@contember/engine-tenant-api 2.1.0-alpha.8 → 2.1.0-beta.1

package/dist/development/src/model/utils/password.cjs

@@ -1,12 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const MIN_PASSWORD_LENGTH = 6;
-const getPasswordWeaknessMessage = (password) => {
-  if (password.length < MIN_PASSWORD_LENGTH) {
-    return `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`;
-  }
-  return null;
-};
-exports.MIN_PASSWORD_LENGTH = MIN_PASSWORD_LENGTH;
-exports.getPasswordWeaknessMessage = getPasswordWeaknessMessage;
-//# sourceMappingURL=password.cjs.map

package/dist/development/src/model/utils/password.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/password.ts"],"sourcesContent":["export const MIN_PASSWORD_LENGTH = 6\nexport const isWeakPassword = (password: string) => password.length < MIN_PASSWORD_LENGTH\nexport const getPasswordWeaknessMessage = (password: string): null | string => {\n\tif (password.length < MIN_PASSWORD_LENGTH) {\n\t\treturn `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`\n\t}\n\treturn null\n}\n"],"names":[],"mappings":";;AAAO,MAAM,sBAAsB;AAEtB,MAAA,6BAA6B,CAAC,aAAoC;AAC1E,MAAA,SAAS,SAAS,qBAAqB;AAC1C,WAAO,2CAA2C,mBAAmB;AAAA,EAAA;AAE/D,SAAA;AACR;;;"}

package/dist/development/src/model/utils/password.js

@@ -1,12 +0,0 @@
-const MIN_PASSWORD_LENGTH = 6;
-const getPasswordWeaknessMessage = (password) => {
-  if (password.length < MIN_PASSWORD_LENGTH) {
-    return `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`;
-  }
-  return null;
-};
-export {
-  MIN_PASSWORD_LENGTH,
-  getPasswordWeaknessMessage
-};
-//# sourceMappingURL=password.js.map

package/dist/development/src/model/utils/password.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/password.ts"],"sourcesContent":["export const MIN_PASSWORD_LENGTH = 6\nexport const isWeakPassword = (password: string) => password.length < MIN_PASSWORD_LENGTH\nexport const getPasswordWeaknessMessage = (password: string): null | string => {\n\tif (password.length < MIN_PASSWORD_LENGTH) {\n\t\treturn `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`\n\t}\n\treturn null\n}\n"],"names":[],"mappings":"AAAO,MAAM,sBAAsB;AAEtB,MAAA,6BAA6B,CAAC,aAAoC;AAC1E,MAAA,SAAS,SAAS,qBAAqB;AAC1C,WAAO,2CAA2C,mBAAmB;AAAA,EAAA;AAE/D,SAAA;AACR;"}

