@ngageoint/mage.service 6.2.2

package/lib/migrations/018-feeds-admin-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"018-feeds-admin-permissions.js","sourceRoot":"","sources":["../../src/migrations/018-feeds-admin-permissions.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,yBAAyB,CAAC;AAE9C,MAAM,gBAAgB,GAAG;IACvB,0BAA0B;IAC1B,sBAAsB;IACtB,qBAAqB;IACrB,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;IAChB,qBAAqB;CACtB,CAAA;AAED,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,IAAI;IAChC,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IACzC,KAAK,CAAC,SAAS,CACb,EAAE,IAAI,EAAE,YAAY,EAAE,EACtB;QACE,SAAS,EAAE;YACT,WAAW,EAAE;gBACX,KAAK,EAAE,gBAAgB;aACxB;SACF;KACF,EACD,IAAI,CAAC,CAAA;AACT,CAAC,CAAC;AAEF,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI;IAClC,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IACzC,KAAK,CAAC,SAAS,CACb,EAAE,IAAI,EAAE,YAAY,EAAE,EACtB;QACE,QAAQ,EAAE;YACR,WAAW,EAAE,gBAAgB;SAC9B;KACF,EACD,IAAI,CAAC,CAAA;AACT,CAAC,CAAC"}

package/lib/migrations/018-set-default-password-policy.d.ts

@@ -0,0 +1,4 @@
+export var id: string;
+export function up(done: any): void;
+export function down(done: any): void;
+//# sourceMappingURL=018-set-default-password-policy.d.ts.map

package/lib/migrations/018-set-default-password-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"018-set-default-password-policy.d.ts","sourceRoot":"","sources":["../../src/migrations/018-set-default-password-policy.js"],"names":[],"mappings":";AAyCa,oCAoBZ;AAEc,sCAEd"}

package/lib/migrations/018-set-default-password-policy.js

@@ -0,0 +1,58 @@
+"use strict";
+const config = require('../config.js'), log = require('winston');
+exports.id = 'set-default-password-policy';
+const passwordPolicy = {
+    minCharsEnabled: false,
+    minChars: 0,
+    maxConCharsEnabled: false,
+    maxConChars: 0,
+    lowLettersEnabled: false,
+    lowLetters: 0,
+    highLettersEnabled: false,
+    highLetters: 0,
+    numbersEnabled: false,
+    numbers: 0,
+    specialCharsEnabled: false,
+    specialChars: 0,
+    restrictSpecialCharsEnabled: false,
+    restrictSpecialChars: "",
+    passwordMinLength: 14,
+    passwordMinLengthEnabled: true,
+    customizeHelpText: false,
+    helpText: 'Your password is invalid and must be at least 14 characters in length.',
+    helpTextTemplate: {
+        minChars: 'have at least # letters',
+        maxConChars: 'not contain more than # consecutive letters',
+        lowLetters: 'have a minimum of # lowercase letters',
+        highLetters: 'have a minimum of # uppercase letters',
+        numbers: 'have at least # numbers',
+        specialChars: 'have at least # special characters',
+        restrictSpecialChars: 'be restricted to these special characters: #',
+        passwordMinLength: 'be at least # characters in length',
+        passwordHistoryCount: 'not be any of the past # previous passwords'
+    },
+    passwordHistoryCount: 0,
+    passwordHistoryCountEnabled: false
+};
+exports.up = function (done) {
+    log.info('Setting default password policy');
+    if (config.api.authenticationStrategies && config.api.authenticationStrategies['local']) {
+        const local = config.api.authenticationStrategies['local'];
+        if (local.passwordMinLength) {
+            passwordPolicy.passwordMinLength = local.passwordMinLength;
+        }
+    }
+    const update = {
+        $rename: {
+            'settings.accountLock': 'settings.local.accountLock'
+        },
+        $set: {
+            'settings.local.passwordPolicy': passwordPolicy,
+        }
+    };
+    this.db.collection('settings').findAndModify({ type: 'security' }, null, update, { upsert: true }, done);
+};
+exports.down = function (done) {
+    done();
+};
+//# sourceMappingURL=018-set-default-password-policy.js.map

