@contember/engine-tenant-api 2.1.0-beta.1 → 2.2.0-alpha.1

package/dist/development/src/model/queries/apiKey/ApiKeySessionsQuery.js

@@ -0,0 +1,21 @@
+import { DatabaseQuery, SelectBuilder, Operator } from "@contember/database";
+import { ApiKey } from "../../type/ApiKey.js";
+class ApiKeySessionsByIdentityQuery extends DatabaseQuery {
+  constructor(identityId, options) {
+    super();
+    this.identityId = identityId;
+    this.options = options;
+  }
+  async fetch({ db }) {
+    const rows = await SelectBuilder.create().select(["api_key", "id"]).select(["api_key", "created_at"]).select(["api_key", "expires_at"]).select(["api_key", "last_used_at"]).select(["api_key", "last_ip"]).select(["api_key", "last_user_agent"]).select(["api_key", "created_ip"]).select(["api_key", "created_user_agent"]).select(["api_key", "trust_forwarded_info"]).from("api_key").where((it) => it.compare(["api_key", "identity_id"], Operator.eq, this.identityId)).where((it) => it.compare(["api_key", "type"], Operator.eq, ApiKey.Type.SESSION)).where((it) => it.isNull(["api_key", "disabled_at"])).where(
+      (it) => it.or(
+        (or) => or.isNull(["api_key", "expires_at"]).compare(["api_key", "expires_at"], Operator.gt, this.options.now)
+      )
+    ).orderBy(["api_key", "created_at"], "desc").getResult(db);
+    return rows;
+  }
+}
+export {
+  ApiKeySessionsByIdentityQuery
+};
+//# sourceMappingURL=ApiKeySessionsQuery.js.map

package/dist/development/src/model/queries/apiKey/ApiKeySessionsQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeySessionsQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/apiKey/ApiKeySessionsQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator, SelectBuilder } from '@contember/database'\nimport { ApiKey } from '../../type/index.js'\n\nexport type ApiKeySessionRow = {\n\treadonly id: string\n\treadonly created_at: Date\n\treadonly expires_at: Date | null\n\treadonly last_used_at: Date | null\n\treadonly last_ip: string | null\n\treadonly last_user_agent: string | null\n\treadonly created_ip: string | null\n\treadonly created_user_agent: string | null\n\treadonly trust_forwarded_info: boolean\n}\n\nexport class ApiKeySessionsByIdentityQuery extends DatabaseQuery<readonly ApiKeySessionRow[]> {\n\tconstructor(\n\t\tprivate readonly identityId: string,\n\t\tprivate readonly options: { now: Date },\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<readonly ApiKeySessionRow[]> {\n\t\tconst rows = await SelectBuilder.create<ApiKeySessionRow>()\n\t\t\t.select(['api_key', 'id'])\n\t\t\t.select(['api_key', 'created_at'])\n\t\t\t.select(['api_key', 'expires_at'])\n\t\t\t.select(['api_key', 'last_used_at'])\n\t\t\t.select(['api_key', 'last_ip'])\n\t\t\t.select(['api_key', 'last_user_agent'])\n\t\t\t.select(['api_key', 'created_ip'])\n\t\t\t.select(['api_key', 'created_user_agent'])\n\t\t\t.select(['api_key', 'trust_forwarded_info'])\n\t\t\t.from('api_key')\n\t\t\t.where(it => it.compare(['api_key', 'identity_id'], Operator.eq, this.identityId))\n\t\t\t.where(it => it.compare(['api_key', 'type'], Operator.eq, ApiKey.Type.SESSION))\n\t\t\t.where(it => it.isNull(['api_key', 'disabled_at']))\n\t\t\t.where(it =>\n\t\t\t\tit.or(or =>\n\t\t\t\t\tor.isNull(['api_key', 'expires_at'])\n\t\t\t\t\t\t.compare(['api_key', 'expires_at'], Operator.gt, this.options.now)\n\t\t\t\t)\n\t\t\t)\n\t\t\t.orderBy(['api_key', 'created_at'], 'desc')\n\t\t\t.getResult(db)\n\n\t\treturn rows\n\t}\n}\n"],"names":[],"mappings":";;AAeO,MAAM,sCAAsC,cAA2C;AAAA,EAC7F,YACkB,YACA,SAChB;AACD,UAAA;AAHiB,SAAA,aAAA;AACA,SAAA,UAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA+D;AAC5E,UAAM,OAAO,MAAM,cAAc,OAAA,EAC/B,OAAO,CAAC,WAAW,IAAI,CAAC,EACxB,OAAO,CAAC,WAAW,YAAY,CAAC,EAChC,OAAO,CAAC,WAAW,YAAY,CAAC,EAChC,OAAO,CAAC,WAAW,cAAc,CAAC,EAClC,OAAO,CAAC,WAAW,SAAS,CAAC,EAC7B,OAAO,CAAC,WAAW,iBAAiB,CAAC,EACrC,OAAO,CAAC,WAAW,YAAY,CAAC,EAChC,OAAO,CAAC,WAAW,oBAAoB,CAAC,EACxC,OAAO,CAAC,WAAW,sBAAsB,CAAC,EAC1C,KAAK,SAAS,EACd,MAAM,QAAM,GAAG,QAAQ,CAAC,WAAW,aAAa,GAAG,SAAS,IAAI,KAAK,UAAU,CAAC,EAChF,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,WAAW,MAAM,GAAG,SAAS,IAAI,OAAO,KAAK,OAAO,CAAC,EAC7E,MAAM,QAAM,GAAG,OAAO,CAAC,WAAW,aAAa,CAAC,CAAC,EACjD;AAAA,MAAM,QACN,GAAG;AAAA,QAAG,QACL,GAAG,OAAO,CAAC,WAAW,YAAY,CAAC,EACjC,QAAQ,CAAC,WAAW,YAAY,GAAG,SAAS,IAAI,KAAK,QAAQ,GAAG;AAAA,MAAA;AAAA,IACnE,EAEA,QAAQ,CAAC,WAAW,YAAY,GAAG,MAAM,EACzC,UAAU,EAAE;AAEd,WAAO;AAAA,EACR;AACD;"}

package/dist/development/src/model/queries/authLog/AuthLogQuery.cjs

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+const HARD_LIMIT = 500;
+const DEFAULT_LIMIT = 100;
+class AuthLogQuery extends Database.DatabaseQuery {
+  constructor(filter, pagination) {
+    super();
+    this.filter = filter;
+    this.pagination = pagination;
+  }
+  async fetch({ db }) {
+    const limit = Math.min(this.pagination.limit ?? DEFAULT_LIMIT, HARD_LIMIT);
+    const offset = Math.max(this.pagination.offset ?? 0, 0);
+    let qb = Database.SelectBuilder.create().select(["person_auth_log", "id"]).select(["person_auth_log", "created_at"]).select(["person_auth_log", "type"]).select(["person_auth_log", "success"]).select(["person_auth_log", "invoked_by_id"]).select(["person_auth_log", "person_id"]).select(["person_auth_log", "target_person_id"]).select(["person_auth_log", "person_input_identifier"]).select(["person_auth_log", "error_code"]).select(["person_auth_log", "error_message"]).select(["person_auth_log", "ip_address"]).select(["person_auth_log", "user_agent"]).select(["person_auth_log", "identity_provider_id"]).select(["person_auth_log", "metadata"]).select(["person_auth_log", "event_data"]).from("person_auth_log").orderBy(["person_auth_log", "created_at"], "desc").orderBy(["person_auth_log", "id"], "desc").limit(limit + 1, offset);
+    const filter = this.filter;
+    if (filter.types && filter.types.length > 0) {
+      qb = qb.where((it) => it.in(["person_auth_log", "type"], filter.types));
+    }
+    if (filter.success !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "success"], Database.Operator.eq, filter.success));
+    }
+    if (filter.invokedByIdentityId !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "invoked_by_id"], Database.Operator.eq, filter.invokedByIdentityId));
+    }
+    if (filter.personId !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "person_id"], Database.Operator.eq, filter.personId));
+    }
+    if (filter.targetPersonId !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "target_person_id"], Database.Operator.eq, filter.targetPersonId));
+    }
+    if (filter.personInputIdentifier !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "person_input_identifier"], Database.Operator.eq, filter.personInputIdentifier));
+    }
+    if (filter.createdAfter !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "created_at"], Database.Operator.gte, filter.createdAfter));
+    }
+    if (filter.createdBefore !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "created_at"], Database.Operator.lt, filter.createdBefore));
+    }
+    return await qb.getResult(db);
+  }
+  static get hardLimit() {
+    return HARD_LIMIT;
+  }
+  static get defaultLimit() {
+    return DEFAULT_LIMIT;
+  }
+}
+exports.AuthLogQuery = AuthLogQuery;
+//# sourceMappingURL=AuthLogQuery.cjs.map

