@openora/core 0.4.1-canary.128 → 0.4.1-canary.129
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.tsbuildinfo +1 -1
- package/dist/audit/__tests__/audit.service.int.test.js +45 -0
- package/dist/audit/__tests__/audit.service.int.test.js.map +1 -1
- package/dist/audit/plugin.d.ts.map +1 -1
- package/dist/audit/plugin.js +26 -0
- package/dist/audit/plugin.js.map +1 -1
- package/dist/compliance/contract/index.d.ts +1 -1
- package/dist/compliance/contract/rg.d.ts +2 -2
- package/dist/compliance/router/index.d.ts +1 -1
- package/dist/contracts/__tests__/identity.test.js +3 -2
- package/dist/contracts/__tests__/identity.test.js.map +1 -1
- package/dist/contracts/adapters/identity-reader.d.ts +6 -0
- package/dist/contracts/adapters/identity-reader.d.ts.map +1 -1
- package/dist/contracts/adapters/identity-reader.js.map +1 -1
- package/dist/contracts/schemas/__tests__/events.test.js +30 -0
- package/dist/contracts/schemas/__tests__/events.test.js.map +1 -1
- package/dist/contracts/schemas/events.d.ts +37 -0
- package/dist/contracts/schemas/events.d.ts.map +1 -1
- package/dist/contracts/schemas/events.js +29 -0
- package/dist/contracts/schemas/events.js.map +1 -1
- package/dist/contracts/schemas/identity.d.ts +28 -0
- package/dist/contracts/schemas/identity.d.ts.map +1 -1
- package/dist/contracts/schemas/identity.js +22 -1
- package/dist/contracts/schemas/identity.js.map +1 -1
- package/dist/engagement/notifications/plugin.d.ts +2 -2
- package/dist/engagement/notifications/plugin.d.ts.map +1 -1
- package/dist/engagement/notifications/plugin.js +71 -2
- package/dist/engagement/notifications/plugin.js.map +1 -1
- package/dist/pam/identity/__tests__/identity.rate-limit.int.test.js +2 -2
- package/dist/pam/identity/__tests__/identity.rate-limit.int.test.js.map +1 -1
- package/dist/pam/identity/__tests__/identity.registration-gates.int.test.js +1 -1
- package/dist/pam/identity/__tests__/identity.registration-gates.int.test.js.map +1 -1
- package/dist/pam/identity/__tests__/identity.service.int.test.js +67 -1
- package/dist/pam/identity/__tests__/identity.service.int.test.js.map +1 -1
- package/dist/pam/identity/__tests__/phone-login.service.int.test.js +23 -0
- package/dist/pam/identity/__tests__/phone-login.service.int.test.js.map +1 -1
- package/dist/pam/identity/__tests__/phone-verification.service.int.test.d.ts +2 -0
- package/dist/pam/identity/__tests__/phone-verification.service.int.test.d.ts.map +1 -0
- package/dist/pam/identity/__tests__/phone-verification.service.int.test.js +273 -0
- package/dist/pam/identity/__tests__/phone-verification.service.int.test.js.map +1 -0
- package/dist/pam/identity/adapters/identity-reader.service.d.ts +1 -0
- package/dist/pam/identity/adapters/identity-reader.service.d.ts.map +1 -1
- package/dist/pam/identity/adapters/identity-reader.service.js +8 -0
- package/dist/pam/identity/adapters/identity-reader.service.js.map +1 -1
- package/dist/pam/identity/contract/index.d.ts +40 -0
- package/dist/pam/identity/contract/index.d.ts.map +1 -1
- package/dist/pam/identity/contract/index.js +18 -1
- package/dist/pam/identity/contract/index.js.map +1 -1
- package/dist/pam/identity/drizzle/migrations/0010_lying_young_avengers.sql +19 -0
- package/dist/pam/identity/drizzle/migrations/meta/0010_snapshot.json +1066 -0
- package/dist/pam/identity/drizzle/migrations/meta/_journal.json +7 -0
- package/dist/pam/identity/plugin.d.ts.map +1 -1
- package/dist/pam/identity/plugin.js +9 -0
- package/dist/pam/identity/plugin.js.map +1 -1
- package/dist/pam/identity/react/account.d.ts +9 -1
- package/dist/pam/identity/react/account.d.ts.map +1 -1
- package/dist/pam/identity/react/account.js +33 -5
- package/dist/pam/identity/react/account.js.map +1 -1
- package/dist/pam/identity/router/index.d.ts +42 -1
- package/dist/pam/identity/router/index.d.ts.map +1 -1
- package/dist/pam/identity/router/index.js +28 -2
- package/dist/pam/identity/router/index.js.map +1 -1
- package/dist/pam/identity/schema/index.d.ts +195 -0
- package/dist/pam/identity/schema/index.d.ts.map +1 -1
- package/dist/pam/identity/schema/index.js +26 -0
- package/dist/pam/identity/schema/index.js.map +1 -1
- package/dist/pam/identity/service/identity.service.d.ts +4 -1
- package/dist/pam/identity/service/identity.service.d.ts.map +1 -1
- package/dist/pam/identity/service/identity.service.js +140 -1
- package/dist/pam/identity/service/identity.service.js.map +1 -1
- package/dist/pam/identity/service/phone-login.service.d.ts.map +1 -1
- package/dist/pam/identity/service/phone-login.service.js +34 -19
- package/dist/pam/identity/service/phone-login.service.js.map +1 -1
- package/dist/pam/identity/service/phone-verification.service.d.ts +38 -0
- package/dist/pam/identity/service/phone-verification.service.d.ts.map +1 -0
- package/dist/pam/identity/service/phone-verification.service.js +257 -0
- package/dist/pam/identity/service/phone-verification.service.js.map +1 -0
- package/dist/pam/identity/service/security-controls.service.d.ts +4 -0
- package/dist/pam/identity/service/security-controls.service.d.ts.map +1 -0
- package/dist/pam/identity/service/security-controls.service.js +28 -0
- package/dist/pam/identity/service/security-controls.service.js.map +1 -0
- package/dist/pam/react.d.ts +1 -1
- package/dist/pam/react.d.ts.map +1 -1
- package/dist/pam/react.js +1 -1
- package/dist/pam/react.js.map +1 -1
- package/dist/pam/shared/otp.d.ts +3 -0
- package/dist/pam/shared/otp.d.ts.map +1 -0
- package/dist/pam/shared/otp.js +11 -0
- package/dist/pam/shared/otp.js.map +1 -0
- package/dist/testing/mock.d.ts.map +1 -1
- package/dist/testing/mock.js +1 -0
- package/dist/testing/mock.js.map +1 -1
- package/dist/testing/seed-player.d.ts +4 -0
- package/dist/testing/seed-player.d.ts.map +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1,273 @@
|
|
|
1
|
+
import { createHash } from 'node:crypto';
|
|
2
|
+
import { afterAll, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest';
|
|
3
|
+
import { eq, sql } from 'drizzle-orm';
|
|
4
|
+
import { createTestDb, seedUser as insertUser } from '@openora/core/testing';
|
|
5
|
+
import { migrate as migrateIdentity } from '@openora/core/pam/migrate/identity';
|
|
6
|
+
import { account, phoneVerificationSession, session, user } from '../schema/index.js';
|
|
7
|
+
import { PhoneVerificationService } from '../service/phone-verification.service.js';
