@ngageoint/mage.service 6.3.0-beta.0

package/lib/models/token.js

@@ -0,0 +1,68 @@
+"use strict";
+var crypto = require('crypto'), mongoose = require('mongoose'), environment = require('../environment/env');
+// Token expiration in msecs
+var tokenExpiration = environment.tokenExpiration * 1000;
+// Creates a new Mongoose Schema object
+var Schema = mongoose.Schema;
+// Collection to hold users
+var TokenSchema = new Schema({
+    userId: { type: Schema.Types.ObjectId, ref: 'User' },
+    deviceId: { type: Schema.Types.ObjectId, ref: 'Device' },
+    expirationDate: { type: Date, required: true },
+    token: { type: String, required: true }
+}, {
+    versionKey: false
+});
+TokenSchema.index({ 'expirationDate': 1 }, { expireAfterSeconds: 0 });
+// Creates the Model for the User Schema
+var Token = mongoose.model('Token', TokenSchema);
+exports.getToken = function (token, callback) {
+    Token.findOne({ token: token }).populate({
+        path: 'userId',
+        populate: {
+            path: 'authenticationId',
+            model: 'Authentication'
+        }
+    }).exec(function (err, token) {
+        if (err)
+            return callback(err);
+        if (!token || !token.userId) {
+            return callback(null, null);
+        }
+        token.userId.populate('roleId', function (err, user) {
+            return callback(err, { user: user, deviceId: token.deviceId, token: token });
+        });
+    });
+};
+exports.createToken = function (options, callback) {
+    var seed = crypto.randomBytes(20);
+    var token = crypto.createHash('sha1').update(seed).digest('hex');
+    var query = { userId: options.userId };
+    if (options.device) {
+        query.deviceId = options.device._id;
+    }
+    var now = Date.now();
+    var update = {
+        token: token,
+        expirationDate: new Date(now + tokenExpiration)
+    };
+    Token.findOneAndUpdate(query, update, { upsert: true, new: true }, function (err, newToken) {
+        callback(err, newToken);
+    });
+};
+exports.removeToken = function (token, callback) {
+    Token.findByIdAndRemove(token._id, function (err) {
+        callback(err);
+    });
+};
+exports.removeTokensForUser = function (user, callback) {
+    Token.remove({ userId: user._id }, function (err, numberRemoved) {
+        callback(err, numberRemoved);
+    });
+};
+exports.removeTokenForDevice = function (device, callback) {
+    Token.remove({ deviceId: device._id }, function (err, numberRemoved) {
+        callback(err, numberRemoved);
+    });
+};
+//# sourceMappingURL=token.js.map

package/lib/models/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/models/token.js"],"names":[],"mappings":";AAAA,IAAI,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,EAC1B,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,EAC9B,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAEhD,4BAA4B;AAC5B,IAAI,eAAe,GAAG,WAAW,CAAC,eAAe,GAAG,IAAI,CAAC;AAEzD,uCAAuC;AACvC,IAAI,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;AAE7B,2BAA2B;AAC3B,IAAI,WAAW,GAAG,IAAI,MAAM,CAAC;IAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE;IACpD,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE;IACxD,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC9C,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;CACxC,EAAC;IACA,UAAU,EAAE,KAAK;CAClB,CAAC,CAAC;AAEH,WAAW,CAAC,KAAK,CAAC,EAAC,gBAAgB,EAAE,CAAC,EAAC,EAAE,EAAC,kBAAkB,EAAE,CAAC,EAAC,CAAC,CAAC;AAElE,wCAAwC;AACxC,IAAI,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAEjD,OAAO,CAAC,QAAQ,GAAG,UAAS,KAAK,EAAE,QAAQ;IACzC,KAAK,CAAC,OAAO,CAAC,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC,QAAQ,CAAC;QACrC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE;YACR,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,gBAAgB;SACxB;KACF,CAAC,CAAC,IAAI,CAAC,UAAS,GAAG,EAAE,KAAK;QACzB,IAAI,GAAG;YAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE9B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAC3B,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SAC7B;QAED,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAS,GAAG,EAAE,IAAI;YAChD,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,WAAW,GAAG,UAAS,OAAO,EAAE,QAAQ;IAC9C,IAAI,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjE,IAAI,KAAK,GAAG,EAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;KACrC;IAED,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACrB,IAAI,MAAM,GAAG;QACX,KAAK,EAAE,KAAK;QACZ,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC;KAChD,CAAC;IACF,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAC,EAAE,UAAS,GAAG,EAAE,QAAQ;QACrF,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,WAAW,GAAG,UAAS,KAAK,EAAE,QAAQ;IAC5C,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,EAAE,UAAS,GAAG;QAC7C,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,mBAAmB,GAAG,UAAS,IAAI,EAAE,QAAQ;IACnD,KAAK,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAC,EAAE,UAAS,GAAG,EAAE,aAAa;QAC1D,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,oBAAoB,GAAG,UAAS,MAAM,EAAE,QAAQ;IACtD,KAAK,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAC,EAAE,UAAS,GAAG,EAAE,aAAa;QAC9D,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/lib/models/user.d.ts

@@ -0,0 +1,60 @@
+import mongoose from 'mongoose'
+import { RoleJson, RoleDocument } from './role'
+import { UserIcon, Avatar, Phone } from '../entities/users/entities.users'
