@furystack/security 1.0.0

package/dist/models/password-complexity-result.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=password-complexity-result.js.map

package/dist/models/password-complexity-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-complexity-result.js","sourceRoot":"","sources":["../../src/models/password-complexity-result.ts"],"names":[],"mappings":""}

package/dist/models/password-complexity-rule.d.ts

@@ -0,0 +1,6 @@
+import type { PasswordComplexityResult } from './password-complexity-result';
+export interface PasswordComplexityRule {
+    name: string;
+    check: (passwordString: string) => Promise<PasswordComplexityResult>;
+}
+//# sourceMappingURL=password-complexity-rule.d.ts.map

package/dist/models/password-complexity-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-complexity-rule.d.ts","sourceRoot":"","sources":["../../src/models/password-complexity-rule.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAA;AAE5E,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAA;CACrE"}

package/dist/models/password-complexity-rule.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=password-complexity-rule.js.map

package/dist/models/password-complexity-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-complexity-rule.js","sourceRoot":"","sources":["../../src/models/password-complexity-rule.ts"],"names":[],"mappings":""}

package/dist/models/password-credential.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Entry that stores credential info for password login
+ */
+export declare class PasswordCredential {
+    /**
+     * The unique name of the user
+     */
+    userName: string;
+    /**
+     * The hashed password value
+     */
+    passwordHash: string;
+    /**
+     * Salt value for password hashing // TODO
+     */
+    salt: string;
+    /**
+     * The Creation date in ISO String format
+     */
+    creationDate: string;
+}
+//# sourceMappingURL=password-credential.d.ts.map

package/dist/models/password-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-credential.d.ts","sourceRoot":"","sources":["../../src/models/password-credential.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,kBAAkB;IAC7B;;OAEG;IACH,QAAQ,EAAG,MAAM,CAAA;IACjB;;OAEG;IACH,YAAY,EAAG,MAAM,CAAA;IAErB;;OAEG;IACH,IAAI,EAAG,MAAM,CAAA;IAEb;;OAEG;IACH,YAAY,EAAG,MAAM,CAAA;CACtB"}

package/dist/models/password-credential.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordCredential = void 0;
+/**
+ * Entry that stores credential info for password login
+ */
+class PasswordCredential {
+}
+exports.PasswordCredential = PasswordCredential;
+//# sourceMappingURL=password-credential.js.map

package/dist/models/password-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-credential.js","sourceRoot":"","sources":["../../src/models/password-credential.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,MAAa,kBAAkB;CAmB9B;AAnBD,gDAmBC"}

package/dist/models/password-reset-token.d.ts

@@ -0,0 +1,15 @@
+export declare class PasswordResetToken {
+    /**
+     * The related user name
+     */
+    userName: string;
+    /**
+     * The Token value - should be some kind of generated UUID that can be included e.g. in URLs
+     */
+    token: string;
+    /**
+     * The creation date in an ISO datetime format
+     */
+    createdAt: string;
+}
+//# sourceMappingURL=password-reset-token.d.ts.map

package/dist/models/password-reset-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset-token.d.ts","sourceRoot":"","sources":["../../src/models/password-reset-token.ts"],"names":[],"mappings":"AAAA,qBAAa,kBAAkB;IAC7B;;OAEG;IACH,QAAQ,EAAG,MAAM,CAAA;IACjB;;OAEG;IACH,KAAK,EAAG,MAAM,CAAA;IACd;;OAEG;IACH,SAAS,EAAG,MAAM,CAAA;CACnB"}

package/dist/models/password-reset-token.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordResetToken = void 0;
+class PasswordResetToken {
+}
+exports.PasswordResetToken = PasswordResetToken;
+//# sourceMappingURL=password-reset-token.js.map

package/dist/models/password-reset-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset-token.js","sourceRoot":"","sources":["../../src/models/password-reset-token.ts"],"names":[],"mappings":";;;AAAA,MAAa,kBAAkB;CAa9B;AAbD,gDAaC"}

