@paroicms/server 1.84.1 → 1.85.0

package/dist/modules/bo-backend/account/account.queries.js

@@ -0,0 +1,231 @@
+import { strVal, strValOrUndef } from "@paroi/data-formatters-lib";
+import { makeSecret } from "@paroicms/internal-server-lib";
+import { ApiError } from "../../../common/api-error-handler.js";
+import { formatToAccountObjectType, formatToAuthenticatedAccountObjectType, } from "../../../common/data-format.js";
+import { sendMail } from "../../../common/mail/sendMail.helpers.js";
+import { simpleI18n } from "../../../context.js";
+import { getDevAccount, getPlatformAdminAccount, isDevAccountId, parsePlatformAdminAccountId, } from "../../../helpers/special-account.helpers.js";
+export async function findAccountByIdAndEmail(siteContext, payload) {
+    const account = await siteContext
+        .cn("PaAccount as a")
+        .select("a.id", "a.email", "a.name", "a.preferences")
+        .where({
+        "a.id": payload.id,
+        "a.email": payload.email,
+    })
+        .first();
+    if (!account)
+        throw new ApiError("Account not found", { status: 404 });
+    return {
+        id: strVal(account.id),
+        email: strVal(account.email),
+        name: strValOrUndef(account.name),
+        preferences: strValOrUndef(account.preferences),
+    };
+}
+export async function findAccountByEmail(siteContext, email) {
+    const account = await siteContext
+        .cn("PaAccount as a")
+        .select(["a.id", "a.email", "a.name", "a.preferences", "a.passwordHash"])
+        .where("a.email", email)
+        .first();
+    if (!account)
+        return;
+    return {
+        id: strVal(account.id),
+        email: strVal(account.email),
+        name: strValOrUndef(account.name),
+        preferences: strValOrUndef(account.preferences),
+        passwordHash: strValOrUndef(account.passwordHash),
+    };
+}
+export async function getAccount(siteContext, id) {
+    if (isDevAccountId(id))
+        return formatToAccountObjectType(getDevAccount(id));
+    const parsedPlatformAccountId = parsePlatformAdminAccountId(id);
+    if (parsedPlatformAccountId) {
+        return formatToAccountObjectType(getPlatformAdminAccount(parsedPlatformAccountId));
+    }
+    const found = await siteContext
+        .cn("PaAccount as a")
+        .select(["a.id", "a.email", "a.name", "a.passwordResetToken"])
+        .where("a.id", id)
+        .first();
+    if (!found)
+        throw new ApiError("Account not found", { status: 404 });
+    const account = {
+        id: strVal(found.id),
+        email: strVal(found.email),
+        name: strValOrUndef(found.name),
+        passwordResetToken: strValOrUndef(found.passwordResetToken),
+    };
+    return formatToAccountObjectType(account);
+}
+export async function getAuthenticatedAccount(siteContext, id) {
+    if (isDevAccountId(id))
+        return formatToAuthenticatedAccountObjectType(getDevAccount(id));
+    const parsedPlatformAccountId = parsePlatformAdminAccountId(id);
+    if (parsedPlatformAccountId) {
+        return formatToAuthenticatedAccountObjectType(getPlatformAdminAccount(parsedPlatformAccountId));
+    }
+    const found = await siteContext
+        .cn("PaAccount as a")
+        .select(["a.id", "a.email", "a.name", "a.preferences", "a.passwordResetToken"])
+        .where("a.id", id)
+        .first();
+    if (!found)
+        throw new ApiError("Account not found", { status: 404 });
+    const account = {
+        id: strVal(found.id),
+        email: strVal(found.email),
+        name: strValOrUndef(found.name),
+        preferences: strValOrUndef(found.preferences),
+        passwordResetToken: strValOrUndef(found.passwordResetToken),
+    };
+    return formatToAuthenticatedAccountObjectType(account);
+}
+export async function getAllAccounts(siteContext) {
+    const accounts = await siteContext
+        .cn("PaAccount as a")
+        .select(["a.id", "a.email", "a.name", "a.preferences", "a.passwordResetToken"]);
+    const parsedAccounts = accounts
+        .map((account) => {
+        return {
+            id: strVal(account.id),
+            email: strVal(account.email),
+            name: strValOrUndef(account.name),
+            preferences: strValOrUndef(account.preferences),
+            passwordResetToken: strValOrUndef(account.passwordResetToken),
+        };
+    })
+        .map((user) => formatToAccountObjectType(user));
+    return parsedAccounts;
+}
+export async function setAccountPreferences(siteContext, accountId, values) {
+    await siteContext
+        .cn("PaAccount")
+        .where({ id: accountId })
+        .update({ preferences: JSON.stringify(values) });
