@furystack/security 1.0.0

package/dist/password-complexity-rules/contains-lowercase.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createContainsLowercasePolicy = void 0;
+/**
+ * @param lowerCaseCount The minimum lower case characters length
+ * @returns The created Password Policy object
+ */
+const createContainsLowercasePolicy = (lowerCaseCount) => ({
+    name: 'containsLowercase',
+    check: async (passwordString) => {
+        const actualLowerCaseCount = passwordString.length >= lowerCaseCount
+            ? passwordString
+                .normalize('NFD')
+                .replace(/\p{Diacritic}/gu, '')
+                .replace(/[^a-z]/g, '').length
+            : 0;
+        const success = actualLowerCaseCount >= lowerCaseCount;
+        if (success) {
+            return { success };
+        }
+        return {
+            success,
+            message: `The password should contain at least ${lowerCaseCount} lower case characters`,
+            rule: 'containsLowercase',
+        };
+    },
+});
+exports.createContainsLowercasePolicy = createContainsLowercasePolicy;
+//# sourceMappingURL=contains-lowercase.js.map

package/dist/password-complexity-rules/contains-lowercase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contains-lowercase.js","sourceRoot":"","sources":["../../src/password-complexity-rules/contains-lowercase.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACI,MAAM,6BAA6B,GAAG,CAAC,cAAsB,EAA0B,EAAE,CAAC,CAAC;IAChG,IAAI,EAAE,mBAA4B;IAClC,KAAK,EAAE,KAAK,EAAE,cAAsB,EAAE,EAAE;QACtC,MAAM,oBAAoB,GACxB,cAAc,CAAC,MAAM,IAAI,cAAc;YACrC,CAAC,CAAC,cAAc;iBACX,SAAS,CAAC,KAAK,CAAC;iBAChB,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;iBAC9B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM;YAClC,CAAC,CAAC,CAAC,CAAA;QACP,MAAM,OAAO,GAAG,oBAAoB,IAAI,cAAc,CAAA;QACtD,IAAI,OAAO,EAAE;YACX,OAAO,EAAE,OAAO,EAAE,CAAA;SACnB;QACD,OAAO;YACL,OAAO;YACP,OAAO,EAAE,wCAAwC,cAAc,wBAAwB;YACvF,IAAI,EAAE,mBAAmB;SAC1B,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AApBW,QAAA,6BAA6B,iCAoBxC"}

package/dist/password-complexity-rules/contains-lowercase.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contains-lowercase.spec.d.ts.map

package/dist/password-complexity-rules/contains-lowercase.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contains-lowercase.spec.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/contains-lowercase.spec.ts"],"names":[],"mappings":""}

package/dist/password-complexity-rules/contains-lowercase.spec.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const contains_lowercase_1 = require("./contains-lowercase");
+describe('Contains-lowercase', () => {
+    it('Should fail if the password is shorter than expected', async () => {
+        const policy = (0, contains_lowercase_1.createContainsLowercasePolicy)(3);
+        const result = await policy.check('');
+        expect(result.success).toBe(false);
+        expect(result.message).toBe('The password should contain at least 3 lower case characters');
+    });
+    it('Should fail if the password does not contain enough lowercase chars', async () => {
+        const policy = (0, contains_lowercase_1.createContainsLowercasePolicy)(3);
+        const result = await policy.check('ASD12345(=/!+');
+        expect(result.success).toBe(false);
+        expect(result.message).toBe('The password should contain at least 3 lower case characters');
+    });
+    it('Should succeed if the password contains enough lowercase chars', async () => {
+        const policy = (0, contains_lowercase_1.createContainsLowercasePolicy)(3);
+        const result = await policy.check('asd');
+        expect(result.success).toBe(true);
+    });
+    it('Should succeed if the password contains enough lowercase chars supporting special ones', async () => {
+        const policy = (0, contains_lowercase_1.createContainsLowercasePolicy)(3);
+        const result = await policy.check('éáő');
+        expect(result.success).toBe(true);
+    });
+});
+//# sourceMappingURL=contains-lowercase.spec.js.map

