAA,IAAA,CAC5C,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAIC,WAAwB,wBAAA;AAAA,IACnC;AAAA,EACD;AACD;;"}

package/dist/development/src/model/commands/personToken/IncreaseOtpAttemptCommand.js

@@ -0,0 +1,19 @@
+import { UpdateBuilder as UpdateBuilder$1, Literal } from "@contember/database";
+import { ImplementationException } from "../../../exceptions.js";
+class IncreaseOtpAttemptCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    const count = await UpdateBuilder$1.create().table("person_token").where({ id: this.id }).values({
+      otp_attempts: new Literal("otp_attempts + 1")
+    }).execute(db);
+    if (count === 0) {
+      throw new ImplementationException();
+    }
+  }
+}
+export {
+  IncreaseOtpAttemptCommand
+};
+//# sourceMappingURL=IncreaseOtpAttemptCommand.js.map

package/dist/development/src/model/commands/personToken/IncreaseOtpAttemptCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IncreaseOtpAttemptCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/IncreaseOtpAttemptCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { Literal, UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class IncreaseOtpAttemptCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.values({\n\t\t\t\totp_attempts: new Literal('otp_attempts + 1'),\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;AAIO,MAAM,0BAAmD;AAAA,EAC/D,YACkB,IAChB;AADgB,SAAA,KAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,QAAQ,MAAMA,gBAAc,SAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,OAAO;AAAA,MACP,cAAc,IAAI,QAAQ,kBAAkB;AAAA,IAAA,CAC5C,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAI,wBAAwB;AAAA,IACnC;AAAA,EACD;AACD;"}

package/dist/development/src/model/commands/personToken/InvalidateTokenCommand.cjs

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+const exceptions = require("../../../exceptions.cjs");
+class InvalidateTokenCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    const count = await Database.UpdateBuilder.create().table("person_token").where({ id: this.id }).where((expr) => expr.isNull("used_at")).values({
+      used_at: providers.now()
+    }).execute(db);
+    if (count === 0) {
+      throw new exceptions.ImplementationException();
+    }
+  }
+}
+exports.InvalidateTokenCommand = InvalidateTokenCommand;
+//# sourceMappingURL=InvalidateTokenCommand.cjs.map

package/dist/development/src/model/commands/personToken/InvalidateTokenCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvalidateTokenCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/InvalidateTokenCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class InvalidateTokenCommand implements Command<void> {\n\tconstructor(private readonly id: string) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.where(expr => expr.isNull('used_at'))\n\t\t\t.values({\n\t\t\t\tused_at: providers.now(),\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder","ImplementationException"],"mappings":";;;;AAIO,MAAM,uBAAgD;AAAA,EAC5D,YAA6B,IAAY;AAAZ,SAAA,KAAA;AAAA,EAAa;AAAA,EAE1C,MAAM,QAAQ,EAAE,IAAI,aAA0C;AACvD,UAAA,QAAQ,MAAMA,SAAAA,cAAc,OAAA,EAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,MAAM,CAAA,SAAQ,KAAK,OAAO,SAAS,CAAC,EACpC,OAAO;AAAA,MACP,SAAS,UAAU,IAAI;AAAA,IAAA,CACvB,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAIC,WAAwB,wBAAA;AAAA,IACnC;AAAA,EACD;AACD;;"}

package/dist/development/src/model/commands/personToken/InvalidateTokenCommand.js

@@ -0,0 +1,19 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+import { ImplementationException } from "../../../exceptions.js";
+class InvalidateTokenCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    const count = await UpdateBuilder$1.create().table("person_token").where({ id: this.id }).where((expr) => expr.isNull("used_at")).values({
+      used_at: providers.now()
+    }).execute(db);
+    if (count === 0) {
+      throw new ImplementationException();
+    }
+  }
+}
+export {
+  InvalidateTokenCommand
+};
+//# sourceMappingURL=InvalidateTokenCommand.js.map

package/dist/development/src/model/commands/personToken/InvalidateTokenCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvalidateTokenCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/InvalidateTokenCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class InvalidateTokenCommand implements Command<void> {\n\tconstructor(private readonly id: string) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.where(expr => expr.isNull('used_at'))\n\t\t\t.values({\n\t\t\t\tused_at: providers.now(),\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;AAIO,MAAM,uBAAgD;AAAA,EAC5D,YAA6B,IAAY;AAAZ,SAAA,KAAA;AAAA,EAAa;AAAA,EAE1C,MAAM,QAAQ,EAAE,IAAI,aAA0C;AACvD,UAAA,QAAQ,MAAMA,gBAAc,OAAA,EAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,MAAM,CAAA,SAAQ,KAAK,OAAO,SAAS,CAAC,EACpC,OAAO;AAAA,MACP,SAAS,UAAU,IAAI;AAAA,IAAA,CACvB,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAI,wBAAwB;AAAA,IACnC;AAAA,EACD;AACD;"}