+}
+export async function createAccount(siteContext, payload) {
+    const account = await findAccountByEmail(siteContext, payload.email);
+    if (account)
+        throw new ApiError("email already exists", { status: 409 });
+    const [inserted] = await siteContext
+        .cn("PaAccount")
+        .insert({
+        email: payload.email,
+        name: payload.name,
+        preferences: JSON.stringify({ language: payload.language }),
+    })
+        .returning("id");
+    const id = strVal(inserted.id);
+    const newAccount = await findAccountById(siteContext, id);
+    if (!newAccount) {
+        throw new ApiError("Failed to get last insert account", { status: 500 });
+    }
+    if (payload.accountType === "google") {
+        return await createGoogleAccount(siteContext, {
+            payload,
+            newAccount,
+        });
+    }
+    await resetAccountToken(siteContext, {
+        id: newAccount.id,
+        email: newAccount.email,
+        language: payload.language,
+    });
+    return formatToAccountObjectType(newAccount);
+}
+async function createGoogleAccount(siteContext, { payload, newAccount, }) {
+    const subject = simpleI18n.translate({
+        key: "accountCreation.subject",
+        language: payload.language,
+    });
+    const message = simpleI18n.translate({
+        key: "accountCreation.message",
+        language: payload.language,
+        args: [`${siteContext.siteUrl}/adm`],
+    });
+    await sendMail({
+        subject: `${subject} - ${siteContext.fqdn}`,
+        html: message,
+        to: newAccount.email,
+    }, { logger: siteContext.logger });
+    return formatToAccountObjectType(newAccount);
+}
+export async function updateAccount(siteContext, accountId, payload) {
+    const account = await findAccountById(siteContext, accountId);
+    if (!account)
+        throw new ApiError("Account not found", { status: 404 });
+    await siteContext.cn("PaAccount").where({ id: account.id }).update(payload);
+    return formatToAccountObjectType({
+        ...account,
+        email: payload.email ?? account.email,
+        name: payload.name ?? account.name,
+    });
+}
+export async function deleteAccount(siteContext, accountId) {
+    const account = await findAccountById(siteContext, accountId);
+    if (!account)
+        throw new ApiError("Account not found", { status: 404 });
+    await siteContext.cn("PaAccount").where({ id: account.id }).delete();
+}
+export async function resetAccountPassword(siteContext, accountId) {
+    const account = await findAccountById(siteContext, accountId);
+    if (!account)
+        throw new ApiError("Account not found", { status: 404 });
+    const language = getAccountLanguage(siteContext, account);
+    await resetAccountToken(siteContext, { id: account.id, email: account.email, language });
+}
+async function findAccountById(siteContext, id) {
+    const found = await siteContext
+        .cn("PaAccount as a")
+        .select([
+        "a.id",
+        "a.email",
+        "a.name",
+        "a.preferences",
+        "a.passwordHash",
+        "a.passwordResetToken",
+    ])
+        .where("a.id", id)
+        .first();
+    if (!found)
+        return;
+    return {
+        id: strVal(found.id),
+        email: strVal(found.email),
+        name: strValOrUndef(found.name),
+        preferences: strValOrUndef(found.preferences),
+        passwordHash: strValOrUndef(found.passwordHash),
+        passwordResetToken: strValOrUndef(found.passwordResetToken),
+    };
+}
+async function resetAccountToken(siteContext, account) {
+    const passwordResetToken = makeSecret(60);
+    await siteContext.cn("PaAccount").where({ id: account.id }).update({
+        passwordResetToken,
+        passwordHash: null,
+    });
+    const subject = simpleI18n.translate({
+        key: "accountPasswordReset.subject",
+        language: account.language,
+    });
+    const resetUrl = `${siteContext.siteUrl}/adm/?account=${account.id}&reset-password=${encodeURIComponent(passwordResetToken)}`;
+    const message = simpleI18n.translate({
+        key: "accountPasswordReset.message",
+        language: account.language,
+        args: [resetUrl],
+    });
+    await sendMail({
+        subject: `${subject} - ${siteContext.fqdn}`,
+        html: message,
+        to: account.email,
+    }, { logger: siteContext.logger });
+}
+function getAccountLanguage(siteContext, account) {
+    const preferences = account.preferences ? JSON.parse(account.preferences) : undefined;
+    return preferences?.language ?? siteContext.siteSchema.defaultLanguage;
+}
+//# sourceMappingURL=account.queries.js.map