+import { Authentication } from '../entities/authentication/entities.authentication'
+
+
+export interface UserDocument extends mongoose.Document {
+  _id: mongoose.Types.ObjectId
+  id: string
+  username: string
+  displayName: string
+  email?: string
+  phones: Phone[]
+  avatar: Avatar
+  icon: UserIcon
+  active: boolean
+  enabled: boolean
+  roleId: mongoose.Types.ObjectId | RoleDocument
+  authenticationId: mongoose.Types.ObjectId | mongoose.Document
+  status?: string
+  recentEventIds: number[]
+  createdAt: Date
+  lastUpdated: Date
+  toJSON(): UserJson
+}
+
+
+// TODO: this probably needs an update now with new authentication changes
+export type UserJson = Omit<UserDocument, '_id' | 'avatar' | 'roleId' | 'authenticationId' | keyof mongoose.Document>
+  & {
+    id: mongoose.Types.ObjectId,
+    icon: Omit<UserIcon, 'relativePath'>,
+    avatarUrl?: string,
+  }
+  & (RolePopulated | RoleReferenced)
+  & (AuthenticationPopulated | AuthenticationReferenced)
+
+export declare const Model: mongoose.Model<UserDocument>
+
+type RoleReferenced = {
+  roleId: string,
+  role: never
+}
+
+type RolePopulated = {
+  roleId: never,
+  role: RoleJson
+}
+
+type AuthenticationPopulated = {
+  authenticationId: never,
+  authentication: Authentication
+}
+
+type AuthenticationReferenced = {
+  authenticationId: string,
+  authentication: never
+}
+
+

package/lib/models/user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../src/models/user.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA6LsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAYrB;AAE2B,sEAE3B;AAEmC,wEAEnC;AAEyC,8FAMzC;AAee,yDAcf;AAEkB,qEAgDlB;AAYoB,2DAsBpB;AAEoB,2DAQpB;AAEoB,2DAIpB;AAEsB,sDA6BtB;AAEoB,qDAGpB;AAE0B,8EAK1B;AAEwB,0EAKxB;AAE4B,mEAK5B;AAE6B,oEAI7B;AAE+B,kFAmB/B;AAEmC,2EAQnC;AArTD,mEA0CC;AAaD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAAgD"}

package/lib/models/user.js

@@ -0,0 +1,405 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __asyncValues = (this && this.__asyncValues) || function (o) {
+    if (!Symbol.asyncIterator) throw new TypeError("Symbol.asyncIterator is not defined.");
+    var m = o[Symbol.asyncIterator], i;
+    return m ? m.call(o) : (o = typeof __values === "function" ? __values(o) : o[Symbol.iterator](), i = {}, verb("next"), verb("throw"), verb("return"), i[Symbol.asyncIterator] = function () { return this; }, i);
+    function verb(n) { i[n] = o[n] && function (v) { return new Promise(function (resolve, reject) { v = o[n](v), settle(resolve, reject, v.done, v.value); }); }; }
+    function settle(resolve, reject, d, v) { Promise.resolve(v).then(function(v) { resolve({ value: v, done: d }); }, reject); }
+};
+const mongoose = require('mongoose'), async = require("async"), moment = require('moment'), Token = require('./token'), Login = require('./login'), Event = require('./event'), Team = require('./team'), Observation = require('./observation'), Location = require('./location'), CappedLocation = require('./cappedLocation'), Authentication = require('./authentication'), AuthenticationConfiguration = require('./authenticationconfiguration'), { pageQuery } = require('../adapters/base/adapters.base.db.mongoose'), { pageOf } = require('../entities/entities.global'), FilterParser = require('../utilities/filterParser');
+// Creates a new Mongoose Schema object
+const Schema = mongoose.Schema;
+const PhoneSchema = new Schema({
+    type: { type: String, required: true },
+    number: { type: String, required: true }
+}, {
+    versionKey: false,
+    _id: false
+});
+// Collection to hold users
+const UserSchema = new Schema({
+    username: { type: String, required: true, unique: true },
+    displayName: { type: String, required: true },
+    email: { type: String, required: false },
+    phones: [PhoneSchema],
+    avatar: {
+        contentType: { type: String, required: false },
+        size: { type: Number, required: false },
+        relativePath: { type: String, required: false }
+    },
+    icon: {
+        type: { type: String, enum: ['none', 'upload', 'create'], default: 'none' },
+        text: { type: String },
+        color: { type: String },
+        contentType: { type: String, required: false },
+        size: { type: Number, required: false },
+        relativePath: { type: String, required: false }
+    },
+    active: { type: Boolean, required: true },
+    enabled: { type: Boolean, default: true, required: true },
+    roleId: { type: Schema.Types.ObjectId, ref: 'Role', required: true },
+    status: { type: String, required: false, index: 'sparse' },
+    recentEventIds: [{ type: Number, ref: 'Event' }],
+    authenticationId: { type: Schema.Types.ObjectId, ref: 'Authentication', required: true }
+}, {
+    versionKey: false,
+    timestamps: {
+        updatedAt: 'lastUpdated'
+    }
+});
+UserSchema.virtual('authentication').get(function () {
+    return this.populated('authenticationId') ? this.authenticationId : null;
+});
+// Lowercase the username we store, this will allow for case insensitive usernames
+// Validate that username does not already exist
+UserSchema.pre('save', function (next) {
+    const user = this;
+    user.username = user.username.toLowerCase();
+    this.model('User').findOne({ username: user.username }, function (err, possibleDuplicate) {
+        if (err)
+            return next(err);
+        if (possibleDuplicate && !possibleDuplicate._id.equals(user._id)) {