package/lib/migrations/018-set-default-password-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"018-set-default-password-policy.js","sourceRoot":"","sources":["../../src/migrations/018-set-default-password-policy.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EACpC,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAE3B,OAAO,CAAC,EAAE,GAAG,6BAA6B,CAAC;AAE3C,MAAM,cAAc,GAAG;IACrB,eAAe,EAAE,KAAK;IACtB,QAAQ,EAAE,CAAC;IACX,kBAAkB,EAAE,KAAK;IACzB,WAAW,EAAE,CAAC;IACd,iBAAiB,EAAE,KAAK;IACxB,UAAU,EAAE,CAAC;IACb,kBAAkB,EAAE,KAAK;IACzB,WAAW,EAAE,CAAC;IACd,cAAc,EAAE,KAAK;IACrB,OAAO,EAAE,CAAC;IACV,mBAAmB,EAAE,KAAK;IAC1B,YAAY,EAAE,CAAC;IACf,2BAA2B,EAAE,KAAK;IAClC,oBAAoB,EAAE,EAAE;IACxB,iBAAiB,EAAE,EAAE;IACrB,wBAAwB,EAAE,IAAI;IAC9B,iBAAiB,EAAE,KAAK;IACxB,QAAQ,EAAE,wEAAwE;IAClF,gBAAgB,EAAE;QAChB,QAAQ,EAAE,yBAAyB;QACnC,WAAW,EAAE,6CAA6C;QAC1D,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,uCAAuC;QACpD,OAAO,EAAE,yBAAyB;QAClC,YAAY,EAAE,oCAAoC;QAClD,oBAAoB,EAAE,8CAA8C;QACpE,iBAAiB,EAAE,oCAAoC;QACvD,oBAAoB,EAAE,6CAA6C;KACpE;IACD,oBAAoB,EAAE,CAAC;IACvB,2BAA2B,EAAE,KAAK;CACnC,CAAC;AAEF,OAAO,CAAC,EAAE,GAAG,UAAU,IAAI;IACzB,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,GAAG,CAAC,wBAAwB,IAAI,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE;QACvF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,iBAAiB,EAAE;YAC3B,cAAc,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;SAC5D;KACF;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE;YACP,sBAAsB,EAAE,4BAA4B;SACrD;QACD,IAAI,EAAE;YACJ,+BAA+B,EAAE,cAAc;SAChD;KACF,CAAA;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;AAC3G,CAAC,CAAC;AAEF,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI;IAC3B,IAAI,EAAE,CAAC;AACT,CAAC,CAAC"}

package/lib/migrations/019-move-user-authentication.d.ts

@@ -0,0 +1,4 @@
+export var id: string;
+export function up(done: any): void;
+export function down(done: any): void;
+//# sourceMappingURL=019-move-user-authentication.d.ts.map

package/lib/migrations/019-move-user-authentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"019-move-user-authentication.d.ts","sourceRoot":"","sources":["../../src/migrations/019-move-user-authentication.js"],"names":[],"mappings":";AAMa,oCAkBZ;AAEc,sCAEd"}

package/lib/migrations/019-move-user-authentication.js

@@ -0,0 +1,68 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+const log = require('winston');
+exports.id = 'move-user-authentication';
+exports.up = function (done) {
+    try {
+        log.info('Moving authentication from user model to authentication model');
+        this.db.createCollection('authentications', (err, authenticationCollection) => {
+            if (err)
+                done(err);
+            this.db.collection('users', function (err, userCollection) {
+                if (err)
+                    done(err);
+                migrateAuthentication(authenticationCollection, userCollection)
+                    .then(() => done())
+                    .catch(err => done(err));
+            });
+        });
+    }
+    catch (err) {
+        log.warn('Failed moving authentication to new model', err);
+        done(err);
+    }
+};
+exports.down = function (done) {
+    done();
+};
+function migrateAuthentication(authenticationCollection, userCollection) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const cursor = userCollection.find({});
+        let hasNext = true;
+        while (hasNext === true) {
+            hasNext = yield cursor.hasNext();
+            if (hasNext !== true)
+                break;
+            const user = yield cursor.next();
+            if (user.hasOwnProperty('authentication')) {
+                const userAuthentication = user.authentication;
+                delete user.authentication;
+                delete userAuthentication._id;
+                log.info("Creating new authentication record for user " + user.username);
+                yield authenticationCollection.insertOne(userAuthentication);
+                log.info('Authentication record successfully created for user ' + user.username);
+                user.authenticationId = userAuthentication._id;
+                log.info("Removing authentication section for user " + user.username);
+                yield userCollection.updateOne({ _id: user._id }, user);
+                log.info("Successfully removed authentication section for user " + user.username);
+            }
+            else {
+                log.info("Authentication section has already been moved for " + user.username);
+            }
+        }
+        // Close the cursor, this is the same as reseting the query
+        cursor.close(function (err) {
+            if (err)
+                log.warn("Failed closing authentication move cursor", err);
+        });
+    });
+}
+//# sourceMappingURL=019-move-user-authentication.js.map

