@contember/engine-tenant-api 2.1.0-alpha.9 → 2.1.0-beta.1

package/dist/development/src/resolvers/membershipUtils.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"membershipUtils.cjs","sources":["../../../../../packages/engine-tenant-api/src/resolvers/membershipUtils.ts"],"sourcesContent":["import { MembershipValidationError, MembershipValidationErrorType } from '../model/service/MembershipValidator'\nimport { MembershipValidationError as MembershipValidationErrorSchema, MembershipValidationErrorCode } from '../schema'\n\nexport type MembershipErrorCode =\n\t| 'INVALID_MEMBERSHIP'\n\t| 'ROLE_NOT_FOUND'\n\t| 'VARIABLE_EMPTY'\n\t| 'VARIABLE_NOT_FOUND'\n\n\nexport interface MembershipErrorVariable {\n\tcode: MembershipErrorCode\n\tmembershipValidation?: MembershipValidationErrorSchema[]\n\tendUserMessage?: string\n\tdeveloperMessage: string\n}\n\nexport const createMembershipValidationErrorResult = (\n\tresult: MembershipValidationError[],\n): MembershipErrorVariable[] => {\n\tconst formatDeveloperError = (it: MembershipValidationError) => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn `Role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is empty`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} contains invalid value`\n\t\t}\n\t}\n\n\tconst legacyErrors = result.map((it): MembershipErrorVariable | undefined => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Given role not found',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\tendUserMessage: 'Required variable is empty',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Provided variable does not exist',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t}\n\t}).filter((it): it is MembershipErrorVariable => it !== undefined)\n\n\treturn [\n\t\t{\n\t\t\tcode: 'INVALID_MEMBERSHIP',\n\t\t\tdeveloperMessage:\n\t\t\t\t'Provided membership is invalid: ' +\n\t\t\t\tresult.map(it => formatDeveloperError(it)).join('. ') +\n\t\t\t\t'. You can also check membershipValidation field for structured details.',\n\t\t\tmembershipValidation: result.map((it): MembershipValidationErrorSchema => {\n\t\t\t\tswitch (it.error) {\n\t\t\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_INVALID',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}),\n\t\t},\n\t\t...legacyErrors,\n\t]\n}\n"],"names":["MembershipValidationErrorType"],"mappings":";;;AAiBa,MAAA,wCAAwC,CACpD,WAC+B;AACzB,QAAA,uBAAuB,CAAC,OAAkC;AAC/D,YAAQ,GAAG,OAAO;AAAA,MACjB,KAAKA,YAA8B,8BAAA;AAC3B,eAAA,QAAQ,GAAG,IAAI;AAAA,MACvB,KAAKA,YAA8B,8BAAA;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAKA,YAA8B,8BAAA;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAKA,YAA8B,8BAAA;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,IAAA;AAAA,EAEpD;AAEA,QAAM,eAAe,OAAO,IAAI,CAAC,OAA4C;AAC5E,YAAQ,GAAG,OAAO;AAAA,MACjB,KAAKA,YAA8B,8BAAA;AAC3B,eAAA;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAC1C;AAAA,MACD,KAAKA,YAA8B,8BAAA;AAC3B,eAAA;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAC1C;AAAA,MACD,KAAKA,YAA8B,8BAAA;AAC3B,eAAA;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAC1C;AAAA,IAAA;AAAA,EAEF,CAAA,EAAE,OAAO,CAAC,OAAsC,OAAO,MAAS;AAE1D,SAAA;AAAA,IACN;AAAA,MACC,MAAM;AAAA,MACN,kBACC,qCACA,OAAO,IAAI,CAAA,OAAM,qBAAqB,EAAE,CAAC,EAAE,KAAK,IAAI,IACpD;AAAA,MACD,sBAAsB,OAAO,IAAI,CAAC,OAAwC;AACzE,gBAAQ,GAAG,OAAO;AAAA,UACjB,KAAKA,YAA8B,8BAAA;AAC3B,mBAAA;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,YACV;AAAA,UACD,KAAKA,YAA8B,8BAAA;AAC3B,mBAAA;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YACd;AAAA,UACD,KAAKA,YAA8B,8BAAA;AAC3B,mBAAA;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YACd;AAAA,UACD,KAAKA,YAA8B,8BAAA;AAC3B,mBAAA;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YACd;AAAA,QAAA;AAAA,MAEF,CAAA;AAAA,IACF;AAAA,IACA,GAAG;AAAA,EACJ;AACD;;"}
+{"version":3,"file":"membershipUtils.cjs","sources":["../../../../../packages/engine-tenant-api/src/resolvers/membershipUtils.ts"],"sourcesContent":["import { MembershipValidationError, MembershipValidationErrorType } from '../model/service/MembershipValidator'\nimport { MembershipValidationError as MembershipValidationErrorSchema, MembershipValidationErrorCode } from '../schema'\n\nexport type MembershipErrorCode =\n\t| 'INVALID_MEMBERSHIP'\n\t| 'ROLE_NOT_FOUND'\n\t| 'VARIABLE_EMPTY'\n\t| 'VARIABLE_NOT_FOUND'\n\nexport interface MembershipErrorVariable {\n\tcode: MembershipErrorCode\n\tmembershipValidation?: MembershipValidationErrorSchema[]\n\tendUserMessage?: string\n\tdeveloperMessage: string\n}\n\nexport const createMembershipValidationErrorResult = (\n\tresult: MembershipValidationError[],\n): MembershipErrorVariable[] => {\n\tconst formatDeveloperError = (it: MembershipValidationError) => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn `Role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is empty`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} contains invalid value`\n\t\t}\n\t}\n\n\tconst legacyErrors = result.map((it): MembershipErrorVariable | undefined => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Given role not found',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\tendUserMessage: 'Required variable is empty',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Provided variable does not exist',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t}\n\t}).filter((it): it is MembershipErrorVariable => it !== undefined)\n\n\treturn [\n\t\t{\n\t\t\tcode: 'INVALID_MEMBERSHIP',\n\t\t\tdeveloperMessage: 'Provided membership is invalid: '\n\t\t\t\t+ result.map(it => formatDeveloperError(it)).join('. ')\n\t\t\t\t+ '. You can also check membershipValidation field for structured details.',\n\t\t\tmembershipValidation: result.map((it): MembershipValidationErrorSchema => {\n\t\t\t\tswitch (it.error) {\n\t\t\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_INVALID',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}),\n\t\t},\n\t\t...legacyErrors,\n\t]\n}\n"],"names":["MembershipValidationErrorType"],"mappings":";;;AAgBO,MAAM,wCAAwC,CACpD,WAC+B;AAC/B,QAAM,uBAAuB,CAAC,OAAkC;AAC/D,YAAQ,GAAG,OAAA;AAAA,MACV,KAAKA,YAAAA,8BAA8B;AAClC,eAAO,QAAQ,GAAG,IAAI;AAAA,MACvB,KAAKA,YAAAA,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAKA,YAAAA,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAKA,YAAAA,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,IAAA;AAAA,EAEpD;AAEA,QAAM,eAAe,OAAO,IAAI,CAAC,OAA4C;AAC5E,YAAQ,GAAG,OAAA;AAAA,MACV,KAAKA,YAAAA,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,MAE3C,KAAKA,YAAAA,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,MAE3C,KAAKA,YAAAA,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,IAC1C;AAAA,EAEH,CAAC,EAAE,OAAO,CAAC,OAAsC,OAAO,MAAS;AAEjE,SAAO;AAAA,IACN;AAAA,MACC,MAAM;AAAA,MACN,kBAAkB,qCACf,OAAO,IAAI,CAAA,OAAM,qBAAqB,EAAE,CAAC,EAAE,KAAK,IAAI,IACpD;AAAA,MACH,sBAAsB,OAAO,IAAI,CAAC,OAAwC;AACzE,gBAAQ,GAAG,OAAA;AAAA,UACV,KAAKA,YAAAA,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,YAAA;AAAA,UAEX,KAAKA,YAAAA,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,UAEf,KAAKA,YAAAA,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,UAEf,KAAKA,YAAAA,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,QACd;AAAA,MAEH,CAAC;AAAA,IAAA;AAAA,IAEF,GAAG;AAAA,EAAA;AAEL;;"}

