@contember/engine-tenant-api 2.0.0-alpha.9 → 2.0.0-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1150) hide show
  1. package/dist/development/index.cjs +18 -6
  2. package/dist/development/index.cjs.map +1 -1
  3. package/dist/development/index.js +20 -8
  4. package/dist/development/index.js.map +1 -1
  5. package/dist/development/src/TenantContainer.cjs +7 -1
  6. package/dist/development/src/TenantContainer.cjs.map +1 -1
  7. package/dist/development/src/TenantContainer.js +7 -1
  8. package/dist/development/src/TenantContainer.js.map +1 -1
  9. package/dist/development/src/bridges/system/IdentityFetcher.cjs.map +1 -1
  10. package/dist/development/src/bridges/system/IdentityFetcher.js.map +1 -1
  11. package/dist/development/src/exceptions.cjs.map +1 -1
  12. package/dist/development/src/exceptions.js.map +1 -1
  13. package/dist/development/src/migrations/2024-08-26-120000-passwordless.cjs +31 -0
  14. package/dist/development/src/migrations/2024-08-26-120000-passwordless.cjs.map +1 -0
  15. package/dist/development/src/migrations/2024-08-26-120000-passwordless.js +32 -0
  16. package/dist/development/src/migrations/2024-08-26-120000-passwordless.js.map +1 -0
  17. package/dist/development/src/migrations/runner.cjs +3 -1
  18. package/dist/development/src/migrations/runner.cjs.map +1 -1
  19. package/dist/development/src/migrations/runner.js +3 -1
  20. package/dist/development/src/migrations/runner.js.map +1 -1
  21. package/dist/development/src/migrations/snapshot.cjs +33 -5
  22. package/dist/development/src/migrations/snapshot.cjs.map +1 -1
  23. package/dist/development/src/migrations/snapshot.js +33 -5
  24. package/dist/development/src/migrations/snapshot.js.map +1 -1
  25. package/dist/development/src/migrations/tenantCredentials.cjs.map +1 -1
  26. package/dist/development/src/migrations/tenantCredentials.js.map +1 -1
  27. package/dist/development/src/model/authorization/AclSchemaAccessNodeFactory.cjs.map +1 -1
  28. package/dist/development/src/model/authorization/AclSchemaAccessNodeFactory.js.map +1 -1
  29. package/dist/development/src/model/authorization/DirectPermissionsAccessNode.cjs.map +1 -1
  30. package/dist/development/src/model/authorization/DirectPermissionsAccessNode.js.map +1 -1
  31. package/dist/development/src/model/authorization/Identity.cjs.map +1 -1
  32. package/dist/development/src/model/authorization/Identity.js.map +1 -1
  33. package/dist/development/src/model/authorization/IdentityFactory.cjs.map +1 -1
  34. package/dist/development/src/model/authorization/IdentityFactory.js.map +1 -1
  35. package/dist/development/src/model/authorization/IdentityScope.cjs.map +1 -1
  36. package/dist/development/src/model/authorization/IdentityScope.js.map +1 -1
  37. package/dist/development/src/model/authorization/MembershipMatcher.cjs.map +1 -1
  38. package/dist/development/src/model/authorization/MembershipMatcher.js.map +1 -1
  39. package/dist/development/src/model/authorization/PermissionActions.cjs +5 -0
  40. package/dist/development/src/model/authorization/PermissionActions.cjs.map +1 -1
  41. package/dist/development/src/model/authorization/PermissionActions.js +5 -0
  42. package/dist/development/src/model/authorization/PermissionActions.js.map +1 -1
  43. package/dist/development/src/model/authorization/PermissionContext.cjs.map +1 -1
  44. package/dist/development/src/model/authorization/PermissionContext.js.map +1 -1
  45. package/dist/development/src/model/authorization/PermissionContextFactory.cjs.map +1 -1
  46. package/dist/development/src/model/authorization/PermissionContextFactory.js.map +1 -1
  47. package/dist/development/src/model/authorization/PermissionsFactory.cjs +5 -0
  48. package/dist/development/src/model/authorization/PermissionsFactory.cjs.map +1 -1
  49. package/dist/development/src/model/authorization/PermissionsFactory.js +5 -0
  50. package/dist/development/src/model/authorization/PermissionsFactory.js.map +1 -1
  51. package/dist/development/src/model/authorization/ProjectScope.cjs.map +1 -1
  52. package/dist/development/src/model/authorization/ProjectScope.js.map +1 -1
  53. package/dist/development/src/model/authorization/ProjectScopeFactory.cjs.map +1 -1
  54. package/dist/development/src/model/authorization/ProjectScopeFactory.js.map +1 -1
  55. package/dist/development/src/model/commands/CommandBus.cjs.map +1 -1
  56. package/dist/development/src/model/commands/CommandBus.js.map +1 -1
  57. package/dist/development/src/model/commands/apiKey/ApiKeyHelper.cjs.map +1 -1
  58. package/dist/development/src/model/commands/apiKey/ApiKeyHelper.js.map +1 -1
  59. package/dist/development/src/model/commands/apiKey/CreateApiKeyCommand.cjs.map +1 -1
  60. package/dist/development/src/model/commands/apiKey/CreateApiKeyCommand.js.map +1 -1
  61. package/dist/development/src/model/commands/apiKey/DisableApiKeyCommand.cjs.map +1 -1
  62. package/dist/development/src/model/commands/apiKey/DisableApiKeyCommand.js.map +1 -1
  63. package/dist/development/src/model/commands/apiKey/DisableIdentityApiKeysCommand.cjs.map +1 -1
  64. package/dist/development/src/model/commands/apiKey/DisableIdentityApiKeysCommand.js.map +1 -1
  65. package/dist/development/src/model/commands/apiKey/DisableOneOffApiKeyCommand.cjs.map +1 -1
  66. package/dist/development/src/model/commands/apiKey/DisableOneOffApiKeyCommand.js.map +1 -1
  67. package/dist/development/src/model/commands/apiKey/ProlongApiKeyCommand.cjs.map +1 -1
  68. package/dist/development/src/model/commands/apiKey/ProlongApiKeyCommand.js.map +1 -1
  69. package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.cjs +20 -0
  70. package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.cjs.map +1 -0
  71. package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.js +20 -0
  72. package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.js.map +1 -0
  73. package/dist/development/src/model/commands/identity/CreateIdentityCommand.cjs.map +1 -1
  74. package/dist/development/src/model/commands/identity/CreateIdentityCommand.js.map +1 -1
  75. package/dist/development/src/model/commands/identity/PatchIdentityGlobalRoles.cjs.map +1 -1
  76. package/dist/development/src/model/commands/identity/PatchIdentityGlobalRoles.js.map +1 -1
  77. package/dist/development/src/model/commands/idp/CreateIdpCommand.cjs.map +1 -1
  78. package/dist/development/src/model/commands/idp/CreateIdpCommand.js.map +1 -1
  79. package/dist/development/src/model/commands/idp/DisableIdpCommand.cjs.map +1 -1
  80. package/dist/development/src/model/commands/idp/DisableIdpCommand.js.map +1 -1
  81. package/dist/development/src/model/commands/idp/EnableIdpCommand.cjs.map +1 -1
  82. package/dist/development/src/model/commands/idp/EnableIdpCommand.js.map +1 -1
  83. package/dist/development/src/model/commands/idp/UpdateIdpCommand.cjs.map +1 -1
  84. package/dist/development/src/model/commands/idp/UpdateIdpCommand.js.map +1 -1
  85. package/dist/development/src/model/commands/mailTemplate/AddMailTemplateCommand.cjs.map +1 -1
  86. package/dist/development/src/model/commands/mailTemplate/AddMailTemplateCommand.js.map +1 -1
  87. package/dist/development/src/model/commands/mailTemplate/RemoveMailTemplateCommand.cjs.map +1 -1
  88. package/dist/development/src/model/commands/mailTemplate/RemoveMailTemplateCommand.js.map +1 -1
  89. package/dist/development/src/model/commands/membership/AddProjectMemberCommand.cjs.map +1 -1
  90. package/dist/development/src/model/commands/membership/AddProjectMemberCommand.js.map +1 -1
  91. package/dist/development/src/model/commands/membership/CreateOrUpdateProjectMembershipCommand.cjs.map +1 -1
  92. package/dist/development/src/model/commands/membership/CreateOrUpdateProjectMembershipCommand.js.map +1 -1
  93. package/dist/development/src/model/commands/membership/RemoveProjectMemberCommand.cjs.map +1 -1
  94. package/dist/development/src/model/commands/membership/RemoveProjectMemberCommand.js.map +1 -1
  95. package/dist/development/src/model/commands/membership/RemoveProjectMembershipsCommand.cjs.map +1 -1
  96. package/dist/development/src/model/commands/membership/RemoveProjectMembershipsCommand.js.map +1 -1
  97. package/dist/development/src/model/commands/membership/UpdateProjectMemberCommand.cjs.map +1 -1
  98. package/dist/development/src/model/commands/membership/UpdateProjectMemberCommand.js.map +1 -1
  99. package/dist/development/src/model/commands/membership/variables/PatchProjectMembershipVariableValuesCommand.cjs.map +1 -1
  100. package/dist/development/src/model/commands/membership/variables/PatchProjectMembershipVariableValuesCommand.js.map +1 -1
  101. package/dist/development/src/model/commands/membership/variables/PatchProjectMembershipVariablesCommand.cjs.map +1 -1
  102. package/dist/development/src/model/commands/membership/variables/PatchProjectMembershipVariablesCommand.js.map +1 -1
  103. package/dist/development/src/model/commands/membership/variables/SetProjectMembershipVariableValuesCommand.cjs.map +1 -1
  104. package/dist/development/src/model/commands/membership/variables/SetProjectMembershipVariableValuesCommand.js.map +1 -1
  105. package/dist/development/src/model/commands/otp/ConfirmOtpCommand.cjs.map +1 -1
  106. package/dist/development/src/model/commands/otp/ConfirmOtpCommand.js.map +1 -1
  107. package/dist/development/src/model/commands/otp/DisableOtpCommand.cjs.map +1 -1
  108. package/dist/development/src/model/commands/otp/DisableOtpCommand.js.map +1 -1
  109. package/dist/development/src/model/commands/otp/PrepareOtpCommand.cjs.map +1 -1
  110. package/dist/development/src/model/commands/otp/PrepareOtpCommand.js.map +1 -1
  111. package/dist/development/src/model/commands/person/ChangePasswordCommand.cjs.map +1 -1
  112. package/dist/development/src/model/commands/person/ChangePasswordCommand.js.map +1 -1
  113. package/dist/development/src/model/commands/person/ChangeProfileCommand.cjs.map +1 -1
  114. package/dist/development/src/model/commands/person/ChangeProfileCommand.js.map +1 -1
  115. package/dist/development/src/model/commands/person/CreatePersonCommand.cjs +2 -1
  116. package/dist/development/src/model/commands/person/CreatePersonCommand.cjs.map +1 -1
  117. package/dist/development/src/model/commands/person/CreatePersonCommand.js +2 -1
  118. package/dist/development/src/model/commands/person/CreatePersonCommand.js.map +1 -1
  119. package/dist/development/src/model/commands/person/CreatePersonIdentityProviderIdentifierCommand.cjs.map +1 -1
  120. package/dist/development/src/model/commands/person/CreatePersonIdentityProviderIdentifierCommand.js.map +1 -1
  121. package/dist/development/src/model/commands/person/DisablePersonCommand.cjs.map +1 -1
  122. package/dist/development/src/model/commands/person/DisablePersonCommand.js.map +1 -1
  123. package/dist/development/src/model/commands/person/TogglePersonPasswordlessCommand.cjs +18 -0
  124. package/dist/development/src/model/commands/person/TogglePersonPasswordlessCommand.cjs.map +1 -0
  125. package/dist/development/src/model/commands/person/TogglePersonPasswordlessCommand.js +18 -0
  126. package/dist/development/src/model/commands/person/TogglePersonPasswordlessCommand.js.map +1 -0
  127. package/dist/development/src/model/commands/personToken/ActivateOtpCommand.cjs +20 -0
  128. package/dist/development/src/model/commands/personToken/ActivateOtpCommand.cjs.map +1 -0
  129. package/dist/development/src/model/commands/personToken/ActivateOtpCommand.js +20 -0
  130. package/dist/development/src/model/commands/personToken/ActivateOtpCommand.js.map +1 -0
  131. package/dist/development/src/model/commands/personToken/CreatePersonTokenCommand.cjs +33 -0
  132. package/dist/development/src/model/commands/personToken/CreatePersonTokenCommand.cjs.map +1 -0
  133. package/dist/development/src/model/commands/personToken/CreatePersonTokenCommand.js +33 -0
  134. package/dist/development/src/model/commands/personToken/CreatePersonTokenCommand.js.map +1 -0
  135. package/dist/development/src/model/commands/personToken/IncreaseOtpAttemptCommand.cjs +19 -0
  136. package/dist/development/src/model/commands/personToken/IncreaseOtpAttemptCommand.cjs.map +1 -0
  137. package/dist/development/src/model/commands/personToken/IncreaseOtpAttemptCommand.js +19 -0
  138. package/dist/development/src/model/commands/personToken/IncreaseOtpAttemptCommand.js.map +1 -0
  139. package/dist/development/src/model/commands/personToken/InvalidateTokenCommand.cjs +19 -0
  140. package/dist/development/src/model/commands/personToken/InvalidateTokenCommand.cjs.map +1 -0
  141. package/dist/development/src/model/commands/personToken/InvalidateTokenCommand.js +19 -0
  142. package/dist/development/src/model/commands/personToken/InvalidateTokenCommand.js.map +1 -0
  143. package/dist/development/src/model/commands/personToken/ResetPasswordCommand.cjs +28 -0
  144. package/dist/development/src/model/commands/personToken/ResetPasswordCommand.cjs.map +1 -0
  145. package/dist/development/src/model/commands/personToken/ResetPasswordCommand.js +28 -0
  146. package/dist/development/src/model/commands/personToken/ResetPasswordCommand.js.map +1 -0
  147. package/dist/development/src/model/commands/personToken/SavePersonTokenCommand.cjs +28 -0
  148. package/dist/development/src/model/commands/personToken/SavePersonTokenCommand.cjs.map +1 -0
  149. package/dist/development/src/model/commands/personToken/SavePersonTokenCommand.js +28 -0
  150. package/dist/development/src/model/commands/personToken/SavePersonTokenCommand.js.map +1 -0
  151. package/dist/development/src/model/commands/project/CreateProjectCommand.cjs.map +1 -1
  152. package/dist/development/src/model/commands/project/CreateProjectCommand.js.map +1 -1
  153. package/dist/development/src/model/commands/project/SetProjectSecretCommand.cjs.map +1 -1
  154. package/dist/development/src/model/commands/project/SetProjectSecretCommand.js.map +1 -1
  155. package/dist/development/src/model/commands/project/UpdateProjectCommand.cjs.map +1 -1
  156. package/dist/development/src/model/commands/project/UpdateProjectCommand.js.map +1 -1
  157. package/dist/development/src/model/consts/expirations.cjs +7 -0
  158. package/dist/development/src/model/consts/expirations.cjs.map +1 -0
  159. package/dist/development/src/model/consts/expirations.js +7 -0
  160. package/dist/development/src/model/consts/expirations.js.map +1 -0
  161. package/dist/development/src/model/dtos/Password.cjs.map +1 -1
  162. package/dist/development/src/model/dtos/Password.js.map +1 -1
  163. package/dist/development/src/model/mailing/UserMailer.cjs +10 -1
  164. package/dist/development/src/model/mailing/UserMailer.cjs.map +1 -1
  165. package/dist/development/src/model/mailing/UserMailer.js +10 -1
  166. package/dist/development/src/model/mailing/UserMailer.js.map +1 -1
  167. package/dist/development/src/model/mailing/templates/ExistingUserInvited.mustache.cjs.map +1 -1
  168. package/dist/development/src/model/mailing/templates/ExistingUserInvited.mustache.js.map +1 -1
  169. package/dist/development/src/model/mailing/templates/NewUserInvited.mustache.cjs.map +1 -1
  170. package/dist/development/src/model/mailing/templates/NewUserInvited.mustache.js.map +1 -1
  171. package/dist/development/src/model/mailing/templates/PasswordReset.mustache.cjs.map +1 -1
  172. package/dist/development/src/model/mailing/templates/PasswordReset.mustache.js.map +1 -1
  173. package/dist/development/src/model/mailing/templates/PasswordlessSignIn.mustache.cjs +17 -0
  174. package/dist/development/src/model/mailing/templates/PasswordlessSignIn.mustache.cjs.map +1 -0
  175. package/dist/development/src/model/mailing/templates/PasswordlessSignIn.mustache.js +18 -0
  176. package/dist/development/src/model/mailing/templates/PasswordlessSignIn.mustache.js.map +1 -0
  177. package/dist/development/src/model/mailing/type.cjs +9 -3
  178. package/dist/development/src/model/mailing/type.cjs.map +1 -1
  179. package/dist/development/src/model/mailing/type.js +9 -3
  180. package/dist/development/src/model/mailing/type.js.map +1 -1
  181. package/dist/development/src/model/queries/apiKey/ApiKeyQuery.cjs.map +1 -1
  182. package/dist/development/src/model/queries/apiKey/ApiKeyQuery.js.map +1 -1
  183. package/dist/development/src/model/queries/configuration/ConfigurationQuery.cjs +21 -0
  184. package/dist/development/src/model/queries/configuration/ConfigurationQuery.cjs.map +1 -0
  185. package/dist/development/src/model/queries/configuration/ConfigurationQuery.js +21 -0
  186. package/dist/development/src/model/queries/configuration/ConfigurationQuery.js.map +1 -0
  187. package/dist/development/src/model/queries/identity/IdentityQuery.cjs.map +1 -1
  188. package/dist/development/src/model/queries/identity/IdentityQuery.js.map +1 -1
  189. package/dist/development/src/model/queries/idp/IdentityProviderBySlugQuery.cjs.map +1 -1
  190. package/dist/development/src/model/queries/idp/IdentityProviderBySlugQuery.js.map +1 -1
  191. package/dist/development/src/model/queries/idp/IdentityProvidersQuery.cjs.map +1 -1
  192. package/dist/development/src/model/queries/idp/IdentityProvidersQuery.js.map +1 -1
  193. package/dist/development/src/model/queries/idp/helpers.cjs.map +1 -1
  194. package/dist/development/src/model/queries/idp/helpers.js.map +1 -1
  195. package/dist/development/src/model/queries/mailTemplate/MailTemplateListQuery.cjs.map +1 -1
  196. package/dist/development/src/model/queries/mailTemplate/MailTemplateListQuery.js.map +1 -1
  197. package/dist/development/src/model/queries/mailTemplate/MailTemplateQuery.cjs.map +1 -1
  198. package/dist/development/src/model/queries/mailTemplate/MailTemplateQuery.js.map +1 -1
  199. package/dist/development/src/model/queries/membership/ProjectMembersQuery.cjs.map +1 -1
  200. package/dist/development/src/model/queries/membership/ProjectMembersQuery.js.map +1 -1
  201. package/dist/development/src/model/queries/membership/ProjectMembershipByIdentityQuery.cjs.map +1 -1
  202. package/dist/development/src/model/queries/membership/ProjectMembershipByIdentityQuery.js.map +1 -1
  203. package/dist/development/src/model/queries/membership/ProjectRolesByIdentityQuery.cjs.map +1 -1
  204. package/dist/development/src/model/queries/membership/ProjectRolesByIdentityQuery.js.map +1 -1
  205. package/dist/development/src/model/queries/membership/ProjectSlugSpecification.cjs.map +1 -1
  206. package/dist/development/src/model/queries/membership/ProjectSlugSpecification.js.map +1 -1
  207. package/dist/development/src/model/queries/person/PersonByIdPQuery.cjs.map +1 -1
  208. package/dist/development/src/model/queries/person/PersonByIdPQuery.js.map +1 -1
  209. package/dist/development/src/model/queries/person/PersonByIdentityBatchQuery.cjs.map +1 -1
  210. package/dist/development/src/model/queries/person/PersonByIdentityBatchQuery.js.map +1 -1
  211. package/dist/development/src/model/queries/person/PersonQuery.cjs.map +1 -1
  212. package/dist/development/src/model/queries/person/PersonQuery.js.map +1 -1
  213. package/dist/development/src/model/queries/person/PersonQueryBuilderFactory.cjs +1 -1
  214. package/dist/development/src/model/queries/person/PersonQueryBuilderFactory.cjs.map +1 -1
  215. package/dist/development/src/model/queries/person/PersonQueryBuilderFactory.js +1 -1
  216. package/dist/development/src/model/queries/person/PersonQueryBuilderFactory.js.map +1 -1
  217. package/dist/development/src/model/queries/personToken/PersonTokenQuery.cjs +29 -0
  218. package/dist/development/src/model/queries/personToken/PersonTokenQuery.cjs.map +1 -0
  219. package/dist/development/src/model/queries/personToken/PersonTokenQuery.js +29 -0
  220. package/dist/development/src/model/queries/personToken/PersonTokenQuery.js.map +1 -0
  221. package/dist/development/src/model/queries/project/ProjectBySlugQuery.cjs.map +1 -1
  222. package/dist/development/src/model/queries/project/ProjectBySlugQuery.js.map +1 -1
  223. package/dist/development/src/model/queries/project/ProjectSecretsQuery.cjs.map +1 -1
  224. package/dist/development/src/model/queries/project/ProjectSecretsQuery.js.map +1 -1
  225. package/dist/development/src/model/queries/project/ProjectUpdateTimestampQuery.cjs.map +1 -1
  226. package/dist/development/src/model/queries/project/ProjectUpdateTimestampQuery.js.map +1 -1
  227. package/dist/development/src/model/queries/project/ProjectsByIdentityQuery.cjs.map +1 -1
  228. package/dist/development/src/model/queries/project/ProjectsByIdentityQuery.js.map +1 -1
  229. package/dist/development/src/model/queries/project/ProjectsQuery.cjs.map +1 -1
  230. package/dist/development/src/model/queries/project/ProjectsQuery.js.map +1 -1
  231. package/dist/development/src/model/service/ConfigurationManager.cjs +27 -0
  232. package/dist/development/src/model/service/ConfigurationManager.cjs.map +1 -0
  233. package/dist/development/src/model/service/ConfigurationManager.js +27 -0
  234. package/dist/development/src/model/service/ConfigurationManager.js.map +1 -0
  235. package/dist/development/src/model/service/EmailValidator.cjs.map +1 -1
  236. package/dist/development/src/model/service/EmailValidator.js.map +1 -1
  237. package/dist/development/src/model/service/IDPSignInManager.cjs +1 -1
  238. package/dist/development/src/model/service/IDPSignInManager.cjs.map +1 -1
  239. package/dist/development/src/model/service/IDPSignInManager.js +1 -1
  240. package/dist/development/src/model/service/IDPSignInManager.js.map +1 -1
  241. package/dist/development/src/model/service/InviteManager.cjs +7 -7
  242. package/dist/development/src/model/service/InviteManager.cjs.map +1 -1
  243. package/dist/development/src/model/service/InviteManager.js +6 -6
  244. package/dist/development/src/model/service/InviteManager.js.map +1 -1
  245. package/dist/development/src/model/service/MailTemplateManager.cjs.map +1 -1
  246. package/dist/development/src/model/service/MailTemplateManager.js.map +1 -1
  247. package/dist/development/src/model/service/MembershipValidator.cjs.map +1 -1
  248. package/dist/development/src/model/service/MembershipValidator.js.map +1 -1
  249. package/dist/development/src/model/service/OtpAuthenticator.cjs.map +1 -1
  250. package/dist/development/src/model/service/OtpAuthenticator.js.map +1 -1
  251. package/dist/development/src/model/service/OtpManager.cjs.map +1 -1
  252. package/dist/development/src/model/service/OtpManager.js.map +1 -1
  253. package/dist/development/src/model/service/PasswordChangeManager.cjs +1 -1
  254. package/dist/development/src/model/service/PasswordChangeManager.cjs.map +1 -1
  255. package/dist/development/src/model/service/PasswordChangeManager.js +1 -1
  256. package/dist/development/src/model/service/PasswordChangeManager.js.map +1 -1
  257. package/dist/development/src/model/service/PasswordResetManager.cjs +7 -15
  258. package/dist/development/src/model/service/PasswordResetManager.cjs.map +1 -1
  259. package/dist/development/src/model/service/PasswordResetManager.js +7 -15
  260. package/dist/development/src/model/service/PasswordResetManager.js.map +1 -1
  261. package/dist/development/src/model/service/PasswordlessSignInManager.cjs +135 -0
  262. package/dist/development/src/model/service/PasswordlessSignInManager.cjs.map +1 -0
  263. package/dist/development/src/model/service/PasswordlessSignInManager.js +135 -0
  264. package/dist/development/src/model/service/PasswordlessSignInManager.js.map +1 -0
  265. package/dist/development/src/model/service/PersonAccessManager.cjs.map +1 -1
  266. package/dist/development/src/model/service/PersonAccessManager.js.map +1 -1
  267. package/dist/development/src/model/service/PersonManager.cjs +7 -0
  268. package/dist/development/src/model/service/PersonManager.cjs.map +1 -1
  269. package/dist/development/src/model/service/PersonManager.js +7 -0
  270. package/dist/development/src/model/service/PersonManager.js.map +1 -1
  271. package/dist/development/src/model/service/ProjectManager.cjs +2 -2
  272. package/dist/development/src/model/service/ProjectManager.cjs.map +1 -1
  273. package/dist/development/src/model/service/ProjectManager.js +2 -2
  274. package/dist/development/src/model/service/ProjectManager.js.map +1 -1
  275. package/dist/development/src/model/service/ProjectMemberManager.cjs.map +1 -1
  276. package/dist/development/src/model/service/ProjectMemberManager.js.map +1 -1
  277. package/dist/development/src/model/service/RolesManager.cjs +1 -1
  278. package/dist/development/src/model/service/RolesManager.cjs.map +1 -1
  279. package/dist/development/src/model/service/RolesManager.js +1 -1
