@contember/engine-tenant-api 2.1.0-beta.2 → 2.2.0-alpha.1

package/dist/tests/cases/integration/mocked/sql/getProjectBySlugSql.d.ts

@@ -1,5 +1,5 @@
 import { ExpectedQuery } from '@contember/database-tester';
-import { Project } from '../../../../../src';
+import { Project } from '../../../../../src/index.js';
 export declare const getProjectBySlugSql: (args: {
     projectSlug: string;
     response: Project;

package/dist/tests/cases/integration/mocked/sql/getProjectBySlugSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getProjectBySlugSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getProjectBySlugSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE5C,eAAO,MAAM,mBAAmB,GAAI,MAAM;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,KAAG,aAQrF,CAAA"}
+{"version":3,"file":"getProjectBySlugSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/getProjectBySlugSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE1D,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AAErD,eAAO,MAAM,mBAAmB,GAAI,MAAM;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,KAAG,aAQrF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/listApiKeysSql.d.ts

@@ -0,0 +1,18 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export interface ApiKeyListResponseRow {
+    id: string;
+    identityId: string;
+    description?: string | null;
+    disabledAt?: Date | null;
+    createdAt: Date;
+    lastUsedAt?: Date | null;
+    expiresAt?: Date | null;
+}
+export declare const projectApiKeysSql: (args: {
+    projectId: string;
+    rows: ApiKeyListResponseRow[];
+}) => ExpectedQuery;
+export declare const globalApiKeysSql: (args: {
+    rows: ApiKeyListResponseRow[];
+}) => ExpectedQuery;
+//# sourceMappingURL=listApiKeysSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/listApiKeysSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listApiKeysSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/listApiKeysSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,WAAW,qBAAqB;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,IAAI,CAAA;IACf,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;IACxB,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CACvB;AAmBD,eAAO,MAAM,iBAAiB,GAAI,MAAM;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,qBAAqB,EAAE,CAAA;CAAE,KAAG,aAM7F,CAAA;AAEF,eAAO,MAAM,gBAAgB,GAAI,MAAM;IAAE,IAAI,EAAE,qBAAqB,EAAE,CAAA;CAAE,KAAG,aAMzE,CAAA"}

package/dist/tests/cases/integration/mocked/sql/listPersonsSql.d.ts

@@ -0,0 +1,19 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export interface ListPersonsResponseRow {
+    personId: string;
+    identityId: string;
+    email: string;
+    name?: string;
+    emailOtpEnabled?: boolean;
+}
+/**
+ * Slim person listing emitted by `PersonsQuery` — no `password_hash` / TOTP
+ * secrets, capped to `limit 100 offset 0` by default. Supports the `email` and
+ * `identityIds` (scoped) filter variants.
+ */
+export declare const listPersonsSql: (args: {
+    emailFilter?: string;
+    identityIds?: string[];
+    rows: ListPersonsResponseRow[];
+}) => ExpectedQuery;
+//# sourceMappingURL=listPersonsSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/listPersonsSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listPersonsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/listPersonsSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,WAAW,sBAAsB;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,eAAe,CAAC,EAAE,OAAO,CAAA;CACzB;AAQD;;;;GAIG;AACH,eAAO,MAAM,cAAc,GAAI,MAAM;IACpC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,IAAI,EAAE,sBAAsB,EAAE,CAAA;CAC9B,KAAG,aA4BH,CAAA"}

package/dist/tests/cases/integration/mocked/sql/listProjectSecretsSql.d.ts

@@ -0,0 +1,11 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export interface ProjectSecretResponseRow {
+    key: string;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export declare const listProjectSecretsSql: (args: {
+    projectId: string;
+    rows: ProjectSecretResponseRow[];
+}) => ExpectedQuery;
+//# sourceMappingURL=listProjectSecretsSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/listProjectSecretsSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listProjectSecretsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/listProjectSecretsSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,WAAW,wBAAwB;IACxC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,IAAI,CAAA;IACf,SAAS,EAAE,IAAI,CAAA;CACf;AAED,eAAO,MAAM,qBAAqB,GAAI,MAAM;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,wBAAwB,EAAE,CAAA;CAAE,KAAG,aAapG,CAAA"}

