@contember/engine-tenant-api 2.2.0-alpha.3 → 2.2.0-alpha.6

package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.cjs

@@ -10,8 +10,8 @@ class UpdateConfigurationCommand {
     const rl = this.configuration.rateLimits;
     let captchaSecretCol;
     let captchaSecretVersionCol;
-    if (captcha?.secret !== void 0) {
-      if (captcha.secret === "" || captcha.secret === null) {
+    if (captcha?.secret !== void 0 && captcha.secret !== null) {
+      if (captcha.secret === "") {
         captchaSecretCol = null;
         captchaSecretVersionCol = null;
       } else {
@@ -66,7 +66,9 @@ class UpdateConfigurationCommand {
         rate_limit_email_otp_per_person_limit: rl?.emailOtpPerPerson?.limit ?? void 0,
         rate_limit_email_otp_per_person_window: rl?.emailOtpPerPerson?.window ?? void 0,
         rate_limit_email_verification_per_ip_limit: rl?.emailVerificationPerIp?.limit ?? void 0,
-        rate_limit_email_verification_per_ip_window: rl?.emailVerificationPerIp?.window ?? void 0
+        rate_limit_email_verification_per_ip_window: rl?.emailVerificationPerIp?.window ?? void 0,
+        panel_global_roles: this.configuration.panel?.globalRoles ?? void 0,
+        panel_project_roles: this.configuration.panel?.projectRoles ?? void 0
       }
     ).execute(db);
     if (!result) {

package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateConfigurationCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/configuration/UpdateConfigurationCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { ConfigInput } from '../../../schema/index.js'\nimport { UpdateBuilder } from '@contember/database'\nimport { ConfigRow } from '../../type/Config.js'\nimport { IPostgresInterval } from 'postgres-interval'\n\nexport class UpdateConfigurationCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly configuration: ConfigInput,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst captcha = this.configuration.captcha\n\t\tconst rl = this.configuration.rateLimits\n\n\t\t// Encrypt captcha secret at rest. Empty string clears the value;\n\t\t// non-empty re-encrypts so we always rotate to the latest key version.\n\t\tlet captchaSecretCol: Buffer | null | undefined\n\t\tlet captchaSecretVersionCol: number | null | undefined\n\t\tif (captcha?.secret !== undefined) {\n\t\t\tif (captcha.secret === '' || captcha.secret === null) {\n\t\t\t\tcaptchaSecretCol = null\n\t\t\t\tcaptchaSecretVersionCol = null\n\t\t\t} else {\n\t\t\t\tconst encrypted = await providers.encrypt(Buffer.from(captcha.secret, 'utf8'))\n\t\t\t\tcaptchaSecretCol = encrypted.value\n\t\t\t\tcaptchaSecretVersionCol = encrypted.version\n\t\t\t}\n\t\t}\n\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('config')\n\t\t\t.where({ id: 'singleton' })\n\t\t\t.values(\n\t\t\t\t{\n\t\t\t\t\tpasswordless_enabled: this.configuration.passwordless?.enabled ?? undefined,\n\t\t\t\t\tsignup_require_email_verification: this.configuration.signup?.requireEmailVerification ?? undefined,\n\t\t\t\t\trequire_email_change_verification: this.configuration.emailChange?.requireVerification ?? undefined,\n\t\t\t\t\tpasswordless_url: this.configuration.passwordless?.url,\n\t\t\t\t\tpasswordless_expiration: this.configuration.passwordless?.expiration ?? undefined,\n\t\t\t\t\tpassword_min_length: this.configuration.password?.minLength ?? undefined,\n\t\t\t\t\tpassword_require_uppercase: this.configuration.password?.requireUppercase ?? undefined,\n\t\t\t\t\tpassword_require_lowercase: this.configuration.password?.requireLowercase ?? undefined,\n\t\t\t\t\tpassword_require_digit: this.configuration.password?.requireDigit ?? undefined,\n\t\t\t\t\tpassword_require_special: this.configuration.password?.requireSpecial ?? undefined,\n\t\t\t\t\tpassword_pattern: this.configuration.password?.pattern,\n\t\t\t\t\tpassword_check_blacklist: this.configuration.password?.checkBlacklist ?? undefined,\n\t\t\t\t\tpassword_check_hibp: this.configuration.password?.checkHibp ?? undefined,\n\t\t\t\t\tlogin_base_backoff: this.configuration.login?.baseBackoff ?? undefined,\n\t\t\t\t\tlogin_max_backoff: this.configuration.login?.maxBackoff ?? undefined,\n\t\t\t\t\tlogin_attempt_window: this.configuration.login?.attemptWindow ?? undefined,\n\t\t\t\t\tlogin_reveal_user_exits: this.configuration.login?.revealUserExists ?? undefined,\n\t\t\t\t\tlogin_reveal_login_method: this.configuration.login?.revealLoginMethod ?? undefined,\n\t\t\t\t\tlogin_default_token_expiration: this.configuration.login?.defaultTokenExpiration ?? undefined,\n\t\t\t\t\tlogin_max_token_expiration: this.configuration.login?.maxTokenExpiration,\n\t\t\t\t\tlogin_mfa_grace_duration: this.configuration.login?.mfaGraceDuration ?? undefined,\n\t\t\t\t\tlogin_anomaly_detection_enabled: this.configuration.login?.anomalyDetection?.enabled ?? undefined,\n\t\t\t\t\tlogin_anomaly_history_size: this.configuration.login?.anomalyDetection?.historySize ?? undefined,\n\t\t\t\t\tlogin_anomaly_email_threshold: this.configuration.login?.anomalyDetection?.emailThreshold ?? undefined,\n\t\t\t\t\tlogin_anomaly_step_up_threshold: this.configuration.login?.anomalyDetection?.stepUpThreshold ?? undefined,\n\t\t\t\t\tcaptcha_provider: captcha?.provider !== undefined ? captcha.provider : undefined,\n\t\t\t\t\tcaptcha_secret: captchaSecretCol,\n\t\t\t\t\tcaptcha_secret_version: captchaSecretVersionCol,\n\t\t\t\t\tcaptcha_threshold: captcha?.threshold !== undefined ? captcha.threshold : undefined,\n\t\t\t\t\tcaptcha_protect_sign_up: captcha?.protect?.signUp ?? undefined,\n\t\t\t\t\tcaptcha_protect_password_reset: captcha?.protect?.passwordReset ?? undefined,\n\t\t\t\t\tcaptcha_protect_passwordless_init: captcha?.protect?.passwordlessInit ?? undefined,\n\t\t\t\t\tcaptcha_protect_email_verification: captcha?.protect?.emailVerification ?? undefined,\n\t\t\t\t\trate_limit_sign_up_per_ip_limit: rl?.signUpPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_sign_up_per_ip_window: rl?.signUpPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_login_per_ip_limit: rl?.loginPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_login_per_ip_window: rl?.loginPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_password_reset_per_ip_limit: rl?.passwordResetPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_password_reset_per_ip_window: rl?.passwordResetPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_passwordless_init_per_ip_limit: rl?.passwordlessInitPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_passwordless_init_per_ip_window: rl?.passwordlessInitPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_email_otp_per_person_limit: rl?.emailOtpPerPerson?.limit ?? undefined,\n\t\t\t\t\trate_limit_email_otp_per_person_window: rl?.emailOtpPerPerson?.window ?? undefined,\n\t\t\t\t\trate_limit_email_verification_per_ip_limit: rl?.emailVerificationPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_email_verification_per_ip_window: rl?.emailVerificationPerIp?.window ?? undefined,\n\t\t\t\t} satisfies {\n\t\t\t\t\t[K in keyof ConfigRow]: (IPostgresInterval extends ConfigRow[K] ? string : never) | Exclude<ConfigRow[K], IPostgresInterval> | undefined\n\t\t\t\t},\n\t\t\t)\n\t\t\t.execute(db)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAMO,MAAM,2BAAoD;AAAA,EAChE,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,UAAU,KAAK,cAAc;AACnC,UAAM,KAAK,KAAK,cAAc;AAI9B,QAAI;AACJ,QAAI;AACJ,QAAI,SAAS,WAAW,QAAW;AAClC,UAAI,QAAQ,WAAW,MAAM,QAAQ,WAAW,MAAM;AACrD,2BAAmB;AACnB,kCAA0B;AAAA,MAC3B,OAAO;AACN,cAAM,YAAY,MAAM,UAAU,QAAQ,OAAO,KAAK,QAAQ,QAAQ,MAAM,CAAC;AAC7E,2BAAmB,UAAU;AAC7B,kCAA0B,UAAU;AAAA,MACrC;AAAA,IACD;AAEA,UAAM,SAAS,MAAMA,uBAAc,OAAA,EACjC,MAAM,QAAQ,EACd,MAAM,EAAE,IAAI,YAAA,CAAa,EACzB;AAAA,MACA;AAAA,QACC,sBAAsB,KAAK,cAAc,cAAc,WAAW;AAAA,QAClE,mCAAmC,KAAK,cAAc,QAAQ,4BAA4B;AAAA,QAC1F,mCAAmC,KAAK,cAAc,aAAa,uBAAuB;AAAA,QAC1F,kBAAkB,KAAK,cAAc,cAAc;AAAA,QACnD,yBAAyB,KAAK,cAAc,cAAc,cAAc;AAAA,QACxE,qBAAqB,KAAK,cAAc,UAAU,aAAa;AAAA,QAC/D,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,wBAAwB,KAAK,cAAc,UAAU,gBAAgB;AAAA,QACrE,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,kBAAkB,KAAK,cAAc,UAAU;AAAA,QAC/C,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,qBAAqB,KAAK,cAAc,UAAU,aAAa;AAAA,QAC/D,oBAAoB,KAAK,cAAc,OAAO,eAAe;AAAA,QAC7D,mBAAmB,KAAK,cAAc,OAAO,cAAc;AAAA,QAC3D,sBAAsB,KAAK,cAAc,OAAO,iBAAiB;AAAA,QACjE,yBAAyB,KAAK,cAAc,OAAO,oBAAoB;AAAA,QACvE,2BAA2B,KAAK,cAAc,OAAO,qBAAqB;AAAA,QAC1E,gCAAgC,KAAK,cAAc,OAAO,0BAA0B;AAAA,QACpF,4BAA4B,KAAK,cAAc,OAAO;AAAA,QACtD,0BAA0B,KAAK,cAAc,OAAO,oBAAoB;AAAA,QACxE,iCAAiC,KAAK,cAAc,OAAO,kBAAkB,WAAW;AAAA,QACxF,4BAA4B,KAAK,cAAc,OAAO,kBAAkB,eAAe;AAAA,QACvF,+BAA+B,KAAK,cAAc,OAAO,kBAAkB,kBAAkB;AAAA,QAC7F,iCAAiC,KAAK,cAAc,OAAO,kBAAkB,mBAAmB;AAAA,QAChG,kBAAkB,SAAS,aAAa,SAAY,QAAQ,WAAW;AAAA,QACvE,gBAAgB;AAAA,QAChB,wBAAwB;AAAA,QACxB,mBAAmB,SAAS,cAAc,SAAY,QAAQ,YAAY;AAAA,QAC1E,yBAAyB,SAAS,SAAS,UAAU;AAAA,QACrD,gCAAgC,SAAS,SAAS,iBAAiB;AAAA,QACnE,mCAAmC,SAAS,SAAS,oBAAoB;AAAA,QACzE,oCAAoC,SAAS,SAAS,qBAAqB;AAAA,QAC3E,iCAAiC,IAAI,aAAa,SAAS;AAAA,QAC3D,kCAAkC,IAAI,aAAa,UAAU;AAAA,QAC7D,+BAA+B,IAAI,YAAY,SAAS;AAAA,QACxD,gCAAgC,IAAI,YAAY,UAAU;AAAA,QAC1D,wCAAwC,IAAI,oBAAoB,SAAS;AAAA,QACzE,yCAAyC,IAAI,oBAAoB,UAAU;AAAA,QAC3E,2CAA2C,IAAI,uBAAuB,SAAS;AAAA,QAC/E,4CAA4C,IAAI,uBAAuB,UAAU;AAAA,QACjF,uCAAuC,IAAI,mBAAmB,SAAS;AAAA,QACvE,wCAAwC,IAAI,mBAAmB,UAAU;AAAA,QACzE,4CAA4C,IAAI,wBAAwB,SAAS;AAAA,QACjF,6CAA6C,IAAI,wBAAwB,UAAU;AAAA,MAAA;AAAA,IACpF,EAIA,QAAQ,EAAE;AACZ,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAAA,EACD;AACD;;"}
+{"version":3,"file":"UpdateConfigurationCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/configuration/UpdateConfigurationCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { ConfigInput } from '../../../schema/index.js'\nimport { UpdateBuilder } from '@contember/database'\nimport { ConfigRow } from '../../type/Config.js'\nimport { IPostgresInterval } from 'postgres-interval'\n\nexport class UpdateConfigurationCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly configuration: ConfigInput,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst captcha = this.configuration.captcha\n\t\tconst rl = this.configuration.rateLimits\n\n\t\t// Null and omission preserve the stored secret; only an empty string clears it.\n\t\tlet captchaSecretCol: Buffer | null | undefined\n\t\tlet captchaSecretVersionCol: number | null | undefined\n\t\tif (captcha?.secret !== undefined && captcha.secret !== null) {\n\t\t\tif (captcha.secret === '') {\n\t\t\t\tcaptchaSecretCol = null\n\t\t\t\tcaptchaSecretVersionCol = null\n\t\t\t} else {\n\t\t\t\tconst encrypted = await providers.encrypt(Buffer.from(captcha.secret, 'utf8'))\n\t\t\t\tcaptchaSecretCol = encrypted.value\n\t\t\t\tcaptchaSecretVersionCol = encrypted.version\n\t\t\t}\n\t\t}\n\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('config')\n\t\t\t.where({ id: 'singleton' })\n\t\t\t.values(\n\t\t\t\t{\n\t\t\t\t\tpasswordless_enabled: this.configuration.passwordless?.enabled ?? undefined,\n\t\t\t\t\tsignup_require_email_verification: this.configuration.signup?.requireEmailVerification ?? undefined,\n\t\t\t\t\trequire_email_change_verification: this.configuration.emailChange?.requireVerification ?? undefined,\n\t\t\t\t\tpasswordless_url: this.configuration.passwordless?.url,\n\t\t\t\t\tpasswordless_expiration: this.configuration.passwordless?.expiration ?? undefined,\n\t\t\t\t\tpassword_min_length: this.configuration.password?.minLength ?? undefined,\n\t\t\t\t\tpassword_require_uppercase: this.configuration.password?.requireUppercase ?? undefined,\n\t\t\t\t\tpassword_require_lowercase: this.configuration.password?.requireLowercase ?? undefined,\n\t\t\t\t\tpassword_require_digit: this.configuration.password?.requireDigit ?? undefined,\n\t\t\t\t\tpassword_require_special: this.configuration.password?.requireSpecial ?? undefined,\n\t\t\t\t\tpassword_pattern: this.configuration.password?.pattern,\n\t\t\t\t\tpassword_check_blacklist: this.configuration.password?.checkBlacklist ?? undefined,\n\t\t\t\t\tpassword_check_hibp: this.configuration.password?.checkHibp ?? undefined,\n\t\t\t\t\tlogin_base_backoff: this.configuration.login?.baseBackoff ?? undefined,\n\t\t\t\t\tlogin_max_backoff: this.configuration.login?.maxBackoff ?? undefined,\n\t\t\t\t\tlogin_attempt_window: this.configuration.login?.attemptWindow ?? undefined,\n\t\t\t\t\tlogin_reveal_user_exits: this.configuration.login?.revealUserExists ?? undefined,\n\t\t\t\t\tlogin_reveal_login_method: this.configuration.login?.revealLoginMethod ?? undefined,\n\t\t\t\t\tlogin_default_token_expiration: this.configuration.login?.defaultTokenExpiration ?? undefined,\n\t\t\t\t\tlogin_max_token_expiration: this.configuration.login?.maxTokenExpiration,\n\t\t\t\t\tlogin_mfa_grace_duration: this.configuration.login?.mfaGraceDuration ?? undefined,\n\t\t\t\t\tlogin_anomaly_detection_enabled: this.configuration.login?.anomalyDetection?.enabled ?? undefined,\n\t\t\t\t\tlogin_anomaly_history_size: this.configuration.login?.anomalyDetection?.historySize ?? undefined,\n\t\t\t\t\tlogin_anomaly_email_threshold: this.configuration.login?.anomalyDetection?.emailThreshold ?? undefined,\n\t\t\t\t\tlogin_anomaly_step_up_threshold: this.configuration.login?.anomalyDetection?.stepUpThreshold ?? undefined,\n\t\t\t\t\tcaptcha_provider: captcha?.provider !== undefined ? captcha.provider : undefined,\n\t\t\t\t\tcaptcha_secret: captchaSecretCol,\n\t\t\t\t\tcaptcha_secret_version: captchaSecretVersionCol,\n\t\t\t\t\tcaptcha_threshold: captcha?.threshold !== undefined ? captcha.threshold : undefined,\n\t\t\t\t\tcaptcha_protect_sign_up: captcha?.protect?.signUp ?? undefined,\n\t\t\t\t\tcaptcha_protect_password_reset: captcha?.protect?.passwordReset ?? undefined,\n\t\t\t\t\tcaptcha_protect_passwordless_init: captcha?.protect?.passwordlessInit ?? undefined,\n\t\t\t\t\tcaptcha_protect_email_verification: captcha?.protect?.emailVerification ?? undefined,\n\t\t\t\t\trate_limit_sign_up_per_ip_limit: rl?.signUpPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_sign_up_per_ip_window: rl?.signUpPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_login_per_ip_limit: rl?.loginPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_login_per_ip_window: rl?.loginPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_password_reset_per_ip_limit: rl?.passwordResetPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_password_reset_per_ip_window: rl?.passwordResetPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_passwordless_init_per_ip_limit: rl?.passwordlessInitPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_passwordless_init_per_ip_window: rl?.passwordlessInitPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_email_otp_per_person_limit: rl?.emailOtpPerPerson?.limit ?? undefined,\n\t\t\t\t\trate_limit_email_otp_per_person_window: rl?.emailOtpPerPerson?.window ?? undefined,\n\t\t\t\t\trate_limit_email_verification_per_ip_limit: rl?.emailVerificationPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_email_verification_per_ip_window: rl?.emailVerificationPerIp?.window ?? undefined,\n\t\t\t\t\tpanel_global_roles: this.configuration.panel?.globalRoles ?? undefined,\n\t\t\t\t\tpanel_project_roles: this.configuration.panel?.projectRoles ?? undefined,\n\t\t\t\t} satisfies {\n\t\t\t\t\t[K in keyof ConfigRow]: (IPostgresInterval extends ConfigRow[K] ? string : never) | Exclude<ConfigRow[K], IPostgresInterval> | undefined\n\t\t\t\t},\n\t\t\t)\n\t\t\t.execute(db)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAMO,MAAM,2BAAoD;AAAA,EAChE,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,UAAU,KAAK,cAAc;AACnC,UAAM,KAAK,KAAK,cAAc;AAG9B,QAAI;AACJ,QAAI;AACJ,QAAI,SAAS,WAAW,UAAa,QAAQ,WAAW,MAAM;AAC7D,UAAI,QAAQ,WAAW,IAAI;AAC1B,2BAAmB;AACnB,kCAA0B;AAAA,MAC3B,OAAO;AACN,cAAM,YAAY,MAAM,UAAU,QAAQ,OAAO,KAAK,QAAQ,QAAQ,MAAM,CAAC;AAC7E,2BAAmB,UAAU;AAC7B,kCAA0B,UAAU;AAAA,MACrC;AAAA,IACD;AAEA,UAAM,SAAS,MAAMA,uBAAc,OAAA,EACjC,MAAM,QAAQ,EACd,MAAM,EAAE,IAAI,YAAA,CAAa,EACzB;AAAA,MACA;AAAA,QACC,sBAAsB,KAAK,cAAc,cAAc,WAAW;AAAA,QAClE,mCAAmC,KAAK,cAAc,QAAQ,4BAA4B;AAAA,QAC1F,mCAAmC,KAAK,cAAc,aAAa,uBAAuB;AAAA,QAC1F,kBAAkB,KAAK,cAAc,cAAc;AAAA,QACnD,yBAAyB,KAAK,cAAc,cAAc,cAAc;AAAA,QACxE,qBAAqB,KAAK,cAAc,UAAU,aAAa;AAAA,QAC/D,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,wBAAwB,KAAK,cAAc,UAAU,gBAAgB;AAAA,QACrE,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,kBAAkB,KAAK,cAAc,UAAU;AAAA,QAC/C,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,qBAAqB,KAAK,cAAc,UAAU,aAAa;AAAA,QAC/D,oBAAoB,KAAK,cAAc,OAAO,eAAe;AAAA,QAC7D,mBAAmB,KAAK,cAAc,OAAO,cAAc;AAAA,QAC3D,sBAAsB,KAAK,cAAc,OAAO,iBAAiB;AAAA,QACjE,yBAAyB,KAAK,cAAc,OAAO,oBAAoB;AAAA,QACvE,2BAA2B,KAAK,cAAc,OAAO,qBAAqB;AAAA,QAC1E,gCAAgC,KAAK,cAAc,OAAO,0BAA0B;AAAA,QACpF,4BAA4B,KAAK,cAAc,OAAO;AAAA,QACtD,0BAA0B,KAAK,cAAc,OAAO,oBAAoB;AAAA,QACxE,iCAAiC,KAAK,cAAc,OAAO,kBAAkB,WAAW;AAAA,QACxF,4BAA4B,KAAK,cAAc,OAAO,kBAAkB,eAAe;AAAA,QACvF,+BAA+B,KAAK,cAAc,OAAO,kBAAkB,kBAAkB;AAAA,QAC7F,iCAAiC,KAAK,cAAc,OAAO,kBAAkB,mBAAmB;AAAA,QAChG,kBAAkB,SAAS,aAAa,SAAY,QAAQ,WAAW;AAAA,QACvE,gBAAgB;AAAA,QAChB,wBAAwB;AAAA,QACxB,mBAAmB,SAAS,cAAc,SAAY,QAAQ,YAAY;AAAA,QAC1E,yBAAyB,SAAS,SAAS,UAAU;AAAA,QACrD,gCAAgC,SAAS,SAAS,iBAAiB;AAAA,QACnE,mCAAmC,SAAS,SAAS,oBAAoB;AAAA,QACzE,oCAAoC,SAAS,SAAS,qBAAqB;AAAA,QAC3E,iCAAiC,IAAI,aAAa,SAAS;AAAA,QAC3D,kCAAkC,IAAI,aAAa,UAAU;AAAA,QAC7D,+BAA+B,IAAI,YAAY,SAAS;AAAA,QACxD,gCAAgC,IAAI,YAAY,UAAU;AAAA,QAC1D,wCAAwC,IAAI,oBAAoB,SAAS;AAAA,QACzE,yCAAyC,IAAI,oBAAoB,UAAU;AAAA,QAC3E,2CAA2C,IAAI,uBAAuB,SAAS;AAAA,QAC/E,4CAA4C,IAAI,uBAAuB,UAAU;AAAA,QACjF,uCAAuC,IAAI,mBAAmB,SAAS;AAAA,QACvE,wCAAwC,IAAI,mBAAmB,UAAU;AAAA,QACzE,4CAA4C,IAAI,wBAAwB,SAAS;AAAA,QACjF,6CAA6C,IAAI,wBAAwB,UAAU;AAAA,QACnF,oBAAoB,KAAK,cAAc,OAAO,eAAe;AAAA,QAC7D,qBAAqB,KAAK,cAAc,OAAO,gBAAgB;AAAA,MAAA;AAAA,IAChE,EAIA,QAAQ,EAAE;AACZ,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAAA,EACD;AACD;;"}