  280. package/dist/development/src/model/service/RolesManager.js.map +1 -1
  281. package/dist/development/src/model/service/SecretsManager.cjs.map +1 -1
  282. package/dist/development/src/model/service/SecretsManager.js.map +1 -1
  283. package/dist/development/src/model/service/SignInManager.cjs.map +1 -1
  284. package/dist/development/src/model/service/SignInManager.js.map +1 -1
  285. package/dist/development/src/model/service/SignUpManager.cjs +1 -1
  286. package/dist/development/src/model/service/SignUpManager.cjs.map +1 -1
  287. package/dist/development/src/model/service/SignUpManager.js +1 -1
  288. package/dist/development/src/model/service/SignUpManager.js.map +1 -1
  289. package/dist/development/src/model/service/apiKey/ApiKeyManager.cjs.map +1 -1
  290. package/dist/development/src/model/service/apiKey/ApiKeyManager.js.map +1 -1
  291. package/dist/development/src/model/service/apiKey/ApiKeyService.cjs.map +1 -1
  292. package/dist/development/src/model/service/apiKey/ApiKeyService.js.map +1 -1
  293. package/dist/development/src/model/service/helpers/getPreferredProject.cjs +13 -0
  294. package/dist/development/src/model/service/helpers/getPreferredProject.cjs.map +1 -0
  295. package/dist/development/src/model/service/helpers/getPreferredProject.js +13 -0
  296. package/dist/development/src/model/service/helpers/getPreferredProject.js.map +1 -0
  297. package/dist/development/src/model/service/idp/IDPHandlerRegistry.cjs.map +1 -1
  298. package/dist/development/src/model/service/idp/IDPHandlerRegistry.js.map +1 -1
  299. package/dist/development/src/model/service/idp/IDPManager.cjs.map +1 -1
  300. package/dist/development/src/model/service/idp/IDPManager.js.map +1 -1
  301. package/dist/development/src/model/service/idp/IDPResponseError.cjs.map +1 -1
  302. package/dist/development/src/model/service/idp/IDPResponseError.js.map +1 -1
  303. package/dist/development/src/model/service/idp/IDPValidationError.cjs.map +1 -1
  304. package/dist/development/src/model/service/idp/IDPValidationError.js.map +1 -1
  305. package/dist/development/src/model/service/idp/IdentityProviderNotFoundError.cjs.map +1 -1
  306. package/dist/development/src/model/service/idp/IdentityProviderNotFoundError.js.map +1 -1
  307. package/dist/development/src/model/service/idp/InvalidIDPConfigurationError.cjs.map +1 -1
  308. package/dist/development/src/model/service/idp/InvalidIDPConfigurationError.js.map +1 -1
  309. package/dist/development/src/model/service/idp/providers/AppleProvider.cjs +1 -1
  310. package/dist/development/src/model/service/idp/providers/AppleProvider.cjs.map +1 -1
  311. package/dist/development/src/model/service/idp/providers/AppleProvider.js +1 -1
  312. package/dist/development/src/model/service/idp/providers/AppleProvider.js.map +1 -1
  313. package/dist/development/src/model/service/idp/providers/FacebookProvider.cjs +1 -1
  314. package/dist/development/src/model/service/idp/providers/FacebookProvider.cjs.map +1 -1
  315. package/dist/development/src/model/service/idp/providers/FacebookProvider.js +1 -1
  316. package/dist/development/src/model/service/idp/providers/FacebookProvider.js.map +1 -1
  317. package/dist/development/src/model/service/idp/providers/OIDCHelpers.cjs +9 -5
  318. package/dist/development/src/model/service/idp/providers/OIDCHelpers.cjs.map +1 -1
  319. package/dist/development/src/model/service/idp/providers/OIDCHelpers.js +9 -5
  320. package/dist/development/src/model/service/idp/providers/OIDCHelpers.js.map +1 -1
  321. package/dist/development/src/model/service/idp/providers/OIDCProvider.cjs +9 -3
  322. package/dist/development/src/model/service/idp/providers/OIDCProvider.cjs.map +1 -1
  323. package/dist/development/src/model/service/idp/providers/OIDCProvider.js +9 -3
  324. package/dist/development/src/model/service/idp/providers/OIDCProvider.js.map +1 -1
  325. package/dist/development/src/model/service/idp/providers/OIDCTypes.cjs +6 -1
  326. package/dist/development/src/model/service/idp/providers/OIDCTypes.cjs.map +1 -1
  327. package/dist/development/src/model/service/idp/providers/OIDCTypes.js +6 -1
  328. package/dist/development/src/model/service/idp/providers/OIDCTypes.js.map +1 -1
  329. package/dist/development/src/model/service/idp/providers/helpers.cjs.map +1 -1
  330. package/dist/development/src/model/service/idp/providers/helpers.js.map +1 -1
  331. package/dist/development/src/model/service/membershipUtils.cjs.map +1 -1
  332. package/dist/development/src/model/service/membershipUtils.js.map +1 -1
  333. package/dist/development/src/model/type/ApiKey.cjs.map +1 -1
  334. package/dist/development/src/model/type/ApiKey.js.map +1 -1
  335. package/dist/development/src/model/utils/DatabaseContext.cjs.map +1 -1
  336. package/dist/development/src/model/utils/DatabaseContext.js.map +1 -1
  337. package/dist/development/src/model/utils/Response.cjs.map +1 -1
  338. package/dist/development/src/model/utils/Response.js.map +1 -1
  339. package/dist/development/src/model/utils/password.cjs.map +1 -1
  340. package/dist/development/src/model/utils/password.js.map +1 -1
  341. package/dist/development/src/model/utils/tokenUtils.cjs +39 -0
  342. package/dist/development/src/model/utils/tokenUtils.cjs.map +1 -1
  343. package/dist/development/src/model/utils/tokenUtils.js +40 -1
  344. package/dist/development/src/model/utils/tokenUtils.js.map +1 -1
  345. package/dist/development/src/resolvers/ResolverFactory.cjs +8 -1
  346. package/dist/development/src/resolvers/ResolverFactory.cjs.map +1 -1
  347. package/dist/development/src/resolvers/ResolverFactory.js +8 -1
  348. package/dist/development/src/resolvers/ResolverFactory.js.map +1 -1
  349. package/dist/development/src/resolvers/TenantResolverContextFactory.cjs.map +1 -1
  350. package/dist/development/src/resolvers/TenantResolverContextFactory.js.map +1 -1
  351. package/dist/development/src/resolvers/errorUtils.cjs.map +1 -1
  352. package/dist/development/src/resolvers/errorUtils.js.map +1 -1
  353. package/dist/development/src/resolvers/membershipUtils.cjs.map +1 -1
  354. package/dist/development/src/resolvers/membershipUtils.js.map +1 -1
  355. package/dist/development/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.cjs.map +1 -1
  356. package/dist/development/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.js.map +1 -1
  357. package/dist/development/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.cjs.map +1 -1
  358. package/dist/development/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.js.map +1 -1
  359. package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.cjs +41 -0
  360. package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.cjs.map +1 -0
  361. package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.js +41 -0
  362. package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.js.map +1 -0
  363. package/dist/development/src/resolvers/mutation/identity/GlobalRolesMutationResolver.cjs.map +1 -1
  364. package/dist/development/src/resolvers/mutation/identity/GlobalRolesMutationResolver.js.map +1 -1
  365. package/dist/development/src/resolvers/mutation/idp/AddIDPMutationResolver.cjs.map +1 -1
  366. package/dist/development/src/resolvers/mutation/idp/AddIDPMutationResolver.js.map +1 -1
  367. package/dist/development/src/resolvers/mutation/idp/DisableIDPMutationResolver.cjs.map +1 -1
  368. package/dist/development/src/resolvers/mutation/idp/DisableIDPMutationResolver.js.map +1 -1
  369. package/dist/development/src/resolvers/mutation/idp/EnableIDPMutationResolver.cjs.map +1 -1
  370. package/dist/development/src/resolvers/mutation/idp/EnableIDPMutationResolver.js.map +1 -1
  371. package/dist/development/src/resolvers/mutation/idp/UpdateIDPMutationResolver.cjs.map +1 -1
  372. package/dist/development/src/resolvers/mutation/idp/UpdateIDPMutationResolver.js.map +1 -1
  373. package/dist/development/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.cjs.map +1 -1
  374. package/dist/development/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.js.map +1 -1
  375. package/dist/development/src/resolvers/mutation/person/ChangePasswordMutationResolver.cjs.map +1 -1
  376. package/dist/development/src/resolvers/mutation/person/ChangePasswordMutationResolver.js.map +1 -1
  377. package/dist/development/src/resolvers/mutation/person/ChangeProfileMutationResolver.cjs.map +1 -1
  378. package/dist/development/src/resolvers/mutation/person/ChangeProfileMutationResolver.js.map +1 -1
  379. package/dist/development/src/resolvers/mutation/person/DisablePersonMutationResolver.cjs.map +1 -1
  380. package/dist/development/src/resolvers/mutation/person/DisablePersonMutationResolver.js.map +1 -1
  381. package/dist/development/src/resolvers/mutation/person/IDPMutationResolver.cjs +4 -1
  382. package/dist/development/src/resolvers/mutation/person/IDPMutationResolver.cjs.map +1 -1
  383. package/dist/development/src/resolvers/mutation/person/IDPMutationResolver.js +4 -1
  384. package/dist/development/src/resolvers/mutation/person/IDPMutationResolver.js.map +1 -1
  385. package/dist/development/src/resolvers/mutation/person/InviteMutationResolver.cjs.map +1 -1
  386. package/dist/development/src/resolvers/mutation/person/InviteMutationResolver.js.map +1 -1
  387. package/dist/development/src/resolvers/mutation/person/OtpMutationResolver.cjs.map +1 -1
  388. package/dist/development/src/resolvers/mutation/person/OtpMutationResolver.js.map +1 -1
  389. package/dist/development/src/resolvers/mutation/person/PasswordlessMutationResolver.cjs +83 -0
  390. package/dist/development/src/resolvers/mutation/person/PasswordlessMutationResolver.cjs.map +1 -0
  391. package/dist/development/src/resolvers/mutation/person/PasswordlessMutationResolver.js +83 -0
  392. package/dist/development/src/resolvers/mutation/person/PasswordlessMutationResolver.js.map +1 -0
  393. package/dist/development/src/resolvers/mutation/person/ResetPasswordMutationResolver.cjs.map +1 -1
  394. package/dist/development/src/resolvers/mutation/person/ResetPasswordMutationResolver.js.map +1 -1
  395. package/dist/development/src/resolvers/mutation/person/SignInMutationResolver.cjs.map +1 -1
  396. package/dist/development/src/resolvers/mutation/person/SignInMutationResolver.js.map +1 -1
  397. package/dist/development/src/resolvers/mutation/person/SignOutMutationResolver.cjs.map +1 -1
  398. package/dist/development/src/resolvers/mutation/person/SignOutMutationResolver.js.map +1 -1
  399. package/dist/development/src/resolvers/mutation/person/SignUpMutationResolver.cjs.map +1 -1
  400. package/dist/development/src/resolvers/mutation/person/SignUpMutationResolver.js.map +1 -1
  401. package/dist/development/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.cjs +52 -0
  402. package/dist/development/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.cjs.map +1 -0
  403. package/dist/development/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.js +52 -0
  404. package/dist/development/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.js.map +1 -0
  405. package/dist/development/src/resolvers/mutation/project/CreateProjectMutationResolver.cjs.map +1 -1
  406. package/dist/development/src/resolvers/mutation/project/CreateProjectMutationResolver.js.map +1 -1
  407. package/dist/development/src/resolvers/mutation/project/SetProjectSecretMutationResolver.cjs.map +1 -1
  408. package/dist/development/src/resolvers/mutation/project/SetProjectSecretMutationResolver.js.map +1 -1
  409. package/dist/development/src/resolvers/mutation/project/UpdateProjectMutationResolver.cjs.map +1 -1
  410. package/dist/development/src/resolvers/mutation/project/UpdateProjectMutationResolver.js.map +1 -1
  411. package/dist/development/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.cjs.map +1 -1
  412. package/dist/development/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.js.map +1 -1
  413. package/dist/development/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.cjs.map +1 -1
  414. package/dist/development/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.js.map +1 -1
  415. package/dist/development/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.cjs.map +1 -1
  416. package/dist/development/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.js.map +1 -1
  417. package/dist/development/src/resolvers/query/ConfigurationQueryResolver.cjs +34 -0
  418. package/dist/development/src/resolvers/query/ConfigurationQueryResolver.cjs.map +1 -0
  419. package/dist/development/src/resolvers/query/ConfigurationQueryResolver.js +34 -0
  420. package/dist/development/src/resolvers/query/ConfigurationQueryResolver.js.map +1 -0
  421. package/dist/development/src/resolvers/query/IDPQueryResolver.cjs.map +1 -1
  422. package/dist/development/src/resolvers/query/IDPQueryResolver.js.map +1 -1
  423. package/dist/development/src/resolvers/query/MailTemplateQueryResolver.cjs.map +1 -1
  424. package/dist/development/src/resolvers/query/MailTemplateQueryResolver.js.map +1 -1
  425. package/dist/development/src/resolvers/query/MeQueryResolver.cjs.map +1 -1
  426. package/dist/development/src/resolvers/query/MeQueryResolver.js.map +1 -1
  427. package/dist/development/src/resolvers/query/PersonQueryResolver.cjs.map +1 -1
  428. package/dist/development/src/resolvers/query/PersonQueryResolver.js.map +1 -1
  429. package/dist/development/src/resolvers/query/ProjectMembersQueryResolver.cjs.map +1 -1
  430. package/dist/development/src/resolvers/query/ProjectMembersQueryResolver.js.map +1 -1
  431. package/dist/development/src/resolvers/query/ProjectQueryResolver.cjs.map +1 -1
  432. package/dist/development/src/resolvers/query/ProjectQueryResolver.js.map +1 -1
  433. package/dist/development/src/resolvers/responseHelpers/PersonResponseFactory.cjs +1 -0
  434. package/dist/development/src/resolvers/responseHelpers/PersonResponseFactory.cjs.map +1 -1
  435. package/dist/development/src/resolvers/responseHelpers/PersonResponseFactory.js +1 -0
  436. package/dist/development/src/resolvers/responseHelpers/PersonResponseFactory.js.map +1 -1
  437. package/dist/development/src/resolvers/responseHelpers/SignInResponseFactory.cjs.map +1 -1
  438. package/dist/development/src/resolvers/responseHelpers/SignInResponseFactory.js.map +1 -1
  439. package/dist/development/src/resolvers/types/IdentityTypeResolver.cjs.map +1 -1
  440. package/dist/development/src/resolvers/types/IdentityTypeResolver.js.map +1 -1
  441. package/dist/development/src/resolvers/types/ProjectTypeResolver.cjs.map +1 -1
  442. package/dist/development/src/resolvers/types/ProjectTypeResolver.js.map +1 -1
  443. package/dist/development/src/schema/tenant.graphql.cjs +162 -10
  444. package/dist/development/src/schema/tenant.graphql.cjs.map +1 -1
  445. package/dist/development/src/schema/tenant.graphql.js +162 -10
  446. package/dist/development/src/schema/tenant.graphql.js.map +1 -1
  447. package/dist/development/src/utils/Mailer.cjs.map +1 -1
  448. package/dist/development/src/utils/Mailer.js.map +1 -1
  449. package/dist/development/src/utils/TemplateRenderer.cjs.map +1 -1
  450. package/dist/development/src/utils/TemplateRenderer.js.map +1 -1
  451. package/dist/development/src/utils/array.cjs.map +1 -1
  452. package/dist/development/src/utils/array.js.map +1 -1
  453. package/dist/development/src/utils/batchQuery.cjs.map +1 -1
  454. package/dist/development/src/utils/batchQuery.js.map +1 -1
  455. package/dist/production/index.cjs +18 -6
  456. package/dist/production/index.cjs.map +1 -1
  457. package/dist/production/index.js +20 -8
  458. package/dist/production/index.js.map +1 -1
  459. package/dist/production/src/TenantContainer.cjs +7 -1
  460. package/dist/production/src/TenantContainer.cjs.map +1 -1
  461. package/dist/production/src/TenantContainer.js +7 -1
  462. package/dist/production/src/TenantContainer.js.map +1 -1
  463. package/dist/production/src/bridges/system/IdentityFetcher.cjs.map +1 -1
  464. package/dist/production/src/bridges/system/IdentityFetcher.js.map +1 -1
  465. package/dist/production/src/exceptions.cjs.map +1 -1
  466. package/dist/production/src/exceptions.js.map +1 -1
  467. package/dist/production/src/migrations/2024-08-26-120000-passwordless.cjs +31 -0
  468. package/dist/production/src/migrations/2024-08-26-120000-passwordless.cjs.map +1 -0
  469. package/dist/production/src/migrations/2024-08-26-120000-passwordless.js +32 -0
  470. package/dist/production/src/migrations/2024-08-26-120000-passwordless.js.map +1 -0
  471. package/dist/production/src/migrations/runner.cjs +3 -1
  472. package/dist/production/src/migrations/runner.cjs.map +1 -1
  473. package/dist/production/src/migrations/runner.js +3 -1
  474. package/dist/production/src/migrations/runner.js.map +1 -1
  475. package/dist/production/src/migrations/snapshot.cjs +33 -5
  476. package/dist/production/src/migrations/snapshot.cjs.map +1 -1
  477. package/dist/production/src/migrations/snapshot.js +33 -5
  478. package/dist/production/src/migrations/snapshot.js.map +1 -1
  479. package/dist/production/src/migrations/tenantCredentials.cjs.map +1 -1
  480. package/dist/production/src/migrations/tenantCredentials.js.map +1 -1
  481. package/dist/production/src/model/authorization/AclSchemaAccessNodeFactory.cjs.map +1 -1
  482. package/dist/production/src/model/authorization/AclSchemaAccessNodeFactory.js.map +1 -1
  483. package/dist/production/src/model/authorization/DirectPermissionsAccessNode.cjs.map +1 -1
  484. package/dist/production/src/model/authorization/DirectPermissionsAccessNode.js.map +1 -1
  485. package/dist/production/src/model/authorization/Identity.cjs.map +1 -1
  486. package/dist/production/src/model/authorization/Identity.js.map +1 -1
  487. package/dist/production/src/model/authorization/IdentityFactory.cjs.map +1 -1
  488. package/dist/production/src/model/authorization/IdentityFactory.js.map +1 -1
  489. package/dist/production/src/model/authorization/IdentityScope.cjs.map +1 -1
  490. package/dist/production/src/model/authorization/IdentityScope.js.map +1 -1
  491. package/dist/production/src/model/authorization/MembershipMatcher.cjs.map +1 -1
  492. package/dist/production/src/model/authorization/MembershipMatcher.js.map +1 -1
  493. package/dist/production/src/model/authorization/PermissionActions.cjs +5 -0
  494. package/dist/production/src/model/authorization/PermissionActions.cjs.map +1 -1
  495. package/dist/production/src/model/authorization/PermissionActions.js +5 -0
  496. package/dist/production/src/model/authorization/PermissionActions.js.map +1 -1
  497. package/dist/production/src/model/authorization/PermissionContext.cjs.map +1 -1
  498. package/dist/production/src/model/authorization/PermissionContext.js.map +1 -1
  499. package/dist/production/src/model/authorization/PermissionContextFactory.cjs.map +1 -1
  500. package/dist/production/src/model/authorization/PermissionContextFactory.js.map +1 -1
  501. package/dist/production/src/model/authorization/PermissionsFactory.cjs +5 -0
  502. package/dist/production/src/model/authorization/PermissionsFactory.cjs.map +1 -1
  503. package/dist/production/src/model/authorization/PermissionsFactory.js +5 -0
  504. package/dist/production/src/model/authorization/PermissionsFactory.js.map +1 -1
  505. package/dist/production/src/model/authorization/ProjectScope.cjs.map +1 -1
  506. package/dist/production/src/model/authorization/ProjectScope.js.map +1 -1
  507. package/dist/production/src/model/authorization/ProjectScopeFactory.cjs.map +1 -1
  508. package/dist/production/src/model/authorization/ProjectScopeFactory.js.map +1 -1
  509. package/dist/production/src/model/commands/CommandBus.cjs.map +1 -1
  510. package/dist/production/src/model/commands/CommandBus.js.map +1 -1
  511. package/dist/production/src/model/commands/apiKey/ApiKeyHelper.cjs.map +1 -1
  512. package/dist/production/src/model/commands/apiKey/ApiKeyHelper.js.map +1 -1
  513. package/dist/production/src/model/commands/apiKey/CreateApiKeyCommand.cjs.map +1 -1
  514. package/dist/production/src/model/commands/apiKey/CreateApiKeyCommand.js.map +1 -1
  515. package/dist/production/src/model/commands/apiKey/DisableApiKeyCommand.cjs.map +1 -1
  516. package/dist/production/src/model/commands/apiKey/DisableApiKeyCommand.js.map +1 -1
  517. package/dist/production/src/model/commands/apiKey/DisableIdentityApiKeysCommand.cjs.map +1 -1
  518. package/dist/production/src/model/commands/apiKey/DisableIdentityApiKeysCommand.js.map +1 -1
  519. package/dist/production/src/model/commands/apiKey/DisableOneOffApiKeyCommand.cjs.map +1 -1
  520. package/dist/production/src/model/commands/apiKey/DisableOneOffApiKeyCommand.js.map +1 -1
  521. package/dist/production/src/model/commands/apiKey/ProlongApiKeyCommand.cjs.map +1 -1
  522. package/dist/production/src/model/commands/apiKey/ProlongApiKeyCommand.js.map +1 -1
  523. package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.cjs +20 -0
  524. package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.cjs.map +1 -0
  525. package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.js +20 -0
  526. package/dist/production/src/model/commands/configuration/UpdateConfigurationCommand.js.map +1 -0
  527. package/dist/production/src/model/commands/identity/CreateIdentityCommand.cjs.map +1 -1
  528. package/dist/production/src/model/commands/identity/CreateIdentityCommand.js.map +1 -1
  529. package/dist/production/src/model/commands/identity/PatchIdentityGlobalRoles.cjs.map +1 -1
  530. package/dist/production/src/model/commands/identity/PatchIdentityGlobalRoles.js.map +1 -1
  531. package/dist/production/src/model/commands/idp/CreateIdpCommand.cjs.map +1 -1
  532. package/dist/production/src/model/commands/idp/CreateIdpCommand.js.map +1 -1
  533. package/dist/production/src/model/commands/idp/DisableIdpCommand.cjs.map +1 -1
  534. package/dist/production/src/model/commands/idp/DisableIdpCommand.js.map +1 -1
  535. package/dist/production/src/model/commands/idp/EnableIdpCommand.cjs.map +1 -1
  536. package/dist/production/src/model/commands/idp/EnableIdpCommand.js.map +1 -1
  537. package/dist/production/src/model/commands/idp/UpdateIdpCommand.cjs.map +1 -1
  538. package/dist/production/src/model/commands/idp/UpdateIdpCommand.js.map +1 -1
  539. package/dist/production/src/model/commands/mailTemplate/AddMailTemplateCommand.cjs.map +1 -1
  540. package/dist/production/src/model/commands/mailTemplate/AddMailTemplateCommand.js.map +1 -1
  541. package/dist/production/src/model/commands/mailTemplate/RemoveMailTemplateCommand.cjs.map +1 -1
  542. package/dist/production/src/model/commands/mailTemplate/RemoveMailTemplateCommand.js.map +1 -1
  543. package/dist/production/src/model/commands/membership/AddProjectMemberCommand.cjs.map +1 -1
  544. package/dist/production/src/model/commands/membership/AddProjectMemberCommand.js.map +1 -1
  545. package/dist/production/src/model/commands/membership/CreateOrUpdateProjectMembershipCommand.cjs.map +1 -1
  546. package/dist/production/src/model/commands/membership/CreateOrUpdateProjectMembershipCommand.js.map +1 -1
  547. package/dist/production/src/model/commands/membership/RemoveProjectMemberCommand.cjs.map +1 -1
  548. package/dist/production/src/model/commands/membership/RemoveProjectMemberCommand.js.map +1 -1
  549. package/dist/production/src/model/commands/membership/RemoveProjectMembershipsCommand.cjs.map +1 -1
  550. package/dist/production/src/model/commands/membership/RemoveProjectMembershipsCommand.js.map +1 -1
  551. package/dist/production/src/model/commands/membership/UpdateProjectMemberCommand.cjs.map +1 -1
  552. package/dist/production/src/model/commands/membership/UpdateProjectMemberCommand.js.map +1 -1
  553. package/dist/production/src/model/commands/membership/variables/PatchProjectMembershipVariableValuesCommand.cjs.map +1 -1
  554. package/dist/production/src/model/commands/membership/variables/PatchProjectMembershipVariableValuesCommand.js.map +1 -1
  555. package/dist/production/src/model/commands/membership/variables/PatchProjectMembershipVariablesCommand.cjs.map +1 -1
  556. package/dist/production/src/model/commands/membership/variables/PatchProjectMembershipVariablesCommand.js.map +1 -1
  557. package/dist/production/src/model/commands/membership/variables/SetProjectMembershipVariableValuesCommand.cjs.map +1 -1
  558. package/dist/production/src/model/commands/membership/variables/SetProjectMembershipVariableValuesCommand.js.map +1 -1
  559. package/dist/production/src/model/commands/otp/ConfirmOtpCommand.cjs.map +1 -1
