@contember/engine-tenant-api 2.0.0-alpha.14 → 2.0.0-alpha.16

package/dist/production/src/model/authorization/PermissionsFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionsFactory.js","sources":["../../../../../../packages/engine-tenant-api/src/model/authorization/PermissionsFactory.ts"],"sourcesContent":["import { Permissions } from '@contember/authorization'\nimport { PermissionActions } from './PermissionActions'\nimport { TenantRole } from './Roles'\n\nconst allowedRoles = new Set<string>([TenantRole.LOGIN, TenantRole.PROJECT_ADMIN, TenantRole.ENTRYPOINT_DEPLOYER])\n\nconst projectAdminAllowedInputRoles = ({ roles }: {roles?: readonly string[]}) => {\n\treturn roles === undefined || roles.every(it => allowedRoles.has(it))\n}\n\nconst forbiddenRoles = new Set<string>([TenantRole.SUPER_ADMIN, TenantRole.PROJECT_CREATOR])\n\nconst projectAdminUseRolesVerifier = ({ roles }: { roles?: readonly string[] }) => {\n\treturn roles === undefined || roles.every(it => !forbiddenRoles.has(it))\n}\n\nclass PermissionsFactory {\n\tpublic create(): Permissions {\n\t\tconst permissions = new Permissions()\n\n\t\tpermissions.allow(TenantRole.SUPER_ADMIN, { resource: Permissions.ALL, privilege: Permissions.ALL })\n\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_RESET_PASSWORD)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_CREATE_IDP_URL)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN_IDP)\n\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_VIEW)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PASSWORD)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PROFILE)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SIGN_OUT)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SETUP_OTP)\n\n\t\tpermissions.allow(TenantRole.PROJECT_MEMBER, PermissionActions.PROJECT_VIEW)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE_GLOBAL(), projectAdminAllowedInputRoles)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_SIGN_UP(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CREATE_SESSION_KEY(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_DISABLE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PROFILE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PASSWORD(), projectAdminUseRolesVerifier)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_ADD_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_UPDATE_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_REMOVE_MEMBER([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE_UNMANAGED([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_REMOVE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_UPDATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ENABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.ENTRYPOINT_DEPLOY)\n\n\t\tpermissions.allow(TenantRole.PROJECT_CREATOR, PermissionActions.PROJECT_CREATE)\n\t\tpermissions.allow(TenantRole.ENTRYPOINT_DEPLOYER, PermissionActions.ENTRYPOINT_DEPLOY)\n\n\t\treturn permissions\n\t}\n}\n\nexport { PermissionsFactory }\n"],"names":[],"mappings":";;;AAIA,MAAM,eAAmB,oBAAA,IAAY,CAAC,WAAW,OAAO,WAAW,eAAe,WAAW,mBAAmB,CAAC;AAEjH,MAAM,gCAAgC,CAAC,EAAE,YAAyC;AAC1E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,aAAa,IAAI,EAAE,CAAC;AACrE;AAEA,MAAM,qCAAqB,IAAY,CAAC,WAAW,aAAa,WAAW,eAAe,CAAC;AAE3F,MAAM,+BAA+B,CAAC,EAAE,YAA2C;AAC3E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,CAAC,eAAe,IAAI,EAAE,CAAC;AACxE;AAEA,MAAM,mBAAmB;AAAA,EACjB,SAAsB;AACtB,UAAA,cAAc,IAAI;AAEZ,gBAAA,MAAM,WAAW,aAAa,EAAE,UAAU,YAAY,KAAK,WAAW,YAAY,IAAK,CAAA;AAEnG,gBAAY,MAAM,WAAW,OAAO,kBAAkB,cAAc;AACpE,gBAAY,MAAM,WAAW,OAAO,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAM,WAAW,OAAO,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAM,WAAW,OAAO,kBAAkB,kBAAkB;AAExE,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,WAAW;AAClE,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,yBAAyB;AAChF,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,wBAAwB;AAC/E,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,eAAe;AACtE,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,gBAAgB;AAEvE,gBAAY,MAAM,WAAW,gBAAgB,kBAAkB,YAAY;AAE3E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,YAAY;AAC1E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,cAAc;AAC5E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAe;AAC7E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAA,GAAyB,6BAA6B;AAEpH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAA,GAAkB,6BAA6B;AAC7G,gBAAY,MAAM,WAAW,eAAe,kBAAkB,0BAAA,GAA6B,6BAA6B;AACxH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,6BAAA,GAAgC,6BAA6B;AAC3H,gBAAY,MAAM,WAAW,eAAe,kBAAkB,0BAAA,GAA6B,4BAA4B;AACvH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAA,GAAkB,4BAA4B;AAC5G,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAA,GAAyB,4BAA4B;AACnH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,uBAAA,GAA0B,4BAA4B;AAEpH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,oBAAoB,CAAE,CAAA,CAAC;AACrF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,mBAAmB,CAAE,CAAA,CAAC;AACpF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AACvF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AAEvF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,cAAc,CAAE,CAAA,CAAC;AAC/E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,wBAAwB,CAAE,CAAA,CAAC;AAEzF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,iBAAiB;AAC/E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,oBAAoB;AAClF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,kBAAkB;AAEhF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,OAAO;AACrE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,UAAU;AACxE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,WAAW;AACzE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,UAAU;AACxE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,QAAQ;AAEtE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,iBAAiB;AAE/E,gBAAY,MAAM,WAAW,iBAAiB,kBAAkB,cAAc;AAC9E,gBAAY,MAAM,WAAW,qBAAqB,kBAAkB,iBAAiB;AAE9E,WAAA;AAAA,EACR;AACD;"}
+{"version":3,"file":"PermissionsFactory.js","sources":["../../../../../../packages/engine-tenant-api/src/model/authorization/PermissionsFactory.ts"],"sourcesContent":["import { Permissions } from '@contember/authorization'\nimport { PermissionActions } from './PermissionActions'\nimport { TenantRole } from './Roles'\n\nconst allowedRoles = new Set<string>([TenantRole.LOGIN, TenantRole.PROJECT_ADMIN, TenantRole.ENTRYPOINT_DEPLOYER])\n\nconst projectAdminAllowedInputRoles = ({ roles }: {roles?: readonly string[]}) => {\n\treturn roles === undefined || roles.every(it => allowedRoles.has(it))\n}\n\nconst forbiddenRoles = new Set<string>([TenantRole.SUPER_ADMIN, TenantRole.PROJECT_CREATOR])\n\nconst projectAdminUseRolesVerifier = ({ roles }: { roles?: readonly string[] }) => {\n\treturn roles === undefined || roles.every(it => !forbiddenRoles.has(it))\n}\n\nclass PermissionsFactory {\n\tpublic create(): Permissions {\n\t\tconst permissions = new Permissions()\n\n\t\tpermissions.allow(TenantRole.SUPER_ADMIN, { resource: Permissions.ALL, privilege: Permissions.ALL })\n\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_RESET_PASSWORD)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_CREATE_IDP_URL)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_SIGN_IN_IDP)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_PASSWORDLESS_SIGN_IN)\n\t\tpermissions.allow(TenantRole.LOGIN, PermissionActions.PERSON_REQUEST_PASSWORDLESS_SIGN_IN)\n\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_VIEW)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PASSWORD)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_CHANGE_MY_PROFILE)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_TOGGLE_PASSWORDLESS)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SIGN_OUT)\n\t\tpermissions.allow(TenantRole.PERSON, PermissionActions.PERSON_SETUP_OTP)\n\n\t\tpermissions.allow(TenantRole.PROJECT_MEMBER, PermissionActions.PROJECT_VIEW)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.API_KEY_CREATE_GLOBAL(), projectAdminAllowedInputRoles)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_SIGN_UP(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(), projectAdminAllowedInputRoles)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CREATE_SESSION_KEY(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_DISABLE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PROFILE(), projectAdminUseRolesVerifier)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_CHANGE_PASSWORD(), projectAdminUseRolesVerifier)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_VIEW_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_ADD_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_UPDATE_MEMBER([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PROJECT_REMOVE_MEMBER([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE([]))\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.PERSON_INVITE_UNMANAGED([]))\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_REMOVE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.MAIL_TEMPLATE_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ADD)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_UPDATE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_DISABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_ENABLE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.IDP_LIST)\n\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.ENTRYPOINT_DEPLOY)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.CONFIGURE)\n\t\tpermissions.allow(TenantRole.PROJECT_ADMIN, PermissionActions.CONFIG_VIEW)\n\n\t\tpermissions.allow(TenantRole.PROJECT_CREATOR, PermissionActions.PROJECT_CREATE)\n\t\tpermissions.allow(TenantRole.ENTRYPOINT_DEPLOYER, PermissionActions.ENTRYPOINT_DEPLOY)\n\n\t\treturn permissions\n\t}\n}\n\nexport { PermissionsFactory }\n"],"names":[],"mappings":";;;AAIA,MAAM,eAAmB,oBAAA,IAAY,CAAC,WAAW,OAAO,WAAW,eAAe,WAAW,mBAAmB,CAAC;AAEjH,MAAM,gCAAgC,CAAC,EAAE,YAAyC;AAC1E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,aAAa,IAAI,EAAE,CAAC;AACrE;AAEA,MAAM,qCAAqB,IAAY,CAAC,WAAW,aAAa,WAAW,eAAe,CAAC;AAE3F,MAAM,+BAA+B,CAAC,EAAE,YAA2C;AAC3E,SAAA,UAAU,UAAa,MAAM,MAAM,QAAM,CAAC,eAAe,IAAI,EAAE,CAAC;AACxE;AAEA,MAAM,mBAAmB;AAAA,EACjB,SAAsB;AACtB,UAAA,cAAc,IAAI;AAEZ,gBAAA,MAAM,WAAW,aAAa,EAAE,UAAU,YAAY,KAAK,WAAW,YAAY,IAAK,CAAA;AAEnG,gBAAY,MAAM,WAAW,OAAO,kBAAkB,cAAc;AACpE,gBAAY,MAAM,WAAW,OAAO,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAM,WAAW,OAAO,kBAAkB,qBAAqB;AAC3E,gBAAY,MAAM,WAAW,OAAO,kBAAkB,kBAAkB;AACxE,gBAAY,MAAM,WAAW,OAAO,kBAAkB,2BAA2B;AACjF,gBAAY,MAAM,WAAW,OAAO,kBAAkB,mCAAmC;AAEzF,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,WAAW;AAClE,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,yBAAyB;AAChF,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,wBAAwB;AAC/E,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,0BAA0B;AACjF,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,eAAe;AACtE,gBAAY,MAAM,WAAW,QAAQ,kBAAkB,gBAAgB;AAEvE,gBAAY,MAAM,WAAW,gBAAgB,kBAAkB,YAAY;AAE3E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,YAAY;AAC1E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,cAAc;AAC5E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAe;AAC7E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAA,GAAyB,6BAA6B;AAEpH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAA,GAAkB,6BAA6B;AAC7G,gBAAY,MAAM,WAAW,eAAe,kBAAkB,0BAAA,GAA6B,6BAA6B;AACxH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,6BAAA,GAAgC,6BAA6B;AAC3H,gBAAY,MAAM,WAAW,eAAe,kBAAkB,0BAAA,GAA6B,4BAA4B;AACvH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,eAAA,GAAkB,4BAA4B;AAC5G,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAA,GAAyB,4BAA4B;AACnH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,uBAAA,GAA0B,4BAA4B;AAEpH,gBAAY,MAAM,WAAW,eAAe,kBAAkB,oBAAoB,CAAE,CAAA,CAAC;AACrF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,mBAAmB,CAAE,CAAA,CAAC;AACpF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AACvF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,sBAAsB,CAAE,CAAA,CAAC;AAEvF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,cAAc,CAAE,CAAA,CAAC;AAC/E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,wBAAwB,CAAE,CAAA,CAAC;AAEzF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,iBAAiB;AAC/E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,oBAAoB;AAClF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,kBAAkB;AAEhF,gBAAY,MAAM,WAAW,eAAe,kBAAkB,OAAO;AACrE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,UAAU;AACxE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,WAAW;AACzE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,UAAU;AACxE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,QAAQ;AAEtE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,iBAAiB;AAC/E,gBAAY,MAAM,WAAW,eAAe,kBAAkB,SAAS;AACvE,gBAAY,MAAM,WAAW,eAAe,kBAAkB,WAAW;AAEzE,gBAAY,MAAM,WAAW,iBAAiB,kBAAkB,cAAc;AAC9E,gBAAY,MAAM,WAAW,qBAAqB,kBAAkB,iBAAiB;AAE9E,WAAA;AAAA,EACR;AACD;"}

