@mondomob/gae-node-nestjs 12.0.0-alpha-1 → 12.0.0-alpha-2

package/dist/auth/auth.resolver.js

@@ -1,86 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthResolver = void 0;
-const tslib_1 = require("tslib");
-const graphql_1 = require("@nestjs/graphql");
-const auth_guard_1 = require("./auth.guard");
-const invite_user_service_1 = require("./invite-user.service");
-const password_reset_service_1 = require("./password-reset.service");
-let AuthResolver = class AuthResolver {
-    constructor(passwordResetService, inviteUserService) {
-        this.passwordResetService = passwordResetService;
-        this.inviteUserService = inviteUserService;
-    }
-    async resetPassword(_req, email, context) {
-        return await this.passwordResetService.resetPassword(context, email);
-    }
-    async confirmResetPassword(_req, newPassword, code, context) {
-        return await this.passwordResetService.confirmResetPassword(context, code, newPassword);
-    }
-    async inviteUser(_req, roles, email, context) {
-        const { user: { id }, } = await this.inviteUserService.inviteUser(context, { email, roles });
-        return id;
-    }
-    async checkActivationCode(_req, code, context) {
-        return this.inviteUserService.checkActivationCode(context, code);
-    }
-    async activateAccount(_req, password, name, code, context) {
-        await this.inviteUserService.activateAccount(context, code, name, password);
-    }
-};
-exports.AuthResolver = AuthResolver;
-tslib_1.__decorate([
-    (0, auth_guard_1.AllowAnonymous)(),
-    (0, graphql_1.Mutation)(() => Boolean, { nullable: true }),
-    tslib_1.__param(1, (0, graphql_1.Args)('email')),
-    tslib_1.__param(2, (0, graphql_1.Context)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [void 0, String, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthResolver.prototype, "resetPassword", null);
-tslib_1.__decorate([
-    (0, auth_guard_1.AllowAnonymous)(),
-    (0, graphql_1.Mutation)(() => Boolean, { nullable: true }),
-    tslib_1.__param(1, (0, graphql_1.Args)('newPassword')),
-    tslib_1.__param(2, (0, graphql_1.Args)('code')),
-    tslib_1.__param(3, (0, graphql_1.Context)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [void 0, String, String, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthResolver.prototype, "confirmResetPassword", null);
-tslib_1.__decorate([
-    (0, auth_guard_1.Roles)('admin'),
-    (0, graphql_1.Mutation)(() => String),
-    tslib_1.__param(1, (0, graphql_1.Args)('roles', { type: () => [String] })),
-    tslib_1.__param(2, (0, graphql_1.Args)('email')),
-    tslib_1.__param(3, (0, graphql_1.Context)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [void 0, Array, String, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthResolver.prototype, "inviteUser", null);
-tslib_1.__decorate([
-    (0, auth_guard_1.AllowAnonymous)(),
-    (0, graphql_1.Query)(() => String, { nullable: true }),
-    tslib_1.__param(1, (0, graphql_1.Args)('code')),
-    tslib_1.__param(2, (0, graphql_1.Context)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [void 0, String, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthResolver.prototype, "checkActivationCode", null);
-tslib_1.__decorate([
-    (0, auth_guard_1.AllowAnonymous)(),
-    (0, graphql_1.Mutation)(() => Boolean, { nullable: true }),
-    tslib_1.__param(1, (0, graphql_1.Args)('password')),
-    tslib_1.__param(2, (0, graphql_1.Args)('name')),
-    tslib_1.__param(3, (0, graphql_1.Args)('code')),
-    tslib_1.__param(4, (0, graphql_1.Context)()),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [void 0, String, String, String, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthResolver.prototype, "activateAccount", null);
-exports.AuthResolver = AuthResolver = tslib_1.__decorate([
-    (0, graphql_1.Resolver)(),
-    tslib_1.__metadata("design:paramtypes", [password_reset_service_1.PasswordResetService,
-        invite_user_service_1.InviteUserService])
-], AuthResolver);
-//# sourceMappingURL=auth.resolver.js.map

