@contember/engine-tenant-api 2.1.0-alpha.3 → 2.1.0-alpha.35

package/src/model/service/idp/IDPManager.ts

@@ -55,7 +55,6 @@ export class IDPManager {
 		})
 	}
 
-
 	public async enableIDP(db: DatabaseContext, slug: string): Promise<EnableIDPResponse> {
 		return await db.transaction(async db => {
 			const existing = await db.queryHandler.fetch(new IdentityProviderBySlugQuery(slug))
@@ -109,10 +108,12 @@ export class IDPManager {
 				throw e
 			}
 
-			await db.commandBus.execute(new UpdateIdpCommand(existing.id, {
-				...data,
-				configuration: data.configuration ? newConfiguration : undefined,
-			}))
+			await db.commandBus.execute(
+				new UpdateIdpCommand(existing.id, {
+					...data,
+					configuration: data.configuration ? newConfiguration : undefined,
+				}),
+			)
 
 			return new ResponseOk(null)
 		})

package/src/model/service/idp/IDPResponseError.ts

@@ -1,5 +1,2 @@
 export class IDPResponseError extends Error {
-	constructor(message: string) {
-		super(message)
-	}
 }

package/src/model/service/idp/IDPValidationError.ts

@@ -1,5 +1,2 @@
 export class IDPValidationError extends Error {
-	constructor(message: string) {
-		super(message)
-	}
 }

package/src/model/service/idp/IdentityProviderHandler.ts

@@ -10,10 +10,9 @@ export type IDPResponse = {
 } & Record<string, unknown>
 
 export interface IdentityProviderHandler<Configuration extends {}> {
-
 	initAuth: (configuration: Configuration, data: unknown) => Promise<InitIDPAuthResult>
 
-	processResponse: (configuration: Configuration, responseData: unknown) =>  Promise<IDPResponse>
+	processResponse: (configuration: Configuration, responseData: unknown) => Promise<IDPResponse>
 
 	validateConfiguration: (config: unknown) => Configuration
 

package/src/model/service/idp/IdentityProviderNotFoundError.ts

@@ -1,5 +1,2 @@
 export class IdentityProviderNotFoundError extends Error {
-	constructor(message: string) {
-		super(message)
-	}
 }

package/src/model/service/idp/InvalidIDPConfigurationError.ts

@@ -1,5 +1,2 @@
 export class InvalidIDPConfigurationError extends Error {
-	constructor(message: string) {
-		super(message)
-	}
 }

package/src/model/service/idp/providers/FacebookProvider.ts

@@ -9,8 +9,6 @@ import { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'
 import { createHmac } from 'node:crypto'
 import { IDPResponseError } from '../IDPResponseError'
 
-
-
 const FacebookConfiguration = BaseOIDCConfiguration
 type FacebookConfiguration = ReturnType<typeof FacebookConfiguration>
 
@@ -30,7 +28,6 @@ const FacebookResponsePayload = Typesafe.object({
 
 type FacebookResponseData = ReturnType<typeof FacebookResponseData>
 
-
 export class FacebookProvider implements IdentityProviderHandler<FacebookConfiguration> {
 	// based on https://www.facebook.com/.well-known/openid-configuration/
 	// facebook .well-known endpoint does have "token_endpoint" field

package/src/model/service/idp/providers/OIDCHelpers.ts

@@ -4,7 +4,10 @@ import { IDPValidationError } from '../IDPValidationError'
 import { IDPResponseError } from '../IDPResponseError'
 import { IDPResponse, InitIDPAuthResult } from '../IdentityProviderHandler'
 
-export const initOIDCAuth = async (client: Client, { redirectUrl, scope, responseMode }: { redirectUrl: string; scope?: string; responseMode?: string }): Promise<InitIDPAuthResult> => {
+export const initOIDCAuth = async (
+	client: Client,
+	{ redirectUrl, scope, responseMode }: { redirectUrl: string; scope?: string; responseMode?: string },
+): Promise<InitIDPAuthResult> => {
 	const nonce = generators.nonce()
 	const state = generators.state()
 	const url = client.authorizationUrl({
@@ -21,7 +24,12 @@ export const initOIDCAuth = async (client: Client, { redirectUrl, scope, respons
 	}
 }
 
-export const handleOIDCResponse = async (client: Client, { sessionData, redirectUrl, ...otherData }: OIDCResponseData, fetchUserInfo?: boolean, returnOIDCResult?: boolean): Promise<IDPResponse> => {
+export const handleOIDCResponse = async (
+	client: Client,
+	{ sessionData, redirectUrl, ...otherData }: OIDCResponseData,
+	fetchUserInfo?: boolean,
+	returnOIDCResult?: boolean,
+): Promise<IDPResponse> => {
 	const params = 'parameters' in otherData ? otherData.parameters : client.callbackParams(otherData.url)
 	if (params.state && !sessionData?.state) {
 		throw new IDPValidationError(`state is present in parameters, but missing in session data`)

package/src/model/service/idp/providers/OIDCProvider.ts

@@ -33,7 +33,6 @@ export class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration>
 		)
 	}
 
