@openforis/arena-server 2.4.2

package/dist/service/user/index.d.ts

@@ -0,0 +1,2 @@
+import { UserService } from '@openforis/arena-core';
+export declare const UserServiceServer: UserService;

package/dist/service/user/index.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserServiceServer = void 0;
+const get_1 = require("./get");
+exports.UserServiceServer = {
+    create(options) {
+        throw new Error('TODO');
+    },
+    count(options) {
+        throw new Error('TODO');
+    },
+    get: get_1.get,
+    getMany(options) {
+        throw new Error('TODO');
+    },
+    getProfilePicture(options) {
+        throw new Error('TODO');
+    },
+    update(options) {
+        throw new Error('TODO');
+    },
+    updateUserPrefs(options) {
+        throw new Error('TODO');
+    },
+    delete(options) {
+        throw new Error('TODO');
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/service/user/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/user/index.ts"],"names":[],"mappings":";;;AAEA,+BAA2B;AAEd,QAAA,iBAAiB,GAAgB;IAG5C,MAAM,CAAC,OAON;QACC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;IAID,KAAK,CAAC,OAAyC;QAC7C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;IAED,GAAG,EAAH,SAAG;IAIH,OAAO,CAAC,OAA0E;QAChF,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;IAID,iBAAiB,CAAC,OAA6B;QAC7C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;IAID,MAAM,CAAC,OAAgF;QACrF,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;IAID,eAAe,CAAC,OAA+B;QAC7C,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;IAID,MAAM,CAAC,OAA2D;QAChE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;IACzB,CAAC;CACF,CAAA"}

package/dist/service/user/updateUserPrefs.d.ts

@@ -0,0 +1,2 @@
+import { UserService } from '@openforis/arena-core';
+export declare const updateUserPrefs: UserService['updateUserPrefs'];

package/dist/service/user/updateUserPrefs.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateUserPrefs = void 0;
+const repository_1 = require("../../repository");
+const updateUserPrefs = async (options) => {
+    const { userToUpdate } = options;
+    const user = await repository_1.UserRepository.updateUserPrefs({ userToUpdate });
+    return {
+        ...user,
+        authGroups: await repository_1.AuthGroupRepository.getMany({ userUuid: user.uuid }),
+    };
+};
+exports.updateUserPrefs = updateUserPrefs;
+//# sourceMappingURL=updateUserPrefs.js.map

package/dist/service/user/updateUserPrefs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateUserPrefs.js","sourceRoot":"","sources":["../../../src/service/user/updateUserPrefs.ts"],"names":[],"mappings":";;;AAAA,iDAAsE;AAG/D,MAAM,eAAe,GAAmC,KAAK,EAAE,OAErE,EAAiB,EAAE;IAClB,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;IAChC,MAAM,IAAI,GAAG,MAAM,2BAAc,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC,CAAA;IACnE,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EAAE,MAAM,gCAAmB,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;KACvE,CAAA;AACH,CAAC,CAAA;AATY,QAAA,eAAe,mBAS3B"}

package/dist/service/user2FA/index.d.ts

@@ -0,0 +1,3 @@
+export { User2FAServiceServer } from './user2FAService';
+export type { User2FAService } from './user2FAService';
+export { User2FAServiceErrorMessageKeys } from './user2FAService';

package/dist/service/user2FA/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.User2FAServiceErrorMessageKeys = exports.User2FAServiceServer = void 0;
+var user2FAService_1 = require("./user2FAService");
+Object.defineProperty(exports, "User2FAServiceServer", { enumerable: true, get: function () { return user2FAService_1.User2FAServiceServer; } });
+var user2FAService_2 = require("./user2FAService");
+Object.defineProperty(exports, "User2FAServiceErrorMessageKeys", { enumerable: true, get: function () { return user2FAService_2.User2FAServiceErrorMessageKeys; } });
+//# sourceMappingURL=index.js.map

package/dist/service/user2FA/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/user2FA/index.ts"],"names":[],"mappings":";;;AAAA,mDAAuD;AAA9C,sHAAA,oBAAoB,OAAA;AAE7B,mDAAiE;AAAxD,gIAAA,8BAA8B,OAAA"}

