@furystack/security 2.1.16 → 3.0.0

package/package.json

@@ -1,18 +1,32 @@
 {
   "name": "@furystack/security",
-  "version": "2.1.16",
+  "version": "3.0.0",
   "description": "Security, password management and authorization related stuff for FuryStack",
-  "main": "dist/index.js",
-  "typings": "./types/index.d.ts",
+  "type": "module",
+  "scripts": {
+    "fix:prettier": "prettier \"{,!(dist|temp)/**/}*.{ts,tsx}\" --write",
+    "build:es6": "tsc --outDir ./esm",
+    "build": "tsc -b"
+  },
+  "exports": {
+    ".": {
+      "import": "./esm/index.js",
+      "types": "./types/index.d.ts"
+    },
+    "./package.json": "./package.json"
+  },
+  "typesVersions": {
+    "*": {
+      "*": [
+        "types/*"
+      ]
+    }
+  },
   "files": [
     "dist",
     "types",
     "src"
   ],
-  "scripts": {
-    "fix:prettier": "prettier \"{,!(dist|temp)/**/}*.{ts,tsx}\" --write",
-    "build": "tsc -b"
-  },
   "repository": {
     "type": "git",
     "url": "https://github.com/furystack/furystack.git"
@@ -30,13 +44,14 @@
     "url": "https://github.com/furystack/furystack/issues"
   },
   "dependencies": {
-    "@furystack/core": "^11.3.1",
-    "@furystack/inject": "^7.1.9",
-    "@furystack/utils": "^3.1.8"
+    "@furystack/core": "^12.0.0",
+    "@furystack/inject": "^8.0.0",
+    "@furystack/utils": "^4.0.0"
   },
   "homepage": "https://github.com/furystack/furystack",
   "devDependencies": {
-    "@types/jest": "^29.5.0",
-    "@types/node": "^18.15.11"
+    "@types/node": "^18.15.11",
+    "typescript": "^5.0.4",
+    "vitest": "^0.30.1"
   }
 }

package/src/helpers.ts

@@ -3,7 +3,6 @@ import { SecurityPolicy } from './security-policy'
 
 /**
  * Sets up the @furystack/security with the provided settings
- *
  * @param injector The Injector instance
  * @param {Partial<SecurityPolicy>} policy The security policy to use
  */

package/src/password-authenticator.spec.ts

@@ -9,6 +9,7 @@ import { createMinLengthComplexityRule } from './password-complexity-rules'
 import { SecurityPolicyManager } from './security-policy-manager'
 import { PasswordComplexityError, UnauthenticatedError } from './errors'
 import { randomBytes } from 'crypto'
+import { describe, it, expect, vi } from 'vitest'
 
 const randomString = () => randomBytes(32).toString('hex')
 
@@ -138,7 +139,7 @@ describe('PasswordAuthenticator', () => {
         const hasher = authenticator.getHasher()
         const passwordStore = i.getInstance(StoreManager).getStoreFor(PasswordCredential, 'userName')
         const policyManager = i.getInstance(SecurityPolicyManager)
-        const pmSpy = jest.spyOn(policyManager, 'matchPasswordComplexityRules')
+        const pmSpy = vi.spyOn(policyManager, 'matchPasswordComplexityRules')
 
         const entry = await hasher.createCredential(userName, lastPassword)
 
@@ -174,7 +175,7 @@ describe('PasswordAuthenticator', () => {
         const hasher = authenticator.getHasher()
         const passwordStore = i.getInstance(StoreManager).getStoreFor(PasswordCredential, 'userName')
         const policyManager = i.getInstance(SecurityPolicyManager)
-        const pmSpy = jest.spyOn(policyManager, 'matchPasswordComplexityRules')
+        const pmSpy = vi.spyOn(policyManager, 'matchPasswordComplexityRules')
 
         const entry = await hasher.createCredential(userName, lastPassword)
 
