@hapiboo/module-auth 1.2.2 → 1.4.0

package/dist/models/credential.js

@@ -202,8 +202,8 @@ class Password {
         return this.hash === this.getHash(base64password);
     }
     setPassword(base64Password) {
-        this.length = settings_1.authSettings.passwordHashLength;
-        this.iterations = settings_1.authSettings.passwordHashIterations;
+        this.length = settings_1.authSettings.passwordHashLength();
+        this.iterations = settings_1.authSettings.passwordHashIterations();
         this.salt = crypto_1.cryptoProvider.generateSalt(this.length);
         this.hash = this.getHash(base64Password);
         this.lastChangedAt = date_1.DateObject.now().toUtc();

package/dist/router/controller.d.ts

@@ -7,6 +7,9 @@ export declare namespace authController {
         function start(): IResponsePromise<{
             id: string;
         }>;
+        function testMode(): IResponsePromise<{
+            testMode: boolean;
+        }>;
     }
     namespace user {
         function register(request: Request): IResponsePromise<{

package/dist/router/controller.js

@@ -12,6 +12,10 @@ var authController;
             return authentication_1.authenticationService.general.initData(process.env.FRONTEND_URL);
         }
         init.start = start;
+        function testMode() {
+            return authentication_1.authenticationService.general.testMode();
+        }
+        init.testMode = testMode;
     })(init = authController.init || (authController.init = {}));
     let user;
     (function (user) {

package/dist/router/init.js

@@ -8,4 +8,7 @@ const router = (0, express_1.Router)();
 router.put('', async (_request, response) => {
     server_1.server.prepareJsonPromiseResponse(response, controller_1.authController.init.start());
 });
+router.post('/test', async (_request, response) => {
+    server_1.server.prepareJsonPromiseResponse(response, controller_1.authController.init.testMode());
+});
 exports.init = server_1.routingProvider.createRoutingItem('/init', router);

package/dist/service/authentication.d.ts

@@ -6,6 +6,9 @@ export declare namespace authenticationService {
         function initData(baseURL: string): IResponsePromise<{
             id: string;
         }>;
+        function testMode(): IResponsePromise<{
+            testMode: boolean;
+        }>;
         function get(user_id: string): IResponsePromise<User>;
     }
     namespace me {