package/dist/development/src/model/queries/authLog/AuthLogQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthLogQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/authLog/AuthLogQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator, SelectBuilder } from '@contember/database'\nimport { JSONValue } from '@contember/schema'\nimport { AuthActionType } from '../../type/AuthLog.js'\n\nexport type AuthLogEntryRow = {\n\treadonly id: string\n\treadonly created_at: Date\n\treadonly type: AuthActionType\n\treadonly success: boolean\n\treadonly invoked_by_id: string | null\n\treadonly person_id: string | null\n\treadonly target_person_id: string | null\n\treadonly person_input_identifier: string | null\n\treadonly error_code: string | null\n\treadonly error_message: string | null\n\treadonly ip_address: string | null\n\treadonly user_agent: string | null\n\treadonly identity_provider_id: string | null\n\treadonly metadata: JSONValue | null\n\treadonly event_data: JSONValue | null\n}\n\nexport type AuthLogFilter = {\n\treadonly types?: readonly AuthActionType[]\n\treadonly success?: boolean\n\treadonly invokedByIdentityId?: string\n\treadonly personId?: string\n\treadonly targetPersonId?: string\n\treadonly personInputIdentifier?: string\n\treadonly createdAfter?: Date\n\treadonly createdBefore?: Date\n}\n\nconst HARD_LIMIT = 500\nconst DEFAULT_LIMIT = 100\n\n/**\n * Reads `person_auth_log`. Returns one row beyond the requested limit when\n * available so the resolver can set `hasMore` without a separate COUNT(*).\n * Caller (resolver) is responsible for permission gating — this query does\n * not enforce any visibility rules.\n */\nexport class AuthLogQuery extends DatabaseQuery<readonly AuthLogEntryRow[]> {\n\tconstructor(\n\t\tprivate readonly filter: AuthLogFilter,\n\t\tprivate readonly pagination: { limit?: number; offset?: number },\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<readonly AuthLogEntryRow[]> {\n\t\tconst limit = Math.min(this.pagination.limit ?? DEFAULT_LIMIT, HARD_LIMIT)\n\t\tconst offset = Math.max(this.pagination.offset ?? 0, 0)\n\n\t\tlet qb = SelectBuilder.create<AuthLogEntryRow>()\n\t\t\t.select(['person_auth_log', 'id'])\n\t\t\t.select(['person_auth_log', 'created_at'])\n\t\t\t.select(['person_auth_log', 'type'])\n\t\t\t.select(['person_auth_log', 'success'])\n\t\t\t.select(['person_auth_log', 'invoked_by_id'])\n\t\t\t.select(['person_auth_log', 'person_id'])\n\t\t\t.select(['person_auth_log', 'target_person_id'])\n\t\t\t.select(['person_auth_log', 'person_input_identifier'])\n\t\t\t.select(['person_auth_log', 'error_code'])\n\t\t\t.select(['person_auth_log', 'error_message'])\n\t\t\t.select(['person_auth_log', 'ip_address'])\n\t\t\t.select(['person_auth_log', 'user_agent'])\n\t\t\t.select(['person_auth_log', 'identity_provider_id'])\n\t\t\t.select(['person_auth_log', 'metadata'])\n\t\t\t.select(['person_auth_log', 'event_data'])\n\t\t\t.from('person_auth_log')\n\t\t\t.orderBy(['person_auth_log', 'created_at'], 'desc')\n\t\t\t.orderBy(['person_auth_log', 'id'], 'desc')\n\t\t\t.limit(limit + 1, offset)\n\n\t\tconst filter = this.filter\n\t\tif (filter.types && filter.types.length > 0) {\n\t\t\tqb = qb.where(it => it.in(['person_auth_log', 'type'], filter.types as string[]))\n\t\t}\n\t\tif (filter.success !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'success'], Operator.eq, filter.success!))\n\t\t}\n\t\tif (filter.invokedByIdentityId !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'invoked_by_id'], Operator.eq, filter.invokedByIdentityId!))\n\t\t}\n\t\tif (filter.personId !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'person_id'], Operator.eq, filter.personId!))\n\t\t}\n\t\tif (filter.targetPersonId !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'target_person_id'], Operator.eq, filter.targetPersonId!))\n\t\t}\n\t\tif (filter.personInputIdentifier !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'person_input_identifier'], Operator.eq, filter.personInputIdentifier!))\n\t\t}\n\t\tif (filter.createdAfter !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'created_at'], Operator.gte, filter.createdAfter!))\n\t\t}\n\t\tif (filter.createdBefore !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'created_at'], Operator.lt, filter.createdBefore!))\n\t\t}\n\n\t\treturn await qb.getResult(db)\n\t}\n\n\tstatic get hardLimit(): number {\n\t\treturn HARD_LIMIT\n\t}\n\n\tstatic get defaultLimit(): number {\n\t\treturn DEFAULT_LIMIT\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder","Operator"],"mappings":";;;AAiCA,MAAM,aAAa;AACnB,MAAM,gBAAgB;AAQf,MAAM,qBAAqBA,SAAAA,cAA0C;AAAA,EAC3E,YACkB,QACA,YAChB;AACD,UAAA;AAHiB,SAAA,SAAA;AACA,SAAA,aAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA8D;AAC3E,UAAM,QAAQ,KAAK,IAAI,KAAK,WAAW,SAAS,eAAe,UAAU;AACzE,UAAM,SAAS,KAAK,IAAI,KAAK,WAAW,UAAU,GAAG,CAAC;AAEtD,QAAI,KAAKC,uBAAc,SACrB,OAAO,CAAC,mBAAmB,IAAI,CAAC,EAChC,OAAO,CAAC,mBAAmB,YAAY,CAAC,EACxC,OAAO,CAAC,mBAAmB,MAAM,CAAC,EAClC,OAAO,CAAC,mBAAmB,SAAS,CAAC,EACrC,OAAO,CAAC,mBAAmB,eAAe,CAAC,EAC3C,OAAO,CAAC,mBAAmB,WAAW,CAAC,EACvC,OAAO,CAAC,mBAAmB,kBAAkB,CAAC,EAC9C,OAAO,CAAC,mBAAmB,yBAAyB,CAAC,EACrD,OAAO,CAAC,mBAAmB,YAAY,CAAC,EACxC,OAAO,CAAC,mBAAmB,eAAe,CAAC,EAC3C,OAAO,CAAC,mBAAmB,YAAY,CAAC,EACxC,OAAO,CAAC,mBAAmB,YAAY,CAAC,EACxC,OAAO,CAAC,mBAAmB,sBAAsB,CAAC,EAClD,OAAO,CAAC,mBAAmB,UAAU,CAAC,EACtC,OAAO,CAAC,mBAAmB,YAAY,CAAC,EACxC,KAAK,iBAAiB,EACtB,QAAQ,CAAC,mBAAmB,YAAY,GAAG,MAAM,EACjD,QAAQ,CAAC,mBAAmB,IAAI,GAAG,MAAM,EACzC,MAAM,QAAQ,GAAG,MAAM;AAEzB,UAAM,SAAS,KAAK;AACpB,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AAC5C,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,mBAAmB,MAAM,GAAG,OAAO,KAAiB,CAAC;AAAA,IACjF;AACA,QAAI,OAAO,YAAY,QAAW;AACjC,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,SAAS,GAAGC,SAAAA,SAAS,IAAI,OAAO,OAAQ,CAAC;AAAA,IAC7F;AACA,QAAI,OAAO,wBAAwB,QAAW;AAC7C,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,eAAe,GAAGA,SAAAA,SAAS,IAAI,OAAO,mBAAoB,CAAC;AAAA,IAC/G;AACA,QAAI,OAAO,aAAa,QAAW;AAClC,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,WAAW,GAAGA,SAAAA,SAAS,IAAI,OAAO,QAAS,CAAC;AAAA,IAChG;AACA,QAAI,OAAO,mBAAmB,QAAW;AACxC,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,kBAAkB,GAAGA,SAAAA,SAAS,IAAI,OAAO,cAAe,CAAC;AAAA,IAC7G;AACA,QAAI,OAAO,0BAA0B,QAAW;AAC/C,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,yBAAyB,GAAGA,SAAAA,SAAS,IAAI,OAAO,qBAAsB,CAAC;AAAA,IAC3H;AACA,QAAI,OAAO,iBAAiB,QAAW;AACtC,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,YAAY,GAAGA,SAAAA,SAAS,KAAK,OAAO,YAAa,CAAC;AAAA,IACtG;AACA,QAAI,OAAO,kBAAkB,QAAW;AACvC,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,YAAY,GAAGA,SAAAA,SAAS,IAAI,OAAO,aAAc,CAAC;AAAA,IACtG;AAEA,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AAAA,EAEA,WAAW,YAAoB;AAC9B,WAAO;AAAA,EACR;AAAA,EAEA,WAAW,eAAuB;AACjC,WAAO;AAAA,EACR;AACD;;"}

package/dist/development/src/model/queries/authLog/AuthLogQuery.js

@@ -0,0 +1,51 @@
+import { DatabaseQuery, SelectBuilder, Operator } from "@contember/database";
+const HARD_LIMIT = 500;
+const DEFAULT_LIMIT = 100;
+class AuthLogQuery extends DatabaseQuery {
+  constructor(filter, pagination) {
+    super();
+    this.filter = filter;
+    this.pagination = pagination;
+  }
+  async fetch({ db }) {
+    const limit = Math.min(this.pagination.limit ?? DEFAULT_LIMIT, HARD_LIMIT);
+    const offset = Math.max(this.pagination.offset ?? 0, 0);
+    let qb = SelectBuilder.create().select(["person_auth_log", "id"]).select(["person_auth_log", "created_at"]).select(["person_auth_log", "type"]).select(["person_auth_log", "success"]).select(["person_auth_log", "invoked_by_id"]).select(["person_auth_log", "person_id"]).select(["person_auth_log", "target_person_id"]).select(["person_auth_log", "person_input_identifier"]).select(["person_auth_log", "error_code"]).select(["person_auth_log", "error_message"]).select(["person_auth_log", "ip_address"]).select(["person_auth_log", "user_agent"]).select(["person_auth_log", "identity_provider_id"]).select(["person_auth_log", "metadata"]).select(["person_auth_log", "event_data"]).from("person_auth_log").orderBy(["person_auth_log", "created_at"], "desc").orderBy(["person_auth_log", "id"], "desc").limit(limit + 1, offset);
+    const filter = this.filter;
+    if (filter.types && filter.types.length > 0) {
+      qb = qb.where((it) => it.in(["person_auth_log", "type"], filter.types));
+    }
+    if (filter.success !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "success"], Operator.eq, filter.success));
+    }
+    if (filter.invokedByIdentityId !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "invoked_by_id"], Operator.eq, filter.invokedByIdentityId));
+    }
+    if (filter.personId !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "person_id"], Operator.eq, filter.personId));
+    }
+    if (filter.targetPersonId !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "target_person_id"], Operator.eq, filter.targetPersonId));
+    }
+    if (filter.personInputIdentifier !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "person_input_identifier"], Operator.eq, filter.personInputIdentifier));
+    }
+    if (filter.createdAfter !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "created_at"], Operator.gte, filter.createdAfter));
+    }
+    if (filter.createdBefore !== void 0) {
+      qb = qb.where((it) => it.compare(["person_auth_log", "created_at"], Operator.lt, filter.createdBefore));
+    }
+    return await qb.getResult(db);
+  }
+  static get hardLimit() {
+    return HARD_LIMIT;
+  }
+  static get defaultLimit() {
+    return DEFAULT_LIMIT;
+  }
+}
+export {
+  AuthLogQuery
+};
+//# sourceMappingURL=AuthLogQuery.js.map