package/dist/service/user2FA/user2FAService.d.ts

@@ -0,0 +1,59 @@
+import { User2FADeviceForClient, User2FADeviceForClientFirstTimeSetup } from '../../model';
+import { BaseProtocol } from '../../db';
+export declare const User2FAServiceErrorMessageKeys: {
+    deviceNotFound: string;
+    invalidVerificationCode: string;
+};
+export declare const User2FAServiceServer: {
+    addDevice: (options: {
+        userUuid: string;
+        userEmail: string;
+        deviceName: string;
+        client?: BaseProtocol;
+    }) => Promise<User2FADeviceForClientFirstTimeSetup>;
+    verifyDevice: (options: {
+        deviceUuid: string;
+        userUuid: string;
+        token1: string;
+        token2: string;
+    }, client?: BaseProtocol) => Promise<User2FADeviceForClient>;
+    removeDevice: (options: {
+        deviceUuid: string;
+        userUuid: string;
+    }, client?: BaseProtocol) => Promise<void>;
+    disableAll: (options: {
+        userUuid: string;
+        client?: BaseProtocol;
+    }) => Promise<void>;
+    countDevices: (options: {
+        userUuid: string;
+        client?: BaseProtocol;
+    }) => Promise<number>;
+    getDevices: (options: {
+        userUuid: string;
+        client?: BaseProtocol;
+    }) => Promise<User2FADeviceForClient[]>;
+    getDevice: (options: {
+        deviceUuid: string;
+        userUuid: string;
+    }, client?: BaseProtocol) => Promise<User2FADeviceForClient>;
+    hasEnabledDevices: (options: {
+        userUuid: string;
+        client?: BaseProtocol;
+    }) => Promise<boolean>;
+    verifyLogin: (options: {
+        userUuid: string;
+        token: string;
+        client?: BaseProtocol;
+    }) => Promise<boolean>;
+    regenerateBackupCodes: (options: {
+        deviceUuid: string;
+        userUuid: string;
+    }, client?: BaseProtocol) => Promise<string[]>;
+    updateDeviceName: (options: {
+        deviceUuid: string;
+        deviceName: string;
+        userUuid: string;
+    }, client?: BaseProtocol) => Promise<User2FADeviceForClient>;
+};
+export type User2FAService = typeof User2FAServiceServer;

