@flink-app/generic-auth-plugin 0.12.1-alpha.23 → 0.12.1-alpha.27

package/.flink/generatedHandlers.ts

@@ -1,4 +1,4 @@
-// Generated Mon Aug 25 2025 11:28:48 GMT+0200 (Central European Summer Time)
+// Generated Thu Sep 11 2025 10:23:23 GMT+0200 (Central European Summer Time)
 import { autoRegisteredHandlers, HttpMethod } from "@flink-app/flink";
 import * as UserCreate_0 from "../src/handlers/UserCreate";
 import * as UserLogin_0 from "../src/handlers/UserLogin";

package/.flink/generatedJobs.ts

@@ -1,4 +1,4 @@
-// Generated Mon Aug 25 2025 11:28:48 GMT+0200 (Central European Summer Time)
+// Generated Thu Sep 11 2025 10:23:24 GMT+0200 (Central European Summer Time)
 import { autoRegisteredJobs } from "@flink-app/flink";
 export const jobs = [];
 autoRegisteredJobs.push(...jobs);

package/.flink/generatedRepos.ts

@@ -1,4 +1,4 @@
-// Generated Mon Aug 25 2025 11:28:48 GMT+0200 (Central European Summer Time)
+// Generated Thu Sep 11 2025 10:23:23 GMT+0200 (Central European Summer Time)
   import { autoRegisteredRepos } from "@flink-app/flink";
   export const repos = [];
   autoRegisteredRepos.push(...repos);

package/.flink/schemas/schemas.json

@@ -13,11 +13,15 @@
         "password": {
           "type": "string"
         },
+        "personalNumber": {
+          "type": "string"
+        },
         "authentificationMethod": {
           "type": "string",
           "enum": [
             "password",
-            "sms"
+            "sms",
+            "bankid"
           ]
         },
         "profile": {

package/.flink/schemas/schemas.ts

@@ -29,7 +29,7 @@ import { PutManagementUserRolesByUseridRes } from "../../src/schemas/Management/
 import { PutManagementUserUsernameByUseridReq } from "../../src/schemas/Management/PutUserUsernameByUseridReq";
 import { PutManagementUserUsernameByUseridRes } from "../../src/schemas/Management/PutUserUsernameByUseridRes";
 
-// Generated Mon Aug 25 2025 11:28:48 GMT+0200 (Central European Summer Time)
+// Generated Thu Sep 11 2025 10:23:24 GMT+0200 (Central European Summer Time)
 export interface UserCreate_7_ReqSchema extends UserCreateReq {}
 
 export interface UserCreate_7_ResSchema extends UserCreateRes {}

package/.flink/start.ts

@@ -1,4 +1,4 @@
-// Generated Mon Aug 25 2025 11:28:48 GMT+0200 (Central European Summer Time)
+// Generated Thu Sep 11 2025 10:23:24 GMT+0200 (Central European Summer Time)
 import "./generatedHandlers";
 import "./generatedRepos";
 import "./generatedJobs";

package/dist/.flink/generatedHandlers.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.handlers = void 0;
-// Generated Mon Aug 25 2025 11:28:48 GMT+0200 (Central European Summer Time)
+// Generated Thu Sep 11 2025 10:23:23 GMT+0200 (Central European Summer Time)
 var flink_1 = require("@flink-app/flink");
 exports.handlers = [];
 flink_1.autoRegisteredHandlers.push.apply(flink_1.autoRegisteredHandlers, exports.handlers);

package/dist/.flink/generatedJobs.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.jobs = void 0;
-// Generated Mon Aug 25 2025 11:28:48 GMT+0200 (Central European Summer Time)
+// Generated Thu Sep 11 2025 10:23:24 GMT+0200 (Central European Summer Time)
 var flink_1 = require("@flink-app/flink");
 exports.jobs = [];
 flink_1.autoRegisteredJobs.push.apply(flink_1.autoRegisteredJobs, exports.jobs);

package/dist/.flink/generatedRepos.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.repos = void 0;
-// Generated Mon Aug 25 2025 11:28:48 GMT+0200 (Central European Summer Time)
+// Generated Thu Sep 11 2025 10:23:23 GMT+0200 (Central European Summer Time)
 var flink_1 = require("@flink-app/flink");
 exports.repos = [];
 flink_1.autoRegisteredRepos.push.apply(flink_1.autoRegisteredRepos, exports.repos);