  560. package/dist/production/src/model/commands/otp/ConfirmOtpCommand.js.map +1 -1
  561. package/dist/production/src/model/commands/otp/DisableOtpCommand.cjs.map +1 -1
  562. package/dist/production/src/model/commands/otp/DisableOtpCommand.js.map +1 -1
  563. package/dist/production/src/model/commands/otp/PrepareOtpCommand.cjs.map +1 -1
  564. package/dist/production/src/model/commands/otp/PrepareOtpCommand.js.map +1 -1
  565. package/dist/production/src/model/commands/person/ChangePasswordCommand.cjs.map +1 -1
  566. package/dist/production/src/model/commands/person/ChangePasswordCommand.js.map +1 -1
  567. package/dist/production/src/model/commands/person/ChangeProfileCommand.cjs.map +1 -1
  568. package/dist/production/src/model/commands/person/ChangeProfileCommand.js.map +1 -1
  569. package/dist/production/src/model/commands/person/CreatePersonCommand.cjs +2 -1
  570. package/dist/production/src/model/commands/person/CreatePersonCommand.cjs.map +1 -1
  571. package/dist/production/src/model/commands/person/CreatePersonCommand.js +2 -1
  572. package/dist/production/src/model/commands/person/CreatePersonCommand.js.map +1 -1
  573. package/dist/production/src/model/commands/person/CreatePersonIdentityProviderIdentifierCommand.cjs.map +1 -1
  574. package/dist/production/src/model/commands/person/CreatePersonIdentityProviderIdentifierCommand.js.map +1 -1
  575. package/dist/production/src/model/commands/person/DisablePersonCommand.cjs.map +1 -1
  576. package/dist/production/src/model/commands/person/DisablePersonCommand.js.map +1 -1
  577. package/dist/production/src/model/commands/person/TogglePersonPasswordlessCommand.cjs +18 -0
  578. package/dist/production/src/model/commands/person/TogglePersonPasswordlessCommand.cjs.map +1 -0
  579. package/dist/production/src/model/commands/person/TogglePersonPasswordlessCommand.js +18 -0
  580. package/dist/production/src/model/commands/person/TogglePersonPasswordlessCommand.js.map +1 -0
  581. package/dist/production/src/model/commands/personToken/ActivateOtpCommand.cjs +20 -0
  582. package/dist/production/src/model/commands/personToken/ActivateOtpCommand.cjs.map +1 -0
  583. package/dist/production/src/model/commands/personToken/ActivateOtpCommand.js +20 -0
  584. package/dist/production/src/model/commands/personToken/ActivateOtpCommand.js.map +1 -0
  585. package/dist/production/src/model/commands/personToken/CreatePersonTokenCommand.cjs +33 -0
  586. package/dist/production/src/model/commands/personToken/CreatePersonTokenCommand.cjs.map +1 -0
  587. package/dist/production/src/model/commands/personToken/CreatePersonTokenCommand.js +33 -0
  588. package/dist/production/src/model/commands/personToken/CreatePersonTokenCommand.js.map +1 -0
  589. package/dist/production/src/model/commands/personToken/IncreaseOtpAttemptCommand.cjs +19 -0
  590. package/dist/production/src/model/commands/personToken/IncreaseOtpAttemptCommand.cjs.map +1 -0
  591. package/dist/production/src/model/commands/personToken/IncreaseOtpAttemptCommand.js +19 -0
  592. package/dist/production/src/model/commands/personToken/IncreaseOtpAttemptCommand.js.map +1 -0
  593. package/dist/production/src/model/commands/personToken/InvalidateTokenCommand.cjs +19 -0
  594. package/dist/production/src/model/commands/personToken/InvalidateTokenCommand.cjs.map +1 -0
  595. package/dist/production/src/model/commands/personToken/InvalidateTokenCommand.js +19 -0
  596. package/dist/production/src/model/commands/personToken/InvalidateTokenCommand.js.map +1 -0
  597. package/dist/production/src/model/commands/personToken/ResetPasswordCommand.cjs +28 -0
  598. package/dist/production/src/model/commands/personToken/ResetPasswordCommand.cjs.map +1 -0
  599. package/dist/production/src/model/commands/personToken/ResetPasswordCommand.js +28 -0
  600. package/dist/production/src/model/commands/personToken/ResetPasswordCommand.js.map +1 -0
  601. package/dist/production/src/model/commands/personToken/SavePersonTokenCommand.cjs +28 -0
  602. package/dist/production/src/model/commands/personToken/SavePersonTokenCommand.cjs.map +1 -0
  603. package/dist/production/src/model/commands/personToken/SavePersonTokenCommand.js +28 -0
  604. package/dist/production/src/model/commands/personToken/SavePersonTokenCommand.js.map +1 -0
  605. package/dist/production/src/model/commands/project/CreateProjectCommand.cjs.map +1 -1
  606. package/dist/production/src/model/commands/project/CreateProjectCommand.js.map +1 -1
  607. package/dist/production/src/model/commands/project/SetProjectSecretCommand.cjs.map +1 -1
  608. package/dist/production/src/model/commands/project/SetProjectSecretCommand.js.map +1 -1
  609. package/dist/production/src/model/commands/project/UpdateProjectCommand.cjs.map +1 -1
  610. package/dist/production/src/model/commands/project/UpdateProjectCommand.js.map +1 -1
  611. package/dist/production/src/model/consts/expirations.cjs +7 -0
  612. package/dist/production/src/model/consts/expirations.cjs.map +1 -0
  613. package/dist/production/src/model/consts/expirations.js +7 -0
  614. package/dist/production/src/model/consts/expirations.js.map +1 -0
  615. package/dist/production/src/model/dtos/Password.cjs.map +1 -1
  616. package/dist/production/src/model/dtos/Password.js.map +1 -1
  617. package/dist/production/src/model/mailing/UserMailer.cjs +10 -1
  618. package/dist/production/src/model/mailing/UserMailer.cjs.map +1 -1
  619. package/dist/production/src/model/mailing/UserMailer.js +10 -1
  620. package/dist/production/src/model/mailing/UserMailer.js.map +1 -1
  621. package/dist/production/src/model/mailing/templates/ExistingUserInvited.mustache.cjs.map +1 -1
  622. package/dist/production/src/model/mailing/templates/ExistingUserInvited.mustache.js.map +1 -1
  623. package/dist/production/src/model/mailing/templates/NewUserInvited.mustache.cjs.map +1 -1
  624. package/dist/production/src/model/mailing/templates/NewUserInvited.mustache.js.map +1 -1
  625. package/dist/production/src/model/mailing/templates/PasswordReset.mustache.cjs.map +1 -1
  626. package/dist/production/src/model/mailing/templates/PasswordReset.mustache.js.map +1 -1
  627. package/dist/production/src/model/mailing/templates/PasswordlessSignIn.mustache.cjs +17 -0
  628. package/dist/production/src/model/mailing/templates/PasswordlessSignIn.mustache.cjs.map +1 -0
  629. package/dist/production/src/model/mailing/templates/PasswordlessSignIn.mustache.js +18 -0
  630. package/dist/production/src/model/mailing/templates/PasswordlessSignIn.mustache.js.map +1 -0
  631. package/dist/production/src/model/mailing/type.cjs +9 -3
  632. package/dist/production/src/model/mailing/type.cjs.map +1 -1
  633. package/dist/production/src/model/mailing/type.js +9 -3
  634. package/dist/production/src/model/mailing/type.js.map +1 -1
  635. package/dist/production/src/model/queries/apiKey/ApiKeyQuery.cjs.map +1 -1
  636. package/dist/production/src/model/queries/apiKey/ApiKeyQuery.js.map +1 -1
  637. package/dist/production/src/model/queries/configuration/ConfigurationQuery.cjs +21 -0
  638. package/dist/production/src/model/queries/configuration/ConfigurationQuery.cjs.map +1 -0
  639. package/dist/production/src/model/queries/configuration/ConfigurationQuery.js +21 -0
  640. package/dist/production/src/model/queries/configuration/ConfigurationQuery.js.map +1 -0
  641. package/dist/production/src/model/queries/identity/IdentityQuery.cjs.map +1 -1
  642. package/dist/production/src/model/queries/identity/IdentityQuery.js.map +1 -1
  643. package/dist/production/src/model/queries/idp/IdentityProviderBySlugQuery.cjs.map +1 -1
  644. package/dist/production/src/model/queries/idp/IdentityProviderBySlugQuery.js.map +1 -1
  645. package/dist/production/src/model/queries/idp/IdentityProvidersQuery.cjs.map +1 -1
  646. package/dist/production/src/model/queries/idp/IdentityProvidersQuery.js.map +1 -1
  647. package/dist/production/src/model/queries/idp/helpers.cjs.map +1 -1
  648. package/dist/production/src/model/queries/idp/helpers.js.map +1 -1
  649. package/dist/production/src/model/queries/mailTemplate/MailTemplateListQuery.cjs.map +1 -1
  650. package/dist/production/src/model/queries/mailTemplate/MailTemplateListQuery.js.map +1 -1
  651. package/dist/production/src/model/queries/mailTemplate/MailTemplateQuery.cjs.map +1 -1
  652. package/dist/production/src/model/queries/mailTemplate/MailTemplateQuery.js.map +1 -1
  653. package/dist/production/src/model/queries/membership/ProjectMembersQuery.cjs.map +1 -1
  654. package/dist/production/src/model/queries/membership/ProjectMembersQuery.js.map +1 -1
  655. package/dist/production/src/model/queries/membership/ProjectMembershipByIdentityQuery.cjs.map +1 -1
  656. package/dist/production/src/model/queries/membership/ProjectMembershipByIdentityQuery.js.map +1 -1
  657. package/dist/production/src/model/queries/membership/ProjectRolesByIdentityQuery.cjs.map +1 -1
  658. package/dist/production/src/model/queries/membership/ProjectRolesByIdentityQuery.js.map +1 -1
  659. package/dist/production/src/model/queries/membership/ProjectSlugSpecification.cjs.map +1 -1
  660. package/dist/production/src/model/queries/membership/ProjectSlugSpecification.js.map +1 -1
  661. package/dist/production/src/model/queries/person/PersonByIdPQuery.cjs.map +1 -1
  662. package/dist/production/src/model/queries/person/PersonByIdPQuery.js.map +1 -1
  663. package/dist/production/src/model/queries/person/PersonByIdentityBatchQuery.cjs.map +1 -1
  664. package/dist/production/src/model/queries/person/PersonByIdentityBatchQuery.js.map +1 -1
  665. package/dist/production/src/model/queries/person/PersonQuery.cjs.map +1 -1
  666. package/dist/production/src/model/queries/person/PersonQuery.js.map +1 -1
  667. package/dist/production/src/model/queries/person/PersonQueryBuilderFactory.cjs +1 -1
  668. package/dist/production/src/model/queries/person/PersonQueryBuilderFactory.cjs.map +1 -1
  669. package/dist/production/src/model/queries/person/PersonQueryBuilderFactory.js +1 -1
  670. package/dist/production/src/model/queries/person/PersonQueryBuilderFactory.js.map +1 -1
  671. package/dist/production/src/model/queries/personToken/PersonTokenQuery.cjs +29 -0
  672. package/dist/production/src/model/queries/personToken/PersonTokenQuery.cjs.map +1 -0
  673. package/dist/production/src/model/queries/personToken/PersonTokenQuery.js +29 -0
  674. package/dist/production/src/model/queries/personToken/PersonTokenQuery.js.map +1 -0
  675. package/dist/production/src/model/queries/project/ProjectBySlugQuery.cjs.map +1 -1
  676. package/dist/production/src/model/queries/project/ProjectBySlugQuery.js.map +1 -1
  677. package/dist/production/src/model/queries/project/ProjectSecretsQuery.cjs.map +1 -1
  678. package/dist/production/src/model/queries/project/ProjectSecretsQuery.js.map +1 -1
  679. package/dist/production/src/model/queries/project/ProjectUpdateTimestampQuery.cjs.map +1 -1
  680. package/dist/production/src/model/queries/project/ProjectUpdateTimestampQuery.js.map +1 -1
  681. package/dist/production/src/model/queries/project/ProjectsByIdentityQuery.cjs.map +1 -1
  682. package/dist/production/src/model/queries/project/ProjectsByIdentityQuery.js.map +1 -1
  683. package/dist/production/src/model/queries/project/ProjectsQuery.cjs.map +1 -1
  684. package/dist/production/src/model/queries/project/ProjectsQuery.js.map +1 -1
  685. package/dist/production/src/model/service/ConfigurationManager.cjs +27 -0
  686. package/dist/production/src/model/service/ConfigurationManager.cjs.map +1 -0
  687. package/dist/production/src/model/service/ConfigurationManager.js +27 -0
  688. package/dist/production/src/model/service/ConfigurationManager.js.map +1 -0
  689. package/dist/production/src/model/service/EmailValidator.cjs.map +1 -1
  690. package/dist/production/src/model/service/EmailValidator.js.map +1 -1
  691. package/dist/production/src/model/service/IDPSignInManager.cjs +1 -1
  692. package/dist/production/src/model/service/IDPSignInManager.cjs.map +1 -1
  693. package/dist/production/src/model/service/IDPSignInManager.js +1 -1
  694. package/dist/production/src/model/service/IDPSignInManager.js.map +1 -1
  695. package/dist/production/src/model/service/InviteManager.cjs +7 -7
  696. package/dist/production/src/model/service/InviteManager.cjs.map +1 -1
  697. package/dist/production/src/model/service/InviteManager.js +6 -6
  698. package/dist/production/src/model/service/InviteManager.js.map +1 -1
  699. package/dist/production/src/model/service/MailTemplateManager.cjs.map +1 -1
  700. package/dist/production/src/model/service/MailTemplateManager.js.map +1 -1
  701. package/dist/production/src/model/service/MembershipValidator.cjs.map +1 -1
  702. package/dist/production/src/model/service/MembershipValidator.js.map +1 -1
  703. package/dist/production/src/model/service/OtpAuthenticator.cjs.map +1 -1
  704. package/dist/production/src/model/service/OtpAuthenticator.js.map +1 -1
  705. package/dist/production/src/model/service/OtpManager.cjs.map +1 -1
  706. package/dist/production/src/model/service/OtpManager.js.map +1 -1
  707. package/dist/production/src/model/service/PasswordChangeManager.cjs +1 -1
  708. package/dist/production/src/model/service/PasswordChangeManager.cjs.map +1 -1
  709. package/dist/production/src/model/service/PasswordChangeManager.js +1 -1
  710. package/dist/production/src/model/service/PasswordChangeManager.js.map +1 -1
  711. package/dist/production/src/model/service/PasswordResetManager.cjs +7 -15
  712. package/dist/production/src/model/service/PasswordResetManager.cjs.map +1 -1
  713. package/dist/production/src/model/service/PasswordResetManager.js +7 -15
  714. package/dist/production/src/model/service/PasswordResetManager.js.map +1 -1
  715. package/dist/production/src/model/service/PasswordlessSignInManager.cjs +135 -0
  716. package/dist/production/src/model/service/PasswordlessSignInManager.cjs.map +1 -0
  717. package/dist/production/src/model/service/PasswordlessSignInManager.js +135 -0
  718. package/dist/production/src/model/service/PasswordlessSignInManager.js.map +1 -0
  719. package/dist/production/src/model/service/PersonAccessManager.cjs.map +1 -1
  720. package/dist/production/src/model/service/PersonAccessManager.js.map +1 -1
  721. package/dist/production/src/model/service/PersonManager.cjs +7 -0
  722. package/dist/production/src/model/service/PersonManager.cjs.map +1 -1
  723. package/dist/production/src/model/service/PersonManager.js +7 -0
  724. package/dist/production/src/model/service/PersonManager.js.map +1 -1
  725. package/dist/production/src/model/service/ProjectManager.cjs +2 -2
  726. package/dist/production/src/model/service/ProjectManager.cjs.map +1 -1
  727. package/dist/production/src/model/service/ProjectManager.js +2 -2
  728. package/dist/production/src/model/service/ProjectManager.js.map +1 -1
  729. package/dist/production/src/model/service/ProjectMemberManager.cjs.map +1 -1
  730. package/dist/production/src/model/service/ProjectMemberManager.js.map +1 -1
  731. package/dist/production/src/model/service/RolesManager.cjs +1 -1
  732. package/dist/production/src/model/service/RolesManager.cjs.map +1 -1
  733. package/dist/production/src/model/service/RolesManager.js +1 -1
  734. package/dist/production/src/model/service/RolesManager.js.map +1 -1
  735. package/dist/production/src/model/service/SecretsManager.cjs.map +1 -1
  736. package/dist/production/src/model/service/SecretsManager.js.map +1 -1
  737. package/dist/production/src/model/service/SignInManager.cjs.map +1 -1
  738. package/dist/production/src/model/service/SignInManager.js.map +1 -1
  739. package/dist/production/src/model/service/SignUpManager.cjs +1 -1
  740. package/dist/production/src/model/service/SignUpManager.cjs.map +1 -1
  741. package/dist/production/src/model/service/SignUpManager.js +1 -1
  742. package/dist/production/src/model/service/SignUpManager.js.map +1 -1
  743. package/dist/production/src/model/service/apiKey/ApiKeyManager.cjs.map +1 -1
  744. package/dist/production/src/model/service/apiKey/ApiKeyManager.js.map +1 -1
  745. package/dist/production/src/model/service/apiKey/ApiKeyService.cjs.map +1 -1
  746. package/dist/production/src/model/service/apiKey/ApiKeyService.js.map +1 -1
  747. package/dist/production/src/model/service/helpers/getPreferredProject.cjs +13 -0
  748. package/dist/production/src/model/service/helpers/getPreferredProject.cjs.map +1 -0
  749. package/dist/production/src/model/service/helpers/getPreferredProject.js +13 -0
  750. package/dist/production/src/model/service/helpers/getPreferredProject.js.map +1 -0
  751. package/dist/production/src/model/service/idp/IDPHandlerRegistry.cjs.map +1 -1
  752. package/dist/production/src/model/service/idp/IDPHandlerRegistry.js.map +1 -1
  753. package/dist/production/src/model/service/idp/IDPManager.cjs.map +1 -1
  754. package/dist/production/src/model/service/idp/IDPManager.js.map +1 -1
  755. package/dist/production/src/model/service/idp/IDPResponseError.cjs.map +1 -1
  756. package/dist/production/src/model/service/idp/IDPResponseError.js.map +1 -1
  757. package/dist/production/src/model/service/idp/IDPValidationError.cjs.map +1 -1
  758. package/dist/production/src/model/service/idp/IDPValidationError.js.map +1 -1
  759. package/dist/production/src/model/service/idp/IdentityProviderNotFoundError.cjs.map +1 -1
  760. package/dist/production/src/model/service/idp/IdentityProviderNotFoundError.js.map +1 -1
  761. package/dist/production/src/model/service/idp/InvalidIDPConfigurationError.cjs.map +1 -1
  762. package/dist/production/src/model/service/idp/InvalidIDPConfigurationError.js.map +1 -1
  763. package/dist/production/src/model/service/idp/providers/AppleProvider.cjs +1 -1
  764. package/dist/production/src/model/service/idp/providers/AppleProvider.cjs.map +1 -1
  765. package/dist/production/src/model/service/idp/providers/AppleProvider.js +1 -1
  766. package/dist/production/src/model/service/idp/providers/AppleProvider.js.map +1 -1
  767. package/dist/production/src/model/service/idp/providers/FacebookProvider.cjs +1 -1
  768. package/dist/production/src/model/service/idp/providers/FacebookProvider.cjs.map +1 -1
  769. package/dist/production/src/model/service/idp/providers/FacebookProvider.js +1 -1
  770. package/dist/production/src/model/service/idp/providers/FacebookProvider.js.map +1 -1
  771. package/dist/production/src/model/service/idp/providers/OIDCHelpers.cjs +9 -5
  772. package/dist/production/src/model/service/idp/providers/OIDCHelpers.cjs.map +1 -1
  773. package/dist/production/src/model/service/idp/providers/OIDCHelpers.js +9 -5
  774. package/dist/production/src/model/service/idp/providers/OIDCHelpers.js.map +1 -1
  775. package/dist/production/src/model/service/idp/providers/OIDCProvider.cjs +9 -3
  776. package/dist/production/src/model/service/idp/providers/OIDCProvider.cjs.map +1 -1
  777. package/dist/production/src/model/service/idp/providers/OIDCProvider.js +9 -3
  778. package/dist/production/src/model/service/idp/providers/OIDCProvider.js.map +1 -1
  779. package/dist/production/src/model/service/idp/providers/OIDCTypes.cjs +6 -1
  780. package/dist/production/src/model/service/idp/providers/OIDCTypes.cjs.map +1 -1
  781. package/dist/production/src/model/service/idp/providers/OIDCTypes.js +6 -1
  782. package/dist/production/src/model/service/idp/providers/OIDCTypes.js.map +1 -1
  783. package/dist/production/src/model/service/idp/providers/helpers.cjs.map +1 -1
  784. package/dist/production/src/model/service/idp/providers/helpers.js.map +1 -1
  785. package/dist/production/src/model/service/membershipUtils.cjs.map +1 -1
  786. package/dist/production/src/model/service/membershipUtils.js.map +1 -1
  787. package/dist/production/src/model/type/ApiKey.cjs.map +1 -1
  788. package/dist/production/src/model/type/ApiKey.js.map +1 -1
  789. package/dist/production/src/model/utils/DatabaseContext.cjs.map +1 -1
  790. package/dist/production/src/model/utils/DatabaseContext.js.map +1 -1
  791. package/dist/production/src/model/utils/Response.cjs.map +1 -1
  792. package/dist/production/src/model/utils/Response.js.map +1 -1
  793. package/dist/production/src/model/utils/password.cjs.map +1 -1
  794. package/dist/production/src/model/utils/password.js.map +1 -1
  795. package/dist/production/src/model/utils/tokenUtils.cjs +39 -0
  796. package/dist/production/src/model/utils/tokenUtils.cjs.map +1 -1
  797. package/dist/production/src/model/utils/tokenUtils.js +40 -1
  798. package/dist/production/src/model/utils/tokenUtils.js.map +1 -1
  799. package/dist/production/src/resolvers/ResolverFactory.cjs +8 -1
  800. package/dist/production/src/resolvers/ResolverFactory.cjs.map +1 -1
  801. package/dist/production/src/resolvers/ResolverFactory.js +8 -1
  802. package/dist/production/src/resolvers/ResolverFactory.js.map +1 -1
  803. package/dist/production/src/resolvers/TenantResolverContextFactory.cjs.map +1 -1
  804. package/dist/production/src/resolvers/TenantResolverContextFactory.js.map +1 -1
  805. package/dist/production/src/resolvers/errorUtils.cjs.map +1 -1
  806. package/dist/production/src/resolvers/errorUtils.js.map +1 -1
  807. package/dist/production/src/resolvers/membershipUtils.cjs.map +1 -1
  808. package/dist/production/src/resolvers/membershipUtils.js.map +1 -1
  809. package/dist/production/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.cjs.map +1 -1
  810. package/dist/production/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.js.map +1 -1
  811. package/dist/production/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.cjs.map +1 -1
  812. package/dist/production/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.js.map +1 -1
  813. package/dist/production/src/resolvers/mutation/configuration/ConfigurationMutationResolver.cjs +41 -0
  814. package/dist/production/src/resolvers/mutation/configuration/ConfigurationMutationResolver.cjs.map +1 -0
  815. package/dist/production/src/resolvers/mutation/configuration/ConfigurationMutationResolver.js +41 -0
  816. package/dist/production/src/resolvers/mutation/configuration/ConfigurationMutationResolver.js.map +1 -0
  817. package/dist/production/src/resolvers/mutation/identity/GlobalRolesMutationResolver.cjs.map +1 -1
  818. package/dist/production/src/resolvers/mutation/identity/GlobalRolesMutationResolver.js.map +1 -1
  819. package/dist/production/src/resolvers/mutation/idp/AddIDPMutationResolver.cjs.map +1 -1
  820. package/dist/production/src/resolvers/mutation/idp/AddIDPMutationResolver.js.map +1 -1
  821. package/dist/production/src/resolvers/mutation/idp/DisableIDPMutationResolver.cjs.map +1 -1
  822. package/dist/production/src/resolvers/mutation/idp/DisableIDPMutationResolver.js.map +1 -1
  823. package/dist/production/src/resolvers/mutation/idp/EnableIDPMutationResolver.cjs.map +1 -1
  824. package/dist/production/src/resolvers/mutation/idp/EnableIDPMutationResolver.js.map +1 -1
  825. package/dist/production/src/resolvers/mutation/idp/UpdateIDPMutationResolver.cjs.map +1 -1
  826. package/dist/production/src/resolvers/mutation/idp/UpdateIDPMutationResolver.js.map +1 -1
  827. package/dist/production/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.cjs.map +1 -1
  828. package/dist/production/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.js.map +1 -1
  829. package/dist/production/src/resolvers/mutation/person/ChangePasswordMutationResolver.cjs.map +1 -1
  830. package/dist/production/src/resolvers/mutation/person/ChangePasswordMutationResolver.js.map +1 -1
  831. package/dist/production/src/resolvers/mutation/person/ChangeProfileMutationResolver.cjs.map +1 -1
  832. package/dist/production/src/resolvers/mutation/person/ChangeProfileMutationResolver.js.map +1 -1
  833. package/dist/production/src/resolvers/mutation/person/DisablePersonMutationResolver.cjs.map +1 -1
  834. package/dist/production/src/resolvers/mutation/person/DisablePersonMutationResolver.js.map +1 -1
  835. package/dist/production/src/resolvers/mutation/person/IDPMutationResolver.cjs +4 -1
  836. package/dist/production/src/resolvers/mutation/person/IDPMutationResolver.cjs.map +1 -1
  837. package/dist/production/src/resolvers/mutation/person/IDPMutationResolver.js +4 -1
  838. package/dist/production/src/resolvers/mutation/person/IDPMutationResolver.js.map +1 -1
  839. package/dist/production/src/resolvers/mutation/person/InviteMutationResolver.cjs.map +1 -1
  840. package/dist/production/src/resolvers/mutation/person/InviteMutationResolver.js.map +1 -1
  841. package/dist/production/src/resolvers/mutation/person/OtpMutationResolver.cjs.map +1 -1