package/dist/development/src/resolvers/membershipUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"membershipUtils.js","sources":["../../../../../packages/engine-tenant-api/src/resolvers/membershipUtils.ts"],"sourcesContent":["import { MembershipValidationError, MembershipValidationErrorType } from '../model/service/MembershipValidator'\nimport { MembershipValidationError as MembershipValidationErrorSchema, MembershipValidationErrorCode } from '../schema'\n\nexport type MembershipErrorCode =\n\t| 'INVALID_MEMBERSHIP'\n\t| 'ROLE_NOT_FOUND'\n\t| 'VARIABLE_EMPTY'\n\t| 'VARIABLE_NOT_FOUND'\n\n\nexport interface MembershipErrorVariable {\n\tcode: MembershipErrorCode\n\tmembershipValidation?: MembershipValidationErrorSchema[]\n\tendUserMessage?: string\n\tdeveloperMessage: string\n}\n\nexport const createMembershipValidationErrorResult = (\n\tresult: MembershipValidationError[],\n): MembershipErrorVariable[] => {\n\tconst formatDeveloperError = (it: MembershipValidationError) => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn `Role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is empty`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} contains invalid value`\n\t\t}\n\t}\n\n\tconst legacyErrors = result.map((it): MembershipErrorVariable | undefined => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Given role not found',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\tendUserMessage: 'Required variable is empty',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Provided variable does not exist',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t}\n\t}).filter((it): it is MembershipErrorVariable => it !== undefined)\n\n\treturn [\n\t\t{\n\t\t\tcode: 'INVALID_MEMBERSHIP',\n\t\t\tdeveloperMessage:\n\t\t\t\t'Provided membership is invalid: ' +\n\t\t\t\tresult.map(it => formatDeveloperError(it)).join('. ') +\n\t\t\t\t'. You can also check membershipValidation field for structured details.',\n\t\t\tmembershipValidation: result.map((it): MembershipValidationErrorSchema => {\n\t\t\t\tswitch (it.error) {\n\t\t\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_INVALID',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}),\n\t\t},\n\t\t...legacyErrors,\n\t]\n}\n"],"names":[],"mappings":";AAiBa,MAAA,wCAAwC,CACpD,WAC+B;AACzB,QAAA,uBAAuB,CAAC,OAAkC;AAC/D,YAAQ,GAAG,OAAO;AAAA,MACjB,KAAK,8BAA8B;AAC3B,eAAA,QAAQ,GAAG,IAAI;AAAA,MACvB,KAAK,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAK,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAK,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,IAAA;AAAA,EAEpD;AAEA,QAAM,eAAe,OAAO,IAAI,CAAC,OAA4C;AAC5E,YAAQ,GAAG,OAAO;AAAA,MACjB,KAAK,8BAA8B;AAC3B,eAAA;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAC1C;AAAA,MACD,KAAK,8BAA8B;AAC3B,eAAA;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAC1C;AAAA,MACD,KAAK,8BAA8B;AAC3B,eAAA;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAC1C;AAAA,IAAA;AAAA,EAEF,CAAA,EAAE,OAAO,CAAC,OAAsC,OAAO,MAAS;AAE1D,SAAA;AAAA,IACN;AAAA,MACC,MAAM;AAAA,MACN,kBACC,qCACA,OAAO,IAAI,CAAA,OAAM,qBAAqB,EAAE,CAAC,EAAE,KAAK,IAAI,IACpD;AAAA,MACD,sBAAsB,OAAO,IAAI,CAAC,OAAwC;AACzE,gBAAQ,GAAG,OAAO;AAAA,UACjB,KAAK,8BAA8B;AAC3B,mBAAA;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,YACV;AAAA,UACD,KAAK,8BAA8B;AAC3B,mBAAA;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YACd;AAAA,UACD,KAAK,8BAA8B;AAC3B,mBAAA;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YACd;AAAA,UACD,KAAK,8BAA8B;AAC3B,mBAAA;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YACd;AAAA,QAAA;AAAA,MAEF,CAAA;AAAA,IACF;AAAA,IACA,GAAG;AAAA,EACJ;AACD;"}
+{"version":3,"file":"membershipUtils.js","sources":["../../../../../packages/engine-tenant-api/src/resolvers/membershipUtils.ts"],"sourcesContent":["import { MembershipValidationError, MembershipValidationErrorType } from '../model/service/MembershipValidator'\nimport { MembershipValidationError as MembershipValidationErrorSchema, MembershipValidationErrorCode } from '../schema'\n\nexport type MembershipErrorCode =\n\t| 'INVALID_MEMBERSHIP'\n\t| 'ROLE_NOT_FOUND'\n\t| 'VARIABLE_EMPTY'\n\t| 'VARIABLE_NOT_FOUND'\n\nexport interface MembershipErrorVariable {\n\tcode: MembershipErrorCode\n\tmembershipValidation?: MembershipValidationErrorSchema[]\n\tendUserMessage?: string\n\tdeveloperMessage: string\n}\n\nexport const createMembershipValidationErrorResult = (\n\tresult: MembershipValidationError[],\n): MembershipErrorVariable[] => {\n\tconst formatDeveloperError = (it: MembershipValidationError) => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn `Role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is empty`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} is not defined in a schema`\n\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\treturn `Variable ${it.variable} of role ${it.role} contains invalid value`\n\t\t}\n\t}\n\n\tconst legacyErrors = result.map((it): MembershipErrorVariable | undefined => {\n\t\tswitch (it.error) {\n\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Given role not found',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\tendUserMessage: 'Required variable is empty',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\treturn {\n\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\tendUserMessage: 'Provided variable does not exist',\n\t\t\t\t\tdeveloperMessage: formatDeveloperError(it),\n\t\t\t\t}\n\t\t}\n\t}).filter((it): it is MembershipErrorVariable => it !== undefined)\n\n\treturn [\n\t\t{\n\t\t\tcode: 'INVALID_MEMBERSHIP',\n\t\t\tdeveloperMessage: 'Provided membership is invalid: '\n\t\t\t\t+ result.map(it => formatDeveloperError(it)).join('. ')\n\t\t\t\t+ '. You can also check membershipValidation field for structured details.',\n\t\t\tmembershipValidation: result.map((it): MembershipValidationErrorSchema => {\n\t\t\t\tswitch (it.error) {\n\t\t\t\t\tcase MembershipValidationErrorType.ROLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'ROLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_EMPTY:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_EMPTY',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_NOT_FOUND:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_NOT_FOUND',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t\tcase MembershipValidationErrorType.VARIABLE_INVALID:\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\tcode: 'VARIABLE_INVALID',\n\t\t\t\t\t\t\trole: it.role,\n\t\t\t\t\t\t\tvariable: it.variable,\n\t\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}),\n\t\t},\n\t\t...legacyErrors,\n\t]\n}\n"],"names":[],"mappings":";AAgBO,MAAM,wCAAwC,CACpD,WAC+B;AAC/B,QAAM,uBAAuB,CAAC,OAAkC;AAC/D,YAAQ,GAAG,OAAA;AAAA,MACV,KAAK,8BAA8B;AAClC,eAAO,QAAQ,GAAG,IAAI;AAAA,MACvB,KAAK,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAK,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,MAClD,KAAK,8BAA8B;AAClC,eAAO,YAAY,GAAG,QAAQ,YAAY,GAAG,IAAI;AAAA,IAAA;AAAA,EAEpD;AAEA,QAAM,eAAe,OAAO,IAAI,CAAC,OAA4C;AAC5E,YAAQ,GAAG,OAAA;AAAA,MACV,KAAK,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,MAE3C,KAAK,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,MAE3C,KAAK,8BAA8B;AAClC,eAAO;AAAA,UACN,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,kBAAkB,qBAAqB,EAAE;AAAA,QAAA;AAAA,IAC1C;AAAA,EAEH,CAAC,EAAE,OAAO,CAAC,OAAsC,OAAO,MAAS;AAEjE,SAAO;AAAA,IACN;AAAA,MACC,MAAM;AAAA,MACN,kBAAkB,qCACf,OAAO,IAAI,CAAA,OAAM,qBAAqB,EAAE,CAAC,EAAE,KAAK,IAAI,IACpD;AAAA,MACH,sBAAsB,OAAO,IAAI,CAAC,OAAwC;AACzE,gBAAQ,GAAG,OAAA;AAAA,UACV,KAAK,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,YAAA;AAAA,UAEX,KAAK,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,UAEf,KAAK,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,UAEf,KAAK,8BAA8B;AAClC,mBAAO;AAAA,cACN,MAAM;AAAA,cACN,MAAM,GAAG;AAAA,cACT,UAAU,GAAG;AAAA,YAAA;AAAA,QACd;AAAA,MAEH,CAAC;AAAA,IAAA;AAAA,IAEF,GAAG;AAAA,EAAA;AAEL;"}

package/dist/development/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.cjs

@@ -7,7 +7,7 @@ require("../../../model/authorization/PermissionsFactory.cjs");
 require("@contember/schema");
 require("../../../model/type/ApiKey.cjs");
 require("@contember/database");
-const tokenUtils = require("../../../model/utils/tokenUtils.cjs");
+const token = require("../../../model/utils/token.cjs");
 require("../../../model/queries/apiKey/ApiKeyQuery.cjs");
 require("node:assert");
 require("../../../model/service/idp/providers/AppleProvider.cjs");
@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const membershipUtils = require("../../membershipUtils.cjs");
@@ -36,7 +37,7 @@ class CreateApiKeyMutationResolver {
     if (!project) {
       return errorUtils.createProjectNotFoundResponse("PROJECT_NOT_FOUND", projectSlug);
     }
-    if (typeof tokenHash === "string" && !tokenUtils.isTokenHash(tokenHash)) {
+    if (typeof tokenHash === "string" && !token.isTokenHash(tokenHash)) {
       throw new graphqlUtils.UserInputError("Invalid format of tokenHash. Must be hex-encoded sha256.");
     }
     const validationResult = await this.membershipValidator.validate(project.slug, memberships);
@@ -63,7 +64,7 @@ class CreateApiKeyMutationResolver {
       action: PermissionActions.PermissionActions.API_KEY_CREATE_GLOBAL(roles),
       message: "You are not allowed to create a global API key"
     });
-    if (typeof tokenHash === "string" && !tokenUtils.isTokenHash(tokenHash)) {
+    if (typeof tokenHash === "string" && !token.isTokenHash(tokenHash)) {
       throw new graphqlUtils.UserInputError("Invalid format of tokenHash. Must be hex-encoded sha256.");
     }
     const result = await this.apiKeyManager.createGlobalPermanentApiKey(context.db, description, roles, tokenHash ?? void 0);

package/dist/development/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"CreateApiKeyMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.ts"],"sourcesContent":["import {\n\tCreateApiKeyErrorCode,\n\tCreateApiKeyResponse,\n\tMutationCreateApiKeyArgs, MutationCreateGlobalApiKeyArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKeyManager, isTokenHash, MembershipValidator, PermissionActions, ProjectManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class CreateApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly apiKeyManager: ApiKeyManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync createApiKey(\n\t\tparent: any,\n\t\t{ projectSlug, memberships, description, tokenHash }: MutationCreateApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.API_KEY_CREATE,\n\t\t\tmessage: 'You are not allowed to create an API key for this project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.apiKeyManager.createProjectPermanentApiKey(context.db, project.id, memberships, description, tokenHash ?? undefined)\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n\n\tasync createGlobalApiKey(\n\t\tparent: any,\n\t\t{ roles, description, tokenHash }: MutationCreateGlobalApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\troles ??= []\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_CREATE_GLOBAL(roles),\n\t\t\tmessage: 'You are not allowed to create a global API key',\n\t\t})\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst result = await this.apiKeyManager.createGlobalPermanentApiKey(context.db, description, roles, tokenHash ?? undefined)\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","isTokenHash","UserInputError","createMembershipValidationErrorResult"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAaO,MAAM,6BAA0D;AAAA,EACtE,YACkB,eACA,gBACA,qBAChB;AAHgB,SAAA,gBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,aACL,QACA,EAAE,aAAa,aAAa,aAAa,UAAA,GACzC,SACA,MACgC;AAChC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEtE,QAAI,OAAO,cAAc,YAAY,CAACC,WAAA,YAAY,SAAS,GAAG;AACvD,YAAA,IAAIC,4BAAe,0DAA0D;AAAA,IAAA;AAEpF,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AACtF,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAASC,sDAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAChB;AAAA,IAAA;AAGD,UAAM,SAAS,MAAM,KAAK,cAAc,6BAA6B,QAAQ,IAAI,QAAQ,IAAI,aAAa,aAAa,aAAa,MAAS;AAEtI,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAkB;AAAA,MAAA;AAAA,IAE1C;AAAA,EAAA;AAAA,EAGD,MAAM,mBACL,QACA,EAAE,OAAO,aAAa,UACtB,GAAA,SACA,MACgC;AAChC,cAAA,QAAU;AACV,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQJ,kBAAAA,kBAAkB,sBAAsB,KAAK;AAAA,MACrD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,OAAO,cAAc,YAAY,CAACE,WAAA,YAAY,SAAS,GAAG;AACvD,YAAA,IAAIC,4BAAe,0DAA0D;AAAA,IAAA;AAE9E,UAAA,SAAS,MAAM,KAAK,cAAc,4BAA4B,QAAQ,IAAI,aAAa,OAAO,aAAa,MAAS;AACnH,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAkB;AAAA,MAAA;AAAA,IAE1C;AAAA,EAAA;AAEF;;"}
+{"version":3,"file":"CreateApiKeyMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.ts"],"sourcesContent":["import {\n\tCreateApiKeyErrorCode,\n\tCreateApiKeyResponse,\n\tMutationCreateApiKeyArgs,\n\tMutationCreateGlobalApiKeyArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKeyManager, isTokenHash, MembershipValidator, PermissionActions, ProjectManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class CreateApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly apiKeyManager: ApiKeyManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync createApiKey(\n\t\tparent: any,\n\t\t{ projectSlug, memberships, description, tokenHash }: MutationCreateApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.API_KEY_CREATE,\n\t\t\tmessage: 'You are not allowed to create an API key for this project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.apiKeyManager.createProjectPermanentApiKey(context.db, project.id, memberships, description, tokenHash ?? undefined)\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n\n\tasync createGlobalApiKey(\n\t\tparent: any,\n\t\t{ roles, description, tokenHash }: MutationCreateGlobalApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\troles ??= []\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_CREATE_GLOBAL(roles),\n\t\t\tmessage: 'You are not allowed to create a global API key',\n\t\t})\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst result = await this.apiKeyManager.createGlobalPermanentApiKey(context.db, description, roles, tokenHash ?? undefined)\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createProjectNotFoundResponse","isTokenHash","UserInputError","createMembershipValidationErrorResult"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAcO,MAAM,6BAA0D;AAAA,EACtE,YACkB,eACA,gBACA,qBAChB;AAHgB,SAAA,gBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,aACL,QACA,EAAE,aAAa,aAAa,aAAa,UAAA,GACzC,SACA,MACgC;AAChC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAOC,WAAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,QAAI,OAAO,cAAc,YAAY,CAACC,MAAAA,YAAY,SAAS,GAAG;AAC7D,YAAM,IAAIC,aAAAA,eAAe,0DAA0D;AAAA,IACpF;AACA,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AAC1F,QAAI,iBAAiB,SAAS,GAAG;AAChC,YAAM,SAASC,gBAAAA,sCAAsC,gBAAgB;AACrE,aAAO;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEA,UAAM,SAAS,MAAM,KAAK,cAAc,6BAA6B,QAAQ,IAAI,QAAQ,IAAI,aAAa,aAAa,aAAa,MAAS;AAE7I,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,MACR,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAA;AAAA,MAAkB;AAAA,IACzC;AAAA,EAEF;AAAA,EAEA,MAAM,mBACL,QACA,EAAE,OAAO,aAAa,UAAA,GACtB,SACA,MACgC;AAChC,cAAA,QAAU;AACV,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQJ,kBAAAA,kBAAkB,sBAAsB,KAAK;AAAA,MACrD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,OAAO,cAAc,YAAY,CAACE,MAAAA,YAAY,SAAS,GAAG;AAC7D,YAAM,IAAIC,aAAAA,eAAe,0DAA0D;AAAA,IACpF;AACA,UAAM,SAAS,MAAM,KAAK,cAAc,4BAA4B,QAAQ,IAAI,aAAa,OAAO,aAAa,MAAS;AAC1H,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,MACR,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAA;AAAA,MAAkB;AAAA,IACzC;AAAA,EAEF;AACD;;"}