package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.js

@@ -8,8 +8,8 @@ class UpdateConfigurationCommand {
     const rl = this.configuration.rateLimits;
     let captchaSecretCol;
     let captchaSecretVersionCol;
-    if (captcha?.secret !== void 0) {
-      if (captcha.secret === "" || captcha.secret === null) {
+    if (captcha?.secret !== void 0 && captcha.secret !== null) {
+      if (captcha.secret === "") {
         captchaSecretCol = null;
         captchaSecretVersionCol = null;
       } else {
@@ -64,7 +64,9 @@ class UpdateConfigurationCommand {
         rate_limit_email_otp_per_person_limit: rl?.emailOtpPerPerson?.limit ?? void 0,
         rate_limit_email_otp_per_person_window: rl?.emailOtpPerPerson?.window ?? void 0,
         rate_limit_email_verification_per_ip_limit: rl?.emailVerificationPerIp?.limit ?? void 0,
-        rate_limit_email_verification_per_ip_window: rl?.emailVerificationPerIp?.window ?? void 0
+        rate_limit_email_verification_per_ip_window: rl?.emailVerificationPerIp?.window ?? void 0,
+        panel_global_roles: this.configuration.panel?.globalRoles ?? void 0,
+        panel_project_roles: this.configuration.panel?.projectRoles ?? void 0
       }
     ).execute(db);
     if (!result) {