-
 	getPublicConfiguration({ clientSecret, ...config }: OIDCConfiguration): Partial<OIDCConfiguration> {
 		return config
 	}

package/src/model/service/idp/providers/OIDCTypes.ts

@@ -49,7 +49,6 @@ export const OIDCResponseData = Typesafe.intersection(
 			nonce: Typesafe.string,
 			state: Typesafe.string,
 		}),
-
 	}),
 )
 

package/src/model/service/idp/providers/helpers.ts

@@ -1,12 +1,13 @@
 import * as Typesafe from '@contember/typesafe'
 
-export const catchTypesafe = <T extends Typesafe.Json>(type: Typesafe.Type<T>, errorConstructor: { new(message: string): Error }) => (value: unknown): T => {
-	try {
-		return type(value)
-	} catch (e) {
-		if (e instanceof Typesafe.ParseError) {
-			throw new errorConstructor(e.message)
+export const catchTypesafe =
+	<T extends Typesafe.Json>(type: Typesafe.Type<T>, errorConstructor: { new(message: string): Error }) => (value: unknown): T => {
+		try {
+			return type(value)
+		} catch (e) {
+			if (e instanceof Typesafe.ParseError) {
+				throw new errorConstructor(e.message)
+			}
+			throw e
 		}
-		throw e
 	}
-}

package/src/model/type/ApiKey.ts

@@ -1,5 +1,5 @@
 namespace ApiKey {
-	export const enum Type {
+	export enum Type {
 		SESSION = 'session',
 		PERMANENT = 'permanent',
 		ONE_OFF = 'one_off',

package/src/model/type/AuthLog.ts

@@ -0,0 +1,14 @@
+export type AuthActionType =
+	| 'login'
+	| 'create_session_token'
+	| 'idp_login'
+	| 'password_reset_init'
+	| 'password_reset'
+	| 'password_change'
+	| 'email_change'
+	| '2fa_disable'
+	| '2fa_enable'
+	| 'passwordless_login_init'
+	| 'passwordless_login_exchange'
+	| 'passwordless_login'
+	| 'person_disable'

package/src/model/type/Config.ts

@@ -0,0 +1,31 @@
+import { ConfigPolicy } from '../../schema'
+import { IPostgresInterval } from 'postgres-interval'
+import { type Config as ConfigSchema } from '../../schema'
+import { Interval } from '../../schema/types'
+export type ConfigRow = {
+	passwordless_enabled: ConfigPolicy
+	passwordless_url: string | null
+	passwordless_expiration: IPostgresInterval
+	password_min_length: number
+	password_require_uppercase: number
+	password_require_lowercase: number
+	password_require_digit: number
+	password_require_special: number
+	password_pattern: string | null
+	password_check_blacklist: boolean
+	login_base_backoff: IPostgresInterval
+	login_max_backoff: IPostgresInterval
+	login_attempt_window: IPostgresInterval
+	login_reveal_user_exits: boolean
+	login_default_token_expiration: IPostgresInterval
+	login_max_token_expiration: IPostgresInterval | null
+}
+
+export type Config = Omit<
+	{
+		[K in keyof ConfigSchema]: {
+			[K2 in keyof ConfigSchema[K]]: Exclude<ConfigSchema[K][K2], Interval>
+		}
+	},
+	'__typename'
+>

package/src/model/type/Project.ts

@@ -8,7 +8,6 @@ export interface Project {
 	readonly config: Record<string, unknown>
 }
 
-
 export interface ProjectWithSecrets extends Project {
 	readonly secrets: Record<string, string>
 	readonly updatedAt: Date

package/src/model/utils/DatabaseContext.ts

@@ -3,7 +3,6 @@ import { Providers } from '../providers'
 import { CommandBus } from '../commands'
 import { BatchLoaderArgs, initBatchLoader, ItemLoader } from '../../utils/batchQuery'
 
-
 export class DatabaseContext<Conn extends Connection.ConnectionLike = Connection.ConnectionLike> {
 	private loaders = new Map<BatchLoaderArgs<any, any, any>, ItemLoader<any, any>>()
 

package/src/model/utils/Response.ts

@@ -1,4 +1,6 @@
-export type Response<Result, Error> = ResponseOk<Result> | (Error extends never ? never : ResponseError<Error>)
+export type Response<Result, Error, ErrorMetadata extends {} | undefined = undefined> =
+	| ResponseOk<Result>
+	| (Error extends never ? never : ResponseError<Error, ErrorMetadata>)
 
 export class ResponseOk<Result> {
 	public readonly ok = true
@@ -6,8 +8,12 @@ export class ResponseOk<Result> {
 	constructor(public readonly result: Result) {}
 }
 
-export class ResponseError<const Error> {
+export class ResponseError<const Error, Metadata extends {} | undefined = undefined> {
 	public readonly ok = false
 
-	constructor(public readonly error: Error, public readonly errorMessage: string) {}
+	constructor(
+		public readonly error: Error,
+		public readonly errorMessage: string,
+		public readonly metadata?: Metadata,
+	) {}
 }