package/dist/development/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.js

@@ -5,7 +5,7 @@ import "../../../model/authorization/PermissionsFactory.js";
 import "@contember/schema";
 import "../../../model/type/ApiKey.js";
 import "@contember/database";
-import { isTokenHash } from "../../../model/utils/tokenUtils.js";
+import { isTokenHash } from "../../../model/utils/token.js";
 import "../../../model/queries/apiKey/ApiKeyQuery.js";
 import "node:assert";
 import "../../../model/service/idp/providers/AppleProvider.js";
@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { createMembershipValidationErrorResult } from "../../membershipUtils.js";

package/dist/development/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"CreateApiKeyMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.ts"],"sourcesContent":["import {\n\tCreateApiKeyErrorCode,\n\tCreateApiKeyResponse,\n\tMutationCreateApiKeyArgs, MutationCreateGlobalApiKeyArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKeyManager, isTokenHash, MembershipValidator, PermissionActions, ProjectManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class CreateApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly apiKeyManager: ApiKeyManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync createApiKey(\n\t\tparent: any,\n\t\t{ projectSlug, memberships, description, tokenHash }: MutationCreateApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.API_KEY_CREATE,\n\t\t\tmessage: 'You are not allowed to create an API key for this project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.apiKeyManager.createProjectPermanentApiKey(context.db, project.id, memberships, description, tokenHash ?? undefined)\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n\n\tasync createGlobalApiKey(\n\t\tparent: any,\n\t\t{ roles, description, tokenHash }: MutationCreateGlobalApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\troles ??= []\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_CREATE_GLOBAL(roles),\n\t\t\tmessage: 'You are not allowed to create a global API key',\n\t\t})\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst result = await this.apiKeyManager.createGlobalPermanentApiKey(context.db, description, roles, tokenHash ?? undefined)\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAaO,MAAM,6BAA0D;AAAA,EACtE,YACkB,eACA,gBACA,qBAChB;AAHgB,SAAA,gBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,aACL,QACA,EAAE,aAAa,aAAa,aAAa,UAAA,GACzC,SACA,MACgC;AAChC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACN,aAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEtE,QAAI,OAAO,cAAc,YAAY,CAAC,YAAY,SAAS,GAAG;AACvD,YAAA,IAAI,eAAe,0DAA0D;AAAA,IAAA;AAEpF,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AACtF,QAAA,iBAAiB,SAAS,GAAG;AAC1B,YAAA,SAAS,sCAAsC,gBAAgB;AAC9D,aAAA;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAChB;AAAA,IAAA;AAGD,UAAM,SAAS,MAAM,KAAK,cAAc,6BAA6B,QAAQ,IAAI,QAAQ,IAAI,aAAa,aAAa,aAAa,MAAS;AAEtI,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAkB;AAAA,MAAA;AAAA,IAE1C;AAAA,EAAA;AAAA,EAGD,MAAM,mBACL,QACA,EAAE,OAAO,aAAa,UACtB,GAAA,SACA,MACgC;AAChC,cAAA,QAAU;AACV,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,sBAAsB,KAAK;AAAA,MACrD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,OAAO,cAAc,YAAY,CAAC,YAAY,SAAS,GAAG;AACvD,YAAA,IAAI,eAAe,0DAA0D;AAAA,IAAA;AAE9E,UAAA,SAAS,MAAM,KAAK,cAAc,4BAA4B,QAAQ,IAAI,aAAa,OAAO,aAAa,MAAS;AACnH,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAC;AAAA,MACT,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAkB;AAAA,MAAA;AAAA,IAE1C;AAAA,EAAA;AAEF;"}
+{"version":3,"file":"CreateApiKeyMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.ts"],"sourcesContent":["import {\n\tCreateApiKeyErrorCode,\n\tCreateApiKeyResponse,\n\tMutationCreateApiKeyArgs,\n\tMutationCreateGlobalApiKeyArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKeyManager, isTokenHash, MembershipValidator, PermissionActions, ProjectManager } from '../../../model'\nimport { createMembershipValidationErrorResult } from '../../membershipUtils'\nimport { createProjectNotFoundResponse } from '../../errorUtils'\nimport { UserInputError } from '@contember/graphql-utils'\n\nexport class CreateApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly apiKeyManager: ApiKeyManager,\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly membershipValidator: MembershipValidator,\n\t) {}\n\n\tasync createApiKey(\n\t\tparent: any,\n\t\t{ projectSlug, memberships, description, tokenHash }: MutationCreateApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\tconst project = await this.projectManager.getProjectBySlug(context.db, projectSlug)\n\t\tawait context.requireAccess({\n\t\t\tscope: await context.permissionContext.createProjectScope(project),\n\t\t\taction: PermissionActions.API_KEY_CREATE,\n\t\t\tmessage: 'You are not allowed to create an API key for this project',\n\t\t})\n\t\tif (!project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst validationResult = await this.membershipValidator.validate(project.slug, memberships)\n\t\tif (validationResult.length > 0) {\n\t\t\tconst errors = createMembershipValidationErrorResult(validationResult)\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terrors: errors,\n\t\t\t\terror: errors[0],\n\t\t\t}\n\t\t}\n\n\t\tconst result = await this.apiKeyManager.createProjectPermanentApiKey(context.db, project.id, memberships, description, tokenHash ?? undefined)\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n\n\tasync createGlobalApiKey(\n\t\tparent: any,\n\t\t{ roles, description, tokenHash }: MutationCreateGlobalApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<CreateApiKeyResponse> {\n\t\troles ??= []\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_CREATE_GLOBAL(roles),\n\t\t\tmessage: 'You are not allowed to create a global API key',\n\t\t})\n\t\tif (typeof tokenHash === 'string' && !isTokenHash(tokenHash)) {\n\t\t\tthrow new UserInputError('Invalid format of tokenHash. Must be hex-encoded sha256.')\n\t\t}\n\t\tconst result = await this.apiKeyManager.createGlobalPermanentApiKey(context.db, description, roles, tokenHash ?? undefined)\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t\tresult: {\n\t\t\t\tapiKey: result.result.toApiKeyWithToken(),\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAcO,MAAM,6BAA0D;AAAA,EACtE,YACkB,eACA,gBACA,qBAChB;AAHgB,SAAA,gBAAA;AACA,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,aACL,QACA,EAAE,aAAa,aAAa,aAAa,UAAA,GACzC,SACA,MACgC;AAChC,UAAM,UAAU,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW;AAClF,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO;AAAA,MACjE,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,CAAC,SAAS;AACb,aAAO,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,QAAI,OAAO,cAAc,YAAY,CAAC,YAAY,SAAS,GAAG;AAC7D,YAAM,IAAI,eAAe,0DAA0D;AAAA,IACpF;AACA,UAAM,mBAAmB,MAAM,KAAK,oBAAoB,SAAS,QAAQ,MAAM,WAAW;AAC1F,QAAI,iBAAiB,SAAS,GAAG;AAChC,YAAM,SAAS,sCAAsC,gBAAgB;AACrE,aAAO;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,OAAO,OAAO,CAAC;AAAA,MAAA;AAAA,IAEjB;AAEA,UAAM,SAAS,MAAM,KAAK,cAAc,6BAA6B,QAAQ,IAAI,QAAQ,IAAI,aAAa,aAAa,aAAa,MAAS;AAE7I,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,MACR,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAA;AAAA,MAAkB;AAAA,IACzC;AAAA,EAEF;AAAA,EAEA,MAAM,mBACL,QACA,EAAE,OAAO,aAAa,UAAA,GACtB,SACA,MACgC;AAChC,cAAA,QAAU;AACV,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,sBAAsB,KAAK;AAAA,MACrD,SAAS;AAAA,IAAA,CACT;AACD,QAAI,OAAO,cAAc,YAAY,CAAC,YAAY,SAAS,GAAG;AAC7D,YAAM,IAAI,eAAe,0DAA0D;AAAA,IACpF;AACA,UAAM,SAAS,MAAM,KAAK,cAAc,4BAA4B,QAAQ,IAAI,aAAa,OAAO,aAAa,MAAS;AAC1H,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,MACR,QAAQ;AAAA,QACP,QAAQ,OAAO,OAAO,kBAAA;AAAA,MAAkB;AAAA,IACzC;AAAA,EAEF;AACD;"}

package/dist/development/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const errorUtils = require("../../errorUtils.cjs");