  842. package/dist/production/src/resolvers/mutation/person/OtpMutationResolver.js.map +1 -1
  843. package/dist/production/src/resolvers/mutation/person/PasswordlessMutationResolver.cjs +83 -0
  844. package/dist/production/src/resolvers/mutation/person/PasswordlessMutationResolver.cjs.map +1 -0
  845. package/dist/production/src/resolvers/mutation/person/PasswordlessMutationResolver.js +83 -0
  846. package/dist/production/src/resolvers/mutation/person/PasswordlessMutationResolver.js.map +1 -0
  847. package/dist/production/src/resolvers/mutation/person/ResetPasswordMutationResolver.cjs.map +1 -1
  848. package/dist/production/src/resolvers/mutation/person/ResetPasswordMutationResolver.js.map +1 -1
  849. package/dist/production/src/resolvers/mutation/person/SignInMutationResolver.cjs.map +1 -1
  850. package/dist/production/src/resolvers/mutation/person/SignInMutationResolver.js.map +1 -1
  851. package/dist/production/src/resolvers/mutation/person/SignOutMutationResolver.cjs.map +1 -1
  852. package/dist/production/src/resolvers/mutation/person/SignOutMutationResolver.js.map +1 -1
  853. package/dist/production/src/resolvers/mutation/person/SignUpMutationResolver.cjs.map +1 -1
  854. package/dist/production/src/resolvers/mutation/person/SignUpMutationResolver.js.map +1 -1
  855. package/dist/production/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.cjs +52 -0
  856. package/dist/production/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.cjs.map +1 -0
  857. package/dist/production/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.js +52 -0
  858. package/dist/production/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.js.map +1 -0
  859. package/dist/production/src/resolvers/mutation/project/CreateProjectMutationResolver.cjs.map +1 -1
  860. package/dist/production/src/resolvers/mutation/project/CreateProjectMutationResolver.js.map +1 -1
  861. package/dist/production/src/resolvers/mutation/project/SetProjectSecretMutationResolver.cjs.map +1 -1
  862. package/dist/production/src/resolvers/mutation/project/SetProjectSecretMutationResolver.js.map +1 -1
  863. package/dist/production/src/resolvers/mutation/project/UpdateProjectMutationResolver.cjs.map +1 -1
  864. package/dist/production/src/resolvers/mutation/project/UpdateProjectMutationResolver.js.map +1 -1
  865. package/dist/production/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.cjs.map +1 -1
  866. package/dist/production/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.js.map +1 -1
  867. package/dist/production/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.cjs.map +1 -1
  868. package/dist/production/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.js.map +1 -1
  869. package/dist/production/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.cjs.map +1 -1
  870. package/dist/production/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.js.map +1 -1
  871. package/dist/production/src/resolvers/query/ConfigurationQueryResolver.cjs +34 -0
  872. package/dist/production/src/resolvers/query/ConfigurationQueryResolver.cjs.map +1 -0
  873. package/dist/production/src/resolvers/query/ConfigurationQueryResolver.js +34 -0
  874. package/dist/production/src/resolvers/query/ConfigurationQueryResolver.js.map +1 -0
  875. package/dist/production/src/resolvers/query/IDPQueryResolver.cjs.map +1 -1
  876. package/dist/production/src/resolvers/query/IDPQueryResolver.js.map +1 -1
  877. package/dist/production/src/resolvers/query/MailTemplateQueryResolver.cjs.map +1 -1
  878. package/dist/production/src/resolvers/query/MailTemplateQueryResolver.js.map +1 -1
  879. package/dist/production/src/resolvers/query/MeQueryResolver.cjs.map +1 -1
  880. package/dist/production/src/resolvers/query/MeQueryResolver.js.map +1 -1
  881. package/dist/production/src/resolvers/query/PersonQueryResolver.cjs.map +1 -1
  882. package/dist/production/src/resolvers/query/PersonQueryResolver.js.map +1 -1
  883. package/dist/production/src/resolvers/query/ProjectMembersQueryResolver.cjs.map +1 -1
  884. package/dist/production/src/resolvers/query/ProjectMembersQueryResolver.js.map +1 -1
  885. package/dist/production/src/resolvers/query/ProjectQueryResolver.cjs.map +1 -1
  886. package/dist/production/src/resolvers/query/ProjectQueryResolver.js.map +1 -1
  887. package/dist/production/src/resolvers/responseHelpers/PersonResponseFactory.cjs +1 -0
  888. package/dist/production/src/resolvers/responseHelpers/PersonResponseFactory.cjs.map +1 -1
  889. package/dist/production/src/resolvers/responseHelpers/PersonResponseFactory.js +1 -0
  890. package/dist/production/src/resolvers/responseHelpers/PersonResponseFactory.js.map +1 -1
  891. package/dist/production/src/resolvers/responseHelpers/SignInResponseFactory.cjs.map +1 -1
  892. package/dist/production/src/resolvers/responseHelpers/SignInResponseFactory.js.map +1 -1
  893. package/dist/production/src/resolvers/types/IdentityTypeResolver.cjs.map +1 -1
  894. package/dist/production/src/resolvers/types/IdentityTypeResolver.js.map +1 -1
  895. package/dist/production/src/resolvers/types/ProjectTypeResolver.cjs.map +1 -1
  896. package/dist/production/src/resolvers/types/ProjectTypeResolver.js.map +1 -1
  897. package/dist/production/src/schema/tenant.graphql.cjs +162 -10
  898. package/dist/production/src/schema/tenant.graphql.cjs.map +1 -1
  899. package/dist/production/src/schema/tenant.graphql.js +162 -10
  900. package/dist/production/src/schema/tenant.graphql.js.map +1 -1
  901. package/dist/production/src/utils/Mailer.cjs.map +1 -1
  902. package/dist/production/src/utils/Mailer.js.map +1 -1
  903. package/dist/production/src/utils/TemplateRenderer.cjs.map +1 -1
  904. package/dist/production/src/utils/TemplateRenderer.js.map +1 -1
  905. package/dist/production/src/utils/array.cjs.map +1 -1
  906. package/dist/production/src/utils/array.js.map +1 -1
  907. package/dist/production/src/utils/batchQuery.cjs.map +1 -1
  908. package/dist/production/src/utils/batchQuery.js.map +1 -1
  909. package/dist/tests/cases/integration/mocked/sql/{createPasswordResetSql.d.ts → createPersonTokenSql.d.ts} +3 -2
  910. package/dist/tests/cases/integration/mocked/sql/createPersonTokenSql.d.ts.map +1 -0
  911. package/dist/tests/cases/integration/mocked/sql/getPersonByEmailSql.d.ts.map +1 -1
  912. package/dist/tests/src/IdPMock.d.ts +2 -2
  913. package/dist/tests/src/IdPMock.d.ts.map +1 -1
  914. package/dist/tests/src/mailer.d.ts.map +1 -1
  915. package/dist/tests/tsconfig.tsbuildinfo +1 -1
  916. package/dist/types/TenantContainer.d.ts +18 -0
  917. package/dist/types/TenantContainer.d.ts.map +1 -1
  918. package/dist/types/migrations/2024-08-26-120000-passwordless.d.ts +3 -0
  919. package/dist/types/migrations/2024-08-26-120000-passwordless.d.ts.map +1 -0
  920. package/dist/types/migrations/runner.d.ts.map +1 -1
  921. package/dist/types/migrations/snapshot.d.ts.map +1 -1
  922. package/dist/types/model/authorization/PermissionActions.d.ts +25 -0
  923. package/dist/types/model/authorization/PermissionActions.d.ts.map +1 -1
  924. package/dist/types/model/authorization/PermissionsFactory.d.ts.map +1 -1
  925. package/dist/types/model/commands/configuration/UpdateConfigurationCommand.d.ts +8 -0
  926. package/dist/types/model/commands/configuration/UpdateConfigurationCommand.d.ts.map +1 -0
  927. package/dist/types/model/commands/configuration/index.d.ts +2 -0
  928. package/dist/types/model/commands/configuration/index.d.ts.map +1 -0
  929. package/dist/types/model/commands/index.d.ts +2 -2
  930. package/dist/types/model/commands/index.d.ts.map +1 -1
  931. package/dist/types/model/commands/person/CreatePersonCommand.d.ts.map +1 -1
  932. package/dist/types/model/commands/person/TogglePersonPasswordlessCommand.d.ts +8 -0
  933. package/dist/types/model/commands/person/TogglePersonPasswordlessCommand.d.ts.map +1 -0
  934. package/dist/types/model/commands/person/index.d.ts +1 -0
  935. package/dist/types/model/commands/person/index.d.ts.map +1 -1
  936. package/dist/types/model/commands/personToken/ActivateOtpCommand.d.ts +8 -0
  937. package/dist/types/model/commands/personToken/ActivateOtpCommand.d.ts.map +1 -0
  938. package/dist/types/model/commands/personToken/CreatePersonTokenCommand.d.ts +19 -0
  939. package/dist/types/model/commands/personToken/CreatePersonTokenCommand.d.ts.map +1 -0
  940. package/dist/types/model/commands/personToken/IncreaseOtpAttemptCommand.d.ts +7 -0
  941. package/dist/types/model/commands/personToken/IncreaseOtpAttemptCommand.d.ts.map +1 -0
  942. package/dist/types/model/commands/personToken/InvalidateTokenCommand.d.ts +7 -0
  943. package/dist/types/model/commands/personToken/InvalidateTokenCommand.d.ts.map +1 -0
  944. package/dist/types/model/commands/{passwordReset → personToken}/ResetPasswordCommand.d.ts +3 -2
  945. package/dist/types/model/commands/personToken/ResetPasswordCommand.d.ts.map +1 -0
  946. package/dist/types/model/commands/personToken/SavePersonTokenCommand.d.ts +19 -0
  947. package/dist/types/model/commands/personToken/SavePersonTokenCommand.d.ts.map +1 -0
  948. package/dist/types/model/commands/personToken/index.d.ts +7 -0
  949. package/dist/types/model/commands/personToken/index.d.ts.map +1 -0
  950. package/dist/types/model/consts/expirations.d.ts +3 -0
  951. package/dist/types/model/consts/expirations.d.ts.map +1 -0
  952. package/dist/types/model/mailing/UserMailer.d.ts +10 -0
  953. package/dist/types/model/mailing/UserMailer.d.ts.map +1 -1
  954. package/dist/types/model/mailing/templates/PasswordlessSignIn.mustache.d.ts +3 -0
  955. package/dist/types/model/mailing/templates/PasswordlessSignIn.mustache.d.ts.map +1 -0
  956. package/dist/types/model/mailing/type.d.ts +2 -1
  957. package/dist/types/model/mailing/type.d.ts.map +1 -1
  958. package/dist/types/model/queries/configuration/ConfigurationQuery.d.ts +6 -0
  959. package/dist/types/model/queries/configuration/ConfigurationQuery.d.ts.map +1 -0
  960. package/dist/types/model/queries/configuration/index.d.ts +2 -0
  961. package/dist/types/model/queries/configuration/index.d.ts.map +1 -0
  962. package/dist/types/model/queries/index.d.ts +1 -0
  963. package/dist/types/model/queries/index.d.ts.map +1 -1
  964. package/dist/types/model/queries/person/PersonQueryBuilderFactory.d.ts.map +1 -1
  965. package/dist/types/model/queries/person/types.d.ts +1 -0
  966. package/dist/types/model/queries/person/types.d.ts.map +1 -1
  967. package/dist/types/model/queries/personToken/PersonTokenQuery.d.ts +12 -0
  968. package/dist/types/model/queries/personToken/PersonTokenQuery.d.ts.map +1 -0
  969. package/dist/types/model/service/ConfigurationManager.d.ts +9 -0
  970. package/dist/types/model/service/ConfigurationManager.d.ts.map +1 -0
  971. package/dist/types/model/service/IDPSignInManager.d.ts +1 -0
  972. package/dist/types/model/service/IDPSignInManager.d.ts.map +1 -1
  973. package/dist/types/model/service/InviteManager.d.ts.map +1 -1
  974. package/dist/types/model/service/PasswordResetManager.d.ts +1 -1
  975. package/dist/types/model/service/PasswordResetManager.d.ts.map +1 -1
  976. package/dist/types/model/service/PasswordlessSignInManager.d.ts +54 -0
  977. package/dist/types/model/service/PasswordlessSignInManager.d.ts.map +1 -0
  978. package/dist/types/model/service/PersonManager.d.ts +1 -0
  979. package/dist/types/model/service/PersonManager.d.ts.map +1 -1
  980. package/dist/types/model/service/PersonTokenManager.d.ts +3 -0
  981. package/dist/types/model/service/PersonTokenManager.d.ts.map +1 -0
  982. package/dist/types/model/service/helpers/getPreferredProject.d.ts +3 -0
  983. package/dist/types/model/service/helpers/getPreferredProject.d.ts.map +1 -0
  984. package/dist/types/model/service/idp/IdentityProviderHandler.d.ts +3 -3
  985. package/dist/types/model/service/idp/IdentityProviderHandler.d.ts.map +1 -1
  986. package/dist/types/model/service/idp/providers/AppleProvider.d.ts +10 -2
  987. package/dist/types/model/service/idp/providers/AppleProvider.d.ts.map +1 -1
  988. package/dist/types/model/service/idp/providers/FacebookProvider.d.ts +10 -2
  989. package/dist/types/model/service/idp/providers/FacebookProvider.d.ts.map +1 -1
  990. package/dist/types/model/service/idp/providers/OIDCHelpers.d.ts +4 -4
  991. package/dist/types/model/service/idp/providers/OIDCHelpers.d.ts.map +1 -1
  992. package/dist/types/model/service/idp/providers/OIDCProvider.d.ts +6 -2
  993. package/dist/types/model/service/idp/providers/OIDCProvider.d.ts.map +1 -1
  994. package/dist/types/model/service/idp/providers/OIDCTypes.d.ts +21 -5
  995. package/dist/types/model/service/idp/providers/OIDCTypes.d.ts.map +1 -1
  996. package/dist/types/model/type/PersonToken.d.ts +16 -0
  997. package/dist/types/model/type/PersonToken.d.ts.map +1 -0
  998. package/dist/types/model/type/index.d.ts +1 -0
  999. package/dist/types/model/type/index.d.ts.map +1 -1
  1000. package/dist/types/model/utils/tokenUtils.d.ts +8 -0
  1001. package/dist/types/model/utils/tokenUtils.d.ts.map +1 -1
  1002. package/dist/types/resolvers/ResolverFactory.d.ts +8 -0
  1003. package/dist/types/resolvers/ResolverFactory.d.ts.map +1 -1
  1004. package/dist/types/resolvers/mutation/configuration/ConfigurationMutationResolver.d.ts +9 -0
  1005. package/dist/types/resolvers/mutation/configuration/ConfigurationMutationResolver.d.ts.map +1 -0
  1006. package/dist/types/resolvers/mutation/person/IDPMutationResolver.d.ts.map +1 -1
  1007. package/dist/types/resolvers/mutation/person/PasswordlessMutationResolver.d.ts +13 -0
  1008. package/dist/types/resolvers/mutation/person/PasswordlessMutationResolver.d.ts.map +1 -0
  1009. package/dist/types/resolvers/mutation/person/ResetPasswordMutationResolver.d.ts.map +1 -1
  1010. package/dist/types/resolvers/mutation/person/TogglePasswordlessMutationResolver.d.ts +13 -0
  1011. package/dist/types/resolvers/mutation/person/TogglePasswordlessMutationResolver.d.ts.map +1 -0
  1012. package/dist/types/resolvers/query/ConfigurationQueryResolver.d.ts +9 -0
  1013. package/dist/types/resolvers/query/ConfigurationQueryResolver.d.ts.map +1 -0
  1014. package/dist/types/resolvers/responseHelpers/PersonResponseFactory.d.ts.map +1 -1
  1015. package/dist/types/resolvers/types/ProjectTypeResolver.d.ts +3 -3
  1016. package/dist/types/schema/index.d.ts +362 -38
  1017. package/dist/types/schema/index.d.ts.map +1 -1
  1018. package/dist/types/schema/tenant.graphql.d.ts.map +1 -1
  1019. package/dist/types/tsconfig.tsbuildinfo +1 -1
  1020. package/dist/types/utils/batchQuery.d.ts.map +1 -1
  1021. package/{graphql-tenant.codegen.yml → graphql.codegen.yml} +1 -1
  1022. package/package.json +23 -27
  1023. package/src/TenantContainer.ts +18 -0
  1024. package/src/migrations/2024-08-26-120000-passwordless.ts +31 -0
  1025. package/src/migrations/runner.ts +2 -0
  1026. package/src/migrations/snapshot-template-end.txt +3 -0
  1027. package/src/migrations/snapshot.ts +33 -5
  1028. package/src/model/authorization/PermissionActions.ts +7 -0
  1029. package/src/model/authorization/PermissionsFactory.ts +5 -0
  1030. package/src/model/commands/configuration/UpdateConfigurationCommand.ts +26 -0
  1031. package/src/model/commands/configuration/index.ts +1 -0
  1032. package/src/model/commands/index.ts +2 -2
  1033. package/src/model/commands/person/CreatePersonCommand.ts +1 -0
  1034. package/src/model/commands/person/TogglePersonPasswordlessCommand.ts +18 -0
  1035. package/src/model/commands/person/index.ts +1 -0
  1036. package/src/model/commands/personToken/ActivateOtpCommand.ts +24 -0
  1037. package/src/model/commands/personToken/CreatePersonTokenCommand.ts +42 -0
  1038. package/src/model/commands/personToken/IncreaseOtpAttemptCommand.ts +23 -0
  1039. package/src/model/commands/personToken/InvalidateTokenCommand.ts +22 -0
  1040. package/src/model/commands/personToken/ResetPasswordCommand.ts +28 -0
  1041. package/src/model/commands/personToken/SavePersonTokenCommand.ts +42 -0
  1042. package/src/model/commands/personToken/index.ts +6 -0
  1043. package/src/model/consts/expirations.ts +2 -0
  1044. package/src/model/mailing/UserMailer.ts +14 -0
  1045. package/src/model/mailing/templates/PasswordlessSignIn.mustache.ts +15 -0
  1046. package/src/model/mailing/type.ts +3 -0
  1047. package/src/model/queries/configuration/ConfigurationQuery.ts +30 -0
  1048. package/src/model/queries/configuration/index.ts +1 -0
  1049. package/src/model/queries/index.ts +1 -0
  1050. package/src/model/queries/person/PersonQueryBuilderFactory.ts +1 -0
  1051. package/src/model/queries/person/types.ts +1 -0
  1052. package/src/model/queries/personToken/PersonTokenQuery.ts +35 -0
  1053. package/src/model/service/ConfigurationManager.ts +22 -0
  1054. package/src/model/service/IDPSignInManager.ts +7 -6
  1055. package/src/model/service/InviteManager.ts +5 -6
  1056. package/src/model/service/OtpAuthenticator.ts +1 -1
  1057. package/src/model/service/PasswordResetManager.ts +4 -10
  1058. package/src/model/service/PasswordlessSignInManager.ts +190 -0
  1059. package/src/model/service/PersonManager.ts +6 -0
  1060. package/src/model/service/PersonTokenManager.ts +2 -0
  1061. package/src/model/service/helpers/getPreferredProject.ts +11 -0
  1062. package/src/model/service/idp/IdentityProviderHandler.ts +3 -3
  1063. package/src/model/service/idp/providers/AppleProvider.ts +3 -3
  1064. package/src/model/service/idp/providers/FacebookProvider.ts +3 -3
  1065. package/src/model/service/idp/providers/OIDCHelpers.ts +11 -6
  1066. package/src/model/service/idp/providers/OIDCProvider.ts +10 -4
  1067. package/src/model/service/idp/providers/OIDCTypes.ts +5 -1
  1068. package/src/model/type/PersonToken.ts +21 -0
  1069. package/src/model/type/index.ts +1 -0
  1070. package/src/model/utils/tokenUtils.ts +47 -0
  1071. package/src/resolvers/ResolverFactory.ts +19 -0
  1072. package/src/resolvers/mutation/configuration/ConfigurationMutationResolver.ts +29 -0
  1073. package/src/resolvers/mutation/person/IDPMutationResolver.ts +4 -1
  1074. package/src/resolvers/mutation/person/PasswordlessMutationResolver.ts +81 -0
  1075. package/src/resolvers/mutation/person/ResetPasswordMutationResolver.ts +1 -10
  1076. package/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.ts +44 -0
  1077. package/src/resolvers/query/ConfigurationQueryResolver.ts +21 -0
  1078. package/src/resolvers/responseHelpers/PersonResponseFactory.ts +1 -0
  1079. package/src/resolvers/types/ProjectTypeResolver.ts +3 -3
  1080. package/src/schema/index.ts +362 -35
  1081. package/src/schema/tenant.graphql.ts +162 -10
  1082. package/tests/cases/integration/mocked/addProjectMemberMutation.test.ts +1 -1
  1083. package/tests/cases/integration/mocked/changeMyPasswordMutation.test.ts +2 -2
  1084. package/tests/cases/integration/mocked/changeMyProfileMutation.test.ts +2 -2
  1085. package/tests/cases/integration/mocked/changePasswordMutation.test.ts +1 -1
  1086. package/tests/cases/integration/mocked/changeProfileMutation.test.ts +2 -2
  1087. package/tests/cases/integration/mocked/confirmOtpMutation.test.ts +1 -1
  1088. package/tests/cases/integration/mocked/createApiKeyMutation.test.ts +1 -1
  1089. package/tests/cases/integration/mocked/createSessionKeyMutation.test.ts +1 -1
  1090. package/tests/cases/integration/mocked/disableApiKeyMutation.ts +1 -1
  1091. package/tests/cases/integration/mocked/inviteMutations.test.ts +3 -3
  1092. package/tests/cases/integration/mocked/listProjectMembersQuery.test.ts +1 -1
  1093. package/tests/cases/integration/mocked/personByIdQuery.test.ts +1 -1
  1094. package/tests/cases/integration/mocked/prepareOtpMutation.test.ts +3 -3
  1095. package/tests/cases/integration/mocked/removeProjectMemberMutation.test.ts +1 -1
  1096. package/tests/cases/integration/mocked/signInIdpMutation.test.ts +1 -1
  1097. package/tests/cases/integration/mocked/signInMutation.test.ts +1 -1
  1098. package/tests/cases/integration/mocked/signOutMutation.test.ts +1 -1
  1099. package/tests/cases/integration/mocked/signUpMutation.test.ts +1 -1
  1100. package/tests/cases/integration/mocked/sql/{createPasswordResetSql.ts → createPersonTokenSql.ts} +5 -3
  1101. package/tests/cases/integration/mocked/sql/getPersonByEmailSql.ts +2 -1
  1102. package/tests/cases/integration/mocked/sql/getPersonByIdSql.ts +1 -1
  1103. package/tests/cases/integration/mocked/sql/getPersonByIdentity.ts +1 -1
  1104. package/tests/cases/integration/mocked/sql/getPersonByIdpSql.ts +1 -1
  1105. package/tests/cases/integration/mocked/updateProjectMemberMutation.test.ts +1 -1
  1106. package/tests/cases/migrations/2020-06-08-134000-tenant-credentials.test.ts +5 -3
  1107. package/tests/cases/unit/authorization/membershipAwareAccessNode.test.ts +9 -9
  1108. package/tests/cases/unit/authorization/membershipMatcher.test.ts +10 -10
  1109. package/tests/src/IdPMock.ts +2 -2
  1110. package/tests/src/mailer.ts +3 -4
  1111. package/tests/src/testGraphql.ts +2 -2
  1112. package/dist/development/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.cjs +0 -30
  1113. package/dist/development/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.cjs.map +0 -1
  1114. package/dist/development/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.js +0 -30
  1115. package/dist/development/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.js.map +0 -1
  1116. package/dist/development/src/model/commands/passwordReset/ResetPasswordCommand.cjs +0 -38
  1117. package/dist/development/src/model/commands/passwordReset/ResetPasswordCommand.cjs.map +0 -1
  1118. package/dist/development/src/model/commands/passwordReset/ResetPasswordCommand.js +0 -38
  1119. package/dist/development/src/model/commands/passwordReset/ResetPasswordCommand.js.map +0 -1
  1120. package/dist/development/src/model/commands/passwordReset/SavePasswordResetRequestCommand.cjs +0 -24
  1121. package/dist/development/src/model/commands/passwordReset/SavePasswordResetRequestCommand.cjs.map +0 -1
  1122. package/dist/development/src/model/commands/passwordReset/SavePasswordResetRequestCommand.js +0 -24
  1123. package/dist/development/src/model/commands/passwordReset/SavePasswordResetRequestCommand.js.map +0 -1
  1124. package/dist/production/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.cjs +0 -30
  1125. package/dist/production/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.cjs.map +0 -1
  1126. package/dist/production/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.js +0 -30
  1127. package/dist/production/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.js.map +0 -1
  1128. package/dist/production/src/model/commands/passwordReset/ResetPasswordCommand.cjs +0 -38
  1129. package/dist/production/src/model/commands/passwordReset/ResetPasswordCommand.cjs.map +0 -1
  1130. package/dist/production/src/model/commands/passwordReset/ResetPasswordCommand.js +0 -38
  1131. package/dist/production/src/model/commands/passwordReset/ResetPasswordCommand.js.map +0 -1
  1132. package/dist/production/src/model/commands/passwordReset/SavePasswordResetRequestCommand.cjs +0 -24
  1133. package/dist/production/src/model/commands/passwordReset/SavePasswordResetRequestCommand.cjs.map +0 -1
  1134. package/dist/production/src/model/commands/passwordReset/SavePasswordResetRequestCommand.js +0 -24
  1135. package/dist/production/src/model/commands/passwordReset/SavePasswordResetRequestCommand.js.map +0 -1
  1136. package/dist/tests/cases/integration/mocked/sql/createPasswordResetSql.d.ts.map +0 -1
  1137. package/dist/tests/src/testTenantDb.d.ts +0 -31
  1138. package/dist/tests/src/testTenantDb.d.ts.map +0 -1
  1139. package/dist/types/model/commands/passwordReset/CreatePasswordResetRequestCommand.d.ts +0 -12
  1140. package/dist/types/model/commands/passwordReset/CreatePasswordResetRequestCommand.d.ts.map +0 -1
  1141. package/dist/types/model/commands/passwordReset/ResetPasswordCommand.d.ts.map +0 -1
  1142. package/dist/types/model/commands/passwordReset/SavePasswordResetRequestCommand.d.ts +0 -10
  1143. package/dist/types/model/commands/passwordReset/SavePasswordResetRequestCommand.d.ts.map +0 -1
  1144. package/dist/types/model/commands/passwordReset/index.d.ts +0 -4
  1145. package/dist/types/model/commands/passwordReset/index.d.ts.map +0 -1
  1146. package/src/model/commands/passwordReset/CreatePasswordResetRequestCommand.ts +0 -25
  1147. package/src/model/commands/passwordReset/ResetPasswordCommand.ts +0 -57
  1148. package/src/model/commands/passwordReset/SavePasswordResetRequestCommand.ts +0 -28
  1149. package/src/model/commands/passwordReset/index.ts +0 -3
  1150. package/tests/src/testTenantDb.ts +0 -202
