@mondomob/gae-node-nestjs 12.0.0-alpha-2 → 12.0.0-alpha-3

package/dist/auth/auth.resolver.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthResolver = void 0;
+const tslib_1 = require("tslib");
+const graphql_1 = require("@nestjs/graphql");
+const auth_guard_1 = require("./auth.guard");
+const invite_user_service_1 = require("./invite-user.service");
+const password_reset_service_1 = require("./password-reset.service");
+let AuthResolver = class AuthResolver {
+    constructor(passwordResetService, inviteUserService) {
+        this.passwordResetService = passwordResetService;
+        this.inviteUserService = inviteUserService;
+    }
+    async resetPassword(_req, email, context) {
+        return await this.passwordResetService.resetPassword(context, email);
+    }
+    async confirmResetPassword(_req, newPassword, code, context) {
+        return await this.passwordResetService.confirmResetPassword(context, code, newPassword);
+    }
+    async inviteUser(_req, roles, email, context) {
+        const { user: { id }, } = await this.inviteUserService.inviteUser(context, { email, roles });
+        return id;
+    }
+    async checkActivationCode(_req, code, context) {
+        return this.inviteUserService.checkActivationCode(context, code);
+    }
+    async activateAccount(_req, password, name, code, context) {
+        await this.inviteUserService.activateAccount(context, code, name, password);
+    }
+};
+exports.AuthResolver = AuthResolver;
+tslib_1.__decorate([
+    (0, auth_guard_1.AllowAnonymous)(),
+    (0, graphql_1.Mutation)(() => Boolean, { nullable: true }),
+    tslib_1.__param(1, (0, graphql_1.Args)('email')),
+    tslib_1.__param(2, (0, graphql_1.Context)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [void 0, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthResolver.prototype, "resetPassword", null);
+tslib_1.__decorate([
+    (0, auth_guard_1.AllowAnonymous)(),
+    (0, graphql_1.Mutation)(() => Boolean, { nullable: true }),
+    tslib_1.__param(1, (0, graphql_1.Args)('newPassword')),
+    tslib_1.__param(2, (0, graphql_1.Args)('code')),
+    tslib_1.__param(3, (0, graphql_1.Context)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [void 0, String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthResolver.prototype, "confirmResetPassword", null);
+tslib_1.__decorate([
+    (0, auth_guard_1.Roles)('admin'),
+    (0, graphql_1.Mutation)(() => String),
+    tslib_1.__param(1, (0, graphql_1.Args)('roles', { type: () => [String] })),
+    tslib_1.__param(2, (0, graphql_1.Args)('email')),
+    tslib_1.__param(3, (0, graphql_1.Context)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [void 0, Array, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthResolver.prototype, "inviteUser", null);
+tslib_1.__decorate([
+    (0, auth_guard_1.AllowAnonymous)(),
+    (0, graphql_1.Query)(() => String, { nullable: true }),
+    tslib_1.__param(1, (0, graphql_1.Args)('code')),
+    tslib_1.__param(2, (0, graphql_1.Context)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [void 0, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthResolver.prototype, "checkActivationCode", null);
+tslib_1.__decorate([
+    (0, auth_guard_1.AllowAnonymous)(),
+    (0, graphql_1.Mutation)(() => Boolean, { nullable: true }),
+    tslib_1.__param(1, (0, graphql_1.Args)('password')),
+    tslib_1.__param(2, (0, graphql_1.Args)('name')),
+    tslib_1.__param(3, (0, graphql_1.Args)('code')),
+    tslib_1.__param(4, (0, graphql_1.Context)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [void 0, String, String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthResolver.prototype, "activateAccount", null);
+exports.AuthResolver = AuthResolver = tslib_1.__decorate([
+    (0, graphql_1.Resolver)(),
+    tslib_1.__metadata("design:paramtypes", [password_reset_service_1.PasswordResetService,
+        invite_user_service_1.InviteUserService])
+], AuthResolver);
+//# sourceMappingURL=auth.resolver.js.map