package/dist/development/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"DisableApiKeyMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.ts"],"sourcesContent":["import {\n\tDisableApiKeyErrorCode,\n\tDisableApiKeyResponse,\n\tMutationDisableApiKeyArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ApiKeyManager } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class DisableApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync disableApiKey(\n\t\tparent: any,\n\t\t{ id }: MutationDisableApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<DisableApiKeyResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_DISABLE,\n\t\t\tmessage: 'You are not allowed to disable api key',\n\t\t})\n\n\t\tconst result = await this.apiKeyManager.disableApiKey(context.db, id)\n\n\t\tif (!result) {\n\t\t\treturn createErrorResponse('KEY_NOT_FOUND', 'API key not found')\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;AAWO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,cACL,QACA,EAAE,GAAG,GACL,SACA,MACiC;AACjC,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,cAAc,cAAc,QAAQ,IAAI,EAAE;AAEpE,QAAI,CAAC,QAAQ;AACL,aAAAC,WAAA,oBAAoB,iBAAiB,mBAAmB;AAAA,IAAA;AAGzD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;;"}
+{"version":3,"file":"DisableApiKeyMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.ts"],"sourcesContent":["import { DisableApiKeyErrorCode, DisableApiKeyResponse, MutationDisableApiKeyArgs, MutationResolvers } from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKeyManager, PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class DisableApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync disableApiKey(\n\t\tparent: any,\n\t\t{ id }: MutationDisableApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<DisableApiKeyResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_DISABLE,\n\t\t\tmessage: 'You are not allowed to disable api key',\n\t\t})\n\n\t\tconst result = await this.apiKeyManager.disableApiKey(context.db, id)\n\n\t\tif (!result) {\n\t\t\treturn createErrorResponse('KEY_NOT_FOUND', 'API key not found')\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAA+B;AAAA,EAE5D,MAAM,cACL,QACA,EAAE,GAAA,GACF,SACA,MACiC;AACjC,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,cAAc,cAAc,QAAQ,IAAI,EAAE;AAEpE,QAAI,CAAC,QAAQ;AACZ,aAAOC,WAAAA,oBAAoB,iBAAiB,mBAAmB;AAAA,IAChE;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;;"}

package/dist/development/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { createErrorResponse } from "../../errorUtils.js";

package/dist/development/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"DisableApiKeyMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.ts"],"sourcesContent":["import {\n\tDisableApiKeyErrorCode,\n\tDisableApiKeyResponse,\n\tMutationDisableApiKeyArgs,\n\tMutationResolvers,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions, ApiKeyManager } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class DisableApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync disableApiKey(\n\t\tparent: any,\n\t\t{ id }: MutationDisableApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<DisableApiKeyResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_DISABLE,\n\t\t\tmessage: 'You are not allowed to disable api key',\n\t\t})\n\n\t\tconst result = await this.apiKeyManager.disableApiKey(context.db, id)\n\n\t\tif (!result) {\n\t\t\treturn createErrorResponse('KEY_NOT_FOUND', 'API key not found')\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAWO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAAA;AAAA,EAE7B,MAAM,cACL,QACA,EAAE,GAAG,GACL,SACA,MACiC;AACjC,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,cAAc,cAAc,QAAQ,IAAI,EAAE;AAEpE,QAAI,CAAC,QAAQ;AACL,aAAA,oBAAoB,iBAAiB,mBAAmB;AAAA,IAAA;AAGzD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;"}
+{"version":3,"file":"DisableApiKeyMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.ts"],"sourcesContent":["import { DisableApiKeyErrorCode, DisableApiKeyResponse, MutationDisableApiKeyArgs, MutationResolvers } from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { ApiKeyManager, PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class DisableApiKeyMutationResolver implements MutationResolvers {\n\tconstructor(private readonly apiKeyManager: ApiKeyManager) {}\n\n\tasync disableApiKey(\n\t\tparent: any,\n\t\t{ id }: MutationDisableApiKeyArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<DisableApiKeyResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.API_KEY_DISABLE,\n\t\t\tmessage: 'You are not allowed to disable api key',\n\t\t})\n\n\t\tconst result = await this.apiKeyManager.disableApiKey(context.db, id)\n\n\t\tif (!result) {\n\t\t\treturn createErrorResponse('KEY_NOT_FOUND', 'API key not found')\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA2D;AAAA,EACvE,YAA6B,eAA8B;AAA9B,SAAA,gBAAA;AAAA,EAA+B;AAAA,EAE5D,MAAM,cACL,QACA,EAAE,GAAA,GACF,SACA,MACiC;AACjC,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,cAAc,cAAc,QAAQ,IAAI,EAAE;AAEpE,QAAI,CAAC,QAAQ;AACZ,aAAO,oBAAoB,iBAAiB,mBAAmB;AAAA,IAChE;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;"}

package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const errorUtils = require("../../errorUtils.cjs");

package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigurationMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/configuration/ConfigurationMutationResolver.ts"],"sourcesContent":["import { ConfigureResponse, MutationConfigureArgs, MutationResolvers } from '../../../schema'\nimport { ConfigurationManager } from '../../../model/service/ConfigurationManager'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class ConfigurationMutationResolver implements Pick<MutationResolvers, 'configure'> {\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configure(parent: any, { config }: MutationConfigureArgs, context: TenantResolverContext): Promise<ConfigureResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIGURE,\n\t\t\tmessage: 'You are not allowed to configure',\n\t\t})\n\n\t\tconst result = await this.configurationManager.updateConfiguration(context.db, config)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA8E;AAAA,EAC1F,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,UAAU,QAAa,EAAE,OAAA,GAAiC,SAA4D;AAC3H,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,MAAM;AAEjF,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,IACL;AAAA,EAAA;AAEF;;"}
+{"version":3,"file":"ConfigurationMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/configuration/ConfigurationMutationResolver.ts"],"sourcesContent":["import { ConfigureResponse, MutationConfigureArgs, MutationResolvers } from '../../../schema'\nimport { ConfigurationManager } from '../../../model/service/ConfigurationManager'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class ConfigurationMutationResolver implements Pick<MutationResolvers, 'configure'> {\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configure(parent: any, { config }: MutationConfigureArgs, context: TenantResolverContext): Promise<ConfigureResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIGURE,\n\t\t\tmessage: 'You are not allowed to configure',\n\t\t})\n\n\t\tconst result = await this.configurationManager.updateConfiguration(context.db, config)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA8E;AAAA,EAC1F,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,UAAU,QAAa,EAAE,OAAA,GAAiC,SAA4D;AAC3H,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,MAAM;AAErF,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,IAAA;AAAA,EAEN;AACD;;"}

package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { createErrorResponse } from "../../errorUtils.js";

package/dist/development/src/resolvers/mutation/configuration/ConfigurationMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigurationMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/configuration/ConfigurationMutationResolver.ts"],"sourcesContent":["import { ConfigureResponse, MutationConfigureArgs, MutationResolvers } from '../../../schema'\nimport { ConfigurationManager } from '../../../model/service/ConfigurationManager'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class ConfigurationMutationResolver implements Pick<MutationResolvers, 'configure'> {\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configure(parent: any, { config }: MutationConfigureArgs, context: TenantResolverContext): Promise<ConfigureResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIGURE,\n\t\t\tmessage: 'You are not allowed to configure',\n\t\t})\n\n\t\tconst result = await this.configurationManager.updateConfiguration(context.db, config)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA8E;AAAA,EAC1F,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,UAAU,QAAa,EAAE,OAAA,GAAiC,SAA4D;AAC3H,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,MAAM;AAEjF,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,IACL;AAAA,EAAA;AAEF;"}
+{"version":3,"file":"ConfigurationMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/configuration/ConfigurationMutationResolver.ts"],"sourcesContent":["import { ConfigureResponse, MutationConfigureArgs, MutationResolvers } from '../../../schema'\nimport { ConfigurationManager } from '../../../model/service/ConfigurationManager'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\n\nexport class ConfigurationMutationResolver implements Pick<MutationResolvers, 'configure'> {\n\tconstructor(\n\t\tprivate readonly configurationManager: ConfigurationManager,\n\t) {\n\t}\n\n\tasync configure(parent: any, { config }: MutationConfigureArgs, context: TenantResolverContext): Promise<ConfigureResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.CONFIGURE,\n\t\t\tmessage: 'You are not allowed to configure',\n\t\t})\n\n\t\tconst result = await this.configurationManager.updateConfiguration(context.db, config)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMO,MAAM,8BAA8E;AAAA,EAC1F,YACkB,sBAChB;AADgB,SAAA,uBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,UAAU,QAAa,EAAE,OAAA,GAAiC,SAA4D;AAC3H,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,qBAAqB,oBAAoB,QAAQ,IAAI,MAAM;AAErF,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,IAAA;AAAA,EAEN;AACD;"}

package/dist/development/src/resolvers/mutation/identity/GlobalRolesMutationResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const errorUtils = require("../../errorUtils.cjs");

package/dist/development/src/resolvers/mutation/identity/GlobalRolesMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GlobalRolesMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/identity/GlobalRolesMutationResolver.ts"],"sourcesContent":["import {\n\tAddGlobalIdentityRolesResponse,\n\tMutationAddGlobalIdentityRolesArgs,\n\tMutationRemoveGlobalIdentityRolesArgs,\n\tMutationResolvers,\n\tRemoveGlobalIdentityRolesResponse,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { RolesManager } from '../../../model'\n\nexport class IdentityGlobalRolesMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly rolesManager: RolesManager,\n\t) {\n\t}\n\n\tasync addGlobalIdentityRoles(\n\t\tparent: any,\n\t\t{ roles, identityId }: MutationAddGlobalIdentityRolesArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<AddGlobalIdentityRolesResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(roles),\n\t\t\tmessage: 'You are not allowed to add global roles',\n\t\t})\n\n\t\tconst result = await this.rolesManager.addGlobalRoles(context.db, identityId, roles)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: {\n\t\t\t\tidentity: { id: identityId, projects: [] },\n\t\t\t},\n\t\t}\n\t}\n\n\tasync removeGlobalIdentityRoles(\n\t\tparent: any,\n\t\t{ roles, identityId }: MutationRemoveGlobalIdentityRolesArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<RemoveGlobalIdentityRolesResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(roles),\n\t\t\tmessage: 'You are not allowed to remove global roles',\n\t\t})\n\n\t\tconst result = await this.rolesManager.removeGlobalRoles(context.db, identityId, roles)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: {\n\t\t\t\tidentity: { id: identityId, projects: [] },\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;AAaO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,cAChB;AADgB,SAAA,eAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,uBACL,QACA,EAAE,OAAO,WAAW,GACpB,SACA,MAC0C;AAC1C,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB,0BAA0B,KAAK;AAAA,MACzD,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,SAAS,MAAM,KAAK,aAAa,eAAe,QAAQ,IAAI,YAAY,KAAK;AAE/E,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ;AAAA,QACP,UAAU,EAAE,IAAI,YAAY,UAAU,CAAG,EAAA;AAAA,MAAA;AAAA,IAE3C;AAAA,EAAA;AAAA,EAGD,MAAM,0BACL,QACA,EAAE,OAAO,WAAW,GACpB,SACA,MAC6C;AAC7C,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQD,kBAAAA,kBAAkB,6BAA6B,KAAK;AAAA,MAC5D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,SAAS,MAAM,KAAK,aAAa,kBAAkB,QAAQ,IAAI,YAAY,KAAK;AAElF,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ;AAAA,QACP,UAAU,EAAE,IAAI,YAAY,UAAU,CAAG,EAAA;AAAA,MAAA;AAAA,IAE3C;AAAA,EAAA;AAEF;;"}
+{"version":3,"file":"GlobalRolesMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/identity/GlobalRolesMutationResolver.ts"],"sourcesContent":["import {\n\tAddGlobalIdentityRolesResponse,\n\tMutationAddGlobalIdentityRolesArgs,\n\tMutationRemoveGlobalIdentityRolesArgs,\n\tMutationResolvers,\n\tRemoveGlobalIdentityRolesResponse,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { RolesManager } from '../../../model'\n\nexport class IdentityGlobalRolesMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly rolesManager: RolesManager,\n\t) {\n\t}\n\n\tasync addGlobalIdentityRoles(\n\t\tparent: any,\n\t\t{ roles, identityId }: MutationAddGlobalIdentityRolesArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<AddGlobalIdentityRolesResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(roles),\n\t\t\tmessage: 'You are not allowed to add global roles',\n\t\t})\n\n\t\tconst result = await this.rolesManager.addGlobalRoles(context.db, identityId, roles)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: {\n\t\t\t\tidentity: { id: identityId, projects: [] },\n\t\t\t},\n\t\t}\n\t}\n\n\tasync removeGlobalIdentityRoles(\n\t\tparent: any,\n\t\t{ roles, identityId }: MutationRemoveGlobalIdentityRolesArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<RemoveGlobalIdentityRolesResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(roles),\n\t\t\tmessage: 'You are not allowed to remove global roles',\n\t\t})\n\n\t\tconst result = await this.rolesManager.removeGlobalRoles(context.db, identityId, roles)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: {\n\t\t\t\tidentity: { id: identityId, projects: [] },\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAaO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,cAChB;AADgB,SAAA,eAAA;AAAA,EAElB;AAAA,EAEA,MAAM,uBACL,QACA,EAAE,OAAO,WAAA,GACT,SACA,MAC0C;AAC1C,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB,0BAA0B,KAAK;AAAA,MACzD,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,aAAa,eAAe,QAAQ,IAAI,YAAY,KAAK;AAEnF,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ;AAAA,QACP,UAAU,EAAE,IAAI,YAAY,UAAU,CAAA,EAAC;AAAA,MAAE;AAAA,IAC1C;AAAA,EAEF;AAAA,EAEA,MAAM,0BACL,QACA,EAAE,OAAO,WAAA,GACT,SACA,MAC6C;AAC7C,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQD,kBAAAA,kBAAkB,6BAA6B,KAAK;AAAA,MAC5D,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,aAAa,kBAAkB,QAAQ,IAAI,YAAY,KAAK;AAEtF,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ;AAAA,QACP,UAAU,EAAE,IAAI,YAAY,UAAU,CAAA,EAAC;AAAA,MAAE;AAAA,IAC1C;AAAA,EAEF;AACD;;"}

