@nymphjs/tilmeld 1.0.0-beta.13 → 1.0.0-beta.131

package/dist/conf/index.d.ts

@@ -1,3 +1,356 @@
-export { Config } from './d';
-import defaults from './defaults';
+import type { EmailOptions, EmailConfig } from 'email-templates';
+import type Tilmeld from '../Tilmeld.js';
+import type Group from '../Group.js';
+import type { GroupData } from '../Group.js';
+import type User from '../User.js';
+import type { UserData } from '../User.js';
+/**
+ * Tilmeld Config
+ */
+export interface Config {
+    /**
+     * The name of the app. Used in emails sent to users and as the TOTP issuer.
+     */
+    appName: string;
+    /**
+     * The URL of the app. Used to define cookie domain, path, and security. Must
+     * be accessible to the Tilmeld client JS. (Note, cookies are not specific to
+     * individual ports, so tokens will be sent to any port running on this host.)
+     */
+    appUrl: string;
+    /**
+     * The domain of the auth cookie.
+     */
+    cookieDomain: string;
+    /**
+     * The path of the auth cookie.
+     */
+    cookiePath: string;
+    /**
+     * The path (with leading slash and no trailing slash) where the setup utility
+     * is accessible. This is also used for email address verification.
+     *
+     * ***************************************************************************
+     * This portion of the app will **not** check for the XSRF token, so make sure
+     * your REST endpoint is **not** under this URL.
+     * ***************************************************************************
+     */
+    setupPath: string;
+    /**
+     * Allow the creation of an admin user. When a user is created, if there are
+     * no other users in the system, they will be granted all abilities.
+     */
+    createAdmin: boolean;
+    /**
+     * Instead of a "username", a user logs in and is referred to by their email
+     * address. Enabling this after many users have been created can be messy.
+     * Make sure they all have email addresses first.
+     *
+     * Email usernames cannot be enabled if domain support is.
+     */
+    emailUsernames: boolean;
+    /**
+     * Enable domain support.
+     *
+     * If domain support is enabled, usernames can be either bare, meaning they
+     * belong to the root domain, or can include a domain part (username@domain),
+     * meaning they belong to that domain.
+     *
+     * It also enables domain admin abilities, meaning a domain admin has the
+     * ability to create and modify users on the domain
+     * ("tilmeld/domain/example.com/admin").
+     *
+     * Once a user is created, whether it has a domain part can't be changed.
+     * However, it can be moved to a different domain.
+     *
+     * Domain support cannot be enabled if email usernames is.
+     */
+    domainSupport: boolean;
+    /**
+     * Allow users to register.
+     */
+    allowRegistration: boolean;
+    /**
+     * Allow users to change their username.
+     */
+    allowUsernameChange: boolean;
+    /**
+     * Whether frontend can search users. (Probably not a good idea if privacy is
+     * a concern.)
+     */
+    enableUserSearch: boolean;
+    /**
+     * Whether frontend can search groups. (Probably not a good idea if privacy is
+     * a concern. Same risks as user search if generatePrimary is true.)
+     */
+    enableGroupSearch: boolean;
+    /**
+     * A list of UIDs that can be read from the client by anyone. (getUID)
+     *
+     * Note: If you'd like to limit the access to logged in users, give them an
+     *       ability like "uid/get/nameofuid".
+     */
+    clientReadableUIDs: string[];
+    /**
+     * A list of UIDs that can be created from the client by anyone. (newUID)
+     *
+     * Inclusion in this list implies inclusion in clientReadableUIDs.
+     *
+     * Note: If you'd like to limit the access to logged in users, give them an
+     *       ability like "uid/new/nameofuid".
+     */
+    clientEnabledUIDs: string[];
+    /**
+     * A list of UIDs that can be set from the client by anyone. (setUID,
+     * renameUID)
+     *
+     * Inclusion in this list implies inclusion in clientReadableUIDs and
+     * clientEnabledUIDs.
+     *
+     * Note: There is no way to run renameUID from the client.
+     *
