@contember/engine-tenant-api 2.1.0-beta.2 → 2.2.0-alpha.1

package/dist/development/index.js

@@ -15,12 +15,22 @@ import { CreateApiKeyCommand, CreateApiKeyCommandResult } from "./src/model/comm
 import { DisableApiKeyCommand } from "./src/model/commands/apiKey/DisableApiKeyCommand.js";
 import { DisableIdentityApiKeysCommand } from "./src/model/commands/apiKey/DisableIdentityApiKeysCommand.js";
 import { DisableOneOffApiKeyCommand } from "./src/model/commands/apiKey/DisableOneOffApiKeyCommand.js";
-import { ProlongApiKeyCommand } from "./src/model/commands/apiKey/ProlongApiKeyCommand.js";
+import { PROLONG_THROTTLE_MS, ProlongApiKeyCommand } from "./src/model/commands/apiKey/ProlongApiKeyCommand.js";
+import { CreateAuthPolicyCommand } from "./src/model/commands/authPolicy/CreateAuthPolicyCommand.js";
+import { UpdateAuthPolicyCommand } from "./src/model/commands/authPolicy/UpdateAuthPolicyCommand.js";
+import { DeleteAuthPolicyCommand } from "./src/model/commands/authPolicy/DeleteAuthPolicyCommand.js";
+import { ConsumeBackupCodeCommand } from "./src/model/commands/backupCode/ConsumeBackupCodeCommand.js";
+import { CreateBackupCodeCommand } from "./src/model/commands/backupCode/CreateBackupCodeCommand.js";
+import { DeleteBackupCodesCommand } from "./src/model/commands/backupCode/DeleteBackupCodesCommand.js";
 import { UpdateConfigurationCommand } from "./src/model/commands/configuration/UpdateConfigurationCommand.js";
 import { ChangePasswordCommand } from "./src/model/commands/person/ChangePasswordCommand.js";
 import { CreatePersonCommand } from "./src/model/commands/person/CreatePersonCommand.js";
+import { ResetPersonMfaCommand } from "./src/model/commands/person/ResetPersonMfaCommand.js";
+import { SetMfaGraceUntilCommand } from "./src/model/commands/person/SetMfaGraceUntilCommand.js";
 import { CreatePersonIdentityProviderIdentifierCommand } from "./src/model/commands/person/CreatePersonIdentityProviderIdentifierCommand.js";
+import { MarkEmailVerifiedCommand } from "./src/model/commands/person/MarkEmailVerifiedCommand.js";
 import { TogglePersonPasswordlessCommand } from "./src/model/commands/person/TogglePersonPasswordlessCommand.js";
+import { RecordRateLimitEventCommand } from "./src/model/commands/rateLimit/RecordRateLimitEventCommand.js";
 import { CommandBus } from "./src/model/commands/CommandBus.js";
 import { CreateIdentityCommand } from "./src/model/commands/identity/CreateIdentityCommand.js";
 import { PatchIdentityGlobalRoles } from "./src/model/commands/identity/PatchIdentityGlobalRoles.js";
@@ -37,47 +47,80 @@ import { PatchProjectMembershipVariablesCommand } from "./src/model/commands/mem
 import { ConfirmOtpCommand } from "./src/model/commands/otp/ConfirmOtpCommand.js";
 import { DisableOtpCommand } from "./src/model/commands/otp/DisableOtpCommand.js";
 import { PrepareOtpCommand } from "./src/model/commands/otp/PrepareOtpCommand.js";
+import { ReEncryptOtpSecretCommand } from "./src/model/commands/otp/ReEncryptOtpSecretCommand.js";
+import { SetEmailOtpEnabledCommand } from "./src/model/commands/otp/SetEmailOtpEnabledCommand.js";
 import { ActivateOtpCommand } from "./src/model/commands/personToken/ActivateOtpCommand.js";
 import { CreatePersonTokenCommand } from "./src/model/commands/personToken/CreatePersonTokenCommand.js";