|
|
8
|
+
import { makeEventBus, makeIdentityReader, mock, NO_CLIENT_META } from '../../../testing/mock.js';
|
|
9
|
+
const PASSWORD = 'current-password';
|
|
10
|
+
const PHONE = '+14155550100';
|
|
11
|
+
let db;
|
|
12
|
+
const allowLimiter = () => mock({
|
|
13
|
+
consume: vi.fn().mockResolvedValue({ allowed: true, retryAfterMs: 0 }),
|
|
14
|
+
reset: vi.fn(),
|
|
15
|
+
});
|
|
16
|
+
function build({ passwordMatches = true } = {}) {
|
|
17
|
+
const events = makeEventBus();
|
|
18
|
+
const sms = mock({ sendOtp: vi.fn().mockResolvedValue(undefined) });
|
|
19
|
+
const auth = mock({
|
|
20
|
+
$context: Promise.resolve({
|
|
21
|
+
password: { verify: vi.fn().mockResolvedValue(passwordMatches) },
|
|
22
|
+
}),
|
|
23
|
+
api: { verifyTOTP: vi.fn().mockResolvedValue(new Response(null, { status: 200 })) },
|
|
24
|
+
});
|
|
25
|
+
const svc = new PhoneVerificationService({
|
|
26
|
+
drizzle: db.drizzle,
|
|
27
|
+
events,
|
|
28
|
+
sms,
|
|
29
|
+
limiter: allowLimiter(),
|
|
30
|
+
auth,
|
|
31
|
+
identityReader: makeIdentityReader(),
|
|
32
|
+
});
|
|
33
|
+
return { svc, events, sms };
|
|
34
|
+
}
|
|
35
|
+
async function seedAuthenticatedUser(overrides = {}) {
|
|
36
|
+
const accountUser = await insertUser(db, {
|
|
37
|
+
name: 'A',
|
|
38
|
+
email: overrides.email ?? 'phone-verification@test.dev',
|
|
39
|
+
...(overrides.role ? { role: overrides.role } : {}),
|
|
40
|
+
});
|
|
41
|
+
await db.drizzle.db.insert(account).values({
|
|
42
|
+
userId: accountUser.id,
|
|
43
|
+
accountId: accountUser.id,
|
|
44
|
+
providerId: 'credential',
|
|
45
|
+
password: 'stored-password-hash',
|
|
46
|
+
});
|
|
47
|
+
const [activeSession] = await db.drizzle.db
|
|
48
|
+
.insert(session)
|
|
49
|
+
.values({
|
|
50
|
+
userId: accountUser.id,
|
|
51
|
+
token: 'active-session-token',
|
|
52
|
+
expiresAt: new Date(Date.now() + 60 * 60 * 1000),
|
|
53
|
+
})
|
|
54
|
+
.returning({ id: session.id });
|
|
55
|
+
return { accountUser, sessionId: activeSession.id };
|
|
56
|
+
}
|
|
57
|
+
beforeAll(async () => {
|
|
58
|
+
db = await createTestDb([migrateIdentity]);
|
|
59
|
+
});
|
|
60
|
+
afterAll(async () => {
|
|
61
|
+
await db.drop();
|
|
62
|
+
});
|
|
63
|
+
beforeEach(async () => {
|
|
64
|
+
await db.drizzle.db.execute(sql `TRUNCATE ${user}, ${account}, ${session}, ${phoneVerificationSession} RESTART IDENTITY CASCADE`);
|
|
65
|
+
});
|
|
66
|
+
describe('PhoneVerificationService (real PG)', () => {
|
|
67
|
+
it('requires the current password before it creates an OTP challenge', async () => {
|
|
68
|
+
const { accountUser, sessionId } = await seedAuthenticatedUser();
|
|
69
|
+
const { svc, sms } = build({ passwordMatches: false });
|
|
70
|
+
await expect(svc.request({
|
|
71
|
+
userId: accountUser.id,
|
|
72
|
+
sessionId,
|
|
73
|
+
input: { phone: PHONE, currentPassword: PASSWORD },
|
|
74
|
+
reqHeaders: {},
|
|
75
|
+
meta: NO_CLIENT_META,
|
|
76
|
+
})).rejects.toMatchObject({ code: 'UNAUTHORIZED' });
|
|
77
|
+
expect(sms.sendOtp).not.toHaveBeenCalled();
|
|
78
|
+
expect(await db.drizzle.db.select().from(phoneVerificationSession)).toEqual([]);
|
|
79
|
+
});
|
|
80
|
+
it('binds the OTP to the authenticated session, verifies the number atomically, and audits by event', async () => {
|
|
81
|
+
const { accountUser, sessionId } = await seedAuthenticatedUser();
|
|
82
|
+
const { svc, events, sms } = build();
|
|
83
|
+
await svc.request({
|
|
84
|
+
userId: accountUser.id,
|
|
85
|
+
sessionId,
|
|
86
|
+
input: { phone: PHONE, currentPassword: PASSWORD },
|
|
87
|
+
reqHeaders: {},
|
|
88
|
+
meta: NO_CLIENT_META,
|
|
89
|
+
});
|
|
90
|
+
const code = sms.sendOtp.mock.calls[0]?.[0]?.code;
|
|
91
|
+
expect(code).toMatch(/^\d{6}$/);
|
|
92
|
+
const [challenge] = await db.drizzle.db.select().from(phoneVerificationSession);
|
|
93
|
+
expect(challenge).toMatchObject({
|
|
94
|
+
userId: accountUser.id,
|
|
95
|
+
sessionId,
|
|
96
|
+
phone: PHONE,
|
|
97
|
+
codeHash: createHash('sha256').update(code).digest('hex'),
|
|
98
|
+
});
|
|
99
|
+
const controls = await svc.confirm({
|
|
100
|
+
userId: accountUser.id,
|
|
101
|
+
sessionId,
|
|
102
|
+
input: { code },
|
|
103
|
+
meta: NO_CLIENT_META,
|
|
104
|
+
});
|
|
105
|
+
expect(controls).toMatchObject({ phoneNumber: PHONE, phoneVerified: true });
|
|
106
|
+
const [updatedUser] = await db.drizzle.db
|
|
107
|
+
.select({ phoneNumber: user.phoneNumber, phoneVerified: user.phoneVerified })
|
|
108
|
+
.from(user)
|
|
109
|
+
.where(eq(user.id, accountUser.id));
|
|
110
|
+
expect(updatedUser).toEqual({ phoneNumber: PHONE, phoneVerified: true });
|
|
111
|
+
expect(await db.drizzle.db.select().from(phoneVerificationSession)).toEqual([]);
|
|
112
|
+
expect(events.emit).toHaveBeenCalledWith('identity.phone.verified', {
|
|
113
|
+
userId: accountUser.id,
|
|
114
|
+
playerId: null,
|
|
115
|
+
previousPhoneVerified: false,
|
|
116
|
+
ip: null,
|
|
117
|
+
userAgent: null,
|
|
118
|
+
});
|
|
119
|
+
expect(events.emit).not.toHaveBeenCalledWith('identity.authentication.succeeded', expect.anything());
|
|
120
|
+
});
|
|
121
|
+
it('does not allow a challenge created in another session to confirm the phone number', async () => {
|
|
122
|
+
const { accountUser, sessionId } = await seedAuthenticatedUser();
|
|
123
|
+
const [otherSession] = await db.drizzle.db
|
|
124
|
+
.insert(session)
|
|
125
|
+
.values({
|
|
126
|
+
userId: accountUser.id,
|
|
127
|
+
token: 'other-active-session-token',
|
|
128
|
+
expiresAt: new Date(Date.now() + 60 * 60 * 1000),
|
|
129
|
+
})
|
|
130
|
+
.returning({ id: session.id });
|
|
131
|
+
const { svc, sms } = build();
|
|
132
|
+
await svc.request({
|
|
133
|
+
userId: accountUser.id,
|
|
134
|
+
sessionId,
|
|
135
|
+
input: { phone: PHONE, currentPassword: PASSWORD },
|
|
136
|
+
reqHeaders: {},
|
|
137
|
+
meta: NO_CLIENT_META,
|
|
138
|
+
});
|
|
139
|
+
const code = sms.sendOtp.mock.calls[0]?.[0]?.code;
|
|
140
|
+
await expect(svc.confirm({
|
|
141
|
+
userId: accountUser.id,
|
|
142
|
+
sessionId: otherSession.id,
|
|
143
|
+
input: { code },
|
|
144
|
+
meta: NO_CLIENT_META,
|
|
145
|
+
})).rejects.toMatchObject({ code: 'UNPROCESSABLE_CONTENT' });
|
|
146
|
+
const [unchanged] = await db.drizzle.db
|
|
147
|
+
.select({ phoneVerified: user.phoneVerified })
|
|
148
|
+
.from(user)
|
|
149
|
+
.where(eq(user.id, accountUser.id));