package/dist/password-complexity-rules/contains-lowercase.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contains-lowercase.spec.js","sourceRoot":"","sources":["../../src/password-complexity-rules/contains-lowercase.spec.ts"],"names":[],"mappings":";;AACA,6DAAoE;AAEpE,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,IAAA,kDAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAE,MAAyC,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7D,8DAA8D,CAC/D,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAG,IAAA,kDAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;QAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAE,MAAyC,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7D,8DAA8D,CAC/D,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,IAAA,kDAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,MAAM,GAAG,IAAA,kDAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/password-complexity-rules/contains-uppercase.d.ts

@@ -0,0 +1,7 @@
+import { PasswordComplexityRule } from '../models';
+/**
+ * @param upperCaseCount The minimum upper case characters length
+ * @returns The created Password Policy object
+ */
+export declare const createContainsUppercasePolicy: (upperCaseCount: number) => PasswordComplexityRule;
+//# sourceMappingURL=contains-uppercase.d.ts.map

package/dist/password-complexity-rules/contains-uppercase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contains-uppercase.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/contains-uppercase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAElD;;;GAGG;AACH,eAAO,MAAM,6BAA6B,mBAAoB,MAAM,KAAG,sBAiBrE,CAAA"}

package/dist/password-complexity-rules/contains-uppercase.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createContainsUppercasePolicy = void 0;
+/**
+ * @param upperCaseCount The minimum upper case characters length
+ * @returns The created Password Policy object
+ */
+const createContainsUppercasePolicy = (upperCaseCount) => ({
+    name: 'containsUppercase',
+    check: async (passwordString) => {
+        const actualUpperCaseCount = passwordString
+            .normalize('NFD')
+            .replace(/\p{Diacritic}/gu, '')
+            .replace(/[^A-Z]/g, '').length;
+        const success = actualUpperCaseCount >= upperCaseCount;
+        if (success) {
+            return { success };
+        }
+        return {
+            success,
+            message: `The password should contain at least ${upperCaseCount} upper case characters`,
+            rule: 'containsUppercase',
+        };
+    },
+});
+exports.createContainsUppercasePolicy = createContainsUppercasePolicy;
+//# sourceMappingURL=contains-uppercase.js.map

package/dist/password-complexity-rules/contains-uppercase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contains-uppercase.js","sourceRoot":"","sources":["../../src/password-complexity-rules/contains-uppercase.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACI,MAAM,6BAA6B,GAAG,CAAC,cAAsB,EAA0B,EAAE,CAAC,CAAC;IAChG,IAAI,EAAE,mBAA4B;IAClC,KAAK,EAAE,KAAK,EAAE,cAAsB,EAAE,EAAE;QACtC,MAAM,oBAAoB,GAAG,cAAc;aACxC,SAAS,CAAC,KAAK,CAAC;aAChB,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;aAC9B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,CAAA;QAChC,MAAM,OAAO,GAAG,oBAAoB,IAAI,cAAc,CAAA;QACtD,IAAI,OAAO,EAAE;YACX,OAAO,EAAE,OAAO,EAAE,CAAA;SACnB;QACD,OAAO;YACL,OAAO;YACP,OAAO,EAAE,wCAAwC,cAAc,wBAAwB;YACvF,IAAI,EAAE,mBAAmB;SAC1B,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAjBW,QAAA,6BAA6B,iCAiBxC"}

package/dist/password-complexity-rules/contains-uppercase.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contains-uppercase.spec.d.ts.map

package/dist/password-complexity-rules/contains-uppercase.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contains-uppercase.spec.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/contains-uppercase.spec.ts"],"names":[],"mappings":""}