package/dist/.flink/schemas/schemas.json

@@ -13,11 +13,15 @@
                 "password": {
                     "type": "string"
                 },
+                "personalNumber": {
+                    "type": "string"
+                },
                 "authentificationMethod": {
                     "type": "string",
                     "enum": [
                         "password",
-                        "sms"
+                        "sms",
+                        "bankid"
                     ]
                 },
                 "profile": {

package/dist/.flink/start.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-// Generated Mon Aug 25 2025 11:28:48 GMT+0200 (Central European Summer Time)
+// Generated Thu Sep 11 2025 10:23:24 GMT+0200 (Central European Summer Time)
 require("./generatedHandlers");
 require("./generatedRepos");
 require("./generatedJobs");

package/dist/src/coreFunctions.d.ts

@@ -11,14 +11,14 @@ import { GenericAuthsmsOptions } from "./genericAuthPluginOptions";
 export declare function getJtwTokenPlugin(secret: string, rolePermissions?: {
     [role: string]: string[];
 }, passwordPolicy?: RegExp, tokenTTL?: number): JwtAuthPlugin;
-export declare function createUser(repo: FlinkRepo<any, User>, auth: JwtAuthPlugin, username: string, password: string, authentificationMethod: "password" | "sms", roles: string[], profile: UserProfile, createPasswordHashAndSaltMethod?: {
+export declare function createUser(repo: FlinkRepo<any, User>, auth: JwtAuthPlugin, username: string, password: string, authentificationMethod: "password" | "sms" | "bankid", roles: string[], profile: UserProfile, createPasswordHashAndSaltMethod?: {
     (password: string): Promise<{
         hash: string;
         salt: string;
     } | null>;
 }, onUserCreated?: {
     (user: User): Promise<void>;
-}): Promise<UserCreateRes>;
+}, personalNumber?: string): Promise<UserCreateRes>;
 export declare function loginByToken(repo: FlinkRepo<any, User>, auth: JwtAuthPlugin, token: string, code: string, jwtSecret: string): Promise<UserLoginRes>;
 export declare function loginUser(repo: FlinkRepo<any, User>, auth: JwtAuthPlugin, username: string, password: string | undefined, validatePasswordMethod?: {
     (password: string, hash: string, salt: string): Promise<boolean>;

package/dist/src/coreFunctions.js

@@ -40,6 +40,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.passwordResetComplete = exports.passwordResetStart = exports.changePassword = exports.loginUser = exports.loginByToken = exports.createUser = exports.getJtwTokenPlugin = void 0;
+var flink_1 = require("@flink-app/flink");
 var jwt_auth_plugin_1 = require("@flink-app/jwt-auth-plugin");
 var jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
 function getJtwTokenPlugin(secret, rolePermissions, passwordPolicy, tokenTTL) {
@@ -70,7 +71,7 @@ function getJtwTokenPlugin(secret, rolePermissions, passwordPolicy, tokenTTL) {
     });
 }
 exports.getJtwTokenPlugin = getJtwTokenPlugin;
-function createUser(repo, auth, username, password, authentificationMethod, roles, profile, createPasswordHashAndSaltMethod, onUserCreated) {
+function createUser(repo, auth, username, password, authentificationMethod, roles, profile, createPasswordHashAndSaltMethod, onUserCreated, personalNumber) {
     return __awaiter(this, void 0, void 0, function () {
         var existingUser, userData, passwordAndSalt, user, token;
         return __generator(this, function (_a) {
@@ -93,6 +94,15 @@ function createUser(repo, auth, username, password, authentificationMethod, role
                         authentificationMethod: authentificationMethod,
                         pushNotificationTokens: [],
                     };
+                    if (personalNumber) {
+                        userData.personalNumber = personalNumber;
+                    }
+                    if (authentificationMethod == "bankid") {
+                        if (!personalNumber) {
+                            flink_1.log.warn("BankID login requested but no personal number found for user");
+                            return [2 /*return*/, { status: "error" }];
+                        }
+                    }
                     if (!(authentificationMethod == "password")) return [3 /*break*/, 6];
                     passwordAndSalt = null;
                     if (!(createPasswordHashAndSaltMethod != null)) return [3 /*break*/, 3];
@@ -239,6 +249,14 @@ function loginUser(repo, auth, username, password, validatePasswordMethod, smsOp
                                 validationToken: token,
                             }];
                     }
+                    if (user.authentificationMethod == "bankid") {
+                        if (!user.personalNumber) {
+                            flink_1.log.warn("BankID login requested but no personal number found for user");
+                            return [2 /*return*/, { status: "failed" }];
+                        }
+                        flink_1.log.warn("BankID login required to be handled in other way, i.e. using flink bankid plugin");
+                        return [2 /*return*/, { status: "failed" }];
+                    }
                     if (!valid) return [3 /*break*/, 13];
                     return [4 /*yield*/, auth.createToken({ username: username.toLowerCase(), _id: user._id }, user.roles)];
                 case 10:

package/dist/src/genericAuthContext.d.ts

@@ -15,12 +15,12 @@ export interface genericAuthContext {
             (password: string, hash: string, salt: string): Promise<boolean>;
         }, smsOptions?: GenericAuthsmsOptions, onSuccessfulLogin?: (user: User) => Promise<void>): Promise<UserLoginRes>;
         loginByToken(repo: FlinkRepo<any, User>, auth: JwtAuthPlugin, token: string, code: string, jwtSecret: string): Promise<UserLoginRes>;
-        createUser(repo: FlinkRepo<any, User>, auth: JwtAuthPlugin, username: string, password: string, authentificationMethod: "password" | "sms", roles: string[], profile: UserProfile, createPasswordHashAndSaltMethod?: {
+        createUser(repo: FlinkRepo<any, User>, auth: JwtAuthPlugin, username: string, password: string, authentificationMethod: "password" | "sms" | "bankid", roles: string[], profile: UserProfile, createPasswordHashAndSaltMethod?: {
             (password: string): Promise<{
                 hash: string;
                 salt: string;
             } | null>;
-        }, onUserCreated?: (user: User) => Promise<void>): Promise<UserCreateRes>;
+        }, onUserCreated?: (user: User) => Promise<void>, personalNumber?: string): Promise<UserCreateRes>;
         changePassword(repo: FlinkRepo<any, User>, auth: JwtAuthPlugin, userId: string, newPassword: string, createPasswordHashAndSaltMethod?: {
             (password: string): Promise<{
                 hash: string;