package/dist/development/src/model/utils/tokenUtils.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokenUtils.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/tokenUtils.ts"],"sourcesContent":["import crypto from 'node:crypto'\nimport { FixedLengthHexString, isFixedLengthHexString } from './typeUtils'\nimport { PersonToken } from '../type'\nimport { ImplementationException } from '../../exceptions'\nimport { Response, ResponseError, ResponseOk } from './Response'\n\nexport const generateToken = async (generator: {\n\trandomBytes: (bytes: number) => Promise<Buffer>\n}): Promise<string> => {\n\treturn (await generator.randomBytes(20)).toString('hex')\n}\n\nexport type TokenHash = FixedLengthHexString<64>\n\nexport const computeTokenHash = (token: string): TokenHash => {\n\treturn crypto //\n\t\t.createHash('sha256')\n\t\t.update(token, 'ascii')\n\t\t.digest('hex') as TokenHash\n}\n\nexport const isTokenHash = (token: string): token is TokenHash => isFixedLengthHexString(token, 64)\n\n\nconst MAX_OTP_ATTEMPTS = 3\n\nexport const validateToken = ({ entry, validationType, token, now }: {\n\tentry: PersonToken.Row | null\n\tvalidationType: PersonToken.ValidationType\n\ttoken: string\n\tnow: Date\n}): Response<PersonToken.Row, PersonToken.TokenValidationError> => {\n\tif (!entry) {\n\t\treturn new ResponseError('TOKEN_NOT_FOUND', 'Token not found')\n\t}\n\tif (validationType === 'otp' && entry.otp_attempts >= MAX_OTP_ATTEMPTS) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'OTP attempts exceeded')\n\t}\n\tswitch (validationType) {\n\t\tcase 'token':\n\t\t\tif (entry.otp_hash !== null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'The token was exchanged for OTP')\n\t\t\t}\n\t\t\tif (entry.token_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'Token invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tcase 'otp':\n\t\t\tif (entry.otp_hash === null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP not set')\n\t\t\t}\n\t\t\tif (entry.otp_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tdefault:\n\t\t\tthrow new ImplementationException()\n\t}\n\tif (entry.used_at) {\n\t\treturn new ResponseError('TOKEN_USED', 'Token used at ' + entry.used_at.toISOString())\n\t}\n\tif (entry.expires_at < now) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'Token expired at ' + entry.expires_at.toISOString())\n\t}\n\treturn new ResponseOk(entry)\n}\n"],"names":["isFixedLengthHexString","ResponseError","ImplementationException","ResponseOk"],"mappings":";;;;;;AAMa,MAAA,gBAAgB,OAAO,cAEb;AACtB,UAAQ,MAAM,UAAU,YAAY,EAAE,GAAG,SAAS,KAAK;AACxD;AAIa,MAAA,mBAAmB,CAAC,UAA6B;AACtD,SAAA,OACL,WAAW,QAAQ,EACnB,OAAO,OAAO,OAAO,EACrB,OAAO,KAAK;AACf;AAEO,MAAM,cAAc,CAAC,UAAsCA,UAAA,uBAAuB,OAAO,EAAE;AAGlG,MAAM,mBAAmB;AAElB,MAAM,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,OAAO,UAKK;AAClE,MAAI,CAAC,OAAO;AACJ,WAAA,IAAIC,SAAAA,cAAc,mBAAmB,iBAAiB;AAAA,EAAA;AAE9D,MAAI,mBAAmB,SAAS,MAAM,gBAAgB,kBAAkB;AAChE,WAAA,IAAIA,SAAAA,cAAc,iBAAiB,uBAAuB;AAAA,EAAA;AAElE,UAAQ,gBAAgB;AAAA,IACvB,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,iCAAiC;AAAA,MAAA;AAE5E,UAAI,MAAM,eAAe,iBAAiB,KAAK,GAAG;AAC1C,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,eAAe;AAAA,MAAA;AAE1D;AAAA,IACD,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD,UAAI,MAAM,aAAa,iBAAiB,KAAK,GAAG;AACxC,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD;AAAA,IACD;AACC,YAAM,IAAIC,WAAAA,wBAAwB;AAAA,EAAA;AAEpC,MAAI,MAAM,SAAS;AAClB,WAAO,IAAID,SAAc,cAAA,cAAc,mBAAmB,MAAM,QAAQ,aAAa;AAAA,EAAA;AAElF,MAAA,MAAM,aAAa,KAAK;AAC3B,WAAO,IAAIA,SAAc,cAAA,iBAAiB,sBAAsB,MAAM,WAAW,aAAa;AAAA,EAAA;AAExF,SAAA,IAAIE,oBAAW,KAAK;AAC5B;;;;;"}

