@hed-hog/core 0.0.4

package/dist/task/task.service.js

@@ -0,0 +1,75 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var TasksService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TasksService = void 0;
+const common_1 = require("@nestjs/common");
+const schedule_1 = require("@nestjs/schedule");
+const api_prisma_1 = require("@hed-hog/api-prisma");
+let TasksService = TasksService_1 = class TasksService {
+    constructor(prismaService) {
+        this.prismaService = prismaService;
+        this.logger = new common_1.Logger(TasksService_1.name);
+    }
+    async clear() {
+        this.logger.verbose('++++++++++++++++++++++++++++++++++');
+        this.logger.verbose('Running scheduled cleanup tasks');
+        this.logger.verbose('++++++++++++++++++++++++++++++++++');
+        this.logger.verbose('Starting cleanup of expired/verified MFA challenges');
+        let startAt = Date.now();
+        await this.prismaService.$queryRaw `
+      WITH del AS (
+        SELECT user_mfa_id
+        FROM user_mfa_challenge
+        WHERE expires_at < now()
+          OR verified_at IS NOT NULL
+        ORDER BY user_mfa_id
+        LIMIT 20000
+      )
+      DELETE FROM user_mfa_challenge c
+      USING del
+      WHERE c.user_mfa_id = del.user_mfa_id;
+    `;
+        this.logger.verbose(`Expired/verified MFA challenges cleaned up in ${Date.now() - startAt}ms`);
+        this.logger.verbose('++++++++++++++++++++++++++++++++++');
+        this.logger.verbose('Starting cleanup of expired sessions');
+        startAt = Date.now();
+        await this.prismaService.$queryRaw `
+      WITH del AS (
+      SELECT id
+      FROM user_session
+      WHERE expires_at < now()
+        AND created_at < (now() - interval '90 days')
+      ORDER BY id
+      LIMIT 20000
+      )
+      DELETE FROM user_session s
+      USING del
+      WHERE s.id = del.id;
+    `;
+        this.logger.verbose(`Expired sessions cleaned up in ${Date.now() - startAt}ms`);
+        this.logger.verbose('++++++++++++++++++++++++++++++++++');
+        this.logger.verbose('Finished scheduled cleanup tasks');
+        this.logger.verbose('++++++++++++++++++++++++++++++++++');
+    }
+};
+exports.TasksService = TasksService;
+__decorate([
+    (0, schedule_1.Cron)(schedule_1.CronExpression.EVERY_DAY_AT_MIDNIGHT),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], TasksService.prototype, "clear", null);
+exports.TasksService = TasksService = TasksService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [api_prisma_1.PrismaService])
+], TasksService);
+//# sourceMappingURL=task.service.js.map

package/dist/task/task.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.service.js","sourceRoot":"","sources":["../../src/task/task.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAAwD;AACxD,oDAAoD;AAG7C,IAAM,YAAY,oBAAlB,MAAM,YAAY;IAGvB,YAA6B,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QAFxC,WAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;IAIxD,CAAC;IAGK,AAAN,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC;QAC3E,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAA;;;;;;;;;;;;KAYjC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,iDAAiD,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QAC5D,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAA;;;;;;;;;;;;KAYjC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kCAAkC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAC5D,CAAC;CACF,CAAA;AAjDY,oCAAY;AAQjB;IADL,IAAA,eAAI,EAAC,yBAAc,CAAC,qBAAqB,CAAC;;;;yCAyC1C;uBAhDU,YAAY;IADxB,IAAA,mBAAU,GAAE;qCAIiC,0BAAa;GAH9C,YAAY,CAiDxB"}

package/dist/token/token.module.d.ts

@@ -0,0 +1,3 @@
+export declare class TokenModule {
+}
+//# sourceMappingURL=token.module.d.ts.map

package/dist/token/token.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.module.d.ts","sourceRoot":"","sources":["../../src/token/token.module.ts"],"names":[],"mappings":"AAKA,qBAQa,WAAW;CAAG"}