+     * Note: If you'd like to limit the access to logged in users, give them an
+     *       ability like "uid/set/nameofuid".
+     */
+    clientSetabledUIDs: string[];
+    /**
+     * These will be the available fields for users. (Some fields, like username,
+     * can't be excluded.)
+     */
+    userFields: string[];
+    /**
+     * These fields will be available for the user to fill in when they register.
+     */
+    regFields: string[];
+    /**
+     * Verify users' email addresses upon registration/email change before
+     * allowing them to log in/change it.
+     */
+    verifyEmail: boolean;
+    /**
+     * After the user verifies their address, redirect them to this URL.
+     */
+    verifyRedirect: string;
+    /**
+     * After the user verifies an address change, redirect them to this URL.
+     */
+    verifyChangeRedirect: string;
+    /**
+     * After the user cancels an address change, redirect them to this URL.
+     */
+    cancelChangeRedirect: string;
+    /**
+     * Unverified users will be able to log in, but will only have the "unverified
+     * users" secondary group(s) until they verify their email. If set to false,
+     * their account will instead be disabled until they verify.
+     */
+    unverifiedAccess: boolean;
+    /**
+     * Don't let users change their email address more often than this. You can
+     * enter one value and one unit of time, such as "2 weeks". Leave blank to
+     * disable rate limiting.
+     *
+     * This also controls how long a user has to cancel an email address change
+     * from a link emailed to the old address.
+     */
+    emailRateLimit: string;
+    /**
+     * Allow users to recover their username and/or password through their
+     * registered email.
+     */
+    pwRecovery: boolean;
+    /**
+     * How long a recovery request is valid.
+     */
+    pwRecoveryTimeLimit: string;
+    /**
+     * Method used to store passwords. Salt is more secure if the database is
+     * compromised. Plain: store the password in plaintext. Digest: store the
+     * password's digest (hash). Salt: store the password's digest using a
+     * complex, unique salt.
+     *
+     * Digests are SHA-256, so a salt probably isn't necessary, but who knows.
+     *
+     * Options are: "plain", "digest", "salt"
+     */
+    pwMethod: 'plain' | 'digest' | 'salt';
+    /**
+     * Whether to create a new primary group for every user who registers. This
+     * can be useful for providing access to entities the user creates.
+     *
+     * In the case this is set, the default primary group, rather than being
+     * assigned to the user, is assigned as the parent of the generated group.
+     */
+    generatePrimary: boolean;
+    /**
+     * The GUID of the group above the highest groups allowed to be assigned as
+     * primary groups. True means all groups, and false means no groups.
+     */
+    highestPrimary: string | boolean;
+    /**
+     * The GUID of the group above the highest groups allowed to be assigned as
+     * secondary groups. True means all groups, and false means no groups.
+     */
+    highestSecondary: string | boolean;
+    /**
+     * Only these characters can be used when creating usernames and groupnames.
+     * (Doesn't apply to emails as usernames.)
+     */
+    validChars: string;
+    /**
+     * When a user enters an invalid name, this message will be displayed.
+     */
+    validCharsNotice: string;
+    /**
+     * Usernames and groupnames must match this regular expression. (Doesn't apply
+     * to emails as usernames.) By default, this ensures that the name begins and
+     * ends with an alphanumeric. (To allow anything, use .* inside the slashes.)
+     */
+    validRegex: RegExp;
+    /**
+     * When a user enters a name that doesn't match the regex, this message will
+     * be displayed.
+     */
+    validRegexNotice: string;
+    /**
+     * Email addresses must match this regular expression. By default, this uses
+     * the regex from the W3C HTML email element validation:
+     *
+     * https://html.spec.whatwg.org/multipage/input.html#email-state-(type=email)
+     */
+    validEmailRegex: RegExp;
+    /**
+     * When a user enters an email that doesn't match the regex, this message will
+     * be displayed.
+     */