@@ -1 +1 @@
1
- {"version":3,"file":"SignInMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignInMutationResolver.ts"],"sourcesContent":["import {\n\tCreateSessionTokenResponse,\n\tMutationCreateSessionTokenArgs,\n\tMutationResolvers,\n\tMutationSignInArgs,\n\tSignInResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, PersonUniqueIdentifier, SignInManager } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { SignInResponseFactory } from '../../responseHelpers/SignInResponseFactory'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class SignInMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly signInManager: SignInManager,\n\t\tprivate readonly signInResponseFactory: SignInResponseFactory,\n\t) {}\n\n\tasync signIn(parent: any, args: MutationSignInArgs, context: TenantResolverContext): Promise<SignInResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_IN,\n\t\t\tmessage: 'You are not allowed to sign in',\n\t\t})\n\n\t\tconst response = await this.signInManager.signIn(\n\t\t\tcontext.db,\n\t\t\targs.email,\n\t\t\targs.password,\n\t\t\targs.expiration || undefined,\n\t\t\targs.otpToken || undefined,\n\t\t)\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: await this.signInResponseFactory.createResponse(response.result, context),\n\t\t}\n\t}\n\n\tasync createSessionToken(parent: any, args: MutationCreateSessionTokenArgs, context: TenantResolverContext): Promise<CreateSessionTokenResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_CREATE_SESSION_KEY(),\n\t\t\tmessage: 'You are not allowed to create a session key',\n\t\t})\n\t\tlet identifier: PersonUniqueIdentifier\n\t\tif (args.email) {\n\t\t\tidentifier = { type: 'email', email: args.email }\n\t\t} else if (args.personId) {\n\t\t\tidentifier = { type: 'id', id: args.personId }\n\t\t} else {\n\t\t\tthrow new UserInputError(`Please provide either email or personId`)\n\t\t}\n\n\t\tconst response = await this.signInManager.createSessionToken(\n\t\t\tcontext.db,\n\t\t\tidentifier,\n\t\t\targs.expiration || undefined,\n\t\t\tasync person => await context.requireAccess({\n\t\t\t\taction: PermissionActions.PERSON_CREATE_SESSION_KEY(person.roles),\n\t\t\t\tmessage: 'You are not allowed to create a session key for this person.',\n\t\t\t}),\n\t\t)\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: await this.signInResponseFactory.createResponse(response.result, context),\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse","UserInputError"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAaO,MAAM,uBAAoD;AAAA,EAChE,YACkB,eACA,uBAChB;AAFgB,SAAA,gBAAA;AACA,SAAA,wBAAA;AAAA,EACf;AAAA,EAEH,MAAM,OAAO,QAAa,MAA0B,SAAyD;AAC5G,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,WAAW,MAAM,KAAK,cAAc;AAAA,MACzC,QAAQ;AAAA,MACR,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,cAAc;AAAA,MACnB,KAAK,YAAY;AAAA,IAAA;AAGd,QAAA,CAAC,SAAS,IAAI;AACjB,aAAOC,WAAoB,oBAAA,SAAS,OAAO,SAAS,YAAY;AAAA,IACjE;AAEO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ,MAAM,KAAK,sBAAsB,eAAe,SAAS,QAAQ,OAAO;AAAA,IAAA;AAAA,EAElF;AAAA,EAEA,MAAM,mBAAmB,QAAa,MAAsC,SAAqE;AAChJ,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQD,oCAAkB,0BAA0B;AAAA,MACpD,SAAS;AAAA,IAAA,CACT;AACG,QAAA;AACJ,QAAI,KAAK,OAAO;AACf,mBAAa,EAAE,MAAM,SAAS,OAAO,KAAK;IAAM,WACtC,KAAK,UAAU;AACzB,mBAAa,EAAE,MAAM,MAAM,IAAI,KAAK;IAAS,OACvC;AACA,YAAA,IAAIE,4BAAe,yCAAyC;AAAA,IACnE;AAEM,UAAA,WAAW,MAAM,KAAK,cAAc;AAAA,MACzC,QAAQ;AAAA,MACR;AAAA,MACA,KAAK,cAAc;AAAA,MACnB,OAAM,WAAU,MAAM,QAAQ,cAAc;AAAA,QAC3C,QAAQF,kBAAA,kBAAkB,0BAA0B,OAAO,KAAK;AAAA,QAChE,SAAS;AAAA,MAAA,CACT;AAAA,IAAA;AAGE,QAAA,CAAC,SAAS,IAAI;AACjB,aAAOC,WAAoB,oBAAA,SAAS,OAAO,SAAS,YAAY;AAAA,IACjE;AACO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,MAAM,KAAK,sBAAsB,eAAe,SAAS,QAAQ,OAAO;AAAA,IAAA;AAAA,EAElF;AACD;;"}
1
+ {"version":3,"file":"SignInMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignInMutationResolver.ts"],"sourcesContent":["import {\n\tCreateSessionTokenResponse,\n\tMutationCreateSessionTokenArgs,\n\tMutationResolvers,\n\tMutationSignInArgs,\n\tSignInResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, PersonUniqueIdentifier, SignInManager } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { SignInResponseFactory } from '../../responseHelpers/SignInResponseFactory'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class SignInMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly signInManager: SignInManager,\n\t\tprivate readonly signInResponseFactory: SignInResponseFactory,\n\t) {}\n\n\tasync signIn(parent: any, args: MutationSignInArgs, context: TenantResolverContext): Promise<SignInResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_IN,\n\t\t\tmessage: 'You are not allowed to sign in',\n\t\t})\n\n\t\tconst response = await this.signInManager.signIn(\n\t\t\tcontext.db,\n\t\t\targs.email,\n\t\t\targs.password,\n\t\t\targs.expiration || undefined,\n\t\t\targs.otpToken || undefined,\n\t\t)\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: await this.signInResponseFactory.createResponse(response.result, context),\n\t\t}\n\t}\n\n\tasync createSessionToken(parent: any, args: MutationCreateSessionTokenArgs, context: TenantResolverContext): Promise<CreateSessionTokenResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_CREATE_SESSION_KEY(),\n\t\t\tmessage: 'You are not allowed to create a session key',\n\t\t})\n\t\tlet identifier: PersonUniqueIdentifier\n\t\tif (args.email) {\n\t\t\tidentifier = { type: 'email', email: args.email }\n\t\t} else if (args.personId) {\n\t\t\tidentifier = { type: 'id', id: args.personId }\n\t\t} else {\n\t\t\tthrow new UserInputError(`Please provide either email or personId`)\n\t\t}\n\n\t\tconst response = await this.signInManager.createSessionToken(\n\t\t\tcontext.db,\n\t\t\tidentifier,\n\t\t\targs.expiration || undefined,\n\t\t\tasync person => await context.requireAccess({\n\t\t\t\taction: PermissionActions.PERSON_CREATE_SESSION_KEY(person.roles),\n\t\t\t\tmessage: 'You are not allowed to create a session key for this person.',\n\t\t\t}),\n\t\t)\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: await this.signInResponseFactory.createResponse(response.result, context),\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse","UserInputError"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAaO,MAAM,uBAAoD;AAAA,EAChE,YACkB,eACA,uBAChB;AAFgB,SAAA,gBAAA;AACA,SAAA,wBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,OAAO,QAAa,MAA0B,SAAyD;AAC5G,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,WAAW,MAAM,KAAK,cAAc;AAAA,MACzC,QAAQ;AAAA,MACR,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,cAAc;AAAA,MACnB,KAAK,YAAY;AAAA,IAClB;AAEI,QAAA,CAAC,SAAS,IAAI;AACjB,aAAOC,WAAoB,oBAAA,SAAS,OAAO,SAAS,YAAY;AAAA,IAAA;AAG1D,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ,MAAM,KAAK,sBAAsB,eAAe,SAAS,QAAQ,OAAO;AAAA,IACjF;AAAA,EAAA;AAAA,EAGD,MAAM,mBAAmB,QAAa,MAAsC,SAAqE;AAChJ,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQD,oCAAkB,0BAA0B;AAAA,MACpD,SAAS;AAAA,IAAA,CACT;AACG,QAAA;AACJ,QAAI,KAAK,OAAO;AACf,mBAAa,EAAE,MAAM,SAAS,OAAO,KAAK,MAAM;AAAA,IAAA,WACtC,KAAK,UAAU;AACzB,mBAAa,EAAE,MAAM,MAAM,IAAI,KAAK,SAAS;AAAA,IAAA,OACvC;AACA,YAAA,IAAIE,aAAAA,eAAe,yCAAyC;AAAA,IAAA;AAG7D,UAAA,WAAW,MAAM,KAAK,cAAc;AAAA,MACzC,QAAQ;AAAA,MACR;AAAA,MACA,KAAK,cAAc;AAAA,MACnB,OAAM,WAAU,MAAM,QAAQ,cAAc;AAAA,QAC3C,QAAQF,kBAAA,kBAAkB,0BAA0B,OAAO,KAAK;AAAA,QAChE,SAAS;AAAA,MACT,CAAA;AAAA,IACF;AAEI,QAAA,CAAC,SAAS,IAAI;AACjB,aAAOC,WAAoB,oBAAA,SAAS,OAAO,SAAS,YAAY;AAAA,IAAA;AAE1D,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,MAAM,KAAK,sBAAsB,eAAe,SAAS,QAAQ,OAAO;AAAA,IACjF;AAAA,EAAA;AAEF;;"}
@@ -1 +1 @@
1
- {"version":3,"file":"SignInMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignInMutationResolver.ts"],"sourcesContent":["import {\n\tCreateSessionTokenResponse,\n\tMutationCreateSessionTokenArgs,\n\tMutationResolvers,\n\tMutationSignInArgs,\n\tSignInResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, PersonUniqueIdentifier, SignInManager } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { SignInResponseFactory } from '../../responseHelpers/SignInResponseFactory'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class SignInMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly signInManager: SignInManager,\n\t\tprivate readonly signInResponseFactory: SignInResponseFactory,\n\t) {}\n\n\tasync signIn(parent: any, args: MutationSignInArgs, context: TenantResolverContext): Promise<SignInResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_IN,\n\t\t\tmessage: 'You are not allowed to sign in',\n\t\t})\n\n\t\tconst response = await this.signInManager.signIn(\n\t\t\tcontext.db,\n\t\t\targs.email,\n\t\t\targs.password,\n\t\t\targs.expiration || undefined,\n\t\t\targs.otpToken || undefined,\n\t\t)\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: await this.signInResponseFactory.createResponse(response.result, context),\n\t\t}\n\t}\n\n\tasync createSessionToken(parent: any, args: MutationCreateSessionTokenArgs, context: TenantResolverContext): Promise<CreateSessionTokenResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_CREATE_SESSION_KEY(),\n\t\t\tmessage: 'You are not allowed to create a session key',\n\t\t})\n\t\tlet identifier: PersonUniqueIdentifier\n\t\tif (args.email) {\n\t\t\tidentifier = { type: 'email', email: args.email }\n\t\t} else if (args.personId) {\n\t\t\tidentifier = { type: 'id', id: args.personId }\n\t\t} else {\n\t\t\tthrow new UserInputError(`Please provide either email or personId`)\n\t\t}\n\n\t\tconst response = await this.signInManager.createSessionToken(\n\t\t\tcontext.db,\n\t\t\tidentifier,\n\t\t\targs.expiration || undefined,\n\t\t\tasync person => await context.requireAccess({\n\t\t\t\taction: PermissionActions.PERSON_CREATE_SESSION_KEY(person.roles),\n\t\t\t\tmessage: 'You are not allowed to create a session key for this person.',\n\t\t\t}),\n\t\t)\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: await this.signInResponseFactory.createResponse(response.result, context),\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAaO,MAAM,uBAAoD;AAAA,EAChE,YACkB,eACA,uBAChB;AAFgB,SAAA,gBAAA;AACA,SAAA,wBAAA;AAAA,EACf;AAAA,EAEH,MAAM,OAAO,QAAa,MAA0B,SAAyD;AAC5G,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,WAAW,MAAM,KAAK,cAAc;AAAA,MACzC,QAAQ;AAAA,MACR,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,cAAc;AAAA,MACnB,KAAK,YAAY;AAAA,IAAA;AAGd,QAAA,CAAC,SAAS,IAAI;AACjB,aAAO,oBAAoB,SAAS,OAAO,SAAS,YAAY;AAAA,IACjE;AAEO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ,MAAM,KAAK,sBAAsB,eAAe,SAAS,QAAQ,OAAO;AAAA,IAAA;AAAA,EAElF;AAAA,EAEA,MAAM,mBAAmB,QAAa,MAAsC,SAAqE;AAChJ,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,0BAA0B;AAAA,MACpD,SAAS;AAAA,IAAA,CACT;AACG,QAAA;AACJ,QAAI,KAAK,OAAO;AACf,mBAAa,EAAE,MAAM,SAAS,OAAO,KAAK;IAAM,WACtC,KAAK,UAAU;AACzB,mBAAa,EAAE,MAAM,MAAM,IAAI,KAAK;IAAS,OACvC;AACA,YAAA,IAAI,eAAe,yCAAyC;AAAA,IACnE;AAEM,UAAA,WAAW,MAAM,KAAK,cAAc;AAAA,MACzC,QAAQ;AAAA,MACR;AAAA,MACA,KAAK,cAAc;AAAA,MACnB,OAAM,WAAU,MAAM,QAAQ,cAAc;AAAA,QAC3C,QAAQ,kBAAkB,0BAA0B,OAAO,KAAK;AAAA,QAChE,SAAS;AAAA,MAAA,CACT;AAAA,IAAA;AAGE,QAAA,CAAC,SAAS,IAAI;AACjB,aAAO,oBAAoB,SAAS,OAAO,SAAS,YAAY;AAAA,IACjE;AACO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,MAAM,KAAK,sBAAsB,eAAe,SAAS,QAAQ,OAAO;AAAA,IAAA;AAAA,EAElF;AACD;"}
1
+ {"version":3,"file":"SignInMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignInMutationResolver.ts"],"sourcesContent":["import {\n\tCreateSessionTokenResponse,\n\tMutationCreateSessionTokenArgs,\n\tMutationResolvers,\n\tMutationSignInArgs,\n\tSignInResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, PersonUniqueIdentifier, SignInManager } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { SignInResponseFactory } from '../../responseHelpers/SignInResponseFactory'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class SignInMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly signInManager: SignInManager,\n\t\tprivate readonly signInResponseFactory: SignInResponseFactory,\n\t) {}\n\n\tasync signIn(parent: any, args: MutationSignInArgs, context: TenantResolverContext): Promise<SignInResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_IN,\n\t\t\tmessage: 'You are not allowed to sign in',\n\t\t})\n\n\t\tconst response = await this.signInManager.signIn(\n\t\t\tcontext.db,\n\t\t\targs.email,\n\t\t\targs.password,\n\t\t\targs.expiration || undefined,\n\t\t\targs.otpToken || undefined,\n\t\t)\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: await this.signInResponseFactory.createResponse(response.result, context),\n\t\t}\n\t}\n\n\tasync createSessionToken(parent: any, args: MutationCreateSessionTokenArgs, context: TenantResolverContext): Promise<CreateSessionTokenResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_CREATE_SESSION_KEY(),\n\t\t\tmessage: 'You are not allowed to create a session key',\n\t\t})\n\t\tlet identifier: PersonUniqueIdentifier\n\t\tif (args.email) {\n\t\t\tidentifier = { type: 'email', email: args.email }\n\t\t} else if (args.personId) {\n\t\t\tidentifier = { type: 'id', id: args.personId }\n\t\t} else {\n\t\t\tthrow new UserInputError(`Please provide either email or personId`)\n\t\t}\n\n\t\tconst response = await this.signInManager.createSessionToken(\n\t\t\tcontext.db,\n\t\t\tidentifier,\n\t\t\targs.expiration || undefined,\n\t\t\tasync person => await context.requireAccess({\n\t\t\t\taction: PermissionActions.PERSON_CREATE_SESSION_KEY(person.roles),\n\t\t\t\tmessage: 'You are not allowed to create a session key for this person.',\n\t\t\t}),\n\t\t)\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: await this.signInResponseFactory.createResponse(response.result, context),\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAaO,MAAM,uBAAoD;AAAA,EAChE,YACkB,eACA,uBAChB;AAFgB,SAAA,gBAAA;AACA,SAAA,wBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,OAAO,QAAa,MAA0B,SAAyD;AAC5G,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,WAAW,MAAM,KAAK,cAAc;AAAA,MACzC,QAAQ;AAAA,MACR,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,cAAc;AAAA,MACnB,KAAK,YAAY;AAAA,IAClB;AAEI,QAAA,CAAC,SAAS,IAAI;AACjB,aAAO,oBAAoB,SAAS,OAAO,SAAS,YAAY;AAAA,IAAA;AAG1D,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ,MAAM,KAAK,sBAAsB,eAAe,SAAS,QAAQ,OAAO;AAAA,IACjF;AAAA,EAAA;AAAA,EAGD,MAAM,mBAAmB,QAAa,MAAsC,SAAqE;AAChJ,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,0BAA0B;AAAA,MACpD,SAAS;AAAA,IAAA,CACT;AACG,QAAA;AACJ,QAAI,KAAK,OAAO;AACf,mBAAa,EAAE,MAAM,SAAS,OAAO,KAAK,MAAM;AAAA,IAAA,WACtC,KAAK,UAAU;AACzB,mBAAa,EAAE,MAAM,MAAM,IAAI,KAAK,SAAS;AAAA,IAAA,OACvC;AACA,YAAA,IAAI,eAAe,yCAAyC;AAAA,IAAA;AAG7D,UAAA,WAAW,MAAM,KAAK,cAAc;AAAA,MACzC,QAAQ;AAAA,MACR;AAAA,MACA,KAAK,cAAc;AAAA,MACnB,OAAM,WAAU,MAAM,QAAQ,cAAc;AAAA,QAC3C,QAAQ,kBAAkB,0BAA0B,OAAO,KAAK;AAAA,QAChE,SAAS;AAAA,MACT,CAAA;AAAA,IACF;AAEI,QAAA,CAAC,SAAS,IAAI;AACjB,aAAO,oBAAoB,SAAS,OAAO,SAAS,YAAY;AAAA,IAAA;AAE1D,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,MAAM,KAAK,sBAAsB,eAAe,SAAS,QAAQ,OAAO;AAAA,IACjF;AAAA,EAAA;AAEF;"}
@@ -1 +1 @@
1
- {"version":3,"file":"SignOutMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignOutMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationSignOutArgs, SignOutResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKey, ApiKeyManager, PermissionActions, PersonQuery } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class SignOutMutationResolver implements MutationResolvers {\n\tconstructor(private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync signOut(parent: any, args: MutationSignOutArgs, context: TenantResolverContext): Promise<SignOutResponse> {\n\t\tconst person = await context.db.queryHandler.fetch(PersonQuery.byIdentity(context.identity.id))\n\n\t\tif (!person) {\n\t\t\treturn createErrorResponse('NOT_A_PERSON', 'Only a person can sign out')\n\t\t}\n\n\t\tconst personApiKeyId = await this.apiKeyManager.findApiKey(context.db, context.apiKeyId)\n\n\t\tif (personApiKeyId?.type === ApiKey.Type.PERMANENT) {\n\t\t\treturn createErrorResponse(\n\t\t\t\t'NOT_POSSIBLE_SIGN_OUT_WITH_PERMANENT_API_KEY', 'Only session API keys can be used for person sign out.',\n\t\t\t)\n\t\t}\n\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_OUT,\n\t\t\tmessage: 'You are not allowed to sign out',\n\t\t})\n\n\t\tif (args.all) {\n\t\t\tawait this.apiKeyManager.disableIdentityApiKeys(context.db, context.identity.id)\n\t\t} else {\n\t\t\tawait this.apiKeyManager.disableApiKey(context.db, context.apiKeyId)\n\t\t}\n\n\t\treturn { ok: true, errors: [] }\n\t}\n}\n"],"names":["PersonQuery","createErrorResponse","ApiKey","PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAKO,MAAM,wBAAqD;AAAA,EACjE,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAA+B;AAAA,EAE5D,MAAM,QAAQ,QAAa,MAA2B,SAA0D;AACzG,UAAA,SAAS,MAAM,QAAQ,GAAG,aAAa,MAAMA,YAAA,YAAY,WAAW,QAAQ,SAAS,EAAE,CAAC;AAE9F,QAAI,CAAC,QAAQ;AACL,aAAAC,WAAA,oBAAoB,gBAAgB,4BAA4B;AAAA,IACxE;AAEM,UAAA,iBAAiB,MAAM,KAAK,cAAc,WAAW,QAAQ,IAAI,QAAQ,QAAQ;AAEvF,QAAI,gBAAgB,SAASC,cAAO,KAAK,WAAW;AAC5C,aAAAD,WAAA;AAAA,QACN;AAAA,QAAgD;AAAA,MAAA;AAAA,IAElD;AAEA,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQE,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,QAAI,KAAK,KAAK;AACb,YAAM,KAAK,cAAc,uBAAuB,QAAQ,IAAI,QAAQ,SAAS,EAAE;AAAA,IAAA,OACzE;AACN,YAAM,KAAK,cAAc,cAAc,QAAQ,IAAI,QAAQ,QAAQ;AAAA,IACpE;AAEA,WAAO,EAAE,IAAI,MAAM,QAAQ,CAAG,EAAA;AAAA,EAC/B;AACD;;"}
1
+ {"version":3,"file":"SignOutMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignOutMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationSignOutArgs, SignOutResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKey, ApiKeyManager, PermissionActions, PersonQuery } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class SignOutMutationResolver implements MutationResolvers {\n\tconstructor(private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync signOut(parent: any, args: MutationSignOutArgs, context: TenantResolverContext): Promise<SignOutResponse> {\n\t\tconst person = await context.db.queryHandler.fetch(PersonQuery.byIdentity(context.identity.id))\n\n\t\tif (!person) {\n\t\t\treturn createErrorResponse('NOT_A_PERSON', 'Only a person can sign out')\n\t\t}\n\n\t\tconst personApiKeyId = await this.apiKeyManager.findApiKey(context.db, context.apiKeyId)\n\n\t\tif (personApiKeyId?.type === ApiKey.Type.PERMANENT) {\n\t\t\treturn createErrorResponse(\n\t\t\t\t'NOT_POSSIBLE_SIGN_OUT_WITH_PERMANENT_API_KEY', 'Only session API keys can be used for person sign out.',\n\t\t\t)\n\t\t}\n\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_OUT,\n\t\t\tmessage: 'You are not allowed to sign out',\n\t\t})\n\n\t\tif (args.all) {\n\t\t\tawait this.apiKeyManager.disableIdentityApiKeys(context.db, context.identity.id)\n\t\t} else {\n\t\t\tawait this.apiKeyManager.disableApiKey(context.db, context.apiKeyId)\n\t\t}\n\n\t\treturn { ok: true, errors: [] }\n\t}\n}\n"],"names":["PersonQuery","createErrorResponse","ApiKey","PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAKO,MAAM,wBAAqD;AAAA,EACjE,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,QAAQ,QAAa,MAA2B,SAA0D;AACzG,UAAA,SAAS,MAAM,QAAQ,GAAG,aAAa,MAAMA,YAAA,YAAY,WAAW,QAAQ,SAAS,EAAE,CAAC;AAE9F,QAAI,CAAC,QAAQ;AACL,aAAAC,WAAA,oBAAoB,gBAAgB,4BAA4B;AAAA,IAAA;AAGlE,UAAA,iBAAiB,MAAM,KAAK,cAAc,WAAW,QAAQ,IAAI,QAAQ,QAAQ;AAEvF,QAAI,gBAAgB,SAASC,cAAO,KAAK,WAAW;AAC5C,aAAAD,WAAA;AAAA,QACN;AAAA,QAAgD;AAAA,MACjD;AAAA,IAAA;AAGD,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQE,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,QAAI,KAAK,KAAK;AACb,YAAM,KAAK,cAAc,uBAAuB,QAAQ,IAAI,QAAQ,SAAS,EAAE;AAAA,IAAA,OACzE;AACN,YAAM,KAAK,cAAc,cAAc,QAAQ,IAAI,QAAQ,QAAQ;AAAA,IAAA;AAGpE,WAAO,EAAE,IAAI,MAAM,QAAQ,CAAA,EAAG;AAAA,EAAA;AAEhC;;"}
@@ -1 +1 @@
1
- {"version":3,"file":"SignOutMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignOutMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationSignOutArgs, SignOutResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKey, ApiKeyManager, PermissionActions, PersonQuery } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class SignOutMutationResolver implements MutationResolvers {\n\tconstructor(private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync signOut(parent: any, args: MutationSignOutArgs, context: TenantResolverContext): Promise<SignOutResponse> {\n\t\tconst person = await context.db.queryHandler.fetch(PersonQuery.byIdentity(context.identity.id))\n\n\t\tif (!person) {\n\t\t\treturn createErrorResponse('NOT_A_PERSON', 'Only a person can sign out')\n\t\t}\n\n\t\tconst personApiKeyId = await this.apiKeyManager.findApiKey(context.db, context.apiKeyId)\n\n\t\tif (personApiKeyId?.type === ApiKey.Type.PERMANENT) {\n\t\t\treturn createErrorResponse(\n\t\t\t\t'NOT_POSSIBLE_SIGN_OUT_WITH_PERMANENT_API_KEY', 'Only session API keys can be used for person sign out.',\n\t\t\t)\n\t\t}\n\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_OUT,\n\t\t\tmessage: 'You are not allowed to sign out',\n\t\t})\n\n\t\tif (args.all) {\n\t\t\tawait this.apiKeyManager.disableIdentityApiKeys(context.db, context.identity.id)\n\t\t} else {\n\t\t\tawait this.apiKeyManager.disableApiKey(context.db, context.apiKeyId)\n\t\t}\n\n\t\treturn { ok: true, errors: [] }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAKO,MAAM,wBAAqD;AAAA,EACjE,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAA+B;AAAA,EAE5D,MAAM,QAAQ,QAAa,MAA2B,SAA0D;AACzG,UAAA,SAAS,MAAM,QAAQ,GAAG,aAAa,MAAM,YAAY,WAAW,QAAQ,SAAS,EAAE,CAAC;AAE9F,QAAI,CAAC,QAAQ;AACL,aAAA,oBAAoB,gBAAgB,4BAA4B;AAAA,IACxE;AAEM,UAAA,iBAAiB,MAAM,KAAK,cAAc,WAAW,QAAQ,IAAI,QAAQ,QAAQ;AAEvF,QAAI,gBAAgB,SAAS,OAAO,KAAK,WAAW;AAC5C,aAAA;AAAA,QACN;AAAA,QAAgD;AAAA,MAAA;AAAA,IAElD;AAEA,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,QAAI,KAAK,KAAK;AACb,YAAM,KAAK,cAAc,uBAAuB,QAAQ,IAAI,QAAQ,SAAS,EAAE;AAAA,IAAA,OACzE;AACN,YAAM,KAAK,cAAc,cAAc,QAAQ,IAAI,QAAQ,QAAQ;AAAA,IACpE;AAEA,WAAO,EAAE,IAAI,MAAM,QAAQ,CAAG,EAAA;AAAA,EAC/B;AACD;"}
1
+ {"version":3,"file":"SignOutMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignOutMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationSignOutArgs, SignOutResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKey, ApiKeyManager, PermissionActions, PersonQuery } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class SignOutMutationResolver implements MutationResolvers {\n\tconstructor(private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync signOut(parent: any, args: MutationSignOutArgs, context: TenantResolverContext): Promise<SignOutResponse> {\n\t\tconst person = await context.db.queryHandler.fetch(PersonQuery.byIdentity(context.identity.id))\n\n\t\tif (!person) {\n\t\t\treturn createErrorResponse('NOT_A_PERSON', 'Only a person can sign out')\n\t\t}\n\n\t\tconst personApiKeyId = await this.apiKeyManager.findApiKey(context.db, context.apiKeyId)\n\n\t\tif (personApiKeyId?.type === ApiKey.Type.PERMANENT) {\n\t\t\treturn createErrorResponse(\n\t\t\t\t'NOT_POSSIBLE_SIGN_OUT_WITH_PERMANENT_API_KEY', 'Only session API keys can be used for person sign out.',\n\t\t\t)\n\t\t}\n\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_OUT,\n\t\t\tmessage: 'You are not allowed to sign out',\n\t\t})\n\n\t\tif (args.all) {\n\t\t\tawait this.apiKeyManager.disableIdentityApiKeys(context.db, context.identity.id)\n\t\t} else {\n\t\t\tawait this.apiKeyManager.disableApiKey(context.db, context.apiKeyId)\n\t\t}\n\n\t\treturn { ok: true, errors: [] }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAKO,MAAM,wBAAqD;AAAA,EACjE,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,QAAQ,QAAa,MAA2B,SAA0D;AACzG,UAAA,SAAS,MAAM,QAAQ,GAAG,aAAa,MAAM,YAAY,WAAW,QAAQ,SAAS,EAAE,CAAC;AAE9F,QAAI,CAAC,QAAQ;AACL,aAAA,oBAAoB,gBAAgB,4BAA4B;AAAA,IAAA;AAGlE,UAAA,iBAAiB,MAAM,KAAK,cAAc,WAAW,QAAQ,IAAI,QAAQ,QAAQ;AAEvF,QAAI,gBAAgB,SAAS,OAAO,KAAK,WAAW;AAC5C,aAAA;AAAA,QACN;AAAA,QAAgD;AAAA,MACjD;AAAA,IAAA;AAGD,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,QAAI,KAAK,KAAK;AACb,YAAM,KAAK,cAAc,uBAAuB,QAAQ,IAAI,QAAQ,SAAS,EAAE;AAAA,IAAA,OACzE;AACN,YAAM,KAAK,cAAc,cAAc,QAAQ,IAAI,QAAQ,QAAQ;AAAA,IAAA;AAGpE,WAAO,EAAE,IAAI,MAAM,QAAQ,CAAA,EAAG;AAAA,EAAA;AAEhC;"}
@@ -1 +1 @@
1