package/dist/token/token.module.js

@@ -0,0 +1,27 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenModule = void 0;
+const common_1 = require("@nestjs/common");
+const security_module_1 = require("../security/security.module");
+const setting_module_1 = require("../setting/setting.module");
+const token_service_1 = require("./token.service");
+let TokenModule = class TokenModule {
+};
+exports.TokenModule = TokenModule;
+exports.TokenModule = TokenModule = __decorate([
+    (0, common_1.Module)({
+        providers: [token_service_1.TokenService],
+        exports: [token_service_1.TokenService],
+        imports: [
+            (0, common_1.forwardRef)(() => setting_module_1.SettingModule),
+            (0, common_1.forwardRef)(() => security_module_1.SecurityModule),
+        ]
+    })
+], TokenModule);
+//# sourceMappingURL=token.module.js.map

package/dist/token/token.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.module.js","sourceRoot":"","sources":["../../src/token/token.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAoD;AACpD,iEAA6D;AAC7D,8DAA0D;AAC1D,mDAA+C;AAUxC,IAAM,WAAW,GAAjB,MAAM,WAAW;CAAG,CAAA;AAAd,kCAAW;sBAAX,WAAW;IARvB,IAAA,eAAM,EAAC;QACN,SAAS,EAAE,CAAC,4BAAY,CAAC;QACzB,OAAO,EAAE,CAAC,4BAAY,CAAC;QACvB,OAAO,EAAE;YACL,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC;YAC/B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,gCAAc,CAAC;SACjC;KACJ,CAAC;GACW,WAAW,CAAG"}

package/dist/token/token.service.d.ts

@@ -0,0 +1,31 @@
+import { OnModuleInit } from "@nestjs/common";
+import { JwtService } from "@nestjs/jwt";
+import { SecurityService } from "../security/security.service";
+import { SettingService } from "../setting/setting.service";
+export declare class TokenService implements OnModuleInit {
+    private readonly jwt;
+    private readonly security;
+    private readonly setting;
+    settings: Record<string, any>;
+    constructor(jwt: JwtService, security: SecurityService, setting: SettingService);
+    onModuleInit(): Promise<void>;
+    verify(locale: string, token: string): Promise<any>;
+    createAccessToken(payload: Record<string, any>): Promise<string>;
+    createOpaqueToken(size?: number): Promise<string>;
+    private getCookieDomain;
+    removeRefreshTokenCookie(res: any): Promise<void>;
+    setRefreshTokenCookie(locale: string, res: any, token: string, expires_at: Date): Promise<void>;
+    createMfaChallengeToken(payload: {
+        userId: number;
+        ipAddress: string;
+        userAgent: string;
+        email: string;
+    }): Promise<string>;
+    verifyMfaChallengeToken(token: string): Promise<{
+        userId: number;
+        ipAddress: string;
+        userAgent: string;
+        email: string;
+    }>;
+}
+//# sourceMappingURL=token.service.d.ts.map

package/dist/token/token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.service.d.ts","sourceRoot":"","sources":["../../src/token/token.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAsD,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,qBACa,YAAa,YAAW,YAAY;IAM7C,OAAO,CAAC,QAAQ,CAAC,GAAG;IAEpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAEzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IARnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAM;gBAIvB,GAAG,EAAE,UAAU,EAEf,QAAQ,EAAE,eAAe,EAEzB,OAAO,EAAE,cAAc;IAGpC,YAAY;IAMZ,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAQpC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAM9C,iBAAiB,CAAC,IAAI,SAAK;IAIjC,OAAO,CAAC,eAAe;IAWjB,wBAAwB,CAAC,GAAG,KAAA,GAAG,OAAO,CAAC,IAAI,CAAC;IAe5C,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAA,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB1F,uBAAuB,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAOxG,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAe/H"}