package/dist/service/authentication.js

@@ -78,64 +78,73 @@ var helper;
     (function (users) {
         function registerPassword(display, email, credentialName, password, admin, isInvited, account_id, baseUrl) {
             return core_1.promise.createPromise((resolve, reject) => {
-                //we need to find out if credentialName is not used
-                core_1.promise.check(searchPassword(credentialName, true), reject)
-                    .then((value) => {
-                    if (value.found) {
-                        reject(core_1.ResponseError.getMessageResponse(409, 'credential name already registered'));
-                    }
-                    else {
-                        if (display && email && credentialName) {
-                            //let's create actual user data
-                            const user_id = (0, uuid_1.v4)();
-                            let confirm = (0, uuid_1.v4)().substring(0, 6).toUpperCase();
-                            let invite = undefined;
-                            if (isInvited) {
-                                confirm = undefined;
-                                invite = (0, uuid_1.v4)().substring(0, 6).toUpperCase();
-                                password = '';
-                            }
-                            core_1.promise.check(repository_1.repository.credential.create(new models_1.Credential().createPassword((0, uuid_1.v4)(), credentialName, user_id, 'pending', password, confirm, invite)), reject)
-                                .then((cred) => {
-                                //now, create user
-                                core_1.promise.check(repository_1.repository.user.create(new models_1.User().create(user_id, account_id, admin ? 'admin' : 'standard', 'created', display, email)), reject)
-                                    .then((dataItem) => {
-                                    //and send the code to confirm
-                                    emails.confirm(email, display, isInvited, isInvited ? cred.invite : cred.confirmation, baseUrl)
-                                        .then(() => {
-                                        resolve({ user: dataItem, credentials: cred });
-                                    }).catch((reason) => {
-                                        console.error(reason.message);
-                                        //in case of error, we need to remove all created data
-                                        repository_1.repository.user.remove(dataItem.id)
+                //let's check if we could move forward with current settings
+                if (!isInvited && !settings_1.authSettings.allowSelfRegistration()) {
+                    reject(core_1.ResponseError.getMessageResponse(403, 'Self registration is not allowed.'));
+                }
+                else {
+                    //we need to find out if credentialName is not used
+                    core_1.promise.check(searchPassword(credentialName, true), reject)
+                        .then((value) => {
+                        if (value.found) {
+                            reject(core_1.ResponseError.getMessageResponse(409, 'credential name already registered'));
+                        }
+                        else {
+                            if (display && email && credentialName) {
+                                //let's create actual user data
+                                const user_id = (0, uuid_1.v4)();
+                                let invite = undefined;
+                                let confirm = (0, uuid_1.v4)().substring(0, 6).toUpperCase();
+                                if (settings_1.authSettings.allowTestMode() && settings_1.authSettings.testMode()) {
+                                    confirm = 'M6K513';
+                                }
+                                if (isInvited) {
+                                    invite = confirm;
+                                    confirm = undefined;
+                                    password = '';
+                                }
+                                core_1.promise.check(repository_1.repository.credential.create(new models_1.Credential().createPassword((0, uuid_1.v4)(), credentialName, user_id, 'pending', password, confirm, invite)), reject)
+                                    .then((cred) => {
+                                    //now, create user
+                                    core_1.promise.check(repository_1.repository.user.create(new models_1.User().create(user_id, account_id, admin ? 'admin' : 'standard', 'created', display, email)), reject)
+                                        .then((dataItem) => {
+                                        //and send the code to confirm
+                                        emails.confirm(email, display, isInvited, isInvited ? cred.invite : cred.confirmation, baseUrl)
                                             .then(() => {
-                                            repository_1.repository.credential.remove(cred.id)
-                                                .then(() => {
-                                                reject(reason);
-                                            }).catch((reasonCred) => {
-                                                //we have 2 errors, and needs to combine them
-                                                reject(core_1.ResponseError.getCollectionResponse([reason, reasonCred]));
-                                            });
-                                        }).catch((reasonUser) => {
-                                            //despite error, let's try to clean up other data
-                                            repository_1.repository.credential.remove(cred.id)
+                                            resolve({ user: dataItem, credentials: cred });
+                                        }).catch((reason) => {
+                                            console.error(reason.message);
+                                            //in case of error, we need to remove all created data
+                                            repository_1.repository.user.remove(dataItem.id)
                                                 .then(() => {
-                                                //we have 2 errors, and needs to combine them
-                                                reject(core_1.ResponseError.getCollectionResponse([reason, reasonUser]));
-                                            }).catch((reasonCred) => {
-                                                //we have 3 errors, and needs to combine them
-                                                reject(core_1.ResponseError.getCollectionResponse([reason, reasonUser, reasonCred]));
+                                                repository_1.repository.credential.remove(cred.id)
+                                                    .then(() => {
+                                                    reject(reason);
+                                                }).catch((reasonCred) => {
+                                                    //we have 2 errors, and needs to combine them
+                                                    reject(core_1.ResponseError.getCollectionResponse([reason, reasonCred]));
+                                                });
+                                            }).catch((reasonUser) => {
+                                                //despite error, let's try to clean up other data
+                                                repository_1.repository.credential.remove(cred.id)
+                                                    .then(() => {
+                                                    //we have 2 errors, and needs to combine them
+                                                    reject(core_1.ResponseError.getCollectionResponse([reason, reasonUser]));
+                                                }).catch((reasonCred) => {
+                                                    //we have 3 errors, and needs to combine them
+                                                    reject(core_1.ResponseError.getCollectionResponse([reason, reasonUser, reasonCred]));
+                                                });
                                             });
                                         });
                                     });
                                 });
-                            });
-                        }
-                        else {
-                            reject(core_1.ResponseError.getMessageResponse(400, 'data is not valid'));
+                            }
+                            else {
+                                reject(core_1.ResponseError.getMessageResponse(400, 'data is not valid'));
+                            }
                         }
-                    }
-                });
+                    });
+                }
             });
         }
         users.registerPassword = registerPassword;
@@ -217,8 +226,9 @@ var authenticationService;
                         core_1.promise.checkVoid(authorization_1.authorizationService.general.initializeSecurityModel(), reject)
                             .then(() => {
                             //create first admin
-                            console.info('creating first admin user: ' + settings_1.authSettings.firstAdmin.email);
-                            core_1.promise.resolve(admin.invite(settings_1.authSettings.firstAdmin.email, settings_1.authSettings.firstAdmin.email, settings_1.authSettings.firstAdmin.name, baseURL), resolve, reject);
+                            const to_create = settings_1.authSettings.firstAdmin();
+                            console.info('... creating first admin user: ' + to_create.email);
+                            core_1.promise.resolve(admin.invite(to_create.email, to_create.email, to_create.name, baseURL), resolve, reject);
                         });
                     }
                     else {
@@ -228,6 +238,12 @@ var authenticationService;
             });
         }
         general.initData = initData;
+        function testMode() {
+            return core_1.promise.createDelayedPromise((resolve, _reject) => {
+                resolve({ testMode: settings_1.authSettings.changeTestMode() });
+            });
+        }
+        general.testMode = testMode;
         function get(user_id) {
             return repository_1.repository.user.getById(user_id);
         }