package/dist/development/src/model/commands/configuration/UpdateConfigurationCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateConfigurationCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/configuration/UpdateConfigurationCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { ConfigInput } from '../../../schema/index.js'\nimport { UpdateBuilder } from '@contember/database'\nimport { ConfigRow } from '../../type/Config.js'\nimport { IPostgresInterval } from 'postgres-interval'\n\nexport class UpdateConfigurationCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly configuration: ConfigInput,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst captcha = this.configuration.captcha\n\t\tconst rl = this.configuration.rateLimits\n\n\t\t// Encrypt captcha secret at rest. Empty string clears the value;\n\t\t// non-empty re-encrypts so we always rotate to the latest key version.\n\t\tlet captchaSecretCol: Buffer | null | undefined\n\t\tlet captchaSecretVersionCol: number | null | undefined\n\t\tif (captcha?.secret !== undefined) {\n\t\t\tif (captcha.secret === '' || captcha.secret === null) {\n\t\t\t\tcaptchaSecretCol = null\n\t\t\t\tcaptchaSecretVersionCol = null\n\t\t\t} else {\n\t\t\t\tconst encrypted = await providers.encrypt(Buffer.from(captcha.secret, 'utf8'))\n\t\t\t\tcaptchaSecretCol = encrypted.value\n\t\t\t\tcaptchaSecretVersionCol = encrypted.version\n\t\t\t}\n\t\t}\n\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('config')\n\t\t\t.where({ id: 'singleton' })\n\t\t\t.values(\n\t\t\t\t{\n\t\t\t\t\tpasswordless_enabled: this.configuration.passwordless?.enabled ?? undefined,\n\t\t\t\t\tsignup_require_email_verification: this.configuration.signup?.requireEmailVerification ?? undefined,\n\t\t\t\t\trequire_email_change_verification: this.configuration.emailChange?.requireVerification ?? undefined,\n\t\t\t\t\tpasswordless_url: this.configuration.passwordless?.url,\n\t\t\t\t\tpasswordless_expiration: this.configuration.passwordless?.expiration ?? undefined,\n\t\t\t\t\tpassword_min_length: this.configuration.password?.minLength ?? undefined,\n\t\t\t\t\tpassword_require_uppercase: this.configuration.password?.requireUppercase ?? undefined,\n\t\t\t\t\tpassword_require_lowercase: this.configuration.password?.requireLowercase ?? undefined,\n\t\t\t\t\tpassword_require_digit: this.configuration.password?.requireDigit ?? undefined,\n\t\t\t\t\tpassword_require_special: this.configuration.password?.requireSpecial ?? undefined,\n\t\t\t\t\tpassword_pattern: this.configuration.password?.pattern,\n\t\t\t\t\tpassword_check_blacklist: this.configuration.password?.checkBlacklist ?? undefined,\n\t\t\t\t\tpassword_check_hibp: this.configuration.password?.checkHibp ?? undefined,\n\t\t\t\t\tlogin_base_backoff: this.configuration.login?.baseBackoff ?? undefined,\n\t\t\t\t\tlogin_max_backoff: this.configuration.login?.maxBackoff ?? undefined,\n\t\t\t\t\tlogin_attempt_window: this.configuration.login?.attemptWindow ?? undefined,\n\t\t\t\t\tlogin_reveal_user_exits: this.configuration.login?.revealUserExists ?? undefined,\n\t\t\t\t\tlogin_reveal_login_method: this.configuration.login?.revealLoginMethod ?? undefined,\n\t\t\t\t\tlogin_default_token_expiration: this.configuration.login?.defaultTokenExpiration ?? undefined,\n\t\t\t\t\tlogin_max_token_expiration: this.configuration.login?.maxTokenExpiration,\n\t\t\t\t\tlogin_mfa_grace_duration: this.configuration.login?.mfaGraceDuration ?? undefined,\n\t\t\t\t\tlogin_anomaly_detection_enabled: this.configuration.login?.anomalyDetection?.enabled ?? undefined,\n\t\t\t\t\tlogin_anomaly_history_size: this.configuration.login?.anomalyDetection?.historySize ?? undefined,\n\t\t\t\t\tlogin_anomaly_email_threshold: this.configuration.login?.anomalyDetection?.emailThreshold ?? undefined,\n\t\t\t\t\tlogin_anomaly_step_up_threshold: this.configuration.login?.anomalyDetection?.stepUpThreshold ?? undefined,\n\t\t\t\t\tcaptcha_provider: captcha?.provider !== undefined ? captcha.provider : undefined,\n\t\t\t\t\tcaptcha_secret: captchaSecretCol,\n\t\t\t\t\tcaptcha_secret_version: captchaSecretVersionCol,\n\t\t\t\t\tcaptcha_threshold: captcha?.threshold !== undefined ? captcha.threshold : undefined,\n\t\t\t\t\tcaptcha_protect_sign_up: captcha?.protect?.signUp ?? undefined,\n\t\t\t\t\tcaptcha_protect_password_reset: captcha?.protect?.passwordReset ?? undefined,\n\t\t\t\t\tcaptcha_protect_passwordless_init: captcha?.protect?.passwordlessInit ?? undefined,\n\t\t\t\t\tcaptcha_protect_email_verification: captcha?.protect?.emailVerification ?? undefined,\n\t\t\t\t\trate_limit_sign_up_per_ip_limit: rl?.signUpPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_sign_up_per_ip_window: rl?.signUpPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_login_per_ip_limit: rl?.loginPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_login_per_ip_window: rl?.loginPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_password_reset_per_ip_limit: rl?.passwordResetPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_password_reset_per_ip_window: rl?.passwordResetPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_passwordless_init_per_ip_limit: rl?.passwordlessInitPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_passwordless_init_per_ip_window: rl?.passwordlessInitPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_email_otp_per_person_limit: rl?.emailOtpPerPerson?.limit ?? undefined,\n\t\t\t\t\trate_limit_email_otp_per_person_window: rl?.emailOtpPerPerson?.window ?? undefined,\n\t\t\t\t\trate_limit_email_verification_per_ip_limit: rl?.emailVerificationPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_email_verification_per_ip_window: rl?.emailVerificationPerIp?.window ?? undefined,\n\t\t\t\t} satisfies {\n\t\t\t\t\t[K in keyof ConfigRow]: (IPostgresInterval extends ConfigRow[K] ? string : never) | Exclude<ConfigRow[K], IPostgresInterval> | undefined\n\t\t\t\t},\n\t\t\t)\n\t\t\t.execute(db)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";AAMO,MAAM,2BAAoD;AAAA,EAChE,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,UAAU,KAAK,cAAc;AACnC,UAAM,KAAK,KAAK,cAAc;AAI9B,QAAI;AACJ,QAAI;AACJ,QAAI,SAAS,WAAW,QAAW;AAClC,UAAI,QAAQ,WAAW,MAAM,QAAQ,WAAW,MAAM;AACrD,2BAAmB;AACnB,kCAA0B;AAAA,MAC3B,OAAO;AACN,cAAM,YAAY,MAAM,UAAU,QAAQ,OAAO,KAAK,QAAQ,QAAQ,MAAM,CAAC;AAC7E,2BAAmB,UAAU;AAC7B,kCAA0B,UAAU;AAAA,MACrC;AAAA,IACD;AAEA,UAAM,SAAS,MAAMA,gBAAc,OAAA,EACjC,MAAM,QAAQ,EACd,MAAM,EAAE,IAAI,YAAA,CAAa,EACzB;AAAA,MACA;AAAA,QACC,sBAAsB,KAAK,cAAc,cAAc,WAAW;AAAA,QAClE,mCAAmC,KAAK,cAAc,QAAQ,4BAA4B;AAAA,QAC1F,mCAAmC,KAAK,cAAc,aAAa,uBAAuB;AAAA,QAC1F,kBAAkB,KAAK,cAAc,cAAc;AAAA,QACnD,yBAAyB,KAAK,cAAc,cAAc,cAAc;AAAA,QACxE,qBAAqB,KAAK,cAAc,UAAU,aAAa;AAAA,QAC/D,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,wBAAwB,KAAK,cAAc,UAAU,gBAAgB;AAAA,QACrE,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,kBAAkB,KAAK,cAAc,UAAU;AAAA,QAC/C,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,qBAAqB,KAAK,cAAc,UAAU,aAAa;AAAA,QAC/D,oBAAoB,KAAK,cAAc,OAAO,eAAe;AAAA,QAC7D,mBAAmB,KAAK,cAAc,OAAO,cAAc;AAAA,QAC3D,sBAAsB,KAAK,cAAc,OAAO,iBAAiB;AAAA,QACjE,yBAAyB,KAAK,cAAc,OAAO,oBAAoB;AAAA,QACvE,2BAA2B,KAAK,cAAc,OAAO,qBAAqB;AAAA,QAC1E,gCAAgC,KAAK,cAAc,OAAO,0BAA0B;AAAA,QACpF,4BAA4B,KAAK,cAAc,OAAO;AAAA,QACtD,0BAA0B,KAAK,cAAc,OAAO,oBAAoB;AAAA,QACxE,iCAAiC,KAAK,cAAc,OAAO,kBAAkB,WAAW;AAAA,QACxF,4BAA4B,KAAK,cAAc,OAAO,kBAAkB,eAAe;AAAA,QACvF,+BAA+B,KAAK,cAAc,OAAO,kBAAkB,kBAAkB;AAAA,QAC7F,iCAAiC,KAAK,cAAc,OAAO,kBAAkB,mBAAmB;AAAA,QAChG,kBAAkB,SAAS,aAAa,SAAY,QAAQ,WAAW;AAAA,QACvE,gBAAgB;AAAA,QAChB,wBAAwB;AAAA,QACxB,mBAAmB,SAAS,cAAc,SAAY,QAAQ,YAAY;AAAA,QAC1E,yBAAyB,SAAS,SAAS,UAAU;AAAA,QACrD,gCAAgC,SAAS,SAAS,iBAAiB;AAAA,QACnE,mCAAmC,SAAS,SAAS,oBAAoB;AAAA,QACzE,oCAAoC,SAAS,SAAS,qBAAqB;AAAA,QAC3E,iCAAiC,IAAI,aAAa,SAAS;AAAA,QAC3D,kCAAkC,IAAI,aAAa,UAAU;AAAA,QAC7D,+BAA+B,IAAI,YAAY,SAAS;AAAA,QACxD,gCAAgC,IAAI,YAAY,UAAU;AAAA,QAC1D,wCAAwC,IAAI,oBAAoB,SAAS;AAAA,QACzE,yCAAyC,IAAI,oBAAoB,UAAU;AAAA,QAC3E,2CAA2C,IAAI,uBAAuB,SAAS;AAAA,QAC/E,4CAA4C,IAAI,uBAAuB,UAAU;AAAA,QACjF,uCAAuC,IAAI,mBAAmB,SAAS;AAAA,QACvE,wCAAwC,IAAI,mBAAmB,UAAU;AAAA,QACzE,4CAA4C,IAAI,wBAAwB,SAAS;AAAA,QACjF,6CAA6C,IAAI,wBAAwB,UAAU;AAAA,MAAA;AAAA,IACpF,EAIA,QAAQ,EAAE;AACZ,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAAA,EACD;AACD;"}
+{"version":3,"file":"UpdateConfigurationCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/configuration/UpdateConfigurationCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { ConfigInput } from '../../../schema/index.js'\nimport { UpdateBuilder } from '@contember/database'\nimport { ConfigRow } from '../../type/Config.js'\nimport { IPostgresInterval } from 'postgres-interval'\n\nexport class UpdateConfigurationCommand implements Command<void> {\n\tconstructor(\n\t\tprivate readonly configuration: ConfigInput,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst captcha = this.configuration.captcha\n\t\tconst rl = this.configuration.rateLimits\n\n\t\t// Null and omission preserve the stored secret; only an empty string clears it.\n\t\tlet captchaSecretCol: Buffer | null | undefined\n\t\tlet captchaSecretVersionCol: number | null | undefined\n\t\tif (captcha?.secret !== undefined && captcha.secret !== null) {\n\t\t\tif (captcha.secret === '') {\n\t\t\t\tcaptchaSecretCol = null\n\t\t\t\tcaptchaSecretVersionCol = null\n\t\t\t} else {\n\t\t\t\tconst encrypted = await providers.encrypt(Buffer.from(captcha.secret, 'utf8'))\n\t\t\t\tcaptchaSecretCol = encrypted.value\n\t\t\t\tcaptchaSecretVersionCol = encrypted.version\n\t\t\t}\n\t\t}\n\n\t\tconst result = await UpdateBuilder.create()\n\t\t\t.table('config')\n\t\t\t.where({ id: 'singleton' })\n\t\t\t.values(\n\t\t\t\t{\n\t\t\t\t\tpasswordless_enabled: this.configuration.passwordless?.enabled ?? undefined,\n\t\t\t\t\tsignup_require_email_verification: this.configuration.signup?.requireEmailVerification ?? undefined,\n\t\t\t\t\trequire_email_change_verification: this.configuration.emailChange?.requireVerification ?? undefined,\n\t\t\t\t\tpasswordless_url: this.configuration.passwordless?.url,\n\t\t\t\t\tpasswordless_expiration: this.configuration.passwordless?.expiration ?? undefined,\n\t\t\t\t\tpassword_min_length: this.configuration.password?.minLength ?? undefined,\n\t\t\t\t\tpassword_require_uppercase: this.configuration.password?.requireUppercase ?? undefined,\n\t\t\t\t\tpassword_require_lowercase: this.configuration.password?.requireLowercase ?? undefined,\n\t\t\t\t\tpassword_require_digit: this.configuration.password?.requireDigit ?? undefined,\n\t\t\t\t\tpassword_require_special: this.configuration.password?.requireSpecial ?? undefined,\n\t\t\t\t\tpassword_pattern: this.configuration.password?.pattern,\n\t\t\t\t\tpassword_check_blacklist: this.configuration.password?.checkBlacklist ?? undefined,\n\t\t\t\t\tpassword_check_hibp: this.configuration.password?.checkHibp ?? undefined,\n\t\t\t\t\tlogin_base_backoff: this.configuration.login?.baseBackoff ?? undefined,\n\t\t\t\t\tlogin_max_backoff: this.configuration.login?.maxBackoff ?? undefined,\n\t\t\t\t\tlogin_attempt_window: this.configuration.login?.attemptWindow ?? undefined,\n\t\t\t\t\tlogin_reveal_user_exits: this.configuration.login?.revealUserExists ?? undefined,\n\t\t\t\t\tlogin_reveal_login_method: this.configuration.login?.revealLoginMethod ?? undefined,\n\t\t\t\t\tlogin_default_token_expiration: this.configuration.login?.defaultTokenExpiration ?? undefined,\n\t\t\t\t\tlogin_max_token_expiration: this.configuration.login?.maxTokenExpiration,\n\t\t\t\t\tlogin_mfa_grace_duration: this.configuration.login?.mfaGraceDuration ?? undefined,\n\t\t\t\t\tlogin_anomaly_detection_enabled: this.configuration.login?.anomalyDetection?.enabled ?? undefined,\n\t\t\t\t\tlogin_anomaly_history_size: this.configuration.login?.anomalyDetection?.historySize ?? undefined,\n\t\t\t\t\tlogin_anomaly_email_threshold: this.configuration.login?.anomalyDetection?.emailThreshold ?? undefined,\n\t\t\t\t\tlogin_anomaly_step_up_threshold: this.configuration.login?.anomalyDetection?.stepUpThreshold ?? undefined,\n\t\t\t\t\tcaptcha_provider: captcha?.provider !== undefined ? captcha.provider : undefined,\n\t\t\t\t\tcaptcha_secret: captchaSecretCol,\n\t\t\t\t\tcaptcha_secret_version: captchaSecretVersionCol,\n\t\t\t\t\tcaptcha_threshold: captcha?.threshold !== undefined ? captcha.threshold : undefined,\n\t\t\t\t\tcaptcha_protect_sign_up: captcha?.protect?.signUp ?? undefined,\n\t\t\t\t\tcaptcha_protect_password_reset: captcha?.protect?.passwordReset ?? undefined,\n\t\t\t\t\tcaptcha_protect_passwordless_init: captcha?.protect?.passwordlessInit ?? undefined,\n\t\t\t\t\tcaptcha_protect_email_verification: captcha?.protect?.emailVerification ?? undefined,\n\t\t\t\t\trate_limit_sign_up_per_ip_limit: rl?.signUpPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_sign_up_per_ip_window: rl?.signUpPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_login_per_ip_limit: rl?.loginPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_login_per_ip_window: rl?.loginPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_password_reset_per_ip_limit: rl?.passwordResetPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_password_reset_per_ip_window: rl?.passwordResetPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_passwordless_init_per_ip_limit: rl?.passwordlessInitPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_passwordless_init_per_ip_window: rl?.passwordlessInitPerIp?.window ?? undefined,\n\t\t\t\t\trate_limit_email_otp_per_person_limit: rl?.emailOtpPerPerson?.limit ?? undefined,\n\t\t\t\t\trate_limit_email_otp_per_person_window: rl?.emailOtpPerPerson?.window ?? undefined,\n\t\t\t\t\trate_limit_email_verification_per_ip_limit: rl?.emailVerificationPerIp?.limit ?? undefined,\n\t\t\t\t\trate_limit_email_verification_per_ip_window: rl?.emailVerificationPerIp?.window ?? undefined,\n\t\t\t\t\tpanel_global_roles: this.configuration.panel?.globalRoles ?? undefined,\n\t\t\t\t\tpanel_project_roles: this.configuration.panel?.projectRoles ?? undefined,\n\t\t\t\t} satisfies {\n\t\t\t\t\t[K in keyof ConfigRow]: (IPostgresInterval extends ConfigRow[K] ? string : never) | Exclude<ConfigRow[K], IPostgresInterval> | undefined\n\t\t\t\t},\n\t\t\t)\n\t\t\t.execute(db)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";AAMO,MAAM,2BAAoD;AAAA,EAChE,YACkB,eAChB;AADgB,SAAA,gBAAA;AAAA,EAElB;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,UAAU,KAAK,cAAc;AACnC,UAAM,KAAK,KAAK,cAAc;AAG9B,QAAI;AACJ,QAAI;AACJ,QAAI,SAAS,WAAW,UAAa,QAAQ,WAAW,MAAM;AAC7D,UAAI,QAAQ,WAAW,IAAI;AAC1B,2BAAmB;AACnB,kCAA0B;AAAA,MAC3B,OAAO;AACN,cAAM,YAAY,MAAM,UAAU,QAAQ,OAAO,KAAK,QAAQ,QAAQ,MAAM,CAAC;AAC7E,2BAAmB,UAAU;AAC7B,kCAA0B,UAAU;AAAA,MACrC;AAAA,IACD;AAEA,UAAM,SAAS,MAAMA,gBAAc,OAAA,EACjC,MAAM,QAAQ,EACd,MAAM,EAAE,IAAI,YAAA,CAAa,EACzB;AAAA,MACA;AAAA,QACC,sBAAsB,KAAK,cAAc,cAAc,WAAW;AAAA,QAClE,mCAAmC,KAAK,cAAc,QAAQ,4BAA4B;AAAA,QAC1F,mCAAmC,KAAK,cAAc,aAAa,uBAAuB;AAAA,QAC1F,kBAAkB,KAAK,cAAc,cAAc;AAAA,QACnD,yBAAyB,KAAK,cAAc,cAAc,cAAc;AAAA,QACxE,qBAAqB,KAAK,cAAc,UAAU,aAAa;AAAA,QAC/D,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,4BAA4B,KAAK,cAAc,UAAU,oBAAoB;AAAA,QAC7E,wBAAwB,KAAK,cAAc,UAAU,gBAAgB;AAAA,QACrE,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,kBAAkB,KAAK,cAAc,UAAU;AAAA,QAC/C,0BAA0B,KAAK,cAAc,UAAU,kBAAkB;AAAA,QACzE,qBAAqB,KAAK,cAAc,UAAU,aAAa;AAAA,QAC/D,oBAAoB,KAAK,cAAc,OAAO,eAAe;AAAA,QAC7D,mBAAmB,KAAK,cAAc,OAAO,cAAc;AAAA,QAC3D,sBAAsB,KAAK,cAAc,OAAO,iBAAiB;AAAA,QACjE,yBAAyB,KAAK,cAAc,OAAO,oBAAoB;AAAA,QACvE,2BAA2B,KAAK,cAAc,OAAO,qBAAqB;AAAA,QAC1E,gCAAgC,KAAK,cAAc,OAAO,0BAA0B;AAAA,QACpF,4BAA4B,KAAK,cAAc,OAAO;AAAA,QACtD,0BAA0B,KAAK,cAAc,OAAO,oBAAoB;AAAA,QACxE,iCAAiC,KAAK,cAAc,OAAO,kBAAkB,WAAW;AAAA,QACxF,4BAA4B,KAAK,cAAc,OAAO,kBAAkB,eAAe;AAAA,QACvF,+BAA+B,KAAK,cAAc,OAAO,kBAAkB,kBAAkB;AAAA,QAC7F,iCAAiC,KAAK,cAAc,OAAO,kBAAkB,mBAAmB;AAAA,QAChG,kBAAkB,SAAS,aAAa,SAAY,QAAQ,WAAW;AAAA,QACvE,gBAAgB;AAAA,QAChB,wBAAwB;AAAA,QACxB,mBAAmB,SAAS,cAAc,SAAY,QAAQ,YAAY;AAAA,QAC1E,yBAAyB,SAAS,SAAS,UAAU;AAAA,QACrD,gCAAgC,SAAS,SAAS,iBAAiB;AAAA,QACnE,mCAAmC,SAAS,SAAS,oBAAoB;AAAA,QACzE,oCAAoC,SAAS,SAAS,qBAAqB;AAAA,QAC3E,iCAAiC,IAAI,aAAa,SAAS;AAAA,QAC3D,kCAAkC,IAAI,aAAa,UAAU;AAAA,QAC7D,+BAA+B,IAAI,YAAY,SAAS;AAAA,QACxD,gCAAgC,IAAI,YAAY,UAAU;AAAA,QAC1D,wCAAwC,IAAI,oBAAoB,SAAS;AAAA,QACzE,yCAAyC,IAAI,oBAAoB,UAAU;AAAA,QAC3E,2CAA2C,IAAI,uBAAuB,SAAS;AAAA,QAC/E,4CAA4C,IAAI,uBAAuB,UAAU;AAAA,QACjF,uCAAuC,IAAI,mBAAmB,SAAS;AAAA,QACvE,wCAAwC,IAAI,mBAAmB,UAAU;AAAA,QACzE,4CAA4C,IAAI,wBAAwB,SAAS;AAAA,QACjF,6CAA6C,IAAI,wBAAwB,UAAU;AAAA,QACnF,oBAAoB,KAAK,cAAc,OAAO,eAAe;AAAA,QAC7D,qBAAqB,KAAK,cAAc,OAAO,gBAAgB;AAAA,MAAA;AAAA,IAChE,EAIA,QAAQ,EAAE;AACZ,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAAA,EACD;AACD;"}

package/dist/development/src/model/commands/idp/CreateIdpCommand.cjs

@@ -6,7 +6,12 @@ class CreateIdpCommand {
     this.data = data;
   }
   async execute({ db, providers }) {
-    const { configuration, options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified }, slug, type } = this.data;
+    const {
+      configuration,
+      options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, disableLocalAuthentication },
+      slug,
+      type
+    } = this.data;
     await Database.InsertBuilder.create().into("identity_provider").values({
       id: providers.uuid(),
       configuration,
@@ -16,7 +21,8 @@ class CreateIdpCommand {
       exclusive,
       init_returns_config: initReturnsConfig,
       require_verified_email: requireVerifiedEmail,
-      assume_email_verified: assumeEmailVerified
+      assume_email_verified: assumeEmailVerified,
+      disable_local_authentication: disableLocalAuthentication
     }).execute(db);
   }
 }