 import { InvalidateTokenCommand } from "./src/model/commands/personToken/InvalidateTokenCommand.js";
+import { InvalidateEmailOtpTokensCommand } from "./src/model/commands/personToken/InvalidateEmailOtpTokensCommand.js";
 import { IncreaseOtpAttemptCommand } from "./src/model/commands/personToken/IncreaseOtpAttemptCommand.js";
+import { ClaimOtpAttemptCommand } from "./src/model/commands/personToken/ClaimOtpAttemptCommand.js";
 import { ResetPasswordCommand } from "./src/model/commands/personToken/ResetPasswordCommand.js";
 import { SavePersonTokenCommand } from "./src/model/commands/personToken/SavePersonTokenCommand.js";
+import { SaveEmailOtpTokenCommand } from "./src/model/commands/personToken/SaveEmailOtpTokenCommand.js";
 import { NoPassword, PasswordHash, PasswordPlain } from "./src/model/dtos/Password.js";
 import { ApiKeyByIdQuery, ApiKeyByTokenQuery } from "./src/model/queries/apiKey/ApiKeyQuery.js";
+import { GlobalApiKeysQuery, ProjectApiKeysQuery } from "./src/model/queries/apiKey/ApiKeyListQuery.js";
+import { ApiKeySessionsByIdentityQuery } from "./src/model/queries/apiKey/ApiKeySessionsQuery.js";
+import { AuthPoliciesQuery } from "./src/model/queries/authPolicy/AuthPoliciesQuery.js";
 import { ConfigurationQuery } from "./src/model/queries/configuration/ConfigurationQuery.js";
 import { MailTemplateQuery } from "./src/model/queries/mailTemplate/MailTemplateQuery.js";
 import { MailTemplateListQuery } from "./src/model/queries/mailTemplate/MailTemplateListQuery.js";
+import { AllProjectRolesByIdentityQuery } from "./src/model/queries/membership/AllProjectRolesByIdentityQuery.js";
 import { ProjectMembershipByIdentityQuery } from "./src/model/queries/membership/ProjectMembershipByIdentityQuery.js";
 import { ProjectMembersQuery } from "./src/model/queries/membership/ProjectMembersQuery.js";
 import { ProjectRolesByIdentityQuery } from "./src/model/queries/membership/ProjectRolesByIdentityQuery.js";
 import { PersonByIdentityBatchQuery } from "./src/model/queries/person/PersonByIdentityBatchQuery.js";
 import { PersonByIdPQuery } from "./src/model/queries/person/PersonByIdPQuery.js";
 import { PersonQuery } from "./src/model/queries/person/PersonQuery.js";
+import { PersonsQuery } from "./src/model/queries/person/PersonsQuery.js";
 import { IdentityQuery } from "./src/model/queries/identity/IdentityQuery.js";
 import { IdentityProviderBySlugQuery } from "./src/model/queries/idp/IdentityProviderBySlugQuery.js";
 import { IdentityProvidersQuery } from "./src/model/queries/idp/IdentityProvidersQuery.js";
+import { IdpSessionByApiKeyQuery } from "./src/model/queries/idp/IdpSessionByApiKeyQuery.js";
+import { IdpSessionsBySidQuery } from "./src/model/queries/idp/IdpSessionsBySidQuery.js";
+import { IdpSessionsBySubQuery } from "./src/model/queries/idp/IdpSessionsBySubQuery.js";
+import { PersonIdentityProvidersQuery } from "./src/model/queries/idp/PersonIdentityProvidersQuery.js";
 import { ProjectSecretsQuery } from "./src/model/queries/project/ProjectSecretsQuery.js";
+import { ProjectSecretKeysQuery } from "./src/model/queries/project/ProjectSecretKeysQuery.js";
 import { ProjectBySlugQuery } from "./src/model/queries/project/ProjectBySlugQuery.js";
 import { ProjectsByIdentityQuery } from "./src/model/queries/project/ProjectsByIdentityQuery.js";