|
|
150
|
+
expect(unchanged?.phoneVerified).toBe(false);
|
|
151
|
+
});
|
|
152
|
+
it('rejects the second confirm with CONFLICT when two accounts race to claim the same number', async () => {
|
|
153
|
+
// Neither account owns PHONE yet, so `request()`'s uniqueness check (which only looks
|
|
154
|
+
// at already-bound `user.phoneNumber`) lets both create a pending session for it.
|
|
155
|
+
const first = await seedAuthenticatedUser();
|
|
156
|
+
const second = await insertUser(db, { name: 'B', email: 'phone-verification-2@test.dev' });
|
|
157
|
+
await db.drizzle.db.insert(account).values({
|
|
158
|
+
userId: second.id,
|
|
159
|
+
accountId: second.id,
|
|
160
|
+
providerId: 'credential',
|
|
161
|
+
password: 'stored-password-hash',
|
|
162
|
+
});
|
|
163
|
+
const [secondSession] = await db.drizzle.db
|
|
164
|
+
.insert(session)
|
|
165
|
+
.values({
|
|
166
|
+
userId: second.id,
|
|
167
|
+
token: 'second-active-session-token',
|
|
168
|
+
expiresAt: new Date(Date.now() + 60 * 60 * 1000),
|
|
169
|
+
})
|
|
170
|
+
.returning({ id: session.id });
|
|
171
|
+
const { svc, sms } = build();
|
|
172
|
+
await svc.request({
|
|
173
|
+
userId: first.accountUser.id,
|
|
174
|
+
sessionId: first.sessionId,
|
|
175
|
+
input: { phone: PHONE, currentPassword: PASSWORD },
|
|
176
|
+
reqHeaders: {},
|
|
177
|
+
meta: NO_CLIENT_META,
|
|
178
|
+
});
|
|
179
|
+
const firstCode = sms.sendOtp.mock.calls[0]?.[0]?.code;
|
|
180
|
+
await svc.request({
|
|
181
|
+
userId: second.id,
|
|
182
|
+
sessionId: secondSession.id,
|
|
183
|
+
input: { phone: PHONE, currentPassword: PASSWORD },
|
|
184
|
+
reqHeaders: {},
|
|
185
|
+
meta: NO_CLIENT_META,
|
|
186
|
+
});
|
|
187
|
+
const secondCode = sms.sendOtp.mock.calls[1]?.[0]?.code;
|
|
188
|
+
await svc.confirm({
|
|
189
|
+
userId: first.accountUser.id,
|
|
190
|
+
sessionId: first.sessionId,
|
|
191
|
+
input: { code: firstCode },
|
|
192
|
+
meta: NO_CLIENT_META,
|
|
193
|
+
});
|
|
194
|
+
await expect(svc.confirm({
|
|
195
|
+
userId: second.id,
|
|
196
|
+
sessionId: secondSession.id,
|
|
197
|
+
input: { code: secondCode },
|
|
198
|
+
meta: NO_CLIENT_META,
|
|
199
|
+
})).rejects.toMatchObject({ code: 'CONFLICT' });
|
|
200
|
+
const [unchanged] = await db.drizzle.db
|
|
201
|
+
.select({ phoneNumber: user.phoneNumber, phoneVerified: user.phoneVerified })
|
|
202
|
+
.from(user)
|
|
203
|
+
.where(eq(user.id, second.id));
|
|
204
|
+
expect(unchanged).toEqual({ phoneNumber: null, phoneVerified: false });
|
|
205
|
+
});
|
|
206
|
+
it('keeps counting wrong codes and burns the challenge on the last one', async () => {
|
|
207
|
+
const { accountUser, sessionId } = await seedAuthenticatedUser();
|
|
208
|
+
const { svc } = build();
|
|
209
|
+
await svc.request({
|
|
210
|
+
userId: accountUser.id,
|
|
211
|
+
sessionId,
|
|
212
|
+
input: { phone: PHONE, currentPassword: PASSWORD },
|
|
213
|
+
reqHeaders: {},
|
|
214
|
+
meta: NO_CLIENT_META,
|
|
215
|
+
});
|
|
216
|
+
for (let attempt = 1; attempt < 5; attempt++) {
|
|
217
|
+
await expect(svc.confirm({
|
|
218
|
+
userId: accountUser.id,
|
|
219
|
+
sessionId,
|
|
220
|
+
input: { code: '000000' },
|
|
221
|
+
meta: NO_CLIENT_META,
|
|
222
|
+
})).rejects.toMatchObject({ code: 'UNPROCESSABLE_CONTENT' });
|
|
223
|
+
const [row] = await db.drizzle.db.select().from(phoneVerificationSession);
|
|
224
|
+
expect(row?.failedAttempts).toBe(attempt);
|
|
225
|
+
}
|
|
226
|
+
await expect(svc.confirm({
|
|
227
|
+
userId: accountUser.id,
|
|
228
|
+
sessionId,
|
|
229
|
+
input: { code: '000000' },
|
|
230
|
+
meta: NO_CLIENT_META,
|
|
231
|
+
})).rejects.toMatchObject({ code: 'UNPROCESSABLE_CONTENT' });
|
|
232
|
+
expect(await db.drizzle.db.select().from(phoneVerificationSession)).toEqual([]);
|
|
233
|
+
});
|
|
234
|
+
it('refuses to bind a number to a non-player account', async () => {
|
|
235
|
+
const { accountUser, sessionId } = await seedAuthenticatedUser({
|
|
236
|
+
role: 'admin',
|
|
237
|
+
email: 'phone-verification-admin@test.dev',
|
|
238
|
+
});
|
|
239
|
+
const { svc, sms } = build();
|
|
240
|
+
await expect(svc.request({
|
|
241
|
+
userId: accountUser.id,
|
|
242
|
+
sessionId,
|
|
243
|
+
input: { phone: PHONE, currentPassword: PASSWORD },
|
|
244
|
+
reqHeaders: {},
|
|
245
|
+
meta: NO_CLIENT_META,
|
|
246
|
+
})).rejects.toMatchObject({ code: 'FORBIDDEN' });
|
|
247
|
+
expect(sms.sendOtp).not.toHaveBeenCalled();
|
|
248
|
+
expect(await db.drizzle.db.select().from(phoneVerificationSession)).toEqual([]);
|
|
249
|
+
});
|
|
250
|
+
it('answers a number owned by another account without an SMS or a challenge', async () => {
|
|
251
|
+
const { accountUser, sessionId } = await seedAuthenticatedUser();
|
|
252
|
+
const owner = await insertUser(db, { name: 'B', email: 'phone-verification-owner@test.dev' });
|
|
253
|
+
await db.drizzle.db
|
|
254
|
+
.update(user)
|
|
255
|
+
.set({ phoneNumber: PHONE, phoneVerified: true })
|
|
256
|
+
.where(eq(user.id, owner.id));
|
|
257
|
+
const { svc, sms } = build();
|
|
258
|
+
const result = await svc.request({
|
|
259
|
+
userId: accountUser.id,
|
|
260
|
+
sessionId,
|
|
261
|
+
input: { phone: PHONE, currentPassword: PASSWORD },
|
|
262
|
+
reqHeaders: {},
|
|
263
|
+
meta: NO_CLIENT_META,
|
|
264
|
+
});
|
|
265
|
+
expect(result).toMatchObject({
|
|
266
|
+
expiresAt: expect.any(String),
|
|
267
|
+
resendAfter: expect.any(String),
|
|
268
|
+
});
|
|
269
|
+
expect(sms.sendOtp).not.toHaveBeenCalled();
|
|
270
|
+
expect(await db.drizzle.db.select().from(phoneVerificationSession)).toEqual([]);
|
|
271
|
+
});
|
|
272
|
+
});
|
|
273
|
+