package/dist/service/user2FA/user2FAService.js

@@ -0,0 +1,253 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.User2FAServiceServer = exports.User2FAServiceErrorMessageKeys = void 0;
+const otplib_1 = require("otplib");
+const crypto = __importStar(require("node:crypto"));
+const bcryptjs_1 = __importDefault(require("bcryptjs"));
+const model_1 = require("../../model");
+const repository_1 = require("../../repository");
+const db_1 = require("../../db");
+const processEnv_1 = require("../../processEnv");
+const ENCRYPTION_VERSION = 'v1';
+const backupCodeHashRounds = 10;
+exports.User2FAServiceErrorMessageKeys = {
+    deviceNotFound: 'appErrors.user2FA.deviceNotFound',
+    invalidVerificationCode: 'appErrors.user2FA.invalidVerificationCode',
+};
+const buildSecretKey = () => crypto.createHash('sha256').update(processEnv_1.ProcessEnv.user2FASecret).digest();
+const encryptSecret = (secret) => {
+    const iv = crypto.randomBytes(12);
+    const key = buildSecretKey();
+    const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+    const ciphertext = Buffer.concat([cipher.update(secret, 'utf8'), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return [ENCRYPTION_VERSION, iv.toString('base64'), tag.toString('base64'), ciphertext.toString('base64')].join('.');
+};
+const decryptSecret = (secret) => {
+    if (!secret.startsWith(`${ENCRYPTION_VERSION}.`)) {
+        return secret;
+    }
+    const [version, ivBase64, tagBase64, ciphertextBase64] = secret.split('.');
+    if (version !== ENCRYPTION_VERSION || !ivBase64 || !tagBase64 || !ciphertextBase64) {
+        throw new Error('Invalid encrypted 2FA secret');
+    }
+    const key = buildSecretKey();
+    const iv = Buffer.from(ivBase64, 'base64');
+    const tag = Buffer.from(tagBase64, 'base64');
+    const ciphertext = Buffer.from(ciphertextBase64, 'base64');
+    const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(tag);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString('utf8');
+};
+const isBcryptHash = (value) => value.startsWith('$2');
+const hashBackupCodes = (codes) => codes.map((code) => bcryptjs_1.default.hashSync(code, backupCodeHashRounds));
+const formatBackupCode = (code) => {
+    const chunks = code.match(/.{1,4}/g);
+    return chunks ? chunks.join('-') : code;
+};
+const normalizeBackupCodesAfterPlainMatch = (codes, usedToken) => {
+    const remainingPlain = codes.filter((code) => !isBcryptHash(code) && code !== usedToken);
+    const remainingHashed = codes.filter((code) => isBcryptHash(code));
+    return [...remainingHashed, ...hashBackupCodes(remainingPlain)];
+};
+const findAndConsumeBackupCode = async (codes, token) => {
+    if (!codes || codes.length === 0) {
+        return { matched: false };
+    }
+    for (const code of codes) {
+        if (isBcryptHash(code)) {
+            if (await bcryptjs_1.default.compare(token, code)) {
+                return { matched: true, updatedCodes: codes.filter((entry) => entry !== code) };
+            }
+            continue;
+        }
+        if (code === token) {
+            return { matched: true, updatedCodes: normalizeBackupCodesAfterPlainMatch(codes, token) };
+        }
+    }
+    return { matched: false };
+};
+const generateSecret = async (options) => {
+    const { userEmail, deviceName } = options;
+    const secret = (0, otplib_1.generateSecret)();
+    const accountName = `${deviceName} - ${userEmail}`;
+    const otpAuthUrl = (0, otplib_1.generateURI)({
+        issuer: model_1.ArenaServerConstants.appId,
+        label: accountName,
+        secret,
+    });
+    return { secret, otpAuthUrl };
+};
+const generateBackupCodes = () => {
+    const codes = [];
+    for (let i = 0; i < 8; i++) {
+        const rawCode = crypto.randomBytes(16).toString('hex').toUpperCase();
+        codes.push(formatBackupCode(rawCode));
+    }
+    return codes;
+};
+const verifyToken = (options) => {
+    const { secret, token } = options;
+    const result = (0, otplib_1.verifySync)({
+        secret,
+        token,
+        epochTolerance: 60,
+    });
+    return result.valid;
+};
+const to2FADeviceForClient = (device) => {
+    const { uuid, userUuid, deviceName, enabled, dateCreated, dateModified } = device;
+    return { uuid, userUuid, deviceName, enabled, dateCreated, dateModified };
+};
+const addDevice = async (options) => {
+    const { userUuid, userEmail, deviceName, client = db_1.DB } = options;
+    const { secret, otpAuthUrl } = await generateSecret({ userEmail, deviceName });
+    const backupCodes = generateBackupCodes();
+    const backupCodesHashed = hashBackupCodes(backupCodes);
