@nymphjs/tilmeld 1.0.0-beta.13 → 1.0.0-beta.131

package/src/tilmeldJoiProps.ts

@@ -1,8 +1,8 @@
 import { TilmeldAccessLevels } from '@nymphjs/nymph';
 import Joi from 'joi';
 
-import User from './User';
-import Group from './Group';
+import User from './User.js';
+import Group from './Group.js';
 
 export default {
   user: Joi.object().instance(User),
@@ -11,36 +11,21 @@ export default {
     TilmeldAccessLevels.NO_ACCESS,
     TilmeldAccessLevels.READ_ACCESS,
     TilmeldAccessLevels.WRITE_ACCESS,
-    TilmeldAccessLevels.FULL_ACCESS
+    TilmeldAccessLevels.FULL_ACCESS,
   ),
   acGroup: Joi.number().valid(
     TilmeldAccessLevels.NO_ACCESS,
     TilmeldAccessLevels.READ_ACCESS,
     TilmeldAccessLevels.WRITE_ACCESS,
-    TilmeldAccessLevels.FULL_ACCESS
+    TilmeldAccessLevels.FULL_ACCESS,
   ),
   acOther: Joi.number().valid(
     TilmeldAccessLevels.NO_ACCESS,
     TilmeldAccessLevels.READ_ACCESS,
     TilmeldAccessLevels.WRITE_ACCESS,
-    TilmeldAccessLevels.FULL_ACCESS
-  ),
-  acRead: Joi.array().items(
-    Joi.alternatives().try(
-      Joi.object().instance(User),
-      Joi.object().instance(Group)
-    )
-  ),
-  acWrite: Joi.array().items(
-    Joi.alternatives().try(
-      Joi.object().instance(User),
-      Joi.object().instance(Group)
-    )
-  ),
-  acFull: Joi.array().items(
-    Joi.alternatives().try(
-      Joi.object().instance(User),
-      Joi.object().instance(Group)
-    )
+    TilmeldAccessLevels.FULL_ACCESS,
   ),
+  acRead: Joi.array().items(Joi.string().pattern(/^[0-9a-f]{24}$/i, 'GUID')),
+  acWrite: Joi.array().items(Joi.string().pattern(/^[0-9a-f]{24}$/i, 'GUID')),
+  acFull: Joi.array().items(Joi.string().pattern(/^[0-9a-f]{24}$/i, 'GUID')),
 };

package/tsconfig.json

@@ -2,10 +2,13 @@
   "extends": "@tsconfig/recommended/tsconfig.json",
 
   "compilerOptions": {
-    "lib": ["ES2021"],
-    "target": "ES2021",
+    "types": ["node", "jest"],
+    "module": "nodenext",
+    "moduleResolution": "nodenext",
+    "lib": ["es2024"],
+    "target": "es2024",
     "noImplicitAny": true,
-    "removeComments": true,
+    "removeComments": false,
     "sourceMap": true,
     "outDir": "dist",
     "resolveJsonModule": true,

package/typedoc.json

@@ -0,0 +1,4 @@
+{
+  "extends": ["../../typedoc.base.json"],
+  "entryPoints": ["src/index.ts"]
+}

package/dist/Group.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/Group.test.js

@@ -1,48 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const driver_sqlite3_1 = require("@nymphjs/driver-sqlite3");
-const nymph_1 = require("@nymphjs/nymph");
-const Tilmeld_1 = __importDefault(require("./Tilmeld"));
-const defaults_1 = __importDefault(require("./conf/defaults"));
-const tilmeld = new Tilmeld_1.default({
-    appName: 'My App',
-    appUrl: 'http://localhost:8080',
-    cookieDomain: 'localhost',
-    cookiePath: '/',
-    setupPath: '/user',
-    emailUsernames: false,
-    verifyRedirect: 'http://localhost:8080',
-    verifyChangeRedirect: 'http://localhost:8080',
-    cancelChangeRedirect: 'http://localhost:8080',
-    jwtSecret: 'shhhhh',
-});
-const _nymph = new nymph_1.Nymph({}, new driver_sqlite3_1.SQLite3Driver({
-    filename: ':memory:',
-}), tilmeld);
-const Group = tilmeld.Group;
-describe('Group', () => {
-    async function makeNewGroup() {
-        const newGroup = await Group.factory();
-        newGroup.groupname = 'new-group';
-        newGroup.email = 'newgroup@localhost';
-        newGroup.name = 'New Group';
-        return newGroup;
-    }
-    it('new group passes validation', async () => {
-        const validGroup = await makeNewGroup();
-        expect(() => {
-            defaults_1.default.validatorGroup(validGroup);
-        }).not.toThrow();
-    });
-    it("doesn't allow unknown keys", async () => {
-        const invalidGroup = await makeNewGroup();
-        invalidGroup.unknown = 'I should cause an error.';
-        expect(() => {
-            defaults_1.default.validatorGroup(invalidGroup);
-        }).toThrow('Invalid Group:  "unknown" is not allowed');
-    });
-});
-//# sourceMappingURL=Group.test.js.map