package/dist/development/src/model/commands/idp/CreateIdpCommand.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"CreateIdpCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/CreateIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { InsertBuilder } from '@contember/database'\nimport { IdentityProviderData } from '../../type/index.js'\n\nexport class CreateIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate data: IdentityProviderData,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst { configuration, options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified }, slug, type } = this.data\n\t\tawait InsertBuilder.create()\n\t\t\t.into('identity_provider')\n\t\t\t.values({\n\t\t\t\tid: providers.uuid(),\n\t\t\t\tconfiguration,\n\t\t\t\tslug,\n\t\t\t\ttype,\n\t\t\t\tauto_sign_up: autoSignUp,\n\t\t\t\texclusive,\n\t\t\t\tinit_returns_config: initReturnsConfig,\n\t\t\t\trequire_verified_email: requireVerifiedEmail,\n\t\t\t\tassume_email_verified: assumeEmailVerified,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";;;AAIO,MAAM,iBAA0C;AAAA,EACtD,YACS,MACP;AADO,SAAA,OAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,EAAE,eAAe,SAAS,EAAE,YAAY,WAAW,mBAAmB,sBAAsB,oBAAA,GAAuB,MAAM,KAAA,IAAS,KAAK;AAC7I,UAAMA,SAAAA,cAAc,OAAA,EAClB,KAAK,mBAAmB,EACxB,OAAO;AAAA,MACP,IAAI,UAAU,KAAA;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,qBAAqB;AAAA,MACrB,wBAAwB;AAAA,MACxB,uBAAuB;AAAA,IAAA,CACvB,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}
+{"version":3,"file":"CreateIdpCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/CreateIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { InsertBuilder } from '@contember/database'\nimport { IdentityProviderData } from '../../type/index.js'\n\nexport class CreateIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate data: IdentityProviderData,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst {\n\t\t\tconfiguration,\n\t\t\toptions: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, disableLocalAuthentication },\n\t\t\tslug,\n\t\t\ttype,\n\t\t} = this.data\n\t\tawait InsertBuilder.create()\n\t\t\t.into('identity_provider')\n\t\t\t.values({\n\t\t\t\tid: providers.uuid(),\n\t\t\t\tconfiguration,\n\t\t\t\tslug,\n\t\t\t\ttype,\n\t\t\t\tauto_sign_up: autoSignUp,\n\t\t\t\texclusive,\n\t\t\t\tinit_returns_config: initReturnsConfig,\n\t\t\t\trequire_verified_email: requireVerifiedEmail,\n\t\t\t\tassume_email_verified: assumeEmailVerified,\n\t\t\t\tdisable_local_authentication: disableLocalAuthentication,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";;;AAIO,MAAM,iBAA0C;AAAA,EACtD,YACS,MACP;AADO,SAAA,OAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM;AAAA,MACL;AAAA,MACA,SAAS,EAAE,YAAY,WAAW,mBAAmB,sBAAsB,qBAAqB,2BAAA;AAAA,MAChG;AAAA,MACA;AAAA,IAAA,IACG,KAAK;AACT,UAAMA,SAAAA,cAAc,OAAA,EAClB,KAAK,mBAAmB,EACxB,OAAO;AAAA,MACP,IAAI,UAAU,KAAA;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,qBAAqB;AAAA,MACrB,wBAAwB;AAAA,MACxB,uBAAuB;AAAA,MACvB,8BAA8B;AAAA,IAAA,CAC9B,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/development/src/model/commands/idp/CreateIdpCommand.js

@@ -4,7 +4,12 @@ class CreateIdpCommand {
     this.data = data;
   }
   async execute({ db, providers }) {
-    const { configuration, options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified }, slug, type } = this.data;
+    const {
+      configuration,
+      options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, disableLocalAuthentication },
+      slug,
+      type
+    } = this.data;
     await InsertBuilder$1.create().into("identity_provider").values({
       id: providers.uuid(),
       configuration,
@@ -14,7 +19,8 @@ class CreateIdpCommand {
       exclusive,
       init_returns_config: initReturnsConfig,
       require_verified_email: requireVerifiedEmail,
-      assume_email_verified: assumeEmailVerified
+      assume_email_verified: assumeEmailVerified,
+      disable_local_authentication: disableLocalAuthentication
     }).execute(db);
   }
 }

package/dist/development/src/model/commands/idp/CreateIdpCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"CreateIdpCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/CreateIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { InsertBuilder } from '@contember/database'\nimport { IdentityProviderData } from '../../type/index.js'\n\nexport class CreateIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate data: IdentityProviderData,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst { configuration, options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified }, slug, type } = this.data\n\t\tawait InsertBuilder.create()\n\t\t\t.into('identity_provider')\n\t\t\t.values({\n\t\t\t\tid: providers.uuid(),\n\t\t\t\tconfiguration,\n\t\t\t\tslug,\n\t\t\t\ttype,\n\t\t\t\tauto_sign_up: autoSignUp,\n\t\t\t\texclusive,\n\t\t\t\tinit_returns_config: initReturnsConfig,\n\t\t\t\trequire_verified_email: requireVerifiedEmail,\n\t\t\t\tassume_email_verified: assumeEmailVerified,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";AAIO,MAAM,iBAA0C;AAAA,EACtD,YACS,MACP;AADO,SAAA,OAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM,EAAE,eAAe,SAAS,EAAE,YAAY,WAAW,mBAAmB,sBAAsB,oBAAA,GAAuB,MAAM,KAAA,IAAS,KAAK;AAC7I,UAAMA,gBAAc,OAAA,EAClB,KAAK,mBAAmB,EACxB,OAAO;AAAA,MACP,IAAI,UAAU,KAAA;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,qBAAqB;AAAA,MACrB,wBAAwB;AAAA,MACxB,uBAAuB;AAAA,IAAA,CACvB,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}
+{"version":3,"file":"CreateIdpCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/CreateIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { InsertBuilder } from '@contember/database'\nimport { IdentityProviderData } from '../../type/index.js'\n\nexport class CreateIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate data: IdentityProviderData,\n\t) {\n\t}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tconst {\n\t\t\tconfiguration,\n\t\t\toptions: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, disableLocalAuthentication },\n\t\t\tslug,\n\t\t\ttype,\n\t\t} = this.data\n\t\tawait InsertBuilder.create()\n\t\t\t.into('identity_provider')\n\t\t\t.values({\n\t\t\t\tid: providers.uuid(),\n\t\t\t\tconfiguration,\n\t\t\t\tslug,\n\t\t\t\ttype,\n\t\t\t\tauto_sign_up: autoSignUp,\n\t\t\t\texclusive,\n\t\t\t\tinit_returns_config: initReturnsConfig,\n\t\t\t\trequire_verified_email: requireVerifiedEmail,\n\t\t\t\tassume_email_verified: assumeEmailVerified,\n\t\t\t\tdisable_local_authentication: disableLocalAuthentication,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["InsertBuilder"],"mappings":";AAIO,MAAM,iBAA0C;AAAA,EACtD,YACS,MACP;AADO,SAAA,OAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAM;AAAA,MACL;AAAA,MACA,SAAS,EAAE,YAAY,WAAW,mBAAmB,sBAAsB,qBAAqB,2BAAA;AAAA,MAChG;AAAA,MACA;AAAA,IAAA,IACG,KAAK;AACT,UAAMA,gBAAc,OAAA,EAClB,KAAK,mBAAmB,EACxB,OAAO;AAAA,MACP,IAAI,UAAU,KAAA;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,qBAAqB;AAAA,MACrB,wBAAwB;AAAA,MACxB,uBAAuB;AAAA,MACvB,8BAA8B;AAAA,IAAA,CAC9B,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/development/src/model/commands/idp/UpdateIdpCommand.cjs

@@ -7,14 +7,18 @@ class UpdateIdpCommand {
     this.data = data;
   }
   async execute({ db }) {
-    const { configuration, options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified } = {} } = this.data;
+    const {
+      configuration,
+      options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, disableLocalAuthentication } = {}
+    } = this.data;
     await Database.UpdateBuilder.create().table("identity_provider").values({
       configuration,
       auto_sign_up: autoSignUp,
       exclusive,
       init_returns_config: initReturnsConfig,
       require_verified_email: requireVerifiedEmail,
-      assume_email_verified: assumeEmailVerified
+      assume_email_verified: assumeEmailVerified,
+      disable_local_authentication: disableLocalAuthentication
     }).where({
       id: this.id
     }).execute(db);

package/dist/development/src/model/commands/idp/UpdateIdpCommand.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateIdpCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/UpdateIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { UpdateBuilder } from '@contember/database'\nimport { IdentityProviderData } from '../../type/index.js'\n\nexport class UpdateIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate id: string,\n\t\tprivate data: UpdateIdpData,\n\t) {\n\t}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst { configuration, options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified } = {} } = this.data\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('identity_provider')\n\t\t\t.values({\n\t\t\t\tconfiguration,\n\t\t\t\tauto_sign_up: autoSignUp,\n\t\t\t\texclusive,\n\t\t\t\tinit_returns_config: initReturnsConfig,\n\t\t\t\trequire_verified_email: requireVerifiedEmail,\n\t\t\t\tassume_email_verified: assumeEmailVerified,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.id,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n\nexport type UpdateIdpData = {\n\toptions?: Partial<IdentityProviderData['options']>\n\tconfiguration?: IdentityProviderData['configuration']\n\ttype?: string\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAIO,MAAM,iBAA0C;AAAA,EACtD,YACS,IACA,MACP;AAFO,SAAA,KAAA;AACA,SAAA,OAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,EAAE,eAAe,SAAS,EAAE,YAAY,WAAW,mBAAmB,sBAAsB,oBAAA,IAAwB,GAAC,IAAM,KAAK;AACtI,UAAMA,SAAAA,cAAc,OAAA,EAClB,MAAM,mBAAmB,EACzB,OAAO;AAAA,MACP;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,qBAAqB;AAAA,MACrB,wBAAwB;AAAA,MACxB,uBAAuB;AAAA,IAAA,CACvB,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}
+{"version":3,"file":"UpdateIdpCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/UpdateIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { UpdateBuilder } from '@contember/database'\nimport { IdentityProviderData } from '../../type/index.js'\n\nexport class UpdateIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate id: string,\n\t\tprivate data: UpdateIdpData,\n\t) {\n\t}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst {\n\t\t\tconfiguration,\n\t\t\toptions: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, disableLocalAuthentication } = {},\n\t\t} = this.data\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('identity_provider')\n\t\t\t.values({\n\t\t\t\tconfiguration,\n\t\t\t\tauto_sign_up: autoSignUp,\n\t\t\t\texclusive,\n\t\t\t\tinit_returns_config: initReturnsConfig,\n\t\t\t\trequire_verified_email: requireVerifiedEmail,\n\t\t\t\tassume_email_verified: assumeEmailVerified,\n\t\t\t\tdisable_local_authentication: disableLocalAuthentication,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.id,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n\nexport type UpdateIdpData = {\n\toptions?: Partial<IdentityProviderData['options']>\n\tconfiguration?: IdentityProviderData['configuration']\n\ttype?: string\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAIO,MAAM,iBAA0C;AAAA,EACtD,YACS,IACA,MACP;AAFO,SAAA,KAAA;AACA,SAAA,OAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM;AAAA,MACL;AAAA,MACA,SAAS,EAAE,YAAY,WAAW,mBAAmB,sBAAsB,qBAAqB,+BAA+B,CAAA;AAAA,IAAC,IAC7H,KAAK;AACT,UAAMA,SAAAA,cAAc,OAAA,EAClB,MAAM,mBAAmB,EACzB,OAAO;AAAA,MACP;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,qBAAqB;AAAA,MACrB,wBAAwB;AAAA,MACxB,uBAAuB;AAAA,MACvB,8BAA8B;AAAA,IAAA,CAC9B,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/development/src/model/commands/idp/UpdateIdpCommand.js

@@ -5,14 +5,18 @@ class UpdateIdpCommand {
     this.data = data;
   }
   async execute({ db }) {
-    const { configuration, options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified } = {} } = this.data;
+    const {
+      configuration,
+      options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, disableLocalAuthentication } = {}
+    } = this.data;
     await UpdateBuilder$1.create().table("identity_provider").values({
       configuration,
       auto_sign_up: autoSignUp,
       exclusive,
       init_returns_config: initReturnsConfig,
       require_verified_email: requireVerifiedEmail,
-      assume_email_verified: assumeEmailVerified
+      assume_email_verified: assumeEmailVerified,
+      disable_local_authentication: disableLocalAuthentication
     }).where({
       id: this.id
     }).execute(db);

package/dist/development/src/model/commands/idp/UpdateIdpCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateIdpCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/UpdateIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { UpdateBuilder } from '@contember/database'\nimport { IdentityProviderData } from '../../type/index.js'\n\nexport class UpdateIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate id: string,\n\t\tprivate data: UpdateIdpData,\n\t) {\n\t}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst { configuration, options: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified } = {} } = this.data\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('identity_provider')\n\t\t\t.values({\n\t\t\t\tconfiguration,\n\t\t\t\tauto_sign_up: autoSignUp,\n\t\t\t\texclusive,\n\t\t\t\tinit_returns_config: initReturnsConfig,\n\t\t\t\trequire_verified_email: requireVerifiedEmail,\n\t\t\t\tassume_email_verified: assumeEmailVerified,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.id,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n\nexport type UpdateIdpData = {\n\toptions?: Partial<IdentityProviderData['options']>\n\tconfiguration?: IdentityProviderData['configuration']\n\ttype?: string\n}\n"],"names":["UpdateBuilder"],"mappings":";AAIO,MAAM,iBAA0C;AAAA,EACtD,YACS,IACA,MACP;AAFO,SAAA,KAAA;AACA,SAAA,OAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM,EAAE,eAAe,SAAS,EAAE,YAAY,WAAW,mBAAmB,sBAAsB,oBAAA,IAAwB,GAAC,IAAM,KAAK;AACtI,UAAMA,gBAAc,OAAA,EAClB,MAAM,mBAAmB,EACzB,OAAO;AAAA,MACP;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,qBAAqB;AAAA,MACrB,wBAAwB;AAAA,MACxB,uBAAuB;AAAA,IAAA,CACvB,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}
+{"version":3,"file":"UpdateIdpCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/idp/UpdateIdpCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { UpdateBuilder } from '@contember/database'\nimport { IdentityProviderData } from '../../type/index.js'\n\nexport class UpdateIdpCommand implements Command<void> {\n\tconstructor(\n\t\tprivate id: string,\n\t\tprivate data: UpdateIdpData,\n\t) {\n\t}\n\n\tasync execute({ db }: Command.Args): Promise<void> {\n\t\tconst {\n\t\t\tconfiguration,\n\t\t\toptions: { autoSignUp, exclusive, initReturnsConfig, requireVerifiedEmail, assumeEmailVerified, disableLocalAuthentication } = {},\n\t\t} = this.data\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('identity_provider')\n\t\t\t.values({\n\t\t\t\tconfiguration,\n\t\t\t\tauto_sign_up: autoSignUp,\n\t\t\t\texclusive,\n\t\t\t\tinit_returns_config: initReturnsConfig,\n\t\t\t\trequire_verified_email: requireVerifiedEmail,\n\t\t\t\tassume_email_verified: assumeEmailVerified,\n\t\t\t\tdisable_local_authentication: disableLocalAuthentication,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.id,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n\nexport type UpdateIdpData = {\n\toptions?: Partial<IdentityProviderData['options']>\n\tconfiguration?: IdentityProviderData['configuration']\n\ttype?: string\n}\n"],"names":["UpdateBuilder"],"mappings":";AAIO,MAAM,iBAA0C;AAAA,EACtD,YACS,IACA,MACP;AAFO,SAAA,KAAA;AACA,SAAA,OAAA;AAAA,EAET;AAAA,EAEA,MAAM,QAAQ,EAAE,MAAmC;AAClD,UAAM;AAAA,MACL;AAAA,MACA,SAAS,EAAE,YAAY,WAAW,mBAAmB,sBAAsB,qBAAqB,+BAA+B,CAAA;AAAA,IAAC,IAC7H,KAAK;AACT,UAAMA,gBAAc,OAAA,EAClB,MAAM,mBAAmB,EACzB,OAAO;AAAA,MACP;AAAA,MACA,cAAc;AAAA,MACd;AAAA,MACA,qBAAqB;AAAA,MACrB,wBAAwB;AAAA,MACxB,uBAAuB;AAAA,MACvB,8BAA8B;AAAA,IAAA,CAC9B,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/development/src/model/commands/membership/{RemoveProjectMembershipsCommand.cjs → RemoveProjectMembershipCommand.cjs}