package/dist/auth/auth.resolver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.resolver.js","sourceRoot":"","sources":["../../src/auth/auth.resolver.ts"],"names":[],"mappings":";;;;AAAA,6CAAyF;AACzF,6CAAqD;AACrD,+DAA0D;AAC1D,qEAAgE;AAIzD,IAAM,YAAY,GAAlB,MAAM,YAAY;IACvB,YACmB,oBAA0C,EAC1C,iBAAoC;QADpC,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAIE,AAAN,KAAK,CAAC,aAAa,CAAC,IAAU,EAAiB,KAAa,EAAgB,OAAgB;QAC1F,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAIK,AAAN,KAAK,CAAC,oBAAoB,CACxB,IAAU,EACW,WAAmB,EAC1B,IAAY,EACZ,OAAgB;QAE9B,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1F,CAAC;IAIK,AAAN,KAAK,CAAC,UAAU,CACd,IAAU,EACgC,KAAe,EAC1C,KAAa,EACd,OAAgB;QAE9B,MAAM,EACJ,IAAI,EAAE,EAAE,EAAE,EAAE,GACb,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,CAAC;IACZ,CAAC;IAIK,AAAN,KAAK,CAAC,mBAAmB,CACvB,IAAU,EACI,IAAY,EACZ,OAAgB;QAE9B,OAAO,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CACnB,IAAU,EACQ,QAAgB,EACpB,IAAY,EACZ,IAAY,EACZ,OAAgB;QAE9B,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;CACF,CAAA;AA1DY,oCAAY;AAQjB;IAFL,IAAA,2BAAc,GAAE;IAChB,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACX,mBAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IAAiB,mBAAA,IAAA,iBAAU,GAAE,CAAA;;;;iDAE1E;AAIK;IAFL,IAAA,2BAAc,GAAE;IAChB,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAGzC,mBAAA,IAAA,cAAI,EAAC,aAAa,CAAC,CAAA;IACnB,mBAAA,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,iBAAU,GAAE,CAAA;;;;wDAGd;AAIK;IAFL,IAAA,kBAAK,EAAC,OAAO,CAAC;IACd,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAGpB,mBAAA,IAAA,cAAI,EAAC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAO,CAAC,EAAE,CAAC,CAAA;IACxC,mBAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,mBAAA,IAAA,iBAAU,GAAE,CAAA;;;;8CAMd;AAIK;IAFL,IAAA,2BAAc,GAAE;IAChB,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAGrC,mBAAA,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,iBAAU,GAAE,CAAA;;;;uDAGd;AAIK;IAFL,IAAA,2BAAc,GAAE;IAChB,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAGzC,mBAAA,IAAA,cAAI,EAAC,UAAU,CAAC,CAAA;IAChB,mBAAA,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,iBAAU,GAAE,CAAA;;;;mDAGd;uBAzDU,YAAY;IADxB,IAAA,kBAAQ,GAAE;6CAGgC,6CAAoB;QACvB,uCAAiB;GAH5C,YAAY,CA0DxB"}

package/dist/auth/auth.service.d.ts

@@ -1,35 +0,0 @@
-import { HttpException } from '@nestjs/common';
-import { Configuration } from '../configuration';
-import { CredentialRepository, LoginCredentials } from './auth.repository';
-import { UserService } from './user.service';
-import { AuthCallbacks } from './auth.callbacks';
-import { Context, IUser } from '../datastore/context';
-export declare class AuthenticationFailedException extends HttpException {
-    constructor(message: string);
-}
-export declare function hashPassword(password: string): Promise<string>;
-export declare class AuthService {
-    private readonly authRepository;
-    private readonly userService;
-    private readonly configurationProvider;
-    private readonly authCallbacks;
-    private readonly logger;
-    constructor(authRepository: CredentialRepository, userService: UserService<IUser>, configurationProvider: Configuration, authCallbacks: AuthCallbacks);
-    validateUser(context: Context, username: string, password: string): Promise<IUser>;
-    validateFakeLogin(context: Context, secret: string | string[] | undefined, email: string, name: string, roles: string[], orgId: string, props: any): Promise<IUser>;
-    validateUserGoogle(context: Context, inputProfile: object): Promise<IUser>;
-    validateUserSaml(context: Context, profile: SimpleUserProfile): Promise<IUser>;
-    validateUserOidc(context: Context, profile: any, overwriteCredentials: boolean, newUserRoles?: string[]): Promise<IUser>;
-    validateUserAuth0(context: Context, id: string, email: string, name: string, orgId: string, roles: string[], props: any): Promise<IUser>;
-    createAccount(context: Context, email: string, password: string, account: string): Promise<LoginCredentials>;
-    private validateOrCreateExternalAuthAccount;
-    private loadUserAndCheckEnabled;
-    private validateUserEnabled;
-    private getAccountByEmail;
-    private toName;
-}
-export interface SimpleUserProfile {
-    email: string;
-    firstName?: string;
-    lastName?: string;
-}