package/dist/development/src/resolvers/mutation/identity/GlobalRolesMutationResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { createErrorResponse } from "../../errorUtils.js";

package/dist/development/src/resolvers/mutation/identity/GlobalRolesMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"GlobalRolesMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/identity/GlobalRolesMutationResolver.ts"],"sourcesContent":["import {\n\tAddGlobalIdentityRolesResponse,\n\tMutationAddGlobalIdentityRolesArgs,\n\tMutationRemoveGlobalIdentityRolesArgs,\n\tMutationResolvers,\n\tRemoveGlobalIdentityRolesResponse,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { RolesManager } from '../../../model'\n\nexport class IdentityGlobalRolesMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly rolesManager: RolesManager,\n\t) {\n\t}\n\n\tasync addGlobalIdentityRoles(\n\t\tparent: any,\n\t\t{ roles, identityId }: MutationAddGlobalIdentityRolesArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<AddGlobalIdentityRolesResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(roles),\n\t\t\tmessage: 'You are not allowed to add global roles',\n\t\t})\n\n\t\tconst result = await this.rolesManager.addGlobalRoles(context.db, identityId, roles)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: {\n\t\t\t\tidentity: { id: identityId, projects: [] },\n\t\t\t},\n\t\t}\n\t}\n\n\tasync removeGlobalIdentityRoles(\n\t\tparent: any,\n\t\t{ roles, identityId }: MutationRemoveGlobalIdentityRolesArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<RemoveGlobalIdentityRolesResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(roles),\n\t\t\tmessage: 'You are not allowed to remove global roles',\n\t\t})\n\n\t\tconst result = await this.rolesManager.removeGlobalRoles(context.db, identityId, roles)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: {\n\t\t\t\tidentity: { id: identityId, projects: [] },\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAaO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,cAChB;AADgB,SAAA,eAAA;AAAA,EAAA;AAAA,EAIlB,MAAM,uBACL,QACA,EAAE,OAAO,WAAW,GACpB,SACA,MAC0C;AAC1C,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,0BAA0B,KAAK;AAAA,MACzD,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,SAAS,MAAM,KAAK,aAAa,eAAe,QAAQ,IAAI,YAAY,KAAK;AAE/E,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ;AAAA,QACP,UAAU,EAAE,IAAI,YAAY,UAAU,CAAG,EAAA;AAAA,MAAA;AAAA,IAE3C;AAAA,EAAA;AAAA,EAGD,MAAM,0BACL,QACA,EAAE,OAAO,WAAW,GACpB,SACA,MAC6C;AAC7C,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,6BAA6B,KAAK;AAAA,MAC5D,SAAS;AAAA,IAAA,CACT;AAEK,UAAA,SAAS,MAAM,KAAK,aAAa,kBAAkB,QAAQ,IAAI,YAAY,KAAK;AAElF,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ;AAAA,QACP,UAAU,EAAE,IAAI,YAAY,UAAU,CAAG,EAAA;AAAA,MAAA;AAAA,IAE3C;AAAA,EAAA;AAEF;"}
+{"version":3,"file":"GlobalRolesMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/identity/GlobalRolesMutationResolver.ts"],"sourcesContent":["import {\n\tAddGlobalIdentityRolesResponse,\n\tMutationAddGlobalIdentityRolesArgs,\n\tMutationRemoveGlobalIdentityRolesArgs,\n\tMutationResolvers,\n\tRemoveGlobalIdentityRolesResponse,\n} from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { PermissionActions } from '../../../model'\nimport { createErrorResponse } from '../../errorUtils'\nimport { RolesManager } from '../../../model'\n\nexport class IdentityGlobalRolesMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly rolesManager: RolesManager,\n\t) {\n\t}\n\n\tasync addGlobalIdentityRoles(\n\t\tparent: any,\n\t\t{ roles, identityId }: MutationAddGlobalIdentityRolesArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<AddGlobalIdentityRolesResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDENTITY_ADD_GLOBAL_ROLES(roles),\n\t\t\tmessage: 'You are not allowed to add global roles',\n\t\t})\n\n\t\tconst result = await this.rolesManager.addGlobalRoles(context.db, identityId, roles)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: {\n\t\t\t\tidentity: { id: identityId, projects: [] },\n\t\t\t},\n\t\t}\n\t}\n\n\tasync removeGlobalIdentityRoles(\n\t\tparent: any,\n\t\t{ roles, identityId }: MutationRemoveGlobalIdentityRolesArgs,\n\t\tcontext: TenantResolverContext,\n\t\tinfo: GraphQLResolveInfo,\n\t): Promise<RemoveGlobalIdentityRolesResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDENTITY_REMOVE_GLOBAL_ROLES(roles),\n\t\t\tmessage: 'You are not allowed to remove global roles',\n\t\t})\n\n\t\tconst result = await this.rolesManager.removeGlobalRoles(context.db, identityId, roles)\n\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresult: {\n\t\t\t\tidentity: { id: identityId, projects: [] },\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAaO,MAAM,oCAAiE;AAAA,EAC7E,YACkB,cAChB;AADgB,SAAA,eAAA;AAAA,EAElB;AAAA,EAEA,MAAM,uBACL,QACA,EAAE,OAAO,WAAA,GACT,SACA,MAC0C;AAC1C,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,0BAA0B,KAAK;AAAA,MACzD,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,aAAa,eAAe,QAAQ,IAAI,YAAY,KAAK;AAEnF,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ;AAAA,QACP,UAAU,EAAE,IAAI,YAAY,UAAU,CAAA,EAAC;AAAA,MAAE;AAAA,IAC1C;AAAA,EAEF;AAAA,EAEA,MAAM,0BACL,QACA,EAAE,OAAO,WAAA,GACT,SACA,MAC6C;AAC7C,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB,6BAA6B,KAAK;AAAA,MAC5D,SAAS;AAAA,IAAA,CACT;AAED,UAAM,SAAS,MAAM,KAAK,aAAa,kBAAkB,QAAQ,IAAI,YAAY,KAAK;AAEtF,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ;AAAA,QACP,UAAU,EAAE,IAAI,YAAY,UAAU,CAAA,EAAC;AAAA,MAAE;AAAA,IAC1C;AAAA,EAEF;AACD;"}

package/dist/development/src/resolvers/mutation/idp/AddIDPMutationResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const errorUtils = require("../../errorUtils.cjs");

package/dist/development/src/resolvers/mutation/idp/AddIDPMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"AddIDPMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/AddIDPMutationResolver.ts"],"sourcesContent":["import { AddIdpResponse, MutationAddIdpArgs, MutationResolvers } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class AddIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync addIDP(parent: unknown, args: MutationAddIdpArgs, context: TenantResolverContext): Promise<AddIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_ADD,\n\t\t\tmessage: 'You are not allowed to add IDP',\n\t\t})\n\t\tconst result = await this.idpManager.addIDP(context.db, {\n\t\t\tconfiguration: args.configuration,\n\t\t\tslug: args.identityProvider,\n\t\t\ttype: args.type,\n\t\t\toptions: {\n\t\t\t\tautoSignUp: args.options?.autoSignUp ?? false,\n\t\t\t\texclusive: args.options?.exclusive ?? false,\n\t\t\t\tinitReturnsConfig: args.options?.initReturnsConfig ?? false,\n\t\t\t},\n\t\t})\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;AAMO,MAAM,uBAAoD;AAAA,EAChE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAAA;AAAA,EAG7B,MAAM,OAAO,QAAiB,MAA0B,SAAyD;AAChH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,WAAW,OAAO,QAAQ,IAAI;AAAA,MACvD,eAAe,KAAK;AAAA,MACpB,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,QACR,YAAY,KAAK,SAAS,cAAc;AAAA,QACxC,WAAW,KAAK,SAAS,aAAa;AAAA,QACtC,mBAAmB,KAAK,SAAS,qBAAqB;AAAA,MAAA;AAAA,IACvD,CACA;AACG,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;;"}
+{"version":3,"file":"AddIDPMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/AddIDPMutationResolver.ts"],"sourcesContent":["import { AddIdpResponse, MutationAddIdpArgs, MutationResolvers } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class AddIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync addIDP(parent: unknown, args: MutationAddIdpArgs, context: TenantResolverContext): Promise<AddIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_ADD,\n\t\t\tmessage: 'You are not allowed to add IDP',\n\t\t})\n\t\tconst result = await this.idpManager.addIDP(context.db, {\n\t\t\tconfiguration: args.configuration as any,\n\t\t\tslug: args.identityProvider,\n\t\t\ttype: args.type,\n\t\t\toptions: {\n\t\t\t\tautoSignUp: args.options?.autoSignUp ?? false,\n\t\t\t\texclusive: args.options?.exclusive ?? false,\n\t\t\t\tinitReturnsConfig: args.options?.initReturnsConfig ?? false,\n\t\t\t},\n\t\t})\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,uBAAoD;AAAA,EAChE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,OAAO,QAAiB,MAA0B,SAAyD;AAChH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,WAAW,OAAO,QAAQ,IAAI;AAAA,MACvD,eAAe,KAAK;AAAA,MACpB,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,QACR,YAAY,KAAK,SAAS,cAAc;AAAA,QACxC,WAAW,KAAK,SAAS,aAAa;AAAA,QACtC,mBAAmB,KAAK,SAAS,qBAAqB;AAAA,MAAA;AAAA,IACvD,CACA;AACD,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;;"}