package/dist/auth/auth.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.resolver.js","sourceRoot":"","sources":["../../src/auth/auth.resolver.ts"],"names":[],"mappings":";;;;AAAA,6CAAyF;AACzF,6CAAqD;AACrD,+DAA0D;AAC1D,qEAAgE;AAIzD,IAAM,YAAY,GAAlB,MAAM,YAAY;IACvB,YACmB,oBAA0C,EAC1C,iBAAoC;QADpC,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAIE,AAAN,KAAK,CAAC,aAAa,CAAC,IAAU,EAAiB,KAAa,EAAgB,OAAgB;QAC1F,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IAIK,AAAN,KAAK,CAAC,oBAAoB,CACxB,IAAU,EACW,WAAmB,EAC1B,IAAY,EACZ,OAAgB;QAE9B,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1F,CAAC;IAIK,AAAN,KAAK,CAAC,UAAU,CACd,IAAU,EACgC,KAAe,EAC1C,KAAa,EACd,OAAgB;QAE9B,MAAM,EACJ,IAAI,EAAE,EAAE,EAAE,EAAE,GACb,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,CAAC;IACZ,CAAC;IAIK,AAAN,KAAK,CAAC,mBAAmB,CACvB,IAAU,EACI,IAAY,EACZ,OAAgB;QAE9B,OAAO,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CACnB,IAAU,EACQ,QAAgB,EACpB,IAAY,EACZ,IAAY,EACZ,OAAgB;QAE9B,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;CACF,CAAA;AA1DY,oCAAY;AAQjB;IAFL,IAAA,2BAAc,GAAE;IAChB,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACX,mBAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IAAiB,mBAAA,IAAA,iBAAU,GAAE,CAAA;;;;iDAE1E;AAIK;IAFL,IAAA,2BAAc,GAAE;IAChB,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAGzC,mBAAA,IAAA,cAAI,EAAC,aAAa,CAAC,CAAA;IACnB,mBAAA,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,iBAAU,GAAE,CAAA;;;;wDAGd;AAIK;IAFL,IAAA,kBAAK,EAAC,OAAO,CAAC;IACd,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAGpB,mBAAA,IAAA,cAAI,EAAC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAO,CAAC,EAAE,CAAC,CAAA;IACxC,mBAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,mBAAA,IAAA,iBAAU,GAAE,CAAA;;;;8CAMd;AAIK;IAFL,IAAA,2BAAc,GAAE;IAChB,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAGrC,mBAAA,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,iBAAU,GAAE,CAAA;;;;uDAGd;AAIK;IAFL,IAAA,2BAAc,GAAE;IAChB,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAGzC,mBAAA,IAAA,cAAI,EAAC,UAAU,CAAC,CAAA;IAChB,mBAAA,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,iBAAU,GAAE,CAAA;;;;mDAGd;uBAzDU,YAAY;IADxB,IAAA,kBAAQ,GAAE;6CAGgC,6CAAoB;QACvB,uCAAiB;GAH5C,YAAY,CA0DxB"}

package/dist/auth/auth.service.d.ts

@@ -0,0 +1,35 @@
+import { HttpException } from '@nestjs/common';
+import { Configuration } from '../configuration';
+import { CredentialRepository, LoginCredentials } from './auth.repository';
+import { UserService } from './user.service';
+import { AuthCallbacks } from './auth.callbacks';
+import { Context, IUser } from '../datastore/context';
+export declare class AuthenticationFailedException extends HttpException {
+    constructor(message: string);
+}
+export declare function hashPassword(password: string): Promise<string>;
+export declare class AuthService {
+    private readonly authRepository;
+    private readonly userService;
+    private readonly configurationProvider;
+    private readonly authCallbacks;
+    private readonly logger;
+    constructor(authRepository: CredentialRepository, userService: UserService<IUser>, configurationProvider: Configuration, authCallbacks: AuthCallbacks);
+    validateUser(context: Context, username: string, password: string): Promise<IUser>;
+    validateFakeLogin(context: Context, secret: string | string[] | undefined, email: string, name: string, roles: string[], orgId: string, props: any): Promise<IUser>;
+    validateUserGoogle(context: Context, inputProfile: object): Promise<IUser>;
+    validateUserSaml(context: Context, profile: SimpleUserProfile): Promise<IUser>;
+    validateUserOidc(context: Context, profile: any, overwriteCredentials: boolean, newUserRoles?: string[]): Promise<IUser>;
+    validateUserAuth0(context: Context, id: string, email: string, name: string, orgId: string, roles: string[], props: any): Promise<IUser>;
+    createAccount(context: Context, email: string, password: string, account: string): Promise<LoginCredentials>;
+    private validateOrCreateExternalAuthAccount;
+    private loadUserAndCheckEnabled;
+    private validateUserEnabled;
+    private getAccountByEmail;
+    private toName;
+}
+export interface SimpleUserProfile {
+    email: string;
+    firstName?: string;
+    lastName?: string;
+}