package/lib/migrations/019-move-user-authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"019-move-user-authentication.js","sourceRoot":"","sources":["../../src/migrations/019-move-user-authentication.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;AAEb,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAE/B,OAAO,CAAC,EAAE,GAAG,0BAA0B,CAAC;AAExC,OAAO,CAAC,EAAE,GAAG,UAAU,IAAI;IACzB,IAAI;QACF,GAAG,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QAC1E,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,wBAAwB,EAAE,EAAE;YAC5E,IAAI,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAEnB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,EAAE,cAAc;gBACvD,IAAI,GAAG;oBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAEnB,qBAAqB,CAAC,wBAAwB,EAAE,cAAc,CAAC;qBAC5D,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;qBAClB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;KACJ;IAAC,OAAO,GAAG,EAAE;QACZ,GAAG,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,CAAC,CAAC;KACX;AACH,CAAC,CAAC;AAEF,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI;IAC3B,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AAEF,SAAe,qBAAqB,CAAC,wBAAwB,EAAE,cAAc;;QAC3E,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEvC,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,OAAO,OAAO,KAAK,IAAI,EAAE;YACvB,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;YAChC,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM;YAE5B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAEhC,IAAI,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE;gBACzC,MAAM,kBAAkB,GAAG,IAAI,CAAC,cAAc,CAAC;gBAC/C,OAAO,IAAI,CAAC,cAAc,CAAC;gBAC3B,OAAO,kBAAkB,CAAC,GAAG,CAAC;gBAE9B,GAAG,CAAC,IAAI,CAAC,8CAA8C,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzE,MAAM,wBAAwB,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;gBAC7D,GAAG,CAAC,IAAI,CAAC,sDAAsD,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAEjF,IAAI,CAAC,gBAAgB,GAAG,kBAAkB,CAAC,GAAG,CAAC;gBAC/C,GAAG,CAAC,IAAI,CAAC,2CAA2C,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtE,MAAM,cAAc,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,uDAAuD,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;aACnF;iBAAM;gBACL,GAAG,CAAC,IAAI,CAAC,oDAAoD,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;aAChF;SACF;QAED,2DAA2D;QAC3D,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG;YACxB,IAAI,GAAG;gBAAE,GAAG,CAAC,IAAI,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IAEL,CAAC;CAAA"}

package/lib/migrations/020-add-export-permissions.d.ts

@@ -0,0 +1,4 @@
+export var id: string;
+export function up(done: any): void;
+export function down(done: any): void;
+//# sourceMappingURL=020-add-export-permissions.d.ts.map

package/lib/migrations/020-add-export-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"020-add-export-permissions.d.ts","sourceRoot":"","sources":["../../src/migrations/020-add-export-permissions.js"],"names":[],"mappings":";AAMa,oCAcZ;AAEc,sCAcd"}

package/lib/migrations/020-add-export-permissions.js

@@ -0,0 +1,36 @@
+"use strict";
+const log = require('winston');
+exports.id = 'add-export-permissions';
+exports.up = function (done) {
+    try {
+        log.info('Adding export permissions (READ_EXPORT, DELETE_EXPORT)');
+        this.db.collection('roles', { strict: true }, function (err, rolesCollection) {
+            if (err)
+                return done(err);
+            rolesCollection.updateOne({ name: 'ADMIN_ROLE' }, { $push: { permissions: { $each: ['READ_EXPORT', 'DELETE_EXPORT'] } } })
+                .then(() => done())
+                .catch(err => done(err));
+        });
+    }
+    catch (err) {
+        log.warn('Failed adding export roles', err);
+        done(err);
+    }
+};
+exports.down = function (done) {
+    try {
+        log.info('Removing export permissions (READ_EXPORT, DELETE_EXPORT)');
+        this.db.collection('roles', { strict: true }, function (err, rolesCollection) {
+            if (err)
+                return done(err);
+            rolesCollection.updateOne({ name: 'ADMIN_ROLE' }, { $pull: { permissions: { $each: ['READ_EXPORT', 'DELETE_EXPORT'] } } })
+                .then(() => done())
+                .catch(err => done(err));
+        });
+    }
+    catch (err) {
+        log.warn('Failed removing export roles', err);
+        done(err);
+    }
+};
+//# sourceMappingURL=020-add-export-permissions.js.map

package/lib/migrations/020-add-export-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"020-add-export-permissions.js","sourceRoot":"","sources":["../../src/migrations/020-add-export-permissions.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAE/B,OAAO,CAAC,EAAE,GAAG,wBAAwB,CAAC;AAEtC,OAAO,CAAC,EAAE,GAAG,UAAU,IAAI;IACzB,IAAI;QACF,GAAG,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,UAAU,GAAG,EAAE,eAAe;YAC1E,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YAE1B,eAAe,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC;iBACvH,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;iBAClB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;KACJ;IAAC,OAAO,GAAG,EAAE;QACZ,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,CAAC;KACX;AACH,CAAC,CAAC;AAEF,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI;IAC3B,IAAI;QACF,GAAG,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACrE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,UAAU,GAAG,EAAE,eAAe;YAC1E,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YAE1B,eAAe,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC;iBACvH,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;iBAClB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;KACJ;IAAC,OAAO,GAAG,EAAE;QACZ,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;KACX;AACH,CAAC,CAAC"}