package/dist/development/src/model/commands/personToken/ResetPasswordCommand.cjs

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const ChangePasswordCommand = require("../person/ChangePasswordCommand.cjs");
+const Response = require("../../utils/Response.cjs");
+const PersonTokenQuery = require("../../queries/personToken/PersonTokenQuery.cjs");
+const InvalidateTokenCommand = require("./InvalidateTokenCommand.cjs");
+require("@contember/database");
+require("../../type/ApiKey.cjs");
+const tokenUtils = require("../../utils/tokenUtils.cjs");
+class ResetPasswordCommand {
+  constructor(token, password) {
+    this.token = token;
+    this.password = password;
+  }
+  async execute({ db, providers, bus }) {
+    const now = providers.now();
+    const token = await db.createQueryHandler().fetch(PersonTokenQuery.PersonTokenQuery.byToken(this.token, "password_reset"));
+    const tokenValidationResult = tokenUtils.validateToken({ entry: token, token: this.token, now, validationType: "token" });
+    if (!tokenValidationResult.ok) {
+      return tokenValidationResult;
+    }
+    await bus.execute(new InvalidateTokenCommand.InvalidateTokenCommand(tokenValidationResult.result.id));
+    await bus.execute(new ChangePasswordCommand.ChangePasswordCommand(tokenValidationResult.result.person_id, this.password));
+    return new Response.ResponseOk(null);
+  }
+}
+exports.ResetPasswordCommand = ResetPasswordCommand;
+//# sourceMappingURL=ResetPasswordCommand.cjs.map

package/dist/development/src/model/commands/personToken/ResetPasswordCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetPasswordCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/ResetPasswordCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ChangePasswordCommand } from '../person/ChangePasswordCommand'\nimport { Response, ResponseOk } from '../../utils/Response'\nimport { PersonTokenQuery } from '../../queries/personToken/PersonTokenQuery'\nimport { InvalidateTokenCommand } from './InvalidateTokenCommand'\nimport { validateToken } from '../../utils'\nimport { PersonToken } from '../../type'\n\nexport class ResetPasswordCommand implements Command<ResetPasswordCommandResponse> {\n\tconstructor(private readonly token: string, private readonly password: string) {}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<ResetPasswordCommandResponse> {\n\t\tconst now = providers.now()\n\t\tconst token = await db.createQueryHandler().fetch(PersonTokenQuery.byToken(this.token, 'password_reset'))\n\t\tconst tokenValidationResult = validateToken({ entry: token, token: this.token, now, validationType: 'token' })\n\t\tif (!tokenValidationResult.ok) {\n\t\t\treturn tokenValidationResult\n\t\t}\n\t\tawait bus.execute(new InvalidateTokenCommand(tokenValidationResult.result.id))\n\t\tawait bus.execute(new ChangePasswordCommand(tokenValidationResult.result.person_id, this.password))\n\n\t\treturn new ResponseOk(null)\n\t}\n}\nexport type ResetPasswordCommandErrorCode =\n\t| PersonToken.TokenValidationError\n\nexport type ResetPasswordCommandResponse = Response<null, PersonToken.TokenValidationError>\n"],"names":["PersonTokenQuery","validateToken","InvalidateTokenCommand","ChangePasswordCommand","ResponseOk"],"mappings":";;;;;;;;;AAQO,MAAM,qBAAsE;AAAA,EAClF,YAA6B,OAAgC,UAAkB;AAAlD,SAAA,QAAA;AAAgC,SAAA,WAAA;AAAA,EAAmB;AAAA,EAEhF,MAAM,QAAQ,EAAE,IAAI,WAAW,OAA4D;AACpF,UAAA,MAAM,UAAU;AAChB,UAAA,QAAQ,MAAM,GAAG,mBAAmB,EAAE,MAAMA,kCAAiB,QAAQ,KAAK,OAAO,gBAAgB,CAAC;AAClG,UAAA,wBAAwBC,WAAAA,cAAc,EAAE,OAAO,OAAO,OAAO,KAAK,OAAO,KAAK,gBAAgB,QAAS,CAAA;AACzG,QAAA,CAAC,sBAAsB,IAAI;AACvB,aAAA;AAAA,IACR;AACA,UAAM,IAAI,QAAQ,IAAIC,uBAAAA,uBAAuB,sBAAsB,OAAO,EAAE,CAAC;AACvE,UAAA,IAAI,QAAQ,IAAIC,4CAAsB,sBAAsB,OAAO,WAAW,KAAK,QAAQ,CAAC;AAE3F,WAAA,IAAIC,SAAAA,WAAW,IAAI;AAAA,EAC3B;AACD;;"}