+            const error = new Error('username already exists');
+            error.status = 409;
+            return next(error);
+        }
+        next();
+    });
+});
+UserSchema.pre('save', function (next) {
+    const user = this;
+    if (user.active === false || user.enabled === false) {
+        Token.removeTokensForUser(user, function (err) {
+            next(err);
+        });
+    }
+    else {
+        next();
+    }
+});
+UserSchema.pre('remove', function (next) {
+    const user = this;
+    async.parallel({
+        location: function (done) {
+            Location.removeLocationsForUser(user, done);
+        },
+        cappedlocation: function (done) {
+            CappedLocation.removeLocationsForUser(user, done);
+        },
+        token: function (done) {
+            Token.removeTokensForUser(user, done);
+        },
+        login: function (done) {
+            Login.removeLoginsForUser(user, done);
+        },
+        observation: function (done) {
+            Observation.removeUser(user, done);
+        },
+        eventAcl: function (done) {
+            Event.removeUserFromAllAcls(user, function (err) {
+                done(err);
+            });
+        },
+        teamAcl: function (done) {
+            Team.removeUserFromAllAcls(user, done);
+        },
+        authentication: function (done) {
+            Authentication.removeAuthenticationById(user.authenticationId, done);
+        }
+    }, function (err) {
+        next(err);
+    });
+});
+// eslint-disable-next-line complexity
+const transform = function (user, ret, options) {
+    ret.id = ret._id;
+    delete ret._id;
+    delete ret.avatar;
+    if (ret.icon) { // TODO remove if check, icon is always there
+        delete ret.icon.relativePath;
+    }
+    if (user.populated('roleId')) {
+        ret.role = ret.roleId;
+        delete ret.roleId;
+    }
+    if (user.populated('authenticationId')) {
+        ret.authentication = ret.authenticationId || {};
+        delete ret.authentication.password;
+        delete ret.authenticationId;
+        if (user.authentication.populated('authenticationConfigurationId')) {
+            ret.authentication.authenticationConfiguration = ret.authentication.authenticationConfigurationId;
+            //TODO remove settings?
+            /*const keys = Object.keys(ret.authentication.authenticationConfigurationId);
+            keys.forEach(key => {
+              if (key !== 'settings') {
+                ret.authentication[key] = ret.authentication.authenticationConfigurationId[key];
+              }
+            });*/
+            delete ret.authentication.authenticationConfigurationId;
+        }
+    }
+    if (user.avatar && user.avatar.relativePath) {
+        // TODO, don't really like this, need a better way to set user resource, route
+        ret.avatarUrl = [(options.path ? options.path : ""), "api", "users", user._id, "avatar"].join("/");
+    }
+    if (user.icon && user.icon.relativePath) {
+        // TODO, don't really like this, need a better way to set user resource, route
+        ret.iconUrl = [(options.path ? options.path : ""), "api", "users", user._id, "icon"].join("/");
+    }
+};
+UserSchema.set("toJSON", {
+    transform: transform
+});
+UserSchema.set("toObject", {
+    transform: transform
+});
+exports.transform = transform;
+// Creates the Model for the User Schema
+const User = mongoose.model('User', UserSchema);
+exports.Model = User;
+exports.getUserById = function (id, callback) {
+    let result = User.findById(id).populate('roleId').populate({ path: 'authenticationId', populate: { path: 'authenticationConfigurationId' } });
+    if (typeof callback === 'function') {
+        result = result.then(user => {
+            callback(null, user);
+        }, err => {
+            callback(err);
+        });
+    }
+    return result;
+};
+exports.getUserByUsername = function (username, callback) {
+    User.findOne({ username: username.toLowerCase() }).populate('roleId').populate({ path: 'authenticationId', populate: { path: 'authenticationConfigurationId' } }).exec(callback);
+};
+exports.getUserByAuthenticationId = function (id, callback) {
+    User.findOne({ authenticationId: id }).populate('roleId').populate({ path: 'authenticationId', populate: { path: 'authenticationConfigurationId' } }).exec(callback);
+};
+exports.getUserByAuthenticationStrategy = function (strategy, uid, callback) {
+    Authentication.getAuthenticationByStrategy(strategy, uid, function (err, authentication) {
+        if (err || !authentication)
+            return callback(err);
+        User.findOne({ authenticationId: authentication._id }).populate('roleId').populate({ path: 'authenticationId', populate: { path: 'authenticationConfigurationId' } }).exec(callback);
+    });
+};
+function createQueryConditions(filter) {
+    const conditions = FilterParser.parse(filter);
+    if (filter.active) {
+        conditions.active = filter.active == 'true';
+    }
+    if (filter.enabled) {
+        conditions.enabled = filter.enabled == 'true';
+    }
+    return conditions;
+}
+;
+exports.count = function (options, callback) {
+    if (typeof options === 'function') {
+        callback = options;
+        options = {};
+    }
+    options = options || {};
+    const filter = options.filter || {};