package/dist/development/src/resolvers/mutation/idp/AddIDPMutationResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { createErrorResponse } from "../../errorUtils.js";

package/dist/development/src/resolvers/mutation/idp/AddIDPMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"AddIDPMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/AddIDPMutationResolver.ts"],"sourcesContent":["import { AddIdpResponse, MutationAddIdpArgs, MutationResolvers } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class AddIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync addIDP(parent: unknown, args: MutationAddIdpArgs, context: TenantResolverContext): Promise<AddIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_ADD,\n\t\t\tmessage: 'You are not allowed to add IDP',\n\t\t})\n\t\tconst result = await this.idpManager.addIDP(context.db, {\n\t\t\tconfiguration: args.configuration,\n\t\t\tslug: args.identityProvider,\n\t\t\ttype: args.type,\n\t\t\toptions: {\n\t\t\t\tautoSignUp: args.options?.autoSignUp ?? false,\n\t\t\t\texclusive: args.options?.exclusive ?? false,\n\t\t\t\tinitReturnsConfig: args.options?.initReturnsConfig ?? false,\n\t\t\t},\n\t\t})\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMO,MAAM,uBAAoD;AAAA,EAChE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAAA;AAAA,EAG7B,MAAM,OAAO,QAAiB,MAA0B,SAAyD;AAChH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,WAAW,OAAO,QAAQ,IAAI;AAAA,MACvD,eAAe,KAAK;AAAA,MACpB,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,QACR,YAAY,KAAK,SAAS,cAAc;AAAA,QACxC,WAAW,KAAK,SAAS,aAAa;AAAA,QACtC,mBAAmB,KAAK,SAAS,qBAAqB;AAAA,MAAA;AAAA,IACvD,CACA;AACG,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;"}
+{"version":3,"file":"AddIDPMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/AddIDPMutationResolver.ts"],"sourcesContent":["import { AddIdpResponse, MutationAddIdpArgs, MutationResolvers } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class AddIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync addIDP(parent: unknown, args: MutationAddIdpArgs, context: TenantResolverContext): Promise<AddIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_ADD,\n\t\t\tmessage: 'You are not allowed to add IDP',\n\t\t})\n\t\tconst result = await this.idpManager.addIDP(context.db, {\n\t\t\tconfiguration: args.configuration as any,\n\t\t\tslug: args.identityProvider,\n\t\t\ttype: args.type,\n\t\t\toptions: {\n\t\t\t\tautoSignUp: args.options?.autoSignUp ?? false,\n\t\t\t\texclusive: args.options?.exclusive ?? false,\n\t\t\t\tinitReturnsConfig: args.options?.initReturnsConfig ?? false,\n\t\t\t},\n\t\t})\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMO,MAAM,uBAAoD;AAAA,EAChE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,OAAO,QAAiB,MAA0B,SAAyD;AAChH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,WAAW,OAAO,QAAQ,IAAI;AAAA,MACvD,eAAe,KAAK;AAAA,MACpB,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,QACR,YAAY,KAAK,SAAS,cAAc;AAAA,QACxC,WAAW,KAAK,SAAS,aAAa;AAAA,QACtC,mBAAmB,KAAK,SAAS,qBAAqB;AAAA,MAAA;AAAA,IACvD,CACA;AACD,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;"}

package/dist/development/src/resolvers/mutation/idp/DisableIDPMutationResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const errorUtils = require("../../errorUtils.cjs");

package/dist/development/src/resolvers/mutation/idp/DisableIDPMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"DisableIDPMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/DisableIDPMutationResolver.ts"],"sourcesContent":["import { DisableIdpResponse, MutationDisableIdpArgs, MutationResolvers } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class DisableIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync disableIDP(parent: any, args: MutationDisableIdpArgs, context: TenantResolverContext): Promise<DisableIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_DISABLE,\n\t\t\tmessage: 'You are not allowed to disable IDP',\n\t\t})\n\t\tconst result = await this.idpManager.disableIDP(context.db, args.identityProvider)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;AAMO,MAAM,2BAAwD;AAAA,EACpE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAAA;AAAA,EAG7B,MAAM,WAAW,QAAa,MAA8B,SAA6D;AACxH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACK,UAAA,SAAS,MAAM,KAAK,WAAW,WAAW,QAAQ,IAAI,KAAK,gBAAgB;AAC7E,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;;"}
+{"version":3,"file":"DisableIDPMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/DisableIDPMutationResolver.ts"],"sourcesContent":["import { DisableIdpResponse, MutationDisableIdpArgs, MutationResolvers } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class DisableIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync disableIDP(parent: any, args: MutationDisableIdpArgs, context: TenantResolverContext): Promise<DisableIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_DISABLE,\n\t\t\tmessage: 'You are not allowed to disable IDP',\n\t\t})\n\t\tconst result = await this.idpManager.disableIDP(context.db, args.identityProvider)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,2BAAwD;AAAA,EACpE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,WAAW,QAAa,MAA8B,SAA6D;AACxH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,WAAW,WAAW,QAAQ,IAAI,KAAK,gBAAgB;AACjF,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;;"}

package/dist/development/src/resolvers/mutation/idp/DisableIDPMutationResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { createErrorResponse } from "../../errorUtils.js";

package/dist/development/src/resolvers/mutation/idp/DisableIDPMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"DisableIDPMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/DisableIDPMutationResolver.ts"],"sourcesContent":["import { DisableIdpResponse, MutationDisableIdpArgs, MutationResolvers } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class DisableIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync disableIDP(parent: any, args: MutationDisableIdpArgs, context: TenantResolverContext): Promise<DisableIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_DISABLE,\n\t\t\tmessage: 'You are not allowed to disable IDP',\n\t\t})\n\t\tconst result = await this.idpManager.disableIDP(context.db, args.identityProvider)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMO,MAAM,2BAAwD;AAAA,EACpE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAAA;AAAA,EAG7B,MAAM,WAAW,QAAa,MAA8B,SAA6D;AACxH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACK,UAAA,SAAS,MAAM,KAAK,WAAW,WAAW,QAAQ,IAAI,KAAK,gBAAgB;AAC7E,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;"}
+{"version":3,"file":"DisableIDPMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/DisableIDPMutationResolver.ts"],"sourcesContent":["import { DisableIdpResponse, MutationDisableIdpArgs, MutationResolvers } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class DisableIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync disableIDP(parent: any, args: MutationDisableIdpArgs, context: TenantResolverContext): Promise<DisableIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_DISABLE,\n\t\t\tmessage: 'You are not allowed to disable IDP',\n\t\t})\n\t\tconst result = await this.idpManager.disableIDP(context.db, args.identityProvider)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMO,MAAM,2BAAwD;AAAA,EACpE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,WAAW,QAAa,MAA8B,SAA6D;AACxH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,WAAW,WAAW,QAAQ,IAAI,KAAK,gBAAgB;AACjF,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;"}

package/dist/development/src/resolvers/mutation/idp/EnableIDPMutationResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const errorUtils = require("../../errorUtils.cjs");

package/dist/development/src/resolvers/mutation/idp/EnableIDPMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"EnableIDPMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/EnableIDPMutationResolver.ts"],"sourcesContent":["import { EnableIdpResponse, MutationEnableIdpArgs, MutationResolvers } from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class EnableIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync enableIDP(parent: any, args: MutationEnableIdpArgs, context: TenantResolverContext): Promise<EnableIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_ENABLE,\n\t\t\tmessage: 'You are not allowed to enable IDP',\n\t\t})\n\t\tconst result = await this.idpManager.enableIDP(context.db, args.identityProvider)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;AAOO,MAAM,0BAAuD;AAAA,EACnE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAAA;AAAA,EAG7B,MAAM,UAAU,QAAa,MAA6B,SAA4D;AACrH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACK,UAAA,SAAS,MAAM,KAAK,WAAW,UAAU,QAAQ,IAAI,KAAK,gBAAgB;AAC5E,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;;"}
+{"version":3,"file":"EnableIDPMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/EnableIDPMutationResolver.ts"],"sourcesContent":["import { EnableIdpResponse, MutationEnableIdpArgs, MutationResolvers } from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class EnableIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync enableIDP(parent: any, args: MutationEnableIdpArgs, context: TenantResolverContext): Promise<EnableIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_ENABLE,\n\t\t\tmessage: 'You are not allowed to enable IDP',\n\t\t})\n\t\tconst result = await this.idpManager.enableIDP(context.db, args.identityProvider)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAOO,MAAM,0BAAuD;AAAA,EACnE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,UAAU,QAAa,MAA6B,SAA4D;AACrH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,WAAW,UAAU,QAAQ,IAAI,KAAK,gBAAgB;AAChF,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;;"}

package/dist/development/src/resolvers/mutation/idp/EnableIDPMutationResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { createErrorResponse } from "../../errorUtils.js";

package/dist/development/src/resolvers/mutation/idp/EnableIDPMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"EnableIDPMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/EnableIDPMutationResolver.ts"],"sourcesContent":["import { EnableIdpResponse, MutationEnableIdpArgs, MutationResolvers } from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class EnableIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync enableIDP(parent: any, args: MutationEnableIdpArgs, context: TenantResolverContext): Promise<EnableIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_ENABLE,\n\t\t\tmessage: 'You are not allowed to enable IDP',\n\t\t})\n\t\tconst result = await this.idpManager.enableIDP(context.db, args.identityProvider)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAOO,MAAM,0BAAuD;AAAA,EACnE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAAA;AAAA,EAG7B,MAAM,UAAU,QAAa,MAA6B,SAA4D;AACrH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACK,UAAA,SAAS,MAAM,KAAK,WAAW,UAAU,QAAQ,IAAI,KAAK,gBAAgB;AAC5E,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;"}
+{"version":3,"file":"EnableIDPMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/EnableIDPMutationResolver.ts"],"sourcesContent":["import { EnableIdpResponse, MutationEnableIdpArgs, MutationResolvers } from '../../../schema'\nimport { GraphQLResolveInfo } from 'graphql'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class EnableIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync enableIDP(parent: any, args: MutationEnableIdpArgs, context: TenantResolverContext): Promise<EnableIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_ENABLE,\n\t\t\tmessage: 'You are not allowed to enable IDP',\n\t\t})\n\t\tconst result = await this.idpManager.enableIDP(context.db, args.identityProvider)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAOO,MAAM,0BAAuD;AAAA,EACnE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,UAAU,QAAa,MAA6B,SAA4D;AACrH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,WAAW,UAAU,QAAQ,IAAI,KAAK,gBAAgB;AAChF,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;"}

package/dist/development/src/resolvers/mutation/idp/UpdateIDPMutationResolver.cjs