+    validEmailRegexNotice: string;
+    /**
+     * Domains must match this regular expression. By default, this uses a regex
+     * that should match most domains:
+     *
+     * https://stackoverflow.com/a/26987741
+     */
+    validDomainRegex: RegExp;
+    /**
+     * When a user enters a domain that doesn't match the regex, this message will
+     * be displayed.
+     */
+    validDomainRegexNotice: string;
+    /**
+     * The minimum length for usernames.
+     */
+    minUsernameLength: number;
+    /**
+     * The maximum length for usernames. `Infinity` for unlimited.
+     */
+    maxUsernameLength: number;
+    /**
+     * The secret used to sign the JWT.
+     */
+    jwtSecret: string;
+    /**
+     * How long from current time, in seconds, the JWT token expires.
+     */
+    jwtExpire: number;
+    /**
+     * How long from current time, in seconds, the JWT token for a user switch
+     * expires.
+     */
+    jwtSwitchExpire: number;
+    /**
+     * How long, in seconds, before the JWT token expires to give the user a new
+     * one.
+     */
+    jwtRenew: number;
+    /**
+     * Function to build the JWT for user sessions.
+     */
+    jwtBuilder: (config: Config, user: User & UserData, switchToken?: boolean) => string;
+    /**
+     * Function to verify that a JWT was signed with the secret key, validate its
+     * data, validate the XSRF token, and extract the GUID and dates.
+     *
+     * If no XSRF token is supplied, ignore it.
+     *
+     * Return false if the JWT is not valid, or an object with GUID, issued date,
+     * and expire date otherwise.
+     */
+    jwtExtract: (config: Config, token: string, xsrfToken?: string) => {
+        guid: string;
+        issued: Date;
+        expire: Date;
+    } | null;
+    /**
+     * The absolute path to the email template directory. Used by the default
+     * email sender.
+     */
+    emailTemplateDir: string;
+    /**
+     * Configure an email object to prepare for sending.
+     *
+     * You can use this, for example, for DKIM signing.
+     *
+     * See: https://github.com/forwardemail/email-templates/blob/v8.0.9/README.md#Options
+     */
+    configEmail: (tilmeld: Tilmeld, options: EmailOptions, user: User & UserData) => Promise<EmailConfig>;
+    /**
+     * Send an email to a user. Uses `email-templates` by default.
+     *
+     * Check out the `emails` directory to see the templates used.
+     *
+     * In addition to the specific `locals` for each template, there are
+     * additional locals added by the default email sender:
+     *
+     * - System Information
+     *  - siteName
+     *  - siteLink
+     * - Recipient Information
+     *  - toUsername
+     *  - toName
+     *  - toFirstName
+     *  - toLastName
+     *  - toEmail
+     *  - toPhone
+     * - Current User Information (Only available if a user is logged in.)
+     *  - username
+     *  - name
+     *  - firstName
+     *  - lastName
+     *  - email
+     */
+    sendEmail: (tilmeld: Tilmeld, options: EmailOptions, user: User & UserData) => Promise<boolean>;
+    /**
+     * The address you'd like to receive a notification of registered users, if
+     * any.
+     */
+    userRegisteredRecipient: string | null;
+    /**
+     * A function to run on a failed login attempt.
+     *
+     * If the username the client attempted doesn't exist, user will be null.
+     *
+     * This defaults to a promise that resolves after 3-5 seconds. This rate
+     * limits failed login attempts.
+     *
+     * Please note that the data comes from the client, so the types have not been
+     * verified. For example, username might be an array or a number.
+     */
+    failedLoginAttempt: (user: (User & UserData) | null, data: {
+        username: string;
+        password: string;
+        code?: string;
+        additionalData?: {
+            [k: string]: any;
+        };
+    }) => Promise<void>;
+    /**
+     * The validator used to check groups before saving.
+     */
+    validatorGroup: (tilmeld: Tilmeld, group: Group & GroupData) => void;
+    /**
+     * The validator used to check users before saving.
+     */
+    validatorUser: (tilmeld: Tilmeld, user: User & UserData) => void;
+}
+import defaults from './defaults.js';
 export { defaults as ConfigDefaults };