package/dist/auth/auth.service.js

@@ -1,299 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthService = exports.AuthenticationFailedException = void 0;
-exports.hashPassword = hashPassword;
-const tslib_1 = require("tslib");
-const common_1 = require("@nestjs/common");
-const bcrypt = require("bcryptjs");
-const emails = require("email-addresses");
-const t = require("io-ts");
-const io_ts_reporters_1 = require("io-ts-reporters");
-const lodash_1 = require("lodash");
-const configuration_1 = require("../configuration");
-const auth_repository_1 = require("./auth.repository");
-const user_service_1 = require("./user.service");
-const auth_callbacks_1 = require("./auth.callbacks");
-const logging_1 = require("../logging");
-const transactional_1 = require("../datastore/transactional");
-const Either_1 = require("fp-ts/lib/Either");
-const userProfile = t.type({
-    id: t.string,
-    emails: t.array(t.interface({
-        value: t.string,
-        verified: t.boolean,
-    })),
-    displayName: t.string,
-});
-class AuthenticationFailedException extends common_1.HttpException {
-    constructor(message) {
-        super(message, common_1.HttpStatus.UNAUTHORIZED);
-    }
-}
-exports.AuthenticationFailedException = AuthenticationFailedException;
-const SALT_LENGTH = 10;
-async function hashPassword(password) {
-    return await bcrypt.hash(password, SALT_LENGTH);
-}
-let AuthService = class AuthService {
-    constructor(authRepository, userService, configurationProvider, authCallbacks) {
-        this.authRepository = authRepository;
-        this.userService = userService;
-        this.configurationProvider = configurationProvider;
-        this.authCallbacks = authCallbacks;
-        this.logger = (0, logging_1.createLogger)('account-service');
-    }
-    async validateUser(context, username, password) {
-        const account = await this.getAccountByEmail(context, username);
-        if (!account) {
-            throw new AuthenticationFailedException('No credentials found for user');
-        }
-        if (account.type !== 'password') {
-            throw new AuthenticationFailedException('No credentials found for user');
-        }
-        const result = await bcrypt.compare(password, account.password);
-        if (!result) {
-            throw new AuthenticationFailedException(`Invalid password for user`);
-        }
-        return await this.loadUserAndCheckEnabled(context, account.userId);
-    }
-    async validateFakeLogin(context, secret, email, name, roles, orgId, props) {
-        this.logger.info(`Validating fake login for ${email}`);
-        const configSecret = this.configurationProvider.auth.fake.secret;
-        if (configSecret && configSecret !== secret) {
-            throw new AuthenticationFailedException('Fake login secret invalid');
-        }
-        const user = await this.userService.getByEmail(context, email);
-        if (user) {
-            if (!user.enabled) {
-                throw new AuthenticationFailedException('User account is disabled');
-            }
-            return await this.userService.update(context, user.id, Object.assign(Object.assign({}, user), { name,
-                roles,
-                orgId,
-                props }));
-        }
-        else {
-            return await this.userService.create(context, {
-                email,
-                name,
-                roles,
-                orgId,
-                props,
-                enabled: true,
-            });
-        }
-    }
-    async validateUserGoogle(context, inputProfile) {
-        const validationResult = userProfile.decode(inputProfile);
-        if ((0, Either_1.isLeft)(validationResult)) {
-            throw new Error(io_ts_reporters_1.default.report(validationResult).join(', '));
-        }
-        const profile = validationResult.right;
-        const accountEmails = profile.emails.find(accountEmail => accountEmail.verified);
-        if (!accountEmails) {
-            throw new AuthenticationFailedException('No credentials found for user');
-        }
-        const email = accountEmails.value;
-        const account = await this.getAccountByEmail(context, email);
-        if (!account) {
-            if (!this.configurationProvider.auth.google || !this.configurationProvider.auth.google.signUpEnabled) {
-                throw new AuthenticationFailedException('No credentials found for user');
-            }
-            const { domain } = emails.parseOneAddress(email);
-            const signUpDomains = this.configurationProvider.auth.google.signUpDomains || [];
-            if (!signUpDomains.includes(domain)) {
-                throw new AuthenticationFailedException('No credentials found for user');
-            }
-            const createdUser = await this.userService.create(context, {
-                roles: this.configurationProvider.auth.google.signUpRoles,
-                email,
-                name: profile.displayName,
-                enabled: true,
-            });
-            await this.authRepository.save(context, {
-                id: email,
-                type: 'google',
-                userId: createdUser.id,
-            });
-            return createdUser;
-        }
-        if (account.type !== 'google' && account.type !== 'password') {
-            throw new AuthenticationFailedException('No credentials found for user');
-        }
-        return await this.loadUserAndCheckEnabled(context, account.userId);
-    }
-    async validateUserSaml(context, profile) {
-        return this.validateOrCreateExternalAuthAccount(context, (0, user_service_1.normaliseEmail)(profile.email), {
-            type: 'saml',
-            newUserRequest: () => ({
-                roles: [],
-                email: profile.email,
-                name: this.toName(profile),
-                enabled: true,
-            }),
-        });
-    }
-    async validateUserOidc(context, profile, overwriteCredentials, newUserRoles = []) {
-        const profileJson = profile['_json'];
-        const email = profile.email || (profileJson && profileJson.email);
-        let replaceRolesWithIdpRoles = false;
-        let roles = [];
-        if (this.authCallbacks && this.authCallbacks.buildUserRolesList) {
-            replaceRolesWithIdpRoles = true;
-            roles = this.authCallbacks.buildUserRolesList('oidc', profile);
-        }
-        let props = {};
-        if (this.authCallbacks && this.authCallbacks.buildUserPropertiesObject) {