@@ -15,6 +15,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const errorUtils = require("../../errorUtils.cjs");

package/dist/development/src/resolvers/mutation/idp/UpdateIDPMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateIDPMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/UpdateIDPMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateIdpArgs, UpdateIdpResponse } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class UpdateIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync updateIDP(parent: any, args: MutationUpdateIdpArgs, context: TenantResolverContext): Promise<UpdateIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_UPDATE,\n\t\t\tmessage: 'You are not allowed to update IDP',\n\t\t})\n\t\tconst result = await this.idpManager.updateIDP(context.db, args.identityProvider, {\n\t\t\tconfiguration: args.configuration,\n\t\t\ttype: args.type ?? undefined,\n\t\t\toptions: {\n\t\t\t\tautoSignUp: args.options?.autoSignUp ?? undefined,\n\t\t\t\texclusive: args.options?.exclusive ?? undefined,\n\t\t\t\tinitReturnsConfig: args.options?.initReturnsConfig ?? undefined,\n\t\t\t},\n\t\t}, args.mergeConfiguration ?? false)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;AAMO,MAAM,0BAAuD;AAAA,EACnE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAAA;AAAA,EAG7B,MAAM,UAAU,QAAa,MAA6B,SAA4D;AACrH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACK,UAAA,SAAS,MAAM,KAAK,WAAW,UAAU,QAAQ,IAAI,KAAK,kBAAkB;AAAA,MACjF,eAAe,KAAK;AAAA,MACpB,MAAM,KAAK,QAAQ;AAAA,MACnB,SAAS;AAAA,QACR,YAAY,KAAK,SAAS,cAAc;AAAA,QACxC,WAAW,KAAK,SAAS,aAAa;AAAA,QACtC,mBAAmB,KAAK,SAAS,qBAAqB;AAAA,MAAA;AAAA,IACvD,GACE,KAAK,sBAAsB,KAAK;AAC/B,QAAA,CAAC,OAAO,IAAI;AACf,aAAOC,WAAoB,oBAAA,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;;"}
+{"version":3,"file":"UpdateIDPMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/UpdateIDPMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateIdpArgs, UpdateIdpResponse } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class UpdateIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync updateIDP(parent: any, args: MutationUpdateIdpArgs, context: TenantResolverContext): Promise<UpdateIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_UPDATE,\n\t\t\tmessage: 'You are not allowed to update IDP',\n\t\t})\n\t\tconst result = await this.idpManager.updateIDP(context.db, args.identityProvider, {\n\t\t\tconfiguration: args.configuration as any,\n\t\t\ttype: args.type ?? undefined,\n\t\t\toptions: {\n\t\t\t\tautoSignUp: args.options?.autoSignUp ?? undefined,\n\t\t\t\texclusive: args.options?.exclusive ?? undefined,\n\t\t\t\tinitReturnsConfig: args.options?.initReturnsConfig ?? undefined,\n\t\t\t},\n\t\t}, args.mergeConfiguration ?? false)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":["PermissionActions","createErrorResponse"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAMO,MAAM,0BAAuD;AAAA,EACnE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,UAAU,QAAa,MAA6B,SAA4D;AACrH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQA,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,WAAW,UAAU,QAAQ,IAAI,KAAK,kBAAkB;AAAA,MACjF,eAAe,KAAK;AAAA,MACpB,MAAM,KAAK,QAAQ;AAAA,MACnB,SAAS;AAAA,QACR,YAAY,KAAK,SAAS,cAAc;AAAA,QACxC,WAAW,KAAK,SAAS,aAAa;AAAA,QACtC,mBAAmB,KAAK,SAAS,qBAAqB;AAAA,MAAA;AAAA,IACvD,GACE,KAAK,sBAAsB,KAAK;AACnC,QAAI,CAAC,OAAO,IAAI;AACf,aAAOC,WAAAA,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;;"}

package/dist/development/src/resolvers/mutation/idp/UpdateIDPMutationResolver.js

@@ -13,6 +13,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { createErrorResponse } from "../../errorUtils.js";

package/dist/development/src/resolvers/mutation/idp/UpdateIDPMutationResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateIDPMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/UpdateIDPMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateIdpArgs, UpdateIdpResponse } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class UpdateIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync updateIDP(parent: any, args: MutationUpdateIdpArgs, context: TenantResolverContext): Promise<UpdateIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_UPDATE,\n\t\t\tmessage: 'You are not allowed to update IDP',\n\t\t})\n\t\tconst result = await this.idpManager.updateIDP(context.db, args.identityProvider, {\n\t\t\tconfiguration: args.configuration,\n\t\t\ttype: args.type ?? undefined,\n\t\t\toptions: {\n\t\t\t\tautoSignUp: args.options?.autoSignUp ?? undefined,\n\t\t\t\texclusive: args.options?.exclusive ?? undefined,\n\t\t\t\tinitReturnsConfig: args.options?.initReturnsConfig ?? undefined,\n\t\t\t},\n\t\t}, args.mergeConfiguration ?? false)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMO,MAAM,0BAAuD;AAAA,EACnE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAAA;AAAA,EAG7B,MAAM,UAAU,QAAa,MAA6B,SAA4D;AACrH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACK,UAAA,SAAS,MAAM,KAAK,WAAW,UAAU,QAAQ,IAAI,KAAK,kBAAkB;AAAA,MACjF,eAAe,KAAK;AAAA,MACpB,MAAM,KAAK,QAAQ;AAAA,MACnB,SAAS;AAAA,QACR,YAAY,KAAK,SAAS,cAAc;AAAA,QACxC,WAAW,KAAK,SAAS,aAAa;AAAA,QACtC,mBAAmB,KAAK,SAAS,qBAAqB;AAAA,MAAA;AAAA,IACvD,GACE,KAAK,sBAAsB,KAAK;AAC/B,QAAA,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAAA;AAGtD,WAAA,EAAE,IAAI,KAAK;AAAA,EAAA;AAEpB;"}
+{"version":3,"file":"UpdateIDPMutationResolver.js","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/idp/UpdateIDPMutationResolver.ts"],"sourcesContent":["import { MutationResolvers, MutationUpdateIdpArgs, UpdateIdpResponse } from '../../../schema'\nimport { PermissionActions } from '../../../model'\nimport { IDPManager } from '../../../model/service/idp/IDPManager'\nimport { createErrorResponse } from '../../errorUtils'\nimport { TenantResolverContext } from '../../TenantResolverContext'\n\nexport class UpdateIDPMutationResolver implements MutationResolvers {\n\tconstructor(private readonly idpManager: IDPManager) {\n\t}\n\n\tasync updateIDP(parent: any, args: MutationUpdateIdpArgs, context: TenantResolverContext): Promise<UpdateIdpResponse> {\n\t\tawait context.requireAccess({\n\t\t\taction: PermissionActions.IDP_UPDATE,\n\t\t\tmessage: 'You are not allowed to update IDP',\n\t\t})\n\t\tconst result = await this.idpManager.updateIDP(context.db, args.identityProvider, {\n\t\t\tconfiguration: args.configuration as any,\n\t\t\ttype: args.type ?? undefined,\n\t\t\toptions: {\n\t\t\t\tautoSignUp: args.options?.autoSignUp ?? undefined,\n\t\t\t\texclusive: args.options?.exclusive ?? undefined,\n\t\t\t\tinitReturnsConfig: args.options?.initReturnsConfig ?? undefined,\n\t\t\t},\n\t\t}, args.mergeConfiguration ?? false)\n\t\tif (!result.ok) {\n\t\t\treturn createErrorResponse(result.error, result.errorMessage)\n\t\t}\n\n\t\treturn { ok: true }\n\t}\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAMO,MAAM,0BAAuD;AAAA,EACnE,YAA6B,YAAwB;AAAxB,SAAA,aAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,UAAU,QAAa,MAA6B,SAA4D;AACrH,UAAM,QAAQ,cAAc;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,UAAM,SAAS,MAAM,KAAK,WAAW,UAAU,QAAQ,IAAI,KAAK,kBAAkB;AAAA,MACjF,eAAe,KAAK;AAAA,MACpB,MAAM,KAAK,QAAQ;AAAA,MACnB,SAAS;AAAA,QACR,YAAY,KAAK,SAAS,cAAc;AAAA,QACxC,WAAW,KAAK,SAAS,aAAa;AAAA,QACtC,mBAAmB,KAAK,SAAS,qBAAqB;AAAA,MAAA;AAAA,IACvD,GACE,KAAK,sBAAsB,KAAK;AACnC,QAAI,CAAC,OAAO,IAAI;AACf,aAAO,oBAAoB,OAAO,OAAO,OAAO,YAAY;AAAA,IAC7D;AAEA,WAAO,EAAE,IAAI,KAAA;AAAA,EACd;AACD;"}

package/dist/development/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.cjs

@@ -17,6 +17,7 @@ require("openid-client");
 require("@contember/typesafe");
 require("../../../model/service/idp/providers/OIDCTypes.cjs");
 require("../../../model/service/idp/providers/FacebookProvider.cjs");
+require("../../../model/service/AuthLogService.cjs");
 require("@contember/schema-utils");
 require("otpauth");
 const errorUtils = require("../../errorUtils.cjs");