package/dist/auth/auth.service.js

@@ -0,0 +1,299 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = exports.AuthenticationFailedException = void 0;
+exports.hashPassword = hashPassword;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const bcrypt = require("bcryptjs");
+const emails = require("email-addresses");
+const t = require("io-ts");
+const io_ts_reporters_1 = require("io-ts-reporters");
+const lodash_1 = require("lodash");
+const configuration_1 = require("../configuration");
+const auth_repository_1 = require("./auth.repository");
+const user_service_1 = require("./user.service");
+const auth_callbacks_1 = require("./auth.callbacks");
+const logging_1 = require("../logging");
+const transactional_1 = require("../datastore/transactional");
+const Either_1 = require("fp-ts/lib/Either");
+const userProfile = t.type({
+    id: t.string,
+    emails: t.array(t.interface({
+        value: t.string,
+        verified: t.boolean,
+    })),
+    displayName: t.string,
+});
+class AuthenticationFailedException extends common_1.HttpException {
+    constructor(message) {
+        super(message, common_1.HttpStatus.UNAUTHORIZED);
+    }
+}
+exports.AuthenticationFailedException = AuthenticationFailedException;
+const SALT_LENGTH = 10;
+async function hashPassword(password) {
+    return await bcrypt.hash(password, SALT_LENGTH);
+}
+let AuthService = class AuthService {
+    constructor(authRepository, userService, configurationProvider, authCallbacks) {
+        this.authRepository = authRepository;
+        this.userService = userService;
+        this.configurationProvider = configurationProvider;
+        this.authCallbacks = authCallbacks;
+        this.logger = (0, logging_1.createLogger)('account-service');
+    }
+    async validateUser(context, username, password) {
+        const account = await this.getAccountByEmail(context, username);
+        if (!account) {
+            throw new AuthenticationFailedException('No credentials found for user');
+        }
+        if (account.type !== 'password') {
+            throw new AuthenticationFailedException('No credentials found for user');
+        }
+        const result = await bcrypt.compare(password, account.password);
+        if (!result) {
+            throw new AuthenticationFailedException(`Invalid password for user`);
+        }
+        return await this.loadUserAndCheckEnabled(context, account.userId);
+    }
+    async validateFakeLogin(context, secret, email, name, roles, orgId, props) {
+        this.logger.info(`Validating fake login for ${email}`);
+        const configSecret = this.configurationProvider.auth.fake.secret;
+        if (configSecret && configSecret !== secret) {
+            throw new AuthenticationFailedException('Fake login secret invalid');
+        }
+        const user = await this.userService.getByEmail(context, email);
+        if (user) {
+            if (!user.enabled) {
+                throw new AuthenticationFailedException('User account is disabled');
+            }
+            return await this.userService.update(context, user.id, Object.assign(Object.assign({}, user), { name,
+                roles,
+                orgId,
+                props }));
+        }
+        else {
+            return await this.userService.create(context, {
+                email,
+                name,
+                roles,
+                orgId,
+                props,
+                enabled: true,
+            });
+        }
+    }
+    async validateUserGoogle(context, inputProfile) {
+        const validationResult = userProfile.decode(inputProfile);
+        if ((0, Either_1.isLeft)(validationResult)) {
+            throw new Error(io_ts_reporters_1.default.report(validationResult).join(', '));
+        }
+        const profile = validationResult.right;
+        const accountEmails = profile.emails.find(accountEmail => accountEmail.verified);
+        if (!accountEmails) {
+            throw new AuthenticationFailedException('No credentials found for user');
+        }
+        const email = accountEmails.value;
+        const account = await this.getAccountByEmail(context, email);
+        if (!account) {
+            if (!this.configurationProvider.auth.google || !this.configurationProvider.auth.google.signUpEnabled) {
+                throw new AuthenticationFailedException('No credentials found for user');
+            }
+            const { domain } = emails.parseOneAddress(email);
+            const signUpDomains = this.configurationProvider.auth.google.signUpDomains || [];
+            if (!signUpDomains.includes(domain)) {
+                throw new AuthenticationFailedException('No credentials found for user');
+            }
+            const createdUser = await this.userService.create(context, {
+                roles: this.configurationProvider.auth.google.signUpRoles,
+                email,
+                name: profile.displayName,
+                enabled: true,
+            });
+            await this.authRepository.save(context, {
+                id: email,
+                type: 'google',
+                userId: createdUser.id,
+            });
+            return createdUser;
+        }
+        if (account.type !== 'google' && account.type !== 'password') {
+            throw new AuthenticationFailedException('No credentials found for user');
+        }
+        return await this.loadUserAndCheckEnabled(context, account.userId);
+    }
+    async validateUserSaml(context, profile) {
+        return this.validateOrCreateExternalAuthAccount(context, (0, user_service_1.normaliseEmail)(profile.email), {
+            type: 'saml',
+            newUserRequest: () => ({
+                roles: [],
+                email: profile.email,
+                name: this.toName(profile),
+                enabled: true,
+            }),
+        });
+    }
+    async validateUserOidc(context, profile, overwriteCredentials, newUserRoles = []) {
+        const profileJson = profile['_json'];
+        const email = profile.email || (profileJson && profileJson.email);
+        let replaceRolesWithIdpRoles = false;
+        let roles = [];
+        if (this.authCallbacks && this.authCallbacks.buildUserRolesList) {
+            replaceRolesWithIdpRoles = true;
+            roles = this.authCallbacks.buildUserRolesList('oidc', profile);
+        }
+        let props = {};
+        if (this.authCallbacks && this.authCallbacks.buildUserPropertiesObject) {