@@ -214,7 +215,7 @@ describe('PasswordAuthenticator', () => {
         const hasher = authenticator.getHasher()
         const passwordStore = i.getInstance(StoreManager).getStoreFor(PasswordCredential, 'userName')
         const policyManager = i.getInstance(SecurityPolicyManager)
-        const pmSpy = jest.spyOn(policyManager, 'matchPasswordComplexityRules')
+        const pmSpy = vi.spyOn(policyManager, 'matchPasswordComplexityRules')
 
         const entry = await hasher.createCredential(userName, lastPassword)
 

package/src/password-authenticator.ts

@@ -41,8 +41,7 @@ export class PasswordAuthenticator {
 
   /**
    *
-   * Sets the password for the specific user
-   *
+   *Sets the password for the specific user
    * @param userName The user to set the password for
    * @param lastPassword The last user password
    * @param plainPassword The password as a plain string
@@ -66,7 +65,6 @@ export class PasswordAuthenticator {
 
   /**
    * Resets the password with a Password Reset token entry
-   *
    * @param resetToken The Reset Token value
    * @param plainPassword The new password in plain string
    */

package/src/password-complexity-rules/contains-lowercase.spec.ts

@@ -1,5 +1,6 @@
 import type { PasswordComplexityFailedResult } from '../models'
 import { createContainsLowercasePolicy } from './contains-lowercase'
+import { describe, it, expect } from 'vitest'
 
 describe('Contains-lowercase', () => {
   it('Should fail if the password is shorter than expected', async () => {

package/src/password-complexity-rules/contains-uppercase.spec.ts

@@ -1,5 +1,6 @@
 import type { PasswordComplexityFailedResult } from '../models'
 import { createContainsUppercasePolicy } from './contains-uppercase'
+import { describe, it, expect } from 'vitest'
 
 describe('Contains-uppercase', () => {
   it('Should fail if the password is shorter than expected', async () => {

package/src/password-complexity-rules/max-length.spec.ts

@@ -1,5 +1,6 @@
 import type { PasswordComplexityFailedResult } from '../models'
 import { createMaxLengthComplexityRule } from './max-length'
+import { describe, it, expect } from 'vitest'
 
 describe('max-length', () => {
   it('Should fail if the password is longer than expected', async () => {

package/src/password-complexity-rules/min-length.spec.ts

@@ -1,5 +1,6 @@
 import type { PasswordComplexityFailedResult } from '../models'
 import { createMinLengthComplexityRule } from './min-length'
+import { describe, it, expect } from 'vitest'
 
 describe('min-length', () => {
   it('Should fail if the password is shorter than expected', async () => {

package/src/security-policy-manager.spec.ts

@@ -2,6 +2,7 @@ import { Injector } from '@furystack/inject'
 import { using } from '@furystack/utils'
 import { usePasswordPolicy } from './helpers'
 import { SecurityPolicyManager } from './security-policy-manager'
+import { describe, it, expect } from 'vitest'
 
 describe('SecurityPolicyManager', () => {
   it('Should return false when no token expiration has been set', () => {

package/types/helpers.d.ts

@@ -2,7 +2,6 @@ import type { Injector } from '@furystack/inject';
 import { SecurityPolicy } from './security-policy';
 /**
  * Sets up the @furystack/security with the provided settings
- *
  * @param injector The Injector instance
  * @param {Partial<SecurityPolicy>} policy The security policy to use
  */

package/types/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../src/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,aAAc,QAAQ,WAAW,QAAQ,cAAc,CAAC,SAIrF,CAAA"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../src/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,aAAc,QAAQ,WAAW,QAAQ,cAAc,CAAC,SAIrF,CAAA"}

package/types/password-authenticator.d.ts

@@ -12,8 +12,7 @@ export declare class PasswordAuthenticator {
     checkPasswordForUser(userName: string, plainPassword: string): Promise<PasswordCheckResult>;
     /**
      *
-     * Sets the password for the specific user
-     *
+     *Sets the password for the specific user
      * @param userName The user to set the password for
      * @param lastPassword The last user password
      * @param plainPassword The password as a plain string
@@ -21,7 +20,6 @@ export declare class PasswordAuthenticator {
     setPasswordForUser(userName: string, lastPassword: string, plainPassword: string): Promise<void>;
     /**
      * Resets the password with a Password Reset token entry
-     *
      * @param resetToken The Reset Token value
      * @param plainPassword The new password in plain string
      */