//# sourceMappingURL=phone-verification.service.int.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"phone-verification.service.int.test.js","sourceRoot":"","sources":["../../../../src/pam/identity/__tests__/phone-verification.service.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,QAAQ,IAAI,UAAU,EAAe,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAGhF,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAElG,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AACpC,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B,IAAI,EAAU,CAAC;AAEf,MAAM,YAAY,GAAG,GAAuB,EAAE,CAC5C,IAAI,CAAqB;IACvB,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IACtE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;CACf,CAAC,CAAC;AAEL,SAAS,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,KAAoC,EAAE;IAC3E,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAa,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,IAAI,CAAO;QACtB,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC;YACxB,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE;SACjE,CAAC;QACF,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;KACpF,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,wBAAwB,CAAC;QACvC,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM;QACN,GAAG;QACH,OAAO,EAAE,YAAY,EAAE;QACvB,IAAI;QACJ,cAAc,EAAE,kBAAkB,EAAE;KACrC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,YAA+C,EAAE;IACpF,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE;QACvC,IAAI,EAAE,GAAG;QACT,KAAK,EAAE,SAAS,CAAC,KAAK,IAAI,6BAA6B;QACvD,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACzC,MAAM,EAAE,WAAW,CAAC,EAAE;QACtB,SAAS,EAAE,WAAW,CAAC,EAAE;QACzB,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,sBAAsB;KACjC,CAAC,CAAC;IACH,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SACxC,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC;QACN,MAAM,EAAE,WAAW,CAAC,EAAE;QACtB,KAAK,EAAE,sBAAsB;QAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;KACjD,CAAC;SACD,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAc,CAAC,EAAE,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CACzB,GAAG,CAAA,YAAY,IAAI,KAAK,OAAO,KAAK,OAAO,KAAK,wBAAwB,2BAA2B,CACpG,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,qBAAqB,EAAE,CAAC;QACjE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;QAEvD,MAAM,MAAM,CACV,GAAG,CAAC,OAAO,CAAC;YACV,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,SAAS;YACT,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE;YAClD,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,cAAc;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAElD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,qBAAqB,EAAE,CAAC;QACjE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAErC,MAAM,GAAG,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,SAAS;YACT,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE;YAClD,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAI,GAAG,CAAC,OAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC;YAC9B,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,SAAS;YACT,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC1D,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC;YACjC,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,SAAS;YACT,KAAK,EAAE,EAAE,IAAI,EAAE;YACf,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aACtC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;aAC5E,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,yBAAyB,EAAE;YAClE,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,QAAQ,EAAE,IAAI;YACd,qBAAqB,EAAE,KAAK;YAC5B,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAC1C,mCAAmC,EACnC,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,qBAAqB,EAAE,CAAC;QACjE,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aACvC,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC;YACN,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,KAAK,EAAE,4BAA4B;YACnC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;SACjD,CAAC;aACD,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAE7B,MAAM,GAAG,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,SAAS;YACT,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE;YAClD,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;QACH,MAAM,IAAI,GAAI,GAAG,CAAC,OAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QAEhF,MAAM,MAAM,CACV,GAAG,CAAC,OAAO,CAAC;YACV,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,SAAS,EAAE,YAAa,CAAC,EAAE;YAC3B,KAAK,EAAE,EAAE,IAAI,EAAE;YACf,IAAI,EAAE,cAAc;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAE3D,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aACpC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;aAC7C,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,sFAAsF;QACtF,kFAAkF;QAClF,MAAM,KAAK,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC3F,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YACzC,MAAM,EAAE,MAAM,CAAC,EAAE;YACjB,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,UAAU,EAAE,YAAY;YACxB,QAAQ,EAAE,sBAAsB;SACjC,CAAC,CAAC;QACH,MAAM,CAAC,aAAa,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aACxC,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC;YACN,MAAM,EAAE,MAAM,CAAC,EAAE;YACjB,KAAK,EAAE,6BAA6B;YACpC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;SACjD,CAAC;aACD,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAE7B,MAAM,GAAG,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE;YAClD,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;QACH,MAAM,SAAS,GAAI,GAAG,CAAC,OAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACrF,MAAM,GAAG,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,MAAM,CAAC,EAAE;YACjB,SAAS,EAAE,aAAc,CAAC,EAAE;YAC5B,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE;YAClD,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;QACH,MAAM,UAAU,GAAI,GAAG,CAAC,OAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QAEtF,MAAM,GAAG,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC1B,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,GAAG,CAAC,OAAO,CAAC;YACV,MAAM,EAAE,MAAM,CAAC,EAAE;YACjB,SAAS,EAAE,aAAc,CAAC,EAAE;YAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC3B,IAAI,EAAE,cAAc;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAE9C,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aACpC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;aAC5E,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,qBAAqB,EAAE,CAAC;QACjE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAExB,MAAM,GAAG,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,SAAS;YACT,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE;YAClD,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;QAEH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,MAAM,MAAM,CACV,GAAG,CAAC,OAAO,CAAC;gBACV,MAAM,EAAE,WAAW,CAAC,EAAE;gBACtB,SAAS;gBACT,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,IAAI,EAAE,cAAc;aACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC1E,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,CACV,GAAG,CAAC,OAAO,CAAC;YACV,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,SAAS;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,IAAI,EAAE,cAAc;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,qBAAqB,CAAC;YAC7D,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,mCAAmC;SAC3C,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAE7B,MAAM,MAAM,CACV,GAAG,CAAC,OAAO,CAAC;YACV,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,SAAS;YACT,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE;YAClD,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,cAAc;SACrB,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,qBAAqB,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;QAC9F,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aAChB,MAAM,CAAC,IAAI,CAAC;aACZ,GAAG,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAChD,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC;YAC/B,MAAM,EAAE,WAAW,CAAC,EAAE;YACtB,SAAS;YACT,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE;YAClD,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,cAAc;SACrB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -10,5 +10,6 @@ export declare class IdentityReaderService implements IdentityReader {
|
|
|
10
10
|
getPlayerIdsByUserIdsSafe(userIds: User['id'][]): Promise<Map<User['id'], Player['id'] | null>>;
|
|
11
11
|
getPlayerKycStatusByUserId(userId: User['id']): Promise<KycStatus | null>;
|
|
12
12
|
getPlayerUserIdsSharingLoginIp(userId: User['id'], ipAddress: string): Promise<User['id'][]>;
|
|
13
|
+
canReceiveLoginWithdrawalAlerts(userId: User['id']): Promise<boolean>;
|
|
13
14
|
}
|
|
14
15
|
//# sourceMappingURL=identity-reader.service.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-reader.service.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/adapters/identity-reader.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAOvF,qBAAa,qBAAsB,YAAW,cAAc;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,cAAc;IAE9C,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAQxD,yBAAyB,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IA4BjE,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IASrE,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IASzE,yBAAyB,CAC7B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GACpB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAmB1C,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IASzE,8BAA8B,CAClC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;
|
|
1
|
+
{"version":3,"file":"identity-reader.service.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/adapters/identity-reader.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAOvF,qBAAa,qBAAsB,YAAW,cAAc;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,cAAc;IAE9C,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAQxD,yBAAyB,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IA4BjE,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IASrE,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IASzE,yBAAyB,CAC7B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GACpB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAmB1C,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IASzE,8BAA8B,CAClC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAWlB,+BAA+B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CAQ5E"}
|
|
@@ -87,5 +87,13 @@ export class IdentityReaderService {
|
|
|
87
87
|
.groupBy(user.id);
|
|
88
88
|
return rows.map((r) => r.userId);
|
|
89
89
|
}
|
|
90
|
+
async canReceiveLoginWithdrawalAlerts(userId) {
|
|
91
|
+
const [row] = await this.drizzle.db
|
|
92
|
+
.select({ enabled: user.loginWithdrawalAlertsEnabled, emailVerified: user.emailVerified })
|
|
93
|
+
.from(user)
|
|
94
|
+
.where(eq(user.id, userId))
|
|
95
|
+
.limit(1);
|
|
96
|
+
return row?.enabled === true && row.emailVerified === true;
|
|
97
|
+
}
|
|
90
98
|
}
|
|
91
99
|
//# sourceMappingURL=identity-reader.service.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-reader.service.js","sourceRoot":"","sources":["../../../../src/pam/identity/adapters/identity-reader.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAkB,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAE1D,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAE/C,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,KAAK,CAAC,cAAc,CAAC,MAAkB;QACrC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;aAC1C,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrC,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,SAAe;QAC7C,0EAA0E;QAC1E,kFAAkF;QAClF,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aACvC,MAAM,CAAC;YACN,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO,CAAc,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;SACxE,CAAC;aACD,IAAI,CAAC,OAAO,CAAC;aACb,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;aACvB,EAAE,CAAC,GAAG,CAAC,CAAC;QAEX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC3B,IAAI,CAAC,IAAI,CAAC;aACV,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;aACpE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EACvB,EAAE,CACA,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EACrE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CACzC,CACF,CACF,CAAC;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAkB;QAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;aACzB,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAChC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAAkB;QAC9C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,8CAA8C,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,OAAqB;QAErB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAkC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;iBAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;iBAChD,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,sDAAsD,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,MAAkB;QACjD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;aACvC,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAChC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,8BAA8B,CAClC,MAAkB,EAClB,SAAiB;QAEjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC3B,IAAI,CAAC,OAAO,CAAC;aACb,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC5C,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC7C,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;aAC1F,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;CACF"}
|
|
1
|
+