+            props = this.authCallbacks.buildUserPropertiesObject('oidc', profile);
+        }
+        return this.validateOrCreateExternalAuthAccount(context, (0, user_service_1.normaliseEmail)(email), {
+            type: 'oidc',
+            overwriteCredentials,
+            newUserRequest: () => {
+                const userRoles = replaceRolesWithIdpRoles ? roles : newUserRoles;
+                return {
+                    email,
+                    name: profile.displayName,
+                    roles: userRoles,
+                    props,
+                    enabled: true,
+                };
+            },
+            updateUser: user => {
+                const mergedProps = Object.assign(Object.assign({}, user.props), props);
+                const userRoles = replaceRolesWithIdpRoles ? roles : user.roles || [];
+                return this.userService.update(context, user.id, Object.assign(Object.assign({}, user), { roles: userRoles, props: mergedProps, name: profile.displayName }));
+            },
+        });
+    }
+    async validateUserAuth0(context, id, email, name, orgId, roles, props) {
+        this.logger.info('Validating auth0 account using login identifier: ', id);
+        return this.validateOrCreateExternalAuthAccount(context, id, {
+            type: 'auth0',
+            newUserRequest: () => ({
+                roles,
+                orgId,
+                email,
+                name,
+                props,
+                enabled: true,
+            }),
+            updateUser: user => {
+                user.name = name;
+                user.roles = roles;
+                user.orgId = orgId;
+                user.props = props;
+                user.email = email;
+                return this.userService.update(context, user.id, user);
+            },
+        });
+    }
+    async createAccount(context, email, password, account) {
+        const existingCredentials = await this.getAccountByEmail(context, email);
+        if (!existingCredentials) {
+            return await this.authRepository.save(context, {
+                id: email,
+                password: await hashPassword(password),
+                userId: account,
+                type: 'password',
+            });
+        }
+        return existingCredentials;
+    }
+    async validateOrCreateExternalAuthAccount(context, id, options) {
+        const { newUserRequest, updateUser, type } = options;
+        this.logger.info(`Validating ${type} user profile`);
+        const account = await this.authRepository.get(context, id);
+        if (!account) {
+            this.logger.info(`No login credentials found for ${id}, creating credentials and creating or updating user.`);
+            const updatedUser = await this.userService.createOrUpdate(context, newUserRequest(), this.validateUserEnabled);
+            await this.authRepository.save(context, {
+                id,
+                type,
+                userId: updatedUser.id,
+            });
+            return updatedUser;
+        }
+        if (!options.overwriteCredentials && account.type !== type) {
+            throw new AuthenticationFailedException('No credentials found for user');
+        }
+        const user = await this.loadUserAndCheckEnabled(context, account.userId);
+        if (account.type !== type) {
+            this.logger.info(`Updating auth type to [${type}] for [${id}]`);
+            await this.authRepository.save(context, {
+                id: account.id,
+                type,
+                userId: account.userId,
+            });
+        }
+        this.logger.info(`User ${id} validated`);
+        return updateUser ? await updateUser(user) : user;
+    }
+    async loadUserAndCheckEnabled(context, userId) {
+        const user = await this.userService.get(context, userId);
+        if (!user) {
+            throw new AuthenticationFailedException('User not found');
+        }
+        this.validateUserEnabled(user);
+        return user;
+    }
+    validateUserEnabled(user) {
+        if (!user.enabled) {
+            throw new AuthenticationFailedException('User account is disabled');
+        }
+    }
+    getAccountByEmail(context, email) {
+        const normalisedEmail = (0, user_service_1.normaliseEmail)(email);
+        this.logger.info(`Looking up user by email ${normalisedEmail}`);
+        return this.authRepository.get(context, normalisedEmail);
+    }
+    toName(profile) {
+        return [profile.firstName, profile.lastName].filter(part => !(0, lodash_1.isNil)(part)).join(' ');
+    }
+};
+exports.AuthService = AuthService;
+tslib_1.__decorate([
+    (0, transactional_1.Transactional)(),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, String, String, Array, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthService.prototype, "validateFakeLogin", null);
+tslib_1.__decorate([
+    (0, transactional_1.Transactional)(),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthService.prototype, "validateUserGoogle", null);
+tslib_1.__decorate([
+    (0, transactional_1.Transactional)(),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthService.prototype, "validateUserSaml", null);
+tslib_1.__decorate([
+    (0, transactional_1.Transactional)(),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, Object, Boolean, Array]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthService.prototype, "validateUserOidc", null);
+tslib_1.__decorate([
+    (0, transactional_1.Transactional)(),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, String, String, String, String, Array, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthService.prototype, "validateUserAuth0", null);
+tslib_1.__decorate([
+    (0, transactional_1.Transactional)(),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, String, String, String]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthService.prototype, "createAccount", null);
+exports.AuthService = AuthService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(1, (0, common_1.Inject)(user_service_1.USER_SERVICE)),
+    tslib_1.__param(2, (0, common_1.Inject)(configuration_1.CONFIGURATION)),
+    tslib_1.__param(3, (0, common_1.Optional)()),
+    tslib_1.__param(3, (0, common_1.Inject)(auth_callbacks_1.AUTH_CALLBACKS)),
+    tslib_1.__metadata("design:paramtypes", [auth_repository_1.CredentialRepository, Object, Object, Object])
+], AuthService);
+//# sourceMappingURL=auth.service.js.map