 import { ProjectsQuery } from "./src/model/queries/project/ProjectsQuery.js";
 import { ProjectUpdateTimestampQuery } from "./src/model/queries/project/ProjectUpdateTimestampQuery.js";
+import { RateLimitCountQuery } from "./src/model/queries/rateLimit/RateLimitCountQuery.js";
 import { UserMailer } from "./src/model/mailing/UserMailer.js";
 import { MailType, mailTypeFromDbToSchema, mailTypeFromSchemaToDb } from "./src/model/mailing/type.js";
 import { ApiKeyManager, VerifyErrorCode, VerifyResult } from "./src/model/service/apiKey/ApiKeyManager.js";
 import { ApiKeyService, CreateApiKeyResult } from "./src/model/service/apiKey/ApiKeyService.js";
+import { UNPERSISTED_ROOT_IDENTITY_ID, UnpersistedApiKeyManager } from "./src/model/service/apiKey/UnpersistedApiKeyManager.js";
+import { CaptchaValidator } from "./src/model/service/captcha/CaptchaValidator.js";
+import { HCaptchaProvider } from "./src/model/service/captcha/HCaptchaProvider.js";
+import { RecaptchaV3Provider } from "./src/model/service/captcha/RecaptchaV3Provider.js";
+import { TurnstileProvider } from "./src/model/service/captcha/TurnstileProvider.js";
 import { IdentityProviderNotFoundError } from "./src/model/service/idp/IdentityProviderNotFoundError.js";
 import { IDPHandlerRegistry } from "./src/model/service/idp/IDPHandlerRegistry.js";
+import { IdpSessionRevalidator } from "./src/model/service/idp/IdpSessionRevalidator.js";
+import { BackchannelLogoutManager } from "./src/model/service/idp/BackchannelLogoutManager.js";
+import { IDPRevalidationConfig, REVALIDATION_DEFAULT_FALLBACK_INTERVAL, REVALIDATION_DEFAULT_MIN_INTERVAL, REVALIDATION_DEFAULT_SOFT_THRESHOLD } from "./src/model/service/idp/IDPRevalidation.js";
 import { IDPManager } from "./src/model/service/idp/IDPManager.js";
+import { PersonIdentityProviderManager } from "./src/model/service/idp/PersonIdentityProviderManager.js";
 import { IDPResponseError } from "./src/model/service/idp/IDPResponseError.js";
 import { IDPValidationError } from "./src/model/service/idp/IDPValidationError.js";
 import { InvalidIDPConfigurationError } from "./src/model/service/idp/InvalidIDPConfigurationError.js";
 import { AppleConfiguration, AppleProvider } from "./src/model/service/idp/providers/AppleProvider.js";
 import { OIDCProvider } from "./src/model/service/idp/providers/OIDCProvider.js";
 import { FacebookProvider } from "./src/model/service/idp/providers/FacebookProvider.js";
+import { AuthLogService } from "./src/model/service/AuthLogService.js";
+import { AuthPolicyManager } from "./src/model/service/AuthPolicyManager.js";
+import { AuthPolicyResolver } from "./src/model/service/AuthPolicyResolver.js";
+import { BackupCodeManager } from "./src/model/service/BackupCodeManager.js";
+import { EmailChangeManager } from "./src/model/service/EmailChangeManager.js";
+import { EmailOtpManager } from "./src/model/service/EmailOtpManager.js";
 import { EmailValidator } from "./src/model/service/EmailValidator.js";
+import { EmailVerificationManager } from "./src/model/service/EmailVerificationManager.js";
 import { IDPSignInManager } from "./src/model/service/IDPSignInManager.js";
 import { InviteManager, InviteResult } from "./src/model/service/InviteManager.js";
+import { BASELINE_SIGN_IN_TYPES, LoginRiskAnalyzer, RiskWeight, ipPrefix } from "./src/model/service/LoginRiskAnalyzer.js";