package/dist/tests/cases/integration/mocked/sql/listSessionsSql.d.ts

@@ -0,0 +1,18 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export interface SessionRow {
+    id: string;
+    created_at: Date;
+    expires_at: Date | null;
+    last_used_at: Date | null;
+    last_ip: string | null;
+    last_user_agent: string | null;
+    created_ip: string | null;
+    created_user_agent: string | null;
+    trust_forwarded_info: boolean;
+}
+export declare const listSessionsSql: (args: {
+    identityId: string;
+    now: Date;
+    rows: SessionRow[];
+}) => ExpectedQuery;
+//# sourceMappingURL=listSessionsSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/listSessionsSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listSessionsSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/listSessionsSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,IAAI,CAAA;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAA;IACvB,YAAY,EAAE,IAAI,GAAG,IAAI,CAAA;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,oBAAoB,EAAE,OAAO,CAAA;CAC7B;AAED,eAAO,MAAM,eAAe,GAAI,MAAM;IACrC,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,IAAI,CAAA;IACT,IAAI,EAAE,UAAU,EAAE,CAAA;CAClB,KAAG,aAkBF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/loginHistorySql.d.ts

@@ -0,0 +1,17 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export type PriorLoginRow = {
+    geoCountry?: string | null;
+    deviceFingerprint?: string | null;
+    ip?: string | null;
+};
+/**
+ * Mocks `LoginRiskAnalyzer.analyze`'s history lookup: the person's last N
+ * successful interactive sign-ins (password / IdP / passwordless), newest first.
+ * Only runs when anomaly detection is enabled in config.
+ */
+export declare const getLoginHistorySql: (args: {
+    personId: string;
+    limit?: number;
+    rows?: PriorLoginRow[];
+}) => ExpectedQuery;
+//# sourceMappingURL=loginHistorySql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/loginHistorySql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loginHistorySql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/loginHistorySql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,MAAM,aAAa,GAAG;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAClB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAA;CAAE,KAAG,aActG,CAAA"}

package/dist/tests/cases/integration/mocked/sql/personIdentityProvidersSql.d.ts

@@ -0,0 +1,31 @@
+import { ExpectedQuery } from '@contember/database-tester';
+export interface PersonIdpConnectionRow {
+    id: string;
+    createdAt: Date;
+    externalIdentifier: string;
+    slug: string;
+    type: string;
+    disabledAt?: Date | null;
+}
+export declare const getPersonIdentityProvidersSql: (args: {
+    personId: string;
+    response: PersonIdpConnectionRow[];
+}) => ExpectedQuery;
+/**
+ * Person-by-identity lookup with explicit control over the auth-method columns
+ * (`password_hash`, `passwordless_enabled`) that the disconnect lock-out check
+ * reads. The generic `getPersonByIdentity` helper always returns a non-null
+ * password hash, which would mask the lock-out path.
+ */
+export declare const getPersonByIdentityForIdp: (args: {
+    identityId: string;
+    personId: string;
+    passwordHash: string | null;
+    passwordlessEnabled?: boolean | null;
+}) => ExpectedQuery;
+export declare const disconnectPersonIdentityProviderSql: (args: {
+    personId: string;
+    personIdentityProviderId: string;
+    affectedRows?: number;
+}) => ExpectedQuery;
+//# sourceMappingURL=personIdentityProvidersSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/personIdentityProvidersSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"personIdentityProvidersSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/personIdentityProvidersSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,MAAM,WAAW,sBAAsB;IACtC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,IAAI,CAAA;IACf,kBAAkB,EAAE,MAAM,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CACxB;AAED,eAAO,MAAM,6BAA6B,GAAI,MAAM;IACnD,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CAClC,KAAG,aAkBF,CAAA;AAEF;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,GAAI,MAAM;IAC/C,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,mBAAmB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;CACpC,KAAG,aA8BF,CAAA;AAEF,eAAO,MAAM,mCAAmC,GAAI,MAAM;IACzD,QAAQ,EAAE,MAAM,CAAA;IAChB,wBAAwB,EAAE,MAAM,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB,KAAG,aAIF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/setEmailOtpEnabledSql.d.ts

