@fdm-monster/server 1.5.0-rc1 → 1.5.0

package/dist/controllers/settings.controller.js

@@ -23,13 +23,37 @@ const _serverconstants = require("../server.constants");
 const _authorizationconstants = require("../constants/authorization.constants");
 const _validators = require("../handlers/validators");
 const _settingsservicevalidation = require("../services/validators/settings-service.validation");
+const _ip = require("ip");
+const _packagejson = require("../../package.json");
+const _demomiddleware = require("../middleware/demo.middleware");
 class SettingsController {
     settingsStore;
-    constructor({ settingsStore }){
+    logger;
+    constructor({ settingsStore, loggerFactory }){
         this.settingsStore = settingsStore;
+        this.logger = loggerFactory(SettingsController.name);
     }
     getSettings(req, res) {
+        // Safely get IP address
+        let connection;
+        try {
+            const serverIp = (0, _ip.address)();
+            connection = {
+                clientIp: req.socket?.remoteAddress,
+                ip: serverIp,
+                version: _packagejson.version
+            };
+        } catch (e) {
+            this.logger.warn("Could not fetch server IP address");
+        }
         const settings = this.settingsStore.getSettings();
+        res.send({
+            ...settings,
+            connection
+        });
+    }
+    async getSettingsSensitive(req, res) {
+        const settings = this.settingsStore.getSettingsSensitive();
         res.send(settings);
     }
     async updateSentryDiagnosticsEnabled(req, res) {
@@ -42,8 +66,8 @@ class SettingsController {
         if (!whitelistedIpAddresses.includes("127.0.0.1")) {
             whitelistedIpAddresses.push("127.0.0.1");
         }
-        const result = await this.settingsStore.setWhitelist(whitelistEnabled, whitelistedIpAddresses);
-        res.send(result);
+        await this.settingsStore.setWhitelist(whitelistEnabled, whitelistedIpAddresses);
+        res.send();
     }
     async updateFrontendSettings(req, res) {
         const result = await this.settingsStore.updateFrontendSettings(req.body);
@@ -53,30 +77,83 @@ class SettingsController {
         const result = await this.settingsStore.updateServerSettings(req.body);
         res.send(result);
     }
+    async updateLoginRequiredSettings(req, res) {
+        const { loginRequired } = await (0, _validators.validateInput)(req.body, {
+            loginRequired: "required|boolean"
+        });
+        const result = await this.settingsStore.setLoginRequired(loginRequired);
+        res.send(result);
+    }
+    async updateRegistrationEnabledSettings(req, res) {
+        const { registrationEnabled } = await (0, _validators.validateInput)(req.body, {
+            registrationEnabled: "required|boolean"
+        });
+        const result = await this.settingsStore.setRegistrationEnabled(registrationEnabled);
+        res.send(result);
+    }
+    async updateCredentialSettings(req, res) {
+        await this.settingsStore.updateCredentialSettings(req.body);
+        res.send();
+    }
     async updateFileCleanSettings(req, res) {
         const result = await this.settingsStore.patchFileCleanSettings(req.body);
         res.send(result);
     }
+    async updateTimeoutSettings(req, res) {
+        const result = await this.settingsStore.updateTimeoutSettings(req.body);
+        res.send(result);
+    }
 }
 const _default = (0, _awilixexpress.createController)(SettingsController).prefix(_serverconstants.AppConstants.apiRoute + "/settings").before([
     (0, _authenticate.authenticate)()
-]).get("/", "getSettings").patch("/sentry-diagnostics", "updateSentryDiagnosticsEnabled").put("/server", "updateServerSettings", {
+]).get("/", "getSettings").get("/sensitive", "getSettingsSensitive", {
     before: [
         (0, _authenticate.authorizeRoles)([
             _authorizationconstants.ROLES.ADMIN
-        ])
+        ]),
+        _demomiddleware.demoUserNotAllowed
+    ]
+}).patch("/sentry-diagnostics", "updateSentryDiagnosticsEnabled", _demomiddleware.demoUserNotAllowedInterceptor).put("/server", "updateServerSettings", {
+    before: [
+        (0, _authenticate.authorizeRoles)([
+            _authorizationconstants.ROLES.ADMIN
+        ]),
+        _demomiddleware.demoUserNotAllowed
+    ]
+}).put("/login-required", "updateLoginRequiredSettings", {
+    before: [
+        (0, _authenticate.authorizeRoles)([
+            _authorizationconstants.ROLES.ADMIN
+        ]),
+        _demomiddleware.demoUserNotAllowed
+    ]
+}).put("/registration-enabled", "updateRegistrationEnabledSettings", {
+    before: [
+        (0, _authenticate.authorizeRoles)([
+            _authorizationconstants.ROLES.ADMIN
+        ]),
+        _demomiddleware.demoUserNotAllowed
+    ]
+}).put("/credential", "updateCredentialSettings", {
+    before: [
+        (0, _authenticate.authorizeRoles)([
+            _authorizationconstants.ROLES.ADMIN
+        ]),
+        _demomiddleware.demoUserNotAllowed
     ]
 }).put("/file-clean", "updateFileCleanSettings", {
     before: [
         (0, _authenticate.authorizeRoles)([
             _authorizationconstants.ROLES.ADMIN
-        ])
+        ]),
+        _demomiddleware.demoUserNotAllowed
     ]
 }).put("/whitelist", "updateWhitelistSettings", {
     before: [
         (0, _authenticate.authorizeRoles)([
             _authorizationconstants.ROLES.ADMIN
-        ])
+        ]),
+        _demomiddleware.demoUserNotAllowed
     ]
 }).put("/frontend", "updateFrontendSettings", {
     before: [
@@ -84,6 +161,13 @@ const _default = (0, _awilixexpress.createController)(SettingsController).prefix
             _authorizationconstants.ROLES.ADMIN
         ])
     ]
+}).put("/timeout", "updateTimeoutSettings", {
+    before: [
+        (0, _authenticate.authorizeRoles)([
+            _authorizationconstants.ROLES.ADMIN
+        ]),
+        _demomiddleware.demoUserNotAllowed
+    ]
 });
 