 import { MailTemplateManager } from "./src/model/service/MailTemplateManager.js";
 import { MembershipValidator } from "./src/model/service/MembershipValidator.js";
 import { OtpAuthenticator } from "./src/model/service/OtpAuthenticator.js";
@@ -87,14 +130,16 @@ import { PasswordResetManager } from "./src/model/service/PasswordResetManager.j
 import { PersonAccessManager } from "./src/model/service/PersonAccessManager.js";
 import { PersonManager } from "./src/model/service/PersonManager.js";
 import { CreateProjectResult, ProjectInitError, ProjectManager } from "./src/model/service/ProjectManager.js";
+import { RateLimiter } from "./src/model/service/RateLimiter.js";
 import { ProjectMemberManager } from "./src/model/service/ProjectMemberManager.js";
 import { RolesManager } from "./src/model/service/RolesManager.js";
 import { SecretsManager } from "./src/model/service/SecretsManager.js";
 import { SignInManager } from "./src/model/service/SignInManager.js";
+import { SignOutManager } from "./src/model/service/SignOutManager.js";
 import { SignUpManager, SignUpResult } from "./src/model/service/SignUpManager.js";
 import { ApiKey } from "./src/model/type/ApiKey.js";
 import { DatabaseContext } from "./src/model/utils/DatabaseContext.js";
-import { computeTokenHash, generateToken, isTokenHash, validateToken } from "./src/model/utils/token.js";
+import { MAX_OTP_ATTEMPTS, computeTokenHash, generateToken, isTokenHash, timingSafeCompareHash, validateToken } from "./src/model/utils/token.js";
 import { TenantContainerFactory } from "./src/TenantContainer.js";
 import { CreateApiKeyMutationResolver } from "./src/resolvers/mutation/apiKey/CreateApiKeyMutationResolver.js";
 import { DisableApiKeyMutationResolver } from "./src/resolvers/mutation/apiKey/DisableApiKeyMutationResolver.js";
@@ -102,12 +147,16 @@ import { IdentityGlobalRolesMutationResolver } from "./src/resolvers/mutation/id
 import { DisableIDPMutationResolver } from "./src/resolvers/mutation/idp/DisableIDPMutationResolver.js";
 import { EnableIDPMutationResolver } from "./src/resolvers/mutation/idp/EnableIDPMutationResolver.js";
 import { AddIDPMutationResolver } from "./src/resolvers/mutation/idp/AddIDPMutationResolver.js";
+import { DisconnectMyIdentityProviderMutationResolver } from "./src/resolvers/mutation/idp/DisconnectMyIdentityProviderMutationResolver.js";
 import { MailTemplateMutationResolver } from "./src/resolvers/mutation/mailTemplates/MailTemplateMutationResolver.js";
 import { ChangeProfileMutationResolver } from "./src/resolvers/mutation/person/ChangeProfileMutationResolver.js";
 import { ChangePasswordMutationResolver } from "./src/resolvers/mutation/person/ChangePasswordMutationResolver.js";
+import { EmailVerificationMutationResolver } from "./src/resolvers/mutation/person/EmailVerificationMutationResolver.js";
 import { IDPMutationResolver } from "./src/resolvers/mutation/person/IDPMutationResolver.js";
 import { InviteMutationResolver } from "./src/resolvers/mutation/person/InviteMutationResolver.js";
 import { OtpMutationResolver } from "./src/resolvers/mutation/person/OtpMutationResolver.js";
+import { EmailOtpMutationResolver } from "./src/resolvers/mutation/person/EmailOtpMutationResolver.js";
+import { RegenerateBackupCodesMutationResolver } from "./src/resolvers/mutation/person/RegenerateBackupCodesMutationResolver.js";