package/dist/password-complexity-rules/contains-uppercase.spec.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const contains_uppercase_1 = require("./contains-uppercase");
+describe('Contains-uppercase', () => {
+    it('Should fail if the password is shorter than expected', async () => {
+        const policy = (0, contains_uppercase_1.createContainsUppercasePolicy)(3);
+        const result = await policy.check('');
+        expect(result.success).toBe(false);
+        expect(result.message).toBe('The password should contain at least 3 upper case characters');
+    });
+    it('Should fail if the password does not contain enough lowercase chars', async () => {
+        const policy = (0, contains_uppercase_1.createContainsUppercasePolicy)(3);
+        const result = await policy.check('asd12345(=/!+');
+        expect(result.success).toBe(false);
+        expect(result.message).toBe('The password should contain at least 3 upper case characters');
+    });
+    it('Should succeed if the password contains enough lowercase chars', async () => {
+        const policy = (0, contains_uppercase_1.createContainsUppercasePolicy)(3);
+        const result = await policy.check('ASD');
+        expect(result.success).toBe(true);
+    });
+    it('Should succeed if the password contains enough lowercase chars supporting special ones', async () => {
+        const policy = (0, contains_uppercase_1.createContainsUppercasePolicy)(3);
+        const result = await policy.check('ÉÁÍ');
+        expect(result.success).toBe(true);
+    });
+});
+//# sourceMappingURL=contains-uppercase.spec.js.map

package/dist/password-complexity-rules/contains-uppercase.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contains-uppercase.spec.js","sourceRoot":"","sources":["../../src/password-complexity-rules/contains-uppercase.spec.ts"],"names":[],"mappings":";;AACA,6DAAoE;AAEpE,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,IAAA,kDAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAE,MAAyC,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7D,8DAA8D,CAC/D,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAG,IAAA,kDAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;QAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAE,MAAyC,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7D,8DAA8D,CAC/D,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,GAAG,IAAA,kDAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,MAAM,GAAG,IAAA,kDAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/password-complexity-rules/index.d.ts

@@ -0,0 +1,5 @@
+export * from './contains-lowercase';
+export * from './contains-uppercase';
+export * from './max-length';
+export * from './min-length';
+//# sourceMappingURL=index.d.ts.map

package/dist/password-complexity-rules/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAA;AACpC,cAAc,sBAAsB,CAAA;AACpC,cAAc,cAAc,CAAA;AAC5B,cAAc,cAAc,CAAA"}

package/dist/password-complexity-rules/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./contains-lowercase"), exports);
+tslib_1.__exportStar(require("./contains-uppercase"), exports);
+tslib_1.__exportStar(require("./max-length"), exports);
+tslib_1.__exportStar(require("./min-length"), exports);
+//# sourceMappingURL=index.js.map

package/dist/password-complexity-rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/password-complexity-rules/index.ts"],"names":[],"mappings":";;;AAAA,+DAAoC;AACpC,+DAAoC;AACpC,uDAA4B;AAC5B,uDAA4B"}

package/dist/password-complexity-rules/max-length.d.ts

@@ -0,0 +1,7 @@
+import type { PasswordComplexityRule } from '../models';
+/**
+ * @param maxLength The maximum password length
+ * @returns The created Password Policy object
+ */
+export declare const createMaxLengthComplexityRule: (maxLength: number) => PasswordComplexityRule;
+//# sourceMappingURL=max-length.d.ts.map

package/dist/password-complexity-rules/max-length.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"max-length.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/max-length.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAEvD;;;GAGG;AACH,eAAO,MAAM,6BAA6B,cAAe,MAAM,KAAG,sBAShE,CAAA"}

package/dist/password-complexity-rules/max-length.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMaxLengthComplexityRule = void 0;
+/**
+ * @param maxLength The maximum password length
+ * @returns The created Password Policy object
+ */
+const createMaxLengthComplexityRule = (maxLength) => ({
+    name: 'maxLength',
+    check: async (passwordString) => {
+        const success = passwordString.length <= maxLength;
+        if (success) {
+            return { success };
+        }
+        return { success, message: `The password has to be maximum ${maxLength} character length`, rule: 'maxLength' };
+    },
+});
+exports.createMaxLengthComplexityRule = createMaxLengthComplexityRule;
+//# sourceMappingURL=max-length.js.map