package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.cjs

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class UpdateConfigurationCommand {
+  constructor(configuration) {
+    this.configuration = configuration;
+  }
+  async execute({ db }) {
+    const result = await Database.UpdateBuilder.create().table("config").where({ id: "singleton" }).values({
+      passwordless_enabled: this.configuration.passwordless?.enabled,
+      passwordless_url: this.configuration.passwordless?.url,
+      passwordless_expiration_minutes: this.configuration.passwordless?.expirationMinutes
+    }).execute(db);
+    if (!result) {
+      throw new Error("Configuration not found");
+    }
+  }
+}
+exports.UpdateConfigurationCommand = UpdateConfigurationCommand;
+//# sourceMappingURL=UpdateConfigurationCommand.cjs.map

package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateConfigurationCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/configuration/UpdateConfigurationCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ConfigInput } from '../../../schema'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class UpdateConfigurationCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly configuration: ConfigInput,\n\t) {\n\t}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('config')\n\t\t\t.where({ id: 'singleton' })\n\t\t\t.values({\n\t\t\t\tpasswordless_enabled: this.configuration.passwordless?.enabled,\n\t\t\t\tpasswordless_url: this.configuration.passwordless?.url,\n\t\t\t\tpasswordless_expiration_minutes: this.configuration.passwordless?.expirationMinutes,\n\t\t\t})\n\t\t\t.execute(db)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\t}\n\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAIO,MAAM,2BAAoD;AAAA,EAChE,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,SAAS,MAAMA,SAAAA,cAAc,OAAA,EACjC,MAAM,QAAQ,EACd,MAAM,EAAE,IAAI,YAAa,CAAA,EACzB,OAAO;AAAA,MACP,sBAAsB,KAAK,cAAc,cAAc;AAAA,MACvD,kBAAkB,KAAK,cAAc,cAAc;AAAA,MACnD,iCAAiC,KAAK,cAAc,cAAc;AAAA,IAAA,CAClE,EACA,QAAQ,EAAE;AACZ,QAAI,CAAC,QAAQ;AACN,YAAA,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAAA,EACD;AAED;;"}

package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.js

@@ -0,0 +1,20 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class UpdateConfigurationCommand {
+  constructor(configuration) {
+    this.configuration = configuration;
+  }
+  async execute({ db }) {
+    const result = await UpdateBuilder$1.create().table("config").where({ id: "singleton" }).values({
+      passwordless_enabled: this.configuration.passwordless?.enabled,
+      passwordless_url: this.configuration.passwordless?.url,
+      passwordless_expiration_minutes: this.configuration.passwordless?.expirationMinutes
+    }).execute(db);
+    if (!result) {
+      throw new Error("Configuration not found");
+    }
+  }
+}
+export {
+  UpdateConfigurationCommand
+};
+//# sourceMappingURL=UpdateConfigurationCommand.js.map

package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateConfigurationCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/configuration/UpdateConfigurationCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ConfigInput } from '../../../schema'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class UpdateConfigurationCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly configuration: ConfigInput,\n\t) {\n\t}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('config')\n\t\t\t.where({ id: 'singleton' })\n\t\t\t.values({\n\t\t\t\tpasswordless_enabled: this.configuration.passwordless?.enabled,\n\t\t\t\tpasswordless_url: this.configuration.passwordless?.url,\n\t\t\t\tpasswordless_expiration_minutes: this.configuration.passwordless?.expirationMinutes,\n\t\t\t})\n\t\t\t.execute(db)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\t}\n\n}\n"],"names":["UpdateBuilder"],"mappings":";AAIO,MAAM,2BAAoD;AAAA,EAChE,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,SAAS,MAAMA,gBAAc,OAAA,EACjC,MAAM,QAAQ,EACd,MAAM,EAAE,IAAI,YAAa,CAAA,EACzB,OAAO;AAAA,MACP,sBAAsB,KAAK,cAAc,cAAc;AAAA,MACvD,kBAAkB,KAAK,cAAc,cAAc;AAAA,MACnD,iCAAiC,KAAK,cAAc,cAAc;AAAA,IAAA,CAClE,EACA,QAAQ,EAAE;AACZ,QAAI,CAAC,QAAQ;AACN,YAAA,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAAA,EACD;AAED;"}

package/dist/production/src/model/commands/person/CreatePersonCommand.cjs

@@ -27,7 +27,8 @@ class CreatePersonCommand {
       identity_id: this.data.identityId,
       otp_uri: null,
       otp_activated_at: null,
-      disabled_at: null
+      disabled_at: null,
+      passwordless_enabled: null
     };
   }
 }