package/dist/password-authenticator.d.ts

@@ -0,0 +1,38 @@
+import { Injector } from '@furystack/inject';
+import { SecurityPolicyManager } from './security-policy-manager';
+import { PasswordCheckResult } from './models';
+export declare class PasswordAuthenticator {
+    private readonly injector;
+    policyManager: SecurityPolicyManager;
+    private readonly getPasswordStore;
+    private readonly getTokenStore;
+    readonly getHasher: () => import("./password-hasher").PasswordHasher;
+    /**
+     * @param userName The User's unique name
+     * @param plainPassword The plain password to check
+     * @returns An object that contains an { isValid } value that indicates if the password is valid
+     */
+    checkPasswordForUser(userName: string, plainPassword: string): Promise<PasswordCheckResult>;
+    /**
+     *
+     * Sets the password for the specific user
+     *
+     * @param userName The user to set the password for
+     * @param lastPassword The last user password
+     * @param plainPassword The password as a plain string
+     */
+    setPasswordForUser(userName: string, lastPassword: string, plainPassword: string): Promise<void>;
+    /**
+     * Resets the password with a Password Reset token entry
+     *
+     * @param resetToken The Reset Token value
+     * @param plainPassword The new password in plain string
+     */
+    resetPasswordForUser(resetToken: string, plainPassword: string): Promise<void>;
+    /**
+     * @param injector The Injector instance
+     * @param policyManager The Password Policy Manager instance
+     */
+    constructor(injector: Injector, policyManager: SecurityPolicyManager);
+}
+//# sourceMappingURL=password-authenticator.d.ts.map

package/dist/password-authenticator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-authenticator.d.ts","sourceRoot":"","sources":["../src/password-authenticator.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAEjE,OAAO,EAAE,mBAAmB,EAA0C,MAAM,UAAU,CAAA;AAGtF,qBACa,qBAAqB;IA2FpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAmB,aAAa,EAAE,qBAAqB;IA1F5F,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CACoD;IAErF,OAAO,CAAC,QAAQ,CAAC,aAAa,CACoD;IAElF,SAAgB,SAAS,mDAAoE;IAE7F;;;;OAIG;IACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAkBxG;;;;;;;OAOG;IACU,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB7G;;;;;OAKG;IACU,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB3F;;;OAGG;gBAC0B,QAAQ,EAAE,QAAQ,EAAS,aAAa,EAAE,qBAAqB;CAC7F"}

package/dist/password-authenticator.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordAuthenticator = void 0;
+const tslib_1 = require("tslib");
+const core_1 = require("@furystack/core");
+const inject_1 = require("@furystack/inject");
+const security_policy_manager_1 = require("./security-policy-manager");
+const errors_1 = require("./errors");
+const models_1 = require("./models");
+const password_complexity_error_1 = require("./errors/password-complexity-error");
+let PasswordAuthenticator = class PasswordAuthenticator {
+    /**
+     * @param injector The Injector instance
+     * @param policyManager The Password Policy Manager instance
+     */
+    constructor(injector, policyManager) {
+        this.injector = injector;
+        this.policyManager = policyManager;
+        this.getPasswordStore = () => this.injector.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+        this.getTokenStore = () => this.injector.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordResetToken, 'token');
+        this.getHasher = () => this.injector.getInstance(this.policyManager.policy.hasher);
+    }
+    /**
+     * @param userName The User's unique name
+     * @param plainPassword The plain password to check
+     * @returns An object that contains an { isValid } value that indicates if the password is valid
+     */
+    async checkPasswordForUser(userName, plainPassword) {
+        const entry = await this.getPasswordStore().get(userName);
+        if (!entry) {
+            return {
+                isValid: false,
+                reason: 'badUsernameOrPassword',
+            };
+        }
+        const result = await this.getHasher().verifyCredential(plainPassword, entry);
+        if (result.isValid && this.policyManager.hasPasswordExpired(entry)) {
+            return {
+                isValid: false,
+                reason: 'passwordExpired',
+            };
+        }
+        return result;
+    }
+    /**
+     *
+     * Sets the password for the specific user
+     *
+     * @param userName The user to set the password for
+     * @param lastPassword The last user password
+     * @param plainPassword The password as a plain string
+     */
+    async setPasswordForUser(userName, lastPassword, plainPassword) {
+        const complexityResult = await this.policyManager.matchPasswordComplexityRules(plainPassword);
+        if (!complexityResult.match) {
+            throw new password_complexity_error_1.PasswordComplexityError(complexityResult.errors);
+        }
+        const lastResult = await this.checkPasswordForUser(userName, lastPassword);
+        if (!lastResult.isValid) {
+            throw new errors_1.UnauthenticatedError();
+        }
+        const store = this.getPasswordStore();
+        const newCredential = await this.getHasher().createCredential(userName, plainPassword);
+        const existing = await store.get(userName);
+        existing && (await store.remove(existing.userName));
+        await store.add(newCredential);
+    }
+    /**
+     * Resets the password with a Password Reset token entry
+     *
+     * @param resetToken The Reset Token value
+     * @param plainPassword The new password in plain string
+     */
+    async resetPasswordForUser(resetToken, plainPassword) {
+        const token = await this.getTokenStore().get(resetToken);
+        if (!token) {
+            throw new errors_1.UnauthenticatedError();
+        }
+        if (this.policyManager.hasTokenExpired(token)) {
+            await this.getTokenStore().remove(resetToken); // clean up token
+            throw new errors_1.UnauthenticatedError();
+        }
+        const complexityResult = await this.policyManager.matchPasswordComplexityRules(plainPassword);
+        if (!complexityResult.match) {
+            throw new password_complexity_error_1.PasswordComplexityError(complexityResult.errors);
+        }
+        const newCredential = await this.getHasher().createCredential(token.userName, plainPassword);
+        const store = this.getPasswordStore();
+        const existing = await store.get(token.userName);
+        existing && (await store.remove(existing.userName));
+        await store.add(newCredential);
+    }
+};
+PasswordAuthenticator = tslib_1.__decorate([
+    (0, inject_1.Injectable)({ lifetime: 'singleton' }),
+    tslib_1.__metadata("design:paramtypes", [inject_1.Injector, security_policy_manager_1.SecurityPolicyManager])
+], PasswordAuthenticator);
+exports.PasswordAuthenticator = PasswordAuthenticator;
+//# sourceMappingURL=password-authenticator.js.map