package/dist/modules/bo-backend/account/account.queries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.queries.js","sourceRoot":"","sources":["../../../../src/modules/bo-backend/account/account.queries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EACL,yBAAyB,EACzB,sCAAsC,GACvC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,0CAA0C,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,2BAA2B,GAC5B,MAAM,6CAA6C,CAAC;AAmBrD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAwB,EACxB,OAAsC;IAEtC,MAAM,OAAO,GAAG,MAAM,WAAW;SAC9B,EAAE,CAAC,gBAAgB,CAAC;SACpB,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC;SACpD,KAAK,CAAC;QACL,MAAM,EAAE,OAAO,CAAC,EAAE;QAClB,SAAS,EAAE,OAAO,CAAC,KAAK;KACzB,CAAC;SACD,KAAK,EAAE,CAAC;IAEX,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACvE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAwB,EACxB,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,WAAW;SAC9B,EAAE,CAAC,gBAAgB,CAAC;SACpB,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;SACxE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;SACvB,KAAK,EAAE,CAAC;IACX,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/C,YAAY,EAAE,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,WAAwB,EAAE,EAAU;IACnE,IAAI,cAAc,CAAC,EAAE,CAAC;QAAE,OAAO,yBAAyB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5E,MAAM,uBAAuB,GAAG,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAChE,IAAI,uBAAuB,EAAE,CAAC;QAC5B,OAAO,yBAAyB,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,WAAW;SAC5B,EAAE,CAAC,gBAAgB,CAAC;SACpB,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC;SAC7D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;SACjB,KAAK,EAAE,CAAC;IAEX,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAErE,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/B,kBAAkB,EAAE,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC;KAC5D,CAAC;IAEF,OAAO,yBAAyB,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAwB,EACxB,EAAU;IAEV,IAAI,cAAc,CAAC,EAAE,CAAC;QAAE,OAAO,sCAAsC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAEzF,MAAM,uBAAuB,GAAG,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAChE,IAAI,uBAAuB,EAAE,CAAC;QAC5B,OAAO,sCAAsC,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,WAAW;SAC5B,EAAE,CAAC,gBAAgB,CAAC;SACpB,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC;SAC9E,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;SACjB,KAAK,EAAE,CAAC;IAEX,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAErE,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/B,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC;QAC7C,kBAAkB,EAAE,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC;KAC5D,CAAC;IAEF,OAAO,sCAAsC,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAwB;IAC3D,MAAM,QAAQ,GAAG,MAAM,WAAW;SAC/B,EAAE,CAAC,gBAAgB,CAAC;SACpB,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAElF,MAAM,cAAc,GAAc,QAAQ;SACvC,GAAG,CAAa,CAAC,OAAO,EAAE,EAAE;QAC3B,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACtB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAC5B,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC;YAC/C,kBAAkB,EAAE,aAAa,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAC9D,CAAC;IACJ,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;IAElD,OAAO,cAAc,CAAC;AACxB,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAwB,EACxB,SAAiB,EACjB,MAA+B;IAE/B,MAAM,WAAW;SACd,EAAE,CAAC,WAAW,CAAC;SACf,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;SACxB,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACrD,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAwB,EACxB,OAA2B;IAE3B,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACrE,IAAI,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAEzE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,WAAW;SACjC,EAAE,CAAC,WAAW,CAAC;SACf,MAAM,CAAC;QACN,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;KAC5D,CAAC;SACD,SAAS,CAAC,IAAI,CAAC,CAAC;IAEnB,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE/B,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,mBAAmB,CAAC,WAAW,EAAE;YAC5C,OAAO;YACP,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,CAAC,WAAW,EAAE;QACnC,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,OAAO,yBAAyB,CAAC,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,WAAwB,EACxB,EACE,OAAO,EACP,UAAU,GAIX;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC;QACnC,GAAG,EAAE,yBAAyB;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC;QACnC,GAAG,EAAE,yBAAyB;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,OAAO,MAAM,CAAC;KACrC,CAAC,CAAC;IAEH,MAAM,QAAQ,CACZ;QACE,OAAO,EAAE,GAAG,OAAO,MAAM,WAAW,CAAC,IAAI,EAAE;QAC3C,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,UAAU,CAAC,KAAK;KACrB,EACD,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAC/B,CAAC;IAEF,OAAO,yBAAyB,CAAC,UAAU,CAAC,CAAC;AAC/C,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAwB,EACxB,SAAiB,EACjB,OAA2B;IAE3B,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAEvE,MAAM,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE5E,OAAO,yBAAyB,CAAC;QAC/B,GAAG,OAAO;QACV,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK;QACrC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAwB,EAAE,SAAiB;IAC7E,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACvE,MAAM,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAwB,EACxB,SAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,iBAAiB,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,WAAwB,EACxB,EAAU;IAEV,MAAM,KAAK,GAAG,MAAM,WAAW;SAC5B,EAAE,CAAC,gBAAgB,CAAC;SACpB,MAAM,CAAC;QACN,MAAM;QACN,SAAS;QACT,QAAQ;QACR,eAAe;QACf,gBAAgB;QAChB,sBAAsB;KACvB,CAAC;SACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;SACjB,KAAK,EAAE,CAAC;IAEX,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/B,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC;QAC7C,YAAY,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;QAC/C,kBAAkB,EAAE,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,WAAwB,EACxB,OAAwD;IAExD,MAAM,kBAAkB,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAE1C,MAAM,WAAW,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;QACjE,kBAAkB;QAClB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC;QACnC,GAAG,EAAE,8BAA8B;QACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,WAAW,CAAC,OAAO,iBACrC,OAAO,CAAC,EACV,mBAAmB,kBAAkB,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAE5D,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC;QACnC,GAAG,EAAE,8BAA8B;QACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,CAAC,QAAQ,CAAC;KACjB,CAAC,CAAC;IAEH,MAAM,QAAQ,CACZ;QACE,OAAO,EAAE,GAAG,OAAO,MAAM,WAAW,CAAC,IAAI,EAAE;QAC3C,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO,CAAC,KAAK;KAClB,EACD,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAwB,EAAE,OAAmB;IACvE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,OAAO,WAAW,EAAE,QAAQ,IAAI,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC;AACzE,CAAC"}