{"version":3,"file":"identity-reader.service.js","sourceRoot":"","sources":["../../../../src/pam/identity/adapters/identity-reader.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAkB,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAE1D,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAE/C,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,KAAK,CAAC,cAAc,CAAC,MAAkB;QACrC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;aAC1C,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrC,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,SAAe;QAC7C,0EAA0E;QAC1E,kFAAkF;QAClF,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aACvC,MAAM,CAAC;YACN,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO,CAAc,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;SACxE,CAAC;aACD,IAAI,CAAC,OAAO,CAAC;aACb,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;aACvB,EAAE,CAAC,GAAG,CAAC,CAAC;QAEX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC3B,IAAI,CAAC,IAAI,CAAC;aACV,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;aACpE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EACvB,EAAE,CACA,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EACrE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CACzC,CACF,CACF,CAAC;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAkB;QAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;aACzB,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAChC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAAkB;QAC9C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,8CAA8C,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,OAAqB;QAErB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAkC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;iBAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;iBAChD,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,sDAAsD,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,MAAkB;QACjD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;aACvC,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAChC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,8BAA8B,CAClC,MAAkB,EAClB,SAAiB;QAEjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC3B,IAAI,CAAC,OAAO,CAAC;aACb,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC5C,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC7C,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;aAC1F,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,+BAA+B,CAAC,MAAkB;QACtD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,4BAA4B,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;aACzF,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;aAC1B,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC;IAC7D,CAAC;CACF"}
|
|
@@ -174,6 +174,46 @@ export declare const identityContract: {
|
|
|
174
174
|
createdAt: z.ZodISODateTime;
|
|
175
175
|
updatedAt: z.ZodISODateTime;
|
|
176
176
|
}, z.core.$strip>>, Record<never, never>, Record<never, never>>;
|
|
177
|
+
security: {
|
|
178
|
+
me: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
|
|
179
|
+
passwordMeetsPolicy: z.ZodBoolean;
|
|
180
|
+
emailVerified: z.ZodBoolean;
|
|
181
|
+
phoneNumber: z.ZodNullable<z.ZodString>;
|
|
182
|
+
phoneVerified: z.ZodBoolean;
|
|
183
|
+
twoFactorEnabled: z.ZodBoolean;
|
|
184
|
+
loginWithdrawalAlertsEnabled: z.ZodBoolean;
|
|
185
|
+
}, z.core.$strip>, Record<never, never>, Record<never, never>>;
|
|
186
|
+
loginWithdrawalAlerts: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
|
|
187
|
+
enabled: z.ZodBoolean;
|
|
188
|
+
}, z.core.$strip>, z.ZodObject<{
|
|
189
|
+
passwordMeetsPolicy: z.ZodBoolean;
|
|
190
|
+
emailVerified: z.ZodBoolean;
|
|
191
|
+
phoneNumber: z.ZodNullable<z.ZodString>;
|
|
192
|
+
phoneVerified: z.ZodBoolean;
|
|
193
|
+
twoFactorEnabled: z.ZodBoolean;
|
|
194
|
+
loginWithdrawalAlertsEnabled: z.ZodBoolean;
|
|
195
|
+
}, z.core.$strip>, Record<never, never>, Record<never, never>>;
|
|
196
|
+
};
|
|
197
|
+
phoneVerification: {
|
|
198
|
+
request: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
|
|
199
|
+
phone: z.ZodString;
|
|
200
|
+
currentPassword: z.ZodString;
|
|
201
|
+
totpCode: z.ZodOptional<z.ZodString>;
|
|
202
|
+
}, z.core.$strip>, z.ZodObject<{
|
|
203
|
+
expiresAt: z.ZodISODateTime;
|
|
204
|
+
resendAfter: z.ZodISODateTime;
|
|
205
|
+
}, z.core.$strip>, Record<never, never>, Record<never, never>>;
|
|
206
|
+
confirm: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
|
|
207
|
+
code: z.ZodString;
|
|
208
|
+
}, z.core.$strip>, z.ZodObject<{
|
|
209
|
+
passwordMeetsPolicy: z.ZodBoolean;
|
|
210
|
+
emailVerified: z.ZodBoolean;
|
|
211
|
+
phoneNumber: z.ZodNullable<z.ZodString>;
|
|
212
|
+
phoneVerified: z.ZodBoolean;
|
|
213
|
+
twoFactorEnabled: z.ZodBoolean;
|
|
214
|
+
loginWithdrawalAlertsEnabled: z.ZodBoolean;
|
|
215
|
+
}, z.core.$strip>, Record<never, never>, Record<never, never>>;
|
|
216
|
+
};
|
|
177
217
|
streamSession: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, import("@orpc/contract").Schema<AsyncIteratorObject<{
|
|
178
218
|
type: "revoked";
|
|
179
219
|
} | {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/contract/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/contract/index.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,eAAO,MAAM,aAAa;;;iBAGxB,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;iBAkB5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAG5D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;iBAIlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,uBAAuB;;;;;;;;;iBASlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,yBAAyB;;;;;;;iBAWpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,sBAAsB,kDAAmD,CAAC;AACvF,eAAO,MAAM,mBAAmB;;;;GAAsD,CAAC;AACvF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqP5B,CAAC"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import { oc, eventIterator } from '@orpc/contract';
|
|
2
|
-
import { UserSchema, UuidSchema, LoginInputSchema, RegisterInputSchema, RegisterOutputSchema, UsernameAvailabilityInputSchema, UsernameAvailabilityOutputSchema, Enable2faInputSchema, Enable2faResultSchema, Verify2faInputSchema, Disable2faInputSchema, RegenerateBackupCodesInputSchema, BackupCodesResultSchema, TrustCurrentDeviceInputSchema, RequestPasswordResetInputSchema, VerifyPasswordResetOtpInputSchema, ResetPasswordInputSchema, ResendEmailVerificationInputSchema, VerifyEmailInputSchema, UpdateProfileInputSchema, ChangePasswordInputSchema, ChangeEmailInputSchema, IdentitySuccessSchema, TimestampSchema, PhoneLoginRequestInputSchema, PhoneLoginRequestOutputSchema, PhoneLoginVerifyInputSchema, LoginSecurityStateSchema, } from '@openora/core/contracts';