package/dist/password-authenticator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-authenticator.js","sourceRoot":"","sources":["../src/password-authenticator.ts"],"names":[],"mappings":";;;;AAAA,0CAA8C;AAC9C,8CAAwD;AACxD,uEAAiE;AACjE,qCAA+C;AAC/C,qCAAsF;AACtF,kFAA4E;AAG5E,IAAa,qBAAqB,GAAlC,MAAa,qBAAqB;IAuFhC;;;OAGG;IACH,YAA6B,QAAkB,EAAS,aAAoC;QAA/D,aAAQ,GAAR,QAAQ,CAAU;QAAS,kBAAa,GAAb,aAAa,CAAuB;QA1F3E,qBAAgB,GAAG,GAAG,EAAE,CACvC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;QAEpE,kBAAa,GAAG,GAAG,EAAE,CACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,OAAO,CAAC,CAAA;QAElE,cAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAoFE,CAAC;IAlFhG;;;;OAIG;IACI,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,aAAqB;QACvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACzD,IAAI,CAAC,KAAK,EAAE;YACV,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,uBAAuB;aAChC,CAAA;SACF;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;QAC5E,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE;YAClE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB;aAC1B,CAAA;SACF;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,kBAAkB,CAAC,QAAgB,EAAE,YAAoB,EAAE,aAAqB;QAC3F,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,4BAA4B,CAAC,aAAa,CAAC,CAAA;QAC7F,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE;YAC3B,MAAM,IAAI,mDAAuB,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;SAC3D;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;QAC1E,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;YACvB,MAAM,IAAI,6BAAoB,EAAE,CAAA;SACjC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAA;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;QACtF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC1C,QAAQ,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnD,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,oBAAoB,CAAC,UAAkB,EAAE,aAAqB;QACzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAExD,IAAI,CAAC,KAAK,EAAE;YACV,MAAM,IAAI,6BAAoB,EAAE,CAAA;SACjC;QAED,IAAI,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE;YAC7C,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA,CAAC,iBAAiB;YAC/D,MAAM,IAAI,6BAAoB,EAAE,CAAA;SACjC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,4BAA4B,CAAC,aAAa,CAAC,CAAA;QAC7F,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE;YAC3B,MAAM,IAAI,mDAAuB,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;SAC3D;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;QAC5F,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAA;QACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAChD,QAAQ,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnD,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;CAOF,CAAA;AA5FY,qBAAqB;IADjC,IAAA,mBAAU,EAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;6CA4FG,iBAAQ,EAAwB,+CAAqB;GA3FjF,qBAAqB,CA4FjC;AA5FY,sDAAqB"}

