@proconnect-gouv/proconnect.identite 1.0.0

package/CHANGELOG.md

@@ -0,0 +1,96 @@
+# @proconnect-gouv/proconnect.identite
+
+## 1.0.0
+
+### Major Changes
+
+- [#1455](https://github.com/proconnect-gouv/proconnect-identite/pull/1455) [`38fffb0`](https://github.com/proconnect-gouv/proconnect-identite/commit/38fffb00ca5a5d2341a662f684d2555bbfb5ff02) Thanks [@douglasduteil](https://github.com/douglasduteil)! - 📦 Première version officiel des packages `@proconnect-gouv/*`
+
+## 0.9.0
+
+### Minor Changes
+
+- [#1385](https://github.com/proconnect-gouv/proconnect-identite/pull/1385) [`5906294`](https://github.com/proconnect-gouv/proconnect-identite/commit/5906294b6618d0d2cc1865a836886a35d740feb4) Thanks [@dependabot](https://github.com/apps/dependabot)! - feat: migration vers Zod v4
+
+  Migration de Zod v3 vers v4 - les utilisateurs du package doivent s'assurer que leur projet est compatible avec Zod v4 si ils importent des schémas ou types depuis ce package.
+
+## 0.8.1
+
+### Patch Changes
+
+- [#1317](https://github.com/proconnect-gouv/proconnect-identite/pull/1317) [`749329f`](https://github.com/proconnect-gouv/proconnect-identite/commit/749329f4279db13151d42337e578cacbed8d2a26) Thanks [@douglasduteil](https://github.com/douglasduteil)! - 🐛 Correction du sélecteur lors de la suppression de domaines de vérification
+
+  see [`b5893a5`](https://github.com/proconnect-gouv/proconnect-identite/commit/b5893a5412faeea47afd8b4c9683bae47d389089)
+
+## 0.8.0
+
+### Minor Changes
+
+- [#1284](https://github.com/proconnect-gouv/proconnect-identite/pull/1284) [`30db367`](https://github.com/proconnect-gouv/proconnect-identite/commit/30db367114350ae67fbdf3a283858addfab56d26) Thanks [@rebeccadumazert](https://github.com/rebeccadumazert)! - Renomme la vérification type "receipt_sent" en "proof_received"
+
+## 0.7.0
+
+### Minor Changes
+
+- [#1282](https://github.com/proconnect-gouv/proconnect-identite/pull/1282) [`a3b52c3`](https://github.com/proconnect-gouv/proconnect-identite/commit/a3b52c33470f24bbe164d2435c717cb1f2f0a932) Thanks [@rebeccadumazert](https://github.com/rebeccadumazert)! - Ajoute deux nouveaux types de vérification
+  - in_liste_dirigeants_rne : Liste des dirigeants RNE
+  - receipt_sent : Justificatif transmis
+
+## 0.6.0
+
+### Minor Changes
+
+- [#1251](https://github.com/proconnect-gouv/proconnect-identite/pull/1251) [`2bd56c8`](https://github.com/proconnect-gouv/proconnect-identite/commit/2bd56c8c857fd7a819cbc787faf030547e18023c) Thanks [@BenoitSerrano](https://github.com/BenoitSerrano)! - Centralize handling of email domains verification (addition, deletion, update for a specific domain)
+
+## 0.5.3
+
+### Patch Changes
+
+- [#1252](https://github.com/proconnect-gouv/proconnect-identite/pull/1252) [`d2d6759`](https://github.com/proconnect-gouv/proconnect-identite/commit/d2d6759458b98ccc153005537ac2f5d063d0495a) Thanks [@rdubigny](https://github.com/rdubigny)! - La vérification de domaine official_contact permet de créer un lien vérifié avec le type "domain" plutôt qu'un lien non vérifié lors d'une validation du domaine par hyyypertool.
+
+## 0.5.2
+
+### Patch Changes
+
+- [#1021](https://github.com/proconnect-gouv/proconnect-identite/pull/1021) [`86ad73c`](https://github.com/proconnect-gouv/proconnect-identite/commit/86ad73c9bb43f7171c0bda7b06fba14837449c1e) Thanks [@douglasduteil](https://github.com/douglasduteil)! - ❎ Les erreurs sont nommées
+
+## 0.5.1
+
+### Patch Changes
+
+- [#990](https://github.com/proconnect-gouv/proconnect-identite/pull/990) [`5ad2bd9`](https://github.com/proconnect-gouv/proconnect-identite/commit/5ad2bd9031d9b01902401990ba79affb0082eb43) Thanks [@douglasduteil](https://github.com/douglasduteil)! - 🐛 Correction d'un code d'erreur
+  - si l'organisation est introuvable, `markDomainAsVerifiedFactory` retourne une erreur `NotFoundError` au lieu de `InseeNotFoundError`
+
+## 0.5.0
+
+### Minor Changes
+
+- [#988](https://github.com/proconnect-gouv/proconnect-identite/pull/988) [`375ea4e`](https://github.com/proconnect-gouv/proconnect-identite/commit/375ea4e3c134bc70ae0bbda09663cc50fd511c59) Thanks [@douglasduteil](https://github.com/douglasduteil)! - ♻️ Prélevement d'un partie du buisness proconnect identité
+
+## 0.4.0
+
+### Minor Changes
+
+- [#983](https://github.com/proconnect-gouv/proconnect-identite/pull/983) [`5f866a6`](https://github.com/proconnect-gouv/proconnect-identite/commit/5f866a6c57642229f8ccf8d517dc55519e7abee8) Thanks [@douglasduteil](https://github.com/douglasduteil)! - ♻️ Prélevement d'un partie du buisness proconnect identité
+
+## 0.3.2
+
+### Patch Changes
+
+- [#975](https://github.com/proconnect-gouv/proconnect-identite/pull/975) [`8e57ecc`](https://github.com/proconnect-gouv/proconnect-identite/commit/8e57eccff4d3d614a4264b63f2583a63f82a88e6) Thanks [@douglasduteil](https://github.com/douglasduteil)! - 🚚 Renommage de moncomptepro en proconnect-identite
+
+## 0.3.1
+
+### Patch Changes
+
+- [#964](https://github.com/proconnect-gouv/proconnect-identite/pull/964) [`eb63af3`](https://github.com/proconnect-gouv/proconnect-identite/commit/eb63af3bf33139adece820c1cfadf3ee387713f1) Thanks [@douglasduteil](https://github.com/douglasduteil)! - 🧑‍💻 Ajout du package @gouvfr-lasuite/proconnect.devtools.typescript
+
+  Partage de la configuration de TypeScript entre les packages.
+
+## 0.3.0
+
+### Minor Changes
+
+- [#913](https://github.com/proconnect-gouv/proconnect-identite/pull/913) [`21d47b6`](https://github.com/proconnect-gouv/proconnect-identite/commit/21d47b6c00670b7bbea1ce1f59b96a91c59bbe7a) Thanks [@douglasduteil](https://github.com/douglasduteil)! - ♻️ Prélevement d'un partie du buisness proconnect identité
+
+  Dans le cadres la migration du script d'import de comptes coop, une partie de du buisness proconnect est déplacées dans le package `@gouvfr-lasuite/proconnect.identite` pour permettre leur réutilisation dans Hyyypertool.