package/dist/password-complexity-rules/max-length.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"max-length.js","sourceRoot":"","sources":["../../src/password-complexity-rules/max-length.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACI,MAAM,6BAA6B,GAAG,CAAC,SAAiB,EAA0B,EAAE,CAAC,CAAC;IAC3F,IAAI,EAAE,WAAoB;IAC1B,KAAK,EAAE,KAAK,EAAE,cAAsB,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,IAAI,SAAS,CAAA;QAClD,IAAI,OAAO,EAAE;YACX,OAAO,EAAE,OAAO,EAAE,CAAA;SACnB;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,kCAAkC,SAAS,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;IAChH,CAAC;CACF,CAAC,CAAA;AATW,QAAA,6BAA6B,iCASxC"}

package/dist/password-complexity-rules/max-length.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=max-length.spec.d.ts.map

package/dist/password-complexity-rules/max-length.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"max-length.spec.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/max-length.spec.ts"],"names":[],"mappings":""}

package/dist/password-complexity-rules/max-length.spec.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const max_length_1 = require("./max-length");
+describe('max-length', () => {
+    it('Should fail if the password is longer than expected', async () => {
+        const policy = (0, max_length_1.createMaxLengthComplexityRule)(3);
+        const result = await policy.check('asdasd123');
+        expect(result.success).toBe(false);
+        expect(result.message).toBe('The password has to be maximum 3 character length');
+    });
+    it('Should fail if the password does not contain enough lowercase chars', async () => {
+        const policy = (0, max_length_1.createMaxLengthComplexityRule)(3);
+        const result = await policy.check('asd');
+        expect(result.success).toBe(true);
+    });
+});
+//# sourceMappingURL=max-length.spec.js.map

package/dist/password-complexity-rules/max-length.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"max-length.spec.js","sourceRoot":"","sources":["../../src/password-complexity-rules/max-length.spec.ts"],"names":[],"mappings":";;AACA,6CAA4D;AAE5D,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,IAAA,0CAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAE,MAAyC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAA;IACtH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAG,IAAA,0CAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/password-complexity-rules/min-length.d.ts

@@ -0,0 +1,7 @@
+import type { PasswordComplexityRule } from '../models';
+/**
+ * @param minLength The minimum password length
+ * @returns The created Password Policy object
+ */
+export declare const createMinLengthComplexityRule: (minLength: number) => PasswordComplexityRule;
+//# sourceMappingURL=min-length.d.ts.map

package/dist/password-complexity-rules/min-length.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"min-length.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/min-length.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAEvD;;;GAGG;AACH,eAAO,MAAM,6BAA6B,cAAe,MAAM,KAAG,sBAShE,CAAA"}

package/dist/password-complexity-rules/min-length.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMinLengthComplexityRule = void 0;
+/**
+ * @param minLength The minimum password length
+ * @returns The created Password Policy object
+ */
+const createMinLengthComplexityRule = (minLength) => ({
+    name: 'minLength',
+    check: async (passwordString) => {
+        const success = passwordString.length >= minLength;
+        if (success) {
+            return { success };
+        }
+        return { success, message: `The password has to be at least ${minLength} character length`, rule: 'minLength' };
+    },
+});
+exports.createMinLengthComplexityRule = createMinLengthComplexityRule;
+//# sourceMappingURL=min-length.js.map

package/dist/password-complexity-rules/min-length.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"min-length.js","sourceRoot":"","sources":["../../src/password-complexity-rules/min-length.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACI,MAAM,6BAA6B,GAAG,CAAC,SAAiB,EAA0B,EAAE,CAAC,CAAC;IAC3F,IAAI,EAAE,WAAoB;IAC1B,KAAK,EAAE,KAAK,EAAE,cAAsB,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,IAAI,SAAS,CAAA;QAClD,IAAI,OAAO,EAAE;YACX,OAAO,EAAE,OAAO,EAAE,CAAA;SACnB;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,mCAAmC,SAAS,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAA;IACjH,CAAC;CACF,CAAC,CAAA;AATW,QAAA,6BAA6B,iCASxC"}