-            props = this.authCallbacks.buildUserPropertiesObject('oidc', profile);
-        }
-        return this.validateOrCreateExternalAuthAccount(context, (0, user_service_1.normaliseEmail)(email), {
-            type: 'oidc',
-            overwriteCredentials,
-            newUserRequest: () => {
-                const userRoles = replaceRolesWithIdpRoles ? roles : newUserRoles;
-                return {
-                    email,
-                    name: profile.displayName,
-                    roles: userRoles,
-                    props,
-                    enabled: true,
-                };
-            },
-            updateUser: user => {
-                const mergedProps = Object.assign(Object.assign({}, user.props), props);
-                const userRoles = replaceRolesWithIdpRoles ? roles : user.roles || [];
-                return this.userService.update(context, user.id, Object.assign(Object.assign({}, user), { roles: userRoles, props: mergedProps, name: profile.displayName }));
-            },
-        });
-    }
-    async validateUserAuth0(context, id, email, name, orgId, roles, props) {
-        this.logger.info('Validating auth0 account using login identifier: ', id);
-        return this.validateOrCreateExternalAuthAccount(context, id, {
-            type: 'auth0',
-            newUserRequest: () => ({
-                roles,
-                orgId,
-                email,
-                name,
-                props,
-                enabled: true,
-            }),
-            updateUser: user => {
-                user.name = name;
-                user.roles = roles;
-                user.orgId = orgId;
-                user.props = props;
-                user.email = email;
-                return this.userService.update(context, user.id, user);
-            },
-        });
-    }
-    async createAccount(context, email, password, account) {
-        const existingCredentials = await this.getAccountByEmail(context, email);
-        if (!existingCredentials) {
-            return await this.authRepository.save(context, {
-                id: email,
-                password: await hashPassword(password),
-                userId: account,
-                type: 'password',
-            });
-        }
-        return existingCredentials;
-    }
-    async validateOrCreateExternalAuthAccount(context, id, options) {
-        const { newUserRequest, updateUser, type } = options;
-        this.logger.info(`Validating ${type} user profile`);
-        const account = await this.authRepository.get(context, id);
-        if (!account) {
-            this.logger.info(`No login credentials found for ${id}, creating credentials and creating or updating user.`);
-            const updatedUser = await this.userService.createOrUpdate(context, newUserRequest(), this.validateUserEnabled);
-            await this.authRepository.save(context, {
-                id,
-                type,
-                userId: updatedUser.id,
-            });
-            return updatedUser;
-        }
-        if (!options.overwriteCredentials && account.type !== type) {
-            throw new AuthenticationFailedException('No credentials found for user');
-        }
-        const user = await this.loadUserAndCheckEnabled(context, account.userId);
-        if (account.type !== type) {
-            this.logger.info(`Updating auth type to [${type}] for [${id}]`);
-            await this.authRepository.save(context, {
-                id: account.id,
-                type,
-                userId: account.userId,
-            });
-        }
-        this.logger.info(`User ${id} validated`);
-        return updateUser ? await updateUser(user) : user;
-    }
-    async loadUserAndCheckEnabled(context, userId) {
-        const user = await this.userService.get(context, userId);
-        if (!user) {
-            throw new AuthenticationFailedException('User not found');
-        }
-        this.validateUserEnabled(user);
-        return user;
-    }
-    validateUserEnabled(user) {
-        if (!user.enabled) {
-            throw new AuthenticationFailedException('User account is disabled');
-        }
-    }
-    getAccountByEmail(context, email) {
-        const normalisedEmail = (0, user_service_1.normaliseEmail)(email);
-        this.logger.info(`Looking up user by email ${normalisedEmail}`);
-        return this.authRepository.get(context, normalisedEmail);
-    }
-    toName(profile) {
-        return [profile.firstName, profile.lastName].filter(part => !(0, lodash_1.isNil)(part)).join(' ');
-    }
-};
-exports.AuthService = AuthService;
-tslib_1.__decorate([
-    (0, transactional_1.Transactional)(),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, Object, String, String, Array, String, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthService.prototype, "validateFakeLogin", null);
-tslib_1.__decorate([
-    (0, transactional_1.Transactional)(),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthService.prototype, "validateUserGoogle", null);
-tslib_1.__decorate([
-    (0, transactional_1.Transactional)(),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthService.prototype, "validateUserSaml", null);
-tslib_1.__decorate([
-    (0, transactional_1.Transactional)(),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, Object, Boolean, Array]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthService.prototype, "validateUserOidc", null);
-tslib_1.__decorate([
-    (0, transactional_1.Transactional)(),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, String, String, String, String, Array, Object]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthService.prototype, "validateUserAuth0", null);
-tslib_1.__decorate([
-    (0, transactional_1.Transactional)(),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, String, String, String]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthService.prototype, "createAccount", null);
-exports.AuthService = AuthService = tslib_1.__decorate([
-    (0, common_1.Injectable)(),
-    tslib_1.__param(1, (0, common_1.Inject)(user_service_1.USER_SERVICE)),
-    tslib_1.__param(2, (0, common_1.Inject)(configuration_1.CONFIGURATION)),
-    tslib_1.__param(3, (0, common_1.Optional)()),
-    tslib_1.__param(3, (0, common_1.Inject)(auth_callbacks_1.AUTH_CALLBACKS)),
-    tslib_1.__metadata("design:paramtypes", [auth_repository_1.CredentialRepository, Object, Object, Object])
-], AuthService);
-//# sourceMappingURL=auth.service.js.map