+    const conditions = createQueryConditions(filter);
+    User.count(conditions, function (err, count) {
+        callback(err, count);
+    });
+};
+exports.getUsers = function (options, callback) {
+    var _a, e_1, _b, _c;
+    return __awaiter(this, void 0, void 0, function* () {
+        if (typeof options === 'function') {
+            callback = options;
+            options = {};
+        }
+        options = options || {};
+        const filter = options.filter || {};
+        const conditions = createQueryConditions(filter);
+        let baseQuery = User.find(conditions).populate({ path: 'authenticationId', populate: { path: 'authenticationConfigurationId' } });
+        if (options.lean) {
+            baseQuery = baseQuery.lean();
+        }
+        if (options.populate && (options.populate.indexOf('roleId') !== -1)) {
+            baseQuery = baseQuery.populate('roleId');
+        }
+        const isPaging = options.limit != null && options.limit > 0;
+        if (isPaging) {
+            const limit = Math.abs(options.limit) || 10;
+            const start = (Math.abs(options.start) || 0);
+            const page = Math.ceil(start / limit);
+            const which = {
+                pageSize: limit,
+                pageIndex: page,
+                includeTotalCount: true
+            };
+            try {
+                const counted = yield pageQuery(baseQuery, which);
+                const users = [];
+                try {
+                    for (var _d = true, _e = __asyncValues(counted.query.cursor()), _f; _f = yield _e.next(), _a = _f.done, !_a;) {
+                        _c = _f.value;
+                        _d = false;
+                        try {
+                            const userDoc = _c;
+                            users.push(entityForDocument(userDoc));
+                        }
+                        finally {
+                            _d = true;
+                        }
+                    }
+                }
+                catch (e_1_1) { e_1 = { error: e_1_1 }; }
+                finally {
+                    try {
+                        if (!_d && !_a && (_b = _e.return)) yield _b.call(_e);
+                    }
+                    finally { if (e_1) throw e_1.error; }
+                }
+                const pageof = pageOf(users, which, counted.totalCount);
+                callback(null, users, pageof);
+            }
+            catch (err) {
+                callback(err);
+            }
+        }
+        else {
+            baseQuery.exec(function (err, users) {
+                callback(err, users, null);
+            });
+        }
+    });
+};
+function entityForDocument(doc) {
+    const json = doc.toJSON();
+    const entity = Object.assign(Object.assign({}, json), { id: doc._id.toHexString() });
+    return entity;
+}
+exports.createUser = function (user, callback) {
+    Authentication.createAuthentication(user.authentication).then(authentication => {
+        const newUser = {
+            username: user.username,
+            displayName: user.displayName,
+            email: user.email,
+            phones: user.phones,
+            active: user.active,
+            roleId: user.roleId,
+            avatar: user.avatar,
+            icon: user.icon,
+            authenticationId: authentication._id
+        };
+        User.create(newUser, function (err, user) {
+            if (err)
+                return callback(err);
+            user.populate({ path: 'roleId', path: 'authenticationId', populate: { path: 'authenticationConfigurationId' } }, function (err, user) {
+                callback(err, user);
+            });
+        });
+    }).catch(err => callback(err));
+};
+exports.updateUser = function (user, callback) {
+    user.save(function (err, user) {
+        if (err)
+            return callback(err);
+        user.populate({ path: 'roleId', path: 'authenticationId', populate: { path: 'authenticationConfigurationId' } }, function (err, user) {
+            callback(err, user);
+        });
+    });
+};
+exports.deleteUser = function (user, callback) {
+    user.remove(function (err, removedUser) {
+        callback(err, removedUser);
+    });
+};
+exports.invalidLogin = function (user) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const local = yield AuthenticationConfiguration.getConfiguration('local', 'local');
+        const { accountLock = {} } = local.settings;
+        if (!accountLock.enabled)
+            return user;
+        const authentication = user.authentication;
+        const invalidLoginAttempts = authentication.security.invalidLoginAttempts + 1;
+        if (invalidLoginAttempts >= accountLock.threshold) {
+            const numberOfTimesLocked = authentication.security.numberOfTimesLocked + 1;
+            if (numberOfTimesLocked >= accountLock.max) {
+                user.enabled = false;
+                yield user.save();
+                authentication.security = {};
+            }
+            else {
+                authentication.security = {
+                    locked: true,
+                    numberOfTimesLocked: numberOfTimesLocked,
+                    lockedUntil: moment().add(accountLock.interval, 'seconds').toDate()
+                };
+            }
+        }
+        else {
+            authentication.security.invalidLoginAttempts = invalidLoginAttempts;