- {"version":3,"file":"SignUpMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignUpMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationSignUpArgs, SignUpResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport {\n\tApiKeyManager,\n\tNoPassword,\n\tPasswordHash,\n\tPasswordPlain,\n\tPermissionActions,\n\tSignUpManager,\n} from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\nimport { PersonResponseFactory } from '../../responseHelpers/PersonResponseFactory'\n\nexport class SignUpMutationResolver implements MutationResolvers {\n\tconstructor(private readonly signUpManager: SignUpManager, private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync signUp(parent: any, args: MutationSignUpArgs, context: TenantResolverContext): Promise<SignUpResponse> {\n\t\tconst roles = args.roles ?? []\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_UP(roles),\n\t\t\tmessage: 'You are not allowed to sign up',\n\t\t})\n\t\tconst password = (() => {\n\t\t\tif (args.password) {\n\t\t\t\treturn new PasswordPlain(args.password)\n\t\t\t}\n\t\t\tif (args.passwordHash) {\n\t\t\t\tif (!args.passwordHash.startsWith('$2b$')) {\n\t\t\t\t\tthrow new UserInputError('Invalid password hash. Only $2b$ bcrypt hashes are accepted.')\n\t\t\t\t}\n\t\t\t\treturn new PasswordHash(args.passwordHash)\n\t\t\t}\n\t\t\treturn NoPassword\n\t\t})()\n\n\t\tconst response = await this.signUpManager.signUp(context.db, {\n\t\t\temail: args.email,\n\t\t\tname: args.name ?? undefined,\n\t\t\tpassword,\n\t\t\troles,\n\t\t})\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\tconst result = response.result\n\t\tawait this.apiKeyManager.disableOneOffApiKey(context.db, context.apiKeyId)\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tperson: PersonResponseFactory.createPersonResponse(result.person),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","PasswordPlain","UserInputError","PasswordHash","NoPassword","createErrorResponse","PersonResponseFactory"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAcO,MAAM,uBAAoD;AAAA,EAChE,YAA6B,eAA+C,eAA8B;AAA7E,SAAA,gBAAA;AAA+C,SAAA,gBAAA;AAAA,EAA+B;AAAA,EAE3G,MAAM,OAAO,QAAa,MAA0B,SAAyD;AACtG,UAAA,QAAQ,KAAK,SAAS;AAC5B,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB,eAAe,KAAK;AAAA,MAC9C,SAAS;AAAA,IAAA,CACT;AACD,UAAM,YAAY,MAAM;AACvB,UAAI,KAAK,UAAU;AACX,eAAA,IAAIC,SAAc,cAAA,KAAK,QAAQ;AAAA,MACvC;AACA,UAAI,KAAK,cAAc;AACtB,YAAI,CAAC,KAAK,aAAa,WAAW,MAAM,GAAG;AACpC,gBAAA,IAAIC,aAAAA,eAAe,8DAA8D;AAAA,QACxF;AACO,eAAA,IAAIC,SAAa,aAAA,KAAK,YAAY;AAAA,MAC1C;AACO,aAAAC;IAAA;AAGR,UAAM,WAAW,MAAM,KAAK,cAAc,OAAO,QAAQ,IAAI;AAAA,MAC5D,OAAO,KAAK;AAAA,MACZ,MAAM,KAAK,QAAQ;AAAA,MACnB;AAAA,MACA;AAAA,IAAA,CACA;AAEG,QAAA,CAAC,SAAS,IAAI;AACjB,aAAOC,WAAoB,oBAAA,SAAS,OAAO,SAAS,YAAY;AAAA,IACjE;AACA,UAAM,SAAS,SAAS;AACxB,UAAM,KAAK,cAAc,oBAAoB,QAAQ,IAAI,QAAQ,QAAQ;AAElE,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ;AAAA,QACP,QAAQC,sBAAA,sBAAsB,qBAAqB,OAAO,MAAM;AAAA,MACjE;AAAA,IAAA;AAAA,EAEF;AACD;;"}
1
+ {"version":3,"file":"SignUpMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignUpMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationSignUpArgs, SignUpResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport {\n\tApiKeyManager,\n\tNoPassword,\n\tPasswordHash,\n\tPasswordPlain,\n\tPermissionActions,\n\tSignUpManager,\n} from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\nimport { PersonResponseFactory } from '../../responseHelpers/PersonResponseFactory'\n\nexport class SignUpMutationResolver implements MutationResolvers {\n\tconstructor(private readonly signUpManager: SignUpManager, private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync signUp(parent: any, args: MutationSignUpArgs, context: TenantResolverContext): Promise<SignUpResponse> {\n\t\tconst roles = args.roles ?? []\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_UP(roles),\n\t\t\tmessage: 'You are not allowed to sign up',\n\t\t})\n\t\tconst password = (() => {\n\t\t\tif (args.password) {\n\t\t\t\treturn new PasswordPlain(args.password)\n\t\t\t}\n\t\t\tif (args.passwordHash) {\n\t\t\t\tif (!args.passwordHash.startsWith('$2b$')) {\n\t\t\t\t\tthrow new UserInputError('Invalid password hash. Only $2b$ bcrypt hashes are accepted.')\n\t\t\t\t}\n\t\t\t\treturn new PasswordHash(args.passwordHash)\n\t\t\t}\n\t\t\treturn NoPassword\n\t\t})()\n\n\t\tconst response = await this.signUpManager.signUp(context.db, {\n\t\t\temail: args.email,\n\t\t\tname: args.name ?? undefined,\n\t\t\tpassword,\n\t\t\troles,\n\t\t})\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\tconst result = response.result\n\t\tawait this.apiKeyManager.disableOneOffApiKey(context.db, context.apiKeyId)\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tperson: PersonResponseFactory.createPersonResponse(result.person),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","PasswordPlain","UserInputError","PasswordHash","NoPassword","createErrorResponse","PersonResponseFactory"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAcO,MAAM,uBAAoD;AAAA,EAChE,YAA6B,eAA+C,eAA8B;AAA7E,SAAA,gBAAA;AAA+C,SAAA,gBAAA;AAAA,EAAA;AAAA,EAE5E,MAAM,OAAO,QAAa,MAA0B,SAAyD;AACtG,UAAA,QAAQ,KAAK,SAAS,CAAC;AAC7B,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB,eAAe,KAAK;AAAA,MAC9C,SAAS;AAAA,IAAA,CACT;AACD,UAAM,YAAY,MAAM;AACvB,UAAI,KAAK,UAAU;AACX,eAAA,IAAIC,SAAAA,cAAc,KAAK,QAAQ;AAAA,MAAA;AAEvC,UAAI,KAAK,cAAc;AACtB,YAAI,CAAC,KAAK,aAAa,WAAW,MAAM,GAAG;AACpC,gBAAA,IAAIC,4BAAe,8DAA8D;AAAA,QAAA;AAEjF,eAAA,IAAIC,SAAAA,aAAa,KAAK,YAAY;AAAA,MAAA;AAEnC,aAAAC,SAAA;AAAA,IAAA,GACL;AAEH,UAAM,WAAW,MAAM,KAAK,cAAc,OAAO,QAAQ,IAAI;AAAA,MAC5D,OAAO,KAAK;AAAA,MACZ,MAAM,KAAK,QAAQ;AAAA,MACnB;AAAA,MACA;AAAA,IAAA,CACA;AAEG,QAAA,CAAC,SAAS,IAAI;AACjB,aAAOC,WAAoB,oBAAA,SAAS,OAAO,SAAS,YAAY;AAAA,IAAA;AAEjE,UAAM,SAAS,SAAS;AACxB,UAAM,KAAK,cAAc,oBAAoB,QAAQ,IAAI,QAAQ,QAAQ;AAElE,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ;AAAA,QACP,QAAQC,sBAAA,sBAAsB,qBAAqB,OAAO,MAAM;AAAA,MAAA;AAAA,IAElE;AAAA,EAAA;AAEF;;"}
@@ -1 +1 @@
1
- {"version":3,"file":"SignUpMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignUpMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationSignUpArgs, SignUpResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport {\n\tApiKeyManager,\n\tNoPassword,\n\tPasswordHash,\n\tPasswordPlain,\n\tPermissionActions,\n\tSignUpManager,\n} from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\nimport { PersonResponseFactory } from '../../responseHelpers/PersonResponseFactory'\n\nexport class SignUpMutationResolver implements MutationResolvers {\n\tconstructor(private readonly signUpManager: SignUpManager, private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync signUp(parent: any, args: MutationSignUpArgs, context: TenantResolverContext): Promise<SignUpResponse> {\n\t\tconst roles = args.roles ?? []\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_UP(roles),\n\t\t\tmessage: 'You are not allowed to sign up',\n\t\t})\n\t\tconst password = (() => {\n\t\t\tif (args.password) {\n\t\t\t\treturn new PasswordPlain(args.password)\n\t\t\t}\n\t\t\tif (args.passwordHash) {\n\t\t\t\tif (!args.passwordHash.startsWith('$2b$')) {\n\t\t\t\t\tthrow new UserInputError('Invalid password hash. Only $2b$ bcrypt hashes are accepted.')\n\t\t\t\t}\n\t\t\t\treturn new PasswordHash(args.passwordHash)\n\t\t\t}\n\t\t\treturn NoPassword\n\t\t})()\n\n\t\tconst response = await this.signUpManager.signUp(context.db, {\n\t\t\temail: args.email,\n\t\t\tname: args.name ?? undefined,\n\t\t\tpassword,\n\t\t\troles,\n\t\t})\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\tconst result = response.result\n\t\tawait this.apiKeyManager.disableOneOffApiKey(context.db, context.apiKeyId)\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tperson: PersonResponseFactory.createPersonResponse(result.person),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAcO,MAAM,uBAAoD;AAAA,EAChE,YAA6B,eAA+C,eAA8B;AAA7E,SAAA,gBAAA;AAA+C,SAAA,gBAAA;AAAA,EAA+B;AAAA,EAE3G,MAAM,OAAO,QAAa,MAA0B,SAAyD;AACtG,UAAA,QAAQ,KAAK,SAAS;AAC5B,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,eAAe,KAAK;AAAA,MAC9C,SAAS;AAAA,IAAA,CACT;AACD,UAAM,YAAY,MAAM;AACvB,UAAI,KAAK,UAAU;AACX,eAAA,IAAI,cAAc,KAAK,QAAQ;AAAA,MACvC;AACA,UAAI,KAAK,cAAc;AACtB,YAAI,CAAC,KAAK,aAAa,WAAW,MAAM,GAAG;AACpC,gBAAA,IAAI,eAAe,8DAA8D;AAAA,QACxF;AACO,eAAA,IAAI,aAAa,KAAK,YAAY;AAAA,MAC1C;AACO,aAAA;AAAA,IAAA;AAGR,UAAM,WAAW,MAAM,KAAK,cAAc,OAAO,QAAQ,IAAI;AAAA,MAC5D,OAAO,KAAK;AAAA,MACZ,MAAM,KAAK,QAAQ;AAAA,MACnB;AAAA,MACA;AAAA,IAAA,CACA;AAEG,QAAA,CAAC,SAAS,IAAI;AACjB,aAAO,oBAAoB,SAAS,OAAO,SAAS,YAAY;AAAA,IACjE;AACA,UAAM,SAAS,SAAS;AACxB,UAAM,KAAK,cAAc,oBAAoB,QAAQ,IAAI,QAAQ,QAAQ;AAElE,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ;AAAA,QACP,QAAQ,sBAAsB,qBAAqB,OAAO,MAAM;AAAA,MACjE;AAAA,IAAA;AAAA,EAEF;AACD;"}
1
+ {"version":3,"file":"SignUpMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/SignUpMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationSignUpArgs, SignUpResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport {\n\tApiKeyManager,\n\tNoPassword,\n\tPasswordHash,\n\tPasswordPlain,\n\tPermissionActions,\n\tSignUpManager,\n} from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\nimport { PersonResponseFactory } from '../../responseHelpers/PersonResponseFactory'\n\nexport class SignUpMutationResolver implements MutationResolvers {\n\tconstructor(private readonly signUpManager: SignUpManager, private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync signUp(parent: any, args: MutationSignUpArgs, context: TenantResolverContext): Promise<SignUpResponse> {\n\t\tconst roles = args.roles ?? []\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_SIGN_UP(roles),\n\t\t\tmessage: 'You are not allowed to sign up',\n\t\t})\n\t\tconst password = (() => {\n\t\t\tif (args.password) {\n\t\t\t\treturn new PasswordPlain(args.password)\n\t\t\t}\n\t\t\tif (args.passwordHash) {\n\t\t\t\tif (!args.passwordHash.startsWith('$2b$')) {\n\t\t\t\t\tthrow new UserInputError('Invalid password hash. Only $2b$ bcrypt hashes are accepted.')\n\t\t\t\t}\n\t\t\t\treturn new PasswordHash(args.passwordHash)\n\t\t\t}\n\t\t\treturn NoPassword\n\t\t})()\n\n\t\tconst response = await this.signUpManager.signUp(context.db, {\n\t\t\temail: args.email,\n\t\t\tname: args.name ?? undefined,\n\t\t\tpassword,\n\t\t\troles,\n\t\t})\n\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\tconst result = response.result\n\t\tawait this.apiKeyManager.disableOneOffApiKey(context.db, context.apiKeyId)\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tperson: PersonResponseFactory.createPersonResponse(result.person),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAcO,MAAM,uBAAoD;AAAA,EAChE,YAA6B,eAA+C,eAA8B;AAA7E,SAAA,gBAAA;AAA+C,SAAA,gBAAA;AAAA,EAAA;AAAA,EAE5E,MAAM,OAAO,QAAa,MAA0B,SAAyD;AACtG,UAAA,QAAQ,KAAK,SAAS,CAAC;AAC7B,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,eAAe,KAAK;AAAA,MAC9C,SAAS;AAAA,IAAA,CACT;AACD,UAAM,YAAY,MAAM;AACvB,UAAI,KAAK,UAAU;AACX,eAAA,IAAI,cAAc,KAAK,QAAQ;AAAA,MAAA;AAEvC,UAAI,KAAK,cAAc;AACtB,YAAI,CAAC,KAAK,aAAa,WAAW,MAAM,GAAG;AACpC,gBAAA,IAAI,eAAe,8DAA8D;AAAA,QAAA;AAEjF,eAAA,IAAI,aAAa,KAAK,YAAY;AAAA,MAAA;AAEnC,aAAA;AAAA,IAAA,GACL;AAEH,UAAM,WAAW,MAAM,KAAK,cAAc,OAAO,QAAQ,IAAI;AAAA,MAC5D,OAAO,KAAK;AAAA,MACZ,MAAM,KAAK,QAAQ;AAAA,MACnB;AAAA,MACA;AAAA,IAAA,CACA;AAEG,QAAA,CAAC,SAAS,IAAI;AACjB,aAAO,oBAAoB,SAAS,OAAO,SAAS,YAAY;AAAA,IAAA;AAEjE,UAAM,SAAS,SAAS;AACxB,UAAM,KAAK,cAAc,oBAAoB,QAAQ,IAAI,QAAQ,QAAQ;AAElE,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ;AAAA,QACP,QAAQ,sBAAsB,qBAAqB,OAAO,MAAM;AAAA,MAAA;AAAA,IAElE;AAAA,EAAA;AAEF;"}
@@ -0,0 +1,52 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
3
+ const PermissionActions = require("../../../model/authorization/PermissionActions.cjs");
4
+ require("@contember/authorization");
5
+ require("../../../model/authorization/PermissionContext.cjs");
6
+ require("../../../model/authorization/PermissionsFactory.cjs");
7
+ require("@contember/schema");
8
+ require("../../../model/type/ApiKey.cjs");
9
+ require("@contember/database");
10
+ require("node:crypto");
11
+ require("../../../model/queries/apiKey/ApiKeyQuery.cjs");
12
+ const PersonQuery = require("../../../model/queries/person/PersonQuery.cjs");
13
+ require("node:assert");
14
+ require("../../../model/service/idp/providers/AppleProvider.cjs");
15
+ require("openid-client");
16
+ require("@contember/typesafe");
17
+ require("../../../model/service/idp/providers/OIDCTypes.cjs");
18
+ require("../../../model/service/idp/providers/OIDCHelpers.cjs");
19
+ require("../../../model/service/idp/providers/FacebookProvider.cjs");
20
+ require("@contember/schema-utils");
21
+ require("otpauth");
22
+ const errorUtils = require("../../errorUtils.cjs");
23
+ class TogglePasswordlessMutationResolver {
24
+ constructor(configurationManager, personManager) {
25
+ this.configurationManager = configurationManager;
26
+ this.personManager = personManager;
27
+ }
28
+ async enableMyPasswordless(parent, args, context) {
29
+ return this.doTogglePasswordless(context, true);
30
+ }
31
+ async disableMyPasswordless(parent, args, context) {
32
+ return this.doTogglePasswordless(context, false);
33
+ }
34
+ async doTogglePasswordless(context, value) {
35
+ const person = await context.db.queryHandler.fetch(PersonQuery.PersonQuery.byIdentity(context.identity.id));
36
+ if (!person) {
37
+ return errorUtils.createErrorResponse("NOT_A_PERSON", "Only a person can change a password");
38
+ }
39
+ await context.requireAccess({
40
+ action: PermissionActions.PermissionActions.PERSON_TOGGLE_PASSWORDLESS,
41
+ message: "You are not allowed to enable passwordless"
42
+ });
43
+ const config = await this.configurationManager.fetchConfiguration(context.db);
44
+ if (config.passwordless?.enabled === "always" || config.passwordless?.enabled === "never") {
45
+ return errorUtils.createErrorResponse("CANNOT_TOGGLE", "Passwordless is configured globally and cannot be toggled");
46
+ }
47
+ await this.personManager.togglePasswordless(context.db, person, value);
48
+ return { ok: true };
49
+ }
50
+ }
51
+ exports.TogglePasswordlessMutationResolver = TogglePasswordlessMutationResolver;
52
+ //# sourceMappingURL=TogglePasswordlessMutationResolver.cjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"TogglePasswordlessMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, ToggleMyPasswordlessResponse } from '../../../schema'\nimport { ConfigurationManager } from '../../../model/service/ConfigurationManager'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, PersonManager, PersonQuery } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class TogglePasswordlessMutationResolver implements Pick<MutationResolvers, 'enableMyPasswordless' | 'disableMyPasswordless'> {\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t\tprivate readonly personManager: PersonManager,\n\t) {\n\t}\n\n\tasync enableMyPasswordless(parent: unknown, args: unknown, context: TenantResolverContext): Promise<ToggleMyPasswordlessResponse> {\n\t\treturn this.doTogglePasswordless(context, true)\n\t}\n\n\tasync disableMyPasswordless(parent: unknown, args: unknown, context: TenantResolverContext): Promise<ToggleMyPasswordlessResponse> {\n\t\treturn this.doTogglePasswordless(context, false)\n\t}\n\n\tprivate async doTogglePasswordless(\n\t\tcontext: TenantResolverContext,\n\t\tvalue: boolean,\n\t): Promise<ToggleMyPasswordlessResponse> {\n\t\tconst person = await context.db.queryHandler.fetch(PersonQuery.byIdentity(context.identity.id))\n\t\tif (!person) {\n\t\t\treturn createErrorResponse('NOT_A_PERSON', 'Only a person can change a password')\n\t\t}\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_TOGGLE_PASSWORDLESS,\n\t\t\tmessage: 'You are not allowed to enable passwordless',\n\t\t})\n\t\tconst config = await this.configurationManager.fetchConfiguration(context.db)\n\t\tif (config.passwordless?.enabled === 'always' || config.passwordless?.enabled === 'never') {\n\t\t\treturn createErrorResponse('CANNOT_TOGGLE', 'Passwordless is configured globally and cannot be toggled')\n\t\t}\n\n\t\tawait this.personManager.togglePasswordless(context.db, person, value)\n\n\t\treturn { ok: true }\n\t}\n\n}\n"],"names":["PersonQuery","createErrorResponse","PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,mCAAwH;AAAA,EACpI,YACkB,sBACA,eAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,gBAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,qBAAqB,QAAiB,MAAe,SAAuE;AAC1H,WAAA,KAAK,qBAAqB,SAAS,IAAI;AAAA,EAAA;AAAA,EAG/C,MAAM,sBAAsB,QAAiB,MAAe,SAAuE;AAC3H,WAAA,KAAK,qBAAqB,SAAS,KAAK;AAAA,EAAA;AAAA,EAGhD,MAAc,qBACb,SACA,OACwC;AAClC,UAAA,SAAS,MAAM,QAAQ,GAAG,aAAa,MAAMA,YAAA,YAAY,WAAW,QAAQ,SAAS,EAAE,CAAC;AAC9F,QAAI,CAAC,QAAQ;AACL,aAAAC,WAAA,oBAAoB,gBAAgB,qCAAqC;AAAA,IAAA;AAEjF,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQC,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,qBAAqB,mBAAmB,QAAQ,EAAE;AAC5E,QAAI,OAAO,cAAc,YAAY,YAAY,OAAO,cAAc,YAAY,SAAS;AACnF,aAAAD,WAAA,oBAAoB,iBAAiB,2DAA2D;AAAA,IAAA;AAGxG,UAAM,KAAK,cAAc,mBAAmB,QAAQ,IAAI,QAAQ,KAAK;AAE9D,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAGpB;;"}
@@ -0,0 +1,52 @@
1
+ import { PermissionActions } from "../../../model/authorization/PermissionActions.js";
2
+ import "@contember/authorization";
3
+ import "../../../model/authorization/PermissionContext.js";
4
+ import "../../../model/authorization/PermissionsFactory.js";
5
+ import "@contember/schema";
6
+ import "../../../model/type/ApiKey.js";
7
+ import "@contember/database";
8
+ import "node:crypto";
9
+ import "../../../model/queries/apiKey/ApiKeyQuery.js";
10
+ import { PersonQuery } from "../../../model/queries/person/PersonQuery.js";
11
+ import "node:assert";
12
+ import "../../../model/service/idp/providers/AppleProvider.js";
13
+ import "openid-client";
14
+ import "@contember/typesafe";
15
+ import "../../../model/service/idp/providers/OIDCTypes.js";
16
+ import "../../../model/service/idp/providers/OIDCHelpers.js";
17
+ import "../../../model/service/idp/providers/FacebookProvider.js";
18
+ import "@contember/schema-utils";
19
+ import "otpauth";
20
+ import { createErrorResponse } from "../../errorUtils.js";
21
+ class TogglePasswordlessMutationResolver {
22
+ constructor(configurationManager, personManager) {
23
+ this.configurationManager = configurationManager;
24
+ this.personManager = personManager;
25
+ }
26
+ async enableMyPasswordless(parent, args, context) {
27
+ return this.doTogglePasswordless(context, true);
28
+ }
29
+ async disableMyPasswordless(parent, args, context) {
30
+ return this.doTogglePasswordless(context, false);
31
+ }
32
+ async doTogglePasswordless(context, value) {
33
+ const person = await context.db.queryHandler.fetch(PersonQuery.byIdentity(context.identity.id));
34
+ if (!person) {
35
+ return createErrorResponse("NOT_A_PERSON", "Only a person can change a password");
36
+ }
37
+ await context.requireAccess({
38
+ action: PermissionActions.PERSON_TOGGLE_PASSWORDLESS,
39
+ message: "You are not allowed to enable passwordless"
40
+ });
41
+ const config = await this.configurationManager.fetchConfiguration(context.db);
42
+ if (config.passwordless?.enabled === "always" || config.passwordless?.enabled === "never") {
43
+ return createErrorResponse("CANNOT_TOGGLE", "Passwordless is configured globally and cannot be toggled");
44
+ }
45
+ await this.personManager.togglePasswordless(context.db, person, value);
46
+ return { ok: true };
47
+ }
48
+ }
49
+ export {
50
+ TogglePasswordlessMutationResolver
51
+ };
52
+ //# sourceMappingURL=TogglePasswordlessMutationResolver.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"TogglePasswordlessMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/person/TogglePasswordlessMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, ToggleMyPasswordlessResponse } from '../../../schema'\nimport { ConfigurationManager } from '../../../model/service/ConfigurationManager'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, PersonManager, PersonQuery } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class TogglePasswordlessMutationResolver implements Pick<MutationResolvers, 'enableMyPasswordless' | 'disableMyPasswordless'> {\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t\tprivate readonly personManager: PersonManager,\n\t) {\n\t}\n\n\tasync enableMyPasswordless(parent: unknown, args: unknown, context: TenantResolverContext): Promise<ToggleMyPasswordlessResponse> {\n\t\treturn this.doTogglePasswordless(context, true)\n\t}\n\n\tasync disableMyPasswordless(parent: unknown, args: unknown, context: TenantResolverContext): Promise<ToggleMyPasswordlessResponse> {\n\t\treturn this.doTogglePasswordless(context, false)\n\t}\n\n\tprivate async doTogglePasswordless(\n\t\tcontext: TenantResolverContext,\n\t\tvalue: boolean,\n\t): Promise<ToggleMyPasswordlessResponse> {\n\t\tconst person = await context.db.queryHandler.fetch(PersonQuery.byIdentity(context.identity.id))\n\t\tif (!person) {\n\t\t\treturn createErrorResponse('NOT_A_PERSON', 'Only a person can change a password')\n\t\t}\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PERSON_TOGGLE_PASSWORDLESS,\n\t\t\tmessage: 'You are not allowed to enable passwordless',\n\t\t})\n\t\tconst config = await this.configurationManager.fetchConfiguration(context.db)\n\t\tif (config.passwordless?.enabled === 'always' || config.passwordless?.enabled === 'never') {\n\t\t\treturn createErrorResponse('CANNOT_TOGGLE', 'Passwordless is configured globally and cannot be toggled')\n\t\t}\n\n\t\tawait this.personManager.togglePasswordless(context.db, person, value)\n\n\t\treturn { ok: true }\n\t}\n\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMO,MAAM,mCAAwH;AAAA,EACpI,YACkB,sBACA,eAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,gBAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,qBAAqB,QAAiB,MAAe,SAAuE;AAC1H,WAAA,KAAK,qBAAqB,SAAS,IAAI;AAAA,EAAA;AAAA,EAG/C,MAAM,sBAAsB,QAAiB,MAAe,SAAuE;AAC3H,WAAA,KAAK,qBAAqB,SAAS,KAAK;AAAA,EAAA;AAAA,EAGhD,MAAc,qBACb,SACA,OACwC;AAClC,UAAA,SAAS,MAAM,QAAQ,GAAG,aAAa,MAAM,YAAY,WAAW,QAAQ,SAAS,EAAE,CAAC;AAC9F,QAAI,CAAC,QAAQ;AACL,aAAA,oBAAoB,gBAAgB,qCAAqC;AAAA,IAAA;AAEjF,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,qBAAqB,mBAAmB,QAAQ,EAAE;AAC5E,QAAI,OAAO,cAAc,YAAY,YAAY,OAAO,cAAc,YAAY,SAAS;AACnF,aAAA,oBAAoB,iBAAiB,2DAA2D;AAAA,IAAA;AAGxG,UAAM,KAAK,cAAc,mBAAmB,QAAQ,IAAI,QAAQ,KAAK;AAE9D,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAGpB;"}
@@ -1 +1 @@
1
- {"version":3,"file":"CreateProjectMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/CreateProjectMutationResolver.ts"],"sourcesContent":["import { CreateProjectResponse, MutationCreateProjectArgs, MutationResolvers } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { isTokenHash, PermissionActions, ProjectManager, TenantRole } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class CreateProjectMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync createProject(\n\t\tparent: any,\n\t\t{ projectSlug, name, config, deployTokenHash: deployTokenHashDeprecated, secrets, options }: MutationCreateProjectArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<CreateProjectResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\n\t\tif (project) {\n\t\t\treturn createErrorResponse('ALREADY_EXISTS', `Project ${projectSlug} already exists`)\n\t\t}\n\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PROJECT_CREATE,\n\t\t\tmessage: 'You are not allowed to create a project',\n\t\t})\n\t\tconst deployTokenHash = options?.deployTokenHash ?? deployTokenHashDeprecated ?? undefined\n\n\t\tif (typeof deployTokenHash === 'string' && !isTokenHash(deployTokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of deployTokenHash. Must be hex-encoded sha256.')\n\t\t}\n\n\t\tconst isSuperAdmin = await context.identity.roles.includes(TenantRole.SUPER_ADMIN)\n\n\t\tconst response = await this.projectManager.createProject(\n\t\t\tcontext.db,\n\t\t\tcontext.logger,\n\t\t\t{\n\t\t\t\tslug: projectSlug,\n\t\t\t\tname: name || projectSlug,\n\t\t\t\tconfig: config || {},\n\t\t\t\tsecrets: Object.fromEntries((secrets || []).map(it => [it.key, it.value])),\n\t\t\t},\n\t\t\t{\n\t\t\t\townerIdentityId: isSuperAdmin ? undefined : context.identity.id,\n\t\t\t\tdeployTokenHash,\n\t\t\t\tnoDeployToken: options?.noDeployToken ?? false,\n\t\t\t},\n\t\t)\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\treturn {\n\t\t\tok: true,\n\t\t\terror: null,\n\t\t\tresult: {\n\t\t\t\tdeployerApiKey: response.result.deployerApiKey?.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["createErrorResponse","PermissionActions","isTokenHash","UserInputError","TenantRole"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAiC;AAAA,EAE9D,MAAM,cACL,QACA,EAAE,aAAa,MAAM,QAAQ,iBAAiB,2BAA2B,SAAS,QAAQ,GAC1F,SACiC;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAElF,QAAI,SAAS;AACZ,aAAOA,WAAAA,oBAAoB,kBAAkB,WAAW,WAAW,iBAAiB;AAAA,IACrF;AAEA,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQC,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACK,UAAA,kBAAkB,SAAS,mBAAmB,6BAA6B;AAEjF,QAAI,OAAO,oBAAoB,YAAY,CAACC,WAAA,YAAY,eAAe,GAAG;AACnE,YAAA,IAAIC,aAAAA,eAAe,gEAAgE;AAAA,IAC1F;AAEA,UAAM,eAAe,MAAM,QAAQ,SAAS,MAAM,SAASC,MAAAA,WAAW,WAAW;AAE3E,UAAA,WAAW,MAAM,KAAK,eAAe;AAAA,MAC1C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,QACC,MAAM;AAAA,QACN,MAAM,QAAQ;AAAA,QACd,QAAQ,UAAU,CAAC;AAAA,QACnB,SAAS,OAAO,aAAa,WAAW,CAAI,GAAA,IAAI,CAAM,OAAA,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;AAAA,MAC1E;AAAA,MACA;AAAA,QACC,iBAAiB,eAAe,SAAY,QAAQ,SAAS;AAAA,QAC7D;AAAA,QACA,eAAe,SAAS,iBAAiB;AAAA,MAC1C;AAAA,IAAA;AAEG,QAAA,CAAC,SAAS,IAAI;AACjB,aAAOJ,WAAoB,oBAAA,SAAS,OAAO,SAAS,YAAY;AAAA,IACjE;AACO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,QACP,gBAAgB,SAAS,OAAO,gBAAgB,kBAAkB;AAAA,MACnE;AAAA,IAAA;AAAA,EAEF;AACD;;"}