+    const encryptedSecret = encryptSecret(secret);
+    const enabled = false;
+    const device = await repository_1.User2FADeviceRepository.insert({
+        userUuid,
+        deviceName,
+        secret: encryptedSecret,
+        enabled,
+        backupCodes: backupCodesHashed,
+    }, client);
+    return {
+        ...to2FADeviceForClient(device),
+        backupCodes,
+        otpAuthUrl,
+        secret,
+    };
+};
+const getDeviceSafe = async (options, client) => {
+    const { deviceUuid, userUuid } = options;
+    const device = await repository_1.User2FADeviceRepository.getByDeviceUuid({ deviceUuid, userUuid }, client);
+    if (!device) {
+        throw new Error(exports.User2FAServiceErrorMessageKeys.deviceNotFound);
+    }
+    return device;
+};
+const getDevice = async (options, client = db_1.DB) => {
+    const { deviceUuid, userUuid } = options;
+    const device = await getDeviceSafe({ deviceUuid, userUuid }, client);
+    return to2FADeviceForClient(device);
+};
+const verifyDevice = async (options, client = db_1.DB) => {
+    const { deviceUuid, userUuid, token1, token2 } = options;
+    const device = await getDeviceSafe({ deviceUuid, userUuid }, client);
+    const secret = decryptSecret(device.secret);
+    const isValid = token1 !== token2 && [token1, token2].every((token) => verifyToken({ secret, token }));
+    if (!isValid) {
+        throw new Error(exports.User2FAServiceErrorMessageKeys.invalidVerificationCode);
+    }
+    const enabled = true;
+    const updated = await repository_1.User2FADeviceRepository.update({ uuid: deviceUuid, enabled }, client);
+    return to2FADeviceForClient(updated);
+};
+const removeDevice = async (options, client = db_1.DB) => {
+    const { deviceUuid, userUuid } = options;
+    await repository_1.User2FADeviceRepository.deleteByDeviceUuid({ deviceUuid, userUuid }, client);
+};
+const disableAll = async (options) => {
+    const { userUuid, client = db_1.DB } = options;
+    await repository_1.User2FADeviceRepository.deleteByUserUuid(userUuid, client);
+};
+const countDevices = async (options) => {
+    const { userUuid, client = db_1.DB } = options;
+    return repository_1.User2FADeviceRepository.countByUserUuid(userUuid, client);
+};
+const getDevices = async (options) => {
+    const { userUuid, client = db_1.DB } = options;
+    const devices = await repository_1.User2FADeviceRepository.getByUserUuid(userUuid, client);
+    return devices.map(to2FADeviceForClient);
+};
+const hasEnabledDevices = async (options) => {
+    const { userUuid, client = db_1.DB } = options;
+    const enabledDevices = await repository_1.User2FADeviceRepository.getEnabledByUserUuid(userUuid, client);
+    return enabledDevices.length > 0;
+};
+const verifyLogin = async (options) => {
+    const { userUuid, token, client = db_1.DB } = options;
+    const enabledDevices = await repository_1.User2FADeviceRepository.getEnabledByUserUuid(userUuid, client);
+    if (enabledDevices.length === 0) {
+        return false;
+    }
+    for (const device of enabledDevices) {
+        const { uuid: deviceUuid, backupCodes } = device;
+        const { matched, updatedCodes } = await findAndConsumeBackupCode(backupCodes, token);
+        if (matched) {
+            await repository_1.User2FADeviceRepository.update({ uuid: deviceUuid, backupCodes: updatedCodes ?? [] }, client);
+            return true;
+        }
+        const secret = decryptSecret(device.secret);
+        if (verifyToken({ secret, token })) {
+            return true;
+        }
+    }
+    return false;
+};
+const regenerateBackupCodes = async (options, client = db_1.DB) => {
+    const { deviceUuid, userUuid } = options;
+    await getDeviceSafe({ deviceUuid, userUuid }, client);
+    const backupCodes = generateBackupCodes();
+    const backupCodesHashed = hashBackupCodes(backupCodes);
+    await repository_1.User2FADeviceRepository.update({ uuid: deviceUuid, backupCodes: backupCodesHashed }, client);
+    return backupCodes;
+};
+const updateDeviceName = async (options, client = db_1.DB) => {
+    const { deviceUuid, deviceName, userUuid } = options;
+    await getDeviceSafe({ deviceUuid, userUuid }, client);
+    const updated = await repository_1.User2FADeviceRepository.update({ uuid: deviceUuid, deviceName }, client);
+    return to2FADeviceForClient(updated);
+};
+exports.User2FAServiceServer = {
+    addDevice,
+    verifyDevice,
+    removeDevice,
+    disableAll,
+    countDevices,
+    getDevices,
+    getDevice,
+    hasEnabledDevices,
+    verifyLogin,
+    regenerateBackupCodes,
+    updateDeviceName,
+};
+//# sourceMappingURL=user2FAService.js.map