+            authentication.security.locked = undefined;
+            authentication.security.lockedUntil = undefined;
+        }
+        yield authentication.save();
+    });
+};
+exports.validLogin = function (user) {
+    return __awaiter(this, void 0, void 0, function* () {
+        user.authentication.security = {};
+        yield user.authentication.save();
+    });
+};
+exports.setStatusForUser = function (user, status, callback) {
+    const update = { status: status };
+    User.findByIdAndUpdate(user._id, update, { new: true }, function (err, user) {
+        callback(err, user);
+    });
+};
+exports.setRoleForUser = function (user, role, callback) {
+    const update = { role: role };
+    User.findByIdAndUpdate(user._id, update, { new: true }, function (err, user) {
+        callback(err, user);
+    });
+};
+exports.removeRolesForUser = function (user, callback) {
+    const update = { roles: [] };
+    User.findByIdAndUpdate(user._id, update, { new: true }, function (err, user) {
+        callback(err, user);
+    });
+};
+exports.removeRoleFromUsers = function (role, callback) {
+    User.updateMany({ role: role._id }, { roles: undefined }, function (err, number) {
+        callback(err, number);
+    });
+};
+exports.addRecentEventForUser = function (user, event, callback) {
+    let eventIds = Array.from(user.recentEventIds);
+    // push new event onto front of the list
+    eventIds.unshift(event._id);
+    // remove duplicates
+    eventIds = eventIds.filter(function (eventId, index) {
+        return eventIds.indexOf(eventId) === index;
+    });
+    // limit to 5
+    if (eventIds.length > 5) {
+        eventIds = eventIds.slice(0, 5);
+    }
+    User.findByIdAndUpdate(user._id, { recentEventIds: eventIds }, { new: true }, function (err, user) {
+        callback(err, user);
+    });
+};
+exports.removeRecentEventForUsers = function (event, callback) {
+    const update = {
+        $pull: { recentEventIds: event._id }
+    };
+    User.updateMany({}, update, {}, function (err) {
+        callback(err);
+    });
+};
+//# sourceMappingURL=user.js.map

package/lib/models/user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.js","sourceRoot":"","sources":["../../src/models/user.js"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;AAEb,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,EAChC,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,EACxB,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,EAC1B,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,EAC1B,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,EAC1B,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,EAC1B,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,EACxB,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,EACtC,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,EAChC,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,EAC5C,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,EAC5C,2BAA2B,GAAG,OAAO,CAAC,+BAA+B,CAAC,EACtE,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,4CAA4C,CAAC,EACrE,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,EACnD,YAAY,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAExD,uCAAuC;AACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;AAE/B,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC;IAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;CACzC,EAAE;IACD,UAAU,EAAE,KAAK;IACjB,GAAG,EAAE,KAAK;CACX,CAAC,CAAC;AAEH,2BAA2B;AAC3B,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC;IAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IACxD,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;IACxC,MAAM,EAAE,CAAC,WAAW,CAAC;IACrB,MAAM,EAAE;QACN,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;QACvC,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;KAChD;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;QAC3E,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACtB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACvB,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;QACvC,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;KAChD;IACD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IACzC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;IACzD,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;IACpE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC1D,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAChD,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;CACzF,EAAE;IACD,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE;QACV,SAAS,EAAE,aAAa;KACzB;CACF,CAAC,CAAC;AAEH,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC;IACvC,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,kFAAkF;AAClF,gDAAgD;AAChD,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC;IAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,GAAG,EAAE,iBAAiB;QACtF,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QAE1B,IAAI,iBAAiB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAChE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACnD,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;YACnB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;SACpB;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC;IAClB,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE;QACnD,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG;YAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;