@komune-io/im-user-domain 0.20.0 → 0.21.0-alpha.059f3a3

package/connect-im-im-f2-user-im-user-domain.d.ts

@@ -24,7 +24,7 @@ export declare namespace f2.dsl.cqrs {
     }
 }
 export declare namespace f2.dsl.cqrs.envelope {
-    interface EnvelopeDTO<T> /* extends f2.dsl.cqrs.envelope.WithEnvelopeId, f2.dsl.cqrs.envelope.WithEnvelopeData<T> */ {
+    interface EnvelopeDTO<T> extends f2.dsl.cqrs.Message/*, f2.dsl.cqrs.envelope.WithEnvelopeId, f2.dsl.cqrs.envelope.WithEnvelopeData<T> */ {
         readonly type: string;
         readonly datacontenttype?: string;
         readonly specversion?: string;
@@ -191,12 +191,13 @@ export declare namespace io.komune.im.commons.auth {
         readonly id: string;
         readonly identifier?: string;
         readonly memberOf?: string;
-        readonly roles: Array<string>;
+        readonly roles?: Array<string>;
+        readonly acr?: string;
 
     }
 }
 export declare namespace io.komune.im.commons.auth {
-    type ImRole = "ORCHESTRATOR" | "ORCHESTRATOR_ADMIN" | "ORCHESTRATOR_USER" | "IM_USER_READ" | "IM_USER_WRITE" | "IM_ORGANIZATION_READ" | "IM_ORGANIZATION_WRITE" | "IM_MY_ORGANIZATION_WRITE" | "IM_APIKEY_READ" | "IM_APIKEY_WRITE" | "IM_SPACE_READ" | "IM_SPACE_WRITE" | "IM_ROLE_READ" | "IM_ROLE_WRITE";
+    type ImPermission = "IM_FORCE_MFA_OTP" | "IM_USER_READ" | "IM_USER_ROLE_READ" | "IM_USER_WRITE" | "IM_ORGANIZATION_READ" | "IM_ORGANIZATION_WRITE" | "IM_MY_ORGANIZATION_WRITE" | "IM_ORGANIZATION_API_KEY_READ" | "IM_ORGANIZATION_STATUS_WRITE" | "IM_APIKEY_READ" | "IM_APIKEY_WRITE" | "IM_SPACE_READ" | "IM_SPACE_WRITE" | "IM_ROLE_READ" | "IM_ROLE_WRITE";
 }
 export declare namespace io.komune.im.commons.exception {
     const ExceptionCodes: {
@@ -211,6 +212,18 @@ export declare namespace io.komune.im.commons.model {
 
     }
 }
+export declare namespace f2.dsl.fnc.operators {
+    class Batch {
+        constructor(size?: number, concurrency?: number);
+        get size(): number;
+        get concurrency(): number;
+        copy(size?: number, concurrency?: number): f2.dsl.fnc.operators.Batch;
+        toString(): string;
+        hashCode(): number;
+        equals(other?: any): boolean;
+        
+    }
+}
 export declare namespace f2.dsl.fnc {
     interface F2Function<T, R> {
         invokePromise(cmds: Array<T>): Promise<Array<R>>;
@@ -239,6 +252,9 @@ export declare namespace io.komune.im.core.user.domain.command {
 
     }
 }
+export declare namespace io.komune.im.core.mfa.domain.model {
+    type ImMfaPasswordOtpFlowAcr = "PASSWORD_ONLY" | "PASSWORD_OTP";
+}
 export declare namespace io.komune.im.core.organization.domain.command {
     interface OrganizationDeleteCommandDTO extends f2.dsl.cqrs.Command {
         readonly id: string;
@@ -621,6 +637,16 @@ export declare namespace io.komune.im.f2.user.domain.command {
 
     }
 }
+export declare namespace io.komune.im.f2.user.domain.command {
+    interface UserDisableMfaCommandDTO extends f2.dsl.cqrs.Command {
+        readonly id: string;
+
+    }
+    interface UserDisabledMfaEventDTO extends f2.dsl.cqrs.Event {
+        readonly id: string;
+
+    }
+}
 export declare namespace io.komune.im.f2.user.domain.command {
     interface UserResetPasswordCommandDTO extends f2.dsl.cqrs.Command {
         readonly id: string;
@@ -681,6 +707,7 @@ export declare namespace io.komune.im.f2.user.domain.model {
         readonly address?: io.komune.im.commons.model.AddressDTO;
         readonly phone?: string;
         readonly roles: io.komune.im.f2.privilege.domain.role.model.RoleDTO[];
+        readonly mfa?: string[];
         readonly attributes: Record<string, string>;
         readonly enabled: boolean;
         readonly disabledBy?: string;
@@ -696,7 +723,11 @@ export declare namespace io.komune.im.f2.user.domain.policies {
         checkRefList(authedUser: io.komune.im.commons.auth.AuthedUserDTO): boolean;
         canCreate(authedUser: io.komune.im.commons.auth.AuthedUserDTO, organizationId?: string): boolean;
         canUpdate(authedUser: io.komune.im.commons.auth.AuthedUserDTO, user: io.komune.im.f2.user.domain.model.UserDTO): boolean;
+        canConfigureMfa(authedUser: io.komune.im.commons.auth.AuthedUserDTO, user: io.komune.im.f2.user.domain.model.UserDTO): boolean;
+        canDisableMfa(authedUser: io.komune.im.commons.auth.AuthedUserDTO, user: io.komune.im.f2.user.domain.model.UserDTO): boolean;
+        canDisableMfaAcr(authedUser: io.komune.im.commons.auth.AuthedUserDTO, user: io.komune.im.f2.user.domain.model.UserDTO): boolean;
         canUpdateMemberOf(authedUser: io.komune.im.commons.auth.AuthedUserDTO): boolean;
+        canUpdateRole(authedUser: io.komune.im.commons.auth.AuthedUserDTO): boolean;
         canDisable(authedUser: io.komune.im.commons.auth.AuthedUserDTO, user: io.komune.im.f2.user.domain.model.UserDTO): boolean;
         canDelete(authedUser: io.komune.im.commons.auth.AuthedUserDTO, user: io.komune.im.f2.user.domain.model.UserDTO): boolean;
     };