package/dist/src/handlers/UserCreate.js

@@ -39,12 +39,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.__schemas = exports.__params = exports.__query = exports.__file = exports.__assumedHttpMethod = void 0;
 var flink_1 = require("@flink-app/flink");
 var userCreateHandler = function (_a) { return __awaiter(void 0, [_a], void 0, function (_b) {
-    var _c, password, username, authentificationMethod, profile, roles, pluginName, repo, re, createUserResponse;
+    var _c, password, username, authentificationMethod, profile, personalNumber, roles, pluginName, repo, re, createUserResponse;
     var ctx = _b.ctx, req = _b.req, origin = _b.origin;
     return __generator(this, function (_d) {
         switch (_d.label) {
             case 0:
-                _c = req.body, password = _c.password, username = _c.username, authentificationMethod = _c.authentificationMethod, profile = _c.profile;
+                _c = req.body, password = _c.password, username = _c.username, authentificationMethod = _c.authentificationMethod, profile = _c.profile, personalNumber = _c.personalNumber;
                 if (authentificationMethod == null) {
                     authentificationMethod = "password";
                 }
@@ -63,7 +63,7 @@ var userCreateHandler = function (_a) { return __awaiter(void 0, [_a], void 0, f
                 if (!re.test(username)) {
                     return [2 /*return*/, (0, flink_1.badRequest)("Username does not meet requirements", "usernameError")];
                 }
-                return [4 /*yield*/, ctx.plugins.genericAuthPlugin.createUser(repo, ctx.auth, username.toLocaleLowerCase(), password, authentificationMethod, roles, profile, ctx.plugins[pluginName].createPasswordHashAndSaltMethod, ctx.plugins[pluginName].onUserCreated)];
+                return [4 /*yield*/, ctx.plugins.genericAuthPlugin.createUser(repo, ctx.auth, username.toLocaleLowerCase(), password, authentificationMethod, roles, profile, ctx.plugins[pluginName].createPasswordHashAndSaltMethod, ctx.plugins[pluginName].onUserCreated, personalNumber)];
             case 1:
                 createUserResponse = _d.sent();
                 if (createUserResponse.status != "success") {
@@ -85,4 +85,4 @@ var userCreateHandler = function (_a) { return __awaiter(void 0, [_a], void 0, f
 }); };
 exports.default = userCreateHandler;
 exports.__assumedHttpMethod = "", exports.__file = "UserCreate.ts", exports.__query = [], exports.__params = [];
-exports.__schemas = { reqSchema: { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "additionalProperties": false, "properties": { "username": { "type": "string" }, "password": { "type": "string" }, "authentificationMethod": { "type": "string", "enum": ["password", "sms"] }, "profile": { "type": "object" } }, "required": ["username"], "definitions": {} }, resSchema: { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "additionalProperties": false, "properties": { "status": { "type": "string", "enum": ["success", "error", "userExists", "passwordError"] }, "user": { "type": "object", "properties": { "_id": { "type": "string" }, "username": { "type": "string" }, "token": { "type": "string" } }, "required": ["_id", "username", "token"], "additionalProperties": false } }, "required": ["status"], "definitions": {} } };
+exports.__schemas = { reqSchema: { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "additionalProperties": false, "properties": { "username": { "type": "string" }, "password": { "type": "string" }, "personalNumber": { "type": "string" }, "authentificationMethod": { "type": "string", "enum": ["password", "sms", "bankid"] }, "profile": { "type": "object" } }, "required": ["username"], "definitions": {} }, resSchema: { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "additionalProperties": false, "properties": { "status": { "type": "string", "enum": ["success", "error", "userExists", "passwordError"] }, "user": { "type": "object", "properties": { "_id": { "type": "string" }, "username": { "type": "string" }, "token": { "type": "string" } }, "required": ["_id", "username", "token"], "additionalProperties": false } }, "required": ["status"], "definitions": {} } };

package/dist/src/schemas/User.d.ts

@@ -3,11 +3,12 @@ import { UserProfile } from "./UserProfile";
 export interface User {
     _id: string;
     username: string;
+    personalNumber?: string;
     password?: string;
     salt?: string;
     pwdResetStartedAt?: string | null;
     roles: string[];
-    authentificationMethod: "password" | "sms";
+    authentificationMethod: "password" | "sms" | "bankid";
     profile: UserProfile;
     pushNotificationTokens: Array<PushNotificationToken>;
 }

package/dist/src/schemas/UserCreateReq.d.ts

@@ -2,6 +2,7 @@ import { UserProfile } from "./UserProfile";
 export interface UserCreateReq {
     username: string;
     password?: string;
-    authentificationMethod?: "password" | "sms";
+    personalNumber?: string;
+    authentificationMethod?: "password" | "sms" | "bankid";
     profile?: UserProfile;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@flink-app/generic-auth-plugin",
-    "version": "0.12.1-alpha.23",
+    "version": "0.12.1-alpha.27",
     "description": "Flink plugin that provides a generic user authentification solution.",
     "scripts": {
         "test": "echo \"Error: no test specified\"",
@@ -30,5 +30,5 @@
         "ts-node": "^9.1.1",
         "typescript": "5.4.5"
     },
-    "gitHead": "ab25ba2532fd79e5452390591c1899fbe3eae230"
+    "gitHead": "6714d51c8e343b0bdfa82d34dbc205f112f9e3b9"
 }

package/src/coreFunctions.ts

@@ -45,7 +45,7 @@ export async function createUser(
     auth: JwtAuthPlugin,
     username: string,
     password: string,
-    authentificationMethod: "password" | "sms",
+    authentificationMethod: "password" | "sms" | "bankid",
     roles: string[],
     profile: UserProfile,
     createPasswordHashAndSaltMethod?: {
@@ -53,7 +53,8 @@ export async function createUser(
     },
     onUserCreated?: {
         (user: User): Promise<void>;
-    }
+    },
+    personalNumber?: string
 ): Promise<UserCreateRes> {
     if (!roles.includes("user")) roles.push("user");
 