package/dist/modules/bo-backend/account/account.resolver.d.ts

@@ -0,0 +1,3 @@
+import type { GqlResolvers } from "../../../graphql/generated-graphql-types.js";
+import type { GraphqlContext } from "../../graphql.types.js";
+export declare const accountResolvers: GqlResolvers<GraphqlContext>;

package/dist/modules/bo-backend/account/account.resolver.js

@@ -0,0 +1,65 @@
+import { ApiError } from "../../../common/api-error-handler.js";
+import { authGuard, verifyAccessToken } from "../auth/auth.helper.js";
+import { formatAccountType } from "./account.formatters.js";
+import { createAccount, deleteAccount, getAccount, getAllAccounts, getAuthenticatedAccount, resetAccountPassword, setAccountPreferences, updateAccount, } from "./account.queries.js";
+export const accountResolvers = {
+    Query: {
+        account: async (_parent, { id }, { req, siteContext }) => {
+            authGuard(req);
+            const acccount = await getAccount(siteContext, id);
+            return acccount;
+        },
+        authAccount: async (_parent, _values, { req, siteContext }) => {
+            authGuard(req);
+            const token = req.headers.authorization?.replace(/^Bearer\s+/, "");
+            if (!token) {
+                throw new ApiError("authorization header not found", { status: 404 });
+            }
+            const payload = verifyAccessToken(token);
+            if (!payload.id) {
+                throw new ApiError("auth account id not found", { status: 404 });
+            }
+            return await getAuthenticatedAccount(siteContext, payload.id);
+        },
+        allAccounts: async (_parent, _values, { req, siteContext }) => {
+            authGuard(req);
+            return await getAllAccounts(siteContext);
+        },
+    },
+    Mutation: {
+        createAccount: async (_parent, { values }, { req, siteContext }) => {
+            authGuard(req);
+            return await createAccount(siteContext, {
+                accountType: formatAccountType(values.accountType),
+                email: values.email,
+                language: values.language,
+                name: values.name ?? undefined,
+            });
+        },
+        updateAccount: async (_parent, { accountId, values }, { req, siteContext }) => {
+            authGuard(req);
+            return await updateAccount(siteContext, accountId, {
+                email: values.email ?? undefined,
+                name: values.name ?? undefined,
+            });
+        },
+        deleteAccount: async (_parent, { accountId }, { req, siteContext }) => {
+            authGuard(req);
+            await deleteAccount(siteContext, accountId);
+            return true;
+        },
+        resetAccountPassword: async (_parent, { accountId }, { req, siteContext }) => {
+            authGuard(req);
+            await resetAccountPassword(siteContext, accountId);
+            return true;
+        },
+        setAccountPreferences: async (_parent, { accountId, values }, { req, siteContext }) => {
+            authGuard(req);
+            await setAccountPreferences(siteContext, accountId, {
+                language: values.language ?? undefined,
+            });
+            return accountId;
+        },
+    },
+};
+//# sourceMappingURL=account.resolver.js.map