package/dist/development/src/model/queries/authLog/AuthLogQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthLogQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/authLog/AuthLogQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator, SelectBuilder } from '@contember/database'\nimport { JSONValue } from '@contember/schema'\nimport { AuthActionType } from '../../type/AuthLog.js'\n\nexport type AuthLogEntryRow = {\n\treadonly id: string\n\treadonly created_at: Date\n\treadonly type: AuthActionType\n\treadonly success: boolean\n\treadonly invoked_by_id: string | null\n\treadonly person_id: string | null\n\treadonly target_person_id: string | null\n\treadonly person_input_identifier: string | null\n\treadonly error_code: string | null\n\treadonly error_message: string | null\n\treadonly ip_address: string | null\n\treadonly user_agent: string | null\n\treadonly identity_provider_id: string | null\n\treadonly metadata: JSONValue | null\n\treadonly event_data: JSONValue | null\n}\n\nexport type AuthLogFilter = {\n\treadonly types?: readonly AuthActionType[]\n\treadonly success?: boolean\n\treadonly invokedByIdentityId?: string\n\treadonly personId?: string\n\treadonly targetPersonId?: string\n\treadonly personInputIdentifier?: string\n\treadonly createdAfter?: Date\n\treadonly createdBefore?: Date\n}\n\nconst HARD_LIMIT = 500\nconst DEFAULT_LIMIT = 100\n\n/**\n * Reads `person_auth_log`. Returns one row beyond the requested limit when\n * available so the resolver can set `hasMore` without a separate COUNT(*).\n * Caller (resolver) is responsible for permission gating — this query does\n * not enforce any visibility rules.\n */\nexport class AuthLogQuery extends DatabaseQuery<readonly AuthLogEntryRow[]> {\n\tconstructor(\n\t\tprivate readonly filter: AuthLogFilter,\n\t\tprivate readonly pagination: { limit?: number; offset?: number },\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<readonly AuthLogEntryRow[]> {\n\t\tconst limit = Math.min(this.pagination.limit ?? DEFAULT_LIMIT, HARD_LIMIT)\n\t\tconst offset = Math.max(this.pagination.offset ?? 0, 0)\n\n\t\tlet qb = SelectBuilder.create<AuthLogEntryRow>()\n\t\t\t.select(['person_auth_log', 'id'])\n\t\t\t.select(['person_auth_log', 'created_at'])\n\t\t\t.select(['person_auth_log', 'type'])\n\t\t\t.select(['person_auth_log', 'success'])\n\t\t\t.select(['person_auth_log', 'invoked_by_id'])\n\t\t\t.select(['person_auth_log', 'person_id'])\n\t\t\t.select(['person_auth_log', 'target_person_id'])\n\t\t\t.select(['person_auth_log', 'person_input_identifier'])\n\t\t\t.select(['person_auth_log', 'error_code'])\n\t\t\t.select(['person_auth_log', 'error_message'])\n\t\t\t.select(['person_auth_log', 'ip_address'])\n\t\t\t.select(['person_auth_log', 'user_agent'])\n\t\t\t.select(['person_auth_log', 'identity_provider_id'])\n\t\t\t.select(['person_auth_log', 'metadata'])\n\t\t\t.select(['person_auth_log', 'event_data'])\n\t\t\t.from('person_auth_log')\n\t\t\t.orderBy(['person_auth_log', 'created_at'], 'desc')\n\t\t\t.orderBy(['person_auth_log', 'id'], 'desc')\n\t\t\t.limit(limit + 1, offset)\n\n\t\tconst filter = this.filter\n\t\tif (filter.types && filter.types.length > 0) {\n\t\t\tqb = qb.where(it => it.in(['person_auth_log', 'type'], filter.types as string[]))\n\t\t}\n\t\tif (filter.success !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'success'], Operator.eq, filter.success!))\n\t\t}\n\t\tif (filter.invokedByIdentityId !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'invoked_by_id'], Operator.eq, filter.invokedByIdentityId!))\n\t\t}\n\t\tif (filter.personId !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'person_id'], Operator.eq, filter.personId!))\n\t\t}\n\t\tif (filter.targetPersonId !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'target_person_id'], Operator.eq, filter.targetPersonId!))\n\t\t}\n\t\tif (filter.personInputIdentifier !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'person_input_identifier'], Operator.eq, filter.personInputIdentifier!))\n\t\t}\n\t\tif (filter.createdAfter !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'created_at'], Operator.gte, filter.createdAfter!))\n\t\t}\n\t\tif (filter.createdBefore !== undefined) {\n\t\t\tqb = qb.where(it => it.compare(['person_auth_log', 'created_at'], Operator.lt, filter.createdBefore!))\n\t\t}\n\n\t\treturn await qb.getResult(db)\n\t}\n\n\tstatic get hardLimit(): number {\n\t\treturn HARD_LIMIT\n\t}\n\n\tstatic get defaultLimit(): number {\n\t\treturn DEFAULT_LIMIT\n\t}\n}\n"],"names":[],"mappings":";AAiCA,MAAM,aAAa;AACnB,MAAM,gBAAgB;AAQf,MAAM,qBAAqB,cAA0C;AAAA,EAC3E,YACkB,QACA,YAChB;AACD,UAAA;AAHiB,SAAA,SAAA;AACA,SAAA,aAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA8D;AAC3E,UAAM,QAAQ,KAAK,IAAI,KAAK,WAAW,SAAS,eAAe,UAAU;AACzE,UAAM,SAAS,KAAK,IAAI,KAAK,WAAW,UAAU,GAAG,CAAC;AAEtD,QAAI,KAAK,cAAc,SACrB,OAAO,CAAC,mBAAmB,IAAI,CAAC,EAChC,OAAO,CAAC,mBAAmB,YAAY,CAAC,EACxC,OAAO,CAAC,mBAAmB,MAAM,CAAC,EAClC,OAAO,CAAC,mBAAmB,SAAS,CAAC,EACrC,OAAO,CAAC,mBAAmB,eAAe,CAAC,EAC3C,OAAO,CAAC,mBAAmB,WAAW,CAAC,EACvC,OAAO,CAAC,mBAAmB,kBAAkB,CAAC,EAC9C,OAAO,CAAC,mBAAmB,yBAAyB,CAAC,EACrD,OAAO,CAAC,mBAAmB,YAAY,CAAC,EACxC,OAAO,CAAC,mBAAmB,eAAe,CAAC,EAC3C,OAAO,CAAC,mBAAmB,YAAY,CAAC,EACxC,OAAO,CAAC,mBAAmB,YAAY,CAAC,EACxC,OAAO,CAAC,mBAAmB,sBAAsB,CAAC,EAClD,OAAO,CAAC,mBAAmB,UAAU,CAAC,EACtC,OAAO,CAAC,mBAAmB,YAAY,CAAC,EACxC,KAAK,iBAAiB,EACtB,QAAQ,CAAC,mBAAmB,YAAY,GAAG,MAAM,EACjD,QAAQ,CAAC,mBAAmB,IAAI,GAAG,MAAM,EACzC,MAAM,QAAQ,GAAG,MAAM;AAEzB,UAAM,SAAS,KAAK;AACpB,QAAI,OAAO,SAAS,OAAO,MAAM,SAAS,GAAG;AAC5C,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,GAAG,CAAC,mBAAmB,MAAM,GAAG,OAAO,KAAiB,CAAC;AAAA,IACjF;AACA,QAAI,OAAO,YAAY,QAAW;AACjC,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,SAAS,GAAG,SAAS,IAAI,OAAO,OAAQ,CAAC;AAAA,IAC7F;AACA,QAAI,OAAO,wBAAwB,QAAW;AAC7C,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,eAAe,GAAG,SAAS,IAAI,OAAO,mBAAoB,CAAC;AAAA,IAC/G;AACA,QAAI,OAAO,aAAa,QAAW;AAClC,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,WAAW,GAAG,SAAS,IAAI,OAAO,QAAS,CAAC;AAAA,IAChG;AACA,QAAI,OAAO,mBAAmB,QAAW;AACxC,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,kBAAkB,GAAG,SAAS,IAAI,OAAO,cAAe,CAAC;AAAA,IAC7G;AACA,QAAI,OAAO,0BAA0B,QAAW;AAC/C,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,yBAAyB,GAAG,SAAS,IAAI,OAAO,qBAAsB,CAAC;AAAA,IAC3H;AACA,QAAI,OAAO,iBAAiB,QAAW;AACtC,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,YAAY,GAAG,SAAS,KAAK,OAAO,YAAa,CAAC;AAAA,IACtG;AACA,QAAI,OAAO,kBAAkB,QAAW;AACvC,WAAK,GAAG,MAAM,CAAA,OAAM,GAAG,QAAQ,CAAC,mBAAmB,YAAY,GAAG,SAAS,IAAI,OAAO,aAAc,CAAC;AAAA,IACtG;AAEA,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AAAA,EAEA,WAAW,YAAoB;AAC9B,WAAO;AAAA,EACR;AAAA,EAEA,WAAW,eAAuB;AACjC,WAAO;AAAA,EACR;AACD;"}

package/dist/development/src/model/queries/authLog/NextMailAttemptQuery.cjs

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class NextMailAttemptQuery extends Database.DatabaseQuery {
+  constructor(email, initType, completionType) {
+    super();
+    this.email = email;
+    this.initType = initType;
+    this.completionType = completionType;
+  }
+  async fetch({ db }) {
+    const qb = Database.SelectBuilder.create().with("cfg", (it) => it.from("config")).with("last_completion", (it) => it.select(new Database.Literal("MAX(person_auth_log.created_at)"), "created_at").from("person_auth_log").join("person", "person", (it2) => it2.columnsEq(["person", "id"], ["person_auth_log", "person_id"])).where({
+      type: this.completionType,
+      success: true,
+      email: this.email
+    })).with("window_start", (it) => it.select(
+      new Database.Literal(`
+						GREATEST(
+							COALESCE(last_completion.created_at, NOW() - cfg.login_attempt_window),
+							NOW() - cfg.login_attempt_window
+						)`),
+      "start_time"
+    ).from("cfg").from("last_completion")).with("attempts", (it) => it.select(new Database.Literal("COUNT(*)"), "attempts").select(new Database.Literal("MAX(person_auth_log.created_at)"), "last_attempt").from("person_auth_log").from("window_start").where({
+      person_input_identifier: this.email,
+      type: this.initType,
+      success: true
+    }).where(new Database.Literal("person_auth_log.created_at >= window_start.start_time"))).select(
+      new Database.Literal(`
+					CASE WHEN attempts.attempts = 0
+					THEN NOW()
+					ELSE LEAST(
+						attempts.last_attempt + cfg.login_max_backoff,
+						attempts.last_attempt + cfg.login_base_backoff * (POWER(2, attempts.attempts - 1))
+					) END`),
+      "next_allowed_attempt"
+    ).from("attempts").from("cfg");
+    const result = await qb.getResult(db);
+    if (result.length === 0) {
+      return /* @__PURE__ */ new Date();
+    }
+    return result[0].next_allowed_attempt;
+  }
+}
+exports.NextMailAttemptQuery = NextMailAttemptQuery;
+//# sourceMappingURL=NextMailAttemptQuery.cjs.map