package/dist/Group.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"Group.test.js","sourceRoot":"","sources":["../src/Group.test.ts"],"names":[],"mappings":";;;;;AAAA,4DAAwD;AACxD,0CAAuC;AAEvC,wDAAgC;AAChC,+DAAuC;AAEvC,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC;IAC1B,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,uBAAuB;IAC/B,YAAY,EAAE,WAAW;IACzB,UAAU,EAAE,GAAG;IACf,SAAS,EAAE,OAAO;IAClB,cAAc,EAAE,KAAK;IACrB,cAAc,EAAE,uBAAuB;IACvC,oBAAoB,EAAE,uBAAuB;IAC7C,oBAAoB,EAAE,uBAAuB;IAC7C,SAAS,EAAE,QAAQ;CACpB,CAAC,CAAC;AACH,MAAM,MAAM,GAAG,IAAI,aAAK,CACtB,EAAE,EACF,IAAI,8BAAa,CAAC;IAChB,QAAQ,EAAE,UAAU;CACrB,CAAC,EACF,OAAO,CACR,CAAC;AAEF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;AAE5B,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;IACrB,KAAK,UAAU,YAAY;QACzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QAEvC,QAAQ,CAAC,SAAS,GAAG,WAAW,CAAC;QACjC,QAAQ,CAAC,KAAK,GAAG,oBAAoB,CAAC;QACtC,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC;QAE5B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,UAAU,GAAG,MAAM,YAAY,EAAE,CAAC;QAExC,MAAM,CAAC,GAAG,EAAE;YACV,kBAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,YAAY,GAAG,MAAM,YAAY,EAAE,CAAC;QAG1C,YAAY,CAAC,OAAO,GAAG,0BAA0B,CAAC;QAElD,MAAM,CAAC,GAAG,EAAE;YACV,kBAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/User.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/User.test.js

@@ -1,51 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const driver_sqlite3_1 = require("@nymphjs/driver-sqlite3");
-const nymph_1 = require("@nymphjs/nymph");
-const Tilmeld_1 = __importDefault(require("./Tilmeld"));
-const defaults_1 = __importDefault(require("./conf/defaults"));
-const tilmeld = new Tilmeld_1.default({
-    appName: 'My App',
-    appUrl: 'http://localhost:8080',
-    cookieDomain: 'localhost',
-    cookiePath: '/',
-    setupPath: '/user',
-    emailUsernames: false,
-    verifyRedirect: 'http://localhost:8080',
-    verifyChangeRedirect: 'http://localhost:8080',
-    cancelChangeRedirect: 'http://localhost:8080',
-    jwtSecret: 'shhhhh',
-});
-const _nymph = new nymph_1.Nymph({}, new driver_sqlite3_1.SQLite3Driver({
-    filename: ':memory:',
-}), tilmeld);
-const User = tilmeld.User;
-describe('User', () => {
-    async function makeNewUser() {
-        const newUser = await User.factory();
-        newUser.username = 'new-user';
-        newUser.email = 'newuser@localhost';
-        newUser.nameFirst = 'New';
-        newUser.nameLast = 'User';
-        newUser.name = 'New User';
-        newUser.$password('password');
-        return newUser;
-    }
-    it('new user passes validation', async () => {
-        const validUser = await makeNewUser();
-        expect(() => {
-            defaults_1.default.validatorUser(validUser);
-        }).not.toThrow();
-    });
-    it("doesn't allow unknown keys", async () => {
-        const invalidUser = await makeNewUser();
-        invalidUser.unknown = 'I should cause an error.';
-        expect(() => {
-            defaults_1.default.validatorUser(invalidUser);
-        }).toThrow('Invalid User:  "unknown" is not allowed');
-    });
-});
-//# sourceMappingURL=User.test.js.map