package/dist/modules/bo-backend/account/account.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.resolver.js","sourceRoot":"","sources":["../../../../src/modules/bo-backend/account/account.resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAGhE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,gBAAgB,GAAiC;IAC5D,KAAK,EAAE;QACL,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACvD,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACnD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC5D,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,QAAQ,CAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,MAAM,uBAAuB,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC5D,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;KACF;IACD,QAAQ,EAAE;QACR,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACjE,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,aAAa,CAAC,WAAW,EAAE;gBACtC,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC;gBAClD,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC5E,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,aAAa,CAAC,WAAW,EAAE,SAAS,EAAE;gBACjD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;gBAChC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACpE,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YAC3E,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,oBAAoB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE;YACpF,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,qBAAqB,CAAC,WAAW,EAAE,SAAS,EAAE;gBAClD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;aACvC,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;KACF;CACF,CAAC"}

package/dist/modules/bo-backend/auth/auth.helper.d.ts

@@ -0,0 +1,15 @@
+import type { Request, Response } from "express";
+export interface BearerTokenPayload {
+    id: string;
+    email: string;
+    fqdn: string;
+}
+export declare function authGuard(req: Request): BearerTokenPayload;
+export interface GoogleUser {
+    email: string;
+}
+export declare function googleAuthGuard(req: Request, res: Response): Promise<GoogleUser>;
+export declare function verifyAccessToken(token: string): BearerTokenPayload;
+export declare function verifyPlatformToken(platformToken: string): GoogleUser;
+export declare function generateAccessToken(payload: BearerTokenPayload): string;
+export declare function generatePlatformToken(payload: GoogleUser): string;

package/dist/modules/bo-backend/auth/auth.helper.js

@@ -0,0 +1,69 @@
+import passport from "passport";
+import { ApiError } from "../../../common/api-error-handler.js";
+import { jwtExpiresIn, jwtSecret, platformJwtSecret } from "../../../context.js";
+const { sign, verify } = (await import("jsonwebtoken")).default;
+export function authGuard(req) {
+    const authorization = req.headers.authorization;
+    if (!authorization || !authorization.startsWith("Bearer ")) {
+        throw new ApiError("Unauthorized", { status: 401 });
+    }
+    const token = authorization.substring(7);
+    let payload;
+    try {
+        payload = verify(token, jwtSecret);
+    }
+    catch (error) {
+        throw new ApiError("Unauthorized", { status: 401 });
+    }
+    if (payload.fqdn !== req.hostname) {
+        throw new ApiError("Not the right token", { status: 403 });
+    }
+    return payload;
+}
+function isGoogleUser(user) {
+    return typeof user.email === "string";
+}
+export function googleAuthGuard(req, res) {
+    return new Promise((resolve, reject) => {
+        passport.authenticate("google", { session: false }, (err, user, info) => {
+            if (err || !user || !isGoogleUser(user)) {
+                reject(new ApiError("Unauthorized", { status: 401 }));
+                return;
+            }
+            resolve(user);
+        })(req, res);
+    });
+}
+export function verifyAccessToken(token) {
+    try {
+        return verify(token, jwtSecret);
+    }
+    catch (error) {
+        throw new ApiError("Invalid token", { status: 401 });
+    }
+}
+export function verifyPlatformToken(platformToken) {
+    if (!platformJwtSecret) {
+        throw new ApiError("Platform token not set", { status: 401 });
+    }
+    try {
+        const payload = verify(platformToken, platformJwtSecret);
+        if (!payload?.email) {
+            throw new ApiError("email not found in token payload", { status: 500 });
+        }
+        return payload;
+    }
+    catch (error) {
+        throw new ApiError("Invalid  platform token", { status: 401 });
+    }
+}
+export function generateAccessToken(payload) {
+    return sign(payload, jwtSecret, { expiresIn: jwtExpiresIn });
+}
+export function generatePlatformToken(payload) {
+    if (!platformJwtSecret) {
+        throw new ApiError("Platform token not set", { status: 401 });
+    }
+    return sign(payload, platformJwtSecret, { expiresIn: "7d" });
+}
+//# sourceMappingURL=auth.helper.js.map