package/dist/development/src/model/utils/tokenUtils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokenUtils.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/tokenUtils.ts"],"sourcesContent":["import crypto from 'node:crypto'\nimport { FixedLengthHexString, isFixedLengthHexString } from './typeUtils'\nimport { PersonToken } from '../type'\nimport { ImplementationException } from '../../exceptions'\nimport { Response, ResponseError, ResponseOk } from './Response'\n\nexport const generateToken = async (generator: {\n\trandomBytes: (bytes: number) => Promise<Buffer>\n}): Promise<string> => {\n\treturn (await generator.randomBytes(20)).toString('hex')\n}\n\nexport type TokenHash = FixedLengthHexString<64>\n\nexport const computeTokenHash = (token: string): TokenHash => {\n\treturn crypto //\n\t\t.createHash('sha256')\n\t\t.update(token, 'ascii')\n\t\t.digest('hex') as TokenHash\n}\n\nexport const isTokenHash = (token: string): token is TokenHash => isFixedLengthHexString(token, 64)\n\n\nconst MAX_OTP_ATTEMPTS = 3\n\nexport const validateToken = ({ entry, validationType, token, now }: {\n\tentry: PersonToken.Row | null\n\tvalidationType: PersonToken.ValidationType\n\ttoken: string\n\tnow: Date\n}): Response<PersonToken.Row, PersonToken.TokenValidationError> => {\n\tif (!entry) {\n\t\treturn new ResponseError('TOKEN_NOT_FOUND', 'Token not found')\n\t}\n\tif (validationType === 'otp' && entry.otp_attempts >= MAX_OTP_ATTEMPTS) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'OTP attempts exceeded')\n\t}\n\tswitch (validationType) {\n\t\tcase 'token':\n\t\t\tif (entry.otp_hash !== null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'The token was exchanged for OTP')\n\t\t\t}\n\t\t\tif (entry.token_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'Token invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tcase 'otp':\n\t\t\tif (entry.otp_hash === null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP not set')\n\t\t\t}\n\t\t\tif (entry.otp_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tdefault:\n\t\t\tthrow new ImplementationException()\n\t}\n\tif (entry.used_at) {\n\t\treturn new ResponseError('TOKEN_USED', 'Token used at ' + entry.used_at.toISOString())\n\t}\n\tif (entry.expires_at < now) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'Token expired at ' + entry.expires_at.toISOString())\n\t}\n\treturn new ResponseOk(entry)\n}\n"],"names":["crypto"],"mappings":";;;;AAMa,MAAA,gBAAgB,OAAO,cAEb;AACtB,UAAQ,MAAM,UAAU,YAAY,EAAE,GAAG,SAAS,KAAK;AACxD;AAIa,MAAA,mBAAmB,CAAC,UAA6B;AACtD,SAAAA,gBACL,WAAW,QAAQ,EACnB,OAAO,OAAO,OAAO,EACrB,OAAO,KAAK;AACf;AAEO,MAAM,cAAc,CAAC,UAAsC,uBAAuB,OAAO,EAAE;AAGlG,MAAM,mBAAmB;AAElB,MAAM,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,OAAO,UAKK;AAClE,MAAI,CAAC,OAAO;AACJ,WAAA,IAAI,cAAc,mBAAmB,iBAAiB;AAAA,EAAA;AAE9D,MAAI,mBAAmB,SAAS,MAAM,gBAAgB,kBAAkB;AAChE,WAAA,IAAI,cAAc,iBAAiB,uBAAuB;AAAA,EAAA;AAElE,UAAQ,gBAAgB;AAAA,IACvB,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAI,cAAc,iBAAiB,iCAAiC;AAAA,MAAA;AAE5E,UAAI,MAAM,eAAe,iBAAiB,KAAK,GAAG;AAC1C,eAAA,IAAI,cAAc,iBAAiB,eAAe;AAAA,MAAA;AAE1D;AAAA,IACD,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAI,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD,UAAI,MAAM,aAAa,iBAAiB,KAAK,GAAG;AACxC,eAAA,IAAI,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD;AAAA,IACD;AACC,YAAM,IAAI,wBAAwB;AAAA,EAAA;AAEpC,MAAI,MAAM,SAAS;AAClB,WAAO,IAAI,cAAc,cAAc,mBAAmB,MAAM,QAAQ,aAAa;AAAA,EAAA;AAElF,MAAA,MAAM,aAAa,KAAK;AAC3B,WAAO,IAAI,cAAc,iBAAiB,sBAAsB,MAAM,WAAW,aAAa;AAAA,EAAA;AAExF,SAAA,IAAI,WAAW,KAAK;AAC5B;"}

package/dist/development/src/model/utils/typeUtils.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"typeUtils.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/typeUtils.ts"],"sourcesContent":["export type FixedLengthHexString<Length extends number> = string & { __brand: `hexstring_${Length}` }\n\nconst isHex = /^[a-f0-9]+$/\n\nexport const isFixedLengthHexString = <Length extends number>(input: string, length: Length): input is FixedLengthHexString<Length> => (\n\tinput.length === length && input.match(isHex) !== null\n)\n"],"names":[],"mappings":";;AAEA,MAAM,QAAQ;AAED,MAAA,yBAAyB,CAAwB,OAAe,WAC5E,MAAM,WAAW,UAAU,MAAM,MAAM,KAAK,MAAM;;"}