package/dist/token/token.service.js

@@ -0,0 +1,121 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenService = void 0;
+const api_locale_1 = require("@hed-hog/api-locale");
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+const security_service_1 = require("../security/security.service");
+const setting_service_1 = require("../setting/setting.service");
+let TokenService = class TokenService {
+    constructor(jwt, security, setting) {
+        this.jwt = jwt;
+        this.security = security;
+        this.setting = setting;
+        this.settings = {};
+    }
+    async onModuleInit() {
+        this.settings = await this.setting.getSettingValues([
+            'url'
+        ]);
+    }
+    async verify(locale, token) {
+        try {
+            return this.jwt.verifyAsync(token, { secret: this.security.getJwtSecret() });
+        }
+        catch (error) {
+            throw new common_1.ForbiddenException(error, (0, api_locale_1.getLocaleText)('accessDenied', locale, 'Access denied.'));
+        }
+    }
+    async createAccessToken(payload) {
+        return this.jwt.signAsync(payload, {
+            secret: this.security.getJwtSecret(),
+        });
+    }
+    async createOpaqueToken(size = 64) {
+        return this.security.randomOpaque(size);
+    }
+    getCookieDomain() {
+        if (this.settings['url']) {
+            try {
+                return new URL(this.settings['url']).hostname;
+            }
+            catch (_a) {
+                return process.env.COOKIE_DOMAIN;
+            }
+        }
+        return process.env.COOKIE_DOMAIN;
+    }
+    async removeRefreshTokenCookie(res) {
+        const domain = this.getCookieDomain();
+        const isLocalhost = !domain || domain === 'localhost';
+        const cookieOptions = {
+            httpOnly: true,
+            sameSite: isLocalhost ? 'lax' : 'strict',
+        };
+        if (!isLocalhost) {
+            cookieOptions.secure = true;
+            cookieOptions.domain = domain;
+        }
+        res.clearCookie('rt', cookieOptions);
+    }
+    async setRefreshTokenCookie(locale, res, token, expires_at) {
+        const domain = this.getCookieDomain();
+        const isLocalhost = !domain || domain === 'localhost';
+        const maxAge = expires_at.getTime() - Date.now();
+        const cookieOptions = {
+            httpOnly: true,
+            sameSite: isLocalhost ? 'lax' : 'strict',
+            maxAge,
+        };
+        if (!isLocalhost) {
+            cookieOptions.secure = true;
+            cookieOptions.domain = domain;
+        }
+        res.cookie('rt', token, cookieOptions);
+    }
+    async createMfaChallengeToken(payload) {
+        return this.jwt.signAsync(payload, {
+            secret: this.security.getJwtSecret(),
+            expiresIn: '10m',
+        });
+    }
+    async verifyMfaChallengeToken(token) {
+        try {
+            const payload = await this.jwt.verifyAsync(token, {
+                secret: this.security.getJwtSecret()
+            });
+            return {
+                userId: payload.userId,
+                ipAddress: payload.ipAddress,
+                userAgent: payload.userAgent,
+                email: payload.email
+            };
+        }
+        catch (error) {
+            throw new common_1.ForbiddenException('Invalid or expired MFA token');
+        }
+    }
+};
+exports.TokenService = TokenService;
+exports.TokenService = TokenService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)((0, common_1.forwardRef)(() => jwt_1.JwtService))),
+    __param(1, (0, common_1.Inject)((0, common_1.forwardRef)(() => security_service_1.SecurityService))),
+    __param(2, (0, common_1.Inject)((0, common_1.forwardRef)(() => setting_service_1.SettingService))),
+    __metadata("design:paramtypes", [jwt_1.JwtService,
+        security_service_1.SecurityService,
+        setting_service_1.SettingService])
+], TokenService);
+//# sourceMappingURL=token.service.js.map

package/dist/token/token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.service.js","sourceRoot":"","sources":["../../src/token/token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,oDAAoD;AACpD,2CAAkG;AAClG,qCAAyC;AACzC,mEAA+D;AAC/D,gEAA4D;AAGrD,IAAM,YAAY,GAAlB,MAAM,YAAY;IAIvB,YAEE,GAAgC,EAEhC,QAA0C,EAE1C,OAAwC;QAJvB,QAAG,GAAH,GAAG,CAAY;QAEf,aAAQ,GAAR,QAAQ,CAAiB;QAEzB,YAAO,GAAP,OAAO,CAAgB;QARnC,aAAQ,GAAwB,EAAE,CAAC;IAStC,CAAC;IAEL,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAClD,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAAa;QACxC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,2BAAkB,CAAC,KAAK,EAAE,IAAA,0BAAa,EAAC,cAAc,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAA4B;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE;YACjC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,IAAI,GAAG,EAAE;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAEO,eAAe;QACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;YAChD,CAAC;YAAC,WAAM,CAAC;gBACP,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,GAAG;QAEhC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,MAAM,KAAK,WAAW,CAAC;QACtD,MAAM,aAAa,GAAQ;YACzB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;SACzC,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC;YAC5B,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC;QAChC,CAAC;QACD,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAAc,EAAE,GAAG,EAAE,KAAa,EAAE,UAAgB;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,MAAM,KAAK,WAAW,CAAC;QACtD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACjD,MAAM,aAAa,GAAQ;YACzB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YACxC,MAAM;SACP,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC;YAC5B,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC;QAChC,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAEzC,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAgF;QAC5G,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE;YACjC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;YACpC,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,KAAa;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE;gBAChD,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE;aACrC,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,2BAAkB,CAAC,8BAA8B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;CACF,CAAA;AAtGY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,gBAAU,CAAC,CAAC,CAAA;IAEpC,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,kCAAe,CAAC,CAAC,CAAA;IAEzC,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,gCAAc,CAAC,CAAC,CAAA;qCAHnB,gBAAU;QAEL,kCAAe;QAEhB,gCAAc;GAV/B,YAAY,CAsGxB"}