package/dist/password-authenticator.spec.d.ts

@@ -0,0 +1,2 @@
+import './injector-extensions';
+//# sourceMappingURL=password-authenticator.spec.d.ts.map

package/dist/password-authenticator.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-authenticator.spec.d.ts","sourceRoot":"","sources":["../src/password-authenticator.spec.ts"],"names":[],"mappings":"AAGA,OAAO,uBAAuB,CAAA"}

package/dist/password-authenticator.spec.js

@@ -0,0 +1,309 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@furystack/core");
+const inject_1 = require("@furystack/inject");
+const utils_1 = require("@furystack/utils");
+require("./injector-extensions");
+const uuid_1 = require("uuid");
+const models_1 = require("./models");
+const password_authenticator_1 = require("./password-authenticator");
+const password_complexity_rules_1 = require("./password-complexity-rules");
+const security_policy_manager_1 = require("./security-policy-manager");
+const errors_1 = require("./errors");
+describe('PasswordAuthenticator', () => {
+    it('Should be instantiated', () => {
+        (0, utils_1.using)(new inject_1.Injector(), (i) => {
+            const auth = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+            expect(auth).toBeInstanceOf(password_authenticator_1.PasswordAuthenticator);
+        });
+    });
+    it('Should inherit policy from the extension method', () => {
+        (0, utils_1.using)(new inject_1.Injector(), (i) => {
+            i.usePasswordPolicy({
+                passwordComplexityRules: [(0, password_complexity_rules_1.createMinLengthComplexityRule)(3)],
+            });
+            const auth = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+            expect(auth).toBeInstanceOf(password_authenticator_1.PasswordAuthenticator);
+            expect(auth.policyManager.policy.passwordComplexityRules[0].name).toBe('minLength');
+        });
+    });
+    describe('checkPasswordForUser', () => {
+        it('Should return a truthy value for valid username and password', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const password = (0, uuid_1.v4)();
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' })));
+                i.usePasswordPolicy({});
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const entry = await hasher.createCredential(userName, password);
+                await passwordStore.add(entry);
+                const successResult = await authenticator.checkPasswordForUser(userName, password);
+                expect(successResult.isValid).toBeTruthy();
+            });
+        });
+        it('Should return a falsy value for invalid username', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const password = (0, uuid_1.v4)();
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' })));
+                i.usePasswordPolicy({});
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const entry = await hasher.createCredential(userName, password);
+                await passwordStore.add(entry);
+                const failResult = await authenticator.checkPasswordForUser('invalidUsername', password);
+                expect(failResult.isValid).toBeFalsy();
+                expect(failResult.reason).toBe('badUsernameOrPassword');
+            });
+        });
+        it('Should return a falsy value for invalid password', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const password = (0, uuid_1.v4)();
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' })));
+                i.usePasswordPolicy({});
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const entry = await hasher.createCredential(userName, password);
+                await passwordStore.add(entry);
+                const failResult = await authenticator.checkPasswordForUser(userName, 'someInvalidPassword');
+                expect(failResult.isValid).toBeFalsy();
+                expect(failResult.reason).toBe('badUsernameOrPassword');
+            });
+        });
+        it('Should return a falsy value for an expired password', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const password = (0, uuid_1.v4)();
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' })));
+                i.usePasswordPolicy({ passwordExpirationDays: 1 });
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const entry = await hasher.createCredential(userName, password);
+                const creationDate = new Date();
+                creationDate.setDate(creationDate.getDate() - 2);
+                entry.creationDate = creationDate.toISOString();
+                await passwordStore.add(entry);
+                const failResult = await authenticator.checkPasswordForUser(userName, password);
+                expect(failResult.isValid).toBeFalsy();
+                expect(failResult.reason).toBe('passwordExpired');
+            });
+        });
+    });
+    describe('setPasswordForUser', () => {
+        it('Should be able to set the password for the user using the last password', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const lastPassword = (0, uuid_1.v4)();
+                const password = (0, uuid_1.v4)();
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' })));
+                i.usePasswordPolicy({});
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const policyManager = i.getInstance(security_policy_manager_1.SecurityPolicyManager);
+                const pmSpy = jest.spyOn(policyManager, 'matchPasswordComplexityRules');
+                const entry = await hasher.createCredential(userName, lastPassword);