package/dist/service/user2FA/user2FAService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user2FAService.js","sourceRoot":"","sources":["../../../src/service/user2FA/user2FAService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAqF;AACrF,oDAAqC;AACrC,wDAA6B;AAE7B,uCAKoB;AACpB,iDAA0D;AAC1D,iCAA2C;AAC3C,iDAA6C;AAE7C,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAC/B,MAAM,oBAAoB,GAAG,EAAE,CAAA;AAElB,QAAA,8BAA8B,GAAG;IAC5C,cAAc,EAAE,kCAAkC;IAClD,uBAAuB,EAAE,2CAA2C;CACrE,CAAA;AAED,MAAM,cAAc,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,uBAAU,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAA;AAE1G,MAAM,aAAa,GAAG,CAAC,MAAc,EAAU,EAAE;IAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,cAAc,EAAE,CAAA;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACjF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IAC/B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACrH,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,MAAc,EAAU,EAAE;IAC/C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,kBAAkB,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1E,IAAI,OAAO,KAAK,kBAAkB,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,GAAG,GAAG,cAAc,EAAE,CAAA;IAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;IAE1D,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAChE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IAExB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AACxF,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;AAEvE,MAAM,eAAe,GAAG,CAAC,KAAe,EAAY,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAA;AAEvH,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAU,EAAE;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACpC,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACzC,CAAC,CAAA;AAED,MAAM,mCAAmC,GAAG,CAAC,KAAe,EAAE,SAAiB,EAAY,EAAE;IAC3F,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,SAAS,CAAC,CAAA;IACxF,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;IAClE,OAAO,CAAC,GAAG,eAAe,EAAE,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC,CAAA;AACjE,CAAC,CAAA;AAED,MAAM,wBAAwB,GAAG,KAAK,EACpC,KAA2B,EAC3B,KAAa,EAC2C,EAAE;IAC1D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC3B,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,MAAM,kBAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAA;YACjF,CAAC;YACD,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,mCAAmC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAA;QAC3F,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AAC3B,CAAC,CAAA;AAKD,MAAM,cAAc,GAAG,KAAK,EAAE,OAG7B,EAAmD,EAAE;IACpD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;IAEzC,MAAM,MAAM,GAAG,IAAA,uBAAiB,GAAE,CAAA;IAClC,MAAM,WAAW,GAAG,GAAG,UAAU,MAAM,SAAS,EAAE,CAAA;IAClD,MAAM,UAAU,GAAG,IAAA,oBAAW,EAAC;QAC7B,MAAM,EAAE,4BAAoB,CAAC,KAAK;QAClC,KAAK,EAAE,WAAW;QAClB,MAAM;KACP,CAAC,CAAA;IAEF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;AAC/B,CAAC,CAAA;AAKD,MAAM,mBAAmB,GAAG,GAAa,EAAE;IACzC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;QACpE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;IACvC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAKD,MAAM,WAAW,GAAG,CAAC,OAA0C,EAAW,EAAE;IAC1E,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IACjC,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC;QACxB,MAAM;QACN,KAAK;QAEL,cAAc,EAAE,EAAE;KACnB,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,KAAK,CAAA;AACrB,CAAC,CAAA;AAED,MAAM,oBAAoB,GAAG,CAAC,MAAqB,EAA0B,EAAE;IAC7E,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;IACjF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAA;AAC3E,CAAC,CAAA;AAKD,MAAM,SAAS,GAAG,KAAK,EAAE,OAKxB,EAAiD,EAAE;IAClD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAE,EAAE,GAAG,OAAO,CAAA;IAEhE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAA;IAC9E,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAA;IACzC,MAAM,iBAAiB,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;IACtD,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IAE7C,MAAM,OAAO,GAAG,KAAK,CAAA;IACrB,MAAM,MAAM,GAAG,MAAM,oCAAuB,CAAC,MAAM,CACjD;QACE,QAAQ;QACR,UAAU;QACV,MAAM,EAAE,eAAe;QACvB,OAAO;QACP,WAAW,EAAE,iBAAiB;KAC/B,EACD,MAAM,CACP,CAAA;IACD,OAAO;QACL,GAAG,oBAAoB,CAAC,MAAM,CAAC;QAC/B,WAAW;QACX,UAAU;QACV,MAAM;KACP,CAAA;AACH,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,KAAK,EACzB,OAGC,EACD,MAAoB,EACI,EAAE;IAC1B,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IACxC,MAAM,MAAM,GAAG,MAAM,oCAAuB,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IAE9F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sCAA8B,CAAC,cAAc,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAKD,MAAM,SAAS,GAAG,KAAK,EACrB,OAGC,EACD,SAAuB,OAAE,EACQ,EAAE;IACnC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IACxC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IACpE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAA;AACrC,CAAC,CAAA;AAKD,MAAM,YAAY,GAAG,KAAK,EACxB,OAKC,EACD,SAAuB,OAAE,EACQ,EAAE;IACnC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAExD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IACpE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAG3C,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IACtG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sCAA8B,CAAC,uBAAuB,CAAC,CAAA;IACzE,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAA;IACpB,MAAM,OAAO,GAAG,MAAM,oCAAuB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;IAC3F,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAA;AACtC,CAAC,CAAA;AAKD,MAAM,YAAY,GAAG,KAAK,EACxB,OAGC,EACD,SAAuB,OAAE,EACV,EAAE;IACjB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IACxC,MAAM,oCAAuB,CAAC,kBAAkB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;AACpF,CAAC,CAAA;AAKD,MAAM,UAAU,GAAG,KAAK,EAAE,OAAoD,EAAiB,EAAE;IAC/F,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAE,EAAE,GAAG,OAAO,CAAA;IAEzC,MAAM,oCAAuB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;AAClE,CAAC,CAAA;AAKD,MAAM,YAAY,GAAG,KAAK,EAAE,OAAoD,EAAmB,EAAE;IACnG,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAE,EAAE,GAAG,OAAO,CAAA;IAEzC,OAAO,oCAAuB,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;AAClE,CAAC,CAAA;AAKD,MAAM,UAAU,GAAG,KAAK,EAAE,OAAoD,EAAqC,EAAE;IACnH,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAE,EAAE,GAAG,OAAO,CAAA;IAEzC,MAAM,OAAO,GAAG,MAAM,oCAAuB,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE7E,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;AAC1C,CAAC,CAAA;AAKD,MAAM,iBAAiB,GAAG,KAAK,EAAE,OAAoD,EAAoB,EAAE;IACzG,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAE,EAAE,GAAG,OAAO,CAAA;IAEzC,MAAM,cAAc,GAAG,MAAM,oCAAuB,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE3F,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC,CAAA;AAClC,CAAC,CAAA;AAKD,MAAM,WAAW,GAAG,KAAK,EAAE,OAAmE,EAAoB,EAAE;IAClH,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAE,EAAE,GAAG,OAAO,CAAA;IAEhD,MAAM,cAAc,GAAG,MAAM,oCAAuB,CAAC,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE3F,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAA;IACd,CAAC;IAGD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAAM,CAAA;QAEhD,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,wBAAwB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QACpF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,oCAAuB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;YACnG,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC3C,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAKD,MAAM,qBAAqB,GAAG,KAAK,EACjC,OAGC,EACD,SAAuB,OAAE,EACN,EAAE;IACrB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAExC,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IAErD,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAA;IACzC,MAAM,iBAAiB,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;IAEtD,MAAM,oCAAuB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,MAAM,CAAC,CAAA;IAElG,OAAO,WAAW,CAAA;AACpB,CAAC,CAAA;AAKD,MAAM,gBAAgB,GAAG,KAAK,EAC5B,OAIC,EACD,SAAuB,OAAE,EACQ,EAAE;IACnC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAEpD,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAA;IAErD,MAAM,OAAO,GAAG,MAAM,oCAAuB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,MAAM,CAAC,CAAA;IAE9F,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAA;AACtC,CAAC,CAAA;AAEY,QAAA,oBAAoB,GAAG;IAClC,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,UAAU;IACV,SAAS;IACT,iBAAiB;IACjB,WAAW;IACX,qBAAqB;IACrB,gBAAgB;CACjB,CAAA"}