 //# sourceMappingURL=settings.controller.js.map

package/dist/controllers/settings.controller.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/controllers/settings.controller.ts"],"names":["SettingsController","settingsStore","constructor","getSettings","req","res","settings","send","updateSentryDiagnosticsEnabled","enabled","validateInput","body","sentryDiagnosticsEnabledRules","result","setSentryDiagnosticsEnabled","updateWhitelistSettings","whitelistEnabled","whitelistedIpAddresses","whitelistSettingUpdateRules","includes","push","setWhitelist","updateFrontendSettings","updateServerSettings","updateFileCleanSettings","patchFileCleanSettings","createController","prefix","AppConstants","apiRoute","before","authenticate","get","patch","put","authorizeRoles","ROLES","ADMIN"],"mappings":";;;;;;;;;;;IAUaA,kBAAkB;eAAlBA;;IA8Cb,kBAAkB;IAClB,OAQ2F;eAR3F;;;+BAzDiC;8BACY;iCAChB;wCACP;4BACQ;2CAC6C;AAKpE,MAAMA;IACXC,cAA6B;IAE7BC,YAAY,EAAED,aAAa,EAAoC,CAAE;QAC/D,IAAI,CAACA,aAAa,GAAGA;IACvB;IAEAE,YAAYC,GAAY,EAAEC,GAAa,EAAE;QACvC,MAAMC,WAAW,IAAI,CAACL,aAAa,CAACE,WAAW;QAC/CE,IAAIE,IAAI,CAACD;IACX;IAEA,MAAME,+BAA+BJ,GAAY,EAAEC,GAAa,EAAE;QAChE,MAAM,EAAEI,OAAO,EAAE,GAAG,MAAMC,IAAAA,yBAAa,EAACN,IAAIO,IAAI,EAAEC,wDAA6B;QAC/E,MAAMC,SAAS,IAAI,CAACZ,aAAa,CAACa,2BAA2B,CAACL;QAC9DJ,IAAIE,IAAI,CAACM;IACX;IAEA,MAAME,wBAAwBX,GAAY,EAAEC,GAAa,EAAE;QACzD,MAAM,EAAEW,gBAAgB,EAAEC,sBAAsB,EAAE,GAAG,MAAMP,IAAAA,yBAAa,EACtEN,IAAIO,IAAI,EACRO,sDAA2B;QAE7B,IAAI,CAACD,uBAAuBE,QAAQ,CAAC,cAAc;YACjDF,uBAAuBG,IAAI,CAAC;QAC9B;QACA,MAAMP,SAAS,MAAM,IAAI,CAACZ,aAAa,CAACoB,YAAY,CAACL,kBAAkBC;QACvEZ,IAAIE,IAAI,CAACM;IACX;IAEA,MAAMS,uBAAuBlB,GAAY,EAAEC,GAAa,EAAE;QACxD,MAAMQ,SAAS,MAAM,IAAI,CAACZ,aAAa,CAACqB,sBAAsB,CAAClB,IAAIO,IAAI;QACvEN,IAAIE,IAAI,CAACM;IACX;IAEA,MAAMU,qBAAqBnB,GAAY,EAAEC,GAAa,EAAE;QACtD,MAAMQ,SAAS,MAAM,IAAI,CAACZ,aAAa,CAACsB,oBAAoB,CAACnB,IAAIO,IAAI;QACrEN,IAAIE,IAAI,CAACM;IACX;IAEA,MAAMW,wBAAwBpB,GAAY,EAAEC,GAAa,EAAE;QACzD,MAAMQ,SAAS,MAAM,IAAI,CAACZ,aAAa,CAACwB,sBAAsB,CAACrB,IAAIO,IAAI;QACvEN,IAAIE,IAAI,CAACM;IACX;AACF;MAGA,WAAea,IAAAA,+BAAgB,EAAC1B,oBAC7B2B,MAAM,CAACC,6BAAY,CAACC,QAAQ,GAAG,aAC/BC,MAAM,CAAC;IAACC,IAAAA,0BAAY;CAAG,EACvBC,GAAG,CAAC,KAAK,eACTC,KAAK,CAAC,uBAAuB,kCAC7BC,GAAG,CAAC,WAAW,wBAAwB;IAAEJ,QAAQ;QAACK,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AAAC,GACjFH,GAAG,CAAC,eAAe,2BAA2B;IAAEJ,QAAQ;QAACK,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AAAC,GACxFH,GAAG,CAAC,cAAc,2BAA2B;IAAEJ,QAAQ;QAACK,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AAAC,GACvFH,GAAG,CAAC,aAAa,0BAA0B;IAAEJ,QAAQ;QAACK,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AAAC"}
+{"version":3,"sources":["../../src/controllers/settings.controller.ts"],"names":["SettingsController","settingsStore","logger","constructor","loggerFactory","name","getSettings","req","res","connection","serverIp","address","clientIp","socket","remoteAddress","ip","version","e","warn","settings","send","getSettingsSensitive","updateSentryDiagnosticsEnabled","enabled","validateInput","body","sentryDiagnosticsEnabledRules","result","setSentryDiagnosticsEnabled","updateWhitelistSettings","whitelistEnabled","whitelistedIpAddresses","whitelistSettingUpdateRules","includes","push","setWhitelist","updateFrontendSettings","updateServerSettings","updateLoginRequiredSettings","loginRequired","setLoginRequired","updateRegistrationEnabledSettings","registrationEnabled","setRegistrationEnabled","updateCredentialSettings","updateFileCleanSettings","patchFileCleanSettings","updateTimeoutSettings","createController","prefix","AppConstants","apiRoute","before","authenticate","get","authorizeRoles","ROLES","ADMIN","demoUserNotAllowed","patch","demoUserNotAllowedInterceptor","put"],"mappings":";;;;;;;;;;;IAeaA,kBAAkB;eAAlBA;;IAuFb,kBAAkB;IAClB,OAa+G;eAb/G;;;+BAvGiC;8BACY;iCAChB;wCACP;4BACQ;2CAC6C;oBAGnD;6BACA;gCAI0C;AAE3D,MAAMA;IACXC,cAA6B;IAC7BC,OAAsB;IAEtBC,YAAY,EAAEF,aAAa,EAAEG,aAAa,EAAmE,CAAE;QAC7G,IAAI,CAACH,aAAa,GAAGA;QACrB,IAAI,CAACC,MAAM,GAAGE,cAAcJ,mBAAmBK,IAAI;IACrD;IAEAC,YAAYC,GAAY,EAAEC,GAAa,EAAE;QACvC,wBAAwB;QACxB,IAAIC;QACJ,IAAI;YACF,MAAMC,WAAWC,IAAAA,WAAO;YACxBF,aAAa;gBACXG,UAAUL,IAAIM,MAAM,EAAEC;gBACtBC,IAAIL;gBACJM,SAAAA,oBAAO;YACT;QACF,EAAE,OAAOC,GAAG;YACV,IAAI,CAACf,MAAM,CAACgB,IAAI,CAAC;QACnB;QACA,MAAMC,WAAW,IAAI,CAAClB,aAAa,CAACK,WAAW;QAC/CE,IAAIY,IAAI,CAAC;YAAE,GAAGD,QAAQ;YAAEV;QAAW;IACrC;IAEA,MAAMY,qBAAqBd,GAAY,EAAEC,GAAa,EAAE;QACtD,MAAMW,WAAW,IAAI,CAAClB,aAAa,CAACoB,oBAAoB;QACxDb,IAAIY,IAAI,CAACD;IACX;IAEA,MAAMG,+BAA+Bf,GAAY,EAAEC,GAAa,EAAE;QAChE,MAAM,EAAEe,OAAO,EAAE,GAAG,MAAMC,IAAAA,yBAAa,EAACjB,IAAIkB,IAAI,EAAEC,wDAA6B;QAC/E,MAAMC,SAAS,IAAI,CAAC1B,aAAa,CAAC2B,2BAA2B,CAACL;QAC9Df,IAAIY,IAAI,CAACO;IACX;IAEA,MAAME,wBAAwBtB,GAAY,EAAEC,GAAa,EAAE;QACzD,MAAM,EAAEsB,gBAAgB,EAAEC,sBAAsB,EAAE,GAAG,MAAMP,IAAAA,yBAAa,EACtEjB,IAAIkB,IAAI,EACRO,sDAA2B;QAE7B,IAAI,CAACD,uBAAuBE,QAAQ,CAAC,cAAc;YACjDF,uBAAuBG,IAAI,CAAC;QAC9B;QACA,MAAM,IAAI,CAACjC,aAAa,CAACkC,YAAY,CAACL,kBAAkBC;QACxDvB,IAAIY,IAAI;IACV;IAEA,MAAMgB,uBAAuB7B,GAAY,EAAEC,GAAa,EAAE;QACxD,MAAMmB,SAAS,MAAM,IAAI,CAAC1B,aAAa,CAACmC,sBAAsB,CAAC7B,IAAIkB,IAAI;QACvEjB,IAAIY,IAAI,CAACO;IACX;IAEA,MAAMU,qBAAqB9B,GAAY,EAAEC,GAAa,EAAE;QACtD,MAAMmB,SAAS,MAAM,IAAI,CAAC1B,aAAa,CAACoC,oBAAoB,CAAC9B,IAAIkB,IAAI;QACrEjB,IAAIY,IAAI,CAACO;IACX;IAEA,MAAMW,4BAA4B/B,GAAY,EAAEC,GAAa,EAAE;QAC7D,MAAM,EAAE+B,aAAa,EAAE,GAAG,MAAMf,IAAAA,yBAAa,EAACjB,IAAIkB,IAAI,EAAE;YAAEc,eAAe;QAAmB;QAC5F,MAAMZ,SAAS,MAAM,IAAI,CAAC1B,aAAa,CAACuC,gBAAgB,CAACD;QACzD/B,IAAIY,IAAI,CAACO;IACX;IAEA,MAAMc,kCAAkClC,GAAY,EAAEC,GAAa,EAAE;QACnE,MAAM,EAAEkC,mBAAmB,EAAE,GAAG,MAAMlB,IAAAA,yBAAa,EAACjB,IAAIkB,IAAI,EAAE;YAAEiB,qBAAqB;QAAmB;QACxG,MAAMf,SAAS,MAAM,IAAI,CAAC1B,aAAa,CAAC0C,sBAAsB,CAACD;QAC/DlC,IAAIY,IAAI,CAACO;IACX;IAEA,MAAMiB,yBAAyBrC,GAAY,EAAEC,GAAa,EAAE;QAC1D,MAAM,IAAI,CAACP,aAAa,CAAC2C,wBAAwB,CAACrC,IAAIkB,IAAI;QAC1DjB,IAAIY,IAAI;IACV;IAEA,MAAMyB,wBAAwBtC,GAAY,EAAEC,GAAa,EAAE;QACzD,MAAMmB,SAAS,MAAM,IAAI,CAAC1B,aAAa,CAAC6C,sBAAsB,CAACvC,IAAIkB,IAAI;QACvEjB,IAAIY,IAAI,CAACO;IACX;IAEA,MAAMoB,sBAAsBxC,GAAY,EAAEC,GAAa,EAAE;QACvD,MAAMmB,SAAS,MAAM,IAAI,CAAC1B,aAAa,CAAC8C,qBAAqB,CAACxC,IAAIkB,IAAI;QACtEjB,IAAIY,IAAI,CAACO;IACX;AACF;MAGA,WAAeqB,IAAAA,+BAAgB,EAAChD,oBAC3BiD,MAAM,CAACC,6BAAY,CAACC,QAAQ,GAAG,aAC/BC,MAAM,CAAC;IAACC,IAAAA,0BAAY;CAAG,EACvBC,GAAG,CAAC,KAAK,eACTA,GAAG,CAAC,cAAc,wBAAwB;IAAEF,QAAQ;QAACG,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;QAAGC,kCAAkB;KAAC;AAAC,GACxGC,KAAK,CAAC,uBAAuB,kCAAkCC,6CAA6B,EAC5FC,GAAG,CAAC,WAAW,wBAAwB;IAAET,QAAQ;QAACG,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;QAAGC,kCAAkB;KAAC;AAAC,GACrGG,GAAG,CAAC,mBAAmB,+BAA+B;IAAET,QAAQ;QAACG,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;QAAGC,kCAAkB;KAAC;AAAC,GACpHG,GAAG,CAAC,yBAAyB,qCAAqC;IAAET,QAAQ;QAACG,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;QAAGC,kCAAkB;KAAC;AAAC,GAChIG,GAAG,CAAC,eAAe,4BAA4B;IAAET,QAAQ;QAACG,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;QAAGC,kCAAkB;KAAC;AAAC,GAC7GG,GAAG,CAAC,eAAe,2BAA2B;IAAET,QAAQ;QAACG,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;QAAGC,kCAAkB;KAAC;AAAC,GAC5GG,GAAG,CAAC,cAAc,2BAA2B;IAAET,QAAQ;QAACG,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;QAAGC,kCAAkB;KAAC;AAAC,GAC3GG,GAAG,CAAC,aAAa,0BAA0B;IAAET,QAAQ;QAACG,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AAAC,GACrFI,GAAG,CAAC,YAAY,yBAAyB;IAAET,QAAQ;QAACG,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;QAAGC,kCAAkB;KAAC;AAAC"}