1
+ {"version":3,"file":"CreateProjectMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/CreateProjectMutationResolver.ts"],"sourcesContent":["import { CreateProjectResponse, MutationCreateProjectArgs, MutationResolvers } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { isTokenHash, PermissionActions, ProjectManager, TenantRole } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class CreateProjectMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync createProject(\n\t\tparent: any,\n\t\t{ projectSlug, name, config, deployTokenHash: deployTokenHashDeprecated, secrets, options }: MutationCreateProjectArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<CreateProjectResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\n\t\tif (project) {\n\t\t\treturn createErrorResponse('ALREADY_EXISTS', `Project ${projectSlug} already exists`)\n\t\t}\n\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PROJECT_CREATE,\n\t\t\tmessage: 'You are not allowed to create a project',\n\t\t})\n\t\tconst deployTokenHash = options?.deployTokenHash ?? deployTokenHashDeprecated ?? undefined\n\n\t\tif (typeof deployTokenHash === 'string' && !isTokenHash(deployTokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of deployTokenHash. Must be hex-encoded sha256.')\n\t\t}\n\n\t\tconst isSuperAdmin = await context.identity.roles.includes(TenantRole.SUPER_ADMIN)\n\n\t\tconst response = await this.projectManager.createProject(\n\t\t\tcontext.db,\n\t\t\tcontext.logger,\n\t\t\t{\n\t\t\t\tslug: projectSlug,\n\t\t\t\tname: name || projectSlug,\n\t\t\t\tconfig: config || {},\n\t\t\t\tsecrets: Object.fromEntries((secrets || []).map(it => [it.key, it.value])),\n\t\t\t},\n\t\t\t{\n\t\t\t\townerIdentityId: isSuperAdmin ? undefined : context.identity.id,\n\t\t\t\tdeployTokenHash,\n\t\t\t\tnoDeployToken: options?.noDeployToken ?? false,\n\t\t\t},\n\t\t)\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\treturn {\n\t\t\tok: true,\n\t\t\terror: null,\n\t\t\tresult: {\n\t\t\t\tdeployerApiKey: response.result.deployerApiKey?.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["createErrorResponse","PermissionActions","isTokenHash","UserInputError","TenantRole"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,cACL,QACA,EAAE,aAAa,MAAM,QAAQ,iBAAiB,2BAA2B,SAAS,QAAQ,GAC1F,SACiC;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAElF,QAAI,SAAS;AACZ,aAAOA,WAAAA,oBAAoB,kBAAkB,WAAW,WAAW,iBAAiB;AAAA,IAAA;AAGrF,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQC,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACK,UAAA,kBAAkB,SAAS,mBAAmB,6BAA6B;AAEjF,QAAI,OAAO,oBAAoB,YAAY,CAACC,WAAA,YAAY,eAAe,GAAG;AACnE,YAAA,IAAIC,4BAAe,gEAAgE;AAAA,IAAA;AAG1F,UAAM,eAAe,MAAM,QAAQ,SAAS,MAAM,SAASC,iBAAW,WAAW;AAE3E,UAAA,WAAW,MAAM,KAAK,eAAe;AAAA,MAC1C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,QACC,MAAM;AAAA,QACN,MAAM,QAAQ;AAAA,QACd,QAAQ,UAAU,CAAC;AAAA,QACnB,SAAS,OAAO,aAAa,WAAW,CAAA,GAAI,IAAI,CAAM,OAAA,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;AAAA,MAC1E;AAAA,MACA;AAAA,QACC,iBAAiB,eAAe,SAAY,QAAQ,SAAS;AAAA,QAC7D;AAAA,QACA,eAAe,SAAS,iBAAiB;AAAA,MAAA;AAAA,IAE3C;AACI,QAAA,CAAC,SAAS,IAAI;AACjB,aAAOJ,WAAoB,oBAAA,SAAS,OAAO,SAAS,YAAY;AAAA,IAAA;AAE1D,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,QACP,gBAAgB,SAAS,OAAO,gBAAgB,kBAAkB;AAAA,MAAA;AAAA,IAEpE;AAAA,EAAA;AAEF;;"}
@@ -1 +1 @@
1
- {"version":3,"file":"CreateProjectMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/CreateProjectMutationResolver.ts"],"sourcesContent":["import { CreateProjectResponse, MutationCreateProjectArgs, MutationResolvers } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { isTokenHash, PermissionActions, ProjectManager, TenantRole } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class CreateProjectMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync createProject(\n\t\tparent: any,\n\t\t{ projectSlug, name, config, deployTokenHash: deployTokenHashDeprecated, secrets, options }: MutationCreateProjectArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<CreateProjectResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\n\t\tif (project) {\n\t\t\treturn createErrorResponse('ALREADY_EXISTS', `Project ${projectSlug} already exists`)\n\t\t}\n\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PROJECT_CREATE,\n\t\t\tmessage: 'You are not allowed to create a project',\n\t\t})\n\t\tconst deployTokenHash = options?.deployTokenHash ?? deployTokenHashDeprecated ?? undefined\n\n\t\tif (typeof deployTokenHash === 'string' && !isTokenHash(deployTokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of deployTokenHash. Must be hex-encoded sha256.')\n\t\t}\n\n\t\tconst isSuperAdmin = await context.identity.roles.includes(TenantRole.SUPER_ADMIN)\n\n\t\tconst response = await this.projectManager.createProject(\n\t\t\tcontext.db,\n\t\t\tcontext.logger,\n\t\t\t{\n\t\t\t\tslug: projectSlug,\n\t\t\t\tname: name || projectSlug,\n\t\t\t\tconfig: config || {},\n\t\t\t\tsecrets: Object.fromEntries((secrets || []).map(it => [it.key, it.value])),\n\t\t\t},\n\t\t\t{\n\t\t\t\townerIdentityId: isSuperAdmin ? undefined : context.identity.id,\n\t\t\t\tdeployTokenHash,\n\t\t\t\tnoDeployToken: options?.noDeployToken ?? false,\n\t\t\t},\n\t\t)\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\treturn {\n\t\t\tok: true,\n\t\t\terror: null,\n\t\t\tresult: {\n\t\t\t\tdeployerApiKey: response.result.deployerApiKey?.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAiC;AAAA,EAE9D,MAAM,cACL,QACA,EAAE,aAAa,MAAM,QAAQ,iBAAiB,2BAA2B,SAAS,QAAQ,GAC1F,SACiC;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAElF,QAAI,SAAS;AACZ,aAAO,oBAAoB,kBAAkB,WAAW,WAAW,iBAAiB;AAAA,IACrF;AAEA,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACK,UAAA,kBAAkB,SAAS,mBAAmB,6BAA6B;AAEjF,QAAI,OAAO,oBAAoB,YAAY,CAAC,YAAY,eAAe,GAAG;AACnE,YAAA,IAAI,eAAe,gEAAgE;AAAA,IAC1F;AAEA,UAAM,eAAe,MAAM,QAAQ,SAAS,MAAM,SAAS,WAAW,WAAW;AAE3E,UAAA,WAAW,MAAM,KAAK,eAAe;AAAA,MAC1C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,QACC,MAAM;AAAA,QACN,MAAM,QAAQ;AAAA,QACd,QAAQ,UAAU,CAAC;AAAA,QACnB,SAAS,OAAO,aAAa,WAAW,CAAI,GAAA,IAAI,CAAM,OAAA,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;AAAA,MAC1E;AAAA,MACA;AAAA,QACC,iBAAiB,eAAe,SAAY,QAAQ,SAAS;AAAA,QAC7D;AAAA,QACA,eAAe,SAAS,iBAAiB;AAAA,MAC1C;AAAA,IAAA;AAEG,QAAA,CAAC,SAAS,IAAI;AACjB,aAAO,oBAAoB,SAAS,OAAO,SAAS,YAAY;AAAA,IACjE;AACO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,QACP,gBAAgB,SAAS,OAAO,gBAAgB,kBAAkB;AAAA,MACnE;AAAA,IAAA;AAAA,EAEF;AACD;"}
1
+ {"version":3,"file":"CreateProjectMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/CreateProjectMutationResolver.ts"],"sourcesContent":["import { CreateProjectResponse, MutationCreateProjectArgs, MutationResolvers } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { isTokenHash, PermissionActions, ProjectManager, TenantRole } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class CreateProjectMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync createProject(\n\t\tparent: any,\n\t\t{ projectSlug, name, config, deployTokenHash: deployTokenHashDeprecated, secrets, options }: MutationCreateProjectArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<CreateProjectResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\n\t\tif (project) {\n\t\t\treturn createErrorResponse('ALREADY_EXISTS', `Project ${projectSlug} already exists`)\n\t\t}\n\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.PROJECT_CREATE,\n\t\t\tmessage: 'You are not allowed to create a project',\n\t\t})\n\t\tconst deployTokenHash = options?.deployTokenHash ?? deployTokenHashDeprecated ?? undefined\n\n\t\tif (typeof deployTokenHash === 'string' && !isTokenHash(deployTokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of deployTokenHash. Must be hex-encoded sha256.')\n\t\t}\n\n\t\tconst isSuperAdmin = await context.identity.roles.includes(TenantRole.SUPER_ADMIN)\n\n\t\tconst response = await this.projectManager.createProject(\n\t\t\tcontext.db,\n\t\t\tcontext.logger,\n\t\t\t{\n\t\t\t\tslug: projectSlug,\n\t\t\t\tname: name || projectSlug,\n\t\t\t\tconfig: config || {},\n\t\t\t\tsecrets: Object.fromEntries((secrets || []).map(it => [it.key, it.value])),\n\t\t\t},\n\t\t\t{\n\t\t\t\townerIdentityId: isSuperAdmin ? undefined : context.identity.id,\n\t\t\t\tdeployTokenHash,\n\t\t\t\tnoDeployToken: options?.noDeployToken ?? false,\n\t\t\t},\n\t\t)\n\t\tif (!response.ok) {\n\t\t\treturn createErrorResponse(response.error, response.errorMessage)\n\t\t}\n\t\treturn {\n\t\t\tok: true,\n\t\t\terror: null,\n\t\t\tresult: {\n\t\t\t\tdeployerApiKey: response.result.deployerApiKey?.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,cACL,QACA,EAAE,aAAa,MAAM,QAAQ,iBAAiB,2BAA2B,SAAS,QAAQ,GAC1F,SACiC;AACjC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAElF,QAAI,SAAS;AACZ,aAAO,oBAAoB,kBAAkB,WAAW,WAAW,iBAAiB;AAAA,IAAA;AAGrF,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACK,UAAA,kBAAkB,SAAS,mBAAmB,6BAA6B;AAEjF,QAAI,OAAO,oBAAoB,YAAY,CAAC,YAAY,eAAe,GAAG;AACnE,YAAA,IAAI,eAAe,gEAAgE;AAAA,IAAA;AAG1F,UAAM,eAAe,MAAM,QAAQ,SAAS,MAAM,SAAS,WAAW,WAAW;AAE3E,UAAA,WAAW,MAAM,KAAK,eAAe;AAAA,MAC1C,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,QACC,MAAM;AAAA,QACN,MAAM,QAAQ;AAAA,QACd,QAAQ,UAAU,CAAC;AAAA,QACnB,SAAS,OAAO,aAAa,WAAW,CAAA,GAAI,IAAI,CAAM,OAAA,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;AAAA,MAC1E;AAAA,MACA;AAAA,QACC,iBAAiB,eAAe,SAAY,QAAQ,SAAS;AAAA,QAC7D;AAAA,QACA,eAAe,SAAS,iBAAiB;AAAA,MAAA;AAAA,IAE3C;AACI,QAAA,CAAC,SAAS,IAAI;AACjB,aAAO,oBAAoB,SAAS,OAAO,SAAS,YAAY;AAAA,IAAA;AAE1D,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,QACP,gBAAgB,SAAS,OAAO,gBAAgB,kBAAkB;AAAA,MAAA;AAAA,IAEpE;AAAA,EAAA;AAEF;"}
@@ -1 +1 @@
1
- {"version":3,"file":"SetProjectSecretMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/SetProjectSecretMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tCreateProjectResponseErrorCode,\n\tMutationResolvers,\n\tMutationSetProjectSecretArgs,\n\tSetProjectSecretResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, SecretsManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class SetProjectSecretMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager, private readonly secretManager: SecretsManager) {}\n\n\tasync setProjectSecret(\n\t\tparent: any,\n\t\targs: MutationSetProjectSecretArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<SetProjectSecretResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_SET_SECRET,\n\t\t\tmessage: 'You are not allowed to set project secrets',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.secretManager.setSecret(context.db, project.id, args.key, args.value)\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YAA6B,gBAAiD,eAA+B;AAAhF,SAAA,iBAAA;AAAiD,SAAA,gBAAA;AAAA,EAAgC;AAAA,EAE9G,MAAM,iBACL,QACA,MACA,SACoC;AAC9B,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,yCAA8B,qBAAqB,KAAK,WAAW;AAAA,IAC3E;AACM,UAAA,KAAK,cAAc,UAAU,QAAQ,IAAI,QAAQ,IAAI,KAAK,KAAK,KAAK,KAAK;AACxE,WAAA,EAAE,IAAI;EACd;AACD;;"}
1
+ {"version":3,"file":"SetProjectSecretMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/SetProjectSecretMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tCreateProjectResponseErrorCode,\n\tMutationResolvers,\n\tMutationSetProjectSecretArgs,\n\tSetProjectSecretResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, SecretsManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class SetProjectSecretMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager, private readonly secretManager: SecretsManager) {}\n\n\tasync setProjectSecret(\n\t\tparent: any,\n\t\targs: MutationSetProjectSecretArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<SetProjectSecretResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_SET_SECRET,\n\t\t\tmessage: 'You are not allowed to set project secrets',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.secretManager.setSecret(context.db, project.id, args.key, args.value)\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YAA6B,gBAAiD,eAA+B;AAAhF,SAAA,iBAAA;AAAiD,SAAA,gBAAA;AAAA,EAAA;AAAA,EAE9E,MAAM,iBACL,QACA,MACA,SACoC;AAC9B,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,yCAA8B,qBAAqB,KAAK,WAAW;AAAA,IAAA;AAErE,UAAA,KAAK,cAAc,UAAU,QAAQ,IAAI,QAAQ,IAAI,KAAK,KAAK,KAAK,KAAK;AACxE,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;;"}
@@ -1 +1 @@
1
- {"version":3,"file":"SetProjectSecretMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/SetProjectSecretMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tCreateProjectResponseErrorCode,\n\tMutationResolvers,\n\tMutationSetProjectSecretArgs,\n\tSetProjectSecretResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, SecretsManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class SetProjectSecretMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager, private readonly secretManager: SecretsManager) {}\n\n\tasync setProjectSecret(\n\t\tparent: any,\n\t\targs: MutationSetProjectSecretArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<SetProjectSecretResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_SET_SECRET,\n\t\t\tmessage: 'You are not allowed to set project secrets',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.secretManager.setSecret(context.db, project.id, args.key, args.value)\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YAA6B,gBAAiD,eAA+B;AAAhF,SAAA,iBAAA;AAAiD,SAAA,gBAAA;AAAA,EAAgC;AAAA,EAE9G,MAAM,iBACL,QACA,MACA,SACoC;AAC9B,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,KAAK,WAAW;AAAA,IAC3E;AACM,UAAA,KAAK,cAAc,UAAU,QAAQ,IAAI,QAAQ,IAAI,KAAK,KAAK,KAAK,KAAK;AACxE,WAAA,EAAE,IAAI;EACd;AACD;"}
1
+ {"version":3,"file":"SetProjectSecretMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/SetProjectSecretMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tCreateProjectResponseErrorCode,\n\tMutationResolvers,\n\tMutationSetProjectSecretArgs,\n\tSetProjectSecretResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, SecretsManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class SetProjectSecretMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager, private readonly secretManager: SecretsManager) {}\n\n\tasync setProjectSecret(\n\t\tparent: any,\n\t\targs: MutationSetProjectSecretArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<SetProjectSecretResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_SET_SECRET,\n\t\t\tmessage: 'You are not allowed to set project secrets',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.secretManager.setSecret(context.db, project.id, args.key, args.value)\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YAA6B,gBAAiD,eAA+B;AAAhF,SAAA,iBAAA;AAAiD,SAAA,gBAAA;AAAA,EAAA;AAAA,EAE9E,MAAM,iBACL,QACA,MACA,SACoC;AAC9B,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,KAAK,WAAW;AAAA,IAAA;AAErE,UAAA,KAAK,cAAc,UAAU,QAAQ,IAAI,QAAQ,IAAI,KAAK,KAAK,KAAK,KAAK;AACxE,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;"}
@@ -1 +1 @@
1
- {"version":3,"file":"UpdateProjectMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/UpdateProjectMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateProjectArgs, UpdateProjectResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { Merger } from '@contember/config-loader'\n\nexport class UpdateProjectMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync updateProject(\n\t\tparent: any,\n\t\targs: MutationUpdateProjectArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_UPDATE,\n\t\t\tmessage: 'You are not allowed to update a project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.projectManager.updateProject(context.db, project.id, {\n\t\t\tname: args.name || undefined,\n\t\t\tconfig: args.config !== undefined ? Merger.merge(args.mergeConfig ? project.config : {}, args.config) : undefined,\n\t\t})\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","Merger"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAiC;AAAA,EAE9D,MAAM,cACL,QACA,MACA,SACiC;AAC3B,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,yCAA8B,qBAAqB,KAAK,WAAW;AAAA,IAC3E;AACA,UAAM,KAAK,eAAe,cAAc,QAAQ,IAAI,QAAQ,IAAI;AAAA,MAC/D,MAAM,KAAK,QAAQ;AAAA,MACnB,QAAQ,KAAK,WAAW,SAAYC,aAAAA,OAAO,MAAM,KAAK,cAAc,QAAQ,SAAS,CAAA,GAAI,KAAK,MAAM,IAAI;AAAA,IAAA,CACxG;AACM,WAAA,EAAE,IAAI;EACd;AACD;;"}
1
+ {"version":3,"file":"UpdateProjectMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/UpdateProjectMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateProjectArgs, UpdateProjectResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { Merger } from '@contember/config-loader'\n\nexport class UpdateProjectMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync updateProject(\n\t\tparent: any,\n\t\targs: MutationUpdateProjectArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_UPDATE,\n\t\t\tmessage: 'You are not allowed to update a project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.projectManager.updateProject(context.db, project.id, {\n\t\t\tname: args.name || undefined,\n\t\t\tconfig: args.config !== undefined ? Merger.merge(args.mergeConfig ? project.config : {}, args.config) : undefined,\n\t\t})\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","Merger"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,cACL,QACA,MACA,SACiC;AAC3B,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,yCAA8B,qBAAqB,KAAK,WAAW;AAAA,IAAA;AAE3E,UAAM,KAAK,eAAe,cAAc,QAAQ,IAAI,QAAQ,IAAI;AAAA,MAC/D,MAAM,KAAK,QAAQ;AAAA,MACnB,QAAQ,KAAK,WAAW,SAAYC,aAAAA,OAAO,MAAM,KAAK,cAAc,QAAQ,SAAS,CAAA,GAAI,KAAK,MAAM,IAAI;AAAA,IAAA,CACxG;AACM,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;;"}
@@ -1 +1 @@
1
- {"version":3,"file":"UpdateProjectMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/UpdateProjectMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateProjectArgs, UpdateProjectResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { Merger } from '@contember/config-loader'\n\nexport class UpdateProjectMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync updateProject(\n\t\tparent: any,\n\t\targs: MutationUpdateProjectArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_UPDATE,\n\t\t\tmessage: 'You are not allowed to update a project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.projectManager.updateProject(context.db, project.id, {\n\t\t\tname: args.name || undefined,\n\t\t\tconfig: args.config !== undefined ? Merger.merge(args.mergeConfig ? project.config : {}, args.config) : undefined,\n\t\t})\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAiC;AAAA,EAE9D,MAAM,cACL,QACA,MACA,SACiC;AAC3B,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,KAAK,WAAW;AAAA,IAC3E;AACA,UAAM,KAAK,eAAe,cAAc,QAAQ,IAAI,QAAQ,IAAI;AAAA,MAC/D,MAAM,KAAK,QAAQ;AAAA,MACnB,QAAQ,KAAK,WAAW,SAAY,OAAO,MAAM,KAAK,cAAc,QAAQ,SAAS,CAAA,GAAI,KAAK,MAAM,IAAI;AAAA,IAAA,CACxG;AACM,WAAA,EAAE,IAAI;EACd;AACD;"}
1
+ {"version":3,"file":"UpdateProjectMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/project/UpdateProjectMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateProjectArgs, UpdateProjectResponse } from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager } from '../../../model'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { Merger } from '@contember/config-loader'\n\nexport class UpdateProjectMutationResolver implements MutationResolvers {\n\tconstructor(private readonly projectManager: ProjectManager) {}\n\n\tasync updateProject(\n\t\tparent: any,\n\t\targs: MutationUpdateProjectArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, args.projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_UPDATE,\n\t\t\tmessage: 'You are not allowed to update a project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', args.projectSlug)\n\t\t}\n\t\tawait this.projectManager.updateProject(context.db, project.id, {\n\t\t\tname: args.name || undefined,\n\t\t\tconfig: args.config !== undefined ? Merger.merge(args.mergeConfig ? project.config : {}, args.config) : undefined,\n\t\t})\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,gBAAgC;AAAhC,SAAA,iBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,cACL,QACA,MACA,SACiC;AAC3B,UAAA,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,KAAK,WAAW;AACvF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,KAAK,WAAW;AAAA,IAAA;AAE3E,UAAM,KAAK,eAAe,cAAc,QAAQ,IAAI,QAAQ,IAAI;AAAA,MAC/D,MAAM,KAAK,QAAQ;AAAA,MACnB,QAAQ,KAAK,WAAW,SAAY,OAAO,MAAM,KAAK,cAAc,QAAQ,SAAS,CAAA,GAAI,KAAK,MAAM,IAAI;AAAA,IAAA,CACxG;AACM,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;"}
@@ -1 +1 @@
1
- {"version":3,"file":"AddProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tAddProjectMemberResponse,\n\tMutationAddProjectMemberArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class AddProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync addProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationAddProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<AddProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_ADD_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to add a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.addProjectMember(context.db, project.id, identityId, memberships)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createMembershipValidationErrorResult","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,iBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACoC;AACpC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAAA,kBAAkB,mBAAmB,WAAW;AAAA,MACxD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AACtF,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAASC,sDAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEM,UAAA,SAAS,MAAM,KAAK,qBAAqB,iBAAiB,QAAQ,IAAI,QAAQ,IAAI,YAAY,WAAW;AAE3G,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,IAAA;AAAA,EAEX;AACD;;"}
1
+ {"version":3,"file":"AddProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tAddProjectMemberResponse,\n\tMutationAddProjectMemberArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class AddProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync addProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationAddProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<AddProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_ADD_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to add a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.addProjectMember(context.db, project.id, identityId, memberships)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createMembershipValidationErrorResult","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,iBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACoC;AACpC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAAA,kBAAkB,mBAAmB,WAAW;AAAA,MACxD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEtE,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AACtF,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAASC,sDAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAChB;AAAA,IAAA;AAGK,UAAA,SAAS,MAAM,KAAK,qBAAqB,iBAAiB,QAAQ,IAAI,QAAQ,IAAI,YAAY,WAAW;AAE3G,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;;"}
@@ -1 +1 @@
1
- {"version":3,"file":"AddProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tAddProjectMemberResponse,\n\tMutationAddProjectMemberArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class AddProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync addProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationAddProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<AddProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_ADD_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to add a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.addProjectMember(context.db, project.id, identityId, memberships)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,iBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACoC;AACpC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB,mBAAmB,WAAW;AAAA,MACxD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AACtF,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAAS,sCAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEM,UAAA,SAAS,MAAM,KAAK,qBAAqB,iBAAiB,QAAQ,IAAI,QAAQ,IAAI,YAAY,WAAW;AAE3G,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,IAAA;AAAA,EAEX;AACD;"}
1