package/dist/conf/index.js

@@ -1,9 +1,3 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConfigDefaults = void 0;
-const defaults_1 = __importDefault(require("./defaults"));
-exports.ConfigDefaults = defaults_1.default;
+import defaults from './defaults.js';
+export { defaults as ConfigDefaults };
 //# sourceMappingURL=index.js.map

package/dist/conf/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/conf/index.ts"],"names":[],"mappings":";;;;;;AAEA,0DAAkC;AACb,yBADd,kBAAQ,CACoB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/conf/index.ts"],"names":[],"mappings":"AAkXA,OAAO,QAAQ,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,CAAC"}

package/dist/decorators/index.d.ts

@@ -0,0 +1,2 @@
+export * from './requireAbility.js';
+export * from './requireAuthentication.js';

package/dist/decorators/index.js

@@ -0,0 +1,3 @@
+export * from './requireAbility.js';
+export * from './requireAuthentication.js';
+//# sourceMappingURL=index.js.map

package/dist/decorators/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/decorators/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC"}

package/dist/decorators/requireAbility.d.ts

@@ -0,0 +1,10 @@
+import { Entity } from '@nymphjs/nymph';
+/**
+ * A decorator that checks for an ability before running the method.
+ *
+ * If the logged in user does not have the given ability, the decorator will
+ * cause the method to throw a 403 Forbidden HttpError.
+ *
+ * @param ability The ability to check for.
+ */
+export declare function requireAbility(ability: string): (target: (...args: any[]) => any, _context: ClassMethodDecoratorContext) => (this: Entity, ...args: unknown[]) => any;

package/dist/decorators/requireAbility.js

@@ -0,0 +1,21 @@
+import { HttpError } from '@nymphjs/nymph';
+/**
+ * A decorator that checks for an ability before running the method.
+ *
+ * If the logged in user does not have the given ability, the decorator will
+ * cause the method to throw a 403 Forbidden HttpError.
+ *
+ * @param ability The ability to check for.
+ */
+export function requireAbility(ability) {
+    return function (target, _context) {
+        return function (...args) {
+            if (this.$nymph.tilmeld == null ||
+                !this.$nymph.tilmeld.gatekeeper(ability)) {
+                throw new HttpError('Forbidden', 403);
+            }
+            return target.apply(this, args);
+        };
+    };
+}
+//# sourceMappingURL=requireAbility.js.map

package/dist/decorators/requireAbility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requireAbility.js","sourceRoot":"","sources":["../../src/decorators/requireAbility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEnD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,UACL,MAA+B,EAC/B,QAAqC;QAErC,OAAO,UAAwB,GAAG,IAAe;YAC/C,IACE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI;gBAC3B,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EACxC,CAAC;gBACD,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/decorators/requireAuthentication.d.ts

@@ -0,0 +1,8 @@
+import { Entity } from '@nymphjs/nymph';
+/**
+ * A decorator that checks for authentication before running the method.
+ *
+ * If the user is not logged in, the decorator will cause the method to throw a
+ * 403 Forbidden HttpError.
+ */
+export declare function requireAuthentication(target: (...args: any[]) => any, _context: ClassMethodDecoratorContext): (this: Entity, ...args: unknown[]) => any;

package/dist/decorators/requireAuthentication.js

@@ -0,0 +1,16 @@
+import { HttpError } from '@nymphjs/nymph';
+/**
+ * A decorator that checks for authentication before running the method.
+ *
+ * If the user is not logged in, the decorator will cause the method to throw a
+ * 403 Forbidden HttpError.
+ */
+export function requireAuthentication(target, _context) {
+    return function (...args) {
+        if (this.$nymph.tilmeld == null || !this.$nymph.tilmeld.gatekeeper()) {
+            throw new HttpError('Forbidden', 403);
+        }
+        return target.apply(this, args);
+    };
+}
+//# sourceMappingURL=requireAuthentication.js.map

package/dist/decorators/requireAuthentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requireAuthentication.js","sourceRoot":"","sources":["../../src/decorators/requireAuthentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA+B,EAC/B,QAAqC;IAErC,OAAO,UAAwB,GAAG,IAAe;QAC/C,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YACrE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC"}

package/dist/enforceTilmeld.d.ts

@@ -0,0 +1,3 @@
+import { Entity, EntityConstructor, Nymph } from '@nymphjs/nymph';
+import Tilmeld from './Tilmeld.js';
+export declare function enforceTilmeld(object: Nymph | Entity | EntityConstructor): Tilmeld;

package/dist/enforceTilmeld.js

@@ -0,0 +1,18 @@
+import { Entity, Nymph } from '@nymphjs/nymph';
+export function enforceTilmeld(object) {
+    let tilmeld;
+    if (object instanceof Entity) {
+        tilmeld = object.$nymph.tilmeld;
+    }
+    else if (object instanceof Nymph) {
+        tilmeld = object.tilmeld;
+    }
+    else {
+        tilmeld = object.nymph.tilmeld;
+    }
+    if (tilmeld == null) {
+        throw new Error('Tilmeld was not configured on this Nymph instance!');
+    }
+    return tilmeld;
+}
+//# sourceMappingURL=enforceTilmeld.js.map

package/dist/enforceTilmeld.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforceTilmeld.js","sourceRoot":"","sources":["../src/enforceTilmeld.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAIlE,MAAM,UAAU,cAAc,CAAC,MAA0C;IACvE,IAAI,OAA4B,CAAC;IACjC,IAAI,MAAM,YAAY,MAAM,EAAE,CAAC;QAC7B,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAA8B,CAAC;IACzD,CAAC;SAAM,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;QACnC,OAAO,GAAG,MAAM,CAAC,OAA8B,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAA8B,CAAC;IACxD,CAAC;IAED,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/errors/AccessControlError.d.ts