@@ -0,0 +1,7 @@
+import { ExpectedQuery } from '@contember/database-tester';
+/** Mocks SetEmailOtpEnabledCommand: upsert person_mfa.email_otp_enabled. */
+export declare const setEmailOtpEnabledSql: (args: {
+    personId: string;
+    enabled: boolean;
+}) => ExpectedQuery;
+//# sourceMappingURL=setEmailOtpEnabledSql.d.ts.map

package/dist/tests/cases/integration/mocked/sql/setEmailOtpEnabledSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setEmailOtpEnabledSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/setEmailOtpEnabledSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,KAAG,aAKnF,CAAA"}

package/dist/tests/cases/integration/mocked/sql/updatePesonNameSql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updatePesonNameSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/updatePesonNameSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,0BAA0B,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAM3F,CAAA;AAEF,eAAO,MAAM,2BAA2B,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAM7F,CAAA;AAEF,eAAO,MAAM,kCAAkC,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAMzH,CAAA"}
+{"version":3,"file":"updatePesonNameSql.d.ts","sourceRoot":"","sources":["../../../../../../tests/cases/integration/mocked/sql/updatePesonNameSql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG1D,eAAO,MAAM,0BAA0B,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAM3F,CAAA;AAIF,eAAO,MAAM,2BAA2B,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAM7F,CAAA;AAEF,eAAO,MAAM,kCAAkC,GAAI,MAAM;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAG,aAMzH,CAAA"}

package/dist/tests/cases/integration/mocked/trustForwardedClientInfo.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=trustForwardedClientInfo.test.d.ts.map

package/dist/tests/cases/integration/mocked/trustForwardedClientInfo.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustForwardedClientInfo.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/integration/mocked/trustForwardedClientInfo.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/integration/mocked/verifyEmailMutation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verifyEmailMutation.test.d.ts.map

package/dist/tests/cases/integration/mocked/verifyEmailMutation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyEmailMutation.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/integration/mocked/verifyEmailMutation.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/apiKey/createSessionApiKeyPolicy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=createSessionApiKeyPolicy.test.d.ts.map

package/dist/tests/cases/unit/apiKey/createSessionApiKeyPolicy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSessionApiKeyPolicy.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/apiKey/createSessionApiKeyPolicy.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/apiKey/prolongApiKeyCommand.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=prolongApiKeyCommand.test.d.ts.map

package/dist/tests/cases/unit/apiKey/prolongApiKeyCommand.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prolongApiKeyCommand.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/apiKey/prolongApiKeyCommand.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/apiKey/unpersistedApiKeyManager.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=unpersistedApiKeyManager.test.d.ts.map

package/dist/tests/cases/unit/apiKey/unpersistedApiKeyManager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unpersistedApiKeyManager.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/apiKey/unpersistedApiKeyManager.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/apiKey/verifyAndProlongIdle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verifyAndProlongIdle.test.d.ts.map

package/dist/tests/cases/unit/apiKey/verifyAndProlongIdle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyAndProlongIdle.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/apiKey/verifyAndProlongIdle.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/authLogBaselineWrite.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authLogBaselineWrite.test.d.ts.map

package/dist/tests/cases/unit/authLogBaselineWrite.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authLogBaselineWrite.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/authLogBaselineWrite.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/authPolicyResolver.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authPolicyResolver.test.d.ts.map

package/dist/tests/cases/unit/authPolicyResolver.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authPolicyResolver.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/authPolicyResolver.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/backupCodeManager.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backupCodeManager.test.d.ts.map

package/dist/tests/cases/unit/backupCodeManager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backupCodeManager.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/backupCodeManager.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/captchaProviders.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=captchaProviders.test.d.ts.map

package/dist/tests/cases/unit/captchaProviders.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captchaProviders.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/captchaProviders.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/captchaValidator.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=captchaValidator.test.d.ts.map

package/dist/tests/cases/unit/captchaValidator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captchaValidator.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/captchaValidator.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/emailOtpManager.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=emailOtpManager.test.d.ts.map

package/dist/tests/cases/unit/emailOtpManager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailOtpManager.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/emailOtpManager.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/hibpChecker.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=hibpChecker.test.d.ts.map

package/dist/tests/cases/unit/hibpChecker.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hibpChecker.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/hibpChecker.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/idp/backchannelLogoutManager.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backchannelLogoutManager.test.d.ts.map

package/dist/tests/cases/unit/idp/backchannelLogoutManager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backchannelLogoutManager.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/idp/backchannelLogoutManager.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/idp/idpSessionRevalidator.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=idpSessionRevalidator.test.d.ts.map

package/dist/tests/cases/unit/idp/idpSessionRevalidator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idpSessionRevalidator.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/idp/idpSessionRevalidator.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/idp/oidcLogout.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=oidcLogout.test.d.ts.map

package/dist/tests/cases/unit/idp/oidcLogout.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcLogout.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/idp/oidcLogout.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/idp/oidcProvider.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=oidcProvider.test.d.ts.map