package/dist/development/src/model/utils/typeUtils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"typeUtils.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/typeUtils.ts"],"sourcesContent":["export type FixedLengthHexString<Length extends number> = string & { __brand: `hexstring_${Length}` }\n\nconst isHex = /^[a-f0-9]+$/\n\nexport const isFixedLengthHexString = <Length extends number>(input: string, length: Length): input is FixedLengthHexString<Length> => (\n\tinput.length === length && input.match(isHex) !== null\n)\n"],"names":[],"mappings":"AAEA,MAAM,QAAQ;AAED,MAAA,yBAAyB,CAAwB,OAAe,WAC5E,MAAM,WAAW,UAAU,MAAM,MAAM,KAAK,MAAM;"}

package/dist/production/src/model/utils/password.cjs

@@ -1,12 +0,0 @@
-"use strict";
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const MIN_PASSWORD_LENGTH = 6;
-const getPasswordWeaknessMessage = (password) => {
-  if (password.length < MIN_PASSWORD_LENGTH) {
-    return `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`;
-  }
-  return null;
-};
-exports.MIN_PASSWORD_LENGTH = MIN_PASSWORD_LENGTH;
-exports.getPasswordWeaknessMessage = getPasswordWeaknessMessage;
-//# sourceMappingURL=password.cjs.map

package/dist/production/src/model/utils/password.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/password.ts"],"sourcesContent":["export const MIN_PASSWORD_LENGTH = 6\nexport const isWeakPassword = (password: string) => password.length < MIN_PASSWORD_LENGTH\nexport const getPasswordWeaknessMessage = (password: string): null | string => {\n\tif (password.length < MIN_PASSWORD_LENGTH) {\n\t\treturn `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`\n\t}\n\treturn null\n}\n"],"names":[],"mappings":";;AAAO,MAAM,sBAAsB;AAEtB,MAAA,6BAA6B,CAAC,aAAoC;AAC1E,MAAA,SAAS,SAAS,qBAAqB;AAC1C,WAAO,2CAA2C,mBAAmB;AAAA,EAAA;AAE/D,SAAA;AACR;;;"}

package/dist/production/src/model/utils/password.js

@@ -1,12 +0,0 @@
-const MIN_PASSWORD_LENGTH = 6;
-const getPasswordWeaknessMessage = (password) => {
-  if (password.length < MIN_PASSWORD_LENGTH) {
-    return `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`;
-  }
-  return null;
-};
-export {
-  MIN_PASSWORD_LENGTH,
-  getPasswordWeaknessMessage
-};
-//# sourceMappingURL=password.js.map

package/dist/production/src/model/utils/password.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/password.ts"],"sourcesContent":["export const MIN_PASSWORD_LENGTH = 6\nexport const isWeakPassword = (password: string) => password.length < MIN_PASSWORD_LENGTH\nexport const getPasswordWeaknessMessage = (password: string): null | string => {\n\tif (password.length < MIN_PASSWORD_LENGTH) {\n\t\treturn `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`\n\t}\n\treturn null\n}\n"],"names":[],"mappings":"AAAO,MAAM,sBAAsB;AAEtB,MAAA,6BAA6B,CAAC,aAAoC;AAC1E,MAAA,SAAS,SAAS,qBAAqB;AAC1C,WAAO,2CAA2C,mBAAmB;AAAA,EAAA;AAE/D,SAAA;AACR;"}