+                await passwordStore.add(entry);
+                await authenticator.setPasswordForUser(userName, lastPassword, password);
+                expect(pmSpy).toBeCalled();
+                const entryCount = await passwordStore.count({ userName: { $eq: userName } });
+                expect(entryCount).toBe(1); // old entry should be removed
+                const successResult = await authenticator.checkPasswordForUser(userName, password);
+                expect(successResult.isValid).toBeTruthy();
+                // Password updated, cannot use the last password
+                const failResult = await authenticator.checkPasswordForUser(userName, lastPassword);
+                expect(failResult.isValid).toBeFalsy();
+                expect(failResult.reason).toBe('badUsernameOrPassword');
+            });
+        });
+        it('Should throw PasswordComplexityError if the complexity rules are not respected', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const lastPassword = (0, uuid_1.v4)();
+                const password = '';
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' })));
+                i.usePasswordPolicy({ passwordComplexityRules: [(0, password_complexity_rules_1.createMinLengthComplexityRule)(3)] });
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const policyManager = i.getInstance(security_policy_manager_1.SecurityPolicyManager);
+                const pmSpy = jest.spyOn(policyManager, 'matchPasswordComplexityRules');
+                const entry = await hasher.createCredential(userName, lastPassword);
+                await passwordStore.add(entry);
+                await expect(authenticator.setPasswordForUser(userName, lastPassword, password)).rejects.toThrowError(errors_1.PasswordComplexityError);
+                expect(pmSpy).toBeCalled();
+                const entryCount = await passwordStore.count({ userName: { $eq: userName } });
+                expect(entryCount).toBe(1); // old entry should be removed
+                const failResult = await authenticator.checkPasswordForUser(userName, password);
+                // Password NOT updated, can use the last password
+                expect(failResult.isValid).toBeFalsy();
+                expect(failResult.reason).toBe('badUsernameOrPassword');
+                // Password NOT updated, cannot use the new password
+                const successResult = await authenticator.checkPasswordForUser(userName, lastPassword);
+                expect(successResult.isValid).toBeTruthy();
+            });
+        });
+        it('Should throw UnauthenticatedError if the last password is not valid', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const lastPassword = (0, uuid_1.v4)();
+                const password = (0, uuid_1.v4)();
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' })));
+                i.usePasswordPolicy();
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const policyManager = i.getInstance(security_policy_manager_1.SecurityPolicyManager);
+                const pmSpy = jest.spyOn(policyManager, 'matchPasswordComplexityRules');
+                const entry = await hasher.createCredential(userName, lastPassword);
+                await passwordStore.add(entry);
+                await expect(authenticator.setPasswordForUser(userName, 'someBadLastPassword', password)).rejects.toThrowError(errors_1.UnauthenticatedError);
+                expect(pmSpy).toBeCalled();
+                const entryCount = await passwordStore.count({ userName: { $eq: userName } });
+                expect(entryCount).toBe(1); // old entry should be removed
+                const failResult = await authenticator.checkPasswordForUser(userName, password);
+                // Password NOT updated, can use the last password
+                expect(failResult.isValid).toBeFalsy();
+                expect(failResult.reason).toBe('badUsernameOrPassword');
+                // Password NOT updated, cannot use the new password
+                const successResult = await authenticator.checkPasswordForUser(userName, lastPassword);
+                expect(successResult.isValid).toBeTruthy();
+            });
+        });
+    });
+    describe('resetPasswordForUser', () => {
+        it('Should reset the password with the valid token', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const lastPassword = (0, uuid_1.v4)();
+                const password = (0, uuid_1.v4)();
+                const token = (0, uuid_1.v4)();
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' }))
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordResetToken, primaryKey: 'token' })));
+                i.usePasswordPolicy();
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const resetTokenStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordResetToken, 'token');
+                const entry = await hasher.createCredential(userName, lastPassword);
+                await passwordStore.add(entry);
+                await resetTokenStore.add({ userName, createdAt: new Date().toISOString(), token });
+                await authenticator.resetPasswordForUser(token, password);
+                const successResult = await authenticator.checkPasswordForUser(userName, password);
+                expect(successResult.isValid).toBeTruthy();
+                // Password updated, cannot use the last password
+                const failResult = await authenticator.checkPasswordForUser(userName, lastPassword);
+                expect(failResult.isValid).toBeFalsy();