@@ -71,6 +72,17 @@ export async function createUser(
         pushNotificationTokens: [],
     };
 
+    if (personalNumber) {
+        userData.personalNumber = personalNumber;
+    }
+
+    if (authentificationMethod == "bankid") {
+        if (!personalNumber) {
+            log.warn("BankID login requested but no personal number found for user");
+            return { status: "error" };
+        }
+    }
+
     if (authentificationMethod == "password") {
         let passwordAndSalt = null;
         if (createPasswordHashAndSaltMethod != null) {
@@ -205,6 +217,15 @@ export async function loginUser(
             validationToken: token,
         };
     }
+    if (user.authentificationMethod == "bankid") {
+        if (!user.personalNumber) {
+            log.warn("BankID login requested but no personal number found for user");
+            return { status: "failed" };
+        }
+
+        log.warn("BankID login required to be handled in other way, i.e. using flink bankid plugin");
+        return { status: "failed" };
+    }
 
     if (valid) {
         const token = await auth.createToken({ username: username.toLowerCase(), _id: user._id }, user.roles);

package/src/genericAuthContext.ts

@@ -27,13 +27,14 @@ export interface genericAuthContext {
             auth: JwtAuthPlugin,
             username: string,
             password: string,
-            authentificationMethod: "password" | "sms",
+            authentificationMethod: "password" | "sms" | "bankid",
             roles: string[],
             profile: UserProfile,
             createPasswordHashAndSaltMethod?: {
                 (password: string): Promise<{ hash: string; salt: string } | null>;
             },
-            onUserCreated?: (user: User) => Promise<void>
+            onUserCreated?: (user: User) => Promise<void>,
+            personalNumber?: string
         ): Promise<UserCreateRes>;
         changePassword(
             repo: FlinkRepo<any, User>,

package/src/handlers/UserCreate.ts

@@ -5,7 +5,7 @@ import { UserCreateReq } from "../schemas/UserCreateReq";
 import { UserCreateRes } from "../schemas/UserCreateRes";
 
 const userCreateHandler: Handler<FlinkContext<genericAuthContext>, UserCreateReq, UserCreateRes> = async ({ ctx, req, origin }) => {
-    let { password, username, authentificationMethod, profile } = req.body;
+    let { password, username, authentificationMethod, profile, personalNumber } = req.body;
     if (authentificationMethod == null) {
         authentificationMethod = "password";
     }
@@ -36,7 +36,8 @@ const userCreateHandler: Handler<FlinkContext<genericAuthContext>, UserCreateReq
         roles,
         profile,
         (<any>ctx.plugins)[pluginName].createPasswordHashAndSaltMethod,
-        (<any>ctx.plugins)[pluginName].onUserCreated
+        (<any>ctx.plugins)[pluginName].onUserCreated,
+        personalNumber
     );
     if (createUserResponse.status != "success") {
         switch (createUserResponse.status) {

package/src/schemas/User.ts

@@ -4,6 +4,7 @@ import { UserProfile } from "./UserProfile";
 export interface User {
     _id: string;
     username: string;
+    personalNumber?: string;
 
     password?: string;
     salt?: string;
@@ -11,7 +12,7 @@ export interface User {
     pwdResetStartedAt?: string | null;
     roles: string[];
 
-    authentificationMethod: "password" | "sms";
+    authentificationMethod: "password" | "sms" | "bankid";
     profile: UserProfile;
     pushNotificationTokens: Array<PushNotificationToken>;
 }

package/src/schemas/UserCreateReq.ts

@@ -1,8 +1,9 @@
 import { UserProfile } from "./UserProfile";
 
-export interface UserCreateReq{
+export interface UserCreateReq {
     username: string;
     password?: string;
-    authentificationMethod? : "password" | "sms"
-    profile? : UserProfile
-}
+    personalNumber?: string;
+    authentificationMethod?: "password" | "sms" | "bankid";
+    profile?: UserProfile;
+}