package/dist/production/src/model/utils/tokenUtils.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokenUtils.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/tokenUtils.ts"],"sourcesContent":["import crypto from 'node:crypto'\nimport { FixedLengthHexString, isFixedLengthHexString } from './typeUtils'\nimport { PersonToken } from '../type'\nimport { ImplementationException } from '../../exceptions'\nimport { Response, ResponseError, ResponseOk } from './Response'\n\nexport const generateToken = async (generator: {\n\trandomBytes: (bytes: number) => Promise<Buffer>\n}): Promise<string> => {\n\treturn (await generator.randomBytes(20)).toString('hex')\n}\n\nexport type TokenHash = FixedLengthHexString<64>\n\nexport const computeTokenHash = (token: string): TokenHash => {\n\treturn crypto //\n\t\t.createHash('sha256')\n\t\t.update(token, 'ascii')\n\t\t.digest('hex') as TokenHash\n}\n\nexport const isTokenHash = (token: string): token is TokenHash => isFixedLengthHexString(token, 64)\n\n\nconst MAX_OTP_ATTEMPTS = 3\n\nexport const validateToken = ({ entry, validationType, token, now }: {\n\tentry: PersonToken.Row | null\n\tvalidationType: PersonToken.ValidationType\n\ttoken: string\n\tnow: Date\n}): Response<PersonToken.Row, PersonToken.TokenValidationError> => {\n\tif (!entry) {\n\t\treturn new ResponseError('TOKEN_NOT_FOUND', 'Token not found')\n\t}\n\tif (validationType === 'otp' && entry.otp_attempts >= MAX_OTP_ATTEMPTS) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'OTP attempts exceeded')\n\t}\n\tswitch (validationType) {\n\t\tcase 'token':\n\t\t\tif (entry.otp_hash !== null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'The token was exchanged for OTP')\n\t\t\t}\n\t\t\tif (entry.token_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'Token invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tcase 'otp':\n\t\t\tif (entry.otp_hash === null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP not set')\n\t\t\t}\n\t\t\tif (entry.otp_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tdefault:\n\t\t\tthrow new ImplementationException()\n\t}\n\tif (entry.used_at) {\n\t\treturn new ResponseError('TOKEN_USED', 'Token used at ' + entry.used_at.toISOString())\n\t}\n\tif (entry.expires_at < now) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'Token expired at ' + entry.expires_at.toISOString())\n\t}\n\treturn new ResponseOk(entry)\n}\n"],"names":["isFixedLengthHexString","ResponseError","ImplementationException","ResponseOk"],"mappings":";;;;;;AAMa,MAAA,gBAAgB,OAAO,cAEb;AACtB,UAAQ,MAAM,UAAU,YAAY,EAAE,GAAG,SAAS,KAAK;AACxD;AAIa,MAAA,mBAAmB,CAAC,UAA6B;AACtD,SAAA,OACL,WAAW,QAAQ,EACnB,OAAO,OAAO,OAAO,EACrB,OAAO,KAAK;AACf;AAEO,MAAM,cAAc,CAAC,UAAsCA,UAAA,uBAAuB,OAAO,EAAE;AAGlG,MAAM,mBAAmB;AAElB,MAAM,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,OAAO,UAKK;AAClE,MAAI,CAAC,OAAO;AACJ,WAAA,IAAIC,SAAAA,cAAc,mBAAmB,iBAAiB;AAAA,EAAA;AAE9D,MAAI,mBAAmB,SAAS,MAAM,gBAAgB,kBAAkB;AAChE,WAAA,IAAIA,SAAAA,cAAc,iBAAiB,uBAAuB;AAAA,EAAA;AAElE,UAAQ,gBAAgB;AAAA,IACvB,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,iCAAiC;AAAA,MAAA;AAE5E,UAAI,MAAM,eAAe,iBAAiB,KAAK,GAAG;AAC1C,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,eAAe;AAAA,MAAA;AAE1D;AAAA,IACD,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD,UAAI,MAAM,aAAa,iBAAiB,KAAK,GAAG;AACxC,eAAA,IAAIA,SAAAA,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD;AAAA,IACD;AACC,YAAM,IAAIC,WAAAA,wBAAwB;AAAA,EAAA;AAEpC,MAAI,MAAM,SAAS;AAClB,WAAO,IAAID,SAAc,cAAA,cAAc,mBAAmB,MAAM,QAAQ,aAAa;AAAA,EAAA;AAElF,MAAA,MAAM,aAAa,KAAK;AAC3B,WAAO,IAAIA,SAAc,cAAA,iBAAiB,sBAAsB,MAAM,WAAW,aAAa;AAAA,EAAA;AAExF,SAAA,IAAIE,oBAAW,KAAK;AAC5B;;;;;"}