@@ -16,4 +16,4 @@ class RemoveProjectMembershipCommand {
   }
 }
 exports.RemoveProjectMembershipCommand = RemoveProjectMembershipCommand;
-//# sourceMappingURL=RemoveProjectMembershipsCommand.cjs.map
+//# sourceMappingURL=RemoveProjectMembershipCommand.cjs.map

package/dist/development/src/model/commands/membership/RemoveProjectMembershipCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoveProjectMembershipCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/membership/RemoveProjectMembershipCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { DeleteBuilder } from '@contember/database'\n\nexport class RemoveProjectMembershipCommand implements Command<void> {\n\tconstructor(private readonly projectId: string, private readonly identityId: string, private readonly role: string) {}\n\n\tasync execute({ db, bus, providers }: Command.Args): Promise<void> {\n\t\tawait DeleteBuilder.create()\n\t\t\t.where({\n\t\t\t\tproject_id: this.projectId,\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t\trole: this.role,\n\t\t\t})\n\t\t\t.from('project_membership')\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["DeleteBuilder"],"mappings":";;;AAGO,MAAM,+BAAwD;AAAA,EACpE,YAA6B,WAAoC,YAAqC,MAAc;AAAvF,SAAA,YAAA;AAAoC,SAAA,aAAA;AAAqC,SAAA,OAAA;AAAA,EAAe;AAAA,EAErH,MAAM,QAAQ,EAAE,IAAI,KAAK,aAA0C;AAClE,UAAMA,SAAAA,cAAc,OAAA,EAClB,MAAM;AAAA,MACN,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK;AAAA,MAClB,MAAM,KAAK;AAAA,IAAA,CACX,EACA,KAAK,oBAAoB,EACzB,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/development/src/model/commands/membership/{RemoveProjectMembershipsCommand.js → RemoveProjectMembershipCommand.js}

@@ -16,4 +16,4 @@ class RemoveProjectMembershipCommand {
 export {
   RemoveProjectMembershipCommand
 };
-//# sourceMappingURL=RemoveProjectMembershipsCommand.js.map
+//# sourceMappingURL=RemoveProjectMembershipCommand.js.map

package/dist/development/src/model/commands/membership/RemoveProjectMembershipCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoveProjectMembershipCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/membership/RemoveProjectMembershipCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { DeleteBuilder } from '@contember/database'\n\nexport class RemoveProjectMembershipCommand implements Command<void> {\n\tconstructor(private readonly projectId: string, private readonly identityId: string, private readonly role: string) {}\n\n\tasync execute({ db, bus, providers }: Command.Args): Promise<void> {\n\t\tawait DeleteBuilder.create()\n\t\t\t.where({\n\t\t\t\tproject_id: this.projectId,\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t\trole: this.role,\n\t\t\t})\n\t\t\t.from('project_membership')\n\t\t\t.execute(db)\n\t}\n}\n"],"names":[],"mappings":";AAGO,MAAM,+BAAwD;AAAA,EACpE,YAA6B,WAAoC,YAAqC,MAAc;AAAvF,SAAA,YAAA;AAAoC,SAAA,aAAA;AAAqC,SAAA,OAAA;AAAA,EAAe;AAAA,EAErH,MAAM,QAAQ,EAAE,IAAI,KAAK,aAA0C;AAClE,UAAM,cAAc,OAAA,EAClB,MAAM;AAAA,MACN,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK;AAAA,MAClB,MAAM,KAAK;AAAA,IAAA,CACX,EACA,KAAK,oBAAoB,EACzB,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/development/src/model/commands/membership/UpdateProjectMemberCommand.cjs

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const CreateOrUpdateProjectMembershipCommand = require("./CreateOrUpdateProjectMembershipCommand.cjs");
 const Database = require("@contember/database");
-const RemoveProjectMembershipsCommand = require("./RemoveProjectMembershipsCommand.cjs");
+const RemoveProjectMembershipCommand = require("./RemoveProjectMembershipCommand.cjs");
 const Response = require("../../utils/Response.cjs");
 class UpdateProjectMemberCommand {
   constructor(projectId, identityId, memberships) {
@@ -21,7 +21,7 @@ class UpdateProjectMemberCommand {
     try {
       for (const membershipUpdate of this.memberships) {
         if (membershipUpdate.operation === "remove") {
-          await bus.execute(new RemoveProjectMembershipsCommand.RemoveProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate.role));
+          await bus.execute(new RemoveProjectMembershipCommand.RemoveProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate.role));
         } else {
           await bus.execute(
             new CreateOrUpdateProjectMembershipCommand.CreateOrUpdateProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate)

package/dist/development/src/model/commands/membership/UpdateProjectMemberCommand.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateProjectMemberCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/membership/UpdateProjectMemberCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { UpdateProjectMemberErrorCode } from '../../../schema/index.js'\nimport { CreateOrUpdateProjectMembershipCommand } from './CreateOrUpdateProjectMembershipCommand.js'\nimport { SelectBuilder } from '@contember/database'\nimport { MembershipUpdateInput } from './types.js'\nimport { RemoveProjectMembershipCommand } from './RemoveProjectMembershipsCommand.js'\nimport { Response, ResponseError, ResponseOk } from '../../utils/Response.js'\n\nexport class UpdateProjectMemberCommand implements Command<UpdateProjectMemberResponse> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly identityId: string,\n\t\tprivate readonly memberships: readonly MembershipUpdateInput[],\n\t) {}\n\n\tasync execute({ db, bus, providers }: Command.Args): Promise<UpdateProjectMemberResponse> {\n\t\tconst result = await SelectBuilder.create()\n\t\t\t.select('id')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tproject_id: this.projectId,\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\t\t.getResult(db)\n\t\tif (result.length === 0) {\n\t\t\treturn new ResponseError('NOT_MEMBER', 'Not a project member')\n\t\t}\n\n\t\ttry {\n\t\t\tfor (const membershipUpdate of this.memberships) {\n\t\t\t\tif (membershipUpdate.operation === 'remove') {\n\t\t\t\t\tawait bus.execute(new RemoveProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate.role))\n\t\t\t\t} else {\n\t\t\t\t\tawait bus.execute(\n\t\t\t\t\t\tnew CreateOrUpdateProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate),\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn new ResponseOk(null)\n\t\t} catch (e) {\n\t\t\tif (!(e instanceof Error)) {\n\t\t\t\tthrow e\n\t\t\t}\n\t\t\tswitch ((e as any).constraint) {\n\t\t\t\tcase 'project_membership_project':\n\t\t\t\t\treturn new ResponseError('PROJECT_NOT_FOUND', 'Project not found')\n\t\t\t\tdefault:\n\t\t\t\t\tthrow e\n\t\t\t}\n\t\t}\n\t}\n}\nexport type UpdateProjectMemberResponse = Response<null, UpdateProjectMemberErrorCode>\n"],"names":["SelectBuilder","ResponseError","RemoveProjectMembershipCommand","CreateOrUpdateProjectMembershipCommand","ResponseOk"],"mappings":";;;;;;AAQO,MAAM,2BAA2E;AAAA,EACvF,YACkB,WACA,YACA,aAChB;AAHgB,SAAA,YAAA;AACA,SAAA,aAAA;AACA,SAAA,cAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,KAAK,aAAiE;AACzF,UAAM,SAAS,MAAMA,uBAAc,SACjC,OAAO,IAAI,EACX,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK;AAAA,IAAA,CAClB,EACA,UAAU,EAAE;AACd,QAAI,OAAO,WAAW,GAAG;AACxB,aAAO,IAAIC,SAAAA,cAAc,cAAc,sBAAsB;AAAA,IAC9D;AAEA,QAAI;AACH,iBAAW,oBAAoB,KAAK,aAAa;AAChD,YAAI,iBAAiB,cAAc,UAAU;AAC5C,gBAAM,IAAI,QAAQ,IAAIC,gCAAAA,+BAA+B,KAAK,WAAW,KAAK,YAAY,iBAAiB,IAAI,CAAC;AAAA,QAC7G,OAAO;AACN,gBAAM,IAAI;AAAA,YACT,IAAIC,uCAAAA,uCAAuC,KAAK,WAAW,KAAK,YAAY,gBAAgB;AAAA,UAAA;AAAA,QAE9F;AAAA,MACD;AAEA,aAAO,IAAIC,SAAAA,WAAW,IAAI;AAAA,IAC3B,SAAS,GAAG;AACX,UAAI,EAAE,aAAa,QAAQ;AAC1B,cAAM;AAAA,MACP;AACA,cAAS,EAAU,YAAA;AAAA,QAClB,KAAK;AACJ,iBAAO,IAAIH,SAAAA,cAAc,qBAAqB,mBAAmB;AAAA,QAClE;AACC,gBAAM;AAAA,MAAA;AAAA,IAET;AAAA,EACD;AACD;;"}
+{"version":3,"file":"UpdateProjectMemberCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/membership/UpdateProjectMemberCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { UpdateProjectMemberErrorCode } from '../../../schema/index.js'\nimport { CreateOrUpdateProjectMembershipCommand } from './CreateOrUpdateProjectMembershipCommand.js'\nimport { SelectBuilder } from '@contember/database'\nimport { MembershipUpdateInput } from './types.js'\nimport { RemoveProjectMembershipCommand } from './RemoveProjectMembershipCommand.js'\nimport { Response, ResponseError, ResponseOk } from '../../utils/Response.js'\n\nexport class UpdateProjectMemberCommand implements Command<UpdateProjectMemberResponse> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly identityId: string,\n\t\tprivate readonly memberships: readonly MembershipUpdateInput[],\n\t) {}\n\n\tasync execute({ db, bus, providers }: Command.Args): Promise<UpdateProjectMemberResponse> {\n\t\tconst result = await SelectBuilder.create()\n\t\t\t.select('id')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tproject_id: this.projectId,\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\t\t.getResult(db)\n\t\tif (result.length === 0) {\n\t\t\treturn new ResponseError('NOT_MEMBER', 'Not a project member')\n\t\t}\n\n\t\ttry {\n\t\t\tfor (const membershipUpdate of this.memberships) {\n\t\t\t\tif (membershipUpdate.operation === 'remove') {\n\t\t\t\t\tawait bus.execute(new RemoveProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate.role))\n\t\t\t\t} else {\n\t\t\t\t\tawait bus.execute(\n\t\t\t\t\t\tnew CreateOrUpdateProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate),\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn new ResponseOk(null)\n\t\t} catch (e) {\n\t\t\tif (!(e instanceof Error)) {\n\t\t\t\tthrow e\n\t\t\t}\n\t\t\tswitch ((e as any).constraint) {\n\t\t\t\tcase 'project_membership_project':\n\t\t\t\t\treturn new ResponseError('PROJECT_NOT_FOUND', 'Project not found')\n\t\t\t\tdefault:\n\t\t\t\t\tthrow e\n\t\t\t}\n\t\t}\n\t}\n}\nexport type UpdateProjectMemberResponse = Response<null, UpdateProjectMemberErrorCode>\n"],"names":["SelectBuilder","ResponseError","RemoveProjectMembershipCommand","CreateOrUpdateProjectMembershipCommand","ResponseOk"],"mappings":";;;;;;AAQO,MAAM,2BAA2E;AAAA,EACvF,YACkB,WACA,YACA,aAChB;AAHgB,SAAA,YAAA;AACA,SAAA,aAAA;AACA,SAAA,cAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,KAAK,aAAiE;AACzF,UAAM,SAAS,MAAMA,uBAAc,SACjC,OAAO,IAAI,EACX,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK;AAAA,IAAA,CAClB,EACA,UAAU,EAAE;AACd,QAAI,OAAO,WAAW,GAAG;AACxB,aAAO,IAAIC,SAAAA,cAAc,cAAc,sBAAsB;AAAA,IAC9D;AAEA,QAAI;AACH,iBAAW,oBAAoB,KAAK,aAAa;AAChD,YAAI,iBAAiB,cAAc,UAAU;AAC5C,gBAAM,IAAI,QAAQ,IAAIC,+BAAAA,+BAA+B,KAAK,WAAW,KAAK,YAAY,iBAAiB,IAAI,CAAC;AAAA,QAC7G,OAAO;AACN,gBAAM,IAAI;AAAA,YACT,IAAIC,uCAAAA,uCAAuC,KAAK,WAAW,KAAK,YAAY,gBAAgB;AAAA,UAAA;AAAA,QAE9F;AAAA,MACD;AAEA,aAAO,IAAIC,SAAAA,WAAW,IAAI;AAAA,IAC3B,SAAS,GAAG;AACX,UAAI,EAAE,aAAa,QAAQ;AAC1B,cAAM;AAAA,MACP;AACA,cAAS,EAAU,YAAA;AAAA,QAClB,KAAK;AACJ,iBAAO,IAAIH,SAAAA,cAAc,qBAAqB,mBAAmB;AAAA,QAClE;AACC,gBAAM;AAAA,MAAA;AAAA,IAET;AAAA,EACD;AACD;;"}

package/dist/development/src/model/commands/membership/UpdateProjectMemberCommand.js

@@ -1,6 +1,6 @@
 import { CreateOrUpdateProjectMembershipCommand } from "./CreateOrUpdateProjectMembershipCommand.js";
 import { SelectBuilder } from "@contember/database";
-import { RemoveProjectMembershipCommand } from "./RemoveProjectMembershipsCommand.js";
+import { RemoveProjectMembershipCommand } from "./RemoveProjectMembershipCommand.js";
 import { ResponseError, ResponseOk } from "../../utils/Response.js";
 class UpdateProjectMemberCommand {
   constructor(projectId, identityId, memberships) {