package/dist/auth/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../src/auth/auth.service.ts"],"names":[],"mappings":";;;AAiCA,oCAEC;;AAnCD,2CAAyF;AACzF,mCAAmC;AACnC,0CAA0C;AAC1C,2BAA2B;AAC3B,qDAA2C;AAC3C,mCAA+B;AAC/B,oDAAgE;AAChE,uDAA6F;AAC7F,iDAA2E;AAC3E,qDAAiE;AACjE,wCAAkD;AAElD,8DAA2D;AAC3D,6CAA0C;AAE1C,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IACzB,EAAE,EAAE,CAAC,CAAC,MAAM;IACZ,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,SAAS,CAAC;QACV,KAAK,EAAE,CAAC,CAAC,MAAM;QACf,QAAQ,EAAE,CAAC,CAAC,OAAO;KACpB,CAAC,CACH;IACD,WAAW,EAAE,CAAC,CAAC,MAAM;CACtB,CAAC,CAAC;AAEH,MAAa,6BAA8B,SAAQ,sBAAa;IAC9D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,mBAAU,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC;CACF;AAJD,sEAIC;AACD,MAAM,WAAW,GAAG,EAAE,CAAC;AAEhB,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAGM,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGtB,YACmB,cAAoC,EACd,WAA+B,EAC9B,qBAAoC,EACvB,aAA4B;QAHhE,mBAAc,GAAd,cAAc,CAAsB;QACd,gBAAW,GAAX,WAAW,CAAoB;QAC9B,0BAAqB,GAArB,qBAAqB,CAAe;QACvB,kBAAa,GAAb,aAAa,CAAe;QAEjF,IAAI,CAAC,MAAM,GAAG,IAAA,sBAAY,EAAC,iBAAiB,CAAC,CAAC;IAChD,CAAC;IAWD,KAAK,CAAC,YAAY,CAAC,OAAgB,EAAE,QAAgB,EAAE,QAAgB;QACrE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEhE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEhE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,6BAA6B,CAAC,2BAA2B,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAGK,AAAN,KAAK,CAAC,iBAAiB,CACrB,OAAgB,EAChB,MAAqC,EACrC,KAAa,EACb,IAAY,EACZ,KAAe,EACf,KAAa,EACb,KAAU;QAEV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;QAEvD,MAAM,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAK,CAAC,MAAM,CAAC;QAClE,IAAI,YAAY,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5C,MAAM,IAAI,6BAA6B,CAAC,2BAA2B,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE/D,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,6BAA6B,CAAC,0BAA0B,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,kCAChD,IAAI,KACP,IAAI;gBACJ,KAAK;gBACL,KAAK;gBACL,KAAK,IACL,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE;gBAC5C,KAAK;gBACL,IAAI;gBACJ,KAAK;gBACL,KAAK;gBACL,KAAK;gBACL,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAaK,AAAN,KAAK,CAAC,kBAAkB,CAAC,OAAgB,EAAE,YAAoB;QAC7D,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAE1D,IAAI,IAAA,eAAM,EAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,yBAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEjF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAO7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBACrG,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAyB,CAAC;YAEzE,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;YACjF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE;gBACzD,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;gBACzD,KAAK;gBACL,IAAI,EAAE,OAAO,CAAC,WAAW;gBACzB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;gBACtC,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,WAAW,CAAC,EAAE;aACvB,CAAC,CAAC;YAEH,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7D,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAWK,AAAN,KAAK,CAAC,gBAAgB,CAAC,OAAgB,EAAE,OAA0B;QACjE,OAAO,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,IAAA,6BAAc,EAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACtF,IAAI,EAAE,MAAM;YACZ,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrB,KAAK,EAAE,EAAE;gBACT,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC1B,OAAO,EAAE,IAAI;aACd,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,gBAAgB,CACpB,OAAgB,EAChB,OAAY,EACZ,oBAA6B,EAC7B,eAAyB,EAAE;QAG3B,MAAM,WAAW,GAAI,OAAe,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;QAGlE,IAAI,wBAAwB,GAAY,KAAK,CAAC;QAC9C,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,kBAAkB,EAAE,CAAC;YAEhE,wBAAwB,GAAG,IAAI,CAAC;YAEhC,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjE,CAAC;QAGD,IAAI,KAAK,GAAQ,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,yBAAyB,EAAE,CAAC;YACvE,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,IAAA,6BAAc,EAAC,KAAK,CAAC,EAAE;YAC9E,IAAI,EAAE,MAAM;YACZ,oBAAoB;YACpB,cAAc,EAAE,GAAG,EAAE;gBACnB,MAAM,SAAS,GAAa,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;gBAC5E,OAAO;oBACL,KAAK;oBACL,IAAI,EAAE,OAAO,CAAC,WAAW;oBACzB,KAAK,EAAE,SAAS;oBAChB,KAAK;oBACL,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,UAAU,EAAE,IAAI,CAAC,EAAE;gBACjB,MAAM,WAAW,mCAAQ,IAAI,CAAC,KAAK,GAAK,KAAK,CAAE,CAAC;gBAChD,MAAM,SAAS,GAAa,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,KAAkB,IAAI,EAAE,CAAC;gBAC9F,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,kCAC1C,IAAI,KACP,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,OAAO,CAAC,WAAW,IACzB,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,iBAAiB,CACrB,OAAgB,EAChB,EAAU,EACV,KAAa,EACb,IAAY,EACZ,KAAa,EACb,KAAe,EACf,KAAU;QAEV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,EAAE,EAAE;YAC3D,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;gBACrB,KAAK;gBACL,KAAK;gBACL,KAAK;gBACL,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,IAAI;aACd,CAAC;YACF,UAAU,EAAE,IAAI,CAAC,EAAE;gBACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;gBACnB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzD,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAaK,AAAN,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,KAAa,EAAE,QAAgB,EAAE,OAAe;QACpF,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEzE,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;gBAC7C,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC;gBACtC,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,UAAU;aACjB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,mCAAmC,CAC/C,OAAgB,EAChB,EAAU,EACV,OAAwB;QAExB,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,eAAe,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,uDAAuD,CAAC,CAAC;YAE9G,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAE/G,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;gBACtC,EAAE;gBACF,IAAI;gBACJ,MAAM,EAAE,WAAW,CAAC,EAAE;aACvB,CAAC,CAAC;YAEH,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3D,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAEzE,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,IAAI,UAAU,EAAE,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;gBACtC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzC,OAAO,UAAU,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,OAAgB,EAAE,MAAc;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEzD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE/B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,mBAAmB,CAAC,IAAW;QACrC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,6BAA6B,CAAC,0BAA0B,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,OAAgB,EAAE,KAAa;QACvD,MAAM,eAAe,GAAG,IAAA,6BAAc,EAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,eAAe,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC3D,CAAC;IAEO,MAAM,CAAC,OAA0B;QACvC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAA,cAAK,EAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtF,CAAC;CACF,CAAA;AA/VY,kCAAW;AA0ChB;IADL,IAAA,6BAAa,GAAE;;;;oDAwCf;AAaK;IADL,IAAA,6BAAa,GAAE;;;;qDAwDf;AAWK;IADL,IAAA,6BAAa,GAAE;;;;mDAWf;AAGK;IADL,IAAA,6BAAa,GAAE;;;;mDAmDf;AAGK;IADL,IAAA,6BAAa,GAAE;;;;oDA8Bf;AAaK;IADL,IAAA,6BAAa,GAAE;;;;gDAcf;sBAzRU,WAAW;IADvB,IAAA,mBAAU,GAAE;IAMR,mBAAA,IAAA,eAAM,EAAC,2BAAY,CAAC,CAAA;IACpB,mBAAA,IAAA,eAAM,EAAC,6BAAa,CAAC,CAAA;IACrB,mBAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,mBAAA,IAAA,eAAM,EAAC,+BAAc,CAAC,CAAA;6CAHF,sCAAoB;GAJ5C,WAAW,CA+VvB"}