package/dist/types/http-method.d.ts

@@ -0,0 +1,2 @@
+export type HttpMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH' | 'OPTIONS' | 'HEAD';
+//# sourceMappingURL=http-method.d.ts.map

package/dist/types/http-method.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-method.d.ts","sourceRoot":"","sources":["../../src/types/http-method.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAClB,KAAK,GACL,MAAM,GACN,KAAK,GACL,QAAQ,GACR,OAAO,GACP,SAAS,GACT,MAAM,CAAC"}

package/dist/types/http-method.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=http-method.js.map

package/dist/types/http-method.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-method.js","sourceRoot":"","sources":["../../src/types/http-method.ts"],"names":[],"mappings":""}

package/dist/types/multer.d.ts

@@ -0,0 +1,26 @@
+export interface MulterFile {
+    fieldname: string;
+    originalname: string;
+    encoding: string;
+    mimetype: string;
+    size: number;
+    destination: string;
+    filename: string;
+    path: string;
+    buffer: Buffer;
+}
+declare global {
+    interface MulterFile {
+        fieldname: string;
+        originalname: string;
+        encoding: string;
+        mimetype: string;
+        size: number;
+        destination: string;
+        filename: string;
+        path: string;
+        buffer: Buffer;
+    }
+}
+export {};
+//# sourceMappingURL=multer.d.ts.map

package/dist/types/multer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multer.d.ts","sourceRoot":"","sources":["../../src/types/multer.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,UAAU;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;KAChB;CACF;AAED,OAAO,EAAG,CAAC"}

package/dist/types/multer.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=multer.js.map

package/dist/types/multer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multer.js","sourceRoot":"","sources":["../../src/types/multer.ts"],"names":[],"mappings":""}

package/dist/user/constants/user.constants.d.ts

@@ -0,0 +1,2 @@
+export declare const SALT_ROUNDS = 10;
+//# sourceMappingURL=user.constants.d.ts.map

package/dist/user/constants/user.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.constants.d.ts","sourceRoot":"","sources":["../../../src/user/constants/user.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,KAAK,CAAC"}

package/dist/user/constants/user.constants.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SALT_ROUNDS = void 0;
+exports.SALT_ROUNDS = 10;
+//# sourceMappingURL=user.constants.js.map

package/dist/user/constants/user.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.constants.js","sourceRoot":"","sources":["../../../src/user/constants/user.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,WAAW,GAAG,EAAE,CAAC"}

package/dist/user/dto/create-with-email-and-password.dto.d.ts

@@ -0,0 +1,8 @@
+export declare class CreateWithEmailAndPasswordDTO {
+    set email(value: string);
+    get email(): string;
+    private _email;
+    password: string;
+    name: string;
+}
+//# sourceMappingURL=create-with-email-and-password.dto.d.ts.map

package/dist/user/dto/create-with-email-and-password.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-with-email-and-password.dto.d.ts","sourceRoot":"","sources":["../../../src/user/dto/create-with-email-and-password.dto.ts"],"names":[],"mappings":"AAKA,qBAAa,6BAA6B;IACxC,IACI,KAAK,CAAC,KAAK,EAAE,MAAM,EAEtB;IACD,IAAI,KAAK,IAAI,MAAM,CAElB;IACD,OAAO,CAAC,MAAM,CAAS;IAGvB,QAAQ,EAAE,MAAM,CAAC;IAGjB,IAAI,EAAE,MAAM,CAAC;CACd"}