package/dist/controllers/user.controller.js

@@ -23,12 +23,22 @@ const _authorizationconstants = require("../constants/authorization.constants");
 const _validators = require("../handlers/validators");
 const _genericvalidation = require("./validation/generic.validation");
 const _runtimeexceptions = require("../exceptions/runtime.exceptions");
+const _demomiddleware = require("../middleware/demo.middleware");
+const _errorutils = require("../utils/error.utils");
 class UserController {
     userService;
+    roleService;
     configService;
-    constructor({ userService, configService }){
+    authService;
+    settingsStore;
+    logger;
+    constructor({ userService, configService, roleService, settingsStore, authService, loggerFactory }){
         this.userService = userService;
         this.configService = configService;
+        this.roleService = roleService;
+        this.authService = authService;
+        this.settingsStore = settingsStore;
+        this.logger = loggerFactory(UserController.name);
     }
     async profile(req, res) {
         if (!req.user?.id) {
@@ -42,19 +52,34 @@ class UserController {
         const users = await this.userService.listUsers();
         res.send(users.map((u)=>this.userService.toDto(u)));
     }
+    async listRoles(req, res) {
+        const roleDtos = this.roleService.roles.map((r)=>this.roleService.toDto(r));
+        res.send(roleDtos);
+    }
     async delete(req, res) {
-        this.throwIfDemoMode();
         const { id } = await (0, _validators.validateInput)(req.params, _genericvalidation.idRules);
-        if (req.user?.id === id) {
-            throw new _runtimeexceptions.InternalServerException("Not allowed to delete your own account");
+        const ownUserId = req.user?.id;
+        if (ownUserId) {
+            if (ownUserId === id) {
+                throw new _runtimeexceptions.ForbiddenError("Not allowed to delete own account");
+            }
         }
-        if (this.isDemoMode()) {
+        const isRootUser = await this.userService.isUserRootUser(id);
+        if (isRootUser) {
+            throw new _runtimeexceptions.ForbiddenError("Not allowed to delete root user");
+        }
+        if (this.configService.isDemoMode()) {
             const demoUserId = await this.userService.getDemoUserId();
             if (id === demoUserId) {
                 this.throwIfDemoMode();
             }
         }
         await this.userService.deleteUser(id);
+        try {
+            await this.authService.logoutUserId(id);
+        } catch (e) {
+            this.logger.error((0, _errorutils.errorSummary)(e));
+        }
         res.send();
     }
     async get(req, res) {
@@ -63,10 +88,9 @@ class UserController {
         res.send(this.userService.toDto(user));
     }
     async changeUsername(req, res) {
-        this.throwIfDemoMode();
         const { id } = await (0, _validators.validateInput)(req.params, _genericvalidation.idRules);
-        if (req.user?.id !== id) {
-            throw new _runtimeexceptions.InternalServerException("Not allowed to change username of other users");
+        if (req.user?.id !== id && await this.settingsStore.getLoginRequired()) {
+            throw new _runtimeexceptions.ForbiddenError("Not allowed to change username of other users");
         }
         const { username } = await (0, _validators.validateInput)(req.body, {
             username: "required|string"
@@ -75,10 +99,9 @@ class UserController {
         res.send();
     }
     async changePassword(req, res) {
-        this.throwIfDemoMode();
         const { id } = await (0, _validators.validateInput)(req.params, _genericvalidation.idRules);
-        if (req.user?.id !== id) {
-            throw new _runtimeexceptions.InternalServerException("Not allowed to change password of other users");
+        if (req.user?.id !== id && await this.settingsStore.getLoginRequired()) {
+            throw new _runtimeexceptions.ForbiddenError("Not allowed to change password of other users");
         }
         const { oldPassword, newPassword } = await (0, _validators.validateInput)(req.body, {
             oldPassword: "required|string",
@@ -88,21 +111,50 @@ class UserController {
         res.send();
     }
     async setVerified(req, res) {
-        this.throwIfDemoMode();
         const { id } = await (0, _validators.validateInput)(req.params, _genericvalidation.idRules);
+        const ownUserId = req.user?.id;
+        if (ownUserId) {
+            if (ownUserId === id) {
+                throw new _runtimeexceptions.ForbiddenError("Not allowed to change own verified status");
+            }
+        }
+        const isRootUser = await this.userService.isUserRootUser(id);
+        if (isRootUser) {
+            throw new _runtimeexceptions.ForbiddenError("Not allowed to change root user to unverified");
+        }
         const { isVerified } = await (0, _validators.validateInput)(req.body, {
             isVerified: "required|boolean"
         });
         await this.userService.setVerifiedById(id, isVerified);
+        // Note: this makes it impossible for the UI to determine if the user is verified or not
+        // if (!isVerified) {
+        //   try {
+        //     await this.authService.logoutUserId(id);
+        //   } catch (e) {
+        //     this.logger.error(errorSummary(e));
+        //   }
+        // }
         res.send();
     }
-    isDemoMode() {
-        return this.configService.get(_serverconstants.AppConstants.OVERRIDE_IS_DEMO_MODE, "false") === "true";
+    async setRootUser(req, res) {
+        const { id } = await (0, _validators.validateInput)(req.params, _genericvalidation.idRules);
+        const userId = req.user?.id;
+        if (req.user?.id) {
+            const isRootUser = await this.userService.isUserRootUser(userId);
+            if (!isRootUser) {
+                throw new _runtimeexceptions.ForbiddenError("Not allowed to change owner (root user) without being owner yourself");
+            }
+        }
+        const { isRootUser } = await (0, _validators.validateInput)(req.body, {
+            isRootUser: "required|boolean"
+        });
+        await this.userService.setIsRootUserById(id, isRootUser);
+        res.send();
     }
     throwIfDemoMode() {
-        const isDemoMode = this.isDemoMode();
+        const isDemoMode = this.configService.isDemoMode();
         if (isDemoMode) {
-            throw new _runtimeexceptions.InternalServerException("Not allowed in demo mode");
+            throw new _runtimeexceptions.ForbiddenError("Not allowed in demo mode");
         }
     }
 }
@@ -114,7 +166,7 @@ const _default = (0, _awilixexpress.createController)(UserController).prefix(_se
             _authorizationconstants.ROLES.ADMIN
         ])
     ]
-}).get("/profile", "profile").get("/:id", "get", {
+}).get("/roles", "listRoles", {}).get("/profile", "profile").get("/:id", "get", {
     before: [
         (0, _authenticate.authorizeRoles)([
             _authorizationconstants.ROLES.ADMIN
@@ -124,14 +176,21 @@ const _default = (0, _awilixexpress.createController)(UserController).prefix(_se
     before: [
         (0, _authenticate.authorizeRoles)([
             _authorizationconstants.ROLES.ADMIN
-        ])
+        ]),
+        _demomiddleware.demoUserNotAllowed
+    ]
+})// Has root user validation
+.post("/:id/set-root-user", "setRootUser", {
+    before: [
+        _demomiddleware.demoUserNotAllowed
     ]
 }).post("/:id/set-verified", "setVerified", {
     before: [
         (0, _authenticate.authorizeRoles)([
             _authorizationconstants.ROLES.ADMIN
-        ])
+        ]),
+        _demomiddleware.demoUserNotAllowed
     ]
-}).post("/:id/change-username", "changeUsername").post("/:id/change-password", "changePassword");
+}).post("/:id/change-username", "changeUsername", _demomiddleware.demoUserNotAllowedInterceptor).post("/:id/change-password", "changePassword", _demomiddleware.demoUserNotAllowedInterceptor);
 