package/dist/auth/auth.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../src/auth/auth.service.ts"],"names":[],"mappings":";;;AAiCA,oCAEC;;AAnCD,2CAAyF;AACzF,mCAAmC;AACnC,0CAA0C;AAC1C,2BAA2B;AAC3B,qDAA2C;AAC3C,mCAA+B;AAC/B,oDAAgE;AAChE,uDAA6F;AAC7F,iDAA2E;AAC3E,qDAAiE;AACjE,wCAAkD;AAElD,8DAA2D;AAC3D,6CAA0C;AAE1C,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IACzB,EAAE,EAAE,CAAC,CAAC,MAAM;IACZ,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,SAAS,CAAC;QACV,KAAK,EAAE,CAAC,CAAC,MAAM;QACf,QAAQ,EAAE,CAAC,CAAC,OAAO;KACpB,CAAC,CACH;IACD,WAAW,EAAE,CAAC,CAAC,MAAM;CACtB,CAAC,CAAC;AAEH,MAAa,6BAA8B,SAAQ,sBAAa;IAC9D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC;CACF;AAJD,sEAIC;AACD,MAAM,WAAW,GAAG,EAAE,CAAC;AAEhB,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAGM,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGtB,YACmB,cAAoC,EACd,WAA+B,EAC9B,qBAAoC,EACvB,aAA4B;QAHhE,mBAAc,GAAd,cAAc,CAAsB;QACd,gBAAW,GAAX,WAAW,CAAoB;QAC9B,0BAAqB,GAArB,qBAAqB,CAAe;QACvB,kBAAa,GAAb,aAAa,CAAe;QAEjF,IAAI,CAAC,MAAM,GAAG,IAAA,sBAAY,EAAC,iBAAiB,CAAC,CAAC;IAChD,CAAC;IAWD,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,QAAgB,EAAE,QAAgB;QACrE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEhE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,6BAA6B,CAAC,2BAA2B,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAGK,AAAN,KAAK,CAAC,iBAAiB,CACrB,OAAgB,EAChB,MAAqC,EACrC,KAAa,EACb,IAAY,EACZ,KAAe,EACf,KAAa,EACb,KAAU;QAEV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;QAEvD,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAK,CAAC,MAAM,CAAC;QAClE,IAAI,YAAY,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5C,MAAM,IAAI,6BAA6B,CAAC,2BAA2B,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE/D,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,6BAA6B,CAAC,0BAA0B,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,kCAChD,IAAI,KACP,IAAI;gBACJ,KAAK;gBACL,KAAK;gBACL,KAAK,IACL,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE;gBAC5C,KAAK;gBACL,IAAI;gBACJ,KAAK;gBACL,KAAK;gBACL,KAAK;gBACL,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAaK,AAAN,KAAK,CAAC,kBAAkB,CAAC,OAAgB,EAAE,YAAoB;QAC7D,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAE1D,IAAI,IAAA,eAAM,EAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,yBAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEjF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAO7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBACrG,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAyB,CAAC;YAEzE,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;YACjF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE;gBACzD,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;gBACzD,KAAK;gBACL,IAAI,EAAE,OAAO,CAAC,WAAW;gBACzB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;gBACtC,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,WAAW,CAAC,EAAE;aACvB,CAAC,CAAC;YAEH,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7D,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAWK,AAAN,KAAK,CAAC,gBAAgB,CAAC,OAAgB,EAAE,OAA0B;QACjE,OAAO,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,IAAA,6BAAc,EAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACtF,IAAI,EAAE,MAAM;YACZ,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrB,KAAK,EAAE,EAAE;gBACT,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC1B,OAAO,EAAE,IAAI;aACd,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB,CACpB,OAAgB,EAChB,OAAY,EACZ,oBAA6B,EAC7B,eAAyB,EAAE;QAG3B,MAAM,WAAW,GAAI,OAAe,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;QAGlE,IAAI,wBAAwB,GAAY,KAAK,CAAC;QAC9C,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,kBAAkB,EAAE,CAAC;YAEhE,wBAAwB,GAAG,IAAI,CAAC;YAEhC,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjE,CAAC;QAGD,IAAI,KAAK,GAAQ,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,yBAAyB,EAAE,CAAC;YACvE,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,IAAA,6BAAc,EAAC,KAAK,CAAC,EAAE;YAC9E,IAAI,EAAE,MAAM;YACZ,oBAAoB;YACpB,cAAc,EAAE,GAAG,EAAE;gBACnB,MAAM,SAAS,GAAa,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;gBAC5E,OAAO;oBACL,KAAK;oBACL,IAAI,EAAE,OAAO,CAAC,WAAW;oBACzB,KAAK,EAAE,SAAS;oBAChB,KAAK;oBACL,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,UAAU,EAAE,IAAI,CAAC,EAAE;gBACjB,MAAM,WAAW,mCAAQ,IAAI,CAAC,KAAK,GAAK,KAAK,CAAE,CAAC;gBAChD,MAAM,SAAS,GAAa,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,KAAkB,IAAI,EAAE,CAAC;gBAC9F,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,kCAC1C,IAAI,KACP,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,OAAO,CAAC,WAAW,IACzB,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,iBAAiB,CACrB,OAAgB,EAChB,EAAU,EACV,KAAa,EACb,IAAY,EACZ,KAAa,EACb,KAAe,EACf,KAAU;QAEV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,EAAE,EAAE;YAC3D,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrB,KAAK;gBACL,KAAK;gBACL,KAAK;gBACL,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,IAAI;aACd,CAAC;YACF,UAAU,EAAE,IAAI,CAAC,EAAE;gBACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAaK,AAAN,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,KAAa,EAAE,QAAgB,EAAE,OAAe;QACpF,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEzE,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;gBAC7C,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC;gBACtC,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,UAAU;aACjB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,mCAAmC,CAC/C,OAAgB,EAChB,EAAU,EACV,OAAwB;QAExB,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,eAAe,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,uDAAuD,CAAC,CAAC;YAE9G,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAE/G,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;gBACtC,EAAE;gBACF,IAAI;gBACJ,MAAM,EAAE,WAAW,CAAC,EAAE;aACvB,CAAC,CAAC;YAEH,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3D,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAEzE,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,IAAI,UAAU,EAAE,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;gBACtC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzC,OAAO,UAAU,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,OAAgB,EAAE,MAAc;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEzD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,mBAAmB,CAAC,IAAW;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,6BAA6B,CAAC,0BAA0B,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,OAAgB,EAAE,KAAa;QACvD,MAAM,eAAe,GAAG,IAAA,6BAAc,EAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,eAAe,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC3D,CAAC;IAEO,MAAM,CAAC,OAA0B;QACvC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAA,cAAK,EAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtF,CAAC;CACF,CAAA;AA/VY,kCAAW;AA0ChB;IADL,IAAA,6BAAa,GAAE;;;;oDAwCf;AAaK;IADL,IAAA,6BAAa,GAAE;;;;qDAwDf;AAWK;IADL,IAAA,6BAAa,GAAE;;;;mDAWf;AAGK;IADL,IAAA,6BAAa,GAAE;;;;mDAmDf;AAGK;IADL,IAAA,6BAAa,GAAE;;;;oDA8Bf;AAaK;IADL,IAAA,6BAAa,GAAE;;;;gDAcf;sBAzRU,WAAW;IADvB,IAAA,mBAAU,GAAE;IAMR,mBAAA,IAAA,eAAM,EAAC,2BAAY,CAAC,CAAA;IACpB,mBAAA,IAAA,eAAM,EAAC,6BAAa,CAAC,CAAA;IACrB,mBAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,mBAAA,IAAA,eAAM,EAAC,+BAAc,CAAC,CAAA;6CAHF,sCAAoB;GAJ5C,WAAW,CA+VvB"}