package/dist/production/src/model/commands/person/CreatePersonCommand.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"CreatePersonCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/CreatePersonCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { PersonRow } from '../../queries'\nimport { InsertBuilder, Literal } from '@contember/database'\nimport { MaybePassword } from '../../dtos/Password'\nimport { normalizeEmail } from '../../utils/email'\n\nexport class CreatePersonCommand implements Command<Omit<PersonRow, 'roles'>> {\n\tconstructor(private readonly data: {\n\t\tidentityId: string\n\t\temail?: string\n\t\tname?: string\n\t\tpassword: MaybePassword\n\t\tidpOnly?: boolean\n\t}) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<Omit<PersonRow, 'roles'>> {\n\t\tconst id = providers.uuid()\n\n\t\tconst password_hash = await this.data.password.getHash(providers)\n\t\tconst email = this.data.email ? normalizeEmail(this.data.email) : null\n\t\tconst name = this.data.name ?? this.data.email?.split('@')[0] ?? null\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person')\n\t\t\t.values({\n\t\t\t\tid: id,\n\t\t\t\temail,\n\t\t\t\tname: name,\n\t\t\t\tpassword_hash,\n\t\t\t\tidentity_id: this.data.identityId,\n\t\t\t\tidp_only: this.data.idpOnly ?? false,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn {\n\t\t\tid,\n\t\t\temail,\n\t\t\tname,\n\t\t\tpassword_hash, identity_id:\n\t\t\tthis.data.identityId,\n\t\t\totp_uri: null,\n\t\t\totp_activated_at: null,\n\t\t\tdisabled_at: null,\n\t\t}\n\t}\n}\n"],"names":["email","normalizeEmail","InsertBuilder"],"mappings":";;;;AAMO,MAAM,oBAAiE;AAAA,EAC7E,YAA6B,MAM1B;AAN0B,SAAA,OAAA;AAAA,EAMzB;AAAA,EAEJ,MAAM,QAAQ,EAAE,IAAI,aAA8D;AAC3E,UAAA,KAAK,UAAU;AAErB,UAAM,gBAAgB,MAAM,KAAK,KAAK,SAAS,QAAQ,SAAS;AAC1D,UAAAA,UAAQ,KAAK,KAAK,QAAQC,qBAAe,KAAK,KAAK,KAAK,IAAI;AAC5D,UAAA,OAAO,KAAK,KAAK,QAAQ,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AACjE,UAAMC,SAAAA,cAAc,OAAO,EACzB,KAAK,QAAQ,EACb,OAAO;AAAA,MACP;AAAA,MAAA,OACAF;AAAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,KAAK,KAAK;AAAA,MACvB,UAAU,KAAK,KAAK,WAAW;AAAA,IAAA,CAC/B,EACA,QAAQ,EAAE;AAEL,WAAA;AAAA,MACN;AAAA,MAAA,OACAA;AAAAA,MACA;AAAA,MACA;AAAA,MAAe,aACf,KAAK,KAAK;AAAA,MACV,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,aAAa;AAAA,IAAA;AAAA,EAEf;AACD;;"}
+{"version":3,"file":"CreatePersonCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/CreatePersonCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { PersonRow } from '../../queries'\nimport { InsertBuilder, Literal } from '@contember/database'\nimport { MaybePassword } from '../../dtos/Password'\nimport { normalizeEmail } from '../../utils/email'\n\nexport class CreatePersonCommand implements Command<Omit<PersonRow, 'roles'>> {\n\tconstructor(private readonly data: {\n\t\tidentityId: string\n\t\temail?: string\n\t\tname?: string\n\t\tpassword: MaybePassword\n\t\tidpOnly?: boolean\n\t}) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<Omit<PersonRow, 'roles'>> {\n\t\tconst id = providers.uuid()\n\n\t\tconst password_hash = await this.data.password.getHash(providers)\n\t\tconst email = this.data.email ? normalizeEmail(this.data.email) : null\n\t\tconst name = this.data.name ?? this.data.email?.split('@')[0] ?? null\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person')\n\t\t\t.values({\n\t\t\t\tid: id,\n\t\t\t\temail,\n\t\t\t\tname: name,\n\t\t\t\tpassword_hash,\n\t\t\t\tidentity_id: this.data.identityId,\n\t\t\t\tidp_only: this.data.idpOnly ?? false,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn {\n\t\t\tid,\n\t\t\temail,\n\t\t\tname,\n\t\t\tpassword_hash, identity_id:\n\t\t\tthis.data.identityId,\n\t\t\totp_uri: null,\n\t\t\totp_activated_at: null,\n\t\t\tdisabled_at: null,\n\t\t\tpasswordless_enabled: null,\n\t\t}\n\t}\n}\n"],"names":["email","normalizeEmail","InsertBuilder"],"mappings":";;;;AAMO,MAAM,oBAAiE;AAAA,EAC7E,YAA6B,MAM1B;AAN0B,SAAA,OAAA;AAAA,EAMzB;AAAA,EAEJ,MAAM,QAAQ,EAAE,IAAI,aAA8D;AAC3E,UAAA,KAAK,UAAU;AAErB,UAAM,gBAAgB,MAAM,KAAK,KAAK,SAAS,QAAQ,SAAS;AAC1D,UAAAA,UAAQ,KAAK,KAAK,QAAQC,qBAAe,KAAK,KAAK,KAAK,IAAI;AAC5D,UAAA,OAAO,KAAK,KAAK,QAAQ,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AACjE,UAAMC,SAAAA,cAAc,OAAO,EACzB,KAAK,QAAQ,EACb,OAAO;AAAA,MACP;AAAA,MAAA,OACAF;AAAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,KAAK,KAAK;AAAA,MACvB,UAAU,KAAK,KAAK,WAAW;AAAA,IAAA,CAC/B,EACA,QAAQ,EAAE;AAEL,WAAA;AAAA,MACN;AAAA,MAAA,OACAA;AAAAA,MACA;AAAA,MACA;AAAA,MAAe,aACf,KAAK,KAAK;AAAA,MACV,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,aAAa;AAAA,MACb,sBAAsB;AAAA,IAAA;AAAA,EAExB;AACD;;"}

package/dist/production/src/model/commands/person/CreatePersonCommand.js

@@ -25,7 +25,8 @@ class CreatePersonCommand {
       identity_id: this.data.identityId,
       otp_uri: null,
       otp_activated_at: null,
-      disabled_at: null
+      disabled_at: null,
+      passwordless_enabled: null
     };
   }
 }