 //# sourceMappingURL=user.controller.js.map

package/dist/controllers/user.controller.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/controllers/user.controller.ts"],"names":["UserController","userService","configService","constructor","profile","req","res","user","id","send","getUser","toDto","list","users","listUsers","map","u","delete","throwIfDemoMode","validateInput","params","idRules","InternalServerException","isDemoMode","demoUserId","getDemoUserId","deleteUser","get","changeUsername","username","body","updateUsernameById","changePassword","oldPassword","newPassword","updatePasswordById","setVerified","isVerified","setVerifiedById","AppConstants","OVERRIDE_IS_DEMO_MODE","createController","prefix","apiRoute","before","authenticate","authorizeRoles","ROLES","ADMIN","post"],"mappings":";;;;;;;;;;;IAWaA,cAAc;eAAdA;;IA2Gb,OAiBkD;eAjBlD;;;+BAtHiC;iCACJ;8BACgB;wCACvB;4BACQ;mCACN;mCACgB;AAKjC,MAAMA;IACXC,YAA0B;IAC1BC,cAA8B;IAE9BC,YAAY,EAAEF,WAAW,EAAEC,aAAa,EAAgE,CAAE;QACxG,IAAI,CAACD,WAAW,GAAGA;QACnB,IAAI,CAACC,aAAa,GAAGA;IACvB;IAEA,MAAME,QAAQC,GAAY,EAAEC,GAAa,EAAE;QACzC,IAAI,CAACD,IAAIE,IAAI,EAAEC,IAAI;YACjBF,IAAIG,IAAI,CAAC,CAAC;YACV;QACF;QAEA,MAAMF,OAAO,MAAM,IAAI,CAACN,WAAW,CAACS,OAAO,CAACL,IAAIE,IAAI,EAAEC;QACtDF,IAAIG,IAAI,CAAC,IAAI,CAACR,WAAW,CAACU,KAAK,CAACJ;IAClC;IAEA,MAAMK,KAAKP,GAAY,EAAEC,GAAa,EAAE;QACtC,MAAMO,QAAQ,MAAM,IAAI,CAACZ,WAAW,CAACa,SAAS;QAC9CR,IAAIG,IAAI,CAACI,MAAME,GAAG,CAAC,CAACC,IAAM,IAAI,CAACf,WAAW,CAACU,KAAK,CAACK;IACnD;IAEA,MAAMC,OAAOZ,GAAY,EAAEC,GAAa,EAAE;QACxC,IAAI,CAACY,eAAe;QAEpB,MAAM,EAAEV,EAAE,EAAE,GAAG,MAAMW,IAAAA,yBAAa,EAACd,IAAIe,MAAM,EAAEC,0BAAO;QAEtD,IAAIhB,IAAIE,IAAI,EAAEC,OAAOA,IAAI;YACvB,MAAM,IAAIc,0CAAuB,CAAC;QACpC;QAEA,IAAI,IAAI,CAACC,UAAU,IAAI;YACrB,MAAMC,aAAa,MAAM,IAAI,CAACvB,WAAW,CAACwB,aAAa;YACvD,IAAIjB,OAAOgB,YAAY;gBACrB,IAAI,CAACN,eAAe;YACtB;QACF;QAEA,MAAM,IAAI,CAACjB,WAAW,CAACyB,UAAU,CAAClB;QAClCF,IAAIG,IAAI;IACV;IAEA,MAAMkB,IAAItB,GAAY,EAAEC,GAAa,EAAE;QACrC,MAAM,EAAEE,EAAE,EAAE,GAAG,MAAMW,IAAAA,yBAAa,EAACd,IAAIe,MAAM,EAAEC,0BAAO;QACtD,MAAMd,OAAO,MAAM,IAAI,CAACN,WAAW,CAACS,OAAO,CAACF;QAC5CF,IAAIG,IAAI,CAAC,IAAI,CAACR,WAAW,CAACU,KAAK,CAACJ;IAClC;IAEA,MAAMqB,eAAevB,GAAY,EAAEC,GAAa,EAAE;QAChD,IAAI,CAACY,eAAe;QAEpB,MAAM,EAAEV,EAAE,EAAE,GAAG,MAAMW,IAAAA,yBAAa,EAACd,IAAIe,MAAM,EAAEC,0BAAO;QAEtD,IAAIhB,IAAIE,IAAI,EAAEC,OAAOA,IAAI;YACvB,MAAM,IAAIc,0CAAuB,CAAC;QACpC;QAEA,MAAM,EAAEO,QAAQ,EAAE,GAAG,MAAMV,IAAAA,yBAAa,EAACd,IAAIyB,IAAI,EAAE;YACjDD,UAAU;QACZ;QACA,MAAM,IAAI,CAAC5B,WAAW,CAAC8B,kBAAkB,CAACvB,IAAIqB;QAC9CvB,IAAIG,IAAI;IACV;IAEA,MAAMuB,eAAe3B,GAAY,EAAEC,GAAa,EAAE;QAChD,IAAI,CAACY,eAAe;QAEpB,MAAM,EAAEV,EAAE,EAAE,GAAG,MAAMW,IAAAA,yBAAa,EAACd,IAAIe,MAAM,EAAEC,0BAAO;QAEtD,IAAIhB,IAAIE,IAAI,EAAEC,OAAOA,IAAI;YACvB,MAAM,IAAIc,0CAAuB,CAAC;QACpC;QAEA,MAAM,EAAEW,WAAW,EAAEC,WAAW,EAAE,GAAG,MAAMf,IAAAA,yBAAa,EAACd,IAAIyB,IAAI,EAAE;YACjEG,aAAa;YACbC,aAAa;QACf;QACA,MAAM,IAAI,CAACjC,WAAW,CAACkC,kBAAkB,CAAC3B,IAAIyB,aAAaC;QAC3D5B,IAAIG,IAAI;IACV;IAEA,MAAM2B,YAAY/B,GAAY,EAAEC,GAAa,EAAE;QAC7C,IAAI,CAACY,eAAe;QAEpB,MAAM,EAAEV,EAAE,EAAE,GAAG,MAAMW,IAAAA,yBAAa,EAACd,IAAIe,MAAM,EAAEC,0BAAO;QAEtD,MAAM,EAAEgB,UAAU,EAAE,GAAG,MAAMlB,IAAAA,yBAAa,EAACd,IAAIyB,IAAI,EAAE;YACnDO,YAAY;QACd;QACA,MAAM,IAAI,CAACpC,WAAW,CAACqC,eAAe,CAAC9B,IAAI6B;QAC3C/B,IAAIG,IAAI;IACV;IAEAc,aAAa;QACX,OAAO,IAAI,CAACrB,aAAa,CAACyB,GAAG,CAACY,6BAAY,CAACC,qBAAqB,EAAE,aAAa;IACjF;IAEAtB,kBAAkB;QAChB,MAAMK,aAAa,IAAI,CAACA,UAAU;QAClC,IAAIA,YAAY;YACd,MAAM,IAAID,0CAAuB,CAAC;QACpC;IACF;AACF;MAEA,WAAemB,IAAAA,+BAAgB,EAACzC,gBAC7B0C,MAAM,CAACH,6BAAY,CAACI,QAAQ,GAAG,SAC/BC,MAAM,CAAC;IAACC,IAAAA,0BAAY;CAAG,EACvBlB,GAAG,CAAC,KAAK,QAAQ;IAChBiB,QAAQ;QAACE,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AACzC,GACCrB,GAAG,CAAC,YAAY,WAChBA,GAAG,CAAC,QAAQ,OAAO;IAClBiB,QAAQ;QAACE,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AACzC,GACC/B,MAAM,CAAC,QAAQ,UAAU;IACxB2B,QAAQ;QAACE,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AACzC,GACCC,IAAI,CAAC,qBAAqB,eAAe;IACxCL,QAAQ;QAACE,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AACzC,GACCC,IAAI,CAAC,wBAAwB,kBAC7BA,IAAI,CAAC,wBAAwB"}
+{"version":3,"sources":["../../src/controllers/user.controller.ts"],"names":["UserController","userService","roleService","configService","authService","settingsStore","logger","constructor","loggerFactory","name","profile","req","res","user","id","send","getUser","toDto","list","users","listUsers","map","u","listRoles","roleDtos","roles","r","delete","validateInput","params","idRules","ownUserId","ForbiddenError","isRootUser","isUserRootUser","isDemoMode","demoUserId","getDemoUserId","throwIfDemoMode","deleteUser","logoutUserId","e","error","errorSummary","get","changeUsername","getLoginRequired","username","body","updateUsernameById","changePassword","oldPassword","newPassword","updatePasswordById","setVerified","isVerified","setVerifiedById","setRootUser","userId","setIsRootUserById","createController","prefix","AppConstants","apiRoute","before","authenticate","authorizeRoles","ROLES