package/dist/auth/auth.task.controller.d.ts

@@ -1,13 +0,0 @@
-import { MailSender } from '../mail/mail.sender';
-import { Context } from '../datastore/context';
-import { Configuration } from '../configuration';
-export declare class AuthTaskController {
-    private readonly configuration;
-    private readonly mailSender;
-    private readonly logger;
-    constructor(configuration: Configuration, mailSender: MailSender);
-    sendActivationEmail(context: Context, inviteId: string, email: string): Promise<void>;
-    sendPasswordResetEmail(context: Context, resetId: string, email: string): Promise<void>;
-    private getActivationExpiryEmailCopy;
-    private getInvitationCopy;
-}

package/dist/auth/auth.task.controller.js

@@ -1,76 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthTaskController = void 0;
-const tslib_1 = require("tslib");
-const auth_guard_1 = require("./auth.guard");
-const common_1 = require("@nestjs/common");
-const mail_sender_1 = require("../mail/mail.sender");
-const context_1 = require("../datastore/context");
-const configuration_1 = require("../configuration");
-const invite_1 = require("../mail-templates/invite");
-const logging_1 = require("../logging");
-const DEFAULT_INVITE_CODE_EXPIRY_EMAIL_COPY = '7 days';
-const DEFAULT_INVITATION_EMAIL_COPY = 'You have been invited as a new user.';
-let AuthTaskController = class AuthTaskController {
-    constructor(configuration, mailSender) {
-        this.configuration = configuration;
-        this.mailSender = mailSender;
-        this.getActivationExpiryEmailCopy = () => !(this.configuration.auth.local && this.configuration.auth.local.activationExpiryInMinutes)
-            ? DEFAULT_INVITE_CODE_EXPIRY_EMAIL_COPY
-            : this.configuration.auth.local.activationExpiryEmailCopy;
-        this.getInvitationCopy = () => !(this.configuration.auth.local && this.configuration.auth.local.invitationEmailCopy)
-            ? DEFAULT_INVITATION_EMAIL_COPY
-            : this.configuration.auth.local.invitationEmailCopy;
-        this.logger = (0, logging_1.createLogger)('auth-task-controller');
-    }
-    async sendActivationEmail(context, inviteId, email) {
-        const activateLink = `${this.configuration.host}/activate/${inviteId}`;
-        this.logger.info(`Sending invitation email to ${email} with link ${activateLink}`);
-        const title = 'Activate your account';
-        await this.mailSender.send(context, {
-            to: email,
-            subject: title,
-            html: (0, invite_1.userInviteEmail)(title, activateLink, this.getInvitationCopy(), this.getActivationExpiryEmailCopy()),
-        });
-    }
-    async sendPasswordResetEmail(context, resetId, email) {
-        const address = `${this.configuration.host}/confirm-reset/${resetId}`;
-        await this.mailSender.send(context, {
-            to: email,
-            subject: 'Password reset',
-            html: `
-        <html>
-        <head></head>
-        <body><a href="${address}">Reset your password</a></body>
-        </html>
-      `,
-        });
-    }
-};
-exports.AuthTaskController = AuthTaskController;
-tslib_1.__decorate([
-    (0, common_1.Post)('/activation-email'),
-    tslib_1.__param(0, (0, context_1.Ctxt)()),
-    tslib_1.__param(1, (0, common_1.Body)('inviteId')),
-    tslib_1.__param(2, (0, common_1.Body)('email')),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, String, String]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthTaskController.prototype, "sendActivationEmail", null);
-tslib_1.__decorate([
-    (0, common_1.Post)('/password-reset-email'),
-    tslib_1.__param(0, (0, context_1.Ctxt)()),
-    tslib_1.__param(1, (0, common_1.Body)('resetId')),
-    tslib_1.__param(2, (0, common_1.Body)('email')),
-    tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [Object, String, String]),
-    tslib_1.__metadata("design:returntype", Promise)
-], AuthTaskController.prototype, "sendPasswordResetEmail", null);
-exports.AuthTaskController = AuthTaskController = tslib_1.__decorate([
-    (0, auth_guard_1.Task)(),
-    (0, common_1.Controller)('/tasks/auth'),
-    tslib_1.__param(0, (0, common_1.Inject)(configuration_1.CONFIGURATION)),
-    tslib_1.__param(1, (0, common_1.Inject)(mail_sender_1.MAIL_SENDER)),
-    tslib_1.__metadata("design:paramtypes", [Object, Object])
-], AuthTaskController);
-//# sourceMappingURL=auth.task.controller.js.map