package/dist/production/src/model/utils/tokenUtils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokenUtils.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/tokenUtils.ts"],"sourcesContent":["import crypto from 'node:crypto'\nimport { FixedLengthHexString, isFixedLengthHexString } from './typeUtils'\nimport { PersonToken } from '../type'\nimport { ImplementationException } from '../../exceptions'\nimport { Response, ResponseError, ResponseOk } from './Response'\n\nexport const generateToken = async (generator: {\n\trandomBytes: (bytes: number) => Promise<Buffer>\n}): Promise<string> => {\n\treturn (await generator.randomBytes(20)).toString('hex')\n}\n\nexport type TokenHash = FixedLengthHexString<64>\n\nexport const computeTokenHash = (token: string): TokenHash => {\n\treturn crypto //\n\t\t.createHash('sha256')\n\t\t.update(token, 'ascii')\n\t\t.digest('hex') as TokenHash\n}\n\nexport const isTokenHash = (token: string): token is TokenHash => isFixedLengthHexString(token, 64)\n\n\nconst MAX_OTP_ATTEMPTS = 3\n\nexport const validateToken = ({ entry, validationType, token, now }: {\n\tentry: PersonToken.Row | null\n\tvalidationType: PersonToken.ValidationType\n\ttoken: string\n\tnow: Date\n}): Response<PersonToken.Row, PersonToken.TokenValidationError> => {\n\tif (!entry) {\n\t\treturn new ResponseError('TOKEN_NOT_FOUND', 'Token not found')\n\t}\n\tif (validationType === 'otp' && entry.otp_attempts >= MAX_OTP_ATTEMPTS) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'OTP attempts exceeded')\n\t}\n\tswitch (validationType) {\n\t\tcase 'token':\n\t\t\tif (entry.otp_hash !== null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'The token was exchanged for OTP')\n\t\t\t}\n\t\t\tif (entry.token_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'Token invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tcase 'otp':\n\t\t\tif (entry.otp_hash === null) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP not set')\n\t\t\t}\n\t\t\tif (entry.otp_hash !== computeTokenHash(token)) {\n\t\t\t\treturn new ResponseError('TOKEN_INVALID', 'OTP invalid')\n\t\t\t}\n\t\t\tbreak\n\t\tdefault:\n\t\t\tthrow new ImplementationException()\n\t}\n\tif (entry.used_at) {\n\t\treturn new ResponseError('TOKEN_USED', 'Token used at ' + entry.used_at.toISOString())\n\t}\n\tif (entry.expires_at < now) {\n\t\treturn new ResponseError('TOKEN_EXPIRED', 'Token expired at ' + entry.expires_at.toISOString())\n\t}\n\treturn new ResponseOk(entry)\n}\n"],"names":["crypto"],"mappings":";;;;AAMa,MAAA,gBAAgB,OAAO,cAEb;AACtB,UAAQ,MAAM,UAAU,YAAY,EAAE,GAAG,SAAS,KAAK;AACxD;AAIa,MAAA,mBAAmB,CAAC,UAA6B;AACtD,SAAAA,gBACL,WAAW,QAAQ,EACnB,OAAO,OAAO,OAAO,EACrB,OAAO,KAAK;AACf;AAEO,MAAM,cAAc,CAAC,UAAsC,uBAAuB,OAAO,EAAE;AAGlG,MAAM,mBAAmB;AAElB,MAAM,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,OAAO,UAKK;AAClE,MAAI,CAAC,OAAO;AACJ,WAAA,IAAI,cAAc,mBAAmB,iBAAiB;AAAA,EAAA;AAE9D,MAAI,mBAAmB,SAAS,MAAM,gBAAgB,kBAAkB;AAChE,WAAA,IAAI,cAAc,iBAAiB,uBAAuB;AAAA,EAAA;AAElE,UAAQ,gBAAgB;AAAA,IACvB,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAI,cAAc,iBAAiB,iCAAiC;AAAA,MAAA;AAE5E,UAAI,MAAM,eAAe,iBAAiB,KAAK,GAAG;AAC1C,eAAA,IAAI,cAAc,iBAAiB,eAAe;AAAA,MAAA;AAE1D;AAAA,IACD,KAAK;AACA,UAAA,MAAM,aAAa,MAAM;AACrB,eAAA,IAAI,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD,UAAI,MAAM,aAAa,iBAAiB,KAAK,GAAG;AACxC,eAAA,IAAI,cAAc,iBAAiB,aAAa;AAAA,MAAA;AAExD;AAAA,IACD;AACC,YAAM,IAAI,wBAAwB;AAAA,EAAA;AAEpC,MAAI,MAAM,SAAS;AAClB,WAAO,IAAI,cAAc,cAAc,mBAAmB,MAAM,QAAQ,aAAa;AAAA,EAAA;AAElF,MAAA,MAAM,aAAa,KAAK;AAC3B,WAAO,IAAI,cAAc,iBAAiB,sBAAsB,MAAM,WAAW,aAAa;AAAA,EAAA;AAExF,SAAA,IAAI,WAAW,KAAK;AAC5B;"}