package/dist/User.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"User.test.js","sourceRoot":"","sources":["../src/User.test.ts"],"names":[],"mappings":";;;;;AAAA,4DAAwD;AACxD,0CAAuC;AAEvC,wDAAgC;AAChC,+DAAuC;AAEvC,MAAM,OAAO,GAAG,IAAI,iBAAO,CAAC;IAC1B,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,uBAAuB;IAC/B,YAAY,EAAE,WAAW;IACzB,UAAU,EAAE,GAAG;IACf,SAAS,EAAE,OAAO;IAClB,cAAc,EAAE,KAAK;IACrB,cAAc,EAAE,uBAAuB;IACvC,oBAAoB,EAAE,uBAAuB;IAC7C,oBAAoB,EAAE,uBAAuB;IAC7C,SAAS,EAAE,QAAQ;CACpB,CAAC,CAAC;AACH,MAAM,MAAM,GAAG,IAAI,aAAK,CACtB,EAAE,EACF,IAAI,8BAAa,CAAC;IAChB,QAAQ,EAAE,UAAU;CACrB,CAAC,EACF,OAAO,CACR,CAAC;AAEF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;AAE1B,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;IACpB,KAAK,UAAU,WAAW;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAErC,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC;QAC9B,OAAO,CAAC,KAAK,GAAG,mBAAmB,CAAC;QACpC,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;QAC1B,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC;QAC1B,OAAO,CAAC,IAAI,GAAG,UAAU,CAAC;QAC1B,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAE9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,SAAS,GAAG,MAAM,WAAW,EAAE,CAAC;QAEtC,MAAM,CAAC,GAAG,EAAE;YACV,kBAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE,CAAC;QAGxC,WAAW,CAAC,OAAO,GAAG,0BAA0B,CAAC;QAEjD,MAAM,CAAC,GAAG,EAAE;YACV,kBAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/conf/d.d.ts

@@ -1,55 +0,0 @@
-import { EmailOptions, EmailConfig } from 'email-templates';
-import type Tilmeld from '../Tilmeld';
-import Group, { GroupData } from '../Group';
-import User, { UserData } from '../User';
-export interface Config {
-    appName: string;
-    appUrl: string;
-    cookieDomain: string;
-    cookiePath: string;
-    setupPath: string;
-    createAdmin: boolean;
-    emailUsernames: boolean;
-    allowRegistration: boolean;
-    allowUsernameChange: boolean;
-    enableUserSearch: boolean;
-    enableGroupSearch: boolean;
-    clientReadableUIDs: string[];
-    clientEnabledUIDs: string[];
-    clientSetabledUIDs: string[];
-    userFields: string[];
-    regFields: string[];
-    verifyEmail: boolean;
-    verifyRedirect: string;
-    verifyChangeRedirect: string;
-    cancelChangeRedirect: string;
-    unverifiedAccess: boolean;
-    emailRateLimit: string;
-    pwRecovery: boolean;
-    pwRecoveryTimeLimit: string;
-    pwMethod: 'plain' | 'digest' | 'salt';
-    generatePrimary: boolean;
-    highestPrimary: string | boolean;
-    highestSecondary: string | boolean;
-    validChars: string;
-    validCharsNotice: string;
-    validRegex: RegExp;
-    validRegexNotice: string;
-    validEmailRegex: RegExp;
-    validEmailRegexNotice: string;
-    maxUsernameLength: number;
-    jwtSecret: string;
-    jwtExpire: number;
-    jwtRenew: number;
-    jwtBuilder: (config: Config, user: User) => string;
-    jwtExtract: (config: Config, token: string, xsrfToken?: string) => {
-        guid: string;
-        expire: Date;
-    } | null;
-    emailTemplateDir: string;
-    configEmail: (tilmeld: Tilmeld, options: EmailOptions, user: User & UserData) => Promise<EmailConfig>;
-    sendEmail: (tilmeld: Tilmeld, options: EmailOptions, user: User & UserData) => Promise<boolean>;
-    userRegisteredRecipient: string | null;
-    validatorGroup: (group: Group & GroupData) => void;
-    validatorUser: (user: User & UserData) => void;
-}

package/dist/conf/d.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=d.js.map

package/dist/conf/d.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"d.js","sourceRoot":"","sources":["../../src/conf/d.ts"],"names":[],"mappings":""}