package/dist/auth/auth.task.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.task.controller.js","sourceRoot":"","sources":["../../src/auth/auth.task.controller.ts"],"names":[],"mappings":";;;;AAAA,6CAAoC;AACpC,2CAAgE;AAChE,qDAA8D;AAC9D,kDAAqD;AACrD,oDAAgE;AAChE,qDAA2D;AAC3D,wCAAkD;AAElD,MAAM,qCAAqC,GAAG,QAAQ,CAAC;AACvD,MAAM,6BAA6B,GAAG,sCAAsC,CAAC;AAItE,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAG7B,YACyB,aAA6C,EAC/C,UAAuC;QADpB,kBAAa,GAAb,aAAa,CAAe;QAC9B,eAAU,GAAV,UAAU,CAAY;QAwCtD,iCAA4B,GAAG,GAAuB,EAAE,CAC9D,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC;YACzF,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC;QAEtD,sBAAiB,GAAG,GAAW,EAAE,CACvC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;YACnF,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;QA9CtD,IAAI,CAAC,MAAM,GAAG,IAAA,sBAAY,EAAC,sBAAsB,CAAC,CAAC;IACrD,CAAC;IAGK,AAAN,KAAK,CAAC,mBAAmB,CACf,OAAgB,EACN,QAAgB,EACnB,KAAa;QAE5B,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,aAAa,QAAQ,EAAE,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,KAAK,cAAc,YAAY,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,uBAAuB,CAAC;QACtC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE;YAClC,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,IAAA,wBAAe,EAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,CAAC,4BAA4B,EAAE,CAAC;SAC1G,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,sBAAsB,CAClB,OAAgB,EACP,OAAe,EACjB,KAAa;QAE5B,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,kBAAkB,OAAO,EAAE,CAAC;QACtE,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE;YAClC,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE;;;yBAGa,OAAO;;OAEzB;SACF,CAAC,CAAC;IACL,CAAC;CAWF,CAAA;AAtDY,gDAAkB;AAWvB;IADL,IAAA,aAAI,EAAC,mBAAmB,CAAC;IAEvB,mBAAA,IAAA,cAAI,GAAE,CAAA;IACN,mBAAA,IAAA,aAAI,EAAC,UAAU,CAAC,CAAA;IAChB,mBAAA,IAAA,aAAI,EAAC,OAAO,CAAC,CAAA;;;;6DAUf;AAGK;IADL,IAAA,aAAI,EAAC,uBAAuB,CAAC;IAE3B,mBAAA,IAAA,cAAI,GAAE,CAAA;IACN,mBAAA,IAAA,aAAI,EAAC,SAAS,CAAC,CAAA;IACf,mBAAA,IAAA,aAAI,EAAC,OAAO,CAAC,CAAA;;;;gEAaf;6BA3CU,kBAAkB;IAF9B,IAAA,iBAAI,GAAE;IACN,IAAA,mBAAU,EAAC,aAAa,CAAC;IAKrB,mBAAA,IAAA,eAAM,EAAC,6BAAa,CAAC,CAAA;IACrB,mBAAA,IAAA,eAAM,EAAC,yBAAW,CAAC,CAAA;;GALX,kBAAkB,CAsD9B"}

package/dist/auth/auth.task.service.d.ts

@@ -1,8 +0,0 @@
-import { TaskQueue } from '../gcloud/tasks';
-import { Configuration } from '../configuration';
-export declare class AuthTaskService extends TaskQueue<Configuration> {
-    private readonly configuration;
-    constructor(configuration: Configuration);
-    queueActivationEmail(inviteId: string, email: string): Promise<void>;
-    queuePasswordResetEmail(resetId: string, email: string): Promise<void>;
-}