package/types/password-authenticator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password-authenticator.d.ts","sourceRoot":"","sources":["../src/password-authenticator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAEjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAInD,qBACa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CACoD;IAErF,OAAO,CAAC,QAAQ,CAAC,aAAa,CACoD;IAElF,SAAgB,SAAS,mDAAoE;IAE7F;;;;OAIG;IACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAkBxG;;;;;;;OAOG;IACU,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB7G;;;;;OAKG;IACU,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB3F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IAG7B,aAAa,EAAG,qBAAqB,CAAA;CAC7C"}
+{"version":3,"file":"password-authenticator.d.ts","sourceRoot":"","sources":["../src/password-authenticator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAEjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAInD,qBACa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CACoD;IAErF,OAAO,CAAC,QAAQ,CAAC,aAAa,CACoD;IAElF,SAAgB,SAAS,mDAAoE;IAE7F;;;;OAIG;IACU,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAkBxG;;;;;;OAMG;IACU,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB7G;;;;OAIG;IACU,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB3F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IAG7B,aAAa,EAAG,qBAAqB,CAAA;CAC7C"}

package/dist/crypto-password-hasher.js

@@ -1,44 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CryptoPasswordHasher = void 0;
-const inject_1 = require("@furystack/inject");
-const crypto_1 = require("crypto");
-let CryptoPasswordHasher = class CryptoPasswordHasher {
-    constructor() {
-        this.iterations = 1000;
-        this.keylen = 64;
-    }
-    async verifyCredential(password, { passwordHash, salt }) {
-        const newHash = await new Promise((resolve, reject) => (0, crypto_1.pbkdf2)(password, salt, this.iterations, this.keylen, 'sha512', (err, key) => err ? reject(err) : resolve(key.toString('hex'))));
-        if (newHash === passwordHash) {
-            return {
-                isValid: true,
-            };
-        }
-        return {
-            isValid: false,
-            reason: 'badUsernameOrPassword',
-        };
-    }
-    async createCredential(userName, password) {
-        const salt = (0, crypto_1.randomBytes)(16).toString('hex');
-        const passwordHash = await new Promise((resolve, reject) => (0, crypto_1.pbkdf2)(password, salt, this.iterations, this.keylen, 'sha512', (err, key) => err ? reject(err) : resolve(key.toString('hex'))));
-        return {
-            userName,
-            salt,
-            passwordHash,
-            creationDate: new Date().toISOString(),
-        };
-    }
-};
-CryptoPasswordHasher = __decorate([
-    (0, inject_1.Injectable)({ lifetime: 'singleton' })
-], CryptoPasswordHasher);
-exports.CryptoPasswordHasher = CryptoPasswordHasher;
-//# sourceMappingURL=crypto-password-hasher.js.map

package/dist/crypto-password-hasher.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto-password-hasher.js","sourceRoot":"","sources":["../src/crypto-password-hasher.ts"],"names":[],"mappings":";;;;;;;;;AAAA,8CAA8C;AAE9C,mCAA4C;AAI5C,IAAa,oBAAoB,GAAjC,MAAa,oBAAoB;IAAjC;QACmB,eAAU,GAAG,IAAI,CAAA;QACjB,WAAM,GAAG,EAAE,CAAA;IAmC9B,CAAC;IAjCQ,KAAK,CAAC,gBAAgB,CAC3B,QAAgB,EAChB,EAAE,YAAY,EAAE,IAAI,EAAsB;QAE1C,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACpD,IAAA,eAAM,EAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAC1E,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CACjD,CACF,CAAA;QACD,IAAI,OAAO,KAAK,YAAY,EAAE;YAC5B,OAAO;gBACL,OAAO,EAAE,IAAI;aACd,CAAA;SACF;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,uBAAuB;SAChC,CAAA;IACH,CAAC;IACM,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,QAAgB;QAC9D,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,YAAY,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACjE,IAAA,eAAM,EAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAC1E,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CACjD,CACF,CAAA;QACD,OAAO;YACL,QAAQ;YACR,IAAI;YACJ,YAAY;YACZ,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAA;IACH,CAAC;CACF,CAAA;AArCY,oBAAoB;IADhC,IAAA,mBAAU,EAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;GACzB,oBAAoB,CAqChC;AArCY,oDAAoB"}

package/dist/errors/index.js

@@ -1,20 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./password-complexity-error"), exports);
-__exportStar(require("./unauthenticated-error"), exports);
-__exportStar(require("./password-complexity-error"), exports);
-//# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8DAA2C;AAC3C,0DAAuC;AACvC,8DAA2C"}