package/src/Group.test.ts

@@ -1,58 +0,0 @@
-import { SQLite3Driver } from '@nymphjs/driver-sqlite3';
-import { Nymph } from '@nymphjs/nymph';
-
-import Tilmeld from './Tilmeld';
-import defaults from './conf/defaults';
-
-const tilmeld = new Tilmeld({
-  appName: 'My App',
-  appUrl: 'http://localhost:8080',
-  cookieDomain: 'localhost',
-  cookiePath: '/',
-  setupPath: '/user',
-  emailUsernames: false,
-  verifyRedirect: 'http://localhost:8080',
-  verifyChangeRedirect: 'http://localhost:8080',
-  cancelChangeRedirect: 'http://localhost:8080',
-  jwtSecret: 'shhhhh',
-});
-const _nymph = new Nymph(
-  {},
-  new SQLite3Driver({
-    filename: ':memory:',
-  }),
-  tilmeld
-);
-
-const Group = tilmeld.Group;
-
-describe('Group', () => {
-  async function makeNewGroup() {
-    const newGroup = await Group.factory();
-
-    newGroup.groupname = 'new-group';
-    newGroup.email = 'newgroup@localhost';
-    newGroup.name = 'New Group';
-
-    return newGroup;
-  }
-
-  it('new group passes validation', async () => {
-    const validGroup = await makeNewGroup();
-
-    expect(() => {
-      defaults.validatorGroup(validGroup);
-    }).not.toThrow();
-  });
-
-  it("doesn't allow unknown keys", async () => {
-    const invalidGroup = await makeNewGroup();
-
-    // @ts-ignore: testing unknown keys
-    invalidGroup.unknown = 'I should cause an error.';
-
-    expect(() => {
-      defaults.validatorGroup(invalidGroup);
-    }).toThrow('Invalid Group:  "unknown" is not allowed');
-  });
-});

package/src/User.test.ts

@@ -1,61 +0,0 @@
-import { SQLite3Driver } from '@nymphjs/driver-sqlite3';
-import { Nymph } from '@nymphjs/nymph';
-
-import Tilmeld from './Tilmeld';
-import defaults from './conf/defaults';
-
-const tilmeld = new Tilmeld({
-  appName: 'My App',
-  appUrl: 'http://localhost:8080',
-  cookieDomain: 'localhost',
-  cookiePath: '/',
-  setupPath: '/user',
-  emailUsernames: false,
-  verifyRedirect: 'http://localhost:8080',
-  verifyChangeRedirect: 'http://localhost:8080',
-  cancelChangeRedirect: 'http://localhost:8080',
-  jwtSecret: 'shhhhh',
-});
-const _nymph = new Nymph(
-  {},
-  new SQLite3Driver({
-    filename: ':memory:',
-  }),
-  tilmeld
-);
-
-const User = tilmeld.User;
-
-describe('User', () => {
-  async function makeNewUser() {
-    const newUser = await User.factory();
-
-    newUser.username = 'new-user';
-    newUser.email = 'newuser@localhost';
-    newUser.nameFirst = 'New';
-    newUser.nameLast = 'User';
-    newUser.name = 'New User';
-    newUser.$password('password');
-
-    return newUser;
-  }
-
-  it('new user passes validation', async () => {
-    const validUser = await makeNewUser();
-
-    expect(() => {
-      defaults.validatorUser(validUser);
-    }).not.toThrow();
-  });
-
-  it("doesn't allow unknown keys", async () => {
-    const invalidUser = await makeNewUser();
-
-    // @ts-ignore: testing unknown keys
-    invalidUser.unknown = 'I should cause an error.';
-
-    expect(() => {
-      defaults.validatorUser(invalidUser);
-    }).toThrow('Invalid User:  "unknown" is not allowed');
-  });
-});