package/dist/auth/auth.task.controller.d.ts

@@ -0,0 +1,13 @@
+import { MailSender } from '../mail/mail.sender';
+import { Context } from '../datastore/context';
+import { Configuration } from '../configuration';
+export declare class AuthTaskController {
+    private readonly configuration;
+    private readonly mailSender;
+    private readonly logger;
+    constructor(configuration: Configuration, mailSender: MailSender);
+    sendActivationEmail(context: Context, inviteId: string, email: string): Promise<void>;
+    sendPasswordResetEmail(context: Context, resetId: string, email: string): Promise<void>;
+    private getActivationExpiryEmailCopy;
+    private getInvitationCopy;
+}

package/dist/auth/auth.task.controller.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthTaskController = void 0;
+const tslib_1 = require("tslib");
+const auth_guard_1 = require("./auth.guard");
+const common_1 = require("@nestjs/common");
+const mail_sender_1 = require("../mail/mail.sender");
+const context_1 = require("../datastore/context");
+const configuration_1 = require("../configuration");
+const invite_1 = require("../mail-templates/invite");
+const logging_1 = require("../logging");
+const DEFAULT_INVITE_CODE_EXPIRY_EMAIL_COPY = '7 days';
+const DEFAULT_INVITATION_EMAIL_COPY = 'You have been invited as a new user.';
+let AuthTaskController = class AuthTaskController {
+    constructor(configuration, mailSender) {
+        this.configuration = configuration;
+        this.mailSender = mailSender;
+        this.getActivationExpiryEmailCopy = () => !(this.configuration.auth.local && this.configuration.auth.local.activationExpiryInMinutes)
+            ? DEFAULT_INVITE_CODE_EXPIRY_EMAIL_COPY
+            : this.configuration.auth.local.activationExpiryEmailCopy;
+        this.getInvitationCopy = () => !(this.configuration.auth.local && this.configuration.auth.local.invitationEmailCopy)
+            ? DEFAULT_INVITATION_EMAIL_COPY
+            : this.configuration.auth.local.invitationEmailCopy;
+        this.logger = (0, logging_1.createLogger)('auth-task-controller');
+    }
+    async sendActivationEmail(context, inviteId, email) {
+        const activateLink = `${this.configuration.host}/activate/${inviteId}`;
+        this.logger.info(`Sending invitation email to ${email} with link ${activateLink}`);
+        const title = 'Activate your account';
+        await this.mailSender.send(context, {
+            to: email,
+            subject: title,
+            html: (0, invite_1.userInviteEmail)(title, activateLink, this.getInvitationCopy(), this.getActivationExpiryEmailCopy()),
+        });
+    }
+    async sendPasswordResetEmail(context, resetId, email) {
+        const address = `${this.configuration.host}/confirm-reset/${resetId}`;
+        await this.mailSender.send(context, {
+            to: email,
+            subject: 'Password reset',
+            html: `
+        <html>
+        <head></head>
+        <body><a href="${address}">Reset your password</a></body>
+        </html>
+      `,
+        });
+    }
+};
+exports.AuthTaskController = AuthTaskController;
+tslib_1.__decorate([
+    (0, common_1.Post)('/activation-email'),
+    tslib_1.__param(0, (0, context_1.Ctxt)()),
+    tslib_1.__param(1, (0, common_1.Body)('inviteId')),
+    tslib_1.__param(2, (0, common_1.Body)('email')),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, String, String]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthTaskController.prototype, "sendActivationEmail", null);
+tslib_1.__decorate([
+    (0, common_1.Post)('/password-reset-email'),
+    tslib_1.__param(0, (0, context_1.Ctxt)()),
+    tslib_1.__param(1, (0, common_1.Body)('resetId')),
+    tslib_1.__param(2, (0, common_1.Body)('email')),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object, String, String]),
+    tslib_1.__metadata("design:returntype", Promise)
+], AuthTaskController.prototype, "sendPasswordResetEmail", null);
+exports.AuthTaskController = AuthTaskController = tslib_1.__decorate([
+    (0, auth_guard_1.Task)(),
+    (0, common_1.Controller)('/tasks/auth'),
+    tslib_1.__param(0, (0, common_1.Inject)(configuration_1.CONFIGURATION)),
+    tslib_1.__param(1, (0, common_1.Inject)(mail_sender_1.MAIL_SENDER)),
+    tslib_1.__metadata("design:paramtypes", [Object, Object])
+], AuthTaskController);
+//# sourceMappingURL=auth.task.controller.js.map