package/dist/password-complexity-rules/min-length.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=min-length.spec.d.ts.map

package/dist/password-complexity-rules/min-length.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"min-length.spec.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/min-length.spec.ts"],"names":[],"mappings":""}

package/dist/password-complexity-rules/min-length.spec.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const min_length_1 = require("./min-length");
+describe('min-length', () => {
+    it('Should fail if the password is shorter than expected', async () => {
+        const policy = (0, min_length_1.createMinLengthComplexityRule)(3);
+        const result = await policy.check('');
+        expect(result.success).toBe(false);
+        expect(result.message).toBe('The password has to be at least 3 character length');
+    });
+    it('Should fail if the password does not contain enough lowercase chars', async () => {
+        const policy = (0, min_length_1.createMinLengthComplexityRule)(3);
+        const result = await policy.check('asd12345(=/!+');
+        expect(result.success).toBe(true);
+    });
+});
+//# sourceMappingURL=min-length.spec.js.map

package/dist/password-complexity-rules/min-length.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"min-length.spec.js","sourceRoot":"","sources":["../../src/password-complexity-rules/min-length.spec.ts"],"names":[],"mappings":";;AACA,6CAA4D;AAE5D,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,IAAA,0CAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAE,MAAyC,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7D,oDAAoD,CACrD,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,GAAG,IAAA,0CAA6B,EAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;QAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/password-hasher.d.ts

@@ -0,0 +1,6 @@
+import { PasswordCheckResult, PasswordCredential } from './models';
+export declare class PasswordHasher {
+    createCredential(_userName: string, _password: string): Promise<PasswordCredential>;
+    verifyCredential(_password: string, _credential: PasswordCredential): Promise<PasswordCheckResult>;
+}
+//# sourceMappingURL=password-hasher.d.ts.map

package/dist/password-hasher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-hasher.d.ts","sourceRoot":"","sources":["../src/password-hasher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAElE,qBACa,cAAc;IAClB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAInF,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAG1G"}

package/dist/password-hasher.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordHasher = void 0;
+const tslib_1 = require("tslib");
+const inject_1 = require("@furystack/inject");
+let PasswordHasher = class PasswordHasher {
+    createCredential(_userName, _password) {
+        throw Error('Set up hasher - TODO');
+    }
+    verifyCredential(_password, _credential) {
+        throw Error('Set up hasher - TODO');
+    }
+};
+PasswordHasher = tslib_1.__decorate([
+    (0, inject_1.Injectable)({ lifetime: 'singleton' })
+], PasswordHasher);
+exports.PasswordHasher = PasswordHasher;
+//# sourceMappingURL=password-hasher.js.map

package/dist/password-hasher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-hasher.js","sourceRoot":"","sources":["../src/password-hasher.ts"],"names":[],"mappings":";;;;AAAA,8CAA8C;AAI9C,IAAa,cAAc,GAA3B,MAAa,cAAc;IAClB,gBAAgB,CAAC,SAAiB,EAAE,SAAiB;QAC1D,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACrC,CAAC;IAEM,gBAAgB,CAAC,SAAiB,EAAE,WAA+B;QACxE,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACrC,CAAC;CACF,CAAA;AARY,cAAc;IAD1B,IAAA,mBAAU,EAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;GACzB,cAAc,CAQ1B;AARY,wCAAc"}

package/dist/security-policy-manager.d.ts

@@ -0,0 +1,26 @@
+import { PasswordCredential, PasswordResetToken } from './models';
+import { SecurityPolicy } from './security-policy';
+export declare class SecurityPolicyManager {
+    readonly policy: SecurityPolicy;
+    /**
+     * @param password The Plain password string
+     * @returns if the password matches the complexity rules
+     */
+    matchPasswordComplexityRules(password: string): Promise<{
+        match: false;
+        errors: {
+            message: string;
+            rule: string;
+        }[];
+    } | {
+        match: true;
+        errors?: undefined;
+    }>;
+    hasPasswordExpired(credential: PasswordCredential): boolean;
+    hasTokenExpired(token: PasswordResetToken): boolean;
+    /**
+     * @param policy The related Password Policy object
+     */
+    constructor(policy: SecurityPolicy);
+}
+//# sourceMappingURL=security-policy-manager.d.ts.map