|
|
2
|
+
import { UserSchema, UuidSchema, LoginInputSchema, RegisterInputSchema, RegisterOutputSchema, UsernameAvailabilityInputSchema, UsernameAvailabilityOutputSchema, Enable2faInputSchema, Enable2faResultSchema, Verify2faInputSchema, Disable2faInputSchema, RegenerateBackupCodesInputSchema, BackupCodesResultSchema, TrustCurrentDeviceInputSchema, RequestPasswordResetInputSchema, VerifyPasswordResetOtpInputSchema, ResetPasswordInputSchema, ResendEmailVerificationInputSchema, VerifyEmailInputSchema, UpdateProfileInputSchema, ChangePasswordInputSchema, ChangeEmailInputSchema, IdentitySuccessSchema, TimestampSchema, PhoneLoginRequestInputSchema, PhoneLoginRequestOutputSchema, PhoneLoginVerifyInputSchema, LoginSecurityStateSchema, SecurityControlsSchema, SetLoginWithdrawalAlertsInputSchema, PhoneVerificationRequestInputSchema, PhoneVerificationRequestOutputSchema, PhoneVerificationConfirmInputSchema, } from '@openora/core/contracts';
|
|
3
3
|
import { PageQuerySchema, SortOrderSchema, paginated } from '@openora/core/contracts/kit';
|
|
4
4
|
import * as z from 'zod';
|
|
5
5
|
export const SessionSchema = z.object({
|
|
@@ -84,6 +84,23 @@ export const identityContract = {
|
|
|
84
84
|
.output(z.object({ user: UserSchema, session: SessionSchema, security: LoginSecurityStateSchema })),
|
|
85
85
|
logout: oc.route({ method: 'POST', path: '/identity/logout' }).output(IdentitySuccessSchema),
|
|
86
86
|
me: oc.route({ method: 'GET', path: '/identity/me' }).output(UserSchema.nullable()),
|
|
87
|
+
security: {
|
|
88
|
+
me: oc.route({ method: 'GET', path: '/identity/security/me' }).output(SecurityControlsSchema),
|
|
89
|
+
loginWithdrawalAlerts: oc
|
|
90
|
+
.route({ method: 'POST', path: '/identity/security/login-withdrawal-alerts' })
|
|
91
|
+
.input(SetLoginWithdrawalAlertsInputSchema)
|
|
92
|
+
.output(SecurityControlsSchema),
|
|
93
|
+
},
|
|
94
|
+
phoneVerification: {
|
|
95
|
+
request: oc
|
|
96
|
+
.route({ method: 'POST', path: '/identity/phone-verification/request' })
|
|
97
|
+
.input(PhoneVerificationRequestInputSchema)
|
|
98
|
+
.output(PhoneVerificationRequestOutputSchema),
|
|
99
|
+
confirm: oc
|
|
100
|
+
.route({ method: 'POST', path: '/identity/phone-verification/confirm' })
|
|
101
|
+
.input(PhoneVerificationConfirmInputSchema)
|
|
102
|
+
.output(SecurityControlsSchema),
|
|
103
|
+
},
|
|
87
104
|
streamSession: oc
|
|
88
105
|
.route({ method: 'GET', path: '/identity/session/stream' })
|
|
89
106
|
.output(eventIterator(z.discriminatedUnion('type', [
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pam/identity/contract/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,gCAAgC,EAChC,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,gCAAgC,EAChC,uBAAuB,EACvB,6BAA6B,EAC7B,+BAA+B,EAC/B,iCAAiC,EACjC,wBAAwB,EACxB,kCAAkC,EAClC,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,4BAA4B,EAC5B,6BAA6B,EAC7B,2BAA2B,EAC3B,wBAAwB,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pam/identity/contract/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,gCAAgC,EAChC,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,gCAAgC,EAChC,uBAAuB,EACvB,6BAA6B,EAC7B,+BAA+B,EAC/B,iCAAiC,EACjC,wBAAwB,EACxB,kCAAkC,EAClC,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,4BAA4B,EAC5B,6BAA6B,EAC7B,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,mCAAmC,EACnC,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,GACpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,UAAU;IACd,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;IAC1B,8EAA8E;IAC9E,SAAS,EAAE,eAAe;IAC1B,iFAAiF;IACjF,wDAAwD;IACxD,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,8DAA8D;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,+EAA+E;IAC/E,gDAAgD;IAChD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IAC9D,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,eAAe;IAC3B,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,sFAAsF;IACtF,sCAAsC;IACtC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/D,kFAAkF;IAClF,yEAAyE;IACzE,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACjD,kBAAkB,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,eAAe,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AACvF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAGvF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,EAAE;SACT,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;SACrD,KAAK,CAAC,mBAAmB,CAAC;SAC1B,MAAM,CAAC,oBAAoB,CAAC;IAE/B,iBAAiB,EAAE,EAAE;SAClB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;SAC9D,KAAK,CAAC,+BAA+B,CAAC;SACtC,MAAM,CAAC,gCAAgC,CAAC;IAE3C,2HAA2H;IAC3H,KAAK,EAAE,EAAE;SACN,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;SAClD,KAAK,CAAC,gBAAgB,CAAC;SACvB,MAAM,CACL,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC3B,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;QACjC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACzC,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,EAAE;KAC9C,CAAC,CACH;IAEH,iBAAiB,EAAE,EAAE;SAClB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;SAChE,KAAK,CAAC,4BAA4B,CAAC;SACnC,MAAM,CAAC,6BAA6B,CAAC;IAExC,gBAAgB,EAAE,EAAE;SACjB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;SAC/D,KAAK,CAAC,2BAA2B,CAAC;SAClC,MAAM,CACL,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAC,CAC3F;IAEH,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC;IAE5F,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IAEnF,QAAQ,EAAE;QACR,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC;QAE7F,qBAAqB,EAAE,EAAE;aACtB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4CAA4C,EAAE,CAAC;aAC7E,KAAK,CAAC,mCAAmC,CAAC;aAC1C,MAAM,CAAC,sBAAsB,CAAC;KAClC;IAED,iBAAiB,EAAE;QACjB,OAAO,EAAE,EAAE;aACR,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC;aACvE,KAAK,CAAC,mCAAmC,CAAC;aAC1C,MAAM,CAAC,oCAAoC,CAAC;QAE/C,OAAO,EAAE,EAAE;aACR,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC;aACvE,KAAK,CAAC,mCAAmC,CAAC;aAC1C,MAAM,CAAC,sBAAsB,CAAC;KAClC;IAED,aAAa,EAAE,EAAE;SACd,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;SAC1D,MAAM,CACL,aAAa,CACX,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QAC3B,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;KAC1C,CAAC,CACH,CACF;IAEH,SAAS,