KACJ;SAAM;QACL,IAAI,EAAE,CAAC;KACR;AACH,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,IAAI;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC;IAElB,KAAK,CAAC,QAAQ,CAAC;QACb,QAAQ,EAAE,UAAU,IAAI;YACtB,QAAQ,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,cAAc,EAAE,UAAU,IAAI;YAC5B,cAAc,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,EAAE,UAAU,IAAI;YACnB,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,EAAE,UAAU,IAAI;YACnB,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,WAAW,EAAE,UAAU,IAAI;YACzB,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,QAAQ,EAAE,UAAU,IAAI;YACtB,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG;gBAC7C,IAAI,CAAC,GAAG,CAAC,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,UAAU,IAAI;YACrB,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,cAAc,EAAE,UAAU,IAAI;YAC5B,cAAc,CAAC,wBAAwB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QACvE,CAAC;KACF,EACC,UAAU,GAAG;QACX,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,sCAAsC;AACtC,MAAM,SAAS,GAAG,UAAU,IAAI,EAAE,GAAG,EAAE,OAAO;IAC5C,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC;IACjB,OAAO,GAAG,CAAC,GAAG,CAAC;IAEf,OAAO,GAAG,CAAC,MAAM,CAAC;IAClB,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,6CAA6C;QAC3D,OAAO,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;KAC9B;IAED,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;QAC5B,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC;QACtB,OAAO,GAAG,CAAC,MAAM,CAAC;KACnB;IAED,IAAI,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE;QACtC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAChD,OAAO,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC;QACnC,OAAO,GAAG,CAAC,gBAAgB,CAAC;QAE5B,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,+BAA+B,CAAC,EAAE;YAClE,GAAG,CAAC,cAAc,CAAC,2BAA2B,GAAG,GAAG,CAAC,cAAc,CAAC,6BAA6B,CAAC;YAClG,uBAAuB;YACvB;;;;;iBAKK;YACL,OAAO,GAAG,CAAC,cAAc,CAAC,6BAA6B,CAAC;SACzD;KAEF;IAED,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE;QAC3C,8EAA8E;QAC9E,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KACpG;IAED,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;QACvC,8EAA8E;QAC9E,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KAChG;AACH,CAAC,CAAC;AAEF,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE;IACvB,SAAS,EAAE,SAAS;CACrB,CAAC,CAAC;AAEH,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE;IACzB,SAAS,EAAE,SAAS;CACrB,CAAC,CAAC;AAEH,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;AAE9B,wCAAwC;AACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAChD,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;AAErB,OAAO,CAAC,WAAW,GAAG,UAAU,EAAE,EAAE,QAAQ;IAC1C,IAAI,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;IAC9I,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE;QAClC,MAAM,GAAG,MAAM,CAAC,IAAI,CAClB,IAAI,CAAC,EAAE;YACL,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC,EACD,GAAG,CAAC,EAAE;YACJ,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;KACN;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,OAAO,CAAC,iBAAiB,GAAG,UAAU,QAAQ,EAAE,QAAQ;IACtD,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACnL,CAAC,CAAC;AAEF,OAAO,CAAC,yBAAyB,GAAG,UAAU,EAAE,EAAE,QAAQ;IACxD,IAAI,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACvK,CAAC,CAAA;AAED,OAAO,CAAC,+BAA+B,GAAG,UAAU,QAAQ,EAAE,GAAG,EAAE,QAAQ;IACzE,cAAc,CAAC,2BAA2B,CAAC,QAAQ,EAAE,GAAG,EAAE,UAAU,GAAG,EAAE,cAAc;QACrF,IAAI,GAAG,IAAI,CAAC,cAAc;YAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEjD,IAAI,CAAC,OAAO,CAAC,EAAE,gBAAgB,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvL,CAAC,CAAC,CAAC;AACL,CAAC,CAAA;AAED,SAAS,qBAAqB,CAAC,MAAM;IACnC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE9C,IAAI,MAAM,CAAC,MAAM,EAAE;QACjB,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC;KAC7C;IACD,IAAI,MAAM,CAAC,OAAO,EAAE;QAClB,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC;KAC/C;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAAA,CAAC;AAEF,OAAO,CAAC,KAAK,GAAG,UAAU,OAAO,EAAE,QAAQ;IACzC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE;QACjC,QAAQ,GAAG,OAAO,CAAC;QACnB,OAAO,GAAG,EAAE,CAAC;KACd;IAED,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IAEpC,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAEjD,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,GAAG,EAAE,KAAK;QACzC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,QAAQ,GAAG,UAAgB,OAAO,EAAE,QAAQ;;;QAClD,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE;YACjC,QAAQ,GAAG,OAAO,CAAC;YACnB,OAAO,GAAG,EAAE,CAAC;SACd;QAED,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QAEpC,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;QAElI,IAAI,OAAO,CAAC,IAAI,EAAE;YAChB,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;SAC9B;QAED,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACnE,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;SAC1C;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;QAC5D,IAAI,QAAQ,EAAE;YACZ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;YAEtC,MAAM,KAAK,GAAG;gBACZ,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI;gBACf,iBAAiB,EAAE,IAAI;aACxB,CAAC;YACF,IAAI;gBACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,EAAE,CAAC;;oBACjB,KAA4B,eAAA,KAAA,cAAA,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAA,IAAA;wBAAtB,cAAsB;wBAAtB,WAAsB;;4BAAvC,MAAM,OAAO,KAAA,CAAA;4BACtB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;;;;;qBACxC;;;;;;;