package/dist/development/src/model/queries/authLog/NextMailAttemptQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"NextMailAttemptQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/authLog/NextMailAttemptQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { AuthActionType } from '../../type/AuthLog.js'\n\n/**\n * Per-email exponential backoff for mail-sending init flows (password reset,\n * passwordless sign-in). Mirrors {@link NextLoginAttemptQuery} but counts\n * *successful* init events (= mails actually sent) against the same email, and\n * treats a successful completion (`completionType`) as the cutoff that resets\n * the backoff to zero.\n *\n * Reuses the existing `login_base_backoff` / `login_max_backoff` /\n * `login_attempt_window` knobs — see ConfigRateLimits docstring for the\n * rationale.\n */\nexport class NextMailAttemptQuery extends DatabaseQuery<Date> {\n\tconstructor(\n\t\tprivate readonly email: string,\n\t\tprivate readonly initType: AuthActionType,\n\t\tprivate readonly completionType: AuthActionType,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<Date> {\n\t\tconst qb = SelectBuilder.create()\n\t\t\t.with('cfg', it => it.from('config'))\n\t\t\t.with('last_completion', it =>\n\t\t\t\tit\n\t\t\t\t\t.select(new Literal('MAX(person_auth_log.created_at)'), 'created_at')\n\t\t\t\t\t.from('person_auth_log')\n\t\t\t\t\t.join('person', 'person', it => it.columnsEq(['person', 'id'], ['person_auth_log', 'person_id']))\n\t\t\t\t\t.where({\n\t\t\t\t\t\ttype: this.completionType,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\temail: this.email,\n\t\t\t\t\t}))\n\t\t\t.with('window_start', it =>\n\t\t\t\tit\n\t\t\t\t\t.select(\n\t\t\t\t\t\tnew Literal(`\n\t\t\t\t\t\tGREATEST(\n\t\t\t\t\t\t\tCOALESCE(last_completion.created_at, NOW() - cfg.login_attempt_window),\n\t\t\t\t\t\t\tNOW() - cfg.login_attempt_window\n\t\t\t\t\t\t)`),\n\t\t\t\t\t\t'start_time',\n\t\t\t\t\t)\n\t\t\t\t\t.from('cfg')\n\t\t\t\t\t.from('last_completion'))\n\t\t\t.with('attempts', it =>\n\t\t\t\tit\n\t\t\t\t\t.select(new Literal('COUNT(*)'), 'attempts')\n\t\t\t\t\t.select(new Literal('MAX(person_auth_log.created_at)'), 'last_attempt')\n\t\t\t\t\t.from('person_auth_log')\n\t\t\t\t\t.from('window_start')\n\t\t\t\t\t.where({\n\t\t\t\t\t\tperson_input_identifier: this.email,\n\t\t\t\t\t\ttype: this.initType,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t})\n\t\t\t\t\t.where(new Literal('person_auth_log.created_at >= window_start.start_time')))\n\t\t\t.select(\n\t\t\t\tnew Literal(`\n\t\t\t\t\tCASE WHEN attempts.attempts = 0\n\t\t\t\t\tTHEN NOW()\n\t\t\t\t\tELSE LEAST(\n\t\t\t\t\t\tattempts.last_attempt + cfg.login_max_backoff,\n\t\t\t\t\t\tattempts.last_attempt + cfg.login_base_backoff * (POWER(2, attempts.attempts - 1))\n\t\t\t\t\t) END`),\n\t\t\t\t'next_allowed_attempt',\n\t\t\t)\n\t\t\t.from('attempts')\n\t\t\t.from('cfg')\n\n\t\tconst result = await qb.getResult(db)\n\t\tif (result.length === 0) {\n\t\t\treturn new Date()\n\t\t}\n\t\treturn result[0].next_allowed_attempt\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder","Literal","it"],"mappings":";;;AAcO,MAAM,6BAA6BA,SAAAA,cAAoB;AAAA,EAC7D,YACkB,OACA,UACA,gBAChB;AACD,UAAA;AAJiB,SAAA,QAAA;AACA,SAAA,WAAA;AACA,SAAA,iBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAwC;AACrD,UAAM,KAAKC,SAAAA,cAAc,OAAA,EACvB,KAAK,OAAO,QAAM,GAAG,KAAK,QAAQ,CAAC,EACnC,KAAK,mBAAmB,CAAA,OACxB,GACE,OAAO,IAAIC,iBAAQ,iCAAiC,GAAG,YAAY,EACnE,KAAK,iBAAiB,EACtB,KAAK,UAAU,UAAU,CAAAC,QAAMA,IAAG,UAAU,CAAC,UAAU,IAAI,GAAG,CAAC,mBAAmB,WAAW,CAAC,CAAC,EAC/F,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,MACT,OAAO,KAAK;AAAA,IAAA,CACZ,CAAC,EACH,KAAK,gBAAgB,QACrB,GACE;AAAA,MACA,IAAID,iBAAQ;AAAA;AAAA;AAAA;AAAA,QAIV;AAAA,MACF;AAAA,IAAA,EAEA,KAAK,KAAK,EACV,KAAK,iBAAiB,CAAC,EACzB,KAAK,YAAY,CAAA,OACjB,GACE,OAAO,IAAIA,SAAAA,QAAQ,UAAU,GAAG,UAAU,EAC1C,OAAO,IAAIA,SAAAA,QAAQ,iCAAiC,GAAG,cAAc,EACrE,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,MAAM;AAAA,MACN,yBAAyB,KAAK;AAAA,MAC9B,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,IAAA,CACT,EACA,MAAM,IAAIA,SAAAA,QAAQ,uDAAuD,CAAC,CAAC,EAC7E;AAAA,MACA,IAAIA,iBAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,WAML;AAAA,MACP;AAAA,IAAA,EAEA,KAAK,UAAU,EACf,KAAK,KAAK;AAEZ,UAAM,SAAS,MAAM,GAAG,UAAU,EAAE;AACpC,QAAI,OAAO,WAAW,GAAG;AACxB,iCAAW,KAAA;AAAA,IACZ;AACA,WAAO,OAAO,CAAC,EAAE;AAAA,EAClB;AACD;;"}

package/dist/development/src/model/queries/authLog/NextMailAttemptQuery.js

@@ -0,0 +1,45 @@
+import { DatabaseQuery, SelectBuilder, Literal } from "@contember/database";
+class NextMailAttemptQuery extends DatabaseQuery {
+  constructor(email, initType, completionType) {
+    super();
+    this.email = email;
+    this.initType = initType;
+    this.completionType = completionType;
+  }
+  async fetch({ db }) {
+    const qb = SelectBuilder.create().with("cfg", (it) => it.from("config")).with("last_completion", (it) => it.select(new Literal("MAX(person_auth_log.created_at)"), "created_at").from("person_auth_log").join("person", "person", (it2) => it2.columnsEq(["person", "id"], ["person_auth_log", "person_id"])).where({
+      type: this.completionType,
+      success: true,
+      email: this.email
+    })).with("window_start", (it) => it.select(
+      new Literal(`
+						GREATEST(
+							COALESCE(last_completion.created_at, NOW() - cfg.login_attempt_window),
+							NOW() - cfg.login_attempt_window
+						)`),
+      "start_time"
+    ).from("cfg").from("last_completion")).with("attempts", (it) => it.select(new Literal("COUNT(*)"), "attempts").select(new Literal("MAX(person_auth_log.created_at)"), "last_attempt").from("person_auth_log").from("window_start").where({
+      person_input_identifier: this.email,
+      type: this.initType,
+      success: true
+    }).where(new Literal("person_auth_log.created_at >= window_start.start_time"))).select(
+      new Literal(`
+					CASE WHEN attempts.attempts = 0
+					THEN NOW()
+					ELSE LEAST(
+						attempts.last_attempt + cfg.login_max_backoff,
+						attempts.last_attempt + cfg.login_base_backoff * (POWER(2, attempts.attempts - 1))
+					) END`),
+      "next_allowed_attempt"
+    ).from("attempts").from("cfg");
+    const result = await qb.getResult(db);
+    if (result.length === 0) {
+      return /* @__PURE__ */ new Date();
+    }
+    return result[0].next_allowed_attempt;
+  }
+}
+export {
+  NextMailAttemptQuery
+};
+//# sourceMappingURL=NextMailAttemptQuery.js.map

package/dist/development/src/model/queries/authLog/NextMailAttemptQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NextMailAttemptQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/authLog/NextMailAttemptQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { AuthActionType } from '../../type/AuthLog.js'\n\n/**\n * Per-email exponential backoff for mail-sending init flows (password reset,\n * passwordless sign-in). Mirrors {@link NextLoginAttemptQuery} but counts\n * *successful* init events (= mails actually sent) against the same email, and\n * treats a successful completion (`completionType`) as the cutoff that resets\n * the backoff to zero.\n *\n * Reuses the existing `login_base_backoff` / `login_max_backoff` /\n * `login_attempt_window` knobs — see ConfigRateLimits docstring for the\n * rationale.\n */\nexport class NextMailAttemptQuery extends DatabaseQuery<Date> {\n\tconstructor(\n\t\tprivate readonly email: string,\n\t\tprivate readonly initType: AuthActionType,\n\t\tprivate readonly completionType: AuthActionType,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<Date> {\n\t\tconst qb = SelectBuilder.create()\n\t\t\t.with('cfg', it => it.from('config'))\n\t\t\t.with('last_completion', it =>\n\t\t\t\tit\n\t\t\t\t\t.select(new Literal('MAX(person_auth_log.created_at)'), 'created_at')\n\t\t\t\t\t.from('person_auth_log')\n\t\t\t\t\t.join('person', 'person', it => it.columnsEq(['person', 'id'], ['person_auth_log', 'person_id']))\n\t\t\t\t\t.where({\n\t\t\t\t\t\ttype: this.completionType,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t\temail: this.email,\n\t\t\t\t\t}))\n\t\t\t.with('window_start', it =>\n\t\t\t\tit\n\t\t\t\t\t.select(\n\t\t\t\t\t\tnew Literal(`\n\t\t\t\t\t\tGREATEST(\n\t\t\t\t\t\t\tCOALESCE(last_completion.created_at, NOW() - cfg.login_attempt_window),\n\t\t\t\t\t\t\tNOW() - cfg.login_attempt_window\n\t\t\t\t\t\t)`),\n\t\t\t\t\t\t'start_time',\n\t\t\t\t\t)\n\t\t\t\t\t.from('cfg')\n\t\t\t\t\t.from('last_completion'))\n\t\t\t.with('attempts', it =>\n\t\t\t\tit\n\t\t\t\t\t.select(new Literal('COUNT(*)'), 'attempts')\n\t\t\t\t\t.select(new Literal('MAX(person_auth_log.created_at)'), 'last_attempt')\n\t\t\t\t\t.from('person_auth_log')\n\t\t\t\t\t.from('window_start')\n\t\t\t\t\t.where({\n\t\t\t\t\t\tperson_input_identifier: this.email,\n\t\t\t\t\t\ttype: this.initType,\n\t\t\t\t\t\tsuccess: true,\n\t\t\t\t\t})\n\t\t\t\t\t.where(new Literal('person_auth_log.created_at >= window_start.start_time')))\n\t\t\t.select(\n\t\t\t\tnew Literal(`\n\t\t\t\t\tCASE WHEN attempts.attempts = 0\n\t\t\t\t\tTHEN NOW()\n\t\t\t\t\tELSE LEAST(\n\t\t\t\t\t\tattempts.last_attempt + cfg.login_max_backoff,\n\t\t\t\t\t\tattempts.last_attempt + cfg.login_base_backoff * (POWER(2, attempts.attempts - 1))\n\t\t\t\t\t) END`),\n\t\t\t\t'next_allowed_attempt',\n\t\t\t)\n\t\t\t.from('attempts')\n\t\t\t.from('cfg')\n\n\t\tconst result = await qb.getResult(db)\n\t\tif (result.length === 0) {\n\t\t\treturn new Date()\n\t\t}\n\t\treturn result[0].next_allowed_attempt\n\t}\n}\n"],"names":["it"],"mappings":";AAcO,MAAM,6BAA6B,cAAoB;AAAA,EAC7D,YACkB,OACA,UACA,gBAChB;AACD,UAAA;AAJiB,SAAA,QAAA;AACA,SAAA,WAAA;AACA,SAAA,iBAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAAwC;AACrD,UAAM,KAAK,cAAc,OAAA,EACvB,KAAK,OAAO,QAAM,GAAG,KAAK,QAAQ,CAAC,EACnC,KAAK,mBAAmB,CAAA,OACxB,GACE,OAAO,IAAI,QAAQ,iCAAiC,GAAG,YAAY,EACnE,KAAK,iBAAiB,EACtB,KAAK,UAAU,UAAU,CAAAA,QAAMA,IAAG,UAAU,CAAC,UAAU,IAAI,GAAG,CAAC,mBAAmB,WAAW,CAAC,CAAC,EAC/F,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,MACT,OAAO,KAAK;AAAA,IAAA,CACZ,CAAC,EACH,KAAK,gBAAgB,QACrB,GACE;AAAA,MACA,IAAI,QAAQ;AAAA;AAAA;AAAA;AAAA,QAIV;AAAA,MACF;AAAA,IAAA,EAEA,KAAK,KAAK,EACV,KAAK,iBAAiB,CAAC,EACzB,KAAK,YAAY,CAAA,OACjB,GACE,OAAO,IAAI,QAAQ,UAAU,GAAG,UAAU,EAC1C,OAAO,IAAI,QAAQ,iCAAiC,GAAG,cAAc,EACrE,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,MAAM;AAAA,MACN,yBAAyB,KAAK;AAAA,MAC9B,MAAM,KAAK;AAAA,MACX,SAAS;AAAA,IAAA,CACT,EACA,MAAM,IAAI,QAAQ,uDAAuD,CAAC,CAAC,EAC7E;AAAA,MACA,IAAI,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,WAML;AAAA,MACP;AAAA,IAAA,EAEA,KAAK,UAAU,EACf,KAAK,KAAK;AAEZ,UAAM,SAAS,MAAM,GAAG,UAAU,EAAE;AACpC,QAAI,OAAO,WAAW,GAAG;AACxB,iCAAW,KAAA;AAAA,IACZ;AACA,WAAO,OAAO,CAAC,EAAE;AAAA,EAClB;AACD;"}