package/src/conf/d.ts

@@ -1,303 +0,0 @@
-import { EmailOptions, EmailConfig } from 'email-templates';
-
-import type Tilmeld from '../Tilmeld';
-import Group, { GroupData } from '../Group';
-import User, { UserData } from '../User';
-
-/**
- * Tilmeld Config
- */
-export interface Config {
-  /**
-   * The name of the app. Used in emails sent to users.
-   */
-  appName: string;
-  /**
-   * The URL of the app. Used to define cookie domain, path, and security. Must
-   * be accessible to the Tilmeld client JS. (Note, cookies are not specific to
-   * individual ports, so tokens will be sent to any port running on this host.)
-   */
-  appUrl: string;
-  /**
-   * The domain of the auth cookie.
-   */
-  cookieDomain: string;
-  /**
-   * The path of the auth cookie.
-   */
-  cookiePath: string;
-  /**
-   * The path (with leading slash and no trailing slash) where the setup utility
-   * is accessible. This is also used for email address verification.
-   *
-   * ***************************************************************************
-   * This portion of the app will **not** check for the XSRF token, so make sure
-   * your REST endpoint is **not** under this URL.
-   * ***************************************************************************
-   */
-  setupPath: string;
-  /**
-   * Allow the creation of an admin user. When a user is created, if there are
-   * no other users in the system, they will be granted all abilities.
-   */
-  createAdmin: boolean;
-  /**
-   * Instead of a "username", a user logs in and is referred to by their email
-   * address. Enabling this after many users have been created can be messy.
-   * Make sure they all have email addresses first.
-   */
-  emailUsernames: boolean;
-  /**
-   * Allow users to register.
-   */
-  allowRegistration: boolean;
-  /**
-   * Allow users to change their username.
-   */
-  allowUsernameChange: boolean;
-  /**
-   * Whether frontend can search users. (Probably not a good idea if privacy is
-   * a concern.)
-   */
-  enableUserSearch: boolean;
-  /**
-   * Whether frontend can search groups. (Probably not a good idea if privacy is
-   * a concern. Same risks as user search if generatePrimary is true.)
-   */
-  enableGroupSearch: boolean;
-  /**
-   * A list of UIDs that can be read from the client by anyone. (getUID)
-   *
-   * Note: If you'd like to limit the access to logged in users, give them an
-   *       ability like "uid/get/nameofuid".
-   */
-  clientReadableUIDs: string[];
-  /**
-   * A list of UIDs that can be created from the client by anyone. (newUID)
-   *
-   * Inclusion in this list implies inclusion in clientReadableUIDs.
-   *
-   * Note: If you'd like to limit the access to logged in users, give them an
-   *       ability like "uid/new/nameofuid".
-   */
-  clientEnabledUIDs: string[];
-  /**
-   * A list of UIDs that can be set from the client by anyone. (setUID,
-   * renameUID)
-   *
-   * Inclusion in this list implies inclusion in clientReadableUIDs and
-   * clientEnabledUIDs.
-   *
-   * Note: There is no way to run renameUID from the client.
-   *
-   * Note: If you'd like to limit the access to logged in users, give them an
-   *       ability like "uid/set/nameofuid".
-   */
-  clientSetabledUIDs: string[];
-  /**
-   * These will be the available fields for users. (Some fields, like username,
-   * can't be excluded.)
-   */
-  userFields: string[];
-  /**
-   * These fields will be available for the user to fill in when they register.
-   */
-  regFields: string[];
-  /**
-   * Verify users' email addresses upon registration/email change before
-   * allowing them to log in/change it.
-   */
-  verifyEmail: boolean;
-  /**
-   * After the user verifies their address, redirect them to this URL.
-   */
-  verifyRedirect: string;
-  /**
-   * After the user verifies an address change, redirect them to this URL.
-   */
-  verifyChangeRedirect: string;
-  /**
-   * After the user cancels an address change, redirect them to this URL.
-   */
-  cancelChangeRedirect: string;
-  /**
-   * Unverified users will be able to log in, but will only have the "unverified
-   * users" secondary group(s) until they verify their email. If set to false,
-   * their account will instead be disabled until they verify.
-   */
-  unverifiedAccess: boolean;
-  /**
-   * Don't let users change their email address more often than this. You can
-   * enter one value and one unit of time, such as "2 weeks". Leave blank to
-   * disable rate limiting.
-   *
-   * This also controls how long a user has to cancel an email address change
-   * from a link emailed to the old address.
-   */
-  emailRateLimit: string;
-  /**
-   * Allow users to recover their username and/or password through their
-   * registered email.
-   */
-  pwRecovery: boolean;
-  /**
-   * How long a recovery request is valid.
-   */
-  pwRecoveryTimeLimit: string;
-  /**