","ADMIN","demoUserNotAllowed","post","demoUserNotAllowedInterceptor"],"mappings":";;;;;;;;;;;IAkBaA,cAAc;eAAdA;;IAgLb,OAsBiF;eAtBjF;;;+BAlMiC;iCACJ;8BACgB;wCACvB;4BACQ;mCACN;mCACO;gCAImC;4BAKrC;AAGtB,MAAMA;IACXC,YAA0B;IAC1BC,YAA0B;IAC1BC,cAA8B;IAC9BC,YAA0B;IAC1BC,cAA6B;IAC7BC,OAAsB;IAEtBC,YAAY,EACVN,WAAW,EACXE,aAAa,EACbD,WAAW,EACXG,aAAa,EACbD,WAAW,EACXI,aAAa,EAQd,CAAE;QACD,IAAI,CAACP,WAAW,GAAGA;QACnB,IAAI,CAACE,aAAa,GAAGA;QACrB,IAAI,CAACD,WAAW,GAAGA;QACnB,IAAI,CAACE,WAAW,GAAGA;QACnB,IAAI,CAACC,aAAa,GAAGA;QACrB,IAAI,CAACC,MAAM,GAAGE,cAAcR,eAAeS,IAAI;IACjD;IAEA,MAAMC,QAAQC,GAAY,EAAEC,GAAa,EAAE;QACzC,IAAI,CAACD,IAAIE,IAAI,EAAEC,IAAI;YACjBF,IAAIG,IAAI,CAAC,CAAC;YACV;QACF;QAEA,MAAMF,OAAO,MAAM,IAAI,CAACZ,WAAW,CAACe,OAAO,CAACL,IAAIE,IAAI,EAAEC;QACtDF,IAAIG,IAAI,CAAC,IAAI,CAACd,WAAW,CAACgB,KAAK,CAACJ;IAClC;IAEA,MAAMK,KAAKP,GAAY,EAAEC,GAAa,EAAE;QACtC,MAAMO,QAAQ,MAAM,IAAI,CAAClB,WAAW,CAACmB,SAAS;QAC9CR,IAAIG,IAAI,CAACI,MAAME,GAAG,CAAC,CAACC,IAAM,IAAI,CAACrB,WAAW,CAACgB,KAAK,CAACK;IACnD;IAEA,MAAMC,UAAUZ,GAAY,EAAEC,GAAa,EAAE;QAC3C,MAAMY,WAAW,IAAI,CAACtB,WAAW,CAACuB,KAAK,CAACJ,GAAG,CAAC,CAACK,IAAM,IAAI,CAACxB,WAAW,CAACe,KAAK,CAACS;QAC1Ed,IAAIG,IAAI,CAACS;IACX;IAEA,MAAMG,OAAOhB,GAAY,EAAEC,GAAa,EAAE;QACxC,MAAM,EAAEE,EAAE,EAAE,GAAG,MAAMc,IAAAA,yBAAa,EAACjB,IAAIkB,MAAM,EAAEC,0BAAO;QAEtD,MAAMC,YAAYpB,IAAIE,IAAI,EAAEC;QAC5B,IAAIiB,WAAW;YACb,IAAIA,cAAcjB,IAAI;gBACpB,MAAM,IAAIkB,iCAAc,CAAC;YAC3B;QACF;QAEA,MAAMC,aAAa,MAAM,IAAI,CAAChC,WAAW,CAACiC,cAAc,CAACpB;QACzD,IAAImB,YAAY;YACd,MAAM,IAAID,iCAAc,CAAC;QAC3B;QAEA,IAAI,IAAI,CAAC7B,aAAa,CAACgC,UAAU,IAAI;YACnC,MAAMC,aAAa,MAAM,IAAI,CAACnC,WAAW,CAACoC,aAAa;YACvD,IAAIvB,OAAOsB,YAAY;gBACrB,IAAI,CAACE,eAAe;YACtB;QACF;QAEA,MAAM,IAAI,CAACrC,WAAW,CAACsC,UAAU,CAACzB;QAElC,IAAI;YACF,MAAM,IAAI,CAACV,WAAW,CAACoC,YAAY,CAAC1B;QACtC,EAAE,OAAO2B,GAAG;YACV,IAAI,CAACnC,MAAM,CAACoC,KAAK,CAACC,IAAAA,wBAAY,EAACF;QACjC;QAEA7B,IAAIG,IAAI;IACV;IAEA,MAAM6B,IAAIjC,GAAY,EAAEC,GAAa,EAAE;QACrC,MAAM,EAAEE,EAAE,EAAE,GAAG,MAAMc,IAAAA,yBAAa,EAACjB,IAAIkB,MAAM,EAAEC,0BAAO;QACtD,MAAMjB,OAAO,MAAM,IAAI,CAACZ,WAAW,CAACe,OAAO,CAACF;QAC5CF,IAAIG,IAAI,CAAC,IAAI,CAACd,WAAW,CAACgB,KAAK,CAACJ;IAClC;IAEA,MAAMgC,eAAelC,GAAY,EAAEC,GAAa,EAAE;QAChD,MAAM,EAAEE,EAAE,EAAE,GAAG,MAAMc,IAAAA,yBAAa,EAACjB,IAAIkB,MAAM,EAAEC,0BAAO;QAEtD,IAAInB,IAAIE,IAAI,EAAEC,OAAOA,MAAO,MAAM,IAAI,CAACT,aAAa,CAACyC,gBAAgB,IAAK;YACxE,MAAM,IAAId,iCAAc,CAAC;QAC3B;QAEA,MAAM,EAAEe,QAAQ,EAAE,GAAG,MAAMnB,IAAAA,yBAAa,EAACjB,IAAIqC,IAAI,EAAE;YACjDD,UAAU;QACZ;QACA,MAAM,IAAI,CAAC9C,WAAW,CAACgD,kBAAkB,CAACnC,IAAIiC;QAC9CnC,IAAIG,IAAI;IACV;IAEA,MAAMmC,eAAevC,GAAY,EAAEC,GAAa,EAAE;QAChD,MAAM,EAAEE,EAAE,EAAE,GAAG,MAAMc,IAAAA,yBAAa,EAACjB,IAAIkB,MAAM,EAAEC,0BAAO;QAEtD,IAAInB,IAAIE,IAAI,EAAEC,OAAOA,MAAO,MAAM,IAAI,CAACT,aAAa,CAACyC,gBAAgB,IAAK;YACxE,MAAM,IAAId,iCAAc,CAAC;QAC3B;QAEA,MAAM,EAAEmB,WAAW,EAAEC,WAAW,EAAE,GAAG,MAAMxB,IAAAA,yBAAa,EAACjB,IAAIqC,IAAI,EAAE;YACjEG,aAAa;YACbC,aAAa;QACf;QACA,MAAM,IAAI,CAACnD,WAAW,CAACoD,kBAAkB,CAACvC,IAAIqC,aAAaC;QAC3DxC,IAAIG,IAAI;IACV;IAEA,MAAMuC,YAAY3C,GAAY,EAAEC,GAAa,EAAE;QAC7C,MAAM,EAAEE,EAAE,EAAE,GAAG,MAAMc,IAAAA,yBAAa,EAACjB,IAAIkB,MAAM,EAAEC,0BAAO;QAEtD,MAAMC,YAAYpB,IAAIE,IAAI,EAAEC;QAC5B,IAAIiB,WAAW;YACb,IAAIA,cAAcjB,IAAI;gBACpB,MAAM,IAAIkB,iCAAc,CAAC;YAC3B;QACF;QAEA,MAAMC,aAAa,MAAM,IAAI,CAAChC,WAAW,CAACiC,cAAc,CAACpB;QACzD,IAAImB,YAAY;YACd,MAAM,IAAID,iCAAc,CAAC;QAC3B;QAEA,MAAM,EAAEuB,UAAU,EAAE,GAAG,MAAM3B,IAAAA,yBAAa,EAACjB,IAAIqC,IAAI,EAAE;YACnDO,YAAY;QACd;QACA,MAAM,IAAI,CAACtD,WAAW,CAACuD,eAAe,CAAC1C,IAAIyC;QAE3C,wFAAwF;QACxF,qBAAqB;QACrB,UAAU;QACV,+CAA+C;QAC/C,kBAAkB;QAClB,0CAA0C;QAC1C,MAAM;QACN,IAAI;QAEJ3C,IAAIG,IAAI;IACV;IAEA,MAAM0C,YAAY9C,GAAY,EAAEC,GAAa,EAAE;QAC7C,MAAM,EAAEE,EAAE,EAAE,GAAG,MAAMc,IAAAA,yBAAa,EAACjB,IAAIkB,MAAM,EAAEC,0BAAO;QAEtD,MAAM4B,SAAS/C,IAAIE,IAAI,EAAEC;QACzB,IAAIH,IAAIE,IAAI,EAAEC,IAAI;YAChB,MAAMmB,aAAa,MAAM,IAAI,CAAChC,WAAW,CAACiC,cAAc,CAACwB;YACzD,IAAI,CAACzB,YAAY;gBACf,MAAM,IAAID,iCAAc,CAAC;YAC3B;QACF;QACA,MAAM,EAAEC,UAAU,EAAE,GAAG,MAAML,IAAAA,yBAAa,EAACjB,IAAIqC,IAAI,EAAE;YACnDf,YAAY;QACd;QACA,MAAM,IAAI,CAAChC,WAAW,CAAC0D,iBAAiB,CAAC7C,IAAImB;QAC7CrB,IAAIG,IAAI;IACV;IAEAuB,kBAAkB;QAChB,MAAMH,aAAa,IAAI,CAAChC,aAAa,CAACgC,UAAU;QAChD,IAAIA,YAAY;YACd,MAAM,IAAIH,iCAAc,CAAC;QAC3B;IACF;AACF;MAEA,WAAe4B,IAAAA,+BAAgB,EAAC5D,gBAC7B6D,MAAM,CAACC,6BAAY,CAACC,QAAQ,GAAG,SAC/BC,MAAM,CAAC;IAACC,IAAAA,0BAAY;CAAG,EACvBrB,GAAG,CAAC,KAAK,QAAQ;IAChBoB,QAAQ;QAACE,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AACzC,GACCxB,GAAG,CAAC,UAAU,aAAa,CAAC,GAC5BA,GAAG,CAAC,YAAY,WAChBA,GAAG,CAAC,QAAQ,OAAO;IAClBoB,QAAQ;QAACE,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;KAAE;AACzC,GACCzC,MAAM,CAAC,QAAQ,UAAU;IACxBqC,QAAQ;QAACE,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;QAAGC,kCAAkB;KAAC;AAC7D,EACA,2BAA2B;CAC1BC,IAAI,CAAC,sBAAsB,eAAe;IACzCN,QAAQ;QAACK,kCAAkB;KAAC;AAC9B,GACCC,IAAI,CAAC,qBAAqB,eAAe;IACxCN,QAAQ;QAACE,IAAAA,4BAAc,EAAC;YAACC,6BAAK,CAACC,KAAK;SAAC;QAAGC,kCAAkB;KAAC;AAC7D,GACCC,IAAI,CAAC,wBAAwB,kBAAkBC,6CAA6B,EAC5ED,IAAI,CAAC,wBAAwB,kBAAkBC,6CAA6B"}