package/dist/production/src/model/commands/person/CreatePersonCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"CreatePersonCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/CreatePersonCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { PersonRow } from '../../queries'\nimport { InsertBuilder, Literal } from '@contember/database'\nimport { MaybePassword } from '../../dtos/Password'\nimport { normalizeEmail } from '../../utils/email'\n\nexport class CreatePersonCommand implements Command<Omit<PersonRow, 'roles'>> {\n\tconstructor(private readonly data: {\n\t\tidentityId: string\n\t\temail?: string\n\t\tname?: string\n\t\tpassword: MaybePassword\n\t\tidpOnly?: boolean\n\t}) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<Omit<PersonRow, 'roles'>> {\n\t\tconst id = providers.uuid()\n\n\t\tconst password_hash = await this.data.password.getHash(providers)\n\t\tconst email = this.data.email ? normalizeEmail(this.data.email) : null\n\t\tconst name = this.data.name ?? this.data.email?.split('@')[0] ?? null\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person')\n\t\t\t.values({\n\t\t\t\tid: id,\n\t\t\t\temail,\n\t\t\t\tname: name,\n\t\t\t\tpassword_hash,\n\t\t\t\tidentity_id: this.data.identityId,\n\t\t\t\tidp_only: this.data.idpOnly ?? false,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn {\n\t\t\tid,\n\t\t\temail,\n\t\t\tname,\n\t\t\tpassword_hash, identity_id:\n\t\t\tthis.data.identityId,\n\t\t\totp_uri: null,\n\t\t\totp_activated_at: null,\n\t\t\tdisabled_at: null,\n\t\t}\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";;AAMO,MAAM,oBAAiE;AAAA,EAC7E,YAA6B,MAM1B;AAN0B,SAAA,OAAA;AAAA,EAMzB;AAAA,EAEJ,MAAM,QAAQ,EAAE,IAAI,aAA8D;AAC3E,UAAA,KAAK,UAAU;AAErB,UAAM,gBAAgB,MAAM,KAAK,KAAK,SAAS,QAAQ,SAAS;AAC1D,UAAA,QAAQ,KAAK,KAAK,QAAQ,eAAe,KAAK,KAAK,KAAK,IAAI;AAC5D,UAAA,OAAO,KAAK,KAAK,QAAQ,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AACjE,UAAMA,gBAAc,OAAO,EACzB,KAAK,QAAQ,EACb,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,KAAK,KAAK;AAAA,MACvB,UAAU,KAAK,KAAK,WAAW;AAAA,IAAA,CAC/B,EACA,QAAQ,EAAE;AAEL,WAAA;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAAe,aACf,KAAK,KAAK;AAAA,MACV,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,aAAa;AAAA,IAAA;AAAA,EAEf;AACD;"}
+{"version":3,"file":"CreatePersonCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/CreatePersonCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { PersonRow } from '../../queries'\nimport { InsertBuilder, Literal } from '@contember/database'\nimport { MaybePassword } from '../../dtos/Password'\nimport { normalizeEmail } from '../../utils/email'\n\nexport class CreatePersonCommand implements Command<Omit<PersonRow, 'roles'>> {\n\tconstructor(private readonly data: {\n\t\tidentityId: string\n\t\temail?: string\n\t\tname?: string\n\t\tpassword: MaybePassword\n\t\tidpOnly?: boolean\n\t}) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<Omit<PersonRow, 'roles'>> {\n\t\tconst id = providers.uuid()\n\n\t\tconst password_hash = await this.data.password.getHash(providers)\n\t\tconst email = this.data.email ? normalizeEmail(this.data.email) : null\n\t\tconst name = this.data.name ?? this.data.email?.split('@')[0] ?? null\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person')\n\t\t\t.values({\n\t\t\t\tid: id,\n\t\t\t\temail,\n\t\t\t\tname: name,\n\t\t\t\tpassword_hash,\n\t\t\t\tidentity_id: this.data.identityId,\n\t\t\t\tidp_only: this.data.idpOnly ?? false,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn {\n\t\t\tid,\n\t\t\temail,\n\t\t\tname,\n\t\t\tpassword_hash, identity_id:\n\t\t\tthis.data.identityId,\n\t\t\totp_uri: null,\n\t\t\totp_activated_at: null,\n\t\t\tdisabled_at: null,\n\t\t\tpasswordless_enabled: null,\n\t\t}\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";;AAMO,MAAM,oBAAiE;AAAA,EAC7E,YAA6B,MAM1B;AAN0B,SAAA,OAAA;AAAA,EAMzB;AAAA,EAEJ,MAAM,QAAQ,EAAE,IAAI,aAA8D;AAC3E,UAAA,KAAK,UAAU;AAErB,UAAM,gBAAgB,MAAM,KAAK,KAAK,SAAS,QAAQ,SAAS;AAC1D,UAAA,QAAQ,KAAK,KAAK,QAAQ,eAAe,KAAK,KAAK,KAAK,IAAI;AAC5D,UAAA,OAAO,KAAK,KAAK,QAAQ,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,KAAK;AACjE,UAAMA,gBAAc,OAAO,EACzB,KAAK,QAAQ,EACb,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,KAAK,KAAK;AAAA,MACvB,UAAU,KAAK,KAAK,WAAW;AAAA,IAAA,CAC/B,EACA,QAAQ,EAAE;AAEL,WAAA;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAAe,aACf,KAAK,KAAK;AAAA,MACV,SAAS;AAAA,MACT,kBAAkB;AAAA,MAClB,aAAa;AAAA,MACb,sBAAsB;AAAA,IAAA;AAAA,EAExB;AACD;"}

package/dist/production/src/model/commands/person/TogglePersonPasswordlessCommand.cjs

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class TogglePersonPasswordlessCommand {
+  constructor(personId, value) {
+    this.personId = personId;
+    this.value = value;
+  }
+  async execute({ db }) {
+    await Database.UpdateBuilder.create().table("person").values({
+      passwordless_enabled: this.value
+    }).where({
+      id: this.personId
+    }).execute(db);
+  }
+}
+exports.TogglePersonPasswordlessCommand = TogglePersonPasswordlessCommand;
+//# sourceMappingURL=TogglePersonPasswordlessCommand.cjs.map

package/dist/production/src/model/commands/person/TogglePersonPasswordlessCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TogglePersonPasswordlessCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/TogglePersonPasswordlessCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class TogglePersonPasswordlessCommand implements Command<void> {\n\tconstructor(private readonly personId: string, private readonly value: boolean | null) { }\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('person')\n\t\t\t.values({\n\t\t\t\tpasswordless_enabled: this.value,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.personId,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAGO,MAAM,gCAAyD;AAAA,EACrE,YAA6B,UAAmC,OAAuB;AAA1D,SAAA,WAAA;AAAmC,SAAA,QAAA;AAAA,EAAyB;AAAA,EAEzF,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAMA,SAAAA,cAAc,OAAO,EACzB,MAAM,QAAQ,EACd,OAAO;AAAA,MACP,sBAAsB,KAAK;AAAA,IAC3B,CAAA,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/production/src/model/commands/person/TogglePersonPasswordlessCommand.js

@@ -0,0 +1,18 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class TogglePersonPasswordlessCommand {
+  constructor(personId, value) {
+    this.personId = personId;
+    this.value = value;
+  }
+  async execute({ db }) {
+    await UpdateBuilder$1.create().table("person").values({
+      passwordless_enabled: this.value
+    }).where({
+      id: this.personId
+    }).execute(db);
+  }
+}
+export {
+  TogglePersonPasswordlessCommand
+};
+//# sourceMappingURL=TogglePersonPasswordlessCommand.js.map

package/dist/production/src/model/commands/person/TogglePersonPasswordlessCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TogglePersonPasswordlessCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/TogglePersonPasswordlessCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class TogglePersonPasswordlessCommand implements Command<void> {\n\tconstructor(private readonly personId: string, private readonly value: boolean | null) { }\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('person')\n\t\t\t.values({\n\t\t\t\tpasswordless_enabled: this.value,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.personId,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";AAGO,MAAM,gCAAyD;AAAA,EACrE,YAA6B,UAAmC,OAAuB;AAA1D,SAAA,WAAA;AAAmC,SAAA,QAAA;AAAA,EAAyB;AAAA,EAEzF,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAMA,gBAAc,OAAO,EACzB,MAAM,QAAQ,EACd,OAAO;AAAA,MACP,sBAAsB,KAAK;AAAA,IAC3B,CAAA,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/production/src/model/commands/personToken/ActivateOtpCommand.cjs

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+const exceptions = require("../../../exceptions.cjs");
+class ActivateOtpCommand {
+  constructor(id, otpHash) {
+    this.id = id;
+    this.otpHash = otpHash;
+  }
+  async execute({ db, providers }) {
+    const count = await Database.UpdateBuilder.create().table("person_token").where({ id: this.id }).values({
+      otp_hash: this.otpHash
+    }).execute(db);
+    if (count === 0) {
+      throw new exceptions.ImplementationException();
+    }
+  }
+}
+exports.ActivateOtpCommand = ActivateOtpCommand;
+//# sourceMappingURL=ActivateOtpCommand.cjs.map

package/dist/production/src/model/commands/personToken/ActivateOtpCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivateOtpCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/ActivateOtpCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class ActivateOtpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t\tprivate readonly otpHash: string,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.values({\n\t\t\t\totp_hash: this.otpHash,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder","ImplementationException"],"mappings":";;;;AAIO,MAAM,mBAA4C;AAAA,EACxD,YACkB,IACA,SAChB;AAFgB,SAAA,KAAA;AACA,SAAA,UAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,QAAQ,MAAMA,SAAAA,cAAc,SAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,OAAO;AAAA,MACP,UAAU,KAAK;AAAA,IAAA,CACf,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAIC,WAAwB,wBAAA;AAAA,IACnC;AAAA,EACD;AACD;;"}

package/dist/production/src/model/commands/personToken/ActivateOtpCommand.js

@@ -0,0 +1,20 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+import { ImplementationException } from "../../../exceptions.js";
+class ActivateOtpCommand {
+  constructor(id, otpHash) {
+    this.id = id;
+    this.otpHash = otpHash;
+  }
+  async execute({ db, providers }) {
+    const count = await UpdateBuilder$1.create().table("person_token").where({ id: this.id }).values({
+      otp_hash: this.otpHash
+    }).execute(db);
+    if (count === 0) {
+      throw new ImplementationException();
+    }
+  }
+}
+export {
+  ActivateOtpCommand
+};
+//# sourceMappingURL=ActivateOtpCommand.js.map

package/dist/production/src/model/commands/personToken/ActivateOtpCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivateOtpCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/ActivateOtpCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class ActivateOtpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t\tprivate readonly otpHash: string,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.values({\n\t\t\t\totp_hash: this.otpHash,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;AAIO,MAAM,mBAA4C;AAAA,EACxD,YACkB,IACA,SAChB;AAFgB,SAAA,KAAA;AACA,SAAA,UAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,QAAQ,MAAMA,gBAAc,SAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,OAAO;AAAA,MACP,UAAU,KAAK;AAAA,IAAA,CACf,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAI,wBAAwB;AAAA,IACnC;AAAA,EACD;AACD;"}

package/dist/production/src/model/commands/personToken/CreatePersonTokenCommand.cjs