package/dist/user/dto/create-with-email-and-password.dto.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateWithEmailAndPasswordDTO = void 0;
+const api_locale_1 = require("@hed-hog/api-locale");
+const class_validator_1 = require("class-validator");
+const is_email_with_settings_validator_1 = require("../../validators/is-email-with-settings.validator");
+const is_strong_password_with_settings_validator_1 = require("../../validators/is-strong-password-with-settings.validator");
+class CreateWithEmailAndPasswordDTO {
+    set email(value) {
+        this._email = value === null || value === void 0 ? void 0 : value.trim().toLowerCase();
+    }
+    get email() {
+        return this._email;
+    }
+}
+exports.CreateWithEmailAndPasswordDTO = CreateWithEmailAndPasswordDTO;
+__decorate([
+    (0, is_email_with_settings_validator_1.IsEmailWithSettings)({ message: (args) => (0, api_locale_1.getLocaleText)('validation.emailInvalid', args.value) }),
+    __metadata("design:type", String),
+    __metadata("design:paramtypes", [String])
+], CreateWithEmailAndPasswordDTO.prototype, "email", null);
+__decorate([
+    (0, is_strong_password_with_settings_validator_1.IsStrongPasswordWithSettings)(),
+    __metadata("design:type", String)
+], CreateWithEmailAndPasswordDTO.prototype, "password", void 0);
+__decorate([
+    (0, class_validator_1.IsString)({ message: (args) => (0, api_locale_1.getLocaleText)('validation.nameRequired', args.value) }),
+    __metadata("design:type", String)
+], CreateWithEmailAndPasswordDTO.prototype, "name", void 0);
+//# sourceMappingURL=create-with-email-and-password.dto.js.map

package/dist/user/dto/create-with-email-and-password.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-with-email-and-password.dto.js","sourceRoot":"","sources":["../../../src/user/dto/create-with-email-and-password.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oDAAoD;AACpD,qDAA2C;AAC3C,wGAAwF;AACxF,4HAA2G;AAE3G,MAAa,6BAA6B;IACxC,IACI,KAAK,CAAC,KAAa;QACrB,IAAI,CAAC,MAAM,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CAQF;AAfD,sEAeC;AAdC;IAAC,IAAA,sDAAmB,EAAC,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,0BAAa,EAAC,yBAAyB,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;;;0DAGhG;AAOD;IADC,IAAA,yEAA4B,GAAE;;+DACd;AAGjB;IADC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,0BAAa,EAAC,yBAAyB,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;;2DACzE"}

package/dist/user/dto/update.dto.d.ts

@@ -0,0 +1,4 @@
+export declare class UpdateDTO {
+    name?: string;
+}
+//# sourceMappingURL=update.dto.d.ts.map

package/dist/user/dto/update.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.dto.d.ts","sourceRoot":"","sources":["../../../src/user/dto/update.dto.ts"],"names":[],"mappings":"AAMA,qBAAa,SAAS;IAGpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/user/dto/update.dto.js

@@ -0,0 +1,23 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateDTO = void 0;
+const api_locale_1 = require("@hed-hog/api-locale");
+const class_validator_1 = require("class-validator");
+class UpdateDTO {
+}
+exports.UpdateDTO = UpdateDTO;
+__decorate([
+    (0, class_validator_1.IsString)({ message: (args) => (0, api_locale_1.getLocaleText)('validation.nameMustBeString', args.value) }),
+    (0, class_validator_1.IsOptional)(),
+    __metadata("design:type", String)
+], UpdateDTO.prototype, "name", void 0);
+//# sourceMappingURL=update.dto.js.map

package/dist/user/dto/update.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.dto.js","sourceRoot":"","sources":["../../../src/user/dto/update.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oDAAoD;AACpD,qDAGyB;AAEzB,MAAa,SAAS;CAIrB;AAJD,8BAIC;AADC;IAFC,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,0BAAa,EAAC,6BAA6B,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACzF,IAAA,4BAAU,GAAE;;uCACC"}