package/dist/security-policy-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-policy-manager.d.ts","sourceRoot":"","sources":["../src/security-policy-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,qBACa,qBAAqB;aA8CJ,MAAM,EAAE,cAAc;IA7ClD;;;OAGG;IACU,4BAA4B,CAAC,QAAQ,EAAE,MAAM;;;qBAOzC,MAAM;kBACT,MAAM;;;;;;IAUb,kBAAkB,CAAC,UAAU,EAAE,kBAAkB;IAUjD,eAAe,CAAC,KAAK,EAAE,kBAAkB;IAUhD;;OAEG;gBACyB,MAAM,EAAE,cAAc;CACnD"}

package/dist/security-policy-manager.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityPolicyManager = void 0;
+const tslib_1 = require("tslib");
+const inject_1 = require("@furystack/inject");
+const security_policy_1 = require("./security-policy");
+let SecurityPolicyManager = class SecurityPolicyManager {
+    /**
+     * @param policy The related Password Policy object
+     */
+    constructor(policy) {
+        this.policy = policy;
+    }
+    /**
+     * @param password The Plain password string
+     * @returns if the password matches the complexity rules
+     */
+    async matchPasswordComplexityRules(password) {
+        const result = await Promise.all(this.policy.passwordComplexityRules.map((rule) => rule.check(password)));
+        const failed = result.filter((r) => r.success === false);
+        if (failed.length) {
+            return {
+                match: false,
+                errors: failed.map((f) => f.success === false && { message: f.message, rule: f.rule }),
+            };
+        }
+        return {
+            match: true,
+        };
+    }
+    hasPasswordExpired(credential) {
+        if (!this.policy.passwordExpirationDays) {
+            return false;
+        }
+        const credentialExpiration = new Date(credential.creationDate);
+        credentialExpiration.setDate(credentialExpiration.getDate() + this.policy.passwordExpirationDays);
+        const now = new Date();
+        return now > credentialExpiration;
+    }
+    hasTokenExpired(token) {
+        if (!this.policy.resetTokenExpirationSeconds) {
+            return false;
+        }
+        const tokenExpiration = new Date(token.createdAt);
+        tokenExpiration.setSeconds(tokenExpiration.getSeconds() + this.policy.resetTokenExpirationSeconds);
+        const now = new Date();
+        return now > tokenExpiration;
+    }
+};
+SecurityPolicyManager = tslib_1.__decorate([
+    (0, inject_1.Injectable)({ lifetime: 'singleton' }),
+    tslib_1.__metadata("design:paramtypes", [security_policy_1.SecurityPolicy])
+], SecurityPolicyManager);
+exports.SecurityPolicyManager = SecurityPolicyManager;
+//# sourceMappingURL=security-policy-manager.js.map

package/dist/security-policy-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-policy-manager.js","sourceRoot":"","sources":["../src/security-policy-manager.ts"],"names":[],"mappings":";;;;AAAA,8CAA8C;AAE9C,uDAAkD;AAGlD,IAAa,qBAAqB,GAAlC,MAAa,qBAAqB;IA2ChC;;OAEG;IACH,YAA4B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IA7CtD;;;OAGG;IACI,KAAK,CAAC,4BAA4B,CAAC,QAAgB;QACxD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QACzG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAA;QACxD,IAAI,MAAM,CAAC,MAAM,EAAE;YACjB,OAAO;gBACL,KAAK,EAAE,KAAc;gBACrB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAGnF;aACH,CAAA;SACF;QAED,OAAO;YACL,KAAK,EAAE,IAAa;SACrB,CAAA;IACH,CAAC;IAEM,kBAAkB,CAAC,UAA8B;QACtD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;YACvC,OAAO,KAAK,CAAA;SACb;QACD,MAAM,oBAAoB,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;QAC9D,oBAAoB,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;QACjG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,OAAO,GAAG,GAAG,oBAAoB,CAAA;IACnC,CAAC;IAEM,eAAe,CAAC,KAAyB;QAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE;YAC5C,OAAO,KAAK,CAAA;SACb;QACD,MAAM,eAAe,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACjD,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAA;QAClG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,OAAO,GAAG,GAAG,eAAe,CAAA;IAC9B,CAAC;CAMF,CAAA;AA/CY,qBAAqB;IADjC,IAAA,mBAAU,EAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;6CA+CA,gCAAc;GA9CvC,qBAAqB,CA+CjC;AA/CY,sDAAqB"}