package/dist/auth/auth.task.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.task.controller.js","sourceRoot":"","sources":["../../src/auth/auth.task.controller.ts"],"names":[],"mappings":";;;;AAAA,6CAAoC;AACpC,2CAAgE;AAChE,qDAA8D;AAC9D,kDAAqD;AACrD,oDAAgE;AAChE,qDAA2D;AAC3D,wCAAkD;AAElD,MAAM,qCAAqC,GAAG,QAAQ,CAAC;AACvD,MAAM,6BAA6B,GAAG,sCAAsC,CAAC;AAItE,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAG7B,YACyB,aAA6C,EAC/C,UAAuC;QADpB,kBAAa,GAAb,aAAa,CAAe;QAC9B,eAAU,GAAV,UAAU,CAAY;QAwCtD,iCAA4B,GAAG,GAAuB,EAAE,CAC9D,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC;YACzF,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC;QAEtD,sBAAiB,GAAG,GAAW,EAAE,CACvC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;YACnF,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;QA9CtD,IAAI,CAAC,MAAM,GAAG,IAAA,sBAAY,EAAC,sBAAsB,CAAC,CAAC;IACrD,CAAC;IAGK,AAAN,KAAK,CAAC,mBAAmB,CACf,OAAgB,EACN,QAAgB,EACnB,KAAa;QAE5B,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,aAAa,QAAQ,EAAE,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,KAAK,cAAc,YAAY,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,uBAAuB,CAAC;QACtC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE;YAClC,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,IAAA,wBAAe,EAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,CAAC,4BAA4B,EAAE,CAAC;SAC1G,CAAC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,sBAAsB,CAClB,OAAgB,EACP,OAAe,EACjB,KAAa;QAE5B,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,kBAAkB,OAAO,EAAE,CAAC;QACtE,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE;YAClC,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE;;;yBAGa,OAAO;;OAEzB;SACF,CAAC,CAAC;IACL,CAAC;CAWF,CAAA;AAtDY,gDAAkB;AAWvB;IADL,IAAA,aAAI,EAAC,mBAAmB,CAAC;IAEvB,mBAAA,IAAA,cAAI,GAAE,CAAA;IACN,mBAAA,IAAA,aAAI,EAAC,UAAU,CAAC,CAAA;IAChB,mBAAA,IAAA,aAAI,EAAC,OAAO,CAAC,CAAA;;;;6DAUf;AAGK;IADL,IAAA,aAAI,EAAC,uBAAuB,CAAC;IAE3B,mBAAA,IAAA,cAAI,GAAE,CAAA;IACN,mBAAA,IAAA,aAAI,EAAC,SAAS,CAAC,CAAA;IACf,mBAAA,IAAA,aAAI,EAAC,OAAO,CAAC,CAAA;;;;gEAaf;6BA3CU,kBAAkB;IAF9B,IAAA,iBAAI,GAAE;IACN,IAAA,mBAAU,EAAC,aAAa,CAAC;IAKrB,mBAAA,IAAA,eAAM,EAAC,6BAAa,CAAC,CAAA;IACrB,mBAAA,IAAA,eAAM,EAAC,yBAAW,CAAC,CAAA;;GALX,kBAAkB,CAsD9B"}

package/dist/auth/auth.task.service.d.ts

@@ -0,0 +1,8 @@
+import { TaskQueue } from '../gcloud/tasks';
+import { Configuration } from '../configuration';
+export declare class AuthTaskService extends TaskQueue<Configuration> {
+    private readonly configuration;
+    constructor(configuration: Configuration);
+    queueActivationEmail(inviteId: string, email: string): Promise<void>;
+    queuePasswordResetEmail(resetId: string, email: string): Promise<void>;
+}