 import { ResetPasswordMutationResolver } from "./src/resolvers/mutation/person/ResetPasswordMutationResolver.js";
 import { SignInMutationResolver } from "./src/resolvers/mutation/person/SignInMutationResolver.js";
 import { SignOutMutationResolver } from "./src/resolvers/mutation/person/SignOutMutationResolver.js";
@@ -118,11 +167,14 @@ import { UpdateProjectMutationResolver } from "./src/resolvers/mutation/project/
 import { AddProjectMemberMutationResolver } from "./src/resolvers/mutation/projectMember/AddProjectMemberMutationResolver.js";
 import { RemoveProjectMemberMutationResolver } from "./src/resolvers/mutation/projectMember/RemoveProjectMemberMutationResolver.js";
 import { UpdateProjectMemberMutationResolver } from "./src/resolvers/mutation/projectMember/UpdateProjectMemberMutationResolver.js";
+import { ApiKeyQueryResolver } from "./src/resolvers/query/ApiKeyQueryResolver.js";
+import { AuthLogQueryResolver } from "./src/resolvers/query/AuthLogQueryResolver.js";
 import { MeQueryResolver } from "./src/resolvers/query/MeQueryResolver.js";
 import { ProjectMembersQueryResolver } from "./src/resolvers/query/ProjectMembersQueryResolver.js";
 import { ProjectQueryResolver } from "./src/resolvers/query/ProjectQueryResolver.js";
 import { PersonQueryResolver } from "./src/resolvers/query/PersonQueryResolver.js";
 import { IdentityTypeResolver } from "./src/resolvers/types/IdentityTypeResolver.js";
+import { PersonTypeResolver } from "./src/resolvers/types/PersonTypeResolver.js";
 import { ProjectTypeResolver } from "./src/resolvers/types/ProjectTypeResolver.js";
 import { ResolverFactory } from "./src/resolvers/ResolverFactory.js";
 import { TenantResolverContextFactory, createResolverContext } from "./src/resolvers/TenantResolverContextFactory.js";
@@ -138,23 +190,39 @@ export {
   AddMailTemplateCommand,
   AddProjectMemberCommand,
   AddProjectMemberMutationResolver,
+  AllProjectRolesByIdentityQuery,
   ApiKey,
   ApiKeyByIdQuery,
   ApiKeyByTokenQuery,
   ApiKeyManager,
+  ApiKeyQueryResolver,
   ApiKeyService,
+  ApiKeySessionsByIdentityQuery,
   AppleConfiguration,
   AppleProvider,
+  AuthLogQueryResolver,
+  AuthLogService,
+  AuthPoliciesQuery,
+  AuthPolicyManager,
+  AuthPolicyResolver,
+  BASELINE_SIGN_IN_TYPES,
+  BackchannelLogoutManager,
+  BackupCodeManager,
+  CaptchaValidator,
   ChangePasswordCommand,
   ChangePasswordMutationResolver,
   ChangeProfileMutationResolver,
+  ClaimOtpAttemptCommand,
   CommandBus,
   ConfigurationQuery,
   ConfirmOtpCommand,
+  ConsumeBackupCodeCommand,
   CreateApiKeyCommand,
   CreateApiKeyCommandResult,
   CreateApiKeyMutationResolver,
   CreateApiKeyResult,
+  CreateAuthPolicyCommand,
+  CreateBackupCodeCommand,
   CreateIdentityCommand,
   CreateOrUpdateProjectMembershipCommand,
   CreatePersonCommand,
@@ -164,19 +232,30 @@ export {
   CreateProjectMutationResolver,
   CreateProjectResult,
   DatabaseContext,
+  DeleteAuthPolicyCommand,
+  DeleteBackupCodesCommand,
   DisableApiKeyCommand,
   DisableApiKeyMutationResolver,
   DisableIDPMutationResolver,
   DisableIdentityApiKeysCommand,
   DisableOneOffApiKeyCommand,
   DisableOtpCommand,
+  DisconnectMyIdentityProviderMutationResolver,
+  EmailChangeManager,
+  EmailOtpManager,
+  EmailOtpMutationResolver,
   EmailValidator,