package/dist/errors/password-complexity-error.js

@@ -1,15 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PasswordComplexityError = void 0;
-class PasswordComplexityError extends Error {
-    /**
-     * @param result A detailed error result array
-     * @param message The Error message
-     */
-    constructor(result, message) {
-        super(message);
-        this.result = result;
-    }
-}
-exports.PasswordComplexityError = PasswordComplexityError;
-//# sourceMappingURL=password-complexity-error.js.map

package/dist/errors/password-complexity-error.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password-complexity-error.js","sourceRoot":"","sources":["../../src/errors/password-complexity-error.ts"],"names":[],"mappings":";;;AAAA,MAAa,uBAAwB,SAAQ,KAAK;IAChD;;;OAGG;IACH,YAA4B,MAAgD,EAAE,OAAgB;QAC5F,KAAK,CAAC,OAAO,CAAC,CAAA;QADY,WAAM,GAAN,MAAM,CAA0C;IAE5E,CAAC;CACF;AARD,0DAQC"}

package/dist/errors/unauthenticated-error.js

@@ -1,10 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.UnauthenticatedError = void 0;
-/**
- * Error that can be thrown if an authentication is required but not provided
- */
-class UnauthenticatedError extends Error {
-}
-exports.UnauthenticatedError = UnauthenticatedError;
-//# sourceMappingURL=unauthenticated-error.js.map

package/dist/errors/unauthenticated-error.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"unauthenticated-error.js","sourceRoot":"","sources":["../../src/errors/unauthenticated-error.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,MAAa,oBAAqB,SAAQ,KAAK;CAAG;AAAlD,oDAAkD"}

package/dist/helpers.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.usePasswordPolicy = void 0;
-const security_policy_1 = require("./security-policy");
-/**
- * Sets up the @furystack/security with the provided settings
- *
- * @param injector The Injector instance
- * @param {Partial<SecurityPolicy>} policy The security policy to use
- */
-const usePasswordPolicy = (injector, policy) => {
-    const plainPolicy = new security_policy_1.SecurityPolicy();
-    policy && Object.assign(plainPolicy, policy);
-    injector.setExplicitInstance(plainPolicy, security_policy_1.SecurityPolicy);
-};
-exports.usePasswordPolicy = usePasswordPolicy;
-//# sourceMappingURL=helpers.js.map

package/dist/helpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../src/helpers.ts"],"names":[],"mappings":";;;AACA,uDAAkD;AAElD;;;;;GAKG;AACI,MAAM,iBAAiB,GAAG,CAAC,QAAkB,EAAE,MAAgC,EAAE,EAAE;IACxF,MAAM,WAAW,GAAG,IAAI,gCAAc,EAAE,CAAA;IACxC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IAC5C,QAAQ,CAAC,mBAAmB,CAAC,WAAW,EAAE,gCAAc,CAAC,CAAA;AAC3D,CAAC,CAAA;AAJY,QAAA,iBAAiB,qBAI7B"}

package/dist/index.js

@@ -1,25 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./crypto-password-hasher"), exports);
-__exportStar(require("./errors"), exports);
-__exportStar(require("./models"), exports);
-__exportStar(require("./password-authenticator"), exports);
-__exportStar(require("./password-complexity-rules"), exports);
-__exportStar(require("./password-hasher"), exports);
-__exportStar(require("./security-policy-manager"), exports);
-__exportStar(require("./helpers"), exports);
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAwC;AACxC,2CAAwB;AACxB,2CAAwB;AACxB,2DAAwC;AACxC,8DAA2C;AAC3C,oDAAiC;AACjC,4DAAyC;AAEzC,4CAAyB"}

package/dist/models/index.js

@@ -1,22 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./password-check-result"), exports);
-__exportStar(require("./password-complexity-result"), exports);
-__exportStar(require("./password-complexity-rule"), exports);
-__exportStar(require("./password-credential"), exports);
-__exportStar(require("./password-reset-token"), exports);
-//# sourceMappingURL=index.js.map

package/dist/models/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAuC;AACvC,+DAA4C;AAC5C,6DAA0C;AAC1C,wDAAqC;AACrC,yDAAsC"}

package/dist/models/password-check-result.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=password-check-result.js.map

package/dist/models/password-check-result.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password-check-result.js","sourceRoot":"","sources":["../../src/models/password-check-result.ts"],"names":[],"mappings":""}