package/dist/tests/cases/unit/idp/oidcProvider.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcProvider.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/idp/oidcProvider.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/idp/oidcResponse.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=oidcResponse.test.d.ts.map

package/dist/tests/cases/unit/idp/oidcResponse.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcResponse.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/idp/oidcResponse.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/idp/oidcRevalidate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=oidcRevalidate.test.d.ts.map

package/dist/tests/cases/unit/idp/oidcRevalidate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcRevalidate.test.d.ts","sourceRoot":"","sources":["../../../../../tests/cases/unit/idp/oidcRevalidate.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/loginRiskAnalyzer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=loginRiskAnalyzer.test.d.ts.map

package/dist/tests/cases/unit/loginRiskAnalyzer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loginRiskAnalyzer.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/loginRiskAnalyzer.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/otpManager.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=otpManager.test.d.ts.map

package/dist/tests/cases/unit/otpManager.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otpManager.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/otpManager.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/passwordStrengthValidator.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=passwordStrengthValidator.test.d.ts.map

package/dist/tests/cases/unit/passwordStrengthValidator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passwordStrengthValidator.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/passwordStrengthValidator.test.ts"],"names":[],"mappings":""}

package/dist/tests/cases/unit/rateLimiter.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rateLimiter.test.d.ts.map

package/dist/tests/cases/unit/rateLimiter.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimiter.test.d.ts","sourceRoot":"","sources":["../../../../tests/cases/unit/rateLimiter.test.ts"],"names":[],"mappings":""}

package/dist/tests/src/IdPMock.d.ts

@@ -1,7 +1,17 @@
-import { IdentityProviderHandler, IDPResponse, InitIDPAuthResult } from '../../src';
+import { IdentityProviderHandler, IDPResponse, InitIDPAuthResult, LogoutTokenClaims, LogoutUrlRequest } from '../../src/index.js';
 export declare class IdPMock implements IdentityProviderHandler<any> {
     initAuth(configuration: any, data: unknown): Promise<InitIDPAuthResult>;
     processResponse(configuration: any, responseData: any): Promise<IDPResponse>;
     validateConfiguration(config: unknown): any;
+    /**
+     * Test double for OIDC RP-initiated logout. Returns a deterministic URL built from the config's
+     * `endSessionEndpoint` (null when absent, mirroring an IdP without an `end_session_endpoint`).
+     */
+    buildLogoutUrl(configuration: any, request: LogoutUrlRequest): Promise<string | null>;
+    /**
+     * Test double for OIDC back-channel logout token validation. A token of the form `sid:<value>`
+     * or `sub:<value>` is treated as valid and decoded; anything else throws (invalid token).
+     */
+    validateLogoutToken(configuration: any, logoutToken: string): Promise<LogoutTokenClaims>;
 }
 //# sourceMappingURL=IdPMock.d.ts.map

package/dist/tests/src/IdPMock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IdPMock.d.ts","sourceRoot":"","sources":["../../../tests/src/IdPMock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAEnF,qBAAa,OAAQ,YAAW,uBAAuB,CAAC,GAAG,CAAC;IAC3D,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAOvE,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC;IAO5E,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,GAAG;CAG3C"}
+{"version":3,"file":"IdPMock.d.ts","sourceRoot":"","sources":["../../../tests/src/IdPMock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAEjI,qBAAa,OAAQ,YAAW,uBAAuB,CAAC,GAAG,CAAC;IAC3D,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAOvE,eAAe,CAAC,aAAa,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC;IAQ5E,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,GAAG;IAI3C;;;OAGG;IACH,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAerF;;;OAGG;IACH,mBAAmB,CAAC,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CASxF"}

package/dist/tests/src/mailer.d.ts

@@ -1,4 +1,4 @@
-import { Mailer, MailMessage } from '../../src/utils';
+import { Mailer, MailMessage } from '../../src/utils/index.js';
 export type ExpectedMessage = {
     subject: string;
 };

package/dist/tests/src/mailer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mailer.d.ts","sourceRoot":"","sources":["../../../tests/src/mailer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,WAAW,EAAY,MAAM,iBAAiB,CAAA;AAG/D,MAAM,MAAM,eAAe,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEjD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IACnC,aAAa,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,WAAW,CAAA;IACxD,WAAW,EAAE,MAAM,IAAI,CAAA;CACvB,CAAA;AACD,eAAO,MAAM,kBAAkB,QAAO,YAqBrC,CAAA"}
+{"version":3,"file":"mailer.d.ts","sourceRoot":"","sources":["../../../tests/src/mailer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,WAAW,EAAY,MAAM,0BAA0B,CAAA;AAGxE,MAAM,MAAM,eAAe,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEjD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IACnC,aAAa,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,WAAW,CAAA;IACxD,WAAW,EAAE,MAAM,IAAI,CAAA;CACvB,CAAA;AACD,eAAO,MAAM,kBAAkB,QAAO,YAqBrC,CAAA"}