+                expect(failResult.reason).toBe('badUsernameOrPassword');
+            });
+        });
+        it('Should throw PasswordComplexityError if the complexity rules are not respected', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const lastPassword = (0, uuid_1.v4)();
+                const password = '';
+                const token = (0, uuid_1.v4)();
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' }))
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordResetToken, primaryKey: 'token' })));
+                i.usePasswordPolicy({ passwordComplexityRules: [(0, password_complexity_rules_1.createMinLengthComplexityRule)(3)] });
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const resetTokenStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordResetToken, 'token');
+                const entry = await hasher.createCredential(userName, lastPassword);
+                await passwordStore.add(entry);
+                await resetTokenStore.add({ userName, createdAt: new Date().toISOString(), token });
+                await expect(authenticator.resetPasswordForUser(token, password)).rejects.toThrowError(errors_1.PasswordComplexityError);
+                const successResult = await authenticator.checkPasswordForUser(userName, lastPassword);
+                expect(successResult.isValid).toBeTruthy();
+                // Password updated, cannot use the last password
+                const failResult = await authenticator.checkPasswordForUser(userName, password);
+                expect(failResult.isValid).toBeFalsy();
+                expect(failResult.reason).toBe('badUsernameOrPassword');
+            });
+        });
+        it('Should throw UnauthenticatedError if the token is not valid', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const lastPassword = (0, uuid_1.v4)();
+                const password = '';
+                const token = (0, uuid_1.v4)();
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' }))
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordResetToken, primaryKey: 'token' })));
+                i.usePasswordPolicy();
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const resetTokenStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordResetToken, 'token');
+                const entry = await hasher.createCredential(userName, lastPassword);
+                await passwordStore.add(entry);
+                await resetTokenStore.add({ userName, createdAt: new Date().toISOString(), token });
+                await expect(authenticator.resetPasswordForUser('someBadToken', password)).rejects.toThrowError(errors_1.UnauthenticatedError);
+                const successResult = await authenticator.checkPasswordForUser(userName, lastPassword);
+                expect(successResult.isValid).toBeTruthy();
+                // Password updated, cannot use the last password
+                const failResult = await authenticator.checkPasswordForUser(userName, password);
+                expect(failResult.isValid).toBeFalsy();
+                expect(failResult.reason).toBe('badUsernameOrPassword');
+            });
+        });
+        it('Should throw UnauthenticatedError and clean up token if the token has been expired', async () => {
+            await (0, utils_1.usingAsync)(new inject_1.Injector(), async (i) => {
+                const userName = (0, uuid_1.v4)();
+                const lastPassword = (0, uuid_1.v4)();
+                const password = '';
+                const token = (0, uuid_1.v4)();
+                i.setupStores((sm) => sm
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordCredential, primaryKey: 'userName' }))
+                    .addStore(new core_1.InMemoryStore({ model: core_1.User, primaryKey: 'username' }))
+                    .addStore(new core_1.InMemoryStore({ model: models_1.PasswordResetToken, primaryKey: 'token' })));
+                i.usePasswordPolicy({ resetTokenExpirationSeconds: 1 });
+                const authenticator = i.getInstance(password_authenticator_1.PasswordAuthenticator);
+                const hasher = authenticator.getHasher();
+                const passwordStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
+                const resetTokenStore = i.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordResetToken, 'token');
+                const entry = await hasher.createCredential(userName, lastPassword);
+                await passwordStore.add(entry);
+                const creationDate = new Date();
+                creationDate.setDate(creationDate.getDate() - 2);
+                await resetTokenStore.add({ userName, createdAt: creationDate.toISOString(), token });
+                await expect(authenticator.resetPasswordForUser(token, password)).rejects.toThrowError(errors_1.UnauthenticatedError);
+                const successResult = await authenticator.checkPasswordForUser(userName, lastPassword);
+                expect(successResult.isValid).toBeTruthy();
+                // Password updated, cannot use the last password
+                const failResult = await authenticator.checkPasswordForUser(userName, password);
+                expect(failResult.isValid).toBeFalsy();
+                expect(failResult.reason).toBe('badUsernameOrPassword');
+                const tokenCount = await resetTokenStore.count();
+                expect(tokenCount).toBe(0);
+            });
+        });
+    });
+});
+//# sourceMappingURL=password-authenticator.spec.js.map