package/dist/modules/bo-backend/auth/auth.helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.helper.js","sourceRoot":"","sources":["../../../../src/modules/bo-backend/auth/auth.helper.ts"],"names":[],"mappings":"AACA,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEjF,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;AAQhE,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAEhD,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAEzC,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,CAAuB,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAMD,SAAS,YAAY,CAAC,IAAS;IAC7B,OAAO,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa;IACzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACtE,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,CAAuB,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,aAAqB;IACvD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE,iBAAiB,CAAe,CAAC;QACvE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,QAAQ,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA2B;IAC7D,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAmB;IACvD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC"}

package/dist/modules/bo-backend/auth/auth.service.d.ts

@@ -0,0 +1,5 @@
+import type { SiteContext } from "../../../site-context/site-context.types.js";
+import type { LoginFailed, LoginInput, LoginSuccess } from "./auth.types.js";
+export declare function loginUser(siteContext: SiteContext, user: LoginInput): Promise<LoginSuccess | LoginFailed>;
+export declare function getVerifiedAccountFromToken(siteContext: SiteContext, token: string): Promise<LoginSuccess | LoginFailed>;
+export declare function loginByPlatformToken(siteContext: SiteContext, token: string): Promise<LoginSuccess | LoginFailed>;

package/dist/modules/bo-backend/auth/auth.service.js

@@ -0,0 +1,144 @@
+import { strVal } from "@paroi/data-formatters-lib";
+import { ApiError } from "../../../common/api-error-handler.js";
+import { formatAccountPreferences } from "../../../common/data-format.js";
+import { appConf } from "../../../context.js";
+import { comparePassword } from "../../../helpers/passwordEncrypt-helper.js";
+import { devAccountId, getDevAccount, getPlatformAdminAccount, isDevAccountId, parsePlatformAdminAccountId, } from "../../../helpers/special-account.helpers.js";
+import { findAccountByEmail, findAccountByIdAndEmail } from "../account/account.queries.js";
+import { generateAccessToken, verifyAccessToken, verifyPlatformToken, } from "./auth.helper.js";
+export async function loginUser(siteContext, user) {
+    const defaultLanguage = siteContext.siteSchema.defaultLanguage;
+    let account;
+    if (appConf.devAccount?.email === user.email) {
+        account = validateDevAccount({
+            user,
+            devAccount: appConf.devAccount,
+        });
+    }
+    else {
+        account = await validateUser(siteContext, user);
+    }
+    if (!account) {
+        return {
+            message: "Unauthorized",
+            statusCode: 401,
+        };
+    }
+    const parsedPreferences = account.preferences
+        ? formatAccountPreferences(account.preferences)
+        : undefined;
+    return {
+        id: account.id,
+        email: account.email,
+        language: parsedPreferences?.language ?? defaultLanguage,
+        name: account.name,
+        token: generateAccessToken({
+            email: account.email,
+            id: account.id,
+            fqdn: siteContext.fqdn,
+        }),
+    };
+}
+export async function getVerifiedAccountFromToken(siteContext, token) {
+    let payload;
+    try {
+        payload = verifyAccessToken(token);
+        if (payload.fqdn !== siteContext.fqdn) {
+            throw new ApiError("Not the right token", { status: 403 });
+        }
+        const defaultLanguage = siteContext.siteSchema.defaultLanguage;
+        let account;
+        const parsedPlatformAccountId = parsePlatformAdminAccountId(payload.id);
+        if (isDevAccountId(payload.id)) {
+            account = getDevAccount(payload.id);
+        }
+        else if (parsedPlatformAccountId) {
+            account = getPlatformAdminAccount(parsedPlatformAccountId);
+        }
+        else {
+            account = await findAccountByIdAndEmail(siteContext, {
+                id: strVal(payload.id),
+                email: strVal(payload.email),
+            });
+        }
+        const parsedPreferences = account.preferences
+            ? formatAccountPreferences(account.preferences)
+            : undefined;
+        return {
+            email: account.email,
+            id: account.id,
+            language: parsedPreferences?.language ?? defaultLanguage,
+            name: account.name,
+            token,
+        };
+    }
+    catch (error) {
+        if (payload) {
+            siteContext.logger.warn(`Invalid token: ${JSON.stringify(payload)}`);
+        }
+        return {
+            statusCode: 401,
+            message: "Unauthorized",
+        };
+    }
+}
+export async function loginByPlatformToken(siteContext, token) {
+    try {
+        const payload = await verifyPlatformToken(token);
+        const defaultLanguage = siteContext.siteSchema.defaultLanguage;
+        let account;