package/dist/security-policy-manager.spec.d.ts

@@ -0,0 +1,2 @@
+import './injector-extensions';
+//# sourceMappingURL=security-policy-manager.spec.d.ts.map

package/dist/security-policy-manager.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-policy-manager.spec.d.ts","sourceRoot":"","sources":["../src/security-policy-manager.spec.ts"],"names":[],"mappings":"AAGA,OAAO,uBAAuB,CAAA"}

package/dist/security-policy-manager.spec.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const inject_1 = require("@furystack/inject");
+const utils_1 = require("@furystack/utils");
+const uuid_1 = require("uuid");
+require("./injector-extensions");
+const security_policy_manager_1 = require("./security-policy-manager");
+describe('SecurityPolicyManager', () => {
+    it('Should return false when no token expiration has been set', () => {
+        (0, utils_1.using)(new inject_1.Injector(), (i) => {
+            i.usePasswordPolicy({ resetTokenExpirationSeconds: 0 });
+            const result = i
+                .getInstance(security_policy_manager_1.SecurityPolicyManager)
+                .hasTokenExpired({ createdAt: new Date().toISOString(), token: (0, uuid_1.v4)(), userName: (0, uuid_1.v4)() });
+            expect(result).toBeFalsy();
+        });
+    });
+});
+//# sourceMappingURL=security-policy-manager.spec.js.map

package/dist/security-policy-manager.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-policy-manager.spec.js","sourceRoot":"","sources":["../src/security-policy-manager.spec.ts"],"names":[],"mappings":";;AAAA,8CAA4C;AAC5C,4CAAwC;AACxC,+BAAyB;AACzB,iCAA8B;AAC9B,uEAAiE;AACjE,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,IAAA,aAAK,EAAC,IAAI,iBAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAC1B,CAAC,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,EAAE,CAAC,EAAE,CAAC,CAAA;YACvD,MAAM,MAAM,GAAG,CAAC;iBACb,WAAW,CAAC,+CAAqB,CAAC;iBAClC,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAA,SAAE,GAAE,EAAE,QAAQ,EAAE,IAAA,SAAE,GAAE,EAAE,CAAC,CAAA;YACxF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAA;QAC5B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/security-policy.d.ts

@@ -0,0 +1,26 @@
+import { Constructable } from '@furystack/inject';
+import { PasswordComplexityRule } from './models';
+import { PasswordHasher } from './password-hasher';
+export declare class SecurityPolicy {
+    /**
+     * A Hasher instance for password hash generation
+     */
+    hasher: Constructable<PasswordHasher>;
+    /**
+     * Array of password complexity rules to apply
+     */
+    passwordComplexityRules: PasswordComplexityRule[];
+    /**
+     * The password expiration in days
+     */
+    passwordExpirationDays: number;
+    /**
+     * Defines if the login needs a second factor authentication
+     */
+    requireSecondFactor: 'never' | 'always';
+    /**
+     * The Password Reset Token expiration in seconds
+     */
+    resetTokenExpirationSeconds: number;
+}
+//# sourceMappingURL=security-policy.d.ts.map