package/lib/migrations/022-copy-auth-from-config-to-db.d.ts

@@ -0,0 +1,4 @@
+export var id: string;
+export function up(done: any): void;
+export function down(done: any): void;
+//# sourceMappingURL=022-copy-auth-from-config-to-db.d.ts.map

package/lib/migrations/022-copy-auth-from-config-to-db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"022-copy-auth-from-config-to-db.d.ts","sourceRoot":"","sources":["../../src/migrations/022-copy-auth-from-config-to-db.js"],"names":[],"mappings":";AA4Da,oCA+BZ;AAEc,sCAEd"}

package/lib/migrations/022-copy-auth-from-config-to-db.js

@@ -0,0 +1,86 @@
+"use strict";
+const config = require('../config.js'), log = require('winston');
+exports.id = 'copy-auth-from-config-to-db';
+function createDBObjectsFromConfig() {
+    const authDbObjects = [];
+    if (config.api && config.api.authenticationStrategies) {
+        //Copy configs to DB objects
+        Object.keys(config.api.authenticationStrategies).forEach(authStratName => {
+            if (authStratName !== 'local') {
+                const authStratConfig = config.api.authenticationStrategies[authStratName];
+                log.debug("Copying " + authStratName + " auth strategy");
+                let binIcon;
+                if (authStratConfig.icon) {
+                    binIcon = Buffer.from(authStratConfig.icon, 'base64');
+                }
+                const authDbObject = {
+                    enabled: true,
+                    name: authStratName,
+                    type: authStratConfig.type,
+                    title: authStratConfig.title,
+                    textColor: authStratConfig.textColor,
+                    buttonColor: authStratConfig.buttonColor,
+                    icon: binIcon,
+                    settings: {
+                        newUserEvents: [],
+                        newUserTeams: [],
+                        usersReqAdmin: {
+                            enabled: true
+                        },
+                        devicesReqAdmin: {
+                            enabled: true
+                        }
+                    }
+                };
+                const nonSettingsKeys = ['name', 'type', 'title', 'textColor', 'buttonColor', 'icon'];
+                const allKeys = Object.keys(authStratConfig);
+                for (let i = 0; i < allKeys.length; i++) {
+                    const key = allKeys[i];
+                    if (nonSettingsKeys.includes(key)) {
+                        continue;
+                    }
+                    ;
+                    authDbObject.settings[key] = authStratConfig[key];
+                }
+                log.debug('Strategy ' + authStratName + ' DB object:' + JSON.stringify(authDbObject));
+                authDbObjects.push(authDbObject);
+            }
+        });
+    }
+    return authDbObjects;
+}
+exports.up = function (done) {
+    log.info('Copying authentication strategies from config.js to the DB');
+    try {
+        const authDbObjects = createDBObjectsFromConfig();
+        //Save DB objects to DB
+        this.db.createCollection('authenticationconfigurations').then(collection => {
+            return collection.createIndex(['type', 'name'], { unique: true });
+        }).then(result => {
+            if (result.error) {
+                log.error(result.error);
+                return done(result.error);
+            }
+            return Promise.resolve(this.db.collection('authenticationconfigurations'));
+        }).then(collection => {
+            if (authDbObjects.length > 0) {
+                log.info('Inserting ' + authDbObjects.length + ' authentication strategies into the DB');
+                collection.insertMany(authDbObjects, {}, done);
+            }
+            else {
+                done();
+            }
+        }).catch(err => {
+            log.error(err);
+            done(err);
+        });
+    }
+    catch (err) {
+        log.warn("Failed while copying authentication strategies to the DB", err);
+        done(err);
+    }
+};
+exports.down = function (done) {
+    done();
+};
+//# sourceMappingURL=022-copy-auth-from-config-to-db.js.map

