@furystack/security 2.1.16 → 3.0.0

package/dist/security-policy-manager.js

@@ -1,60 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecurityPolicyManager = void 0;
-const inject_1 = require("@furystack/inject");
-const security_policy_1 = require("./security-policy");
-let SecurityPolicyManager = class SecurityPolicyManager {
-    /**
-     * @param password The Plain password string
-     * @returns if the password matches the complexity rules
-     */
-    async matchPasswordComplexityRules(password) {
-        const result = await Promise.all(this.policy.passwordComplexityRules.map((rule) => rule.check(password)));
-        const failed = result.filter((r) => r.success === false);
-        if (failed.length) {
-            return {
-                match: false,
-                errors: failed.map((f) => f.success === false && { message: f.message, rule: f.rule }),
-            };
-        }
-        return {
-            match: true,
-        };
-    }
-    hasPasswordExpired(credential) {
-        if (!this.policy.passwordExpirationDays) {
-            return false;
-        }
-        const credentialExpiration = new Date(credential.creationDate);
-        credentialExpiration.setDate(credentialExpiration.getDate() + this.policy.passwordExpirationDays);
-        const now = new Date();
-        return now > credentialExpiration;
-    }
-    hasTokenExpired(token) {
-        if (!this.policy.resetTokenExpirationSeconds) {
-            return false;
-        }
-        const tokenExpiration = new Date(token.createdAt);
-        tokenExpiration.setSeconds(tokenExpiration.getSeconds() + this.policy.resetTokenExpirationSeconds);
-        const now = new Date();
-        return now > tokenExpiration;
-    }
-};
-__decorate([
-    (0, inject_1.Injected)(security_policy_1.SecurityPolicy),
-    __metadata("design:type", security_policy_1.SecurityPolicy)
-], SecurityPolicyManager.prototype, "policy", void 0);
-SecurityPolicyManager = __decorate([
-    (0, inject_1.Injectable)({ lifetime: 'singleton' })
-], SecurityPolicyManager);
-exports.SecurityPolicyManager = SecurityPolicyManager;
-//# sourceMappingURL=security-policy-manager.js.map

package/dist/security-policy-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-policy-manager.js","sourceRoot":"","sources":["../src/security-policy-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8CAAwD;AAExD,uDAAkD;AAGlD,IAAa,qBAAqB,GAAlC,MAAa,qBAAqB;IAChC;;;OAGG;IACI,KAAK,CAAC,4BAA4B,CAAC,QAAgB;QACxD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QACzG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAA;QACxD,IAAI,MAAM,CAAC,MAAM,EAAE;YACjB,OAAO;gBACL,KAAK,EAAE,KAAc;gBACrB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAGnF;aACH,CAAA;SACF;QAED,OAAO;YACL,KAAK,EAAE,IAAa;SACrB,CAAA;IACH,CAAC;IAEM,kBAAkB,CAAC,UAA8B;QACtD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;YACvC,OAAO,KAAK,CAAA;SACb;QACD,MAAM,oBAAoB,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;QAC9D,oBAAoB,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAA;QACjG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,OAAO,GAAG,GAAG,oBAAoB,CAAA;IACnC,CAAC;IAEM,eAAe,CAAC,KAAyB;QAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE;YAC5C,OAAO,KAAK,CAAA;SACb;QACD,MAAM,eAAe,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACjD,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAA;QAClG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QACtB,OAAO,GAAG,GAAG,eAAe,CAAA;IAC9B,CAAC;CAIF,CAAA;AADiB;IADf,IAAA,iBAAQ,EAAC,gCAAc,CAAC;8BACA,gCAAc;qDAAA;AA5C5B,qBAAqB;IADjC,IAAA,mBAAU,EAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;GACzB,qBAAqB,CA6CjC;AA7CY,sDAAqB"}

package/dist/security-policy-manager.spec.js

@@ -1,18 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const inject_1 = require("@furystack/inject");
-const utils_1 = require("@furystack/utils");
-const helpers_1 = require("./helpers");
-const security_policy_manager_1 = require("./security-policy-manager");
-describe('SecurityPolicyManager', () => {
-    it('Should return false when no token expiration has been set', () => {
-        (0, utils_1.using)(new inject_1.Injector(), (i) => {
-            (0, helpers_1.usePasswordPolicy)(i, { resetTokenExpirationSeconds: 0 });
-            const result = i
-                .getInstance(security_policy_manager_1.SecurityPolicyManager)
-                .hasTokenExpired({ createdAt: new Date().toISOString(), token: 'token', userName: 'user' });
-            expect(result).toBeFalsy();
-        });
-    });
-});
-//# sourceMappingURL=security-policy-manager.spec.js.map