+ {"version":3,"file":"AddProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tAddProjectMemberErrorCode,\n\tAddProjectMemberResponse,\n\tMutationAddProjectMemberArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MembershipValidator, PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class AddProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync addProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationAddProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<AddProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.PROJECT_ADD_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to add a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.addProjectMember(context.db, project.id, identityId, memberships)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAWO,MAAM,iCAA8D;AAAA,EAC1E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,iBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACoC;AACpC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB,mBAAmB,WAAW;AAAA,MACxD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEtE,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AACtF,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAAS,sCAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAChB;AAAA,IAAA;AAGK,UAAA,SAAS,MAAM,KAAK,qBAAqB,iBAAiB,QAAQ,IAAI,QAAQ,IAAI,YAAY,WAAW;AAE3G,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;"}
@@ -1 +1 @@
1
- {"version":3,"file":"RemoveProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationRemoveProjectMemberArgs,\n\tMutationResolvers,\n\tRemoveProjectMemberErrorCode,\n\tRemoveProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class RemoveProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t) {}\n\n\tasync removeProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId }: MutationRemoveProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst memberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\n\t\tconst result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAUO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,WAAA,GACf,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACM,UAAA,cAAc,MAAM,KAAK,qBAAqB;AAAA,MACnD,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAE5D,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQD,kBAAAA,kBAAkB,sBAAsB,WAAW;AAAA,MAC3D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,UAAU;AAEjG,QAAA,CAAC,OAAO,IAAI;AACf,aAAOE,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,IAAA;AAAA,EAEX;AACD;;"}
1
+ {"version":3,"file":"RemoveProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationRemoveProjectMemberArgs,\n\tMutationResolvers,\n\tRemoveProjectMemberErrorCode,\n\tRemoveProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class RemoveProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t) {}\n\n\tasync removeProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId }: MutationRemoveProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst memberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\n\t\tconst result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAUO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,oBACL,QACA,EAAE,aAAa,WAAA,GACf,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEhE,UAAA,cAAc,MAAM,KAAK,qBAAqB;AAAA,MACnD,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAC5D;AACA,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQD,kBAAAA,kBAAkB,sBAAsB,WAAW;AAAA,MAC3D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,UAAU;AAEjG,QAAA,CAAC,OAAO,IAAI;AACf,aAAOE,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;;"}
@@ -1 +1 @@
1
- {"version":3,"file":"RemoveProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationRemoveProjectMemberArgs,\n\tMutationResolvers,\n\tRemoveProjectMemberErrorCode,\n\tRemoveProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class RemoveProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t) {}\n\n\tasync removeProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId }: MutationRemoveProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst memberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\n\t\tconst result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAUO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,WAAA,GACf,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACM,UAAA,cAAc,MAAM,KAAK,qBAAqB;AAAA,MACnD,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAE5D,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,WAAW;AAAA,MAC3D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,UAAU;AAEjG,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,IAAA;AAAA,EAEX;AACD;"}
1
+ {"version":3,"file":"RemoveProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationRemoveProjectMemberArgs,\n\tMutationResolvers,\n\tRemoveProjectMemberErrorCode,\n\tRemoveProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ProjectManager, ProjectMemberManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\n\nexport class RemoveProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t) {}\n\n\tasync removeProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId }: MutationRemoveProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst memberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_REMOVE_MEMBER(memberships),\n\t\t\tmessage: 'You are not allowed to remove a project member',\n\t\t})\n\n\t\tconst result = await this.projectMemberManager.removeProjectMember(context.db, project.id, identityId)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAUO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBAChB;AAFgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,oBACL,QACA,EAAE,aAAa,WAAA,GACf,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEhE,UAAA,cAAc,MAAM,KAAK,qBAAqB;AAAA,MACnD,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAC5D;AACA,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,WAAW;AAAA,MAC3D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,UAAU;AAEjG,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;"}
@@ -1 +1 @@
1
- {"version":3,"file":"UpdateProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationResolvers,\n\tMutationUpdateProjectMemberArgs,\n\tUpdateProjectMemberErrorCode,\n\tUpdateProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport {\n\tMembershipValidationErrorType,\n\tMembershipValidator,\n\tPermissionActions,\n\tProjectManager,\n\tProjectMemberManager,\n} from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createMembershipModification } from '../../../model/service/membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { Acl } from '@contember/schema'\n\nexport class UpdateProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync updateProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationUpdateProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tconst membershipPatch = createMembershipModification(visibleMemberships, memberships)\n\n\t\tconst aclMemberships: Acl.Membership[] = membershipPatch.map(it => ({\n\t\t\trole: it.role,\n\t\t\tvariables: it.variables.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tvalues: 'set' in it ? it.set : [...it.remove, ...it.append],\n\t\t\t})),\n\t\t}))\n\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\n\t\tconst validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(\n\t\t\tit => it.error !== MembershipValidationErrorType.VARIABLE_EMPTY,\n\t\t)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createMembershipModification","it","MembershipValidationErrorType","createMembershipValidationErrorResult","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAmBO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACM,UAAA,qBAAqB,MAAM,KAAK,qBAAqB;AAAA,MAC1D,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAEtD,UAAA,kBAAkBC,gBAAAA,6BAA6B,oBAAoB,WAAW;AAE9E,UAAA,iBAAmC,gBAAgB,IAAI,CAAO,QAAA;AAAA,MACnE,MAAM,GAAG;AAAA,MACT,WAAW,GAAG,UAAU,IAAI,CAAAC,SAAO;AAAA,QAClC,MAAMA,IAAG;AAAA,QACT,QAAQ,SAASA,MAAKA,IAAG,MAAM,CAAC,GAAGA,IAAG,QAAQ,GAAGA,IAAG,MAAM;AAAA,MAAA,EACzD;AAAA,IACD,EAAA;AAEF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQH,kBAAAA,kBAAkB,sBAAsB,cAAc;AAAA,MAC9D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,oBAAoB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW,GAAG;AAAA,MAC7F,CAAA,OAAM,GAAG,UAAUI,YAA8B,8BAAA;AAAA,IAAA;AAE9C,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAASC,wDAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEM,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,YAAY,eAAe;AAElH,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,IAAA;AAAA,EAEX;AACD;;"}
1
+ {"version":3,"file":"UpdateProjectMemberMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationResolvers,\n\tMutationUpdateProjectMemberArgs,\n\tUpdateProjectMemberErrorCode,\n\tUpdateProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport {\n\tMembershipValidationErrorType,\n\tMembershipValidator,\n\tPermissionActions,\n\tProjectManager,\n\tProjectMemberManager,\n} from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createMembershipModification } from '../../../model/service/membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { Acl } from '@contember/schema'\n\nexport class UpdateProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync updateProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationUpdateProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tconst membershipPatch = createMembershipModification(visibleMemberships, memberships)\n\n\t\tconst aclMemberships: Acl.Membership[] = membershipPatch.map(it => ({\n\t\t\trole: it.role,\n\t\t\tvariables: it.variables.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tvalues: 'set' in it ? it.set : [...it.remove, ...it.append],\n\t\t\t})),\n\t\t}))\n\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\n\t\tconst validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(\n\t\t\tit => it.error !== MembershipValidationErrorType.VARIABLE_EMPTY,\n\t\t)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","createMembershipModification","it","MembershipValidationErrorType","createMembershipValidationErrorResult","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAmBO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,oBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQA,kBAAAA,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEhE,UAAA,qBAAqB,MAAM,KAAK,qBAAqB;AAAA,MAC1D,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAC5D;AACM,UAAA,kBAAkBC,gBAAAA,6BAA6B,oBAAoB,WAAW;AAE9E,UAAA,iBAAmC,gBAAgB,IAAI,CAAO,QAAA;AAAA,MACnE,MAAM,GAAG;AAAA,MACT,WAAW,GAAG,UAAU,IAAI,CAAAC,SAAO;AAAA,QAClC,MAAMA,IAAG;AAAA,QACT,QAAQ,SAASA,MAAKA,IAAG,MAAM,CAAC,GAAGA,IAAG,QAAQ,GAAGA,IAAG,MAAM;AAAA,MAAA,EACzD;AAAA,IAAA,EACD;AAEF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQH,kBAAAA,kBAAkB,sBAAsB,cAAc;AAAA,MAC9D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,oBAAoB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW,GAAG;AAAA,MAC7F,CAAA,OAAM,GAAG,UAAUI,0CAA8B;AAAA,IAClD;AACI,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAASC,wDAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAChB;AAAA,IAAA;AAGK,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,YAAY,eAAe;AAElH,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;;"}
@@ -1 +1 @@
1
- {"version":3,"file":"UpdateProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationResolvers,\n\tMutationUpdateProjectMemberArgs,\n\tUpdateProjectMemberErrorCode,\n\tUpdateProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport {\n\tMembershipValidationErrorType,\n\tMembershipValidator,\n\tPermissionActions,\n\tProjectManager,\n\tProjectMemberManager,\n} from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createMembershipModification } from '../../../model/service/membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { Acl } from '@contember/schema'\n\nexport class UpdateProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync updateProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationUpdateProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tconst membershipPatch = createMembershipModification(visibleMemberships, memberships)\n\n\t\tconst aclMemberships: Acl.Membership[] = membershipPatch.map(it => ({\n\t\t\trole: it.role,\n\t\t\tvariables: it.variables.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tvalues: 'set' in it ? it.set : [...it.remove, ...it.append],\n\t\t\t})),\n\t\t}))\n\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\n\t\tconst validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(\n\t\t\tit => it.error !== MembershipValidationErrorType.VARIABLE_EMPTY,\n\t\t)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["it"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAmBO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,oBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACM,UAAA,qBAAqB,MAAM,KAAK,qBAAqB;AAAA,MAC1D,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAAA;AAEtD,UAAA,kBAAkB,6BAA6B,oBAAoB,WAAW;AAE9E,UAAA,iBAAmC,gBAAgB,IAAI,CAAO,QAAA;AAAA,MACnE,MAAM,GAAG;AAAA,MACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO;AAAA,QAClC,MAAMA,IAAG;AAAA,QACT,QAAQ,SAASA,MAAKA,IAAG,MAAM,CAAC,GAAGA,IAAG,QAAQ,GAAGA,IAAG,MAAM;AAAA,MAAA,EACzD;AAAA,IACD,EAAA;AAEF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,cAAc;AAAA,MAC9D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,oBAAoB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW,GAAG;AAAA,MAC7F,CAAA,OAAM,GAAG,UAAU,8BAA8B;AAAA,IAAA;AAE9C,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAAS,sCAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEM,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,YAAY,eAAe;AAElH,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEO,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,IAAA;AAAA,EAEX;AACD;"}
1
+ {"version":3,"file":"UpdateProjectMemberMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.ts"],"sourcesContent":["import {\n\tMutationResolvers,\n\tMutationUpdateProjectMemberArgs,\n\tUpdateProjectMemberErrorCode,\n\tUpdateProjectMemberResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport {\n\tMembershipValidationErrorType,\n\tMembershipValidator,\n\tPermissionActions,\n\tProjectManager,\n\tProjectMemberManager,\n} from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createMembershipModification } from '../../../model/service/membershipUtils'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { Acl } from '@contember/schema'\n\nexport class UpdateProjectMemberMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectMemberManager: ProjectMemberManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync updateProjectMember(\n\t\tparent: any,\n\t\t{ projectSlug, identityId, memberships }: MutationUpdateProjectMemberArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<UpdateProjectMemberResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tconst projectScope = await context.permissionContext.createProjectScope(project)\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER([]),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tconst visibleMemberships = await this.projectMemberManager.getStoredProjectsMemberships(\n\t\t\tcontext.db,\n\t\t\t{ id: project.id },\n\t\t\t{ id: identityId },\n\t\t\tcontext.permissionContext.createAccessVerifier(projectScope),\n\t\t)\n\t\tconst membershipPatch = createMembershipModification(visibleMemberships, memberships)\n\n\t\tconst aclMemberships: Acl.Membership[] = membershipPatch.map(it => ({\n\t\t\trole: it.role,\n\t\t\tvariables: it.variables.map(it => ({\n\t\t\t\tname: it.name,\n\t\t\t\tvalues: 'set' in it ? it.set : [...it.remove, ...it.append],\n\t\t\t})),\n\t\t}))\n\n\t\tawait context.requireAccess({\n\t\t\tscope: projectScope,\n\t\t\taction: PermissionActions.PROJECT_UPDATE_MEMBER(aclMemberships),\n\t\t\tmessage: 'You are not allowed to update project member variables',\n\t\t})\n\n\t\tconst validationResult = (await this.membershipValidator.validate(project.slug, memberships)).filter(\n\t\t\tit => it.error !== MembershipValidationErrorType.VARIABLE_EMPTY,\n\t\t)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.projectMemberManager.updateProjectMember(context.db, project.id, identityId, membershipPatch)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["it"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAmBO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,sBACA,gBACA,qBAChB;AAHgB,SAAA,uBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,oBACL,QACA,EAAE,aAAa,YAAY,eAC3B,SACuC;AACvC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,eAAe,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAC/E,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,EAAE;AAAA,MAClD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEhE,UAAA,qBAAqB,MAAM,KAAK,qBAAqB;AAAA,MAC1D,QAAQ;AAAA,MACR,EAAE,IAAI,QAAQ,GAAG;AAAA,MACjB,EAAE,IAAI,WAAW;AAAA,MACjB,QAAQ,kBAAkB,qBAAqB,YAAY;AAAA,IAC5D;AACM,UAAA,kBAAkB,6BAA6B,oBAAoB,WAAW;AAE9E,UAAA,iBAAmC,gBAAgB,IAAI,CAAO,QAAA;AAAA,MACnE,MAAM,GAAG;AAAA,MACT,WAAW,GAAG,UAAU,IAAI,CAAAA,SAAO;AAAA,QAClC,MAAMA,IAAG;AAAA,QACT,QAAQ,SAASA,MAAKA,IAAG,MAAM,CAAC,GAAGA,IAAG,QAAQ,GAAGA,IAAG,MAAM;AAAA,MAAA,EACzD;AAAA,IAAA,EACD;AAEF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO;AAAA,MACP,QAAQ,kBAAkB,sBAAsB,cAAc;AAAA,MAC9D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,oBAAoB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW,GAAG;AAAA,MAC7F,CAAA,OAAM,GAAG,UAAU,8BAA8B;AAAA,IAClD;AACI,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAAS,sCAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAChB;AAAA,IAAA;AAGK,UAAA,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,QAAQ,IAAI,YAAY,eAAe;AAElH,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;"}
@@ -0,0 +1,34 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
3
+ const PermissionActions = require("../../model/authorization/PermissionActions.cjs");
4
+ require("@contember/authorization");
5
+ require("../../model/authorization/PermissionContext.cjs");
6
+ require("../../model/authorization/PermissionsFactory.cjs");
7
+ require("@contember/schema");
8
+ require("../../model/type/ApiKey.cjs");
9
+ require("@contember/database");
10
+ require("node:crypto");
11
+ require("../../model/queries/apiKey/ApiKeyQuery.cjs");
12
+ require("node:assert");
13
+ require("../../model/service/idp/providers/AppleProvider.cjs");
14
+ require("openid-client");
15
+ require("@contember/typesafe");
16
+ require("../../model/service/idp/providers/OIDCTypes.cjs");
17
+ require("../../model/service/idp/providers/OIDCHelpers.cjs");
18
+ require("../../model/service/idp/providers/FacebookProvider.cjs");
19
+ require("@contember/schema-utils");
20
+ require("otpauth");
21
+ class ConfigurationQueryResolver {
22
+ constructor(configurationManager) {
23
+ this.configurationManager = configurationManager;
24
+ }
25
+ async configuration(parent, args, context) {
26
+ await context.requireAccess({
27
+ action: PermissionActions.PermissionActions.CONFIG_VIEW,
28
+ message: "You are not allowed to view configuration"
29
+ });
30
+ return await this.configurationManager.fetchConfiguration(context.db);
31
+ }
32
+ }
33
+ exports.ConfigurationQueryResolver = ConfigurationQueryResolver;
34
+ //# sourceMappingURL=ConfigurationQueryResolver.cjs.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ConfigurationQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ConfigurationQueryResolver.ts"],"sourcesContent":["import { Config, QueryResolvers } from '../../schema'\nimport { PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { ConfigurationManager } from '../../model/service/ConfigurationManager'\n\nexport class ConfigurationQueryResolver implements Pick<QueryResolvers, 'configuration'> {\n\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configuration(parent: unknown, args: unknown, context: TenantResolverContext): Promise<Config> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIG_VIEW,\n\t\t\tmessage: 'You are not allowed to view configuration',\n\t\t})\n\n\t\treturn await this.configurationManager.fetchConfiguration(context.db)\n\t}\n}\n"],"names":["PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;;AAKO,MAAM,2BAA4E;AAAA,EAExF,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,cAAc,QAAiB,MAAe,SAAiD;AACpG,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,KAAK,qBAAqB,mBAAmB,QAAQ,EAAE;AAAA,EAAA;AAEtE;;"}
@@ -0,0 +1,34 @@
1
+ import { PermissionActions } from "../../model/authorization/PermissionActions.js";
2
+ import "@contember/authorization";
3
+ import "../../model/authorization/PermissionContext.js";
4
+ import "../../model/authorization/PermissionsFactory.js";
5
+ import "@contember/schema";
6
+ import "../../model/type/ApiKey.js";
7
+ import "@contember/database";
8
+ import "node:crypto";
9
+ import "../../model/queries/apiKey/ApiKeyQuery.js";
10
+ import "node:assert";
11
+ import "../../model/service/idp/providers/AppleProvider.js";
12
+ import "openid-client";
13
+ import "@contember/typesafe";
14
+ import "../../model/service/idp/providers/OIDCTypes.js";
15
+ import "../../model/service/idp/providers/OIDCHelpers.js";
16
+ import "../../model/service/idp/providers/FacebookProvider.js";
17
+ import "@contember/schema-utils";
18
+ import "otpauth";
19
+ class ConfigurationQueryResolver {
20
+ constructor(configurationManager) {
21
+ this.configurationManager = configurationManager;
22
+ }
23
+ async configuration(parent, args, context) {
24
+ await context.requireAccess({
25
+ action: PermissionActions.CONFIG_VIEW,
26
+ message: "You are not allowed to view configuration"
27
+ });
28
+ return await this.configurationManager.fetchConfiguration(context.db);
29
+ }
30
+ }
31
+ export {
32
+ ConfigurationQueryResolver
33
+ };
34
+ //# sourceMappingURL=ConfigurationQueryResolver.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ConfigurationQueryResolver.js","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/ConfigurationQueryResolver.ts"],"sourcesContent":["import { Config, QueryResolvers } from '../../schema'\nimport { PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { ConfigurationManager } from '../../model/service/ConfigurationManager'\n\nexport class ConfigurationQueryResolver implements Pick<QueryResolvers, 'configuration'> {\n\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configuration(parent: unknown, args: unknown, context: TenantResolverContext): Promise<Config> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIG_VIEW,\n\t\t\tmessage: 'You are not allowed to view configuration',\n\t\t})\n\n\t\treturn await this.configurationManager.fetchConfiguration(context.db)\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAKO,MAAM,2BAA4E;AAAA,EAExF,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,cAAc,QAAiB,MAAe,SAAiD;AACpG,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,KAAK,qBAAqB,mBAAmB,QAAQ,EAAE;AAAA,EAAA;AAEtE;"}
@@ -1 +1 @@
1
- {"version":3,"file":"IDPQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/IDPQueryResolver.ts"],"sourcesContent":["import { IdentityProvider, QueryResolvers } from '../../schema'\nimport { PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { IDPManager } from '../../model/service/idp/IDPManager'\n\nexport class IDPQueryResolver implements QueryResolvers {\n\n\tconstructor(\n\t\tprivate readonly idpManager: IDPManager,\n\t) {\n\t}\n\n\tasync identityProviders(parent: unknown, args: unknown, context: TenantResolverContext): Promise<IdentityProvider[]> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_LIST,\n\t\t\tmessage: 'You are not allowed to list IDP',\n\t\t})\n\n\t\treturn await this.idpManager.listIDP(context.db)\n\t}\n}\n"],"names":["PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;;AAKO,MAAM,iBAA2C;AAAA,EAEvD,YACkB,YAChB;AADgB,SAAA,aAAA;AAAA,EAElB;AAAA,EAEA,MAAM,kBAAkB,QAAiB,MAAe,SAA6D;AACpH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,KAAK,WAAW,QAAQ,QAAQ,EAAE;AAAA,EAChD;AACD;;"}
1
+ {"version":3,"file":"IDPQueryResolver.cjs","sources":["../../../../../../packages/engine-tenant-api/src/resolvers/query/IDPQueryResolver.ts"],"sourcesContent":["import { IdentityProvider, QueryResolvers } from '../../schema'\nimport { PermissionActions } from '../../model'\nimport { TenantResolverContext } from '../TenantResolverContext'\nimport { IDPManager } from '../../model/service/idp/IDPManager'\n\nexport class IDPQueryResolver implements QueryResolvers {\n\n\tconstructor(\n\t\tprivate readonly idpManager: IDPManager,\n\t) {\n\t}\n\n\tasync identityProviders(parent: unknown, args: unknown, context: TenantResolverContext): Promise<IdentityProvider[]> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_LIST,\n\t\t\tmessage: 'You are not allowed to list IDP',\n\t\t})\n\n\t\treturn await this.idpManager.listIDP(context.db)\n\t}\n}\n"],"names":["PermissionActions"],"mappings":";;;;;;;;;;;;;;;;;;;;AAKO,MAAM,iBAA2C;AAAA,EAEvD,YACkB,YAChB;AADgB,SAAA,aAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,kBAAkB,QAAiB,MAAe,SAA6D;AACpH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,WAAO,MAAM,KAAK,WAAW,QAAQ,QAAQ,EAAE;AAAA,EAAA;AAEjD;;"}