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("@contember/database");
+require("../../type/ApiKey.cjs");
+const SavePersonTokenCommand = require("./SavePersonTokenCommand.cjs");
+const expirations = require("../../consts/expirations.cjs");
+const tokenUtils = require("../../utils/tokenUtils.cjs");
+class CreatePersonTokenCommand {
+  constructor(personId, type, expirationMinutes) {
+    this.personId = personId;
+    this.type = type;
+    this.expirationMinutes = expirationMinutes;
+  }
+  static createPasswordResetRequest(personId, expirationMinutes = expirations.PASSWORD_RESET_EXPIRATION_MINUTES) {
+    return new CreatePersonTokenCommand(personId, "password_reset", expirationMinutes);
+  }
+  static createPasswordlessRequest(personId, expirationMinutes) {
+    return new CreatePersonTokenCommand(personId, "passwordless", expirationMinutes);
+  }
+  async execute({ db, providers, bus }) {
+    const token = await tokenUtils.generateToken(providers);
+    const tokenHash = tokenUtils.computeTokenHash(token);
+    const result = await bus.execute(new SavePersonTokenCommand.SavePersonTokenCommand(
+      this.personId,
+      tokenHash,
+      this.type,
+      this.expirationMinutes
+    ));
+    return { ...result, token };
+  }
+}
+exports.CreatePersonTokenCommand = CreatePersonTokenCommand;
+//# sourceMappingURL=CreatePersonTokenCommand.cjs.map

package/dist/production/src/model/commands/personToken/CreatePersonTokenCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreatePersonTokenCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/CreatePersonTokenCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { computeTokenHash, generateToken } from '../../utils'\nimport { SavePersonTokenCommand } from './SavePersonTokenCommand'\nimport { PersonToken } from '../../type'\nimport { PASSWORD_RESET_EXPIRATION_MINUTES } from '../../consts/expirations'\n\nexport class CreatePersonTokenCommand implements Command<CreatePersonTokenCommand.Result> {\n\tprivate constructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly type: PersonToken.Type,\n\t\tprivate readonly expirationMinutes: number,\n\t) {}\n\n\tstatic createPasswordResetRequest(personId: string, expirationMinutes: number = PASSWORD_RESET_EXPIRATION_MINUTES): CreatePersonTokenCommand {\n\t\treturn new CreatePersonTokenCommand(personId, 'password_reset', expirationMinutes)\n\t}\n\n\tstatic createPasswordlessRequest(personId: string, expirationMinutes: number): CreatePersonTokenCommand {\n\t\treturn new CreatePersonTokenCommand(personId, 'passwordless', expirationMinutes)\n\t}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<CreatePersonTokenCommand.Result> {\n\t\tconst token = await generateToken(providers)\n\t\tconst tokenHash = computeTokenHash(token)\n\t\tconst result = await bus.execute(new SavePersonTokenCommand(\n\t\t\tthis.personId,\n\t\t\ttokenHash,\n\t\t\tthis.type,\n\t\t\tthis.expirationMinutes,\n\t\t))\n\n\t\treturn { ...result, token }\n\t}\n}\n\nnamespace CreatePersonTokenCommand {\n\texport interface Result {\n\t\treadonly id: string\n\t\treadonly token: string\n\t\treadonly expiresAt: Date\n\t}\n}\n"],"names":["PASSWORD_RESET_EXPIRATION_MINUTES","generateToken","computeTokenHash","SavePersonTokenCommand"],"mappings":";;;;;;;AAMO,MAAM,yBAA6E;AAAA,EACjF,YACU,UACA,MACA,mBAChB;AAHgB,SAAA,WAAA;AACA,SAAA,OAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,OAAO,2BAA2B,UAAkB,oBAA4BA,+CAA6D;AAC5I,WAAO,IAAI,yBAAyB,UAAU,kBAAkB,iBAAiB;AAAA,EAClF;AAAA,EAEA,OAAO,0BAA0B,UAAkB,mBAAqD;AACvG,WAAO,IAAI,yBAAyB,UAAU,gBAAgB,iBAAiB;AAAA,EAChF;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,WAAW,OAA+D;AACvF,UAAA,QAAQ,MAAMC,yBAAc,SAAS;AACrC,UAAA,YAAYC,4BAAiB,KAAK;AACxC,UAAM,SAAS,MAAM,IAAI,QAAQ,IAAIC,uBAAA;AAAA,MACpC,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,IAAA,CACL;AAEM,WAAA,EAAE,GAAG,QAAQ;EACrB;AACD;;"}

package/dist/production/src/model/commands/personToken/CreatePersonTokenCommand.js

@@ -0,0 +1,33 @@
+import "@contember/database";
+import "../../type/ApiKey.js";
+import { SavePersonTokenCommand } from "./SavePersonTokenCommand.js";
+import { PASSWORD_RESET_EXPIRATION_MINUTES } from "../../consts/expirations.js";
+import { generateToken, computeTokenHash } from "../../utils/tokenUtils.js";
+class CreatePersonTokenCommand {
+  constructor(personId, type, expirationMinutes) {
+    this.personId = personId;
+    this.type = type;
+    this.expirationMinutes = expirationMinutes;
+  }
+  static createPasswordResetRequest(personId, expirationMinutes = PASSWORD_RESET_EXPIRATION_MINUTES) {
+    return new CreatePersonTokenCommand(personId, "password_reset", expirationMinutes);
+  }
+  static createPasswordlessRequest(personId, expirationMinutes) {
+    return new CreatePersonTokenCommand(personId, "passwordless", expirationMinutes);
+  }
+  async execute({ db, providers, bus }) {
+    const token = await generateToken(providers);
+    const tokenHash = computeTokenHash(token);
+    const result = await bus.execute(new SavePersonTokenCommand(
+      this.personId,
+      tokenHash,
+      this.type,
+      this.expirationMinutes
+    ));
+    return { ...result, token };
+  }
+}
+export {
+  CreatePersonTokenCommand
+};
+//# sourceMappingURL=CreatePersonTokenCommand.js.map

package/dist/production/src/model/commands/personToken/CreatePersonTokenCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreatePersonTokenCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/CreatePersonTokenCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { computeTokenHash, generateToken } from '../../utils'\nimport { SavePersonTokenCommand } from './SavePersonTokenCommand'\nimport { PersonToken } from '../../type'\nimport { PASSWORD_RESET_EXPIRATION_MINUTES } from '../../consts/expirations'\n\nexport class CreatePersonTokenCommand implements Command<CreatePersonTokenCommand.Result> {\n\tprivate constructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly type: PersonToken.Type,\n\t\tprivate readonly expirationMinutes: number,\n\t) {}\n\n\tstatic createPasswordResetRequest(personId: string, expirationMinutes: number = PASSWORD_RESET_EXPIRATION_MINUTES): CreatePersonTokenCommand {\n\t\treturn new CreatePersonTokenCommand(personId, 'password_reset', expirationMinutes)\n\t}\n\n\tstatic createPasswordlessRequest(personId: string, expirationMinutes: number): CreatePersonTokenCommand {\n\t\treturn new CreatePersonTokenCommand(personId, 'passwordless', expirationMinutes)\n\t}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<CreatePersonTokenCommand.Result> {\n\t\tconst token = await generateToken(providers)\n\t\tconst tokenHash = computeTokenHash(token)\n\t\tconst result = await bus.execute(new SavePersonTokenCommand(\n\t\t\tthis.personId,\n\t\t\ttokenHash,\n\t\t\tthis.type,\n\t\t\tthis.expirationMinutes,\n\t\t))\n\n\t\treturn { ...result, token }\n\t}\n}\n\nnamespace CreatePersonTokenCommand {\n\texport interface Result {\n\t\treadonly id: string\n\t\treadonly token: string\n\t\treadonly expiresAt: Date\n\t}\n}\n"],"names":[],"mappings":";;;;;AAMO,MAAM,yBAA6E;AAAA,EACjF,YACU,UACA,MACA,mBAChB;AAHgB,SAAA,WAAA;AACA,SAAA,OAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,OAAO,2BAA2B,UAAkB,oBAA4B,mCAA6D;AAC5I,WAAO,IAAI,yBAAyB,UAAU,kBAAkB,iBAAiB;AAAA,EAClF;AAAA,EAEA,OAAO,0BAA0B,UAAkB,mBAAqD;AACvG,WAAO,IAAI,yBAAyB,UAAU,gBAAgB,iBAAiB;AAAA,EAChF;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,WAAW,OAA+D;AACvF,UAAA,QAAQ,MAAM,cAAc,SAAS;AACrC,UAAA,YAAY,iBAAiB,KAAK;AACxC,UAAM,SAAS,MAAM,IAAI,QAAQ,IAAI;AAAA,MACpC,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,IAAA,CACL;AAEM,WAAA,EAAE,GAAG,QAAQ;EACrB;AACD;"}

package/dist/production/src/model/commands/personToken/IncreaseOtpAttemptCommand.cjs