package/dist/auth/auth.task.service.js

@@ -1,26 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthTaskService = void 0;
-const tslib_1 = require("tslib");
-const common_1 = require("@nestjs/common");
-const tasks_1 = require("../gcloud/tasks");
-const configuration_1 = require("../configuration");
-let AuthTaskService = class AuthTaskService extends tasks_1.TaskQueue {
-    constructor(configuration) {
-        super(configuration, 'default');
-        this.configuration = configuration;
-    }
-    queueActivationEmail(inviteId, email) {
-        return this.enqueue('auth/activation-email', { inviteId, email });
-    }
-    queuePasswordResetEmail(resetId, email) {
-        return this.enqueue('auth/password-reset-email', { resetId, email });
-    }
-};
-exports.AuthTaskService = AuthTaskService;
-exports.AuthTaskService = AuthTaskService = tslib_1.__decorate([
-    (0, common_1.Injectable)(),
-    tslib_1.__param(0, (0, common_1.Inject)(configuration_1.CONFIGURATION)),
-    tslib_1.__metadata("design:paramtypes", [Object])
-], AuthTaskService);
-//# sourceMappingURL=auth.task.service.js.map

package/dist/auth/auth.task.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.task.service.js","sourceRoot":"","sources":["../../src/auth/auth.task.service.ts"],"names":[],"mappings":";;;;AAAA,2CAAoD;AACpD,2CAA4C;AAC5C,oDAAgE;AAGzD,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,iBAAwB;IAC3D,YAAoD,aAA4B;QAC9E,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QADkB,kBAAa,GAAb,aAAa,CAAe;IAEhF,CAAC;IAED,oBAAoB,CAAC,QAAgB,EAAE,KAAa;QAClD,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,uBAAuB,CAAC,OAAe,EAAE,KAAa;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;CACF,CAAA;AAZY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAEE,mBAAA,IAAA,eAAM,EAAC,6BAAa,CAAC,CAAA;;GADvB,eAAe,CAY3B"}

package/dist/auth/csrf.interceptor.d.ts

@@ -1,11 +0,0 @@
-import { Response, NextFunction, RequestHandler } from 'express';
-import { Request } from 'express-serve-static-core';
-interface CsrfValidatorOptions {
-    sameSite: boolean;
-}
-interface RequestHandlerWithOptions {
-    (req: Request, res: Response, next: NextFunction, options: CsrfValidatorOptions): any;
-}
-export declare const CsrfValidator: RequestHandlerWithOptions;
-export declare const CsrfValidatorWithOptions: (options: CsrfValidatorOptions) => (req: any, res: Response, next: NextFunction) => RequestHandler;
-export {};

package/dist/auth/csrf.interceptor.js

@@ -1,38 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CsrfValidatorWithOptions = exports.CsrfValidator = void 0;
-const uuid_1 = require("uuid");
-const generateToken = () => (process.env.APP_ENGINE_ENVIRONMENT ? (0, uuid_1.v4)() : 'development');
-const defaultValidatorOptions = {
-    sameSite: true,
-};
-const CsrfValidator = (req, res, next, options) => {
-    options = Object.assign(Object.assign({}, defaultValidatorOptions), options);
-    if (req.session && !req.session.csrf) {
-        req.session.csrf = generateToken();
-        res.cookie('csrf-token', req.session.csrf, {
-            sameSite: options.sameSite,
-            maxAge: 9999999999,
-        });
-    }
-    if (req.method === 'GET' || req.method === 'OPTIONS' || req.method === 'HEAD') {
-        return next();
-    }
-    if (req.headers && req.session) {
-        const token = req.headers['x-csrf-token'];
-        if (token && token === req.session.csrf) {
-            return next();
-        }
-    }
-    res.status(403).send({
-        message: 'Invalid CSRF token',
-    });
-};
-exports.CsrfValidator = CsrfValidator;
-const CsrfValidatorWithOptions = (options) => {
-    return (req, res, next) => {
-        return (0, exports.CsrfValidator)(req, res, next, options);
-    };
-};
-exports.CsrfValidatorWithOptions = CsrfValidatorWithOptions;
-//# sourceMappingURL=csrf.interceptor.js.map

package/dist/auth/csrf.interceptor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"csrf.interceptor.js","sourceRoot":"","sources":["../../src/auth/csrf.interceptor.ts"],"names":[],"mappings":";;;AACA,+BAAoC;AAGpC,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAA,SAAM,GAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AAM5F,MAAM,uBAAuB,GAAyB;IACpD,QAAQ,EAAE,IAAI;CACf,CAAC;AAOK,MAAM,aAAa,GAA8B,CACtD,GAAQ,EACR,GAAa,EACb,IAAkB,EAClB,OAA6B,EAC7B,EAAE;IACF,OAAO,mCAAQ,uBAAuB,GAAK,OAAO,CAAE,CAAC;IAErD,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;YACzC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9E,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAE1C,IAAI,KAAK,IAAI,KAAK,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,oBAAoB;KAC9B,CAAC,CAAC;AACL,CAAC,CAAC;AA/BW,QAAA,aAAa,iBA+BxB;AAEK,MAAM,wBAAwB,GAAG,CAAC,OAA6B,EAAE,EAAE;IACxE,OAAO,CAAC,GAAQ,EAAE,GAAa,EAAE,IAAkB,EAAkB,EAAE;QACrE,OAAO,IAAA,qBAAa,EAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC,CAAC;AAJW,QAAA,wBAAwB,4BAInC"}