package/dist/controllers/validation/setting.validation.js

@@ -13,7 +13,7 @@ const wizardSettingsRules = {
     loginRequired: "required|boolean",
     registration: "required|boolean",
     rootUsername: "required|string",
-    rootPassword: "required|string"
+    rootPassword: "required|string|minLength:8"
 };
 
 //# sourceMappingURL=setting.validation.js.map

package/dist/controllers/validation/user-controller.validation.js

@@ -8,9 +8,10 @@ Object.defineProperty(exports, "registerUserRules", {
         return registerUserRules;
     }
 });
+const _serverconstants = require("../../server.constants");
 const registerUserRules = {
-    username: "required|string",
-    password: "required|string"
+    username: `required|string|minLength:${_serverconstants.AppConstants.DEFAULT_USERNAME_MINLEN}`,
+    password: `required|string|minLength:${_serverconstants.AppConstants.DEFAULT_PASSWORD_MINLEN}`
 };
 
 //# sourceMappingURL=user-controller.validation.js.map

package/dist/controllers/validation/user-controller.validation.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/controllers/validation/user-controller.validation.ts"],"names":["registerUserRules","username","password"],"mappings":";;;;+BAAaA;;;eAAAA;;;AAAN,MAAMA,oBAAoB;IAC/BC,UAAU;IACVC,UAAU;AACZ"}
+{"version":3,"sources":["../../../src/controllers/validation/user-controller.validation.ts"],"names":["registerUserRules","username","AppConstants","DEFAULT_USERNAME_MINLEN","password","DEFAULT_PASSWORD_MINLEN"],"mappings":";;;;+BAEaA;;;eAAAA;;;iCAFgB;AAEtB,MAAMA,oBAAoB;IAC/BC,UAAU,CAAC,0BAA0B,EAAEC,6BAAY,CAACC,uBAAuB,CAAC,CAAC;IAC7EC,UAAU,CAAC,0BAA0B,EAAEF,6BAAY,CAACG,uBAAuB,CAAC,CAAC;AAC/E"}

package/dist/exceptions/job.exceptions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/exceptions/job.exceptions.ts"],"names":["JobValidationException","Error","constructor","message","taskId","name"],"mappings":";;;;+BAAaA;;;eAAAA;;;AAAN,MAAMA,+BAA+BC;IAC1CC,YAAYC,OAAO,EAAEC,MAAM,CAAE;QAC3B,KAAK,CAACD;QACN,IAAI,CAACE,IAAI,GAAG,CAAC,oBAAoB,EAAED,UAAU,YAAY,CAAC,CAAC;IAC7D;AACF"}
+{"version":3,"sources":["../../src/exceptions/job.exceptions.ts"],"names":["JobValidationException","Error","constructor","message","taskId","name"],"mappings":";;;;+BAAaA;;;eAAAA;;;AAAN,MAAMA,+BAA+BC;IAC1CC,YAAYC,OAAe,EAAEC,MAAc,CAAE;QAC3C,KAAK,CAACD;QACN,IAAI,CAACE,IAAI,GAAG,CAAC,oBAAoB,EAAED,UAAU,YAAY,CAAC,CAAC;IAC7D;AACF"}

package/dist/exceptions/runtime.exceptions.js

@@ -21,6 +21,9 @@ _export(exports, {
     ExternalServiceError: function() {
         return ExternalServiceError;
     },
+    ForbiddenError: function() {
+        return ForbiddenError;
+    },
     InternalServerException: function() {
         return InternalServerException;
     },
@@ -30,9 +33,6 @@ _export(exports, {
     NotImplementedException: function() {
         return NotImplementedException;
     },
-    PasswordChangeRequiredError: function() {
-        return PasswordChangeRequiredError;
-    },
     ValidationException: function() {
         return ValidationException;
     }
@@ -44,15 +44,17 @@ class NotImplementedException extends Error {
     }
 }
 class AuthenticationError extends Error {
-    constructor(error){
+    reasonCode;
+    constructor(error, reasonCode = ""){
         super(error);
         this.name = AuthenticationError.name;
+        this.reasonCode = reasonCode;
     }
 }
-class PasswordChangeRequiredError extends Error {
-    constructor(){
-        super("Password change required");
-        this.name = PasswordChangeRequiredError.name;
+class ForbiddenError extends Error {
+    constructor(error){
+        super(error);
+        this.name = ForbiddenError.name;
     }
 }
 class AuthorizationError extends Error {