EAAE,EAAE;SACV,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;SACvD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,SAAS,EAAE,EAAE;SACV,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;SACvD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;SACxD,KAAK,CAAC,qBAAqB,CAAC;SAC5B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,oFAAoF;IACpF,wFAAwF;IACxF,qBAAqB,EAAE,EAAE;SACtB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC;SACxE,KAAK,CAAC,gCAAgC,CAAC;SACvC,MAAM,CAAC,uBAAuB,CAAC;IAElC,oBAAoB,EAAE,EAAE;SACrB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;SAC5D,KAAK,CAAC,+BAA+B,CAAC;SACtC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,sBAAsB,EAAE,EAAE;SACvB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;SAChE,KAAK,CAAC,iCAAiC,CAAC;SACxC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,aAAa,EAAE,EAAE;SACd,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;SAC3D,KAAK,CAAC,wBAAwB,CAAC;SAC/B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,cAAc,EAAE,EAAE;SACf,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;SAC5D,KAAK,CAAC,yBAAyB,CAAC;SAChC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,iFAAiF;IACjF,kFAAkF;IAClF,qBAAqB,EAAE,EAAE;SACtB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;SAC9D,KAAK,CAAC,kCAAkC,CAAC;SACzC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,oFAAoF;IACpF,uFAAuF;IACvF,6EAA6E;IAC7E,WAAW,EAAE,EAAE;SACZ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;SACzD,KAAK,CAAC,sBAAsB,CAAC;SAC7B,MAAM,CACL,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC3B,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;QACjC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC1C,CAAC,CACH;IAEH,WAAW,EAAE,EAAE;SACZ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;SACzD,KAAK,CAAC,sBAAsB,CAAC;SAC7B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,aAAa,EAAE,EAAE;SACd,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;SACrD,KAAK,CAAC,wBAAwB,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAEzC,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SACnD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,yBAAyB,EAAE,EAAE;SAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC;SACjE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,QAAQ,EAAE;QACR,IAAI,EAAE,EAAE;aACL,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;aACpD,KAAK,CACJ,eAAe,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YACtC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;SACtD,CAAC,CACH;aACA,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAEvC,MAAM,EAAE,EAAE;aACP,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;aAC5D,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;aACvD,MAAM,CAAC,qBAAqB,CAAC;QAEhC,SAAS,EAAE,EAAE;aACV,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;aAChE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;aACvC,MAAM,CAAC,qBAAqB,CAAC;QAEhC,+EAA+E;QAC/E,+DAA+D;QAC/D,QAAQ,EAAE,EAAE;aACT,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;aACvD,KAAK,CACJ,eAAe,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YACtC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;SACtD,CAAC,CACH;aACA,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAEvC,UAAU,EAAE,EAAE;aACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;aAC/D,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;aACnC,MAAM,CAAC,qBAAqB,CAAC;QAEhC,iFAAiF;QACjF,8EAA8E;QAC9E,gCAAgC;QAChC,OAAO,EAAE,EAAE;aACR,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;aACxD,KAAK,CACJ,eAAe,CAAC,MAAM,CAAC;YACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YACtC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;SACtD,CAAC,CACH;aACA,MAAM,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;KAC9C;IAED,aAAa,EAAE;QACb,MAAM,EAAE,EAAE;aACP,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC;aACjE,MAAM,CAAC,yBAAyB,CAAC;QAEpC,cAAc,EAAE,EAAE;aACf,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0CAA0C,EAAE,CAAC;aAC1E,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAE3C,gFAAgF;QAChF,iFAAiF;QACjF,kBAAkB,EAAE,EAAE;aACnB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;aACjF,KAAK,CAAC,6BAA6B,CAAC;aACpC,MAAM,CAAC,qBAAqB,CAAC;QAEhC,mBAAmB,EAAE,EAAE;aACpB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iDAAiD,EAAE,CAAC;aAClF,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;aACnC,MAAM,CAAC,qBAAqB,CAAC;QAEhC,8EAA8E;QAC9E,gFAAgF;QAChF,qEAAqE;QACrE,kBAAkB,EAAE,EAAE;aACnB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAC;aACrE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aACnF,MAAM,CAAC,qBAAqB,CAAC;QAEhC,gFAAgF;QAChF,uBAAuB,EAAE,EAAE;aACxB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0DAA0D,EAAE,CAAC;aAC3F,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;aACvD,MAAM,CAAC,qBAAqB,CAAC;KACjC;CACF,CAAC"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
CREATE TABLE "phone_verification_session" (
|
|
2
|
+
"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
|
|
3
|
+
"user_id" uuid NOT NULL,
|
|
4
|
+
"session_id" uuid NOT NULL,
|
|
5
|
+
"phone" text NOT NULL,
|
|
6
|
+
"code_hash" text NOT NULL,
|
|
7
|
+
"reauthenticated_at" timestamp with time zone NOT NULL,
|
|
8
|
+
"expires_at" timestamp with time zone NOT NULL,
|
|
9
|
+
"failed_attempts" integer DEFAULT 0 NOT NULL,
|
|
10
|
+
"created_at" timestamp with time zone DEFAULT now() NOT NULL,
|
|
11
|
+
CONSTRAINT "phone_verification_session_userId_unique" UNIQUE("user_id")
|
|
12
|
+
);
|
|
13
|
+
--> statement-breakpoint
|
|
14
|
+
ALTER TABLE "user" ADD COLUMN "password_meets_policy" boolean DEFAULT false NOT NULL;--> statement-breakpoint
|
|
15
|
+
ALTER TABLE "user" ADD COLUMN "login_withdrawal_alerts_enabled" boolean DEFAULT false NOT NULL;--> statement-breakpoint
|
|
16
|
+
ALTER TABLE "phone_verification_session" ADD CONSTRAINT "phone_verification_session_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
|
|
17
|
+
ALTER TABLE "phone_verification_session" ADD CONSTRAINT "phone_verification_session_session_id_session_id_fk" FOREIGN KEY ("session_id") REFERENCES "public"."session"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
|
|
18
|
+
CREATE INDEX "phone_verification_session_phone_idx" ON "phone_verification_session" USING btree ("phone");--> statement-breakpoint
|
|
19
|
+
CREATE INDEX "phone_verification_session_session_id_idx" ON "phone_verification_session" USING btree ("session_id");
|