package/dist/tests/src/testTenant.d.ts

@@ -1,13 +1,31 @@
-import { GraphQLTestQuery } from '../cases/integration/mocked/gql/types';
+import { GraphQLTestQuery } from '../cases/integration/mocked/gql/types.js';
+import { Identity, Providers } from '../../src/index.js';
+import { Authorizator } from '@contember/authorization';
 import { ExpectedQuery } from '@contember/database-tester';
-import { ExpectedMessage } from './mailer';
-import { AuthLogService } from '../../src/model/service/AuthLogService';
+import { ExpectedMessage } from './mailer.js';
+import { AuthLogService } from '../../src/model/service/AuthLogService.js';
 export interface Test {
     query: GraphQLTestQuery;
     executes: ExpectedQuery[];
     return: object;
     sentMails?: ExpectedMessage[];
-    expectedAuthLog?: AuthLogService.LogArgs;
+    /** A single expected auth log, or a sequence of them when the mutation emits more than one. */
+    expectedAuthLog?: AuthLogService.LogArgs | AuthLogService.LogArgs[];
+    callerTrustForwardedInfo?: boolean;
+    httpInfo?: {
+        ip?: string;
+        userAgent?: string;
+        geoCountry?: string;
+    };
+    /** Override individual providers (e.g. a working `decrypt` to enable captcha). */
+    providers?: Partial<Providers>;
+    /** Tenant roles of the authenticated identity (default: none). */
+    identityRoles?: string[];
+    /**
+     * Override the authorizator. The default allows every action; pass a custom one
+     * to exercise forbidden / partially-allowed (e.g. per-role) ACL branches.
+     */
+    authorizator?: Authorizator<Identity>;
 }
 export declare const createUuidGenerator: () => () => string;
 export declare const now: Date;

package/dist/tests/src/testTenant.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testTenant.d.ts","sourceRoot":"","sources":["../../../tests/src/testTenant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAA;AAiBxE,OAAO,EAAwB,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAEhF,OAAO,EAAsB,eAAe,EAAE,MAAM,UAAU,CAAA;AAM9D,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAA;AAEvE,MAAM,WAAW,IAAI;IACpB,KAAK,EAAE,gBAAgB,CAAA;IACvB,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,eAAe,EAAE,CAAA;IAC7B,eAAe,CAAC,EAAE,cAAc,CAAC,OAAO,CAAA;CACxC;AAED,eAAO,MAAM,mBAAmB,oBAG/B,CAAA;AAED,eAAO,MAAM,GAAG,MAA+B,CAAA;AAuB/C,eAAO,MAAM,uBAAuB,QAAgB,CAAA;AACpD,eAAO,MAAM,qBAAqB,QAAgB,CAAA;AAElD,eAAO,MAAM,iBAAiB,GAAU,MAAM,IAAI,kBAoFjD,CAAA"}
+{"version":3,"file":"testTenant.d.ts","sourceRoot":"","sources":["../../../tests/src/testTenant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAA;AAE3E,OAAO,EAGN,QAAQ,EAIR,SAAS,EAKT,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAIvD,OAAO,EAAwB,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAEhF,OAAO,EAAsB,eAAe,EAAE,MAAM,aAAa,CAAA;AAMjE,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAA;AAE1E,MAAM,WAAW,IAAI;IACpB,KAAK,EAAE,gBAAgB,CAAA;IACvB,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,eAAe,EAAE,CAAA;IAC7B,+FAA+F;IAC/F,eAAe,CAAC,EAAE,cAAc,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,CAAA;IACnE,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACnE,kFAAkF;IAClF,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IAC9B,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;OAGG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;CACrC;AAED,eAAO,MAAM,mBAAmB,oBAG/B,CAAA;AAED,eAAO,MAAM,GAAG,MAA+B,CAAA;AAuB/C,eAAO,MAAM,uBAAuB,QAAgB,CAAA;AACpD,eAAO,MAAM,qBAAqB,QAAgB,CAAA;AAElD,eAAO,MAAM,iBAAiB,GAAU,MAAM,IAAI,kBA+FjD,CAAA"}