package/lib/migrations/022-copy-auth-from-config-to-db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"022-copy-auth-from-config-to-db.js","sourceRoot":"","sources":["../../src/migrations/022-copy-auth-from-config-to-db.js"],"names":[],"mappings":";AAAA,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EACpC,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAE3B,OAAO,CAAC,EAAE,GAAG,6BAA6B,CAAC;AAE3C,SAAS,yBAAyB;IAChC,MAAM,aAAa,GAAG,EAAE,CAAC;IAEzB,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,wBAAwB,EAAE;QACrD,4BAA4B;QAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE;YAEvE,IAAI,aAAa,KAAK,OAAO,EAAE;gBAC7B,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,aAAa,CAAC,CAAC;gBAE3E,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,aAAa,GAAG,gBAAgB,CAAC,CAAC;gBAEzD,IAAI,OAAO,CAAC;gBACZ,IAAG,eAAe,CAAC,IAAI,EAAE;oBACtB,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;iBACxD;gBAED,MAAM,YAAY,GAAG;oBACnB,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,eAAe,CAAC,IAAI;oBAC1B,KAAK,EAAE,eAAe,CAAC,KAAK;oBAC5B,SAAS,EAAE,eAAe,CAAC,SAAS;oBACpC,WAAW,EAAE,eAAe,CAAC,WAAW;oBACxC,IAAI,EAAE,OAAO;oBACb,QAAQ,EAAE;wBACR,aAAa,EAAE,EAAE;wBACjB,YAAY,EAAE,EAAE;wBAChB,aAAa,EAAE;4BACb,OAAO,EAAE,IAAI;yBACd;wBACD,eAAe,EAAE;4BACf,OAAO,EAAE,IAAI;yBACd;qBACF;iBACF,CAAC;gBAEF,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;gBACtF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;oBACvC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;oBACvB,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;wBACjC,SAAQ;qBACT;oBAAA,CAAC;oBACF,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;iBACnD;gBACD,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;gBACtF,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;aAClC;QACH,CAAC,CAAC,CAAC;KACJ;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,OAAO,CAAC,EAAE,GAAG,UAAU,IAAI;IACzB,GAAG,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAEvE,IAAI;QACF,MAAM,aAAa,GAAG,yBAAyB,EAAE,CAAC;QAElD,uBAAuB;QACvB,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YACzE,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YACf,IAAI,MAAM,CAAC,KAAK,EAAE;gBAChB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;aAC3B;YAED,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YACnB,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC5B,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC,MAAM,GAAG,wCAAwC,CAAC,CAAC;gBACzF,UAAU,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;aAChD;iBAAM;gBACL,IAAI,EAAE,CAAC;aACR;QACH,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACb,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;KACJ;IAAC,OAAO,GAAG,EAAE;QACZ,GAAG,CAAC,IAAI,CAAC,0DAA0D,EAAE,GAAG,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,CAAC;KACX;AACH,CAAC,CAAC;AAEF,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI;IAC3B,IAAI,EAAE,CAAC;AACT,CAAC,CAAC"}

package/lib/migrations/023-move-local-auth-from-settings.d.ts

@@ -0,0 +1,4 @@
+export var id: string;
+export function up(done: any): void;
+export function down(done: any): void;
+//# sourceMappingURL=023-move-local-auth-from-settings.d.ts.map

package/lib/migrations/023-move-local-auth-from-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"023-move-local-auth-from-settings.d.ts","sourceRoot":"","sources":["../../src/migrations/023-move-local-auth-from-settings.js"],"names":[],"mappings":";AAIa,oCAiDZ;AAEc,sCAEd"}

package/lib/migrations/023-move-local-auth-from-settings.js

@@ -0,0 +1,54 @@
+"use strict";
+const log = require('winston');
+exports.id = 'move-local-auth-from-settings';
+exports.up = function (done) {
+    log.info('Moving local authentication from settings to authenticationconfigurations');
+    const settings = this.db.collection('settings');
+    settings.findOneAndDelete({ type: 'security' }).then(result => {
+        const localSettings = result.value.settings.local;
+        let binIcon;
+        if (localSettings.icon) {
+            binIcon = new Buffer(localSettings.icon, 'base64');
+        }
+        const authDbObject = {
+            enabled: true,
+            name: 'local',
+            type: 'local',
+            title: 'MAGE Username/Password',
+            textColor: localSettings.textColor,
+            buttonColor: localSettings.buttonColor,
+            icon: binIcon,
+            settings: {
+                newUserEvents: [],
+                newUserTeams: [],
+                usersReqAdmin: {
+                    enabled: true
+                },
+                devicesReqAdmin: {
+                    enabled: true
+                },
+                accountLock: {
+                    enabled: false
+                }
+            }
+        };
+        const nonSettingsKeys = ['name', 'type', 'title', 'textColor', 'buttonColor', 'icon'];
+        const allKeys = Object.keys(localSettings);
+        for (let i = 0; i < allKeys.length; i++) {
+            const key = allKeys[i];
+            if (nonSettingsKeys.includes(key)) {
+                continue;
+            }
+            ;
+            authDbObject.settings[key] = localSettings[key];
+        }
+        log.debug('Strategy ' + 'local' + ' DB object:' + JSON.stringify(authDbObject));
+        this.db.collection('authenticationconfigurations').insertOne(authDbObject, {}, done);
+    }).catch(err => {
+        done(err);
+    });
+};
+exports.down = function (done) {
+    done();
+};
+//# sourceMappingURL=023-move-local-auth-from-settings.js.map