package/dist/models/password-complexity-result.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=password-complexity-result.js.map

package/dist/models/password-complexity-result.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password-complexity-result.js","sourceRoot":"","sources":["../../src/models/password-complexity-result.ts"],"names":[],"mappings":""}

package/dist/models/password-complexity-rule.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=password-complexity-rule.js.map

package/dist/models/password-complexity-rule.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password-complexity-rule.js","sourceRoot":"","sources":["../../src/models/password-complexity-rule.ts"],"names":[],"mappings":""}

package/dist/models/password-credential.js

@@ -1,10 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PasswordCredential = void 0;
-/**
- * Entry that stores credential info for password login
- */
-class PasswordCredential {
-}
-exports.PasswordCredential = PasswordCredential;
-//# sourceMappingURL=password-credential.js.map

package/dist/models/password-credential.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password-credential.js","sourceRoot":"","sources":["../../src/models/password-credential.ts"],"names":[],"mappings":";;;AAAA;;GAEG;AACH,MAAa,kBAAkB;CAmB9B;AAnBD,gDAmBC"}

package/dist/models/password-reset-token.js

@@ -1,7 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PasswordResetToken = void 0;
-class PasswordResetToken {
-}
-exports.PasswordResetToken = PasswordResetToken;
-//# sourceMappingURL=password-reset-token.js.map

package/dist/models/password-reset-token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password-reset-token.js","sourceRoot":"","sources":["../../src/models/password-reset-token.ts"],"names":[],"mappings":";;;AAAA,MAAa,kBAAkB;CAa9B;AAbD,gDAaC"}

package/dist/password-authenticator.js

@@ -1,108 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PasswordAuthenticator = void 0;
-const core_1 = require("@furystack/core");
-const inject_1 = require("@furystack/inject");
-const security_policy_manager_1 = require("./security-policy-manager");
-const errors_1 = require("./errors");
-const models_1 = require("./models");
-const password_complexity_error_1 = require("./errors/password-complexity-error");
-let PasswordAuthenticator = class PasswordAuthenticator {
-    constructor() {
-        this.getPasswordStore = () => this.injector.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordCredential, 'userName');
-        this.getTokenStore = () => this.injector.getInstance(core_1.StoreManager).getStoreFor(models_1.PasswordResetToken, 'token');
-        this.getHasher = () => this.injector.getInstance(this.policyManager.policy.hasher);
-    }
-    /**
-     * @param userName The User's unique name
-     * @param plainPassword The plain password to check
-     * @returns An object that contains an { isValid } value that indicates if the password is valid
-     */
-    async checkPasswordForUser(userName, plainPassword) {
-        const entry = await this.getPasswordStore().get(userName);
-        if (!entry) {
-            return {
-                isValid: false,
-                reason: 'badUsernameOrPassword',
-            };
-        }
-        const result = await this.getHasher().verifyCredential(plainPassword, entry);
-        if (result.isValid && this.policyManager.hasPasswordExpired(entry)) {
-            return {
-                isValid: false,
-                reason: 'passwordExpired',
-            };
-        }
-        return result;
-    }
-    /**
-     *
-     * Sets the password for the specific user
-     *
-     * @param userName The user to set the password for
-     * @param lastPassword The last user password
-     * @param plainPassword The password as a plain string
-     */
-    async setPasswordForUser(userName, lastPassword, plainPassword) {
-        const complexityResult = await this.policyManager.matchPasswordComplexityRules(plainPassword);
-        if (!complexityResult.match) {
-            throw new password_complexity_error_1.PasswordComplexityError(complexityResult.errors);
-        }
-        const lastResult = await this.checkPasswordForUser(userName, lastPassword);
-        if (!lastResult.isValid) {
-            throw new errors_1.UnauthenticatedError();
-        }
-        const store = this.getPasswordStore();
-        const newCredential = await this.getHasher().createCredential(userName, plainPassword);
-        const existing = await store.get(userName);
-        existing && (await store.remove(existing.userName));
-        await store.add(newCredential);
-    }
-    /**
-     * Resets the password with a Password Reset token entry
-     *
-     * @param resetToken The Reset Token value
-     * @param plainPassword The new password in plain string
-     */
-    async resetPasswordForUser(resetToken, plainPassword) {
-        const token = await this.getTokenStore().get(resetToken);
-        if (!token) {
-            throw new errors_1.UnauthenticatedError();
-        }
-        if (this.policyManager.hasTokenExpired(token)) {
-            await this.getTokenStore().remove(resetToken); // clean up token
-            throw new errors_1.UnauthenticatedError();
-        }
-        const complexityResult = await this.policyManager.matchPasswordComplexityRules(plainPassword);
-        if (!complexityResult.match) {
-            throw new password_complexity_error_1.PasswordComplexityError(complexityResult.errors);
-        }
-        const newCredential = await this.getHasher().createCredential(token.userName, plainPassword);
-        const store = this.getPasswordStore();
-        const existing = await store.get(token.userName);
-        existing && (await store.remove(existing.userName));
-        await store.add(newCredential);
-    }
-};
-__decorate([
-    (0, inject_1.Injected)(inject_1.Injector),
-    __metadata("design:type", inject_1.Injector)
-], PasswordAuthenticator.prototype, "injector", void 0);
-__decorate([
-    (0, inject_1.Injected)(security_policy_manager_1.SecurityPolicyManager),
-    __metadata("design:type", security_policy_manager_1.SecurityPolicyManager)
-], PasswordAuthenticator.prototype, "policyManager", void 0);
-PasswordAuthenticator = __decorate([
-    (0, inject_1.Injectable)({ lifetime: 'singleton' })
-], PasswordAuthenticator);
-exports.PasswordAuthenticator = PasswordAuthenticator;
-//# sourceMappingURL=password-authenticator.js.map