package/dist/exceptions/runtime.exceptions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/exceptions/runtime.exceptions.ts"],"names":["AuthenticationError","AuthorizationError","BadRequestException","ExternalServiceError","InternalServerException","NotFoundException","NotImplementedException","PasswordChangeRequiredError","ValidationException","Error","constructor","message","name","error","permissions","roles","reason","path","errors","validationObject","JSON","stringify","responseObject","stack"],"mappings":";;;;;;;;;;;IAOaA,mBAAmB;eAAnBA;;IAcAC,kBAAkB;eAAlBA;;IAcAC,mBAAmB;eAAnBA;;IA2BAC,oBAAoB;eAApBA;;IAUAC,uBAAuB;eAAvBA;;IA9BAC,iBAAiB;eAAjBA;;IA1CAC,uBAAuB;eAAvBA;;IAcAC,2BAA2B;eAA3BA;;IAsCAC,mBAAmB;eAAnBA;;;AApDN,MAAMF,gCAAgCG;IAC3CC,YAAYC,OAAgB,CAAE;QAC5B,KAAK,CAACA;QACN,IAAI,CAACC,IAAI,GAAGN,wBAAwBM,IAAI;IAC1C;AACF;AAEO,MAAMZ,4BAA4BS;IACvCC,YAAYG,KAAc,CAAE;QAC1B,KAAK,CAACA;QACN,IAAI,CAACD,IAAI,GAAGZ,oBAAoBY,IAAI;IACtC;AACF;AAEO,MAAML,oCAAoCE;IAC/CC,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAGL,4BAA4BK,IAAI;IAC9C;AACF;AAEO,MAAMX,2BAA2BQ;IACtCK,cAAyB,EAAE,CAAC;IAC5BC,QAAmB,EAAE,CAAC;IACtBC,OAAgB;IAEhBN,YAAY,EAAEI,WAAW,EAAEC,KAAK,EAAEC,MAAM,EAAiE,CAAE;QACzG,KAAK,CAAC;QACN,IAAI,CAACJ,IAAI,GAAGX,mBAAmBW,IAAI;QACnC,IAAI,CAACI,MAAM,GAAGA;QACd,IAAI,CAACF,WAAW,GAAGA;QACnB,IAAI,CAACC,KAAK,GAAGA;IACf;AACF;AAEO,MAAMb,4BAA4BO;IACvCC,YAAYC,OAAe,CAAE;QAC3B,KAAK,CAACA;QACN,IAAI,CAACC,IAAI,GAAGV,oBAAoBU,IAAI;IACtC;AACF;AAEO,MAAMP,0BAA0BI;IACrCQ,KAAc;IAEdP,YAAYC,OAAe,EAAEM,IAAa,CAAE;QAC1C,KAAK,CAACN;QACN,IAAI,CAACC,IAAI,GAAGP,kBAAkBO,IAAI;QAClC,IAAI,CAACK,IAAI,GAAGA;IACd;AACF;AAEO,MAAMT,4BAA4BC;IACvCS,OAAY;IAEZR,YAAYS,gBAAqB,CAAE;QACjC,KAAK,CAACC,KAAKC,SAAS,CAACF;QACrB,IAAI,CAACP,IAAI,GAAGJ,oBAAoBI,IAAI;QACpC,IAAI,CAACM,MAAM,GAAGC;IAChB;AACF;AAEO,MAAMhB,6BAA6BM;IACxCI,MAAW;IAEXH,YAAYY,cAAmB,CAAE;QAC/B,KAAK,CAACF,KAAKC,SAAS,CAACC;QACrB,IAAI,CAACV,IAAI,GAAGT,qBAAqBS,IAAI;QACrC,IAAI,CAACC,KAAK,GAAGS;IACf;AACF;AAEO,MAAMlB,gCAAgCK;IAC3CC,YAAYC,OAAe,EAAEY,KAAW,CAAE;QACxC,KAAK,CAACZ;QACN,IAAI,CAACC,IAAI,GAAGR,wBAAwBQ,IAAI;QACxC,IAAI,CAACW,KAAK,GAAGA;IACf;AACF"}
+{"version":3,"sources":["../../src/exceptions/runtime.exceptions.ts"],"names":["AuthenticationError","AuthorizationError","BadRequestException","ExternalServiceError","ForbiddenError","InternalServerException","NotFoundException","NotImplementedException","ValidationException","Error","constructor","message","name","reasonCode","error","permissions","roles","reason","path","errors","validationObject","JSON","stringify","responseObject","stack"],"mappings":";;;;;;;;;;;IAOaA,mBAAmB;eAAnBA;;IAgBAC,kBAAkB;eAAlBA;;IAcAC,mBAAmB;eAAnBA;;IA2BAC,oBAAoB;eAApBA;;IAhDAC,cAAc;eAAdA;;IA0DAC,uBAAuB;eAAvBA;;IA9BAC,iBAAiB;eAAjBA;;IA5CAC,uBAAuB;eAAvBA;;IAsDAC,mBAAmB;eAAnBA;;;AAtDN,MAAMD,gCAAgCE;IAC3CC,YAAYC,OAAgB,CAAE;QAC5B,KAAK,CAACA;QACN,IAAI,CAACC,IAAI,GAAGL,wBAAwBK,IAAI;IAC1C;AACF;AAEO,MAAMZ,4BAA4BS;IACvCI,WAAmB;IACnBH,YAAYI,KAAc,EAAED,aAAa,EAAE,CAAE;QAC3C,KAAK,CAACC;QACN,IAAI,CAACF,IAAI,GAAGZ,oBAAoBY,IAAI;QACpC,IAAI,CAACC,UAAU,GAAGA;IACpB;AACF;AAEO,MAAMT,uBAAuBK;IAClCC,YAAYI,KAAc,CAAE;QAC1B,KAAK,CAACA;QACN,IAAI,CAACF,IAAI,GAAGR,eAAeQ,IAAI;IACjC;AACF;AAEO,MAAMX,2BAA2BQ;IACtCM,cAAyB,EAAE,CAAC;IAC5BC,QAAmB,EAAE,CAAC;IACtBC,OAAgB;IAEhBP,YAAY,EAAEK,WAAW,EAAEC,KAAK,EAAEC,MAAM,EAAiE,CAAE;QACzG,KAAK,CAAC;QACN,IAAI,CAACL,IAAI,GAAGX,mBAAmBW,IAAI;QACnC,IAAI,CAACK,MAAM,GAAGA;QACd,IAAI,CAACF,WAAW,GAAGA;QACnB,IAAI,CAACC,KAAK,GAAGA;IACf;AACF;AAEO,MAAMd,4BAA4BO;IACvCC,YAAYC,OAAe,CAAE;QAC3B,KAAK,CAACA;QACN,IAAI,CAACC,IAAI,GAAGV,oBAAoBU,IAAI;IACtC;AACF;AAEO,MAAMN,0BAA0BG;IACrCS,KAAc;IAEdR,YAAYC,OAAe,EAAEO,IAAa,CAAE;QAC1C,KAAK,CAACP;QACN,IAAI,CAACC,IAAI,GAAGN,kBAAkBM,IAAI;QAClC,IAAI,CAACM,IAAI,GAAGA;IACd;AACF;AAEO,MAAMV,4BAA4BC;IACvCU,OAAY;IAEZT,YAAYU,gBAAqB,CAAE;QACjC,KAAK,CAACC,KAAKC,SAAS,CAACF;QACrB,IAAI,CAACR,IAAI,GAAGJ,oBAAoBI,IAAI;QACpC,IAAI,CAACO,MAAM,GAAGC;IAChB;AACF;AAEO,MAAMjB,6BAA6BM;IACxCK,MAAW;IAEXJ,YAAYa,cAAmB,CAAE;QAC/B,KAAK,CAACF,KAAKC,SAAS,CAACC;QACrB,IAAI,CAACX,IAAI,GAAGT,qBAAqBS,IAAI;QACrC,IAAI,CAACE,KAAK,GAAGS;IACf;AACF;AAEO,MAAMlB,gCAAgCI;IAC3CC,YAAYC,OAAe,EAAEa,KAAW,CAAE;QACxC,KAAK,CAACb;QACN,IAAI,CAACC,IAAI,GAAGP,wBAAwBO,IAAI;QACxC,IAAI,CAACY,KAAK,GAAGA;IACf;AACF"}

package/dist/handlers/validators.js

@@ -47,7 +47,9 @@ function _interop_require_wildcard(obj, nodeInterop) {
     if (cache && cache.has(obj)) {
         return cache.get(obj);
     }
-    var newObj = {};
+    var newObj = {
+        __proto__: null
+    };
     var hasPropertyDescriptor = Object.defineProperty && Object.getOwnPropertyDescriptor;
     for(var key in obj){
         if (key !== "default" && Object.prototype.hasOwnProperty.call(obj, key)) {
@@ -89,6 +91,9 @@ function getExtendedValidator() {
     (0, _nodeinputvalidator.extend)("not", ({ value, args }, validator)=>{
         return !value && value !== false;
     });
+    (0, _nodeinputvalidator.extendMessages)({
+        not: "The :attribute field may not be present."
+    });
     return _nodeinputvalidator.default;
 }
 function getScopedPrinter(req) {