package/dist/production/src/model/utils/typeUtils.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"typeUtils.cjs","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/typeUtils.ts"],"sourcesContent":["export type FixedLengthHexString<Length extends number> = string & { __brand: `hexstring_${Length}` }\n\nconst isHex = /^[a-f0-9]+$/\n\nexport const isFixedLengthHexString = <Length extends number>(input: string, length: Length): input is FixedLengthHexString<Length> => (\n\tinput.length === length && input.match(isHex) !== null\n)\n"],"names":[],"mappings":";;AAEA,MAAM,QAAQ;AAED,MAAA,yBAAyB,CAAwB,OAAe,WAC5E,MAAM,WAAW,UAAU,MAAM,MAAM,KAAK,MAAM;;"}

package/dist/production/src/model/utils/typeUtils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"typeUtils.js","sources":["../../../../../../packages/engine-tenant-api/src/model/utils/typeUtils.ts"],"sourcesContent":["export type FixedLengthHexString<Length extends number> = string & { __brand: `hexstring_${Length}` }\n\nconst isHex = /^[a-f0-9]+$/\n\nexport const isFixedLengthHexString = <Length extends number>(input: string, length: Length): input is FixedLengthHexString<Length> => (\n\tinput.length === length && input.match(isHex) !== null\n)\n"],"names":[],"mappings":"AAEA,MAAM,QAAQ;AAED,MAAA,yBAAyB,CAAwB,OAAe,WAC5E,MAAM,WAAW,UAAU,MAAM,MAAM,KAAK,MAAM;"}

package/dist/types/model/utils/password.d.ts

@@ -1,4 +0,0 @@
-export declare const MIN_PASSWORD_LENGTH = 6;
-export declare const isWeakPassword: (password: string) => boolean;
-export declare const getPasswordWeaknessMessage: (password: string) => null | string;
-//# sourceMappingURL=password.d.ts.map

package/dist/types/model/utils/password.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../src/model/utils/password.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,IAAI,CAAA;AACpC,eAAO,MAAM,cAAc,GAAI,UAAU,MAAM,YAA0C,CAAA;AACzF,eAAO,MAAM,0BAA0B,GAAI,UAAU,MAAM,KAAG,IAAI,GAAG,MAKpE,CAAA"}

package/dist/types/model/utils/tokenUtils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokenUtils.d.ts","sourceRoot":"","sources":["../../../../src/model/utils/tokenUtils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAA0B,MAAM,aAAa,CAAA;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAErC,OAAO,EAAE,QAAQ,EAA6B,MAAM,YAAY,CAAA;AAEhE,eAAO,MAAM,aAAa,GAAU,WAAW;IAC9C,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAC/C,KAAG,OAAO,CAAC,MAAM,CAEjB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAA;AAEhD,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,SAKhD,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,OAAO,MAAM,KAAG,KAAK,IAAI,SAA8C,CAAA;AAKnG,eAAO,MAAM,aAAa,GAAI,uCAAuC;IACpE,KAAK,EAAE,WAAW,CAAC,GAAG,GAAG,IAAI,CAAA;IAC7B,cAAc,EAAE,WAAW,CAAC,cAAc,CAAA;IAC1C,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,IAAI,CAAA;CACT,KAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,oBAAoB,CAkC7D,CAAA"}

package/dist/types/model/utils/typeUtils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"typeUtils.d.ts","sourceRoot":"","sources":["../../../../src/model/utils/typeUtils.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,CAAC,MAAM,SAAS,MAAM,IAAI,MAAM,GAAG;IAAE,OAAO,EAAE,aAAa,MAAM,EAAE,CAAA;CAAE,CAAA;AAIrG,eAAO,MAAM,sBAAsB,GAAI,MAAM,SAAS,MAAM,EAAE,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAG,KAAK,IAAI,oBAAoB,CAAC,MAAM,CAEjI,CAAA"}

package/src/model/utils/password.ts

@@ -1,8 +0,0 @@
-export const MIN_PASSWORD_LENGTH = 6
-export const isWeakPassword = (password: string) => password.length < MIN_PASSWORD_LENGTH
-export const getPasswordWeaknessMessage = (password: string): null | string => {
-	if (password.length < MIN_PASSWORD_LENGTH) {
-		return `Password is too weak. Minimum length is ${MIN_PASSWORD_LENGTH}`
-	}
-	return null
-}

package/tests/.eslintrc.cjs

@@ -1,5 +0,0 @@
-module.exports =  {
-	rules: {
-		"no-console": "off",
-	},
-};