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+const exceptions = require("../../../exceptions.cjs");
+class IncreaseOtpAttemptCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    const count = await Database.UpdateBuilder.create().table("person_token").where({ id: this.id }).values({
+      otp_attempts: new Database.Literal("otp_attempts + 1")
+    }).execute(db);
+    if (count === 0) {
+      throw new exceptions.ImplementationException();
+    }
+  }
+}
+exports.IncreaseOtpAttemptCommand = IncreaseOtpAttemptCommand;
+//# sourceMappingURL=IncreaseOtpAttemptCommand.cjs.map

package/dist/production/src/model/commands/personToken/IncreaseOtpAttemptCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"IncreaseOtpAttemptCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/IncreaseOtpAttemptCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { Literal, UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class IncreaseOtpAttemptCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.values({\n\t\t\t\totp_attempts: new Literal('otp_attempts + 1'),\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder","Literal","ImplementationException"],"mappings":";;;;AAIO,MAAM,0BAAmD;AAAA,EAC/D,YACkB,IAChB;AADgB,SAAA,KAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,QAAQ,MAAMA,SAAAA,cAAc,SAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,OAAO;AAAA,MACP,cAAc,IAAIC,SAAA,QAAQ,kBAAkB;AAAA,IAAA,CAC5C,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAIC,WAAwB,wBAAA;AAAA,IACnC;AAAA,EACD;AACD;;"}

package/dist/production/src/model/commands/personToken/IncreaseOtpAttemptCommand.js

@@ -0,0 +1,19 @@
+import { UpdateBuilder as UpdateBuilder$1, Literal } from "@contember/database";
+import { ImplementationException } from "../../../exceptions.js";
+class IncreaseOtpAttemptCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    const count = await UpdateBuilder$1.create().table("person_token").where({ id: this.id }).values({
+      otp_attempts: new Literal("otp_attempts + 1")
+    }).execute(db);
+    if (count === 0) {
+      throw new ImplementationException();
+    }
+  }
+}
+export {
+  IncreaseOtpAttemptCommand
+};
+//# sourceMappingURL=IncreaseOtpAttemptCommand.js.map

package/dist/production/src/model/commands/personToken/IncreaseOtpAttemptCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IncreaseOtpAttemptCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/IncreaseOtpAttemptCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { Literal, UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class IncreaseOtpAttemptCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly id: string,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.values({\n\t\t\t\totp_attempts: new Literal('otp_attempts + 1'),\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;AAIO,MAAM,0BAAmD;AAAA,EAC/D,YACkB,IAChB;AADgB,SAAA,KAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,QAAQ,MAAMA,gBAAc,SAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,OAAO;AAAA,MACP,cAAc,IAAI,QAAQ,kBAAkB;AAAA,IAAA,CAC5C,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAI,wBAAwB;AAAA,IACnC;AAAA,EACD;AACD;"}

package/dist/production/src/model/commands/personToken/InvalidateTokenCommand.cjs

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+const exceptions = require("../../../exceptions.cjs");
+class InvalidateTokenCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    const count = await Database.UpdateBuilder.create().table("person_token").where({ id: this.id }).where((expr) => expr.isNull("used_at")).values({
+      used_at: providers.now()
+    }).execute(db);
+    if (count === 0) {
+      throw new exceptions.ImplementationException();
+    }
+  }
+}
+exports.InvalidateTokenCommand = InvalidateTokenCommand;
+//# sourceMappingURL=InvalidateTokenCommand.cjs.map

package/dist/production/src/model/commands/personToken/InvalidateTokenCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvalidateTokenCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/InvalidateTokenCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class InvalidateTokenCommand implements Command<void> {\n\tconstructor(private readonly id: string) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.where(expr => expr.isNull('used_at'))\n\t\t\t.values({\n\t\t\t\tused_at: providers.now(),\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder","ImplementationException"],"mappings":";;;;AAIO,MAAM,uBAAgD;AAAA,EAC5D,YAA6B,IAAY;AAAZ,SAAA,KAAA;AAAA,EAAa;AAAA,EAE1C,MAAM,QAAQ,EAAE,IAAI,aAA0C;AACvD,UAAA,QAAQ,MAAMA,SAAAA,cAAc,OAAA,EAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,MAAM,CAAA,SAAQ,KAAK,OAAO,SAAS,CAAC,EACpC,OAAO;AAAA,MACP,SAAS,UAAU,IAAI;AAAA,IAAA,CACvB,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAIC,WAAwB,wBAAA;AAAA,IACnC;AAAA,EACD;AACD;;"}

package/dist/production/src/model/commands/personToken/InvalidateTokenCommand.js

@@ -0,0 +1,19 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+import { ImplementationException } from "../../../exceptions.js";
+class InvalidateTokenCommand {
+  constructor(id) {
+    this.id = id;
+  }
+  async execute({ db, providers }) {
+    const count = await UpdateBuilder$1.create().table("person_token").where({ id: this.id }).where((expr) => expr.isNull("used_at")).values({
+      used_at: providers.now()
+    }).execute(db);
+    if (count === 0) {
+      throw new ImplementationException();
+    }
+  }
+}
+export {
+  InvalidateTokenCommand
+};
+//# sourceMappingURL=InvalidateTokenCommand.js.map

package/dist/production/src/model/commands/personToken/InvalidateTokenCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvalidateTokenCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/InvalidateTokenCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { UpdateBuilder } from '@contember/database'\nimport { ImplementationException } from '../../../exceptions'\n\nexport class InvalidateTokenCommand implements Command<void> {\n\tconstructor(private readonly id: string) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst count = await UpdateBuilder.create()\n\t\t\t.table('person_token')\n\t\t\t.where({ id: this.id })\n\t\t\t.where(expr => expr.isNull('used_at'))\n\t\t\t.values({\n\t\t\t\tused_at: providers.now(),\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\tif (count === 0) {\n\t\t\tthrow new ImplementationException()\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;AAIO,MAAM,uBAAgD;AAAA,EAC5D,YAA6B,IAAY;AAAZ,SAAA,KAAA;AAAA,EAAa;AAAA,EAE1C,MAAM,QAAQ,EAAE,IAAI,aAA0C;AACvD,UAAA,QAAQ,MAAMA,gBAAc,OAAA,EAChC,MAAM,cAAc,EACpB,MAAM,EAAE,IAAI,KAAK,GAAI,CAAA,EACrB,MAAM,CAAA,SAAQ,KAAK,OAAO,SAAS,CAAC,EACpC,OAAO;AAAA,MACP,SAAS,UAAU,IAAI;AAAA,IAAA,CACvB,EACA,QAAQ,EAAE;AAEZ,QAAI,UAAU,GAAG;AAChB,YAAM,IAAI,wBAAwB;AAAA,IACnC;AAAA,EACD;AACD;"}

package/dist/production/src/model/commands/personToken/ResetPasswordCommand.cjs

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const ChangePasswordCommand = require("../person/ChangePasswordCommand.cjs");
+const Response = require("../../utils/Response.cjs");
+const PersonTokenQuery = require("../../queries/personToken/PersonTokenQuery.cjs");
+const InvalidateTokenCommand = require("./InvalidateTokenCommand.cjs");
+require("@contember/database");
+require("../../type/ApiKey.cjs");
+const tokenUtils = require("../../utils/tokenUtils.cjs");
+class ResetPasswordCommand {
+  constructor(token, password) {
+    this.token = token;
+    this.password = password;
+  }
+  async execute({ db, providers, bus }) {
+    const now = providers.now();
+    const token = await db.createQueryHandler().fetch(PersonTokenQuery.PersonTokenQuery.byToken(this.token, "password_reset"));
+    const tokenValidationResult = tokenUtils.validateToken({ entry: token, token: this.token, now, validationType: "token" });
+    if (!tokenValidationResult.ok) {
+      return tokenValidationResult;
+    }
+    await bus.execute(new InvalidateTokenCommand.InvalidateTokenCommand(tokenValidationResult.result.id));
+    await bus.execute(new ChangePasswordCommand.ChangePasswordCommand(tokenValidationResult.result.person_id, this.password));
+    return new Response.ResponseOk(null);
+  }
+}
+exports.ResetPasswordCommand = ResetPasswordCommand;
+//# sourceMappingURL=ResetPasswordCommand.cjs.map