package/dist/password-authenticator.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-authenticator.spec.js","sourceRoot":"","sources":["../src/password-authenticator.spec.ts"],"names":[],"mappings":";;AAAA,0CAAmE;AACnE,8CAA4C;AAC5C,4CAAoD;AACpD,iCAA8B;AAC9B,+BAAyB;AACzB,qCAA4F;AAC5F,qEAAgE;AAChE,2EAA2E;AAC3E,uEAAiE;AACjE,qCAAwE;AAExE,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,IAAA,aAAK,EAAC,IAAI,iBAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;YACjD,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,8CAAqB,CAAC,CAAA;QACpD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,IAAA,aAAK,EAAC,IAAI,iBAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAC1B,CAAC,CAAC,iBAAiB,CAAC;gBAClB,uBAAuB,EAAE,CAAC,IAAA,yDAA6B,EAAC,CAAC,CAAC,CAAC;aAC5D,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;YACjD,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,8CAAqB,CAAC,CAAA;YAClD,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACrF,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CACxE,CAAA;gBACD,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;gBACvB,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAE7F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC/D,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAE9B,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAClF,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAA;YAC5C,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CACxE,CAAA;gBACD,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;gBACvB,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAE7F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC/D,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAE9B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAA;gBACxF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,CAAE,UAAwC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;YACxF,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CACxE,CAAA;gBACD,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;gBACvB,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAE7F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC/D,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAE9B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAA;gBAC5F,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,CAAE,UAAwC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;YACxF,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CACxE,CAAA;gBACD,CAAC,CAAC,iBAAiB,CAAC,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAC,CAAA;gBAClD,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAE7F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAE/D,MAAM,YAAY,GAAG,IAAI,IAAI,EAAE,CAAA;gBAC/B,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;gBAEhD,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC,WAAW,EAAE,CAAA;gBAE/C,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAE9B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC/E,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,CAAE,UAAwC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YAClF,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;YACvF,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,YAAY,GAAG,IAAA,SAAE,GAAE,CAAA;gBACzB,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CACxE,CAAA;gBACD,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;gBACvB,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAC7F,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,+CAAqB,CAAC,CAAA;gBAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAA;gBAEvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBAEnE,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAC9B,MAAM,aAAa,CAAC,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;gBAExE,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAA;gBAE1B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;gBAE7E,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,8BAA8B;gBAEzD,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAClF,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAA;gBAE1C,iDAAiD;gBACjD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACnF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,CAAE,UAAwC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;YACxF,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;YAC9F,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,YAAY,GAAG,IAAA,SAAE,GAAE,CAAA;gBACzB,MAAM,QAAQ,GAAG,EAAE,CAAA;gBACnB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CACxE,CAAA;gBACD,CAAC,CAAC,iBAAiB,CAAC,EAAE,uBAAuB,EAAE,CAAC,IAAA,yDAA6B,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBACpF,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAC7F,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,+CAAqB,CAAC,CAAA;gBAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAA;gBAEvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBAEnE,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAE9B,MAAM,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CACnG,gCAAuB,CACxB,CAAA;gBAED,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAA;gBAE1B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;gBAE7E,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,8BAA8B;gBAEzD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC/E,kDAAkD;gBAClD,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,CAAE,UAAwC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;gBAEtF,oDAAoD;gBACpD,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACtF,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAA;YAC5C,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,YAAY,GAAG,IAAA,SAAE,GAAE,CAAA;gBACzB,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CACxE,CAAA;gBACD,CAAC,CAAC,iBAAiB,EAAE,CAAA;gBACrB,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAC7F,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,+CAAqB,CAAC,CAAA;gBAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAA;gBAEvE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBAEnE,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAE9B,MAAM,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAC5G,6BAAoB,CACrB,CAAA;gBAED,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAA;gBAE1B,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;gBAE7E,