package/dist/security-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-policy.d.ts","sourceRoot":"","sources":["../src/security-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAc,MAAM,mBAAmB,CAAA;AAE7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,qBACa,cAAc;IACzB;;OAEG;IACH,MAAM,EAAE,aAAa,CAAC,cAAc,CAAC,CAAuB;IAE5D;;OAEG;IACH,uBAAuB,EAAE,sBAAsB,EAAE,CAAK;IAEtD;;OAEG;IACH,sBAAsB,SAAI;IAE1B;;OAEG;IACH,mBAAmB,EAAE,OAAO,GAAG,QAAQ,CAAU;IAEjD;;OAEG;IACH,2BAA2B,SAAK;CACjC"}

package/dist/security-policy.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityPolicy = void 0;
+const tslib_1 = require("tslib");
+const inject_1 = require("@furystack/inject");
+const crypto_password_hasher_1 = require("./crypto-password-hasher");
+let SecurityPolicy = class SecurityPolicy {
+    constructor() {
+        /**
+         * A Hasher instance for password hash generation
+         */
+        this.hasher = crypto_password_hasher_1.CryptoPasswordHasher;
+        /**
+         * Array of password complexity rules to apply
+         */
+        this.passwordComplexityRules = [];
+        /**
+         * The password expiration in days
+         */
+        this.passwordExpirationDays = 0;
+        /**
+         * Defines if the login needs a second factor authentication
+         */
+        this.requireSecondFactor = 'never'; // TODO - Challenge based on trusted devices
+        /**
+         * The Password Reset Token expiration in seconds
+         */
+        this.resetTokenExpirationSeconds = 15;
+    }
+};
+SecurityPolicy = tslib_1.__decorate([
+    (0, inject_1.Injectable)({ lifetime: 'singleton' })
+], SecurityPolicy);
+exports.SecurityPolicy = SecurityPolicy;
+//# sourceMappingURL=security-policy.js.map

package/dist/security-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-policy.js","sourceRoot":"","sources":["../src/security-policy.ts"],"names":[],"mappings":";;;;AAAA,8CAA6D;AAC7D,qEAA+D;AAK/D,IAAa,cAAc,GAA3B,MAAa,cAAc;IAA3B;QACE;;WAEG;QACH,WAAM,GAAkC,6CAAoB,CAAA;QAE5D;;WAEG;QACH,4BAAuB,GAA6B,EAAE,CAAA;QAEtD;;WAEG;QACH,2BAAsB,GAAG,CAAC,CAAA;QAE1B;;WAEG;QACH,wBAAmB,GAAuB,OAAO,CAAA,CAAC,4CAA4C;QAE9F;;WAEG;QACH,gCAA2B,GAAG,EAAE,CAAA;IAClC,CAAC;CAAA,CAAA;AAzBY,cAAc;IAD1B,IAAA,mBAAU,EAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;GACzB,cAAc,CAyB1B;AAzBY,wCAAc"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@furystack/security",
+  "version": "1.0.0",
+  "description": "Security, password management and authorization related stuff for FuryStack",
+  "main": "dist/index.js",
+  "typings": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "src",
+    "test"
+  ],
+  "scripts": {
+    "fix:prettier": "prettier \"{,!(dist|temp)/**/}*.{ts,tsx}\" --write",
+    "build": "tsc -b"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/furystack/furystack.git"
+  },
+  "keywords": [
+    "furystack",
+    "security"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "author": "Gallay Lajos <gallay.lajos@gmail.com>",
+  "license": "GPL-2.0",
+  "bugs": {
+    "url": "https://github.com/furystack/furystack/issues"
+  },
+  "dependencies": {
+    "@furystack/core": "^10.4.9",
+    "@furystack/inject": "^5.0.6",
+    "@furystack/utils": "^2.0.5",
+    "tslib": "^2.3.1",
+    "uuid": "^8.3.2"
+  },
+  "homepage": "https://github.com/furystack/furystack",
+  "devDependencies": {
+    "@types/jest": "^27.4.1",
+    "@types/node": "^17.0.23",
+    "@types/uuid": "^8.3.4"
+  }
+}