package/lib/migrations/023-move-local-auth-from-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"023-move-local-auth-from-settings.js","sourceRoot":"","sources":["../../src/migrations/023-move-local-auth-from-settings.js"],"names":[],"mappings":";AAAA,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAE/B,OAAO,CAAC,EAAE,GAAG,+BAA+B,CAAC;AAE7C,OAAO,CAAC,EAAE,GAAG,UAAU,IAAI;IACvB,GAAG,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAEtF,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QAC1D,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAElD,IAAI,OAAO,CAAC;QACZ,IAAG,aAAa,CAAC,IAAI,EAAE;YACpB,OAAO,GAAG,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;SACrD;QAED,MAAM,YAAY,GAAG;YACjB,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,wBAAwB;YAC/B,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE;gBACN,aAAa,EAAE,EAAE;gBACjB,YAAY,EAAE,EAAE;gBAChB,aAAa,EAAE;oBACX,OAAO,EAAE,IAAI;iBAChB;gBACD,eAAe,EAAE;oBACb,OAAO,EAAE,IAAI;iBAChB;gBACD,WAAW,EAAE;oBACT,OAAO,EAAE,KAAK;iBACjB;aACJ;SACJ,CAAC;QAEF,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;gBAC/B,SAAQ;aACX;YAAA,CAAC;YACF,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;SACnD;QACD,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,OAAO,GAAG,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;QACX,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI;IACzB,IAAI,EAAE,CAAC;AACX,CAAC,CAAC"}

package/lib/migrations/024-link-auth-to-auth-config.d.ts

@@ -0,0 +1,4 @@
+export var id: string;
+export function up(done: any): void;
+export function down(done: any): void;
+//# sourceMappingURL=024-link-auth-to-auth-config.d.ts.map

package/lib/migrations/024-link-auth-to-auth-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"024-link-auth-to-auth-config.d.ts","sourceRoot":"","sources":["../../src/migrations/024-link-auth-to-auth-config.js"],"names":[],"mappings":";AAkCa,oCAgBZ;AAEc,sCAEd"}

package/lib/migrations/024-link-auth-to-auth-config.js

@@ -0,0 +1,59 @@
+'use strict';
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+const log = require('winston');
+exports.id = 'link-auth-to-auth-config';
+function link(authenticationCollection, authenticationConfigurationsCollection) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const cursor = authenticationCollection.find();
+        let hasNext = true;
+        while (hasNext === true) {
+            hasNext = yield cursor.hasNext();
+            if (hasNext !== true)
+                break;
+            const authentication = yield cursor.next();
+            //Name was "unique" prior to this server version, so key off of that.  This uniqueness does not maintain after this version however.
+            const authenticationConfiguration = yield authenticationConfigurationsCollection.findOne({ name: authentication.type });
+            if (authenticationConfiguration) {
+                authentication.authenticationConfigurationId = authenticationConfiguration._id;
+                log.info('Linking authentication ' + authentication._id + ' to authentication configuration ' + authenticationConfiguration._id);
+                yield authenticationCollection.updateOne({ _id: authentication._id }, authentication);
+            }
+            else {
+                log.info('Authentication strategy is not configured for ' + authentication._id);
+            }
+        }
+        // Close the cursor, this is the same as reseting the query
+        cursor.close(function (err) {
+            if (err)
+                log.warn("Failed closing authentications cursor", err);
+        });
+    });
+}
+exports.up = function (done) {
+    log.info('Linking authentications to their authentication configuration');
+    this.db.collection('authentications', { strict: true }, (err, authenticationCollection) => {
+        if (err)
+            return done(err);
+        this.db.collection('authenticationconfigurations', { strict: true }, (err, authenticationConfigurationsCollection) => {
+            if (err)
+                return done(err);
+            link(authenticationCollection, authenticationConfigurationsCollection).then(() => {
+                done();
+            }).catch(err => {
+                done(err);
+            });
+        });
+    });
+};
+exports.down = function (done) {
+    done();
+};
+//# sourceMappingURL=024-link-auth-to-auth-config.js.map