+        const platAdmAccountIndex = (appConf.platformAdminAccounts ?? []).findIndex((account) => account.email === payload.email);
+        if (platAdmAccountIndex !== -1) {
+            account = getPlatformAdminAccount({ index: platAdmAccountIndex });
+        }
+        else {
+            const foundAccount = await findAccountByEmail(siteContext, payload.email);
+            if (!foundAccount) {
+                throw new ApiError("Account not found", { status: 404 });
+            }
+            account = foundAccount;
+        }
+        const parsedPreferences = account.preferences
+            ? formatAccountPreferences(account.preferences)
+            : undefined;
+        return {
+            id: account.id,
+            email: payload.email,
+            language: parsedPreferences?.language ?? defaultLanguage,
+            name: account.name,
+            token: generateAccessToken({
+                email: payload.email,
+                id: account.id,
+                fqdn: siteContext.fqdn,
+            }),
+        };
+    }
+    catch (error) {
+        siteContext.logger.error(error);
+        return {
+            statusCode: 401,
+            message: "Invalid account",
+        };
+    }
+}
+async function validateUser(siteContext, { email, password }) {
+    const user = await findAccountByEmail(siteContext, email);
+    let samePassword = false;
+    if (user?.passwordHash) {
+        samePassword = await comparePassword(password, user.passwordHash);
+    }
+    const canPass = user?.passwordHash && samePassword;
+    if (!canPass)
+        return;
+    return user;
+}
+function validateDevAccount({ user, devAccount, }) {
+    if (user.email !== devAccount.email || user.password !== devAccount.password)
+        return;
+    const { password, ...others } = devAccount;
+    return {
+        ...others,
+        id: devAccountId,
+    };
+}
+//# sourceMappingURL=auth.service.js.map

package/dist/modules/bo-backend/auth/auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.service.js","sourceRoot":"","sources":["../../../../src/modules/bo-backend/auth/auth.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EACL,YAAY,EACZ,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,2BAA2B,GAC5B,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC5F,OAAO,EAEL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,WAAwB,EACxB,IAAgB;IAEhB,MAAM,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC;IAE/D,IAAI,OAA+B,CAAC;IACpC,IAAI,OAAO,CAAC,UAAU,EAAE,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7C,OAAO,GAAG,kBAAkB,CAAC;YAC3B,IAAI;YACJ,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,cAAc;YACvB,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;QAC3C,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,IAAI,eAAe;QACxD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,mBAAmB,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,WAAW,CAAC,IAAI;SACvB,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAwB,EACxB,KAAa;IAEb,IAAI,OAAuC,CAAC;IAE5C,IAAI,CAAC;QACH,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC;QAE/D,IAAI,OAAmB,CAAC;QACxB,MAAM,uBAAuB,GAAG,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/B,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;aAAM,IAAI,uBAAuB,EAAE,CAAC;YACnC,OAAO,GAAG,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,uBAAuB,CAAC,WAAW,EAAE;gBACnD,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;YAC3C,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,IAAI,eAAe;YACxD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK;SACN,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO;YACL,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,cAAc;SACxB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAwB,EACxB,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAEjD,MAAM,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC;QAE/D,IAAI,OAAmB,CAAC;QACxB,MAAM,mBAAmB,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,SAAS,CACzE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAC7C,CAAC;QACF,IAAI,mBAAmB,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/B,OAAO,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,GAAG,YAAY,CAAC;QACzB,CAAC;QAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW;YAC3C,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,WAAW,CAAC;YAC/C,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,IAAI,eAAe;YACxD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,mBAAmB,CAAC;gBACzB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,WAAW,CAAC,IAAI;aACvB,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO;YACL,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,iBAAiB;SAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,WAAwB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAc;IACnF,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAE1D,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC;QACvB,YAAY,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,EAAE,YAAY,IAAI,YAAY,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO;IAErB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,EAC1B,IAAI,EACJ,UAAU,GACuC;IACjD,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ;QAAE,OAAO;IACrF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,UAAU,CAAC;IAC3C,OAAO;QACL,GAAG,MAAM;QACT,EAAE,EAAE,YAAY;KACjB,CAAC;AACJ,CAAC"}