;;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACxD,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;aAC/B;YAAC,OAAO,GAAG,EAAE;gBACZ,QAAQ,CAAC,GAAG,CAAC,CAAC;aACf;SACF;aAAM;YACL,SAAS,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,KAAK;gBACjC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;SACJ;;CACF,CAAC;AAEF,SAAS,iBAAiB,CAAC,GAAG;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;IAC1B,MAAM,MAAM,mCACP,IAAI,KACP,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,GAC1B,CAAA;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,OAAO,CAAC,UAAU,GAAG,UAAU,IAAI,EAAE,QAAQ;IAC3C,cAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;QAC7E,MAAM,OAAO,GAAG;YACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,gBAAgB,EAAE,cAAc,CAAC,GAAG;SACrC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,EAAE,IAAI;YACtC,IAAI,GAAG;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;YAE9B,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,UAAU,GAAG,EAAE,IAAI;gBAClI,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC,CAAC;AAEF,OAAO,CAAC,UAAU,GAAG,UAAU,IAAI,EAAE,QAAQ;IAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,IAAI;QAC3B,IAAI,GAAG;YAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE9B,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,UAAU,GAAG,EAAE,IAAI;YAClI,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,UAAU,GAAG,UAAU,IAAI,EAAE,QAAQ;IAC3C,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,EAAE,WAAW;QACpC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,YAAY,GAAG,UAAgB,IAAI;;QACzC,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnF,MAAM,EAAE,WAAW,GAAG,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC;QAE5C,IAAI,CAAC,WAAW,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC3C,MAAM,oBAAoB,GAAG,cAAc,CAAC,QAAQ,CAAC,oBAAoB,GAAG,CAAC,CAAC;QAC9E,IAAI,oBAAoB,IAAI,WAAW,CAAC,SAAS,EAAE;YACjD,MAAM,mBAAmB,GAAG,cAAc,CAAC,QAAQ,CAAC,mBAAmB,GAAG,CAAC,CAAC;YAC5E,IAAI,mBAAmB,IAAI,WAAW,CAAC,GAAG,EAAE;gBAC1C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAElB,cAAc,CAAC,QAAQ,GAAG,EAAE,CAAC;aAC9B;iBAAM;gBACL,cAAc,CAAC,QAAQ,GAAG;oBACxB,MAAM,EAAE,IAAI;oBACZ,mBAAmB,EAAE,mBAAmB;oBACxC,WAAW,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,EAAE;iBACpE,CAAC;aACH;SACF;aAAM;YACL,cAAc,CAAC,QAAQ,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;YACpE,cAAc,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,WAAW,GAAG,SAAS,CAAC;SACjD;QAED,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;CAAA,CAAC;AAEF,OAAO,CAAC,UAAU,GAAG,UAAgB,IAAI;;QACvC,IAAI,CAAC,cAAc,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;CAAA,CAAC;AAEF,OAAO,CAAC,gBAAgB,GAAG,UAAU,IAAI,EAAE,MAAM,EAAE,QAAQ;IACzD,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,GAAG,EAAE,IAAI;QACzE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,cAAc,GAAG,UAAU,IAAI,EAAE,IAAI,EAAE,QAAQ;IACrD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,GAAG,EAAE,IAAI;QACzE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,kBAAkB,GAAG,UAAU,IAAI,EAAE,QAAQ;IACnD,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,GAAG,EAAE,IAAI;QACzE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,mBAAmB,GAAG,UAAU,IAAI,EAAE,QAAQ;IACpD,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE,MAAM;QAC7E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,qBAAqB,GAAG,UAAU,IAAI,EAAE,KAAK,EAAE,QAAQ;IAC7D,IAAI,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE/C,wCAAwC;IACxC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE5B,oBAAoB;IACpB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,OAAO,EAAE,KAAK;QACjD,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,aAAa;IACb,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;QACvB,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;KACjC;IAED,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,GAAG,EAAE,IAAI;QAC/F,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,OAAO,CAAC,yBAAyB,GAAG,UAAU,KAAK,EAAE,QAAQ;IAC3D,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE;KACrC,CAAC;IAEF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,GAAG;QAC3C,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/lib/permissions/permissions.events.d.ts

@@ -0,0 +1,65 @@
+import { UserDocument } from '../models/user';
+import { MageEventDocument } from '../models/event';
+import { AppRequestContext } from '../app.api/app.api.global';
+import { PermissionDeniedError } from '../app.api/app.api.errors';
+import { FeedId } from '../entities/feeds/entities.feeds';
+import { AnyPermission } from '../entities/authorization/entities.permissions';
+import { FeedsPermissionService } from '../app.api/feeds/app.api.feeds';
+import { MageEventAttrs, MageEventRepository, EventAccessType } from '../entities/events/entities.events';
+import { UserId } from '../entities/users/entities.users';
+import { MongooseMageEventRepository } from '../adapters/events/adapters.events.db.mongoose';
+export interface EventRequestContext extends AppRequestContext<UserDocument> {
+    readonly event: MageEventAttrs | MageEventDocument;
+}
+/**
+ * TODO: This should not depend explicitly on the MongooseMageEventRepository,
+ * but the MageEventRepository interface instead.  However, a large number of
+ * tests mock a very specific chain of Mongoose model methods, so to avoid
+ * breaking those tests for now, this class will use the Mongoose event model
+ * directly to populate event teams.