package/dist/development/src/model/commands/membership/UpdateProjectMemberCommand.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateProjectMemberCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/membership/UpdateProjectMemberCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { UpdateProjectMemberErrorCode } from '../../../schema/index.js'\nimport { CreateOrUpdateProjectMembershipCommand } from './CreateOrUpdateProjectMembershipCommand.js'\nimport { SelectBuilder } from '@contember/database'\nimport { MembershipUpdateInput } from './types.js'\nimport { RemoveProjectMembershipCommand } from './RemoveProjectMembershipsCommand.js'\nimport { Response, ResponseError, ResponseOk } from '../../utils/Response.js'\n\nexport class UpdateProjectMemberCommand implements Command<UpdateProjectMemberResponse> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly identityId: string,\n\t\tprivate readonly memberships: readonly MembershipUpdateInput[],\n\t) {}\n\n\tasync execute({ db, bus, providers }: Command.Args): Promise<UpdateProjectMemberResponse> {\n\t\tconst result = await SelectBuilder.create()\n\t\t\t.select('id')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tproject_id: this.projectId,\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\t\t.getResult(db)\n\t\tif (result.length === 0) {\n\t\t\treturn new ResponseError('NOT_MEMBER', 'Not a project member')\n\t\t}\n\n\t\ttry {\n\t\t\tfor (const membershipUpdate of this.memberships) {\n\t\t\t\tif (membershipUpdate.operation === 'remove') {\n\t\t\t\t\tawait bus.execute(new RemoveProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate.role))\n\t\t\t\t} else {\n\t\t\t\t\tawait bus.execute(\n\t\t\t\t\t\tnew CreateOrUpdateProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate),\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn new ResponseOk(null)\n\t\t} catch (e) {\n\t\t\tif (!(e instanceof Error)) {\n\t\t\t\tthrow e\n\t\t\t}\n\t\t\tswitch ((e as any).constraint) {\n\t\t\t\tcase 'project_membership_project':\n\t\t\t\t\treturn new ResponseError('PROJECT_NOT_FOUND', 'Project not found')\n\t\t\t\tdefault:\n\t\t\t\t\tthrow e\n\t\t\t}\n\t\t}\n\t}\n}\nexport type UpdateProjectMemberResponse = Response<null, UpdateProjectMemberErrorCode>\n"],"names":[],"mappings":";;;;AAQO,MAAM,2BAA2E;AAAA,EACvF,YACkB,WACA,YACA,aAChB;AAHgB,SAAA,YAAA;AACA,SAAA,aAAA;AACA,SAAA,cAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,KAAK,aAAiE;AACzF,UAAM,SAAS,MAAM,cAAc,SACjC,OAAO,IAAI,EACX,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK;AAAA,IAAA,CAClB,EACA,UAAU,EAAE;AACd,QAAI,OAAO,WAAW,GAAG;AACxB,aAAO,IAAI,cAAc,cAAc,sBAAsB;AAAA,IAC9D;AAEA,QAAI;AACH,iBAAW,oBAAoB,KAAK,aAAa;AAChD,YAAI,iBAAiB,cAAc,UAAU;AAC5C,gBAAM,IAAI,QAAQ,IAAI,+BAA+B,KAAK,WAAW,KAAK,YAAY,iBAAiB,IAAI,CAAC;AAAA,QAC7G,OAAO;AACN,gBAAM,IAAI;AAAA,YACT,IAAI,uCAAuC,KAAK,WAAW,KAAK,YAAY,gBAAgB;AAAA,UAAA;AAAA,QAE9F;AAAA,MACD;AAEA,aAAO,IAAI,WAAW,IAAI;AAAA,IAC3B,SAAS,GAAG;AACX,UAAI,EAAE,aAAa,QAAQ;AAC1B,cAAM;AAAA,MACP;AACA,cAAS,EAAU,YAAA;AAAA,QAClB,KAAK;AACJ,iBAAO,IAAI,cAAc,qBAAqB,mBAAmB;AAAA,QAClE;AACC,gBAAM;AAAA,MAAA;AAAA,IAET;AAAA,EACD;AACD;"}
+{"version":3,"file":"UpdateProjectMemberCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/membership/UpdateProjectMemberCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { UpdateProjectMemberErrorCode } from '../../../schema/index.js'\nimport { CreateOrUpdateProjectMembershipCommand } from './CreateOrUpdateProjectMembershipCommand.js'\nimport { SelectBuilder } from '@contember/database'\nimport { MembershipUpdateInput } from './types.js'\nimport { RemoveProjectMembershipCommand } from './RemoveProjectMembershipCommand.js'\nimport { Response, ResponseError, ResponseOk } from '../../utils/Response.js'\n\nexport class UpdateProjectMemberCommand implements Command<UpdateProjectMemberResponse> {\n\tconstructor(\n\t\tprivate readonly projectId: string,\n\t\tprivate readonly identityId: string,\n\t\tprivate readonly memberships: readonly MembershipUpdateInput[],\n\t) {}\n\n\tasync execute({ db, bus, providers }: Command.Args): Promise<UpdateProjectMemberResponse> {\n\t\tconst result = await SelectBuilder.create()\n\t\t\t.select('id')\n\t\t\t.from('project_membership')\n\t\t\t.where({\n\t\t\t\tproject_id: this.projectId,\n\t\t\t\tidentity_id: this.identityId,\n\t\t\t})\n\t\t\t.getResult(db)\n\t\tif (result.length === 0) {\n\t\t\treturn new ResponseError('NOT_MEMBER', 'Not a project member')\n\t\t}\n\n\t\ttry {\n\t\t\tfor (const membershipUpdate of this.memberships) {\n\t\t\t\tif (membershipUpdate.operation === 'remove') {\n\t\t\t\t\tawait bus.execute(new RemoveProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate.role))\n\t\t\t\t} else {\n\t\t\t\t\tawait bus.execute(\n\t\t\t\t\t\tnew CreateOrUpdateProjectMembershipCommand(this.projectId, this.identityId, membershipUpdate),\n\t\t\t\t\t)\n\t\t\t\t}\n\t\t\t}\n\n\t\t\treturn new ResponseOk(null)\n\t\t} catch (e) {\n\t\t\tif (!(e instanceof Error)) {\n\t\t\t\tthrow e\n\t\t\t}\n\t\t\tswitch ((e as any).constraint) {\n\t\t\t\tcase 'project_membership_project':\n\t\t\t\t\treturn new ResponseError('PROJECT_NOT_FOUND', 'Project not found')\n\t\t\t\tdefault:\n\t\t\t\t\tthrow e\n\t\t\t}\n\t\t}\n\t}\n}\nexport type UpdateProjectMemberResponse = Response<null, UpdateProjectMemberErrorCode>\n"],"names":[],"mappings":";;;;AAQO,MAAM,2BAA2E;AAAA,EACvF,YACkB,WACA,YACA,aAChB;AAHgB,SAAA,YAAA;AACA,SAAA,aAAA;AACA,SAAA,cAAA;AAAA,EACf;AAAA,EAEH,MAAM,QAAQ,EAAE,IAAI,KAAK,aAAiE;AACzF,UAAM,SAAS,MAAM,cAAc,SACjC,OAAO,IAAI,EACX,KAAK,oBAAoB,EACzB,MAAM;AAAA,MACN,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK;AAAA,IAAA,CAClB,EACA,UAAU,EAAE;AACd,QAAI,OAAO,WAAW,GAAG;AACxB,aAAO,IAAI,cAAc,cAAc,sBAAsB;AAAA,IAC9D;AAEA,QAAI;AACH,iBAAW,oBAAoB,KAAK,aAAa;AAChD,YAAI,iBAAiB,cAAc,UAAU;AAC5C,gBAAM,IAAI,QAAQ,IAAI,+BAA+B,KAAK,WAAW,KAAK,YAAY,iBAAiB,IAAI,CAAC;AAAA,QAC7G,OAAO;AACN,gBAAM,IAAI;AAAA,YACT,IAAI,uCAAuC,KAAK,WAAW,KAAK,YAAY,gBAAgB;AAAA,UAAA;AAAA,QAE9F;AAAA,MACD;AAEA,aAAO,IAAI,WAAW,IAAI;AAAA,IAC3B,SAAS,GAAG;AACX,UAAI,EAAE,aAAa,QAAQ;AAC1B,cAAM;AAAA,MACP;AACA,cAAS,EAAU,YAAA;AAAA,QAClB,KAAK;AACJ,iBAAO,IAAI,cAAc,qBAAqB,mBAAmB;AAAA,QAClE;AACC,gBAAM;AAAA,MAAA;AAAA,IAET;AAAA,EACD;AACD;"}

package/dist/development/src/model/commands/person/EnablePersonCommand.cjs

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class EnablePersonCommand {
+  constructor(personId) {
+    this.personId = personId;
+  }
+  async execute({ db, providers }) {
+    await Database.UpdateBuilder.create().table("person").values({
+      disabled_at: null
+    }).where({
+      id: this.personId
+    }).execute(db);
+  }
+}
+exports.EnablePersonCommand = EnablePersonCommand;
+//# sourceMappingURL=EnablePersonCommand.cjs.map

package/dist/development/src/model/commands/person/EnablePersonCommand.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnablePersonCommand.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/EnablePersonCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class EnablePersonCommand implements Command<void> {\n\tconstructor(private readonly personId: string) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('person')\n\t\t\t.values({\n\t\t\t\tdisabled_at: null,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.personId,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";;;AAGO,MAAM,oBAA6C;AAAA,EACzD,YAA6B,UAAkB;AAAlB,SAAA,WAAA;AAAA,EAAmB;AAAA,EAEhD,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAMA,SAAAA,cAAc,OAAA,EAClB,MAAM,QAAQ,EACd,OAAO;AAAA,MACP,aAAa;AAAA,IAAA,CACb,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;;"}

package/dist/development/src/model/commands/person/EnablePersonCommand.js

@@ -0,0 +1,17 @@
+import { UpdateBuilder as UpdateBuilder$1 } from "@contember/database";
+class EnablePersonCommand {
+  constructor(personId) {
+    this.personId = personId;
+  }
+  async execute({ db, providers }) {
+    await UpdateBuilder$1.create().table("person").values({
+      disabled_at: null
+    }).where({
+      id: this.personId
+    }).execute(db);
+  }
+}
+export {
+  EnablePersonCommand
+};
+//# sourceMappingURL=EnablePersonCommand.js.map

package/dist/development/src/model/commands/person/EnablePersonCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnablePersonCommand.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/commands/person/EnablePersonCommand.ts"],"sourcesContent":["import { Command } from '../Command.js'\nimport { UpdateBuilder } from '@contember/database'\n\nexport class EnablePersonCommand implements Command<void> {\n\tconstructor(private readonly personId: string) {}\n\n\tasync execute({ db, providers }: Command.Args): Promise<void> {\n\t\tawait UpdateBuilder.create()\n\t\t\t.table('person')\n\t\t\t.values({\n\t\t\t\tdisabled_at: null,\n\t\t\t})\n\t\t\t.where({\n\t\t\t\tid: this.personId,\n\t\t\t})\n\t\t\t.execute(db)\n\t}\n}\n"],"names":["UpdateBuilder"],"mappings":";AAGO,MAAM,oBAA6C;AAAA,EACzD,YAA6B,UAAkB;AAAlB,SAAA,WAAA;AAAA,EAAmB;AAAA,EAEhD,MAAM,QAAQ,EAAE,IAAI,aAA0C;AAC7D,UAAMA,gBAAc,OAAA,EAClB,MAAM,QAAQ,EACd,OAAO;AAAA,MACP,aAAa;AAAA,IAAA,CACb,EACA,MAAM;AAAA,MACN,IAAI,KAAK;AAAA,IAAA,CACT,EACA,QAAQ,EAAE;AAAA,EACb;AACD;"}

package/dist/development/src/model/queries/configuration/ConfigurationQuery.cjs

@@ -87,6 +87,10 @@ class ConfigurationQuery extends Database.DatabaseQuery {
           limit: result.rate_limit_email_verification_per_ip_limit,
           window: result.rate_limit_email_verification_per_ip_window
         }
+      },
+      panel: {
+        globalRoles: result.panel_global_roles,
+        projectRoles: result.panel_project_roles
       }
     };
   }

package/dist/development/src/model/queries/configuration/ConfigurationQuery.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigurationQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/configuration/ConfigurationQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { Config, ConfigRow } from '../../type/Config.js'\nimport { Providers } from '../../providers.js'\n\nexport class ConfigurationQuery extends DatabaseQuery<Config> {\n\tconstructor(private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<Config> {\n\t\tconst rows = await SelectBuilder.create<ConfigRow>()\n\t\t\t.from('config')\n\t\t\t.select(new Literal('*'))\n\t\t\t.getResult(db)\n\t\tconst result = this.fetchOneOrNull(rows)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\n\t\tconst captchaSecret = result.captcha_secret && typeof result.captcha_secret_version === 'number'\n\t\t\t? (await this.providers.decrypt(result.captcha_secret, result.captcha_secret_version)).value.toString('utf8')\n\t\t\t: null\n\n\t\treturn {\n\t\t\tsignup: {\n\t\t\t\trequireEmailVerification: result.signup_require_email_verification,\n\t\t\t},\n\t\t\temailChange: {\n\t\t\t\trequireVerification: result.require_email_change_verification,\n\t\t\t},\n\t\t\tpasswordless: {\n\t\t\t\tenabled: result.passwordless_enabled,\n\t\t\t\turl: result.passwordless_url,\n\t\t\t\texpiration: result.passwordless_expiration,\n\t\t\t},\n\t\t\tpassword: {\n\t\t\t\tminLength: result.password_min_length,\n\t\t\t\trequireUppercase: result.password_require_uppercase,\n\t\t\t\trequireLowercase: result.password_require_lowercase,\n\t\t\t\trequireDigit: result.password_require_digit,\n\t\t\t\trequireSpecial: result.password_require_special,\n\t\t\t\tpattern: result.password_pattern,\n\t\t\t\tcheckBlacklist: result.password_check_blacklist,\n\t\t\t\tcheckHibp: result.password_check_hibp,\n\t\t\t},\n\t\t\tlogin: {\n\t\t\t\tbaseBackoff: result.login_base_backoff,\n\t\t\t\tmaxBackoff: result.login_max_backoff,\n\t\t\t\tattemptWindow: result.login_attempt_window,\n\t\t\t\trevealUserExists: result.login_reveal_user_exits,\n\t\t\t\trevealLoginMethod: result.login_reveal_login_method,\n\t\t\t\tdefaultTokenExpiration: result.login_default_token_expiration,\n\t\t\t\tmaxTokenExpiration: result.login_max_token_expiration,\n\t\t\t\tmfaGraceDuration: result.login_mfa_grace_duration,\n\t\t\t\tanomalyDetection: {\n\t\t\t\t\tenabled: result.login_anomaly_detection_enabled,\n\t\t\t\t\thistorySize: result.login_anomaly_history_size,\n\t\t\t\t\temailThreshold: result.login_anomaly_email_threshold,\n\t\t\t\t\tstepUpThreshold: result.login_anomaly_step_up_threshold,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptcha: {\n\t\t\t\tprovider: result.captcha_provider,\n\t\t\t\tthreshold: result.captcha_threshold,\n\t\t\t\tprotect: {\n\t\t\t\t\tsignUp: result.captcha_protect_sign_up,\n\t\t\t\t\tpasswordReset: result.captcha_protect_password_reset,\n\t\t\t\t\tpasswordlessInit: result.captcha_protect_passwordless_init,\n\t\t\t\t\temailVerification: result.captcha_protect_email_verification,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptchaSecret,\n\t\t\trateLimits: {\n\t\t\t\tsignUpPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_sign_up_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_sign_up_per_ip_window,\n\t\t\t\t},\n\t\t\t\tloginPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_login_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_login_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordResetPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_password_reset_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_password_reset_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordlessInitPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_passwordless_init_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_passwordless_init_per_ip_window,\n\t\t\t\t},\n\t\t\t\temailOtpPerPerson: {\n\t\t\t\t\tlimit: result.rate_limit_email_otp_per_person_limit,\n\t\t\t\t\twindow: result.rate_limit_email_otp_per_person_window,\n\t\t\t\t},\n\t\t\t\temailVerificationPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_email_verification_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_email_verification_per_ip_window,\n\t\t\t\t},\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder","Literal"],"mappings":";;;AAIO,MAAM,2BAA2BA,SAAAA,cAAsB;AAAA,EAC7D,YAA6B,WAAsB;AAClD,UAAA;AAD4B,SAAA,YAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0C;AACvD,UAAM,OAAO,MAAMC,SAAAA,cAAc,OAAA,EAC/B,KAAK,QAAQ,EACb,OAAO,IAAIC,SAAAA,QAAQ,GAAG,CAAC,EACvB,UAAU,EAAE;AACd,UAAM,SAAS,KAAK,eAAe,IAAI;AACvC,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAEA,UAAM,gBAAgB,OAAO,kBAAkB,OAAO,OAAO,2BAA2B,YACpF,MAAM,KAAK,UAAU,QAAQ,OAAO,gBAAgB,OAAO,sBAAsB,GAAG,MAAM,SAAS,MAAM,IAC1G;AAEH,WAAO;AAAA,MACN,QAAQ;AAAA,QACP,0BAA0B,OAAO;AAAA,MAAA;AAAA,MAElC,aAAa;AAAA,QACZ,qBAAqB,OAAO;AAAA,MAAA;AAAA,MAE7B,cAAc;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,KAAK,OAAO;AAAA,QACZ,YAAY,OAAO;AAAA,MAAA;AAAA,MAEpB,UAAU;AAAA,QACT,WAAW,OAAO;AAAA,QAClB,kBAAkB,OAAO;AAAA,QACzB,kBAAkB,OAAO;AAAA,QACzB,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,QAChB,gBAAgB,OAAO;AAAA,QACvB,WAAW,OAAO;AAAA,MAAA;AAAA,MAEnB,OAAO;AAAA,QACN,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,eAAe,OAAO;AAAA,QACtB,kBAAkB,OAAO;AAAA,QACzB,mBAAmB,OAAO;AAAA,QAC1B,wBAAwB,OAAO;AAAA,QAC/B,oBAAoB,OAAO;AAAA,QAC3B,kBAAkB,OAAO;AAAA,QACzB,kBAAkB;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,aAAa,OAAO;AAAA,UACpB,gBAAgB,OAAO;AAAA,UACvB,iBAAiB,OAAO;AAAA,QAAA;AAAA,MACzB;AAAA,MAED,SAAS;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,SAAS;AAAA,UACR,QAAQ,OAAO;AAAA,UACf,eAAe,OAAO;AAAA,UACtB,kBAAkB,OAAO;AAAA,UACzB,mBAAmB,OAAO;AAAA,QAAA;AAAA,MAC3B;AAAA,MAED;AAAA,MACA,YAAY;AAAA,QACX,aAAa;AAAA,UACZ,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,YAAY;AAAA,UACX,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,oBAAoB;AAAA,UACnB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,uBAAuB;AAAA,UACtB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,mBAAmB;AAAA,UAClB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,wBAAwB;AAAA,UACvB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,MAChB;AAAA,IACD;AAAA,EAEF;AACD;;"}
+{"version":3,"file":"ConfigurationQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/configuration/ConfigurationQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { Config, ConfigRow } from '../../type/Config.js'\nimport { Providers } from '../../providers.js'\n\nexport class ConfigurationQuery extends DatabaseQuery<Config> {\n\tconstructor(private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<Config> {\n\t\tconst rows = await SelectBuilder.create<ConfigRow>()\n\t\t\t.from('config')\n\t\t\t.select(new Literal('*'))\n\t\t\t.getResult(db)\n\t\tconst result = this.fetchOneOrNull(rows)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\n\t\tconst captchaSecret = result.captcha_secret && typeof result.captcha_secret_version === 'number'\n\t\t\t? (await this.providers.decrypt(result.captcha_secret, result.captcha_secret_version)).value.toString('utf8')\n\t\t\t: null\n\n\t\treturn {\n\t\t\tsignup: {\n\t\t\t\trequireEmailVerification: result.signup_require_email_verification,\n\t\t\t},\n\t\t\temailChange: {\n\t\t\t\trequireVerification: result.require_email_change_verification,\n\t\t\t},\n\t\t\tpasswordless: {\n\t\t\t\tenabled: result.passwordless_enabled,\n\t\t\t\turl: result.passwordless_url,\n\t\t\t\texpiration: result.passwordless_expiration,\n\t\t\t},\n\t\t\tpassword: {\n\t\t\t\tminLength: result.password_min_length,\n\t\t\t\trequireUppercase: result.password_require_uppercase,\n\t\t\t\trequireLowercase: result.password_require_lowercase,\n\t\t\t\trequireDigit: result.password_require_digit,\n\t\t\t\trequireSpecial: result.password_require_special,\n\t\t\t\tpattern: result.password_pattern,\n\t\t\t\tcheckBlacklist: result.password_check_blacklist,\n\t\t\t\tcheckHibp: result.password_check_hibp,\n\t\t\t},\n\t\t\tlogin: {\n\t\t\t\tbaseBackoff: result.login_base_backoff,\n\t\t\t\tmaxBackoff: result.login_max_backoff,\n\t\t\t\tattemptWindow: result.login_attempt_window,\n\t\t\t\trevealUserExists: result.login_reveal_user_exits,\n\t\t\t\trevealLoginMethod: result.login_reveal_login_method,\n\t\t\t\tdefaultTokenExpiration: result.login_default_token_expiration,\n\t\t\t\tmaxTokenExpiration: result.login_max_token_expiration,\n\t\t\t\tmfaGraceDuration: result.login_mfa_grace_duration,\n\t\t\t\tanomalyDetection: {\n\t\t\t\t\tenabled: result.login_anomaly_detection_enabled,\n\t\t\t\t\thistorySize: result.login_anomaly_history_size,\n\t\t\t\t\temailThreshold: result.login_anomaly_email_threshold,\n\t\t\t\t\tstepUpThreshold: result.login_anomaly_step_up_threshold,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptcha: {\n\t\t\t\tprovider: result.captcha_provider,\n\t\t\t\tthreshold: result.captcha_threshold,\n\t\t\t\tprotect: {\n\t\t\t\t\tsignUp: result.captcha_protect_sign_up,\n\t\t\t\t\tpasswordReset: result.captcha_protect_password_reset,\n\t\t\t\t\tpasswordlessInit: result.captcha_protect_passwordless_init,\n\t\t\t\t\temailVerification: result.captcha_protect_email_verification,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptchaSecret,\n\t\t\trateLimits: {\n\t\t\t\tsignUpPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_sign_up_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_sign_up_per_ip_window,\n\t\t\t\t},\n\t\t\t\tloginPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_login_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_login_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordResetPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_password_reset_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_password_reset_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordlessInitPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_passwordless_init_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_passwordless_init_per_ip_window,\n\t\t\t\t},\n\t\t\t\temailOtpPerPerson: {\n\t\t\t\t\tlimit: result.rate_limit_email_otp_per_person_limit,\n\t\t\t\t\twindow: result.rate_limit_email_otp_per_person_window,\n\t\t\t\t},\n\t\t\t\temailVerificationPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_email_verification_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_email_verification_per_ip_window,\n\t\t\t\t},\n\t\t\t},\n\t\t\tpanel: {\n\t\t\t\tglobalRoles: result.panel_global_roles,\n\t\t\t\tprojectRoles: result.panel_project_roles,\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder","Literal"],"mappings":";;;AAIO,MAAM,2BAA2BA,SAAAA,cAAsB;AAAA,EAC7D,YAA6B,WAAsB;AAClD,UAAA;AAD4B,SAAA,YAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0C;AACvD,UAAM,OAAO,MAAMC,SAAAA,cAAc,OAAA,EAC/B,KAAK,QAAQ,EACb,OAAO,IAAIC,SAAAA,QAAQ,GAAG,CAAC,EACvB,UAAU,EAAE;AACd,UAAM,SAAS,KAAK,eAAe,IAAI;AACvC,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAEA,UAAM,gBAAgB,OAAO,kBAAkB,OAAO,OAAO,2BAA2B,YACpF,MAAM,KAAK,UAAU,QAAQ,OAAO,gBAAgB,OAAO,sBAAsB,GAAG,MAAM,SAAS,MAAM,IAC1G;AAEH,WAAO;AAAA,MACN,QAAQ;AAAA,QACP,0BAA0B,OAAO;AAAA,MAAA;AAAA,MAElC,aAAa;AAAA,QACZ,qBAAqB,OAAO;AAAA,MAAA;AAAA,MAE7B,cAAc;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,KAAK,OAAO;AAAA,QACZ,YAAY,OAAO;AAAA,MAAA;AAAA,MAEpB,UAAU;AAAA,QACT,WAAW,OAAO;AAAA,QAClB,kBAAkB,OAAO;AAAA,QACzB,kBAAkB,OAAO;AAAA,QACzB,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,QAChB,gBAAgB,OAAO;AAAA,QACvB,WAAW,OAAO;AAAA,MAAA;AAAA,MAEnB,OAAO;AAAA,QACN,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,eAAe,OAAO;AAAA,QACtB,kBAAkB,OAAO;AAAA,QACzB,mBAAmB,OAAO;AAAA,QAC1B,wBAAwB,OAAO;AAAA,QAC/B,oBAAoB,OAAO;AAAA,QAC3B,kBAAkB,OAAO;AAAA,QACzB,kBAAkB;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,aAAa,OAAO;AAAA,UACpB,gBAAgB,OAAO;AAAA,UACvB,iBAAiB,OAAO;AAAA,QAAA;AAAA,MACzB;AAAA,MAED,SAAS;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,SAAS;AAAA,UACR,QAAQ,OAAO;AAAA,UACf,eAAe,OAAO;AAAA,UACtB,kBAAkB,OAAO;AAAA,UACzB,mBAAmB,OAAO;AAAA,QAAA;AAAA,MAC3B;AAAA,MAED;AAAA,MACA,YAAY;AAAA,QACX,aAAa;AAAA,UACZ,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,YAAY;AAAA,UACX,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,oBAAoB;AAAA,UACnB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,uBAAuB;AAAA,UACtB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,mBAAmB;AAAA,UAClB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,wBAAwB;AAAA,UACvB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,MAChB;AAAA,MAED,OAAO;AAAA,QACN,aAAa,OAAO;AAAA,QACpB,cAAc,OAAO;AAAA,MAAA;AAAA,IACtB;AAAA,EAEF;AACD;;"}