+  EmailVerificationManager,
+  EmailVerificationMutationResolver,
   EnableIDPMutationResolver,
   FacebookProvider,
+  GlobalApiKeysQuery,
+  HCaptchaProvider,
   IDPHandlerRegistry,
   IDPManager,
   IDPMutationResolver,
   IDPResponseError,
+  IDPRevalidationConfig,
   IDPSignInManager,
   IDPValidationError,
   IdentityFactory,
@@ -187,17 +266,25 @@ export {
   IdentityQuery,
   IdentityScope,
   IdentityTypeResolver,
+  IdpSessionByApiKeyQuery,
+  IdpSessionRevalidator,
+  IdpSessionsBySidQuery,
+  IdpSessionsBySubQuery,
   IncreaseOtpAttemptCommand,
   InvalidIDPConfigurationError,
+  InvalidateEmailOtpTokensCommand,
   InvalidateTokenCommand,
   InviteManager,
   InviteMutationResolver,
   InviteResult,
+  LoginRiskAnalyzer,
+  MAX_OTP_ATTEMPTS,
   MailTemplateListQuery,
   MailTemplateManager,
   MailTemplateMutationResolver,
   MailTemplateQuery,
   MailType,
+  MarkEmailVerifiedCommand,
   MeQueryResolver,
   MembershipMatcher,
   MembershipValidationError,
@@ -210,6 +297,7 @@ export {
   OtpError,
   OtpManager,
   OtpMutationResolver,
+  PROLONG_THROTTLE_MS,
   PasswordChangeManager,
   PasswordHash,
   PasswordPlain,
@@ -223,10 +311,15 @@ export {
   PersonAccessManager,
   PersonByIdPQuery,
   PersonByIdentityBatchQuery,
+  PersonIdentityProviderManager,
+  PersonIdentityProvidersQuery,
   PersonManager,
   PersonQuery,
   PersonQueryResolver,
+  PersonTypeResolver,
+  PersonsQuery,
   PrepareOtpCommand,
+  ProjectApiKeysQuery,
   ProjectAwareIdentity,
   ProjectBySlugQuery,
   ProjectInitError,
@@ -239,26 +332,42 @@ export {
   ProjectRolesByIdentityQuery,
   ProjectScope,
   ProjectScopeFactory,
+  ProjectSecretKeysQuery,
   ProjectSecretsQuery,
   ProjectTypeResolver,
   ProjectUpdateTimestampQuery,
   ProjectsByIdentityQuery,
   ProjectsQuery,
   ProlongApiKeyCommand,
+  REVALIDATION_DEFAULT_FALLBACK_INTERVAL,
+  REVALIDATION_DEFAULT_MIN_INTERVAL,
+  REVALIDATION_DEFAULT_SOFT_THRESHOLD,
+  RateLimitCountQuery,
+  RateLimiter,
+  ReEncryptOtpSecretCommand,
+  RecaptchaV3Provider,
+  RecordRateLimitEventCommand,
+  RegenerateBackupCodesMutationResolver,
   RemoveMailTemplateCommand,
   RemoveProjectMemberCommand,
   RemoveProjectMemberMutationResolver,
   ResetPasswordCommand,
   ResetPasswordMutationResolver,
+  ResetPersonMfaCommand,
   ResolverFactory,
+  RiskWeight,
   RolesManager,
+  SaveEmailOtpTokenCommand,
   SavePersonTokenCommand,
   index as Schema,
   SecretsManager,
+  SetEmailOtpEnabledCommand,
+  SetMfaGraceUntilCommand,
   SetProjectSecretCommand,
   SetProjectSecretMutationResolver,
   SignInManager,
   SignInMutationResolver,
+  SignOutManager,
   SignOutMutationResolver,
   SignUpManager,
   SignUpMutationResolver,
@@ -270,6 +379,10 @@ export {
   TenantResolverContextFactory,
   TenantRole,
   TogglePersonPasswordlessCommand,
+  TurnstileProvider,
+  UNPERSISTED_ROOT_IDENTITY_ID,
+  UnpersistedApiKeyManager,
+  UpdateAuthPolicyCommand,
   UpdateConfigurationCommand,
   UpdateProjectCommand,
   UpdateProjectMemberCommand,
@@ -283,9 +396,11 @@ export {
   createMailer,
   createResolverContext,
   generateToken,
+  ipPrefix,
   isTokenHash,
   mailTypeFromDbToSchema,
   mailTypeFromSchemaToDb,
+  timingSafeCompareHash,
   default2 as typeDefs,
   validateToken
 };

package/dist/development/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}