@@ -1,3 +1,4 @@
-export declare class AccessControlError extends Error {
+import { HttpError } from '@nymphjs/nymph';
+export declare class AccessControlError extends HttpError {
     constructor(message: string);
 }

package/dist/errors/AccessControlError.js

@@ -1,11 +1,8 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AccessControlError = void 0;
-class AccessControlError extends Error {
+import { HttpError } from '@nymphjs/nymph';
+export class AccessControlError extends HttpError {
     constructor(message) {
-        super(message);
+        super(message, 403);
         this.name = 'AccessControlError';
     }
 }
-exports.AccessControlError = AccessControlError;
 //# sourceMappingURL=AccessControlError.js.map

package/dist/errors/AccessControlError.js.map

@@ -1 +1 @@
-{"version":3,"file":"AccessControlError.js","sourceRoot":"","sources":["../../src/errors/AccessControlError.ts"],"names":[],"mappings":";;;AAAA,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC"}
+{"version":3,"file":"AccessControlError.js","sourceRoot":"","sources":["../../src/errors/AccessControlError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,OAAO,kBAAmB,SAAQ,SAAS;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF"}

package/dist/errors/BadDataError.d.ts

@@ -1,3 +1,4 @@
-export declare class BadDataError extends Error {
+import { HttpError } from '@nymphjs/nymph';
+export declare class BadDataError extends HttpError {
     constructor(message: string);
 }

package/dist/errors/BadDataError.js

@@ -1,11 +1,8 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BadDataError = void 0;
-class BadDataError extends Error {
+import { HttpError } from '@nymphjs/nymph';
+export class BadDataError extends HttpError {
     constructor(message) {
-        super(message);
+        super(message, 400);
         this.name = 'BadDataError';
     }
 }
-exports.BadDataError = BadDataError;
 //# sourceMappingURL=BadDataError.js.map

package/dist/errors/BadDataError.js.map

@@ -1 +1 @@
-{"version":3,"file":"BadDataError.js","sourceRoot":"","sources":["../../src/errors/BadDataError.ts"],"names":[],"mappings":";;;AAAA,MAAa,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AALD,oCAKC"}
+{"version":3,"file":"BadDataError.js","sourceRoot":"","sources":["../../src/errors/BadDataError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,OAAO,YAAa,SAAQ,SAAS;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF"}

package/dist/errors/BadEmailError.d.ts

@@ -1,3 +1,4 @@
-export declare class BadEmailError extends Error {
+import { HttpError } from '@nymphjs/nymph';
+export declare class BadEmailError extends HttpError {
     constructor(message: string);
 }

package/dist/errors/BadEmailError.js

@@ -1,11 +1,8 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BadEmailError = void 0;
-class BadEmailError extends Error {
+import { HttpError } from '@nymphjs/nymph';
+export class BadEmailError extends HttpError {
     constructor(message) {
-        super(message);
+        super(message, 400);
         this.name = 'BadEmailError';
     }
 }
-exports.BadEmailError = BadEmailError;
 //# sourceMappingURL=BadEmailError.js.map

package/dist/errors/BadEmailError.js.map

@@ -1 +1 @@
-{"version":3,"file":"BadEmailError.js","sourceRoot":"","sources":["../../src/errors/BadEmailError.ts"],"names":[],"mappings":";;;AAAA,MAAa,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC"}
+{"version":3,"file":"BadEmailError.js","sourceRoot":"","sources":["../../src/errors/BadEmailError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,OAAO,aAAc,SAAQ,SAAS;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF"}

package/dist/errors/BadUsernameError.d.ts

@@ -1,3 +1,4 @@
-export declare class BadUsernameError extends Error {
+import { HttpError } from '@nymphjs/nymph';
+export declare class BadUsernameError extends HttpError {
     constructor(message: string);
 }