package/dist/development/src/model/queries/authPolicy/AuthPoliciesQuery.cjs

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class AuthPoliciesQuery extends Database.DatabaseQuery {
+  constructor(filter) {
+    super();
+    this.filter = filter;
+  }
+  async fetch({ db }) {
+    let qb = Database.SelectBuilder.create().from("auth_policy").select(new Database.Literal("*"));
+    if (this.filter !== void 0) {
+      const projectId = this.filter.projectId;
+      qb = qb.where((expr) => projectId === null ? expr.isNull("project_id") : expr.compare("project_id", "=", projectId));
+    }
+    return await qb.getResult(db);
+  }
+}
+exports.AuthPoliciesQuery = AuthPoliciesQuery;
+//# sourceMappingURL=AuthPoliciesQuery.cjs.map

package/dist/development/src/model/queries/authPolicy/AuthPoliciesQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthPoliciesQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/authPolicy/AuthPoliciesQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { AuthPolicyRow } from '../../type/index.js'\n\n/**\n * Lists `auth_policy` rows. Optionally filters to a single project (or to the\n * global scope when `projectId` is explicitly `null`); with no filter, returns\n * every row. Intervals are returned as IPostgresInterval, like ConfigRow.\n */\nexport class AuthPoliciesQuery extends DatabaseQuery<AuthPolicyRow[]> {\n\tconstructor(private readonly filter?: { projectId: string | null }) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<AuthPolicyRow[]> {\n\t\tlet qb = SelectBuilder.create<AuthPolicyRow>()\n\t\t\t.from('auth_policy')\n\t\t\t.select(new Literal('*'))\n\t\tif (this.filter !== undefined) {\n\t\t\tconst projectId = this.filter.projectId\n\t\t\tqb = qb.where(expr => projectId === null ? expr.isNull('project_id') : expr.compare('project_id', '=', projectId))\n\t\t}\n\t\treturn await qb.getResult(db)\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder","Literal"],"mappings":";;;AAQO,MAAM,0BAA0BA,SAAAA,cAA+B;AAAA,EACrE,YAA6B,QAAuC;AACnE,UAAA;AAD4B,SAAA,SAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAAmD;AAChE,QAAI,KAAKC,SAAAA,cAAc,OAAA,EACrB,KAAK,aAAa,EAClB,OAAO,IAAIC,iBAAQ,GAAG,CAAC;AACzB,QAAI,KAAK,WAAW,QAAW;AAC9B,YAAM,YAAY,KAAK,OAAO;AAC9B,WAAK,GAAG,MAAM,CAAA,SAAQ,cAAc,OAAO,KAAK,OAAO,YAAY,IAAI,KAAK,QAAQ,cAAc,KAAK,SAAS,CAAC;AAAA,IAClH;AACA,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AACD;;"}

package/dist/development/src/model/queries/authPolicy/AuthPoliciesQuery.js

@@ -0,0 +1,19 @@
+import { DatabaseQuery, SelectBuilder, Literal } from "@contember/database";
+class AuthPoliciesQuery extends DatabaseQuery {
+  constructor(filter) {
+    super();
+    this.filter = filter;
+  }
+  async fetch({ db }) {
+    let qb = SelectBuilder.create().from("auth_policy").select(new Literal("*"));
+    if (this.filter !== void 0) {
+      const projectId = this.filter.projectId;
+      qb = qb.where((expr) => projectId === null ? expr.isNull("project_id") : expr.compare("project_id", "=", projectId));
+    }
+    return await qb.getResult(db);
+  }
+}
+export {
+  AuthPoliciesQuery
+};
+//# sourceMappingURL=AuthPoliciesQuery.js.map

package/dist/development/src/model/queries/authPolicy/AuthPoliciesQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthPoliciesQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/authPolicy/AuthPoliciesQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { AuthPolicyRow } from '../../type/index.js'\n\n/**\n * Lists `auth_policy` rows. Optionally filters to a single project (or to the\n * global scope when `projectId` is explicitly `null`); with no filter, returns\n * every row. Intervals are returned as IPostgresInterval, like ConfigRow.\n */\nexport class AuthPoliciesQuery extends DatabaseQuery<AuthPolicyRow[]> {\n\tconstructor(private readonly filter?: { projectId: string | null }) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<AuthPolicyRow[]> {\n\t\tlet qb = SelectBuilder.create<AuthPolicyRow>()\n\t\t\t.from('auth_policy')\n\t\t\t.select(new Literal('*'))\n\t\tif (this.filter !== undefined) {\n\t\t\tconst projectId = this.filter.projectId\n\t\t\tqb = qb.where(expr => projectId === null ? expr.isNull('project_id') : expr.compare('project_id', '=', projectId))\n\t\t}\n\t\treturn await qb.getResult(db)\n\t}\n}\n"],"names":[],"mappings":";AAQO,MAAM,0BAA0B,cAA+B;AAAA,EACrE,YAA6B,QAAuC;AACnE,UAAA;AAD4B,SAAA,SAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAAmD;AAChE,QAAI,KAAK,cAAc,OAAA,EACrB,KAAK,aAAa,EAClB,OAAO,IAAI,QAAQ,GAAG,CAAC;AACzB,QAAI,KAAK,WAAW,QAAW;AAC9B,YAAM,YAAY,KAAK,OAAO;AAC9B,WAAK,GAAG,MAAM,CAAA,SAAQ,cAAc,OAAO,KAAK,OAAO,YAAY,IAAI,KAAK,QAAQ,cAAc,KAAK,SAAS,CAAC;AAAA,IAClH;AACA,WAAO,MAAM,GAAG,UAAU,EAAE;AAAA,EAC7B;AACD;"}

package/dist/development/src/model/queries/configuration/ConfigurationQuery.cjs

@@ -2,13 +2,24 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const Database = require("@contember/database");
 class ConfigurationQuery extends Database.DatabaseQuery {
+  constructor(providers) {
+    super();
+    this.providers = providers;
+  }
   async fetch({ db }) {
     const rows = await Database.SelectBuilder.create().from("config").select(new Database.Literal("*")).getResult(db);
     const result = this.fetchOneOrNull(rows);
     if (!result) {
       throw new Error("Configuration not found");
     }
+    const captchaSecret = result.captcha_secret && typeof result.captcha_secret_version === "number" ? (await this.providers.decrypt(result.captcha_secret, result.captcha_secret_version)).value.toString("utf8") : null;
     return {
+      signup: {
+        requireEmailVerification: result.signup_require_email_verification
+      },
+      emailChange: {
+        requireVerification: result.require_email_change_verification
+      },
       passwordless: {
         enabled: result.passwordless_enabled,
         url: result.passwordless_url,
@@ -21,15 +32,61 @@ class ConfigurationQuery extends Database.DatabaseQuery {
         requireDigit: result.password_require_digit,
         requireSpecial: result.password_require_special,
         pattern: result.password_pattern,
-        checkBlacklist: result.password_check_blacklist
+        checkBlacklist: result.password_check_blacklist,
+        checkHibp: result.password_check_hibp
       },
       login: {
         baseBackoff: result.login_base_backoff,
         maxBackoff: result.login_max_backoff,
         attemptWindow: result.login_attempt_window,
         revealUserExists: result.login_reveal_user_exits,
+        revealLoginMethod: result.login_reveal_login_method,
         defaultTokenExpiration: result.login_default_token_expiration,
-        maxTokenExpiration: result.login_max_token_expiration
+        maxTokenExpiration: result.login_max_token_expiration,
+        mfaGraceDuration: result.login_mfa_grace_duration,
+        anomalyDetection: {
+          enabled: result.login_anomaly_detection_enabled,
+          historySize: result.login_anomaly_history_size,
+          emailThreshold: result.login_anomaly_email_threshold,
+          stepUpThreshold: result.login_anomaly_step_up_threshold
+        }
+      },
+      captcha: {
+        provider: result.captcha_provider,
+        threshold: result.captcha_threshold,
+        protect: {
+          signUp: result.captcha_protect_sign_up,
+          passwordReset: result.captcha_protect_password_reset,
+          passwordlessInit: result.captcha_protect_passwordless_init,
+          emailVerification: result.captcha_protect_email_verification
+        }
+      },
+      captchaSecret,
+      rateLimits: {
+        signUpPerIp: {
+          limit: result.rate_limit_sign_up_per_ip_limit,
+          window: result.rate_limit_sign_up_per_ip_window
+        },
+        loginPerIp: {
+          limit: result.rate_limit_login_per_ip_limit,
+          window: result.rate_limit_login_per_ip_window
+        },
+        passwordResetPerIp: {
+          limit: result.rate_limit_password_reset_per_ip_limit,
+          window: result.rate_limit_password_reset_per_ip_window
+        },
+        passwordlessInitPerIp: {
+          limit: result.rate_limit_passwordless_init_per_ip_limit,
+          window: result.rate_limit_passwordless_init_per_ip_window
+        },
+        emailOtpPerPerson: {
+          limit: result.rate_limit_email_otp_per_person_limit,
+          window: result.rate_limit_email_otp_per_person_window
+        },
+        emailVerificationPerIp: {
+          limit: result.rate_limit_email_verification_per_ip_limit,
+          window: result.rate_limit_email_verification_per_ip_window
+        }
       }
     };
   }