package/dist/password-authenticator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password-authenticator.js","sourceRoot":"","sources":["../src/password-authenticator.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0CAA8C;AAC9C,8CAAkE;AAClE,uEAAiE;AACjE,qCAA+C;AAE/C,qCAAiE;AACjE,kFAA4E;AAG5E,IAAa,qBAAqB,GAAlC,MAAa,qBAAqB;IAAlC;QACmB,qBAAgB,GAAG,GAAG,EAAE,CACvC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,UAAU,CAAC,CAAA;QAEpE,kBAAa,GAAG,GAAG,EAAE,CACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,mBAAY,CAAC,CAAC,WAAW,CAAC,2BAAkB,EAAE,OAAO,CAAC,CAAA;QAElE,cAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAqF/F,CAAC;IAnFC;;;;OAIG;IACI,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,aAAqB;QACvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACzD,IAAI,CAAC,KAAK,EAAE;YACV,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,uBAAuB;aAChC,CAAA;SACF;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;QAC5E,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE;YAClE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,iBAAiB;aAC1B,CAAA;SACF;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,kBAAkB,CAAC,QAAgB,EAAE,YAAoB,EAAE,aAAqB;QAC3F,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,4BAA4B,CAAC,aAAa,CAAC,CAAA;QAC7F,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE;YAC3B,MAAM,IAAI,mDAAuB,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;SAC3D;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAA;QAC1E,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;YACvB,MAAM,IAAI,6BAAoB,EAAE,CAAA;SACjC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAA;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;QACtF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC1C,QAAQ,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnD,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,oBAAoB,CAAC,UAAkB,EAAE,aAAqB;QACzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAExD,IAAI,CAAC,KAAK,EAAE;YACV,MAAM,IAAI,6BAAoB,EAAE,CAAA;SACjC;QAED,IAAI,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE;YAC7C,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA,CAAC,iBAAiB;YAC/D,MAAM,IAAI,6BAAoB,EAAE,CAAA;SACjC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,4BAA4B,CAAC,aAAa,CAAC,CAAA;QAC7F,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE;YAC3B,MAAM,IAAI,mDAAuB,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;SAC3D;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;QAC5F,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAA;QACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAChD,QAAQ,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QACnD,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;CAOF,CAAA;AAJkB;IADhB,IAAA,iBAAQ,EAAC,iBAAQ,CAAC;8BACS,iBAAQ;uDAAA;AAG7B;IADN,IAAA,iBAAQ,EAAC,+CAAqB,CAAC;8BACT,+CAAqB;4DAAA;AA3FjC,qBAAqB;IADjC,IAAA,mBAAU,EAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;GACzB,qBAAqB,CA4FjC;AA5FY,sDAAqB"}