package/dist/modules/bo-backend/auth/auth.types.d.ts

@@ -0,0 +1,27 @@
+export type LoginAction = SignInLoginAction | VerifyLoginAction;
+export interface SignInLoginAction {
+    action: "signIn";
+    email: string;
+    password: string;
+}
+export interface VerifyLoginAction {
+    action: "verify" | "loginWithPlatformToken";
+    token: string;
+}
+export interface LoginInput {
+    email: string;
+    password: string;
+}
+export interface OAuthSuccess {
+    email: string;
+}
+export interface LoginSuccess extends OAuthSuccess {
+    id: string;
+    name?: string;
+    language: string;
+    token: string;
+}
+export interface LoginFailed {
+    statusCode: 401;
+    message: string;
+}

package/dist/modules/bo-backend/auth/auth.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth.types.js.map

package/dist/modules/bo-backend/auth/auth.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.types.js","sourceRoot":"","sources":["../../../../src/modules/bo-backend/auth/auth.types.ts"],"names":[],"mappings":""}

package/dist/modules/bo-backend/backup/backup.controller.d.ts

@@ -0,0 +1,2 @@
+import type { Request, Response } from "express";
+export declare function downloadBackupController(req: Request, res: Response): Promise<Response<any, Record<string, any>>>;

package/dist/modules/bo-backend/backup/backup.controller.js

@@ -0,0 +1,26 @@
+import { checkBackupFileName, getBackup } from "@paroicms/connector";
+import { ApiError } from "../../../common/api-error-handler.js";
+import { getHttpRequestParameter, getReqSiteContext } from "../../../express/http-helpers.js";
+import { verifyDownloadToken } from "./backup.helper.js";
+export async function downloadBackupController(req, res) {
+    const siteContext = getReqSiteContext(req);
+    const backupName = getHttpRequestParameter(req, "backupName");
+    const token = req.query.t;
+    if (!token)
+        throw new Error("missing user token");
+    const { backupFile, contentType } = verifyDownloadToken(token);
+    if (!checkBackupFileName({ fqdn: req.hostname }, backupName)) {
+        throw new ApiError("Invalid payload", { status: 404 });
+    }
+    if (backupFile !== backupName) {
+        throw new ApiError("invalid token provided", { status: 400 });
+    }
+    const { fileStream, fileWeight } = await getBackup(siteContext, backupName);
+    res.status(200);
+    res.append("Cache-Control", "no-store");
+    res.append("Content-Type", contentType);
+    res.append("Content-Length", fileWeight.toString());
+    res.append("Content-Disposition", `attachment; filename=${backupName}`);
+    return fileStream.pipe(res);
+}
+//# sourceMappingURL=backup.controller.js.map

package/dist/modules/bo-backend/backup/backup.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.controller.js","sourceRoot":"","sources":["../../../../src/modules/bo-backend/backup/backup.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErE,OAAO,EAAE,QAAQ,EAAE,MAAM,sCAAsC,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC9F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACxE,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAW,CAAC;IAEpC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAElD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE/D,IAAI,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAE5E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChB,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IACxC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACxC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpD,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,wBAAwB,UAAU,EAAE,CAAC,CAAC;IACxE,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC"}