package/lib/migrations/024-link-auth-to-auth-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"024-link-auth-to-auth-config.js","sourceRoot":"","sources":["../../src/migrations/024-link-auth-to-auth-config.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;AAEb,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAE/B,OAAO,CAAC,EAAE,GAAG,0BAA0B,CAAC;AAExC,SAAe,IAAI,CAAC,wBAAwB,EAAE,sCAAsC;;QAChF,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,EAAE,CAAC;QAE/C,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,OAAO,OAAO,KAAK,IAAI,EAAE;YACrB,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;YAChC,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM;YAE5B,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAE3C,oIAAoI;YACpI,MAAM,2BAA2B,GAAG,MAAM,sCAAsC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;YACxH,IAAI,2BAA2B,EAAE;gBAC7B,cAAc,CAAC,6BAA6B,GAAG,2BAA2B,CAAC,GAAG,CAAC;gBAE/E,GAAG,CAAC,IAAI,CAAC,yBAAyB,GAAG,cAAc,CAAC,GAAG,GAAG,mCAAmC,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;gBACjI,MAAM,wBAAwB,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;aACzF;iBAAM;gBACH,GAAG,CAAC,IAAI,CAAC,gDAAgD,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;aACnF;SACJ;QAED,2DAA2D;QAC3D,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG;YACtB,IAAI,GAAG;gBAAE,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACP,CAAC;CAAA;AAED,OAAO,CAAC,EAAE,GAAG,UAAU,IAAI;IACvB,GAAG,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAE1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,wBAAwB,EAAE,EAAE;QACtF,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QAE1B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,8BAA8B,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,sCAAsC,EAAE,EAAE;YACjH,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YAE1B,IAAI,CAAC,wBAAwB,EAAE,sCAAsC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7E,IAAI,EAAE,CAAC;YACX,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACX,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC;AAEF,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI;IACzB,IAAI,EAAE,CAAC;AACX,CAAC,CAAC"}

package/lib/migrations/025-add-auth-config-permissions.d.ts

@@ -0,0 +1,4 @@
+export var id: string;
+export function up(done: any): void;
+export function down(done: any): void;
+//# sourceMappingURL=025-add-auth-config-permissions.d.ts.map

package/lib/migrations/025-add-auth-config-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"025-add-auth-config-permissions.d.ts","sourceRoot":"","sources":["../../src/migrations/025-add-auth-config-permissions.js"],"names":[],"mappings":";AAMa,oCAYZ;AAEc,sCAYd"}

package/lib/migrations/025-add-auth-config-permissions.js

@@ -0,0 +1,32 @@
+"use strict";
+const log = require('winston');
+exports.id = 'add-auth-config-permissions';
+exports.up = function (done) {
+    try {
+        log.info('Adding auth config permissions (READ_AUTH_CONFIG, UPDATE_AUTH_CONFIG)');
+        this.db.collection('roles', { strict: true }, function (err, rolesCollection) {
+            if (err)
+                return done(err);
+            rolesCollection.updateOne({ name: 'ADMIN_ROLE' }, { $push: { permissions: { $each: ['READ_AUTH_CONFIG', 'UPDATE_AUTH_CONFIG'] } } }).then(() => done()).catch(err => done(err));
+        });
+    }
+    catch (err) {
+        log.warn('Failed adding auth config roles', err);
+        done(err);
+    }
+};
+exports.down = function (done) {
+    try {
+        log.info('Removing auth config permissions (READ_AUTH_CONFIG, UPDATE_AUTH_CONFIG)');
+        this.db.collection('roles', { strict: true }, function (err, rolesCollection) {
+            if (err)
+                return done(err);
+            rolesCollection.updateOne({ name: 'ADMIN_ROLE' }, { $pull: { permissions: { $each: ['READ_AUTH_CONFIG', 'UPDATE_AUTH_CONFIG'] } } }).then(() => done()).catch(err => done(err));
+        });
+    }
+    catch (err) {
+        log.warn('Failed removing auth config roles', err);
+        done(err);
+    }
+};
+//# sourceMappingURL=025-add-auth-config-permissions.js.map

package/lib/migrations/025-add-auth-config-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"025-add-auth-config-permissions.js","sourceRoot":"","sources":["../../src/migrations/025-add-auth-config-permissions.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;AAEb,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AAE/B,OAAO,CAAC,EAAE,GAAG,6BAA6B,CAAC;AAE3C,OAAO,CAAC,EAAE,GAAG,UAAU,IAAI;IACvB,IAAI;QACA,GAAG,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QAClF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,UAAU,GAAG,EAAE,eAAe;YACxE,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YAE1B,eAAe,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACpL,CAAC,CAAC,CAAC;KACN;IAAC,OAAO,GAAG,EAAE;QACV,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,CAAC;KACb;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI;IACzB,IAAI;QACA,GAAG,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACpF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,UAAU,GAAG,EAAE,eAAe;YACxE,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YAE1B,eAAe,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACpL,CAAC,CAAC,CAAC;KACN;IAAC,OAAO,GAAG,EAAE;QACV,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,CAAC;KACb;AACL,CAAC,CAAC"}