package/dist/auth/auth.task.service.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthTaskService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const tasks_1 = require("../gcloud/tasks");
+const configuration_1 = require("../configuration");
+let AuthTaskService = class AuthTaskService extends tasks_1.TaskQueue {
+    constructor(configuration) {
+        super(configuration, 'default');
+        this.configuration = configuration;
+    }
+    queueActivationEmail(inviteId, email) {
+        return this.enqueue('auth/activation-email', { inviteId, email });
+    }
+    queuePasswordResetEmail(resetId, email) {
+        return this.enqueue('auth/password-reset-email', { resetId, email });
+    }
+};
+exports.AuthTaskService = AuthTaskService;
+exports.AuthTaskService = AuthTaskService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(configuration_1.CONFIGURATION)),
+    tslib_1.__metadata("design:paramtypes", [Object])
+], AuthTaskService);
+//# sourceMappingURL=auth.task.service.js.map

package/dist/auth/auth.task.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.task.service.js","sourceRoot":"","sources":["../../src/auth/auth.task.service.ts"],"names":[],"mappings":";;;;AAAA,2CAAoD;AACpD,2CAA4C;AAC5C,oDAAgE;AAGzD,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,iBAAwB;IAC3D,YAAoD,aAA4B;QAC9E,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QADkB,kBAAa,GAAb,aAAa,CAAe;IAEhF,CAAC;IAED,oBAAoB,CAAC,QAAgB,EAAE,KAAa;QAClD,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,uBAAuB,CAAC,OAAe,EAAE,KAAa;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;CACF,CAAA;AAZY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;IAEE,mBAAA,IAAA,eAAM,EAAC,6BAAa,CAAC,CAAA;;GADvB,eAAe,CAY3B"}

package/dist/auth/csrf.interceptor.d.ts

@@ -0,0 +1,11 @@
+import { Response, NextFunction, RequestHandler } from 'express';
+import { Request } from 'express-serve-static-core';
+interface CsrfValidatorOptions {
+    sameSite: boolean;
+}
+interface RequestHandlerWithOptions {
+    (req: Request, res: Response, next: NextFunction, options: CsrfValidatorOptions): any;
+}
+export declare const CsrfValidator: RequestHandlerWithOptions;
+export declare const CsrfValidatorWithOptions: (options: CsrfValidatorOptions) => (req: any, res: Response, next: NextFunction) => RequestHandler;
+export {};

package/dist/auth/csrf.interceptor.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CsrfValidatorWithOptions = exports.CsrfValidator = void 0;
+const uuid_1 = require("uuid");
+const generateToken = () => (process.env.APP_ENGINE_ENVIRONMENT ? (0, uuid_1.v4)() : 'development');
+const defaultValidatorOptions = {
+    sameSite: true,
+};
+const CsrfValidator = (req, res, next, options) => {
+    options = Object.assign(Object.assign({}, defaultValidatorOptions), options);
+    if (req.session && !req.session.csrf) {
+        req.session.csrf = generateToken();
+        res.cookie('csrf-token', req.session.csrf, {
+            sameSite: options.sameSite,
+            maxAge: 9999999999,
+        });
+    }
+    if (req.method === 'GET' || req.method === 'OPTIONS' || req.method === 'HEAD') {
+        return next();
+    }
+    if (req.headers && req.session) {
+        const token = req.headers['x-csrf-token'];
+        if (token && token === req.session.csrf) {
+            return next();
+        }
+    }
+    res.status(403).send({
+        message: 'Invalid CSRF token',
+    });
+};
+exports.CsrfValidator = CsrfValidator;
+const CsrfValidatorWithOptions = (options) => {
+    return (req, res, next) => {
+        return (0, exports.CsrfValidator)(req, res, next, options);
+    };
+};
+exports.CsrfValidatorWithOptions = CsrfValidatorWithOptions;
+//# sourceMappingURL=csrf.interceptor.js.map

package/dist/auth/csrf.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.interceptor.js","sourceRoot":"","sources":["../../src/auth/csrf.interceptor.ts"],"names":[],"mappings":";;;AACA,+BAAoC;AAGpC,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAA,SAAM,GAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AAM5F,MAAM,uBAAuB,GAAyB;IACpD,QAAQ,EAAE,IAAI;CACf,CAAC;AAOK,MAAM,aAAa,GAA8B,CACtD,GAAQ,EACR,GAAa,EACb,IAAkB,EAClB,OAA6B,EAC7B,EAAE;IACF,OAAO,mCAAQ,uBAAuB,GAAK,OAAO,CAAE,CAAC;IAErD,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;QACnC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;YACzC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9E,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAE1C,IAAI,KAAK,IAAI,KAAK,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACxC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,oBAAoB;KAC9B,CAAC,CAAC;AACL,CAAC,CAAC;AA/BW,QAAA,aAAa,iBA+BxB;AAEK,MAAM,wBAAwB,GAAG,CAAC,OAA6B,EAAE,EAAE;IACxE,OAAO,CAAC,GAAQ,EAAE,GAAa,EAAE,IAAkB,EAAkB,EAAE;QACrE,OAAO,IAAA,qBAAa,EAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC,CAAC;AACJ,CAAC,CAAC;AAJW,QAAA,wBAAwB,4BAInC"}