@komune-io/im-user-domain 0.21.0-alpha.2e8dcba → 0.21.0-alpha.2fffa5b

package/connect-im-im-f2-user-im-user-domain.d.ts

@@ -633,6 +633,16 @@ export declare namespace io.komune.im.f2.user.domain.command {
 
     }
 }
+export declare namespace io.komune.im.f2.user.domain.command {
+    interface UserDisableMfaCommandDTO extends f2.dsl.cqrs.Command {
+        readonly id: string;
+
+    }
+    interface UserDisabledMfaEventDTO extends f2.dsl.cqrs.Event {
+        readonly id: string;
+
+    }
+}
 export declare namespace io.komune.im.f2.user.domain.command {
     interface UserResetPasswordCommandDTO extends f2.dsl.cqrs.Command {
         readonly id: string;
@@ -693,6 +703,7 @@ export declare namespace io.komune.im.f2.user.domain.model {
         readonly address?: io.komune.im.commons.model.AddressDTO;
         readonly phone?: string;
         readonly roles: io.komune.im.f2.privilege.domain.role.model.RoleDTO[];
+        readonly mfa?: string[];
         readonly attributes: Record<string, string>;
         readonly enabled: boolean;
         readonly disabledBy?: string;
@@ -708,6 +719,8 @@ export declare namespace io.komune.im.f2.user.domain.policies {
         checkRefList(authedUser: io.komune.im.commons.auth.AuthedUserDTO): boolean;
         canCreate(authedUser: io.komune.im.commons.auth.AuthedUserDTO, organizationId?: string): boolean;
         canUpdate(authedUser: io.komune.im.commons.auth.AuthedUserDTO, user: io.komune.im.f2.user.domain.model.UserDTO): boolean;
+        canConfigureMfa(authedUser: io.komune.im.commons.auth.AuthedUserDTO, user: io.komune.im.f2.user.domain.model.UserDTO): boolean;
+        canDisableMfa(authedUser: io.komune.im.commons.auth.AuthedUserDTO, user: io.komune.im.f2.user.domain.model.UserDTO): boolean;
         canUpdateMemberOf(authedUser: io.komune.im.commons.auth.AuthedUserDTO): boolean;
         canUpdateRole(authedUser: io.komune.im.commons.auth.AuthedUserDTO): boolean;
         canDisable(authedUser: io.komune.im.commons.auth.AuthedUserDTO, user: io.komune.im.f2.user.domain.model.UserDTO): boolean;

package/connect-im-im-f2-user-im-user-domain.js

@@ -536,6 +536,8 @@ if (typeof Math.imul === 'undefined') {
   setMetadataFor(UserDeletedEventDTO_0, 'UserDeletedEventDTO', interfaceMeta, VOID, [UserDeletedEventDTO, Event]);
   setMetadataFor(UserDisableCommandDTO, 'UserDisableCommandDTO', interfaceMeta, VOID, [Command]);
   setMetadataFor(UserDisabledEventDTO, 'UserDisabledEventDTO', interfaceMeta, VOID, [Event]);
+  setMetadataFor(UserDisableMfaCommandDTO, 'UserDisableMfaCommandDTO', interfaceMeta, VOID, [Command]);
+  setMetadataFor(UserDisabledMfaEventDTO, 'UserDisabledMfaventDTO', interfaceMeta, VOID, [Event]);
   setMetadataFor(UserResetPasswordCommandDTO, 'UserResetPasswordCommandDTO', interfaceMeta, VOID, [Command]);
   setMetadataFor(UserResetPasswordEventDTO, 'UserResetPasswordEventDTO', interfaceMeta, VOID, [Event]);
   setMetadataFor(UserUpdateCommandDTO, 'UserUpdateCommandDTO', interfaceMeta, VOID, [Command]);
@@ -12315,6 +12317,10 @@ if (typeof Math.imul === 'undefined') {
   }
   function UserDisabledEventDTO() {
   }
+  function UserDisableMfaCommandDTO() {
+  }
+  function UserDisabledMfaEventDTO() {
+  }
   function UserResetPasswordCommandDTO() {
   }
   function UserResetPasswordEventDTO() {
@@ -12351,7 +12357,10 @@ if (typeof Math.imul === 'undefined') {
     return tmp;
   }
   function isNotMySelf($this, authedUser, user) {
-    return !(authedUser.id === user.id);
+    return !isMySelf($this, authedUser, user);
+  }
+  function isMySelf($this, authedUser, user) {
+    return authedUser.id === user.id;
   }
   function UserPolicies() {
   }
@@ -12384,6 +12393,12 @@ if (typeof Math.imul === 'undefined') {
   protoOf(UserPolicies).canUpdate = function (authedUser, user) {
     return canWriteUser(this, authedUser, user);
   };
+  protoOf(UserPolicies).canConfigureMfa = function (authedUser, user) {
+    return isMySelf(this, authedUser, user);
+  };
+  protoOf(UserPolicies).canDisableMfa = function (authedUser, user) {
+    return isMySelf(this, authedUser, user);
+  };
   protoOf(UserPolicies).canUpdateMemberOf = function (authedUser) {
     return hasRole(authedUser, ImRole_IM_ORGANIZATION_WRITE_getInstance());
   };
@@ -12982,6 +12997,13 @@ if (typeof Math.imul === 'undefined') {
     var $io$komune$im$f2 = $io$komune$im.f2 || ($io$komune$im.f2 = {});
     var $io$komune$im$f2$user = $io$komune$im$f2.user || ($io$komune$im$f2.user = {});
     var $io$komune$im$f2$user$domain = $io$komune$im$f2$user.domain || ($io$komune$im$f2$user.domain = {});
+    var $io$komune$im$f2$user$domain$command = $io$komune$im$f2$user$domain.command || ($io$komune$im$f2$user$domain.command = {});
+    var $io = _.io || (_.io = {});
+    var $io$komune = $io.komune || ($io.komune = {});
+    var $io$komune$im = $io$komune.im || ($io$komune.im = {});
+    var $io$komune$im$f2 = $io$komune$im.f2 || ($io$komune$im.f2 = {});
+    var $io$komune$im$f2$user = $io$komune$im$f2.user || ($io$komune$im$f2.user = {});
+    var $io$komune$im$f2$user$domain = $io$komune$im$f2$user.domain || ($io$komune$im$f2$user.domain = {});
     var $io$komune$im$f2$user$domain$model = $io$komune$im$f2$user$domain.model || ($io$komune$im$f2$user$domain.model = {});
     var $io = _.io || (_.io = {});
     var $io$komune = $io.komune || ($io.komune = {});