package/dist/errors/BadUsernameError.js

@@ -1,11 +1,8 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BadUsernameError = void 0;
-class BadUsernameError extends Error {
+import { HttpError } from '@nymphjs/nymph';
+export class BadUsernameError extends HttpError {
     constructor(message) {
-        super(message);
+        super(message, 400);
         this.name = 'BadUsernameError';
     }
 }
-exports.BadUsernameError = BadUsernameError;
 //# sourceMappingURL=BadUsernameError.js.map

package/dist/errors/BadUsernameError.js.map

@@ -1 +1 @@
-{"version":3,"file":"BadUsernameError.js","sourceRoot":"","sources":["../../src/errors/BadUsernameError.ts"],"names":[],"mappings":";;;AAAA,MAAa,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AALD,4CAKC"}
+{"version":3,"file":"BadUsernameError.js","sourceRoot":"","sources":["../../src/errors/BadUsernameError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF"}

package/dist/errors/CouldNotChangeDefaultPrimaryGroupError.js

@@ -1,11 +1,7 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CouldNotChangeDefaultPrimaryGroupError = void 0;
-class CouldNotChangeDefaultPrimaryGroupError extends Error {
+export class CouldNotChangeDefaultPrimaryGroupError extends Error {
     constructor(message) {
         super(message);
         this.name = 'CouldNotChangeDefaultPrimaryGroupError';
     }
 }
-exports.CouldNotChangeDefaultPrimaryGroupError = CouldNotChangeDefaultPrimaryGroupError;
 //# sourceMappingURL=CouldNotChangeDefaultPrimaryGroupError.js.map

package/dist/errors/CouldNotChangeDefaultPrimaryGroupError.js.map

@@ -1 +1 @@
-{"version":3,"file":"CouldNotChangeDefaultPrimaryGroupError.js","sourceRoot":"","sources":["../../src/errors/CouldNotChangeDefaultPrimaryGroupError.ts"],"names":[],"mappings":";;;AAAA,MAAa,sCAAuC,SAAQ,KAAK;IAC/D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wCAAwC,CAAC;IACvD,CAAC;CACF;AALD,wFAKC"}
+{"version":3,"file":"CouldNotChangeDefaultPrimaryGroupError.js","sourceRoot":"","sources":["../../src/errors/CouldNotChangeDefaultPrimaryGroupError.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,sCAAuC,SAAQ,KAAK;IAC/D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wCAAwC,CAAC;IACvD,CAAC;CACF"}

package/dist/errors/EmailChangeRateLimitExceededError.js

@@ -1,11 +1,7 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EmailChangeRateLimitExceededError = void 0;
-class EmailChangeRateLimitExceededError extends Error {
+export class EmailChangeRateLimitExceededError extends Error {
     constructor(message) {
         super(message);
         this.name = 'EmailChangeRateLimitExceededError';
     }
 }
-exports.EmailChangeRateLimitExceededError = EmailChangeRateLimitExceededError;
 //# sourceMappingURL=EmailChangeRateLimitExceededError.js.map

package/dist/errors/EmailChangeRateLimitExceededError.js.map

@@ -1 +1 @@
-{"version":3,"file":"EmailChangeRateLimitExceededError.js","sourceRoot":"","sources":["../../src/errors/EmailChangeRateLimitExceededError.ts"],"names":[],"mappings":";;;AAAA,MAAa,iCAAkC,SAAQ,KAAK;IAC1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IAClD,CAAC;CACF;AALD,8EAKC"}
+{"version":3,"file":"EmailChangeRateLimitExceededError.js","sourceRoot":"","sources":["../../src/errors/EmailChangeRateLimitExceededError.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAC1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IAClD,CAAC;CACF"}

package/dist/errors/index.d.ts

@@ -1,6 +1,6 @@
-export * from './AccessControlError';
-export * from './BadDataError';
-export * from './BadEmailError';
-export * from './BadUsernameError';
-export * from './CouldNotChangeDefaultPrimaryGroupError';
-export * from './EmailChangeRateLimitExceededError';
+export * from './AccessControlError.js';
+export * from './BadDataError.js';
+export * from './BadEmailError.js';
+export * from './BadUsernameError.js';
+export * from './CouldNotChangeDefaultPrimaryGroupError.js';
+export * from './EmailChangeRateLimitExceededError.js';