package/dist/development/src/model/queries/configuration/ConfigurationQuery.js

@@ -85,6 +85,10 @@ class ConfigurationQuery extends DatabaseQuery {
           limit: result.rate_limit_email_verification_per_ip_limit,
           window: result.rate_limit_email_verification_per_ip_window
         }
+      },
+      panel: {
+        globalRoles: result.panel_global_roles,
+        projectRoles: result.panel_project_roles
       }
     };
   }

package/dist/development/src/model/queries/configuration/ConfigurationQuery.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigurationQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/configuration/ConfigurationQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { Config, ConfigRow } from '../../type/Config.js'\nimport { Providers } from '../../providers.js'\n\nexport class ConfigurationQuery extends DatabaseQuery<Config> {\n\tconstructor(private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<Config> {\n\t\tconst rows = await SelectBuilder.create<ConfigRow>()\n\t\t\t.from('config')\n\t\t\t.select(new Literal('*'))\n\t\t\t.getResult(db)\n\t\tconst result = this.fetchOneOrNull(rows)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\n\t\tconst captchaSecret = result.captcha_secret && typeof result.captcha_secret_version === 'number'\n\t\t\t? (await this.providers.decrypt(result.captcha_secret, result.captcha_secret_version)).value.toString('utf8')\n\t\t\t: null\n\n\t\treturn {\n\t\t\tsignup: {\n\t\t\t\trequireEmailVerification: result.signup_require_email_verification,\n\t\t\t},\n\t\t\temailChange: {\n\t\t\t\trequireVerification: result.require_email_change_verification,\n\t\t\t},\n\t\t\tpasswordless: {\n\t\t\t\tenabled: result.passwordless_enabled,\n\t\t\t\turl: result.passwordless_url,\n\t\t\t\texpiration: result.passwordless_expiration,\n\t\t\t},\n\t\t\tpassword: {\n\t\t\t\tminLength: result.password_min_length,\n\t\t\t\trequireUppercase: result.password_require_uppercase,\n\t\t\t\trequireLowercase: result.password_require_lowercase,\n\t\t\t\trequireDigit: result.password_require_digit,\n\t\t\t\trequireSpecial: result.password_require_special,\n\t\t\t\tpattern: result.password_pattern,\n\t\t\t\tcheckBlacklist: result.password_check_blacklist,\n\t\t\t\tcheckHibp: result.password_check_hibp,\n\t\t\t},\n\t\t\tlogin: {\n\t\t\t\tbaseBackoff: result.login_base_backoff,\n\t\t\t\tmaxBackoff: result.login_max_backoff,\n\t\t\t\tattemptWindow: result.login_attempt_window,\n\t\t\t\trevealUserExists: result.login_reveal_user_exits,\n\t\t\t\trevealLoginMethod: result.login_reveal_login_method,\n\t\t\t\tdefaultTokenExpiration: result.login_default_token_expiration,\n\t\t\t\tmaxTokenExpiration: result.login_max_token_expiration,\n\t\t\t\tmfaGraceDuration: result.login_mfa_grace_duration,\n\t\t\t\tanomalyDetection: {\n\t\t\t\t\tenabled: result.login_anomaly_detection_enabled,\n\t\t\t\t\thistorySize: result.login_anomaly_history_size,\n\t\t\t\t\temailThreshold: result.login_anomaly_email_threshold,\n\t\t\t\t\tstepUpThreshold: result.login_anomaly_step_up_threshold,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptcha: {\n\t\t\t\tprovider: result.captcha_provider,\n\t\t\t\tthreshold: result.captcha_threshold,\n\t\t\t\tprotect: {\n\t\t\t\t\tsignUp: result.captcha_protect_sign_up,\n\t\t\t\t\tpasswordReset: result.captcha_protect_password_reset,\n\t\t\t\t\tpasswordlessInit: result.captcha_protect_passwordless_init,\n\t\t\t\t\temailVerification: result.captcha_protect_email_verification,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptchaSecret,\n\t\t\trateLimits: {\n\t\t\t\tsignUpPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_sign_up_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_sign_up_per_ip_window,\n\t\t\t\t},\n\t\t\t\tloginPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_login_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_login_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordResetPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_password_reset_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_password_reset_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordlessInitPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_passwordless_init_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_passwordless_init_per_ip_window,\n\t\t\t\t},\n\t\t\t\temailOtpPerPerson: {\n\t\t\t\t\tlimit: result.rate_limit_email_otp_per_person_limit,\n\t\t\t\t\twindow: result.rate_limit_email_otp_per_person_window,\n\t\t\t\t},\n\t\t\t\temailVerificationPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_email_verification_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_email_verification_per_ip_window,\n\t\t\t\t},\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";AAIO,MAAM,2BAA2B,cAAsB;AAAA,EAC7D,YAA6B,WAAsB;AAClD,UAAA;AAD4B,SAAA,YAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0C;AACvD,UAAM,OAAO,MAAM,cAAc,OAAA,EAC/B,KAAK,QAAQ,EACb,OAAO,IAAI,QAAQ,GAAG,CAAC,EACvB,UAAU,EAAE;AACd,UAAM,SAAS,KAAK,eAAe,IAAI;AACvC,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAEA,UAAM,gBAAgB,OAAO,kBAAkB,OAAO,OAAO,2BAA2B,YACpF,MAAM,KAAK,UAAU,QAAQ,OAAO,gBAAgB,OAAO,sBAAsB,GAAG,MAAM,SAAS,MAAM,IAC1G;AAEH,WAAO;AAAA,MACN,QAAQ;AAAA,QACP,0BAA0B,OAAO;AAAA,MAAA;AAAA,MAElC,aAAa;AAAA,QACZ,qBAAqB,OAAO;AAAA,MAAA;AAAA,MAE7B,cAAc;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,KAAK,OAAO;AAAA,QACZ,YAAY,OAAO;AAAA,MAAA;AAAA,MAEpB,UAAU;AAAA,QACT,WAAW,OAAO;AAAA,QAClB,kBAAkB,OAAO;AAAA,QACzB,kBAAkB,OAAO;AAAA,QACzB,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,QAChB,gBAAgB,OAAO;AAAA,QACvB,WAAW,OAAO;AAAA,MAAA;AAAA,MAEnB,OAAO;AAAA,QACN,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,eAAe,OAAO;AAAA,QACtB,kBAAkB,OAAO;AAAA,QACzB,mBAAmB,OAAO;AAAA,QAC1B,wBAAwB,OAAO;AAAA,QAC/B,oBAAoB,OAAO;AAAA,QAC3B,kBAAkB,OAAO;AAAA,QACzB,kBAAkB;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,aAAa,OAAO;AAAA,UACpB,gBAAgB,OAAO;AAAA,UACvB,iBAAiB,OAAO;AAAA,QAAA;AAAA,MACzB;AAAA,MAED,SAAS;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,SAAS;AAAA,UACR,QAAQ,OAAO;AAAA,UACf,eAAe,OAAO;AAAA,UACtB,kBAAkB,OAAO;AAAA,UACzB,mBAAmB,OAAO;AAAA,QAAA;AAAA,MAC3B;AAAA,MAED;AAAA,MACA,YAAY;AAAA,QACX,aAAa;AAAA,UACZ,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,YAAY;AAAA,UACX,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,oBAAoB;AAAA,UACnB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,uBAAuB;AAAA,UACtB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,mBAAmB;AAAA,UAClB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,wBAAwB;AAAA,UACvB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,MAChB;AAAA,IACD;AAAA,EAEF;AACD;"}
+{"version":3,"file":"ConfigurationQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/configuration/ConfigurationQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Literal, SelectBuilder } from '@contember/database'\nimport { Config, ConfigRow } from '../../type/Config.js'\nimport { Providers } from '../../providers.js'\n\nexport class ConfigurationQuery extends DatabaseQuery<Config> {\n\tconstructor(private readonly providers: Providers) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<Config> {\n\t\tconst rows = await SelectBuilder.create<ConfigRow>()\n\t\t\t.from('config')\n\t\t\t.select(new Literal('*'))\n\t\t\t.getResult(db)\n\t\tconst result = this.fetchOneOrNull(rows)\n\t\tif (!result) {\n\t\t\tthrow new Error('Configuration not found')\n\t\t}\n\n\t\tconst captchaSecret = result.captcha_secret && typeof result.captcha_secret_version === 'number'\n\t\t\t? (await this.providers.decrypt(result.captcha_secret, result.captcha_secret_version)).value.toString('utf8')\n\t\t\t: null\n\n\t\treturn {\n\t\t\tsignup: {\n\t\t\t\trequireEmailVerification: result.signup_require_email_verification,\n\t\t\t},\n\t\t\temailChange: {\n\t\t\t\trequireVerification: result.require_email_change_verification,\n\t\t\t},\n\t\t\tpasswordless: {\n\t\t\t\tenabled: result.passwordless_enabled,\n\t\t\t\turl: result.passwordless_url,\n\t\t\t\texpiration: result.passwordless_expiration,\n\t\t\t},\n\t\t\tpassword: {\n\t\t\t\tminLength: result.password_min_length,\n\t\t\t\trequireUppercase: result.password_require_uppercase,\n\t\t\t\trequireLowercase: result.password_require_lowercase,\n\t\t\t\trequireDigit: result.password_require_digit,\n\t\t\t\trequireSpecial: result.password_require_special,\n\t\t\t\tpattern: result.password_pattern,\n\t\t\t\tcheckBlacklist: result.password_check_blacklist,\n\t\t\t\tcheckHibp: result.password_check_hibp,\n\t\t\t},\n\t\t\tlogin: {\n\t\t\t\tbaseBackoff: result.login_base_backoff,\n\t\t\t\tmaxBackoff: result.login_max_backoff,\n\t\t\t\tattemptWindow: result.login_attempt_window,\n\t\t\t\trevealUserExists: result.login_reveal_user_exits,\n\t\t\t\trevealLoginMethod: result.login_reveal_login_method,\n\t\t\t\tdefaultTokenExpiration: result.login_default_token_expiration,\n\t\t\t\tmaxTokenExpiration: result.login_max_token_expiration,\n\t\t\t\tmfaGraceDuration: result.login_mfa_grace_duration,\n\t\t\t\tanomalyDetection: {\n\t\t\t\t\tenabled: result.login_anomaly_detection_enabled,\n\t\t\t\t\thistorySize: result.login_anomaly_history_size,\n\t\t\t\t\temailThreshold: result.login_anomaly_email_threshold,\n\t\t\t\t\tstepUpThreshold: result.login_anomaly_step_up_threshold,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptcha: {\n\t\t\t\tprovider: result.captcha_provider,\n\t\t\t\tthreshold: result.captcha_threshold,\n\t\t\t\tprotect: {\n\t\t\t\t\tsignUp: result.captcha_protect_sign_up,\n\t\t\t\t\tpasswordReset: result.captcha_protect_password_reset,\n\t\t\t\t\tpasswordlessInit: result.captcha_protect_passwordless_init,\n\t\t\t\t\temailVerification: result.captcha_protect_email_verification,\n\t\t\t\t},\n\t\t\t},\n\t\t\tcaptchaSecret,\n\t\t\trateLimits: {\n\t\t\t\tsignUpPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_sign_up_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_sign_up_per_ip_window,\n\t\t\t\t},\n\t\t\t\tloginPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_login_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_login_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordResetPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_password_reset_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_password_reset_per_ip_window,\n\t\t\t\t},\n\t\t\t\tpasswordlessInitPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_passwordless_init_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_passwordless_init_per_ip_window,\n\t\t\t\t},\n\t\t\t\temailOtpPerPerson: {\n\t\t\t\t\tlimit: result.rate_limit_email_otp_per_person_limit,\n\t\t\t\t\twindow: result.rate_limit_email_otp_per_person_window,\n\t\t\t\t},\n\t\t\t\temailVerificationPerIp: {\n\t\t\t\t\tlimit: result.rate_limit_email_verification_per_ip_limit,\n\t\t\t\t\twindow: result.rate_limit_email_verification_per_ip_window,\n\t\t\t\t},\n\t\t\t},\n\t\t\tpanel: {\n\t\t\t\tglobalRoles: result.panel_global_roles,\n\t\t\t\tprojectRoles: result.panel_project_roles,\n\t\t\t},\n\t\t}\n\t}\n}\n"],"names":[],"mappings":";AAIO,MAAM,2BAA2B,cAAsB;AAAA,EAC7D,YAA6B,WAAsB;AAClD,UAAA;AAD4B,SAAA,YAAA;AAAA,EAE7B;AAAA,EAEA,MAAM,MAAM,EAAE,MAA0C;AACvD,UAAM,OAAO,MAAM,cAAc,OAAA,EAC/B,KAAK,QAAQ,EACb,OAAO,IAAI,QAAQ,GAAG,CAAC,EACvB,UAAU,EAAE;AACd,UAAM,SAAS,KAAK,eAAe,IAAI;AACvC,QAAI,CAAC,QAAQ;AACZ,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC1C;AAEA,UAAM,gBAAgB,OAAO,kBAAkB,OAAO,OAAO,2BAA2B,YACpF,MAAM,KAAK,UAAU,QAAQ,OAAO,gBAAgB,OAAO,sBAAsB,GAAG,MAAM,SAAS,MAAM,IAC1G;AAEH,WAAO;AAAA,MACN,QAAQ;AAAA,QACP,0BAA0B,OAAO;AAAA,MAAA;AAAA,MAElC,aAAa;AAAA,QACZ,qBAAqB,OAAO;AAAA,MAAA;AAAA,MAE7B,cAAc;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,KAAK,OAAO;AAAA,QACZ,YAAY,OAAO;AAAA,MAAA;AAAA,MAEpB,UAAU;AAAA,QACT,WAAW,OAAO;AAAA,QAClB,kBAAkB,OAAO;AAAA,QACzB,kBAAkB,OAAO;AAAA,QACzB,cAAc,OAAO;AAAA,QACrB,gBAAgB,OAAO;AAAA,QACvB,SAAS,OAAO;AAAA,QAChB,gBAAgB,OAAO;AAAA,QACvB,WAAW,OAAO;AAAA,MAAA;AAAA,MAEnB,OAAO;AAAA,QACN,aAAa,OAAO;AAAA,QACpB,YAAY,OAAO;AAAA,QACnB,eAAe,OAAO;AAAA,QACtB,kBAAkB,OAAO;AAAA,QACzB,mBAAmB,OAAO;AAAA,QAC1B,wBAAwB,OAAO;AAAA,QAC/B,oBAAoB,OAAO;AAAA,QAC3B,kBAAkB,OAAO;AAAA,QACzB,kBAAkB;AAAA,UACjB,SAAS,OAAO;AAAA,UAChB,aAAa,OAAO;AAAA,UACpB,gBAAgB,OAAO;AAAA,UACvB,iBAAiB,OAAO;AAAA,QAAA;AAAA,MACzB;AAAA,MAED,SAAS;AAAA,QACR,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,SAAS;AAAA,UACR,QAAQ,OAAO;AAAA,UACf,eAAe,OAAO;AAAA,UACtB,kBAAkB,OAAO;AAAA,UACzB,mBAAmB,OAAO;AAAA,QAAA;AAAA,MAC3B;AAAA,MAED;AAAA,MACA,YAAY;AAAA,QACX,aAAa;AAAA,UACZ,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,YAAY;AAAA,UACX,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,oBAAoB;AAAA,UACnB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,uBAAuB;AAAA,UACtB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,mBAAmB;AAAA,UAClB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,QAEhB,wBAAwB;AAAA,UACvB,OAAO,OAAO;AAAA,UACd,QAAQ,OAAO;AAAA,QAAA;AAAA,MAChB;AAAA,MAED,OAAO;AAAA,QACN,aAAa,OAAO;AAAA,QACpB,cAAc,OAAO;AAAA,MAAA;AAAA,IACtB;AAAA,EAEF;AACD;"}