package/dist/handlers/validators.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/handlers/validators.ts"],"names":["getExtendedValidator","getScopedPrinter","validateInput","validateMiddleware","extend","value","args","validator","url","normalizeUrl","startsWith","e","URL","nodeInputValidator","req","tokens","printerLoginToken","currentPrinterToken","printerIdToken","resolvedDependencies","errors","forEach","t","dependency","container","resolve","push","InternalServerException","length","ValidationException","data","rules","localNIV","v","Validator","matched","check","inputs","body"],"mappings":";;;;;;;;;;;IAQgBA,oBAAoB;eAApBA;;IA4BAC,gBAAgB;eAAhBA;;IA4BMC,aAAa;eAAbA;;IAeAC,kBAAkB;eAAlBA;;;mCA9EuC;yBACU;8BAC1C;4EACc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIpC,SAASH;IACdI,IAAAA,0BAAM,EAAC,SAAS,CAAC,EAAEC,KAAK,EAAEC,IAAI,EAAE,EAAEC;QAChC,IAAI,CAACF,OAAO,OAAO;QACnB,IAAI;YACF,MAAMG,MAAMC,IAAAA,0BAAY,EAACJ;YACzB,OAAOG,IAAIE,UAAU,CAAC,YAAYF,IAAIE,UAAU,CAAC;QACnD,EAAE,OAAOC,GAAG;YACV,OAAO;QACT;IACF;IACAP,IAAAA,0BAAM,EAAC,WAAW,CAAC,EAAEC,KAAK,EAAEC,IAAI,EAAE,EAAEC;QAClC,IAAI,CAACF,OAAO,OAAO;QAEnB,IAAI;YACF,IAAI,CAACA,MAAMK,UAAU,CAAC,cAAc,CAACL,MAAMK,UAAU,CAAC,aAAa;gBACjE,OAAO;YACT;YACA,OAAO,IAAIE,IAAIH,IAAAA,0BAAY,EAACJ;QAC9B,EAAE,OAAOM,GAAG;YACV,OAAO;QACT;IACF;IACAP,IAAAA,0BAAM,EAAC,OAAO,CAAC,EAAEC,KAAK,EAAEC,IAAI,EAAE,EAAEC;QAC9B,OAAO,CAACF,SAASA,UAAU;IAC7B;IACA,OAAOQ,2BAAkB;AAC3B;AAEO,SAASZ,iBAAiBa,GAAY;IAC3C,MAAMC,SAAS;QAACC,0BAAiB;QAAEC,4BAAmB;QAAEC,uBAAc;KAAC;IACvE,IAAIC,uBAAgH,CAAC;IACrH,IAAIC,SAAgB,EAAE;IACtBL,OAAOM,OAAO,CAAC,CAACC;QACd,IAAI;YACF,MAAMC,aAAaT,IAAIU,SAAS,CAACC,OAAO,CAACH;YACzC,IAAI,CAACC,YAAY;gBACfH,OAAOM,IAAI,CACT,CAAC,mBAAmB,EAAEJ,EAAE,gGAAgG,CAAC;YAE7H;YACAH,oBAAoB,CAACG,EAAE,GAAGC;QAC5B,EAAE,OAAOZ,GAAG;YACV,MAAM,IAAIgB,0CAAuB,CAAC,CAAC,WAAW,EAAEL,EAAE,wCAAwC,CAAC;QAC7F;IACF;IAEA,IAAIF,OAAOQ,MAAM,GAAG,GAAG;QACrB,MAAM,IAAIC,sCAAmB,CAACT;IAChC;IAEA,OAAOD;AACT;AAKO,eAAejB,cAAiB4B,IAAS,EAAEC,KAAQ;IACxD,MAAMC,WAAWhC;IAEjB,MAAMiC,IAAI,IAAID,SAASE,SAAS,CAACJ,MAAMC;IAEvC,MAAMI,UAAU,MAAMF,EAAEG,KAAK;IAC7B,IAAI,CAACD,SAAS;QACZ,MAAM,IAAIN,sCAAmB,CAACI,EAAEb,MAAM;IACxC;IACA,OAAOa,EAAEI,MAAM;AACjB;AAKO,eAAelC,mBAAsBW,GAAY,EAAEiB,KAAQ;IAChE,OAAO7B,cAAcY,IAAIwB,IAAI,EAAEP;AACjC"}
+{"version":3,"sources":["../../src/handlers/validators.ts"],"names":["getExtendedValidator","getScopedPrinter","validateInput","validateMiddleware","extend","value","args","validator","url","normalizeUrl","startsWith","e","URL","extendMessages","not","nodeInputValidator","req","tokens","printerLoginToken","currentPrinterToken","printerIdToken","resolvedDependencies","errors","forEach","t","dependency","container","resolve","push","InternalServerException","length","ValidationException","data","rules","localNIV","v","Validator","matched","check","inputs","body"],"mappings":";;;;;;;;;;;IAQgBA,oBAAoB;eAApBA;;IA+BAC,gBAAgB;eAAhBA;;IA4BMC,aAAa;eAAbA;;IAeAC,kBAAkB;eAAlBA;;;mCAjFuC;yBACU;8BAC1C;4EAC8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIpD,SAASH;IACdI,IAAAA,0BAAM,EAAC,SAAS,CAAC,EAAEC,KAAK,EAAEC,IAAI,EAAE,EAAEC;QAChC,IAAI,CAACF,OAAO,OAAO;QACnB,IAAI;YACF,MAAMG,MAAMC,IAAAA,0BAAY,EAACJ;YACzB,OAAOG,IAAIE,UAAU,CAAC,YAAYF,IAAIE,UAAU,CAAC;QACnD,EAAE,OAAOC,GAAG;YACV,OAAO;QACT;IACF;IACAP,IAAAA,0BAAM,EAAC,WAAW,CAAC,EAAEC,KAAK,EAAEC,IAAI,EAAE,EAAEC;QAClC,IAAI,CAACF,OAAO,OAAO;QAEnB,IAAI;YACF,IAAI,CAACA,MAAMK,UAAU,CAAC,cAAc,CAACL,MAAMK,UAAU,CAAC,aAAa;gBACjE,OAAO;YACT;YACA,OAAO,IAAIE,IAAIH,IAAAA,0BAAY,EAACJ;QAC9B,EAAE,OAAOM,GAAG;YACV,OAAO;QACT;IACF;IACAP,IAAAA,0BAAM,EAAC,OAAO,CAAC,EAAEC,KAAK,EAAEC,IAAI,EAAE,EAAEC;QAC9B,OAAO,CAACF,SAASA,UAAU;IAC7B;IACAQ,IAAAA,kCAAc,EAAC;QACbC,KAAK;IACP;IACA,OAAOC,2BAAkB;AAC3B;AAEO,SAASd,iBAAiBe,GAAY;IAC3C,MAAMC,SAAS;QAACC,0BAAiB;QAAEC,4BAAmB;QAAEC,uBAAc;KAAC;IACvE,IAAIC,uBAAgH,CAAC;IACrH,IAAIC,SAAgB,EAAE;IACtBL,OAAOM,OAAO,CAAC,CAACC;QACd,IAAI;YACF,MAAMC,aAAaT,IAAIU,SAAS,CAACC,OAAO,CAACH;YACzC,IAAI,CAACC,YAAY;gBACfH,OAAOM,IAAI,CACT,CAAC,mBAAmB,EAAEJ,EAAE,gGAAgG,CAAC;YAE7H;YACAH,oBAAoB,CAACG,EAAE,GAAGC;QAC5B,EAAE,OAAOd,GAAG;YACV,MAAM,IAAIkB,0CAAuB,CAAC,CAAC,WAAW,EAAEL,EAAE,wCAAwC,CAAC;QAC7F;IACF;IAEA,IAAIF,OAAOQ,MAAM,GAAG,GAAG;QACrB,MAAM,IAAIC,sCAAmB,CAACT;IAChC;IAEA,OAAOD;AACT;AAKO,eAAenB,cAAiB8B,IAAS,EAAEC,KAAQ;IACxD,MAAMC,WAAWlC;IAEjB,MAAMmC,IAAI,IAAID,SAASE,SAAS,CAACJ,MAAMC;IAEvC,MAAMI,UAAU,MAAMF,EAAEG,KAAK;IAC7B,IAAI,CAACD,SAAS;QACZ,MAAM,IAAIN,sCAAmB,CAACI,EAAEb,MAAM;IACxC;IACA,OAAOa,EAAEI,MAAM;AACjB;AAKO,eAAepC,mBAAsBa,GAAY,EAAEiB,KAAQ;IAChE,OAAO/B,cAAcc,IAAIwB,IAAI,EAAEP;AACjC"}

package/dist/middleware/authenticate.js

@@ -24,6 +24,7 @@ _export(exports, {
 });
 const _awilixexpress = require("awilix-express");
 const _runtimeexceptions = require("../exceptions/runtime.exceptions");
+const _authorizationconstants = require("../constants/authorization.constants");
 function authorizePermission(permission) {
     return (0, _awilixexpress.inject)(({ permissionService, roleService })=>async (req, res, next)=>{
             if (!req.roles?.length) {
@@ -44,25 +45,27 @@ function authorizePermission(permission) {
             next();
         });
 }
-const authenticate = ()=>(0, _awilixexpress.inject)(({ settingsStore, authService })=>async (req, res, next)=>{
+const authenticate = ()=>(0, _awilixexpress.inject)(({ settingsStore, authService, loggerFactory })=>async (req, res, next)=>{
+            const logger = loggerFactory("Middleware:authenticate");
             const isLoginRequired = await settingsStore.getLoginRequired();
             if (!isLoginRequired) {
                 return next();
             }
             // Check if a password change is required
             if (req.user?.needsPasswordChange) {
-                throw new _runtimeexceptions.PasswordChangeRequiredError();
+                throw new _runtimeexceptions.AuthenticationError("Password change required", _authorizationconstants.AUTH_ERROR_REASON.PasswordChangeRequired);
             }
             // Check if a logout was called
             const bearer = req.headers.authorization?.replace("Bearer ", "") || undefined;
             const isJwtBlacklisted = authService.isJwtTokenBlacklisted(bearer);
             if (!!bearer?.length && isJwtBlacklisted) {
-                throw new _runtimeexceptions.AuthenticationError("Not authenticated");
+                throw new _runtimeexceptions.AuthenticationError("Not authenticated", _authorizationconstants.AUTH_ERROR_REASON.LoginRequired);
             }
             if (req.isAuthenticated()) {
                 return next();
             }
-            throw new _runtimeexceptions.AuthenticationError("Not authenticated");
+            logger.log(`Not authenticated for route: ${req.originalUrl}`);
+            throw new _runtimeexceptions.AuthenticationError("Not authenticated", _authorizationconstants.AUTH_ERROR_REASON.InvalidOrExpiredAuthToken);
         });
 const authorizeRoles = (roles, subset = true)=>(0, _awilixexpress.inject)(({ roleService })=>async (req, res, next)=>{
             if (!roleService.authorizeRoles(roles, req.roles, subset)) {