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,8BAA8B;gBAEzD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC/E,kDAAkD;gBAClD,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,CAAE,UAAwC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;gBAEtF,oDAAoD;gBACpD,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACtF,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAA;YAC5C,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,YAAY,GAAG,IAAA,SAAE,GAAE,CAAA;gBACzB,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,KAAK,GAAG,IAAA,SAAE,GAAE,CAAA;gBAClB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBACpE,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CACnF,CAAA;gBACD,CAAC,CAAC,iBAAiB,EAAE,CAAA;gBACrB,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAC7F,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,OAAO,CAAC,CAAA;gBAE5F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACnE,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAC9B,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;gBAEnF,MAAM,aAAa,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;gBAEzD,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAClF,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAA;gBAE1C,iDAAiD;gBACjD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACnF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,CAAE,UAAwC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;YACxF,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;YAC9F,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,YAAY,GAAG,IAAA,SAAE,GAAE,CAAA;gBACzB,MAAM,QAAQ,GAAG,EAAE,CAAA;gBACnB,MAAM,KAAK,GAAG,IAAA,SAAE,GAAE,CAAA;gBAClB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBACpE,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CACnF,CAAA;gBACD,CAAC,CAAC,iBAAiB,CAAC,EAAE,uBAAuB,EAAE,CAAC,IAAA,yDAA6B,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBACpF,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAC7F,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,OAAO,CAAC,CAAA;gBAE5F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACnE,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAC9B,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;gBAEnF,MAAM,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,gCAAuB,CAAC,CAAA;gBAC/G,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACtF,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAA;gBAE1C,iDAAiD;gBACjD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC/E,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,CAAE,UAAwC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;YACxF,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,YAAY,GAAG,IAAA,SAAE,GAAE,CAAA;gBACzB,MAAM,QAAQ,GAAG,EAAE,CAAA;gBACnB,MAAM,KAAK,GAAG,IAAA,SAAE,GAAE,CAAA;gBAClB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBACpE,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CACnF,CAAA;gBACD,CAAC,CAAC,iBAAiB,EAAE,CAAA;gBACrB,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAC7F,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,OAAO,CAAC,CAAA;gBAE5F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACnE,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAC9B,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;gBAEnF,MAAM,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAC7F,6BAAoB,CACrB,CAAA;gBACD,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACtF,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAA;gBAE1C,iDAAiD;gBACjD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC/E,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,CAAE,UAAwC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;YACxF,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;YAClG,MAAM,IAAA,kBAAU,EAAC,IAAI,iBAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,QAAQ,GAAG,IAAA,SAAE,GAAE,CAAA;gBACrB,MAAM,YAAY,GAAG,IAAA,SAAE,GAAE,CAAA;gBACzB,MAAM,QAAQ,GAAG,EAAE,CAAA;gBACnB,MAAM,KAAK,GAAG,IAAA,SAAE,GAAE,CAAA;gBAClB,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CACnB,EAAE;qBACC,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBAClF,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,WAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;qBACpE,QAAQ,CAAC,IAAI,oBAAa,CAAC,EAAE,KAAK,EAAE,2BAAkB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CACnF,CAAA;gBACD,CAAC,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,EAAE,CAAC,EAAE,CAAC,CAAA;gBACvD,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,8CAAqB,CAAC,CAAA;gBAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,EAAE,CAAA;gBACxC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;gBAC7F,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,OAAO,CAAC,CAAA;gBAE5F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACnE,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBAE9B,MAAM,YAAY,GAAG,IAAI,IAAI,EAAE,CAAA;gBAC/B,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;gBAEhD,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;gBAErF,MAAM,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,6BAAoB,CAAC,CAAA;gBAC5G,MAAM,aAAa,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;gBACtF,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAA;gBAE1C,iDAAiD;gBACjD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;gBAC/E,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,CAAE,UAAwC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;gBAEtF,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAA;gBAChD,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC5B,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/password-complexity-rules/contains-lowercase.d.ts

@@ -0,0 +1,7 @@
+import { PasswordComplexityRule } from '../models';
+/**
+ * @param lowerCaseCount The minimum lower case characters length
+ * @returns The created Password Policy object
+ */
+export declare const createContainsLowercasePolicy: (lowerCaseCount: number) => PasswordComplexityRule;
+//# sourceMappingURL=contains-lowercase.d.ts.map

package/dist/password-complexity-rules/contains-lowercase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contains-lowercase.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/contains-lowercase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAElD;;;GAGG;AACH,eAAO,MAAM,6BAA6B,mBAAoB,MAAM,KAAG,sBAoBrE,CAAA"}