package/lib/migrations/028-move-security-settings-to-secret-store.d.ts

@@ -0,0 +1,4 @@
+export var id: string;
+export function up(done: any): Promise<any>;
+export function down(done: any): void;
+//# sourceMappingURL=028-move-security-settings-to-secret-store.d.ts.map

package/lib/migrations/028-move-security-settings-to-secret-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"028-move-security-settings-to-secret-store.d.ts","sourceRoot":"","sources":["../../src/migrations/028-move-security-settings-to-secret-store.js"],"names":[],"mappings":";AAkBa,4CAkCZ;AAEc,sCAEd"}

package/lib/migrations/028-move-security-settings-to-secret-store.js

@@ -0,0 +1,59 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+const log = require('winston'), SecretStoreService = require('../security/secret-store-service');
+exports.id = 'move-security-settings-to-secret-store';
+function moveSecuritySettings(settings, blacklist) {
+    const data = {};
+    Object.keys(settings).forEach(key => {
+        if (blacklist.includes(key.toLowerCase())) {
+            data[key] = settings[key];
+            delete settings[key];
+        }
+    });
+    return data;
+}
+exports.up = function (done) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const blacklist = ['clientid', 'clientsecret', 'client_id', 'bindcredentials'];
+        const authenticationConfigurationsCollection = yield this.db.collection('authenticationconfigurations');
+        const cursor = authenticationConfigurationsCollection.find();
+        let hasNext = true;
+        while (hasNext === true) {
+            hasNext = yield cursor.hasNext();
+            if (hasNext !== true)
+                break;
+            const authConfig = yield cursor.next();
+            if (authConfig.settings) {
+                const data = moveSecuritySettings(authConfig.settings, blacklist);
+                if (Object.keys(data).length > 0) {
+                    log.info('Moving security settings for auth config ' + authConfig.name);
+                    const store = new SecretStoreService();
+                    try {
+                        yield store.write(authConfig._id.toString(), data);
+                        yield authenticationConfigurationsCollection.updateOne({ _id: authConfig._id }, authConfig);
+                    }
+                    catch (err) {
+                        log.warn(err);
+                        return done(err);
+                    }
+                }
+            }
+            else {
+                log.info('No settings found for ' + authConfig.name);
+            }
+        }
+        done();
+    });
+};
+exports.down = function (done) {
+    done();
+};
+//# sourceMappingURL=028-move-security-settings-to-secret-store.js.map

package/lib/migrations/028-move-security-settings-to-secret-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"028-move-security-settings-to-secret-store.js","sourceRoot":"","sources":["../../src/migrations/028-move-security-settings-to-secret-store.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;AAEb,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,EACxB,kBAAkB,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AAEvE,OAAO,CAAC,EAAE,GAAG,wCAAwC,CAAC;AAEtD,SAAS,oBAAoB,CAAC,QAAQ,EAAE,SAAS;IAC7C,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QAChC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE;YACvC,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;SACxB;IACL,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,OAAO,CAAC,EAAE,GAAG,UAAgB,IAAI;;QAC7B,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAE/E,MAAM,sCAAsC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC;QACxG,MAAM,MAAM,GAAG,sCAAsC,CAAC,IAAI,EAAE,CAAC;QAE7D,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,OAAO,OAAO,KAAK,IAAI,EAAE;YACrB,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;YAChC,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM;YAE5B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAEvC,IAAI,UAAU,CAAC,QAAQ,EAAE;gBACrB,MAAM,IAAI,GAAG,oBAAoB,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAElE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;oBAC9B,GAAG,CAAC,IAAI,CAAC,2CAA2C,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;oBAExE,MAAM,KAAK,GAAG,IAAI,kBAAkB,EAAE,CAAC;oBACvC,IAAI;wBACA,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;wBACnD,MAAM,sCAAsC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;qBAC/F;oBAAC,OAAO,GAAG,EAAE;wBACV,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBACd,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;qBACpB;iBACJ;aACJ;iBAAM;gBACH,GAAG,CAAC,IAAI,CAAC,wBAAwB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;aACxD;SACJ;QAED,IAAI,EAAE,CAAC;IACX,CAAC;CAAA,CAAC;AAEF,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI;IACzB,IAAI,EAAE,CAAC;AACX,CAAC,CAAA"}

package/lib/migrations/029-attachment-form-field.d.ts

@@ -0,0 +1,4 @@
+export var id: string;
+export function up(done: any): Promise<void>;
+export function down(done: any): void;
+//# sourceMappingURL=029-attachment-form-field.d.ts.map

package/lib/migrations/029-attachment-form-field.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"029-attachment-form-field.d.ts","sourceRoot":"","sources":["../../src/migrations/029-attachment-form-field.js"],"names":[],"mappings":";AA6Ha,6CAKZ;AAEc,sCAEd"}