package/dist/production/src/model/commands/personToken/ResetPasswordCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetPasswordCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/ResetPasswordCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ChangePasswordCommand } from '../person/ChangePasswordCommand'\nimport { Response, ResponseOk } from '../../utils/Response'\nimport { PersonTokenQuery } from '../../queries/personToken/PersonTokenQuery'\nimport { InvalidateTokenCommand } from './InvalidateTokenCommand'\nimport { validateToken } from '../../utils'\nimport { PersonToken } from '../../type'\n\nexport class ResetPasswordCommand implements Command<ResetPasswordCommandResponse> {\n\tconstructor(private readonly token: string, private readonly password: string) {}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<ResetPasswordCommandResponse> {\n\t\tconst now = providers.now()\n\t\tconst token = await db.createQueryHandler().fetch(PersonTokenQuery.byToken(this.token, 'password_reset'))\n\t\tconst tokenValidationResult = validateToken({ entry: token, token: this.token, now, validationType: 'token' })\n\t\tif (!tokenValidationResult.ok) {\n\t\t\treturn tokenValidationResult\n\t\t}\n\t\tawait bus.execute(new InvalidateTokenCommand(tokenValidationResult.result.id))\n\t\tawait bus.execute(new ChangePasswordCommand(tokenValidationResult.result.person_id, this.password))\n\n\t\treturn new ResponseOk(null)\n\t}\n}\nexport type ResetPasswordCommandErrorCode =\n\t| PersonToken.TokenValidationError\n\nexport type ResetPasswordCommandResponse = Response<null, PersonToken.TokenValidationError>\n"],"names":["PersonTokenQuery","validateToken","InvalidateTokenCommand","ChangePasswordCommand","ResponseOk"],"mappings":";;;;;;;;;AAQO,MAAM,qBAAsE;AAAA,EAClF,YAA6B,OAAgC,UAAkB;AAAlD,SAAA,QAAA;AAAgC,SAAA,WAAA;AAAA,EAAmB;AAAA,EAEhF,MAAM,QAAQ,EAAE,IAAI,WAAW,OAA4D;AACpF,UAAA,MAAM,UAAU;AAChB,UAAA,QAAQ,MAAM,GAAG,mBAAmB,EAAE,MAAMA,kCAAiB,QAAQ,KAAK,OAAO,gBAAgB,CAAC;AAClG,UAAA,wBAAwBC,WAAAA,cAAc,EAAE,OAAO,OAAO,OAAO,KAAK,OAAO,KAAK,gBAAgB,QAAS,CAAA;AACzG,QAAA,CAAC,sBAAsB,IAAI;AACvB,aAAA;AAAA,IACR;AACA,UAAM,IAAI,QAAQ,IAAIC,uBAAAA,uBAAuB,sBAAsB,OAAO,EAAE,CAAC;AACvE,UAAA,IAAI,QAAQ,IAAIC,4CAAsB,sBAAsB,OAAO,WAAW,KAAK,QAAQ,CAAC;AAE3F,WAAA,IAAIC,SAAAA,WAAW,IAAI;AAAA,EAC3B;AACD;;"}

package/dist/production/src/model/commands/personToken/ResetPasswordCommand.js

@@ -0,0 +1,28 @@
+import { ChangePasswordCommand } from "../person/ChangePasswordCommand.js";
+import { ResponseOk } from "../../utils/Response.js";
+import { PersonTokenQuery } from "../../queries/personToken/PersonTokenQuery.js";
+import { InvalidateTokenCommand } from "./InvalidateTokenCommand.js";
+import "@contember/database";
+import "../../type/ApiKey.js";
+import { validateToken } from "../../utils/tokenUtils.js";
+class ResetPasswordCommand {
+  constructor(token, password) {
+    this.token = token;
+    this.password = password;
+  }
+  async execute({ db, providers, bus }) {
+    const now = providers.now();
+    const token = await db.createQueryHandler().fetch(PersonTokenQuery.byToken(this.token, "password_reset"));
+    const tokenValidationResult = validateToken({ entry: token, token: this.token, now, validationType: "token" });
+    if (!tokenValidationResult.ok) {
+      return tokenValidationResult;
+    }
+    await bus.execute(new InvalidateTokenCommand(tokenValidationResult.result.id));
+    await bus.execute(new ChangePasswordCommand(tokenValidationResult.result.person_id, this.password));
+    return new ResponseOk(null);
+  }
+}
+export {
+  ResetPasswordCommand
+};
+//# sourceMappingURL=ResetPasswordCommand.js.map

package/dist/production/src/model/commands/personToken/ResetPasswordCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResetPasswordCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/ResetPasswordCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { ChangePasswordCommand } from '../person/ChangePasswordCommand'\nimport { Response, ResponseOk } from '../../utils/Response'\nimport { PersonTokenQuery } from '../../queries/personToken/PersonTokenQuery'\nimport { InvalidateTokenCommand } from './InvalidateTokenCommand'\nimport { validateToken } from '../../utils'\nimport { PersonToken } from '../../type'\n\nexport class ResetPasswordCommand implements Command<ResetPasswordCommandResponse> {\n\tconstructor(private readonly token: string, private readonly password: string) {}\n\n\tasync execute({ db, providers, bus }: Command.Args): Promise<ResetPasswordCommandResponse> {\n\t\tconst now = providers.now()\n\t\tconst token = await db.createQueryHandler().fetch(PersonTokenQuery.byToken(this.token, 'password_reset'))\n\t\tconst tokenValidationResult = validateToken({ entry: token, token: this.token, now, validationType: 'token' })\n\t\tif (!tokenValidationResult.ok) {\n\t\t\treturn tokenValidationResult\n\t\t}\n\t\tawait bus.execute(new InvalidateTokenCommand(tokenValidationResult.result.id))\n\t\tawait bus.execute(new ChangePasswordCommand(tokenValidationResult.result.person_id, this.password))\n\n\t\treturn new ResponseOk(null)\n\t}\n}\nexport type ResetPasswordCommandErrorCode =\n\t| PersonToken.TokenValidationError\n\nexport type ResetPasswordCommandResponse = Response<null, PersonToken.TokenValidationError>\n"],"names":[],"mappings":";;;;;;;AAQO,MAAM,qBAAsE;AAAA,EAClF,YAA6B,OAAgC,UAAkB;AAAlD,SAAA,QAAA;AAAgC,SAAA,WAAA;AAAA,EAAmB;AAAA,EAEhF,MAAM,QAAQ,EAAE,IAAI,WAAW,OAA4D;AACpF,UAAA,MAAM,UAAU;AAChB,UAAA,QAAQ,MAAM,GAAG,mBAAmB,EAAE,MAAM,iBAAiB,QAAQ,KAAK,OAAO,gBAAgB,CAAC;AAClG,UAAA,wBAAwB,cAAc,EAAE,OAAO,OAAO,OAAO,KAAK,OAAO,KAAK,gBAAgB,QAAS,CAAA;AACzG,QAAA,CAAC,sBAAsB,IAAI;AACvB,aAAA;AAAA,IACR;AACA,UAAM,IAAI,QAAQ,IAAI,uBAAuB,sBAAsB,OAAO,EAAE,CAAC;AACvE,UAAA,IAAI,QAAQ,IAAI,sBAAsB,sBAAsB,OAAO,WAAW,KAAK,QAAQ,CAAC;AAE3F,WAAA,IAAI,WAAW,IAAI;AAAA,EAC3B;AACD;"}

package/dist/production/src/model/commands/personToken/SavePersonTokenCommand.cjs