-   * Method used to store passwords. Salt is more secure if the database is
-   * compromised. Plain: store the password in plaintext. Digest: store the
-   * password's digest (hash). Salt: store the password's digest using a
-   * complex, unique salt.
-   *
-   * Digests are SHA-256, so a salt probably isn't necessary, but who knows.
-   *
-   * Options are: "plain", "digest", "salt"
-   */
-  pwMethod: 'plain' | 'digest' | 'salt';
-  /**
-   * Whether to create a new primary group for every user who registers. This
-   * can be useful for providing access to entities the user creates.
-   *
-   * In the case this is set, the default primary group, rather than being
-   * assigned to the user, is assigned as the parent of the generated group.
-   */
-  generatePrimary: boolean;
-  /**
-   * The GUID of the group above the highest groups allowed to be assigned as
-   * primary groups. True means all groups, and false means no groups.
-   */
-  highestPrimary: string | boolean;
-  /**
-   * The GUID of the group above the highest groups allowed to be assigned as
-   * secondary groups. True means all groups, and false means no groups.
-   */
-  highestSecondary: string | boolean;
-  /**
-   * Only these characters can be used when creating usernames and groupnames.
-   * (Doesn't apply to emails as usernames.)
-   */
-  validChars: string;
-  /**
-   * When a user enters an invalid name, this message will be displayed.
-   */
-  validCharsNotice: string;
-  /**
-   * Usernames and groupnames must match this regular expression. (Doesn't apply
-   * to emails as usernames.) By default, this ensures that the name begins and
-   * ends with an alphanumeric. (To allow anything, use .* inside the slashes.)
-   */
-  validRegex: RegExp;
-  /**
-   * When a user enters a name that doesn't match the regex, this message will
-   * be displayed.
-   */
-  validRegexNotice: string;
-  /**
-   * Email addresses must match this regular expression. By default, this uses
-   * the regex from the W3C HTML email element validation:
-   *
-   * https://html.spec.whatwg.org/multipage/input.html#email-state-(type=email)
-   */
-  validEmailRegex: RegExp;
-  /**
-   * When a user enters an email that doesn't match the regex, this message will
-   * be displayed.
-   */
-  validEmailRegexNotice: string;
-  /**
-   * The maximum length for usernames. Infinity for unlimited.
-   */
-  maxUsernameLength: number;
-  /**
-   * The secret used to sign the JWT.
-   */
-  jwtSecret: string;
-  /**
-   * How long from current time, in seconds, the JWT token expires.
-   */
-  jwtExpire: number;
-  /**
-   * How long, in seconds, before the JWT token expires to give the user a new
-   * one.
-   */
-  jwtRenew: number;
-  /**
-   * Function to build the JWT for user sessions.
-   */
-  jwtBuilder: (config: Config, user: User) => string;
-  /**
-   * Function to verify that a JWT was signed with the secret key, vaildate its
-   * data, validate the XSRF token, and extract the GUID.
-   *
-   * If no XSRF token is supplied, ignore it.
-   *
-   * Return false if the JWT is not valid, or an array of GUID and expire
-   * timestamp otherwise.
-   */
-  jwtExtract: (
-    config: Config,
-    token: string,
-    xsrfToken?: string
-  ) => { guid: string; expire: Date } | null;
-  /**
-   * The absolute path to the email template directory. Used by the default
-   * email sender.
-   */
-  emailTemplateDir: string;
-  /**
-   * Configure an email object to prepare for sending.
-   *
-   * You can use this, for example, for DKIM signing.
-   *
-   * See: https://github.com/forwardemail/email-templates/blob/v8.0.9/README.md#Options
-   */
-  configEmail: (
-    tilmeld: Tilmeld,
-    options: EmailOptions,
-    user: User & UserData
-  ) => Promise<EmailConfig>;
-  /**
-   * Send an email to a user. Uses `email-templates` by default.
-   *
-   * Check out the `emails` directory to see the templates used.
-   *
-   * In addition to the specific `locals` for each template, there are
-   * additional locals added by the default email sender:
-   *
-   * - System Information
-   *  - siteName
-   *  - siteLink
-   * - Recipient Information
-   *  - toUsername
-   *  - toName
-   *  - toFirstName
-   *  - toLastName
-   *  - toEmail
-   *  - toPhone
-   * - Current User Information (Only available if a user is logged in.)
-   *  - username
-   *  - name
-   *  - firstName
-   *  - lastName
-   *  - email
-   */
-  sendEmail: (
-    tilmeld: Tilmeld,
-    options: EmailOptions,
-    user: User & UserData
-  ) => Promise<boolean>;
-  /**
-   * The address you'd like to receive a notification of registered users, if
-   * any.
-   */
-  userRegisteredRecipient: string | null;
-  /**
-   * The validator used to check groups before saving.
-   */
-  validatorGroup: (group: Group & GroupData) => void;
-  /**
-   * The validator used to check users before saving.
-   */
-  validatorUser: (user: User & UserData) => void;
-}