package/dist/service/userAuthToken/index.d.ts

@@ -0,0 +1,3 @@
+import { UserAuthTokenService } from '@openforis/arena-core';
+export declare const UserAuthTokenServiceServer: UserAuthTokenService;
+export { jwtExpiresMs, jwtRefreshTokenExpireMs } from './userAuthTokenServiceConstants';

package/dist/service/userAuthToken/index.js

@@ -0,0 +1,104 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jwtRefreshTokenExpireMs = exports.jwtExpiresMs = exports.UserAuthTokenServiceServer = void 0;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const arena_core_1 = require("@openforis/arena-core");
+const db_1 = require("../../db");
+const log_1 = require("../../log");
+const processEnv_1 = require("../../processEnv");
+const repository_1 = require("../../repository");
+const userAuthTokenServiceConstants_1 = require("./userAuthTokenServiceConstants");
+const logger = new log_1.Logger('UserAuthTokenService');
+const signToken = (payload, expiresInSeconds) => jsonwebtoken_1.default.sign(payload, processEnv_1.ProcessEnv.userAuthTokenSecret, { expiresIn: expiresInSeconds, algorithm: userAuthTokenServiceConstants_1.jwtAlgorithm });
+const createUserAuthTokenPayload = ({ userUuid }) => ({ userUuid });
+const createDownloadAuthTokenPayload = ({ userUuid, fileName, }) => ({
+    userUuid,
+    fileName,
+});
+const createAuthTokenFromPayload = (payload, expiresMs) => {
+    const now = new Date();
+    const expiresAt = new Date(now.getTime() + expiresMs);
+    const token = signToken(payload, expiresMs / 1000);
+    return { token, dateCreated: now, expiresAt };
+};
+const createUserAuthToken = ({ userUuid, }) => {
+    const payload = createUserAuthTokenPayload({ userUuid });
+    return createAuthTokenFromPayload(payload, userAuthTokenServiceConstants_1.jwtExpiresMs);
+};
+const createAndStoreRefreshToken = ({ userUuid, props }, client = db_1.DB) => {
+    const uuid = arena_core_1.UUIDs.v4();
+    const now = new Date();
+    const expiresAt = new Date(now.getTime() + userAuthTokenServiceConstants_1.jwtRefreshTokenExpireMs);
+    const payload = { ...createUserAuthTokenPayload({ userUuid }), uuid };
+    const token = signToken(payload, userAuthTokenServiceConstants_1.jwtRefreshTokenExpireMs / 1000);
+    const refreshToken = { uuid, userUuid, token, dateCreated: now, expiresAt, props };
+    return repository_1.UserRefreshTokenRepository.insert(refreshToken, client);
+};
+const verifyAndFetchRefreshTokenRecord = async ({ refreshToken, userAuthTokenService, t, }) => {
+    try {
+        const decodedPayload = userAuthTokenService.verifyAuthToken(refreshToken);
+        const { uuid } = decodedPayload;
+        const tokenRecord = await repository_1.UserRefreshTokenRepository.getByUuid(uuid, { includeRevoked: false }, t);
+        if (!tokenRecord || tokenRecord.revoked || new Date() > tokenRecord.expiresAt) {
+            return null;
+        }
+        return tokenRecord;
+    }
+    catch (error) {
+        logger.error(`Error verifying and fetching refresh token record: ${error}`);
+        return null;
+    }
+};
+exports.UserAuthTokenServiceServer = {
+    async createUserAuthTokens(options, dbClient) {
+        const { userUuid, props } = options;
+        const authToken = createUserAuthToken({ userUuid });
+        const refreshToken = await createAndStoreRefreshToken({ userUuid, props }, dbClient);
+        return { authToken, refreshToken };
+    },
+    createDownloadAuthToken({ userUuid, fileName }) {
+        const payload = createDownloadAuthTokenPayload({ userUuid, fileName });
+        return createAuthTokenFromPayload(payload, userAuthTokenServiceConstants_1.jwtDownloadTokenExpireMs);
+    },
+    async getByUuid(tokenUuid) {
+        return repository_1.UserRefreshTokenRepository.getByUuid(tokenUuid);
+    },
+    async revoke(options) {
+        const { tokenUuid } = options;
+        return repository_1.UserRefreshTokenRepository.revoke(tokenUuid);
+    },
+    async revokeAll(options) {
+        const { userUuid } = options;
+        return repository_1.UserRefreshTokenRepository.revokeAll({ userUuid });
+    },
+    async rotateTokens(options, dbClient = db_1.DB) {
+        const { refreshToken, refreshTokenProps } = options;
+        if (!refreshToken) {
+            return null;
+        }
+        return dbClient.tx(async (t) => {
+            const tokenRecord = await verifyAndFetchRefreshTokenRecord({ refreshToken, userAuthTokenService: this, t });
+            if (!tokenRecord) {
+                return null;
+            }
+            const { uuid, userUuid } = tokenRecord;
+            const newAuthToken = createUserAuthToken({ userUuid });
+            await repository_1.UserRefreshTokenRepository.revoke(uuid, t);
+            const newRefreshToken = await createAndStoreRefreshToken({ userUuid, props: refreshTokenProps }, t);
+            return { authToken: newAuthToken, refreshToken: newRefreshToken };
+        });
+    },
+    async deleteExpired() {
+        return repository_1.UserRefreshTokenRepository.deleteExpired();
+    },
+    verifyAuthToken(token) {
+        return jsonwebtoken_1.default.verify(token, processEnv_1.ProcessEnv.userAuthTokenSecret, { algorithms: userAuthTokenServiceConstants_1.jwtAlgorithms });
+    },
+};
+var userAuthTokenServiceConstants_2 = require("./userAuthTokenServiceConstants");
+Object.defineProperty(exports, "jwtExpiresMs", { enumerable: true, get: function () { return userAuthTokenServiceConstants_2.jwtExpiresMs; } });
+Object.defineProperty(exports, "jwtRefreshTokenExpireMs", { enumerable: true, get: function () { return userAuthTokenServiceConstants_2.jwtRefreshTokenExpireMs; } });
+//# sourceMappingURL=index.js.map