package/dist/development/src/model/queries/configuration/ConfigurationQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigurationQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/configuration/ConfigurationQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { Config, ConfigRow } from '../../type/Config'\n\nexport class ConfigurationQuery extends DatabaseQuery<Config> {\n\tasync fetch({ db }: DatabaseQueryable): Promise<Config> {\n\t\tconst rows = await SelectBuilder.create<ConfigRow>()\n\t\t\t.from('config')\n\t\t\t.select(new Literal('*'))\n\t\t\t.getResult(db)\n\t\tconst result = this.fetchOneOrNull(rows)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\n\t\treturn {\n\t\t\tpasswordless: {\n\t\t\t\tenabled: result.passwordless_enabled,\n\t\t\t\turl: result.passwordless_url,\n\t\t\t\texpiration: result.passwordless_expiration,\n\t\t\t},\n\t\t\tpassword: {\n\t\t\t\tminLength: result.password_min_length,\n\t\t\t\trequireUppercase: result.password_require_uppercase,\n\t\t\t\trequireLowercase: result.password_require_lowercase,\n\t\t\t\trequireDigit: result.password_require_digit,\n\t\t\t\trequireSpecial: result.password_require_special,\n\t\t\t\tpattern: result.password_pattern,\n\t\t\t\tcheckBlacklist: result.password_check_blacklist,\n\t\t\t},\n\t\t\tlogin: {\n\t\t\t\tbaseBackoff: result.login_base_backoff,\n\t\t\t\tmaxBackoff: result.login_max_backoff,\n\t\t\t\tattemptWindow: result.login_attempt_window,\n\t\t\t\trevealUserExists: result.login_reveal_user_exits,\n\t\t\t\tdefaultTokenExpiration: result.login_default_token_expiration,\n\t\t\t\tmaxTokenExpiration: result.login_max_token_expiration,\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder","Literal"],"mappings":";;;AAGO,MAAM,2BAA2BA,SAAAA,cAAsB;AAAA,EAC7D,MAAM,MAAM,EAAE,MAA0C;AACvD,UAAM,OAAO,MAAMC,SAAAA,cAAc,OAAA,EAC/B,KAAK,QAAQ,EACb,OAAO,IAAIC,SAAAA,QAAQ,GAAG,CAAC,EACvB,UAAU,EAAE;AACd,UAAM,SAAS,KAAK,eAAe,IAAI;AACvC,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAEA,WAAO;AAAA,MACN,cAAc;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,KAAK,OAAO;AAAA,QACZ,YAAY,OAAO;AAAA,MAAA;AAAA,MAEpB,UAAU;AAAA,QACT,WAAW,OAAO;AAAA,QAClB,kBAAkB,OAAO;AAAA,QACzB,kBAAkB,OAAO;AAAA,QACzB,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,QAChB,gBAAgB,OAAO;AAAA,MAAA;AAAA,MAExB,OAAO;AAAA,QACN,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,eAAe,OAAO;AAAA,QACtB,kBAAkB,OAAO;AAAA,QACzB,wBAAwB,OAAO;AAAA,QAC/B,oBAAoB,OAAO;AAAA,MAAA;AAAA,IAC5B;AAAA,EAEF;AACD;;"}
+{"version":3,"file":"ConfigurationQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/configuration/ConfigurationQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { Config, ConfigRow } from '../../type/Config.js'\nimport { Providers } from '../../providers.js'\n\nexport class ConfigurationQuery extends DatabaseQuery<Config> {\n\tconstructor(private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<Config> {\n\t\tconst rows = await SelectBuilder.create<ConfigRow>()\n\t\t\t.from('config')\n\t\t\t.select(new Literal('*'))\n\t\t\t.getResult(db)\n\t\tconst result = this.fetchOneOrNull(rows)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\n\t\tconst captchaSecret = result.captcha_secret && typeof result.captcha_secret_version === 'number'\n\t\t\t? (await this.providers.decrypt(result.captcha_secret, result.captcha_secret_version)).value.toString('utf8')\n\t\t\t: null\n\n\t\treturn {\n\t\t\tsignup: {\n\t\t\t\trequireEmailVerification: result.signup_require_email_verification,\n\t\t\t},\n\t\t\temailChange: {\n\t\t\t\trequireVerification: result.require_email_change_verification,\n\t\t\t},\n\t\t\tpasswordless: {\n\t\t\t\tenabled: result.passwordless_enabled,\n\t\t\t\turl: result.passwordless_url,\n\t\t\t\texpiration: result.passwordless_expiration,\n\t\t\t},\n\t\t\tpassword: {\n\t\t\t\tminLength: result.password_min_length,\n\t\t\t\trequireUppercase: result.password_require_uppercase,\n\t\t\t\trequireLowercase: result.password_require_lowercase,\n\t\t\t\trequireDigit: result.password_require_digit,\n\t\t\t\trequireSpecial: result.password_require_special,\n\t\t\t\tpattern: result.password_pattern,\n\t\t\t\tcheckBlacklist: result.password_check_blacklist,\n\t\t\t\tcheckHibp: result.password_check_hibp,\n\t\t\t},\n\t\t\tlogin: {\n\t\t\t\tbaseBackoff: result.login_base_backoff,\n\t\t\t\tmaxBackoff: result.login_max_backoff,\n\t\t\t\tattemptWindow: result.login_attempt_window,\n\t\t\t\trevealUserExists: result.login_reveal_user_exits,\n\t\t\t\trevealLoginMethod: result.login_reveal_login_method,\n\t\t\t\tdefaultTokenExpiration: result.login_default_token_expiration,\n\t\t\t\tmaxTokenExpiration: result.login_max_token_expiration,\n\t\t\t\tmfaGraceDuration: result.login_mfa_grace_duration,\n\t\t\t\tanomalyDetection: {\n\t\t\t\t\tenabled: result.login_anomaly_detection_enabled,\n\t\t\t\t\thistorySize: result.login_anomaly_history_size,\n\t\t\t\t\temailThreshold: result.login_anomaly_email_threshold,\n\t\t\t\t\tstepUpThreshold: result.login_anomaly_step_up_threshold,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptcha: {\n\t\t\t\tprovider: result.captcha_provider,\n\t\t\t\tthreshold: result.captcha_threshold,\n\t\t\t\tprotect: {\n\t\t\t\t\tsignUp: result.captcha_protect_sign_up,\n\t\t\t\t\tpasswordReset: result.captcha_protect_password_reset,\n\t\t\t\t\tpasswordlessInit: result.captcha_protect_passwordless_init,\n\t\t\t\t\temailVerification: result.captcha_protect_email_verification,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptchaSecret,\n\t\t\trateLimits: {\n\t\t\t\tsignUpPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_sign_up_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_sign_up_per_ip_window,\n\t\t\t\t},\n\t\t\t\tloginPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_login_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_login_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordResetPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_password_reset_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_password_reset_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordlessInitPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_passwordless_init_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_passwordless_init_per_ip_window,\n\t\t\t\t},\n\t\t\t\temailOtpPerPerson: {\n\t\t\t\t\tlimit: result.rate_limit_email_otp_per_person_limit,\n\t\t\t\t\twindow: result.rate_limit_email_otp_per_person_window,\n\t\t\t\t},\n\t\t\t\temailVerificationPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_email_verification_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_email_verification_per_ip_window,\n\t\t\t\t},\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder","Literal"],"mappings":";;;AAIO,MAAM,2BAA2BA,SAAAA,cAAsB;AAAA,EAC7D,YAA6B,WAAsB;AAClD,UAAA;AAD4B,SAAA,YAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0C;AACvD,UAAM,OAAO,MAAMC,SAAAA,cAAc,OAAA,EAC/B,KAAK,QAAQ,EACb,OAAO,IAAIC,SAAAA,QAAQ,GAAG,CAAC,EACvB,UAAU,EAAE;AACd,UAAM,SAAS,KAAK,eAAe,IAAI;AACvC,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAEA,UAAM,gBAAgB,OAAO,kBAAkB,OAAO,OAAO,2BAA2B,YACpF,MAAM,KAAK,UAAU,QAAQ,OAAO,gBAAgB,OAAO,sBAAsB,GAAG,MAAM,SAAS,MAAM,IAC1G;AAEH,WAAO;AAAA,MACN,QAAQ;AAAA,QACP,0BAA0B,OAAO;AAAA,MAAA;AAAA,MAElC,aAAa;AAAA,QACZ,qBAAqB,OAAO;AAAA,MAAA;AAAA,MAE7B,cAAc;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,KAAK,OAAO;AAAA,QACZ,YAAY,OAAO;AAAA,MAAA;AAAA,MAEpB,UAAU;AAAA,QACT,WAAW,OAAO;AAAA,QAClB,kBAAkB,OAAO;AAAA,QACzB,kBAAkB,OAAO;AAAA,QACzB,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,QAChB,gBAAgB,OAAO;AAAA,QACvB,WAAW,OAAO;AAAA,MAAA;AAAA,MAEnB,OAAO;AAAA,QACN,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,eAAe,OAAO;AAAA,QACtB,kBAAkB,OAAO;AAAA,QACzB,mBAAmB,OAAO;AAAA,QAC1B,wBAAwB,OAAO;AAAA,QAC/B,oBAAoB,OAAO;AAAA,QAC3B,kBAAkB,OAAO;AAAA,QACzB,kBAAkB;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,aAAa,OAAO;AAAA,UACpB,gBAAgB,OAAO;AAAA,UACvB,iBAAiB,OAAO;AAAA,QAAA;AAAA,MACzB;AAAA,MAED,SAAS;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,SAAS;AAAA,UACR,QAAQ,OAAO;AAAA,UACf,eAAe,OAAO;AAAA,UACtB,kBAAkB,OAAO;AAAA,UACzB,mBAAmB,OAAO;AAAA,QAAA;AAAA,MAC3B;AAAA,MAED;AAAA,MACA,YAAY;AAAA,QACX,aAAa;AAAA,UACZ,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,YAAY;AAAA,UACX,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,oBAAoB;AAAA,UACnB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,uBAAuB;AAAA,UACtB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,mBAAmB;AAAA,UAClB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,wBAAwB;AAAA,UACvB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,MAChB;AAAA,IACD;AAAA,EAEF;AACD;;"}