package/dist/user/user.controller.d.ts

@@ -0,0 +1,115 @@
+import { DeleteDTO } from '../dto/delete.dto';
+import { CreateWithEmailAndPasswordDTO } from './dto/create-with-email-and-password.dto';
+import { UpdateDTO } from './dto/update.dto';
+import { UserService } from './user.service';
+export declare class UserController {
+    private readonly userService;
+    constructor(userService: UserService);
+    list(paginationParams: any): Promise<{
+        paginate: {
+            total: any;
+            lastPage: number;
+            page: number;
+            pageSize: number;
+            data: any;
+        };
+        stats: {
+            total: number;
+            newLast7Days: number;
+            blocked: number;
+        };
+    }>;
+    get(userId: number, locale: string): Promise<{
+        user_account: {
+            id: number;
+            provider: import("@prisma/client").$Enums.user_account_provider_enum;
+            created_at: Date;
+            updated_at: Date;
+            email: string | null;
+            user_id: number;
+            provider_user_id: string;
+            scopes: string | null;
+            refresh_token: import("@prisma/client/runtime/library").Bytes | null;
+            token_expires_at: Date | null;
+        }[];
+        user_activity: {
+            id: number;
+            action: string;
+            created_at: Date;
+            updated_at: Date;
+            user_id: number;
+        }[];
+        user_credential: {
+            type: import("@prisma/client").$Enums.user_credential_type_enum;
+            id: number;
+            hash: string;
+            created_at: Date;
+            updated_at: Date;
+            user_id: number;
+            revoked_at: Date | null;
+            expires_at: Date | null;
+            requires_reset: boolean;
+        }[];
+        user_identifier: {
+            value: string;
+            type: import("@prisma/client").$Enums.user_identifier_type_enum;
+            id: number;
+            created_at: Date;
+            updated_at: Date;
+            user_id: number;
+            verified_at: Date | null;
+        }[];
+        user_session: {
+            id: number;
+            hash: string;
+            created_at: Date;
+            updated_at: Date;
+            user_id: number;
+            revoked_at: Date | null;
+            expires_at: Date;
+            ip_address: string;
+            user_agent: string;
+        }[];
+    } & {
+        name: string;
+        id: number;
+        created_at: Date;
+        updated_at: Date;
+        photo_id: number | null;
+        suspended_until: Date | null;
+        suspended_reason: string | null;
+        deactivated_at: Date | null;
+    }>;
+    getByEmail(email: string): Promise<void>;
+    create(data: CreateWithEmailAndPasswordDTO, locale: string): Promise<{
+        user: {
+            name: string;
+            id: number;
+            created_at: Date;
+            updated_at: Date;
+            photo_id: number | null;
+            suspended_until: Date | null;
+            suspended_reason: string | null;
+            deactivated_at: Date | null;
+        };
+        challenge: {
+            codeHash: string;
+        };
+    }>;
+    update(userId: number, data: UpdateDTO, locale: string): Promise<{
+        name: string;
+        id: number;
+        created_at: Date;
+        updated_at: Date;
+        photo_id: number | null;
+        suspended_until: Date | null;
+        suspended_reason: string | null;
+        deactivated_at: Date | null;
+    }>;
+    changeAvatar(userId: number, avatar: MulterFile): Promise<{
+        id: number;
+        path: string;
+    }>;
+    delete(data: DeleteDTO, locale: string): Promise<import("@prisma/client").Prisma.BatchPayload>;
+}
+//# sourceMappingURL=user.controller.d.ts.map

package/dist/user/user.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.controller.d.ts","sourceRoot":"","sources":["../../src/user/user.controller.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,qBAEa,cAAc;IAGvB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAAX,WAAW,EAAE,WAAW;IAIrC,IAAI,CAAe,gBAAgB,KAAA;;;;;;;;;;;;;;IAKnC,GAAG,CAAgC,MAAM,EAAE,MAAM,EAAY,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAK3E,UAAU,CAAiB,KAAK,EAAE,MAAM;IAKxC,MAAM,CAAS,IAAI,EAAE,6BAA6B,EAAY,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;IAK5E,MAAM,CACqB,MAAM,EAAE,MAAM,EACrC,IAAI,EAAE,SAAS,EACb,MAAM,EAAE,MAAM;;;;;;;;;;IAmBpB,YAAY,CACe,MAAM,EAAE,MAAM,EAC7B,MAAM,EAAE,UAAU;;;;IAM9B,MAAM,CAAS,IAAI,EAAE,SAAS,EAAY,MAAM,EAAE,MAAM;CAG/D"}