package/dist/development/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"MailTemplateMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.ts"],"sourcesContent":["import {\n\tAddMailTemplateResponse,\n\tMutationAddProjectMailTemplateArgs,\n\tMutationRemoveProjectMailTemplateArgs,\n\tMutationResolvers,\n\tRemoveMailTemplateResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MailTemplateManager, mailTypeFromSchemaToDb, PermissionActions, ProjectManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { validateEmail } from '../../../model/utils/email'\n\nexport class MailTemplateMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly mailTemplateManager: MailTemplateManager,\n\t) {}\n\n\tasync addMailTemplate(\n\t\tparent: any,\n\t\t{ template: { content, projectSlug, subject, type, useLayout, variant, replyTo } }: MutationAddProjectMailTemplateArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<AddMailTemplateResponse> {\n\t\tconst project = projectSlug ? await this.projectManager.getProjectBySlug(context.db, projectSlug) : null\n\t\tawait context.requireAccess({\n\t\t\tscope: project ? await context.permissionContext.createProjectScope(project) : undefined,\n\t\t\taction: PermissionActions.MAIL_TEMPLATE_ADD,\n\t\t\tmessage: 'You are not allowed to add a mail template',\n\t\t})\n\t\tif (projectSlug && !project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tif (replyTo && !validateEmail(replyTo)) {\n\t\t\treturn createErrorResponse('INVALID_REPLY_EMAIL_FORMAT', 'Reply-to email address is not in a valid format')\n\t\t}\n\n\t\tawait this.mailTemplateManager.addMailTemplate(context.db, {\n\t\t\tcontent,\n\t\t\tprojectId: project?.id ?? null,\n\t\t\tsubject,\n\t\t\tuseLayout: typeof useLayout === 'boolean' ? useLayout : true,\n\t\t\tvariant: variant || '',\n\t\t\ttype: mailTypeFromSchemaToDb(type),\n\t\t\treplyTo: replyTo?.trim() || null,\n\t\t})\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n\n\tasync removeMailTemplate(\n\t\tparent: any,\n\t\t{ templateIdentifier: { projectSlug, type, variant } }: MutationRemoveProjectMailTemplateArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveMailTemplateResponse> {\n\t\tconst project = projectSlug ? await this.projectManager.getProjectBySlug(context.db, projectSlug) : null\n\t\tawait context.requireAccess({\n\t\t\tscope: project ? await context.permissionContext.createProjectScope(project) : undefined,\n\t\t\taction: PermissionActions.MAIL_TEMPLATE_REMOVE,\n\t\t\tmessage: 'You are not allowed to remove a mail template',\n\t\t})\n\t\tif (projectSlug && !project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\n\t\tconst removed = await this.mailTemplateManager.removeMailTemplate(context.db, {\n\t\t\tprojectId: project?.id ?? null,\n\t\t\tvariant: variant || '',\n\t\t\ttype: mailTypeFromSchemaToDb(type),\n\t\t})\n\t\tif (!removed) {\n\t\t\treturn createErrorResponse('PROJECT_NOT_FOUND', 'Mail template not found')\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["type","PermissionActions","createProjectNotFoundResponse","validateEmail","createErrorResponse","mailTypeFromSchemaToDb"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAYO,MAAM,6BAA0D;AAAA,EACtE,YACkB,gBACA,qBAChB;AAFgB,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EAAA;AAAA,EAGlB,MAAM,gBACL,QACA,EAAE,UAAU,EAAE,SAAS,aAAa,SAASA,MAAAA,QAAM,WAAW,SAAS,QAAQ,EAAA,GAC/E,SACmC;AAC7B,UAAA,UAAU,cAAc,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW,IAAI;AACpG,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,UAAU,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO,IAAI;AAAA,MAC/E,QAAQC,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACG,QAAA,eAAe,CAAC,SAAS;AACrB,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAEtE,QAAI,WAAW,CAACC,oBAAc,OAAO,GAAG;AAChC,aAAAC,WAAA,oBAAoB,8BAA8B,iDAAiD;AAAA,IAAA;AAG3G,UAAM,KAAK,oBAAoB,gBAAgB,QAAQ,IAAI;AAAA,MAC1D;AAAA,MACA,WAAW,SAAS,MAAM;AAAA,MAC1B;AAAA,MACA,WAAW,OAAO,cAAc,YAAY,YAAY;AAAA,MACxD,SAAS,WAAW;AAAA,MACpB,MAAMC,4BAAuBL,MAAI;AAAA,MACjC,SAAS,SAAS,UAAU;AAAA,IAAA,CAC5B;AAEM,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAAA,EAGD,MAAM,mBACL,QACA,EAAE,oBAAoB,EAAE,aAAA,MAAaA,QAAM,UAAU,GACrD,SACsC;AAChC,UAAA,UAAU,cAAc,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW,IAAI;AACpG,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,UAAU,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO,IAAI;AAAA,MAC/E,QAAQC,kBAAkB,kBAAA;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACG,QAAA,eAAe,CAAC,SAAS;AACrB,aAAAC,WAAA,8BAA8B,qBAAqB,WAAW;AAAA,IAAA;AAGtE,UAAM,UAAU,MAAM,KAAK,oBAAoB,mBAAmB,QAAQ,IAAI;AAAA,MAC7E,WAAW,SAAS,MAAM;AAAA,MAC1B,SAAS,WAAW;AAAA,MACpB,MAAMG,4BAAuBL,MAAI;AAAA,IAAA,CACjC;AACD,QAAI,CAAC,SAAS;AACN,aAAAI,WAAA,oBAAoB,qBAAqB,yBAAyB;AAAA,IAAA;AAGnE,WAAA;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IACT;AAAA,EAAA;AAEF;;"}
+{"version":3,"file":"MailTemplateMutationResolver.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.ts"],"sourcesContent":["import {\n\tAddMailTemplateResponse,\n\tMutationAddProjectMailTemplateArgs,\n\tMutationRemoveProjectMailTemplateArgs,\n\tMutationResolvers,\n\tRemoveMailTemplateResponse,\n} from '../../../schema'\nimport { TenantResolverContext } from '../../TenantResolverContext'\nimport { MailTemplateManager, mailTypeFromSchemaToDb, PermissionActions, ProjectManager } from '../../../model'\nimport { createErrorResponse, createProjectNotFoundResponse } from '../../errorUtils'\nimport { validateEmail } from '../../../model/utils/email'\n\nexport class MailTemplateMutationResolver implements MutationResolvers {\n\tconstructor(\n\t\tprivate readonly projectManager: ProjectManager,\n\t\tprivate readonly mailTemplateManager: MailTemplateManager,\n\t) {}\n\n\tasync addMailTemplate(\n\t\tparent: any,\n\t\t{ template: { content, projectSlug, subject, type, useLayout, variant, replyTo } }: MutationAddProjectMailTemplateArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<AddMailTemplateResponse> {\n\t\tconst project = projectSlug ? await this.projectManager.getProjectBySlug(context.db, projectSlug) : null\n\t\tawait context.requireAccess({\n\t\t\tscope: project ? await context.permissionContext.createProjectScope(project) : undefined,\n\t\t\taction: PermissionActions.MAIL_TEMPLATE_ADD,\n\t\t\tmessage: 'You are not allowed to add a mail template',\n\t\t})\n\t\tif (projectSlug && !project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\t\tif (replyTo && !validateEmail(replyTo)) {\n\t\t\treturn createErrorResponse('INVALID_REPLY_EMAIL_FORMAT', 'Reply-to email address is not in a valid format')\n\t\t}\n\n\t\tawait this.mailTemplateManager.addMailTemplate(context.db, {\n\t\t\tcontent,\n\t\t\tprojectId: project?.id ?? null,\n\t\t\tsubject,\n\t\t\tuseLayout: typeof useLayout === 'boolean' ? useLayout : true,\n\t\t\tvariant: variant || '',\n\t\t\ttype: mailTypeFromSchemaToDb(type),\n\t\t\treplyTo: replyTo?.trim() || null,\n\t\t})\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n\n\tasync removeMailTemplate(\n\t\tparent: any,\n\t\t{ templateIdentifier: { projectSlug, type, variant } }: MutationRemoveProjectMailTemplateArgs,\n\t\tcontext: TenantResolverContext,\n\t): Promise<RemoveMailTemplateResponse> {\n\t\tconst project = projectSlug ? await this.projectManager.getProjectBySlug(context.db, projectSlug) : null\n\t\tawait context.requireAccess({\n\t\t\tscope: project ? await context.permissionContext.createProjectScope(project) : undefined,\n\t\t\taction: PermissionActions.MAIL_TEMPLATE_REMOVE,\n\t\t\tmessage: 'You are not allowed to remove a mail template',\n\t\t})\n\t\tif (projectSlug && !project) {\n\t\t\treturn createProjectNotFoundResponse('PROJECT_NOT_FOUND', projectSlug)\n\t\t}\n\n\t\tconst removed = await this.mailTemplateManager.removeMailTemplate(context.db, {\n\t\t\tprojectId: project?.id ?? null,\n\t\t\tvariant: variant || '',\n\t\t\ttype: mailTypeFromSchemaToDb(type),\n\t\t})\n\t\tif (!removed) {\n\t\t\treturn createErrorResponse('PROJECT_NOT_FOUND', 'Mail template not found')\n\t\t}\n\n\t\treturn {\n\t\t\tok: true,\n\t\t\terrors: [],\n\t\t}\n\t}\n}\n"],"names":["type","PermissionActions","createProjectNotFoundResponse","validateEmail","createErrorResponse","mailTypeFromSchemaToDb"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAYO,MAAM,6BAA0D;AAAA,EACtE,YACkB,gBACA,qBAChB;AAFgB,SAAA,iBAAA;AACA,SAAA,sBAAA;AAAA,EACf;AAAA,EAEH,MAAM,gBACL,QACA,EAAE,UAAU,EAAE,SAAS,aAAa,SAAA,MAASA,QAAM,WAAW,SAAS,QAAA,EAAQ,GAC/E,SACmC;AACnC,UAAM,UAAU,cAAc,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW,IAAI;AACpG,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,UAAU,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO,IAAI;AAAA,MAC/E,QAAQC,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,eAAe,CAAC,SAAS;AAC5B,aAAOC,WAAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AACA,QAAI,WAAW,CAACC,oBAAc,OAAO,GAAG;AACvC,aAAOC,WAAAA,oBAAoB,8BAA8B,iDAAiD;AAAA,IAC3G;AAEA,UAAM,KAAK,oBAAoB,gBAAgB,QAAQ,IAAI;AAAA,MAC1D;AAAA,MACA,WAAW,SAAS,MAAM;AAAA,MAC1B;AAAA,MACA,WAAW,OAAO,cAAc,YAAY,YAAY;AAAA,MACxD,SAAS,WAAW;AAAA,MACpB,MAAMC,KAAAA,uBAAuBL,MAAI;AAAA,MACjC,SAAS,SAAS,UAAU;AAAA,IAAA,CAC5B;AAED,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AAAA,EAEA,MAAM,mBACL,QACA,EAAE,oBAAoB,EAAE,aAAA,MAAaA,QAAM,UAAQ,GACnD,SACsC;AACtC,UAAM,UAAU,cAAc,MAAM,KAAK,eAAe,iBAAiB,QAAQ,IAAI,WAAW,IAAI;AACpG,UAAM,QAAQ,cAAc;AAAA,MAC3B,OAAO,UAAU,MAAM,QAAQ,kBAAkB,mBAAmB,OAAO,IAAI;AAAA,MAC/E,QAAQC,kBAAAA,kBAAkB;AAAA,MAC1B,SAAS;AAAA,IAAA,CACT;AACD,QAAI,eAAe,CAAC,SAAS;AAC5B,aAAOC,WAAAA,8BAA8B,qBAAqB,WAAW;AAAA,IACtE;AAEA,UAAM,UAAU,MAAM,KAAK,oBAAoB,mBAAmB,QAAQ,IAAI;AAAA,MAC7E,WAAW,SAAS,MAAM;AAAA,MAC1B,SAAS,WAAW;AAAA,MACpB,MAAMG,KAAAA,uBAAuBL,MAAI;AAAA,IAAA,CACjC;AACD,QAAI,CAAC,SAAS;AACb,aAAOI,WAAAA,oBAAoB,qBAAqB,yBAAyB;AAAA,IAC1E;AAEA,WAAO;AAAA,MACN,IAAI;AAAA,MACJ,QAAQ,CAAA;AAAA,IAAC;AAAA,EAEX;AACD;;"}

package/dist/development/src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.js

@@ -15,6 +15,7 @@ import "openid-client";
 import "@contember/typesafe";
 import "../../../model/service/idp/providers/OIDCTypes.js";
 import "../../../model/service/idp/providers/FacebookProvider.js";
+import "../../../model/service/AuthLogService.js";
 import "@contember/schema-utils";
 import "otpauth";
 import { createProjectNotFoundResponse, createErrorResponse } from "../../errorUtils.js";