package/dist/development/src/model/queries/configuration/ConfigurationQuery.js

@@ -1,12 +1,23 @@
 import { DatabaseQuery, SelectBuilder, Literal } from "@contember/database";
 class ConfigurationQuery extends DatabaseQuery {
+  constructor(providers) {
+    super();
+    this.providers = providers;
+  }
   async fetch({ db }) {
     const rows = await SelectBuilder.create().from("config").select(new Literal("*")).getResult(db);
     const result = this.fetchOneOrNull(rows);
     if (!result) {
       throw new Error("Configuration not found");
     }
+    const captchaSecret = result.captcha_secret && typeof result.captcha_secret_version === "number" ? (await this.providers.decrypt(result.captcha_secret, result.captcha_secret_version)).value.toString("utf8") : null;
     return {
+      signup: {
+        requireEmailVerification: result.signup_require_email_verification
+      },
+      emailChange: {
+        requireVerification: result.require_email_change_verification
+      },
       passwordless: {
         enabled: result.passwordless_enabled,
         url: result.passwordless_url,
@@ -19,15 +30,61 @@ class ConfigurationQuery extends DatabaseQuery {
         requireDigit: result.password_require_digit,
         requireSpecial: result.password_require_special,
         pattern: result.password_pattern,
-        checkBlacklist: result.password_check_blacklist
+        checkBlacklist: result.password_check_blacklist,
+        checkHibp: result.password_check_hibp
       },
       login: {
         baseBackoff: result.login_base_backoff,
         maxBackoff: result.login_max_backoff,
         attemptWindow: result.login_attempt_window,
         revealUserExists: result.login_reveal_user_exits,
+        revealLoginMethod: result.login_reveal_login_method,
         defaultTokenExpiration: result.login_default_token_expiration,
-        maxTokenExpiration: result.login_max_token_expiration
+        maxTokenExpiration: result.login_max_token_expiration,
+        mfaGraceDuration: result.login_mfa_grace_duration,
+        anomalyDetection: {
+          enabled: result.login_anomaly_detection_enabled,
+          historySize: result.login_anomaly_history_size,
+          emailThreshold: result.login_anomaly_email_threshold,
+          stepUpThreshold: result.login_anomaly_step_up_threshold
+        }
+      },
+      captcha: {
+        provider: result.captcha_provider,
+        threshold: result.captcha_threshold,
+        protect: {
+          signUp: result.captcha_protect_sign_up,
+          passwordReset: result.captcha_protect_password_reset,
+          passwordlessInit: result.captcha_protect_passwordless_init,
+          emailVerification: result.captcha_protect_email_verification
+        }
+      },
+      captchaSecret,
+      rateLimits: {
+        signUpPerIp: {
+          limit: result.rate_limit_sign_up_per_ip_limit,
+          window: result.rate_limit_sign_up_per_ip_window
+        },
+        loginPerIp: {
+          limit: result.rate_limit_login_per_ip_limit,
+          window: result.rate_limit_login_per_ip_window
+        },
+        passwordResetPerIp: {
+          limit: result.rate_limit_password_reset_per_ip_limit,
+          window: result.rate_limit_password_reset_per_ip_window
+        },
+        passwordlessInitPerIp: {
+          limit: result.rate_limit_passwordless_init_per_ip_limit,
+          window: result.rate_limit_passwordless_init_per_ip_window
+        },
+        emailOtpPerPerson: {
+          limit: result.rate_limit_email_otp_per_person_limit,
+          window: result.rate_limit_email_otp_per_person_window
+        },
+        emailVerificationPerIp: {
+          limit: result.rate_limit_email_verification_per_ip_limit,
+          window: result.rate_limit_email_verification_per_ip_window
+        }
       }
     };
   }

package/dist/development/src/model/queries/configuration/ConfigurationQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigurationQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/configuration/ConfigurationQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { Config, ConfigRow } from '../../type/Config'\n\nexport class ConfigurationQuery extends DatabaseQuery<Config> {\n\tasync fetch({ db }: DatabaseQueryable): Promise<Config> {\n\t\tconst rows = await SelectBuilder.create<ConfigRow>()\n\t\t\t.from('config')\n\t\t\t.select(new Literal('*'))\n\t\t\t.getResult(db)\n\t\tconst result = this.fetchOneOrNull(rows)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\n\t\treturn {\n\t\t\tpasswordless: {\n\t\t\t\tenabled: result.passwordless_enabled,\n\t\t\t\turl: result.passwordless_url,\n\t\t\t\texpiration: result.passwordless_expiration,\n\t\t\t},\n\t\t\tpassword: {\n\t\t\t\tminLength: result.password_min_length,\n\t\t\t\trequireUppercase: result.password_require_uppercase,\n\t\t\t\trequireLowercase: result.password_require_lowercase,\n\t\t\t\trequireDigit: result.password_require_digit,\n\t\t\t\trequireSpecial: result.password_require_special,\n\t\t\t\tpattern: result.password_pattern,\n\t\t\t\tcheckBlacklist: result.password_check_blacklist,\n\t\t\t},\n\t\t\tlogin: {\n\t\t\t\tbaseBackoff: result.login_base_backoff,\n\t\t\t\tmaxBackoff: result.login_max_backoff,\n\t\t\t\tattemptWindow: result.login_attempt_window,\n\t\t\t\trevealUserExists: result.login_reveal_user_exits,\n\t\t\t\tdefaultTokenExpiration: result.login_default_token_expiration,\n\t\t\t\tmaxTokenExpiration: result.login_max_token_expiration,\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";AAGO,MAAM,2BAA2B,cAAsB;AAAA,EAC7D,MAAM,MAAM,EAAE,MAA0C;AACvD,UAAM,OAAO,MAAM,cAAc,OAAA,EAC/B,KAAK,QAAQ,EACb,OAAO,IAAI,QAAQ,GAAG,CAAC,EACvB,UAAU,EAAE;AACd,UAAM,SAAS,KAAK,eAAe,IAAI;AACvC,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAEA,WAAO;AAAA,MACN,cAAc;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,KAAK,OAAO;AAAA,QACZ,YAAY,OAAO;AAAA,MAAA;AAAA,MAEpB,UAAU;AAAA,QACT,WAAW,OAAO;AAAA,QAClB,kBAAkB,OAAO;AAAA,QACzB,kBAAkB,OAAO;AAAA,QACzB,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,QAChB,gBAAgB,OAAO;AAAA,MAAA;AAAA,MAExB,OAAO;AAAA,QACN,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,eAAe,OAAO;AAAA,QACtB,kBAAkB,OAAO;AAAA,QACzB,wBAAwB,OAAO;AAAA,QAC/B,oBAAoB,OAAO;AAAA,MAAA;AAAA,IAC5B;AAAA,EAEF;AACD;"}
+{"version":3,"file":"ConfigurationQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/configuration/ConfigurationQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { Config, ConfigRow } from '../../type/Config.js'\nimport { Providers } from '../../providers.js'\n\nexport class ConfigurationQuery extends DatabaseQuery<Config> {\n\tconstructor(private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<Config> {\n\t\tconst rows = await SelectBuilder.create<ConfigRow>()\n\t\t\t.from('config')\n\t\t\t.select(new Literal('*'))\n\t\t\t.getResult(db)\n\t\tconst result = this.fetchOneOrNull(rows)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\n\t\tconst captchaSecret = result.captcha_secret && typeof result.captcha_secret_version === 'number'\n\t\t\t? (await this.providers.decrypt(result.captcha_secret, result.captcha_secret_version)).value.toString('utf8')\n\t\t\t: null\n\n\t\treturn {\n\t\t\tsignup: {\n\t\t\t\trequireEmailVerification: result.signup_require_email_verification,\n\t\t\t},\n\t\t\temailChange: {\n\t\t\t\trequireVerification: result.require_email_change_verification,\n\t\t\t},\n\t\t\tpasswordless: {\n\t\t\t\tenabled: result.passwordless_enabled,\n\t\t\t\turl: result.passwordless_url,\n\t\t\t\texpiration: result.passwordless_expiration,\n\t\t\t},\n\t\t\tpassword: {\n\t\t\t\tminLength: result.password_min_length,\n\t\t\t\trequireUppercase: result.password_require_uppercase,\n\t\t\t\trequireLowercase: result.password_require_lowercase,\n\t\t\t\trequireDigit: result.password_require_digit,\n\t\t\t\trequireSpecial: result.password_require_special,\n\t\t\t\tpattern: result.password_pattern,\n\t\t\t\tcheckBlacklist: result.password_check_blacklist,\n\t\t\t\tcheckHibp: result.password_check_hibp,\n\t\t\t},\n\t\t\tlogin: {\n\t\t\t\tbaseBackoff: result.login_base_backoff,\n\t\t\t\tmaxBackoff: result.login_max_backoff,\n\t\t\t\tattemptWindow: result.login_attempt_window,\n\t\t\t\trevealUserExists: result.login_reveal_user_exits,\n\t\t\t\trevealLoginMethod: result.login_reveal_login_method,\n\t\t\t\tdefaultTokenExpiration: result.login_default_token_expiration,\n\t\t\t\tmaxTokenExpiration: result.login_max_token_expiration,\n\t\t\t\tmfaGraceDuration: result.login_mfa_grace_duration,\n\t\t\t\tanomalyDetection: {\n\t\t\t\t\tenabled: result.login_anomaly_detection_enabled,\n\t\t\t\t\thistorySize: result.login_anomaly_history_size,\n\t\t\t\t\temailThreshold: result.login_anomaly_email_threshold,\n\t\t\t\t\tstepUpThreshold: result.login_anomaly_step_up_threshold,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptcha: {\n\t\t\t\tprovider: result.captcha_provider,\n\t\t\t\tthreshold: result.captcha_threshold,\n\t\t\t\tprotect: {\n\t\t\t\t\tsignUp: result.captcha_protect_sign_up,\n\t\t\t\t\tpasswordReset: result.captcha_protect_password_reset,\n\t\t\t\t\tpasswordlessInit: result.captcha_protect_passwordless_init,\n\t\t\t\t\temailVerification: result.captcha_protect_email_verification,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptchaSecret,\n\t\t\trateLimits: {\n\t\t\t\tsignUpPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_sign_up_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_sign_up_per_ip_window,\n\t\t\t\t},\n\t\t\t\tloginPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_login_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_login_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordResetPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_password_reset_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_password_reset_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordlessInitPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_passwordless_init_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_passwordless_init_per_ip_window,\n\t\t\t\t},\n\t\t\t\temailOtpPerPerson: {\n\t\t\t\t\tlimit: result.rate_limit_email_otp_per_person_limit,\n\t\t\t\t\twindow: result.rate_limit_email_otp_per_person_window,\n\t\t\t\t},\n\t\t\t\temailVerificationPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_email_verification_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_email_verification_per_ip_window,\n\t\t\t\t},\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";AAIO,MAAM,2BAA2B,cAAsB;AAAA,EAC7D,YAA6B,WAAsB;AAClD,UAAA;AAD4B,SAAA,YAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0C;AACvD,UAAM,OAAO,MAAM,cAAc,OAAA,EAC/B,KAAK,QAAQ,EACb,OAAO,IAAI,QAAQ,GAAG,CAAC,EACvB,UAAU,EAAE;AACd,UAAM,SAAS,KAAK,eAAe,IAAI;AACvC,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAEA,UAAM,gBAAgB,OAAO,kBAAkB,OAAO,OAAO,2BAA2B,YACpF,MAAM,KAAK,UAAU,QAAQ,OAAO,gBAAgB,OAAO,sBAAsB,GAAG,MAAM,SAAS,MAAM,IAC1G;AAEH,WAAO;AAAA,MACN,QAAQ;AAAA,QACP,0BAA0B,OAAO;AAAA,MAAA;AAAA,MAElC,aAAa;AAAA,QACZ,qBAAqB,OAAO;AAAA,MAAA;AAAA,MAE7B,cAAc;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,KAAK,OAAO;AAAA,QACZ,YAAY,OAAO;AAAA,MAAA;AAAA,MAEpB,UAAU;AAAA,QACT,WAAW,OAAO;AAAA,QAClB,kBAAkB,OAAO;AAAA,QACzB,kBAAkB,OAAO;AAAA,QACzB,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,QAChB,gBAAgB,OAAO;AAAA,QACvB,WAAW,OAAO;AAAA,MAAA;AAAA,MAEnB,OAAO;AAAA,QACN,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,eAAe,OAAO;AAAA,QACtB,kBAAkB,OAAO;AAAA,QACzB,mBAAmB,OAAO;AAAA,QAC1B,wBAAwB,OAAO;AAAA,QAC/B,oBAAoB,OAAO;AAAA,QAC3B,kBAAkB,OAAO;AAAA,QACzB,kBAAkB;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,aAAa,OAAO;AAAA,UACpB,gBAAgB,OAAO;AAAA,UACvB,iBAAiB,OAAO;AAAA,QAAA;AAAA,MACzB;AAAA,MAED,SAAS;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,SAAS;AAAA,UACR,QAAQ,OAAO;AAAA,UACf,eAAe,OAAO;AAAA,UACtB,kBAAkB,OAAO;AAAA,UACzB,mBAAmB,OAAO;AAAA,QAAA;AAAA,MAC3B;AAAA,MAED;AAAA,MACA,YAAY;AAAA,QACX,aAAa;AAAA,UACZ,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,YAAY;AAAA,UACX,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,oBAAoB;AAAA,UACnB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,uBAAuB;AAAA,UACtB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,mBAAmB;AAAA,UAClB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,wBAAwB;AAAA,UACvB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,MAChB;AAAA,IACD;AAAA,EAEF;AACD;"}