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+const time = require("../../utils/time.cjs");
+class SavePersonTokenCommand {
+  constructor(personId, tokenHash, type, expirationMinutes) {
+    this.personId = personId;
+    this.tokenHash = tokenHash;
+    this.type = type;
+    this.expirationMinutes = expirationMinutes;
+  }
+  async execute({ db, providers }) {
+    const id = providers.uuid();
+    const expiresAt = time.plusMinutes(providers.now(), this.expirationMinutes);
+    await Database.InsertBuilder.create().into("person_token").values({
+      id,
+      token_hash: this.tokenHash,
+      person_id: this.personId,
+      expires_at: expiresAt,
+      created_at: providers.now(),
+      used_at: null,
+      type: this.type
+    }).execute(db);
+    return { id, expiresAt };
+  }
+}
+exports.SavePersonTokenCommand = SavePersonTokenCommand;
+//# sourceMappingURL=SavePersonTokenCommand.cjs.map

package/dist/production/src/model/commands/personToken/SavePersonTokenCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"SavePersonTokenCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/SavePersonTokenCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { InsertBuilder } from '@contember/database'\nimport { plusMinutes } from '../../utils/time'\nimport { TokenHash } from '../../utils'\nimport { PersonToken } from '../../type'\n\nclass SavePersonTokenCommand implements Command<SavePersonTokenCommand.Result> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly tokenHash: TokenHash,\n\t\tprivate readonly type: PersonToken.Type,\n\t\tprivate readonly expirationMinutes: number,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<SavePersonTokenCommand.Result> {\n\t\tconst id = providers.uuid()\n\t\tconst expiresAt = plusMinutes(providers.now(), this.expirationMinutes)\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person_token')\n\t\t\t.values({\n\t\t\t\tid: id,\n\t\t\t\ttoken_hash: this.tokenHash,\n\t\t\t\tperson_id: this.personId,\n\t\t\t\texpires_at: expiresAt,\n\t\t\t\tcreated_at: providers.now(),\n\t\t\t\tused_at: null,\n\t\t\t\ttype: this.type,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn { id, expiresAt }\n\t}\n}\n\nnamespace SavePersonTokenCommand {\n\texport interface Result {\n\t\tid: string\n\t\texpiresAt: Date\n\t}\n}\n\nexport { SavePersonTokenCommand }\n"],"names":["plusMinutes","InsertBuilder"],"mappings":";;;;AAMA,MAAM,uBAAyE;AAAA,EAC9E,YACkB,UACA,WACA,MACA,mBAChB;AAJgB,SAAA,WAAA;AACA,SAAA,YAAA;AACA,SAAA,OAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAAmE;AAChF,UAAA,KAAK,UAAU;AACrB,UAAM,YAAYA,KAAAA,YAAY,UAAU,IAAI,GAAG,KAAK,iBAAiB;AACrE,UAAMC,SAAAA,cAAc,OAAO,EACzB,KAAK,cAAc,EACnB,OAAO;AAAA,MACP;AAAA,MACA,YAAY,KAAK;AAAA,MACjB,WAAW,KAAK;AAAA,MAChB,YAAY;AAAA,MACZ,YAAY,UAAU,IAAI;AAAA,MAC1B,SAAS;AAAA,MACT,MAAM,KAAK;AAAA,IAAA,CACX,EACA,QAAQ,EAAE;AAEL,WAAA,EAAE,IAAI;EACd;AACD;;"}

package/dist/production/src/model/commands/personToken/SavePersonTokenCommand.js

@@ -0,0 +1,28 @@
+import { InsertBuilder as InsertBuilder$1 } from "@contember/database";
+import { plusMinutes } from "../../utils/time.js";
+class SavePersonTokenCommand {
+  constructor(personId, tokenHash, type, expirationMinutes) {
+    this.personId = personId;
+    this.tokenHash = tokenHash;
+    this.type = type;
+    this.expirationMinutes = expirationMinutes;
+  }
+  async execute({ db, providers }) {
+    const id = providers.uuid();
+    const expiresAt = plusMinutes(providers.now(), this.expirationMinutes);
+    await InsertBuilder$1.create().into("person_token").values({
+      id,
+      token_hash: this.tokenHash,
+      person_id: this.personId,
+      expires_at: expiresAt,
+      created_at: providers.now(),
+      used_at: null,
+      type: this.type
+    }).execute(db);
+    return { id, expiresAt };
+  }
+}
+export {
+  SavePersonTokenCommand
+};
+//# sourceMappingURL=SavePersonTokenCommand.js.map

package/dist/production/src/model/commands/personToken/SavePersonTokenCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SavePersonTokenCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/personToken/SavePersonTokenCommand.ts"],"sourcesContent":["import { Command } from '../Command'\nimport { InsertBuilder } from '@contember/database'\nimport { plusMinutes } from '../../utils/time'\nimport { TokenHash } from '../../utils'\nimport { PersonToken } from '../../type'\n\nclass SavePersonTokenCommand implements Command<SavePersonTokenCommand.Result> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t\tprivate readonly tokenHash: TokenHash,\n\t\tprivate readonly type: PersonToken.Type,\n\t\tprivate readonly expirationMinutes: number,\n\t) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<SavePersonTokenCommand.Result> {\n\t\tconst id = providers.uuid()\n\t\tconst expiresAt = plusMinutes(providers.now(), this.expirationMinutes)\n\t\tawait InsertBuilder.create()\n\t\t\t.into('person_token')\n\t\t\t.values({\n\t\t\t\tid: id,\n\t\t\t\ttoken_hash: this.tokenHash,\n\t\t\t\tperson_id: this.personId,\n\t\t\t\texpires_at: expiresAt,\n\t\t\t\tcreated_at: providers.now(),\n\t\t\t\tused_at: null,\n\t\t\t\ttype: this.type,\n\t\t\t})\n\t\t\t.execute(db)\n\n\t\treturn { id, expiresAt }\n\t}\n}\n\nnamespace SavePersonTokenCommand {\n\texport interface Result {\n\t\tid: string\n\t\texpiresAt: Date\n\t}\n}\n\nexport { SavePersonTokenCommand }\n"],"names":["InsertBuilder"],"mappings":";;AAMA,MAAM,uBAAyE;AAAA,EAC9E,YACkB,UACA,WACA,MACA,mBAChB;AAJgB,SAAA,WAAA;AACA,SAAA,YAAA;AACA,SAAA,OAAA;AACA,SAAA,oBAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,aAAmE;AAChF,UAAA,KAAK,UAAU;AACrB,UAAM,YAAY,YAAY,UAAU,IAAI,GAAG,KAAK,iBAAiB;AACrE,UAAMA,gBAAc,OAAO,EACzB,KAAK,cAAc,EACnB,OAAO;AAAA,MACP;AAAA,MACA,YAAY,KAAK;AAAA,MACjB,WAAW,KAAK;AAAA,MAChB,YAAY;AAAA,MACZ,YAAY,UAAU,IAAI;AAAA,MAC1B,SAAS;AAAA,MACT,MAAM,KAAK;AAAA,IAAA,CACX,EACA,QAAQ,EAAE;AAEL,WAAA,EAAE,IAAI;EACd;AACD;"}

package/dist/production/src/model/consts/expirations.cjs

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const PASSWORD_RESET_EXPIRATION_MINUTES = 60;
+const INVITATION_RESET_TOKEN_EXPIRATION_MINUTES = 60 * 24;
+exports.INVITATION_RESET_TOKEN_EXPIRATION_MINUTES = INVITATION_RESET_TOKEN_EXPIRATION_MINUTES;
+exports.PASSWORD_RESET_EXPIRATION_MINUTES = PASSWORD_RESET_EXPIRATION_MINUTES;
+//# sourceMappingURL=expirations.cjs.map

package/dist/production/src/model/consts/expirations.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"expirations.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/consts/expirations.ts"],"sourcesContent":["export const PASSWORD_RESET_EXPIRATION_MINUTES = 60\nexport const INVITATION_RESET_TOKEN_EXPIRATION_MINUTES = 60 * 24\n"],"names":[],"mappings":";;AAAO,MAAM,oCAAoC;AAC1C,MAAM,4CAA4C,KAAK;;;"}

package/dist/production/src/model/consts/expirations.js

@@ -0,0 +1,7 @@
+const PASSWORD_RESET_EXPIRATION_MINUTES = 60;
+const INVITATION_RESET_TOKEN_EXPIRATION_MINUTES = 60 * 24;
+export {
+  INVITATION_RESET_TOKEN_EXPIRATION_MINUTES,
+  PASSWORD_RESET_EXPIRATION_MINUTES
+};
+//# sourceMappingURL=expirations.js.map

package/dist/production/src/model/consts/expirations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expirations.js","sources":["../../../../../../packages/engine-tenant-api/src/model/consts/expirations.ts"],"sourcesContent":["export const PASSWORD_RESET_EXPIRATION_MINUTES = 60\nexport const INVITATION_RESET_TOKEN_EXPIRATION_MINUTES = 60 * 24\n"],"names":[],"mappings":"AAAO,MAAM,oCAAoC;AAC1C,MAAM,4CAA4C,KAAK;"}