+ */
+export declare class EventPermissionServiceImpl {
+    readonly eventRepo: MongooseMageEventRepository;
+    constructor(eventRepo: MongooseMageEventRepository);
+    ensureEventUpdatePermission(context: AppRequestContext): Promise<PermissionDeniedError | null>;
+    ensureEventReadPermission(context: AppRequestContext): Promise<PermissionDeniedError | null>;
+    /**
+     * Check for the given app-level permission on the role of the given user.
+     * If present, grant the user access.  If not, check for the given event-
+     * level permission on the ACL of the given event.  If present, grant the
+     * user access.  Otherwise, deny access.
+     * @param event
+     * @param user
+     * @param appPermission
+     * @param eventPermission
+     * @returns
+     */
+    authorizeEventAccess(event: MageEventAttrs | MageEventDocument, user: UserDocument, appPermission: AnyPermission, eventPermission: EventAccessType): Promise<PermissionDeniedError | null>;
+    userHasEventPermission(event: MageEventAttrs | MageEventDocument, userId: UserId, eventPermission: EventAccessType): Promise<boolean>;
+    /**
+     * Check whether the given user is a member of any of the given MAGE event's
+     * teams.
+     * TODO: This is arguably an entity-layer function, but is here for now as
+     * the concept of team membership only really has value in access control
+     * decisions, currently.
+     * @param event
+     * @param userId
+     * @returns
+     */
+    userIsParticipantInEvent(event: MageEventAttrs | MageEventDocument, userId: UserId): Promise<boolean>;
+    private resolveTeamsForEvent;
+}
+export declare const defaultEventPermissionsService: EventPermissionServiceImpl;
+export declare class EventFeedsPermissionService implements FeedsPermissionService {
+    readonly eventRepo: MageEventRepository;
+    readonly eventPermissions: EventPermissionServiceImpl;
+    constructor(eventRepo: MageEventRepository, eventPermissions: EventPermissionServiceImpl);
+    ensureFetchFeedContentPermissionFor(context: EventRequestContext, feed: FeedId): Promise<PermissionDeniedError | null>;
+    ensureListServiceTypesPermissionFor(context: EventRequestContext): Promise<PermissionDeniedError | null>;
+    ensureCreateServicePermissionFor(context: EventRequestContext): Promise<PermissionDeniedError | null>;
+    ensureListServicesPermissionFor(context: EventRequestContext): Promise<PermissionDeniedError | null>;
+    ensureListTopicsPermissionFor(context: EventRequestContext, service: string): Promise<PermissionDeniedError | null>;
+    ensureCreateFeedPermissionFor(context: EventRequestContext, service: string): Promise<PermissionDeniedError | null>;
+    ensureListAllFeedsPermissionFor(context: EventRequestContext): Promise<PermissionDeniedError | null>;
+}
+//# sourceMappingURL=permissions.events.d.ts.map

package/lib/permissions/permissions.events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.events.d.ts","sourceRoot":"","sources":["../../src/permissions/permissions.events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,qBAAqB,EAAoB,MAAM,2BAA2B,CAAA;AACnF,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAA;AACzD,OAAO,EAAkB,aAAa,EAAuB,MAAM,gDAAgD,CAAA;AACnH,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,eAAe,EAAuB,MAAM,oCAAoC,CAAA;AAG9H,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAA;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAA;AAG5F,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB,CAAC,YAAY,CAAC;IAC1E,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,CAAA;CACnD;AAOD;;;;;;GAMG;AACH,qBAAa,0BAA0B;IAEzB,QAAQ,CAAC,SAAS,EAAE,2BAA2B;gBAAtC,SAAS,EAAE,2BAA2B;IAErD,2BAA2B,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAQ9F,yBAAyB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAQlG;;;;;;;;;;OAUG;IACG,oBAAoB,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAW1L,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC;IAY3I;;;;;;;;;OASG;IACG,wBAAwB,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAK7F,oBAAoB;CAInC;AAED,eAAO,MAAM,8BAA8B,4BAAoF,CAAA;AAE/H,qBAAa,2BAA4B,YAAW,sBAAsB;IAE5D,QAAQ,CAAC,SAAS,EAAE,mBAAmB;IAAE,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B;gBAArF,SAAS,EAAE,mBAAmB,EAAW,gBAAgB,EAAE,0BAA0B;IAEpG,mCAAmC,CAAC,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAGtH,mCAAmC,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAGxG,gCAAgC,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAGrG,+BAA+B,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAGpG,6BAA6B,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAGnH,6BAA6B,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAGnH,+BAA+B,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;CAG3G"}