package/dist/service/userAuthToken/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/userAuthToken/index.ts"],"names":[],"mappings":";;;;;;AAAA,gEAA8B;AAG9B,sDAU8B;AAE9B,iCAA6B;AAE7B,mCAAkC;AAClC,iDAA6C;AAC7C,iDAA6D;AAC7D,mFAMwC;AAExC,MAAM,MAAM,GAAG,IAAI,YAAM,CAAC,sBAAsB,CAAC,CAAA;AASjD,MAAM,SAAS,GAAG,CAAC,OAAyB,EAAE,gBAAwB,EAAU,EAAE,CAChF,sBAAG,CAAC,IAAI,CAAC,OAAO,EAAE,uBAAU,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,4CAAY,EAAE,CAAC,CAAA;AAE7G,MAAM,0BAA0B,GAAG,CAAC,EAAE,QAAQ,EAAwB,EAAwB,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AAE/G,MAAM,8BAA8B,GAAG,CAAC,EACtC,QAAQ,EACR,QAAQ,GAIT,EAA4B,EAAE,CAAC,CAAC;IAC/B,QAAQ;IACR,QAAQ;CACT,CAAC,CAAA;AAEF,MAAM,0BAA0B,GAAG,CAAC,OAAyB,EAAE,SAAiB,EAAa,EAAE;IAC7F,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAA;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,GAAG,IAAI,CAAC,CAAA;IAClD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;AAC/C,CAAC,CAAA;AASD,MAAM,mBAAmB,GAAG,CAAC,EAC3B,QAAQ,GAGT,EAAyD,EAAE;IAC1D,MAAM,OAAO,GAAyB,0BAA0B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC9E,OAAO,0BAA0B,CAAC,OAAO,EAAE,4CAAY,CAAC,CAAA;AAC1D,CAAC,CAAA;AAED,MAAM,0BAA0B,GAAG,CACjC,EAAE,QAAQ,EAAE,KAAK,EAA0D,EAC3E,SAAuC,OAAE,EACV,EAAE;IACjC,MAAM,IAAI,GAAG,kBAAK,CAAC,EAAE,EAAE,CAAA;IACvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,uDAAuB,CAAC,CAAA;IACnE,MAAM,OAAO,GAAgC,EAAE,GAAG,0BAA0B,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAA;IAClG,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,uDAAuB,GAAG,IAAI,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;IAClF,OAAO,uCAA0B,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;AAChE,CAAC,CAAA;AAED,MAAM,gCAAgC,GAAG,KAAK,EAAE,EAC9C,YAAY,EACZ,oBAAoB,EACpB,CAAC,GAKF,EAAwC,EAAE;IACzC,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,oBAAoB,CAAC,eAAe,CAAC,YAAY,CAAgC,CAAA;QACxG,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAA;QAE/B,MAAM,WAAW,GAAG,MAAM,uCAA0B,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;QAElG,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;YAE9E,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,WAAW,CAAA;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,sDAAsD,KAAK,EAAE,CAAC,CAAA;QAC3E,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAEY,QAAA,0BAA0B,GAAyB;IAC9D,KAAK,CAAC,oBAAoB,CACxB,OAA+D,EAC/D,QAAc;QAEd,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;QACnC,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;QACnD,MAAM,YAAY,GAAG,MAAM,0BAA0B,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAA;QACpF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAA;IACpC,CAAC;IACD,uBAAuB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAA0C;QACpF,MAAM,OAAO,GAAG,8BAA8B,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtE,OAAO,0BAA0B,CAAC,OAAO,EAAE,wDAAwB,CAAC,CAAA;IACtE,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,OAAO,uCAA0B,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACxD,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,OAA8B;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;QAC7B,OAAO,uCAA0B,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrD,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,OAA6B;QAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;QAC5B,OAAO,uCAA0B,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,KAAK,CAAC,YAAY,CAChB,OAGC,EACD,WAAgB,OAAE;QAElB,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAA;QACnD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,CAAuB,EAAE,EAAE;YACnD,MAAM,WAAW,GAAG,MAAM,gCAAgC,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;YAC3G,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAA;YAEtC,MAAM,YAAY,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;YAEtD,MAAM,uCAA0B,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAEhD,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAA;YAEnG,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,CAAA;QACnE,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,CAAC,aAAa;QACjB,OAAO,uCAA0B,CAAC,aAAa,EAAE,CAAA;IACnD,CAAC;IACD,eAAe,CAA6B,KAAa;QACvD,OAAO,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,uBAAU,CAAC,mBAAmB,EAAE,EAAE,UAAU,EAAE,6CAAa,EAAE,CAAM,CAAA;IAC9F,CAAC;CACF,CAAA;AAED,iFAAuF;AAA9E,6HAAA,YAAY,OAAA;AAAE,wIAAA,uBAAuB,OAAA"}

package/dist/service/userAuthToken/userAuthTokenServiceConstants.d.ts

@@ -0,0 +1,6 @@
+import { Algorithm } from 'jsonwebtoken';
+export declare const jwtExpiresMs: number;
+export declare const jwtRefreshTokenExpireMs: number;
+export declare const jwtDownloadTokenExpireMs: number;
+export declare const jwtAlgorithm: Algorithm;
+export declare const jwtAlgorithms: Algorithm[];

package/dist/service/userAuthToken/userAuthTokenServiceConstants.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jwtAlgorithms = exports.jwtAlgorithm = exports.jwtDownloadTokenExpireMs = exports.jwtRefreshTokenExpireMs = exports.jwtExpiresMs = void 0;
+exports.jwtExpiresMs = 60 * 60 * 1000;
+exports.jwtRefreshTokenExpireMs = 7 * 24 * 60 * 60 * 1000;
+exports.jwtDownloadTokenExpireMs = 30 * 60 * 1000;
+exports.jwtAlgorithm = 'HS256';
+exports.jwtAlgorithms = [exports.jwtAlgorithm];
+//# sourceMappingURL=userAuthTokenServiceConstants.js.map