package/dist/security-policy-manager.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-policy-manager.spec.js","sourceRoot":"","sources":["../src/security-policy-manager.spec.ts"],"names":[],"mappings":";;AAAA,8CAA4C;AAC5C,4CAAwC;AACxC,uCAA6C;AAC7C,uEAAiE;AAEjE,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,IAAA,aAAK,EAAC,IAAI,iBAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAC1B,IAAA,2BAAiB,EAAC,CAAC,EAAE,EAAE,2BAA2B,EAAE,CAAC,EAAE,CAAC,CAAA;YACxD,MAAM,MAAM,GAAG,CAAC;iBACb,WAAW,CAAC,+CAAqB,CAAC;iBAClC,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;YAC7F,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAA;QAC5B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/security-policy.js

@@ -1,40 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecurityPolicy = void 0;
-const inject_1 = require("@furystack/inject");
-const crypto_password_hasher_1 = require("./crypto-password-hasher");
-let SecurityPolicy = class SecurityPolicy {
-    constructor() {
-        /**
-         * A Hasher instance for password hash generation
-         */
-        this.hasher = crypto_password_hasher_1.CryptoPasswordHasher;
-        /**
-         * Array of password complexity rules to apply
-         */
-        this.passwordComplexityRules = [];
-        /**
-         * The password expiration in days
-         */
-        this.passwordExpirationDays = 0;
-        /**
-         * Defines if the login needs a second factor authentication
-         */
-        this.requireSecondFactor = 'never'; // TODO - Challenge based on trusted devices
-        /**
-         * The Password Reset Token expiration in seconds
-         */
-        this.resetTokenExpirationSeconds = 15;
-    }
-};
-SecurityPolicy = __decorate([
-    (0, inject_1.Injectable)({ lifetime: 'singleton' })
-], SecurityPolicy);
-exports.SecurityPolicy = SecurityPolicy;
-//# sourceMappingURL=security-policy.js.map

package/dist/security-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-policy.js","sourceRoot":"","sources":["../src/security-policy.ts"],"names":[],"mappings":";;;;;;;;;AACA,8CAA8C;AAC9C,qEAA+D;AAK/D,IAAa,cAAc,GAA3B,MAAa,cAAc;IAA3B;QACE;;WAEG;QACH,WAAM,GAAkC,6CAAoB,CAAA;QAE5D;;WAEG;QACH,4BAAuB,GAA6B,EAAE,CAAA;QAEtD;;WAEG;QACH,2BAAsB,GAAG,CAAC,CAAA;QAE1B;;WAEG;QACH,wBAAmB,GAAuB,OAAO,CAAA,CAAC,4CAA4C;QAE9F;;WAEG;QACH,gCAA2B,GAAG,EAAE,CAAA;IAClC,CAAC;CAAA,CAAA;AAzBY,cAAc;IAD1B,IAAA,mBAAU,EAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;GACzB,cAAc,CAyB1B;AAzBY,wCAAc"}

package/types/password-authenticator.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=password-authenticator.spec.d.ts.map

package/types/password-authenticator.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"password-authenticator.spec.d.ts","sourceRoot":"","sources":["../src/password-authenticator.spec.ts"],"names":[],"mappings":""}

package/types/password-complexity-rules/contains-lowercase.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=contains-lowercase.spec.d.ts.map

package/types/password-complexity-rules/contains-lowercase.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"contains-lowercase.spec.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/contains-lowercase.spec.ts"],"names":[],"mappings":""}

package/types/password-complexity-rules/contains-uppercase.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=contains-uppercase.spec.d.ts.map

package/types/password-complexity-rules/contains-uppercase.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"contains-uppercase.spec.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/contains-uppercase.spec.ts"],"names":[],"mappings":""}

package/types/password-complexity-rules/max-length.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=max-length.spec.d.ts.map

package/types/password-complexity-rules/max-length.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"max-length.spec.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/max-length.spec.ts"],"names":[],"mappings":""}

package/types/password-complexity-rules/min-length.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=min-length.spec.d.ts.map

package/types/password-complexity-rules/min-length.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"min-length.spec.d.ts","sourceRoot":"","sources":["../../src/password-complexity-rules/min-length.spec.ts"],"names":[],"mappings":""}

package/types/security-policy-manager.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=security-policy-manager.spec.d.ts.map

package/types/security-policy-manager.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-policy-manager.spec.d.ts","sourceRoot":"","sources":["../src/security-policy-manager.spec.ts"],"names":[],"mappings":""}