package/dist/service/authorization.js

@@ -17,8 +17,9 @@ var authorizationValidator;
         function checkUserPermission(user_id, permission_id) {
             if (userPermissionCache.has(user_id)) {
                 const permissions = userPermissionCache.get(user_id);
-                if (settings_1.authSettings.overrulingPermission !== undefined) {
-                    return permissions.includes(permission_id) || permissions.includes(settings_1.authSettings.overrulingPermission);
+                const overrulingPermission = settings_1.authSettings.overrulingPermission();
+                if (overrulingPermission !== undefined) {
+                    return permissions.includes(permission_id) || permissions.includes(overrulingPermission);
                 }
                 else {
                     return permissions.includes(permission_id);

package/dist/service/settings.d.ts

@@ -16,6 +16,7 @@ export interface IAuthPerformers {
 export interface IAuthSettings {
     allowSelfRegistration: boolean;
     allowMultiLogin: boolean;
+    allowTestMode: boolean;
     passwordHashLength: number;
     passwordHashIterations: number;
     firstAdmin: {
@@ -28,15 +29,18 @@ export interface IAuthSettings {
 }
 export declare namespace authSettings {
     function init(settings: IAuthSettings, performers: IAuthPerformers): void;
-    const allowSelfRegistration: boolean;
-    const allowMultiLogin: boolean;
-    const passwordHashLength: number;
-    const passwordHashIterations: number;
-    const firstAdmin: {
+    function allowSelfRegistration(): boolean;
+    function allowMultiLogin(): boolean;
+    function allowTestMode(): boolean;
+    function testMode(): boolean;
+    function changeTestMode(): boolean;
+    function passwordHashLength(): number;
+    function passwordHashIterations(): number;
+    function firstAdmin(): {
         name: string;
         email: string;
     };
-    const overrulingPermission: string | undefined;
+    function overrulingPermission(): string | undefined;
     function getPermissions(): Permission[];
     function getRoles(): Role[];
     function sendConfirmation(emailAddress: string, displayName: string, isInvited: boolean, confirmationLink: IAuthEmailLink): IResponsePromiseVoid;

package/dist/service/settings.js

@@ -4,9 +4,11 @@ exports.authSettings = void 0;
 const core_1 = require("@hapiboo/core");
 var authSettings;
 (function (authSettings) {
+    let _test = false;
     let _settings = {
         allowSelfRegistration: true,
         allowMultiLogin: false,
+        allowTestMode: false,
         passwordHashLength: 1024,
         passwordHashIterations: 32,
         firstAdmin: {
@@ -17,33 +19,51 @@ var authSettings;
     };
     let _performers = undefined;
     function init(settings, performers) {
-        console.log('authSettings.init()');
+        console.info('Authentication Settings Initialization');
         _settings = settings;
         _performers = performers;
     }
     authSettings.init = init;
-    authSettings.allowSelfRegistration = (() => {
+    function allowSelfRegistration() {
         return _settings.allowSelfRegistration;
-    })();
-    authSettings.allowMultiLogin = (() => {
+    }
+    authSettings.allowSelfRegistration = allowSelfRegistration;
+    function allowMultiLogin() {
         return _settings.allowMultiLogin;
-    })();
-    authSettings.passwordHashLength = (() => {
+    }
+    authSettings.allowMultiLogin = allowMultiLogin;
+    function allowTestMode() {
+        return _settings.allowTestMode;
+    }
+    authSettings.allowTestMode = allowTestMode;
+    function testMode() {
+        return _test;
+    }
+    authSettings.testMode = testMode;
+    function changeTestMode() {
+        _test = !_test;
+        return _test;
+    }
+    authSettings.changeTestMode = changeTestMode;
+    function passwordHashLength() {
         return _settings.passwordHashLength;
-    })();
-    authSettings.passwordHashIterations = (() => {
+    }
+    authSettings.passwordHashLength = passwordHashLength;
+    function passwordHashIterations() {
         return _settings.passwordHashIterations;
-    })();
-    authSettings.firstAdmin = (() => {
-        console.info('authSettings.firstAdmin: ' + _settings.firstAdmin.name + ' <' + _settings.firstAdmin.email + '>');
+    }
+    authSettings.passwordHashIterations = passwordHashIterations;
+    function firstAdmin() {
         return {
             name: _settings.firstAdmin.name,
             email: _settings.firstAdmin.email
         };
-    })();
-    authSettings.overrulingPermission = (() => {
+    }
+    authSettings.firstAdmin = firstAdmin;
+    function overrulingPermission() {
         return _settings.overrulingPermission;
-    })();
+    }
+    authSettings.overrulingPermission = overrulingPermission;
     function getPermissions() {
         if (_settings.getPermissions) {
             return _settings.getPermissions();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hapiboo/module-auth",
-  "version": "1.2.2",
+  "version": "1.4.0",
   "description": "MK13 Studio Hapiboo - Auth Module",
   "author": "MK13 Studio",
   "license": "ISC",