package/dist/development/src/model/queries/idp/LocalAuthDisablingIdpsQuery.cjs

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const Database = require("@contember/database");
+class LocalAuthDisablingIdpsQuery extends Database.DatabaseQuery {
+  constructor(personId) {
+    super();
+    this.personId = personId;
+  }
+  async fetch({ db }) {
+    const rows = await Database.SelectBuilder.create().select(["identity_provider", "slug"], "slug").from("person_identity_provider").join(
+      "identity_provider",
+      "identity_provider",
+      (expr) => expr.columnsEq(["identity_provider", "id"], ["person_identity_provider", "identity_provider_id"])
+    ).where(
+      (where) => where.compare(["person_identity_provider", "person_id"], Database.Operator.eq, this.personId).compare(["identity_provider", "disable_local_authentication"], Database.Operator.eq, true).isNull(["identity_provider", "disabled_at"])
+    ).orderBy(["identity_provider", "slug"]).getResult(db);
+    return rows.map((it) => it.slug);
+  }
+}
+exports.LocalAuthDisablingIdpsQuery = LocalAuthDisablingIdpsQuery;
+//# sourceMappingURL=LocalAuthDisablingIdpsQuery.cjs.map

package/dist/development/src/model/queries/idp/LocalAuthDisablingIdpsQuery.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalAuthDisablingIdpsQuery.cjs","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/LocalAuthDisablingIdpsQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator, SelectBuilder } from '@contember/database'\n\n/**\n * Slugs of the identity providers that forbid this person every local\n * authentication method — password sign-in, passwordless sign-in and the\n * password-reset mail. Empty means local authentication is available.\n *\n * The IdP link is the marker, so this also covers a person who predates the\n * provider and was linked to it by e-mail matching, not only one created by\n * auto-sign-up. A DISABLED provider does not count: turning the provider off\n * hands local authentication back to everyone linked to it, which is the\n * break-glass when the IdP is unreachable.\n */\nexport class LocalAuthDisablingIdpsQuery extends DatabaseQuery<string[]> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<string[]> {\n\t\tconst rows = await SelectBuilder.create<{ slug: string }>()\n\t\t\t.select(['identity_provider', 'slug'], 'slug')\n\t\t\t.from('person_identity_provider')\n\t\t\t.join(\n\t\t\t\t'identity_provider',\n\t\t\t\t'identity_provider',\n\t\t\t\texpr => expr.columnsEq(['identity_provider', 'id'], ['person_identity_provider', 'identity_provider_id']),\n\t\t\t)\n\t\t\t.where(where =>\n\t\t\t\twhere\n\t\t\t\t\t.compare(['person_identity_provider', 'person_id'], Operator.eq, this.personId)\n\t\t\t\t\t.compare(['identity_provider', 'disable_local_authentication'], Operator.eq, true)\n\t\t\t\t\t.isNull(['identity_provider', 'disabled_at'])\n\t\t\t)\n\t\t\t.orderBy(['identity_provider', 'slug'])\n\t\t\t.getResult(db)\n\n\t\treturn rows.map(it => it.slug)\n\t}\n}\n"],"names":["DatabaseQuery","SelectBuilder","Operator"],"mappings":";;;AAaO,MAAM,oCAAoCA,SAAAA,cAAwB;AAAA,EACxE,YACkB,UAChB;AACD,UAAA;AAFiB,SAAA,WAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA4C;AACzD,UAAM,OAAO,MAAMC,SAAAA,cAAc,OAAA,EAC/B,OAAO,CAAC,qBAAqB,MAAM,GAAG,MAAM,EAC5C,KAAK,0BAA0B,EAC/B;AAAA,MACA;AAAA,MACA;AAAA,MACA,CAAA,SAAQ,KAAK,UAAU,CAAC,qBAAqB,IAAI,GAAG,CAAC,4BAA4B,sBAAsB,CAAC;AAAA,IAAA,EAExG;AAAA,MAAM,CAAA,UACN,MACE,QAAQ,CAAC,4BAA4B,WAAW,GAAGC,SAAAA,SAAS,IAAI,KAAK,QAAQ,EAC7E,QAAQ,CAAC,qBAAqB,8BAA8B,GAAGA,kBAAS,IAAI,IAAI,EAChF,OAAO,CAAC,qBAAqB,aAAa,CAAC;AAAA,IAAA,EAE7C,QAAQ,CAAC,qBAAqB,MAAM,CAAC,EACrC,UAAU,EAAE;AAEd,WAAO,KAAK,IAAI,CAAA,OAAM,GAAG,IAAI;AAAA,EAC9B;AACD;;"}

package/dist/development/src/model/queries/idp/LocalAuthDisablingIdpsQuery.js

@@ -0,0 +1,21 @@
+import { DatabaseQuery, SelectBuilder, Operator } from "@contember/database";
+class LocalAuthDisablingIdpsQuery extends DatabaseQuery {
+  constructor(personId) {
+    super();
+    this.personId = personId;
+  }
+  async fetch({ db }) {
+    const rows = await SelectBuilder.create().select(["identity_provider", "slug"], "slug").from("person_identity_provider").join(
+      "identity_provider",
+      "identity_provider",
+      (expr) => expr.columnsEq(["identity_provider", "id"], ["person_identity_provider", "identity_provider_id"])
+    ).where(
+      (where) => where.compare(["person_identity_provider", "person_id"], Operator.eq, this.personId).compare(["identity_provider", "disable_local_authentication"], Operator.eq, true).isNull(["identity_provider", "disabled_at"])
+    ).orderBy(["identity_provider", "slug"]).getResult(db);
+    return rows.map((it) => it.slug);
+  }
+}
+export {
+  LocalAuthDisablingIdpsQuery
+};
+//# sourceMappingURL=LocalAuthDisablingIdpsQuery.js.map

package/dist/development/src/model/queries/idp/LocalAuthDisablingIdpsQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalAuthDisablingIdpsQuery.js","sources":["../../../../../../../packages/engine-tenant-api/src/model/queries/idp/LocalAuthDisablingIdpsQuery.ts"],"sourcesContent":["import { DatabaseQuery, DatabaseQueryable, Operator, SelectBuilder } from '@contember/database'\n\n/**\n * Slugs of the identity providers that forbid this person every local\n * authentication method — password sign-in, passwordless sign-in and the\n * password-reset mail. Empty means local authentication is available.\n *\n * The IdP link is the marker, so this also covers a person who predates the\n * provider and was linked to it by e-mail matching, not only one created by\n * auto-sign-up. A DISABLED provider does not count: turning the provider off\n * hands local authentication back to everyone linked to it, which is the\n * break-glass when the IdP is unreachable.\n */\nexport class LocalAuthDisablingIdpsQuery extends DatabaseQuery<string[]> {\n\tconstructor(\n\t\tprivate readonly personId: string,\n\t) {\n\t\tsuper()\n\t}\n\n\tasync fetch({ db }: DatabaseQueryable): Promise<string[]> {\n\t\tconst rows = await SelectBuilder.create<{ slug: string }>()\n\t\t\t.select(['identity_provider', 'slug'], 'slug')\n\t\t\t.from('person_identity_provider')\n\t\t\t.join(\n\t\t\t\t'identity_provider',\n\t\t\t\t'identity_provider',\n\t\t\t\texpr => expr.columnsEq(['identity_provider', 'id'], ['person_identity_provider', 'identity_provider_id']),\n\t\t\t)\n\t\t\t.where(where =>\n\t\t\t\twhere\n\t\t\t\t\t.compare(['person_identity_provider', 'person_id'], Operator.eq, this.personId)\n\t\t\t\t\t.compare(['identity_provider', 'disable_local_authentication'], Operator.eq, true)\n\t\t\t\t\t.isNull(['identity_provider', 'disabled_at'])\n\t\t\t)\n\t\t\t.orderBy(['identity_provider', 'slug'])\n\t\t\t.getResult(db)\n\n\t\treturn rows.map(it => it.slug)\n\t}\n}\n"],"names":[],"mappings":";AAaO,MAAM,oCAAoC,cAAwB;AAAA,EACxE,YACkB,UAChB;AACD,UAAA;AAFiB,SAAA,WAAA;AAAA,EAGlB;AAAA,EAEA,MAAM,MAAM,EAAE,MAA4C;AACzD,UAAM,OAAO,MAAM,cAAc,OAAA,EAC/B,OAAO,CAAC,qBAAqB,MAAM,GAAG,MAAM,EAC5C,KAAK,0BAA0B,EAC/B;AAAA,MACA;AAAA,MACA;AAAA,MACA,CAAA,SAAQ,KAAK,UAAU,CAAC,qBAAqB,IAAI,GAAG,CAAC,4BAA4B,sBAAsB,CAAC;AAAA,IAAA,EAExG;AAAA,MAAM,CAAA,UACN,MACE,QAAQ,CAAC,4BAA4B,WAAW,GAAG,SAAS,IAAI,KAAK,QAAQ,EAC7E,QAAQ,CAAC,qBAAqB,8BAA8B,GAAG,SAAS,IAAI,IAAI,EAChF,OAAO,CAAC,qBAAqB,aAAa,CAAC;AAAA,IAAA,EAE7C,QAAQ,CAAC,qBAAqB,MAAM,CAAC,EACrC,UAAU,EAAE;AAEd,WAAO,KAAK,IAAI,CAAA,OAAM,GAAG,IAAI;AAAA,EAC9B;AACD;"}

package/dist/development/src/model/queries/idp/PersonIdentityProvidersQuery.cjs

@@ -7,7 +7,7 @@ class PersonIdentityProvidersQuery extends Database.DatabaseQuery {
     this.personId = personId;
   }
   async fetch({ db }) {
-    return await Database.SelectBuilder.create().select(["person_identity_provider", "id"]).select(["person_identity_provider", "created_at"], "createdAt").select(["person_identity_provider", "external_identifier"], "externalIdentifier").select(["identity_provider", "slug"], "identityProviderSlug").select(["identity_provider", "type"], "identityProviderType").select(["identity_provider", "disabled_at"], "identityProviderDisabledAt").from("person_identity_provider").join(
+    return await Database.SelectBuilder.create().select(["person_identity_provider", "id"]).select(["person_identity_provider", "created_at"], "createdAt").select(["person_identity_provider", "external_identifier"], "externalIdentifier").select(["identity_provider", "slug"], "identityProviderSlug").select(["identity_provider", "type"], "identityProviderType").select(["identity_provider", "disabled_at"], "identityProviderDisabledAt").select(["identity_provider", "disable_local_authentication"], "identityProviderDisableLocalAuthentication").from("person_identity_provider").join(
       "identity_provider",
       "identity_provider",
       (expr) => expr.columnsEq(["identity_provider", "id"], ["person_identity_provider", "identity_provider_id"])