package/dist/development/src/model/queries/idp/IdentityProviderBySlugQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityProviderBySlugQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdentityProviderBySlugQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createBaseIdpQuery } from './helpers'\nimport { IdentityProviderRow } from './types'\n\nexport class IdentityProviderBySlugQuery extends DatabaseQuery<IdentityProviderRow | null> {\n\tconstructor(private readonly slug: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdentityProviderRow | null> {\n\t\tconst rows = await createBaseIdpQuery()\n\t\t\t.where({\n\t\t\t\tslug: this.slug,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n"],"names":["DatabaseQuery","createBaseIdpQuery"],"mappings":";;;;AAIO,MAAM,oCAAoCA,SAAAA,cAA0C;AAAA,EAC1F,YAA6B,MAAc;AAC1C,UAAA;AAD4B,SAAA,OAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA8D;AAC3E,UAAM,OAAO,MAAMC,2BAAA,EACjB,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,IAAA,CACX,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;;"}
+{"version":3,"file":"IdentityProviderBySlugQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdentityProviderBySlugQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createBaseIdpQuery } from './helpers.js'\nimport { IdentityProviderRow } from './types.js'\n\nexport class IdentityProviderBySlugQuery extends DatabaseQuery<IdentityProviderRow | null> {\n\tconstructor(private readonly slug: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdentityProviderRow | null> {\n\t\tconst rows = await createBaseIdpQuery()\n\t\t\t.where({\n\t\t\t\tslug: this.slug,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n"],"names":["DatabaseQuery","createBaseIdpQuery"],"mappings":";;;;AAIO,MAAM,oCAAoCA,SAAAA,cAA0C;AAAA,EAC1F,YAA6B,MAAc;AAC1C,UAAA;AAD4B,SAAA,OAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA8D;AAC3E,UAAM,OAAO,MAAMC,2BAAA,EACjB,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,IAAA,CACX,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;;"}

package/dist/development/src/model/queries/idp/IdentityProviderBySlugQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityProviderBySlugQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdentityProviderBySlugQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createBaseIdpQuery } from './helpers'\nimport { IdentityProviderRow } from './types'\n\nexport class IdentityProviderBySlugQuery extends DatabaseQuery<IdentityProviderRow | null> {\n\tconstructor(private readonly slug: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdentityProviderRow | null> {\n\t\tconst rows = await createBaseIdpQuery()\n\t\t\t.where({\n\t\t\t\tslug: this.slug,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n"],"names":[],"mappings":";;AAIO,MAAM,oCAAoC,cAA0C;AAAA,EAC1F,YAA6B,MAAc;AAC1C,UAAA;AAD4B,SAAA,OAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA8D;AAC3E,UAAM,OAAO,MAAM,mBAAA,EACjB,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,IAAA,CACX,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;"}
+{"version":3,"file":"IdentityProviderBySlugQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdentityProviderBySlugQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createBaseIdpQuery } from './helpers.js'\nimport { IdentityProviderRow } from './types.js'\n\nexport class IdentityProviderBySlugQuery extends DatabaseQuery<IdentityProviderRow | null> {\n\tconstructor(private readonly slug: string) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdentityProviderRow | null> {\n\t\tconst rows = await createBaseIdpQuery()\n\t\t\t.where({\n\t\t\t\tslug: this.slug,\n\t\t\t})\n\t\t\t.getResult(db)\n\n\t\treturn this.fetchOneOrNull(rows)\n\t}\n}\n"],"names":[],"mappings":";;AAIO,MAAM,oCAAoC,cAA0C;AAAA,EAC1F,YAA6B,MAAc;AAC1C,UAAA;AAD4B,SAAA,OAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA8D;AAC3E,UAAM,OAAO,MAAM,mBAAA,EACjB,MAAM;AAAA,MACN,MAAM,KAAK;AAAA,IAAA,CACX,EACA,UAAU,EAAE;AAEd,WAAO,KAAK,eAAe,IAAI;AAAA,EAChC;AACD;"}

package/dist/development/src/model/queries/idp/IdentityProvidersQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityProvidersQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdentityProvidersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createBaseIdpQuery, createIdpDto } from './helpers'\nimport { IdentityProviderDto, IdentityProviderRow } from './types'\n\nexport class IdentityProvidersQuery extends DatabaseQuery<IdentityProviderDto[]> {\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdentityProviderDto[]> {\n\t\treturn (await createBaseIdpQuery()\n\t\t\t.getResult(db))\n\t\t\t.map(createIdpDto)\n\t}\n}\n"],"names":["DatabaseQuery","createBaseIdpQuery","createIdpDto"],"mappings":";;;;AAIO,MAAM,+BAA+BA,SAAAA,cAAqC;AAAA,EAChF,MAAM,MAAM,EAAE,MAAyD;AACtE,YAAQ,MAAMC,QAAAA,qBACZ,UAAU,EAAE,GACZ,IAAIC,oBAAY;AAAA,EACnB;AACD;;"}
+{"version":3,"file":"IdentityProvidersQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdentityProvidersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createBaseIdpQuery, createIdpDto } from './helpers.js'\nimport { IdentityProviderDto, IdentityProviderRow } from './types.js'\n\nexport class IdentityProvidersQuery extends DatabaseQuery<IdentityProviderDto[]> {\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdentityProviderDto[]> {\n\t\treturn (await createBaseIdpQuery()\n\t\t\t.getResult(db))\n\t\t\t.map(createIdpDto)\n\t}\n}\n"],"names":["DatabaseQuery","createBaseIdpQuery","createIdpDto"],"mappings":";;;;AAIO,MAAM,+BAA+BA,SAAAA,cAAqC;AAAA,EAChF,MAAM,MAAM,EAAE,MAAyD;AACtE,YAAQ,MAAMC,QAAAA,qBACZ,UAAU,EAAE,GACZ,IAAIC,oBAAY;AAAA,EACnB;AACD;;"}

package/dist/development/src/model/queries/idp/IdentityProvidersQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityProvidersQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdentityProvidersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createBaseIdpQuery, createIdpDto } from './helpers'\nimport { IdentityProviderDto, IdentityProviderRow } from './types'\n\nexport class IdentityProvidersQuery extends DatabaseQuery<IdentityProviderDto[]> {\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdentityProviderDto[]> {\n\t\treturn (await createBaseIdpQuery()\n\t\t\t.getResult(db))\n\t\t\t.map(createIdpDto)\n\t}\n}\n"],"names":[],"mappings":";;AAIO,MAAM,+BAA+B,cAAqC;AAAA,EAChF,MAAM,MAAM,EAAE,MAAyD;AACtE,YAAQ,MAAM,qBACZ,UAAU,EAAE,GACZ,IAAI,YAAY;AAAA,EACnB;AACD;"}
+{"version":3,"file":"IdentityProvidersQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/IdentityProvidersQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable } from '@contember/database'\nimport { createBaseIdpQuery, createIdpDto } from './helpers.js'\nimport { IdentityProviderDto, IdentityProviderRow } from './types.js'\n\nexport class IdentityProvidersQuery extends DatabaseQuery<IdentityProviderDto[]> {\n\tasync fetch({ db }: DatabaseQueryable): Promise<IdentityProviderDto[]> {\n\t\treturn (await createBaseIdpQuery()\n\t\t\t.getResult(db))\n\t\t\t.map(createIdpDto)\n\t}\n}\n"],"names":[],"mappings":";;AAIO,MAAM,+BAA+B,cAAqC;AAAA,EAChF,MAAM,MAAM,EAAE,MAAyD;AACtE,YAAQ,MAAM,qBACZ,UAAU,EAAE,GACZ,IAAI,YAAY;AAAA,EACnB;AACD;"}