package/dist/service/userAuthToken/userAuthTokenServiceConstants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userAuthTokenServiceConstants.js","sourceRoot":"","sources":["../../../src/service/userAuthToken/userAuthTokenServiceConstants.ts"],"names":[],"mappings":";;;AAEa,QAAA,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAC7B,QAAA,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACjD,QAAA,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEzC,QAAA,YAAY,GAAc,OAAO,CAAA;AACjC,QAAA,aAAa,GAAgB,CAAC,oBAAY,CAAC,CAAA"}

package/dist/service/userGroup/index.d.ts

@@ -0,0 +1,45 @@
+import { ArenaService, UserGroup, UserGroupProps } from '@openforis/arena-core';
+import { BaseProtocol } from '../../db';
+import { UserGroupMember } from '../../repository/userGroup';
+export interface UserGroupService extends ArenaService {
+    count(params: {
+        surveyUuid: string;
+    }, client?: BaseProtocol): Promise<number>;
+    getAll(params: {
+        surveyUuid: string;
+    }, client?: BaseProtocol): Promise<UserGroup[]>;
+    getByUuid(params: {
+        uuid: string;
+    }, client?: BaseProtocol): Promise<UserGroup | null>;
+    getManyByUser(params: {
+        userUuid: string;
+        surveyUuid?: string;
+    }, client?: BaseProtocol): Promise<UserGroup[]>;
+    insert(params: {
+        surveyUuid: string;
+        item: Partial<UserGroup>;
+    }, client?: BaseProtocol): Promise<UserGroup>;
+    update(params: {
+        uuid: string;
+        props: UserGroupProps;
+    }, client?: BaseProtocol): Promise<UserGroup>;
+    updateProps(params: {
+        uuid: string;
+        props: Partial<UserGroupProps>;
+    }, client?: BaseProtocol): Promise<UserGroup>;
+    deleteItem(params: {
+        uuid: string;
+    }, client?: BaseProtocol): Promise<UserGroup | null>;
+    addMember(params: {
+        groupUuid: string;
+        userUuid: string;
+    }, client?: BaseProtocol): Promise<null>;
+    removeMember(params: {
+        groupUuid: string;
+        userUuid: string;
+    }, client?: BaseProtocol): Promise<null>;
+    getMembers(params: {
+        groupUuid: string;
+    }, client?: BaseProtocol): Promise<UserGroupMember[]>;
+}
+export declare const UserGroupServiceServer: UserGroupService;

package/dist/service/userGroup/index.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserGroupServiceServer = void 0;
+const userGroup_1 = require("../../repository/userGroup");
+const { count, getAll, getByUuid, getManyByUser, insert, update, updateProps, deleteItem, addMember, removeMember, getMembers, } = userGroup_1.UserGroupRepository;
+exports.UserGroupServiceServer = {
+    count,
+    getAll,
+    getByUuid,
+    getManyByUser,
+    insert,
+    update,
+    updateProps,
+    deleteItem,
+    addMember,
+    removeMember,
+    getMembers,
+};
+//# sourceMappingURL=index.js.map

package/dist/service/userGroup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/userGroup/index.ts"],"names":[],"mappings":";;;AAEA,0DAAiF;AAEjF,MAAM,EACJ,KAAK,EACL,MAAM,EACN,SAAS,EACT,aAAa,EACb,MAAM,EACN,MAAM,EACN,WAAW,EACX,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,GACX,GAAG,+BAAmB,CAAA;AAgBV,QAAA,sBAAsB,GAAqB;IACtD,KAAK;IACL,MAAM;IACN,SAAS;IACT,aAAa;IACb,MAAM;IACN,MAAM;IACN,WAAW;IACX,UAAU;IACV,SAAS;IACT,YAAY;IACZ,UAAU;CACX,CAAA"}

package/dist/service/userTempAuthToken/cleanupExpired.d.ts

@@ -0,0 +1,2 @@
+import { BaseProtocol } from '../../db';
+export declare const cleanupExpired: (client?: BaseProtocol) => Promise<number>;

package/dist/service/userTempAuthToken/cleanupExpired.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cleanupExpired = void 0;
+const userTempAuthToken_1 = require("../../repository/userTempAuthToken");
+const db_1 = require("../../db");
+const cleanupExpired = async (client = db_1.DB) => {
+    return userTempAuthToken_1.UserTempAuthTokenRepository.deleteExpired(client);
+};
+exports.cleanupExpired = cleanupExpired;
+//# sourceMappingURL=cleanupExpired.js.map

package/dist/service/userTempAuthToken/cleanupExpired.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanupExpired.js","sourceRoot":"","sources":["../../../src/service/userTempAuthToken/cleanupExpired.ts"],"names":[],"mappings":";;;AAAA,0EAAgF;AAChF,iCAA2C;AAOpC,MAAM,cAAc,GAAG,KAAK,EAAE,SAAuB,OAAE,EAAmB,EAAE;IACjF,OAAO,+CAA2B,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;AAC1D,CAAC,CAAA;AAFY,QAAA,cAAc,kBAE1B"}

package/dist/service/userTempAuthToken/create.d.ts

@@ -0,0 +1,6 @@
+import { BaseProtocol } from '../../db';
+import { UserTempAuthTokenForClient } from '../../model';
+export declare const create: (options: {
+    userUuid: string;
+    expirationMinutes?: number;
+}, client?: BaseProtocol) => Promise<UserTempAuthTokenForClient>;