package/dist/data/organization/domains-whitelist.d.ts

@@ -0,0 +1,2 @@
+export declare const DOMAINS_WHITELIST: Map<string, string[]>;
+//# sourceMappingURL=domains-whitelist.d.ts.map

package/dist/data/organization/domains-whitelist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains-whitelist.d.ts","sourceRoot":"","sources":["../../../src/data/organization/domains-whitelist.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iBAAiB,uBAK5B,CAAC"}

package/dist/data/organization/domains-whitelist.js

@@ -0,0 +1,7 @@
+//
+export const DOMAINS_WHITELIST = new Map([
+    [
+        "11000201100044", // ChorusPro siret
+        ["finances.gouv.fr"], // domains to whitelist
+    ],
+]);

package/dist/data/organization/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./domains-whitelist.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/data/organization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/organization/index.ts"],"names":[],"mappings":"AAEA,cAAc,wBAAwB,CAAC"}

package/dist/data/organization/index.js

@@ -0,0 +1,2 @@
+//
+export * from "./domains-whitelist.js";

package/dist/errors/index.d.ts

@@ -0,0 +1,22 @@
+export declare class InvalidCertificationError extends Error {
+    constructor(message?: string, options?: ErrorOptions);
+}
+export declare class InvalidSiretError extends Error {
+    constructor(message?: string, options?: ErrorOptions);
+}
+export declare class NotFoundError extends Error {
+    constructor(message?: string, options?: ErrorOptions);
+}
+export declare class OrganizationNotActiveError extends Error {
+    constructor(message?: string, options?: ErrorOptions);
+}
+export declare class OrganizationNotFoundError extends Error {
+    constructor(message?: string, options?: ErrorOptions);
+}
+export declare class UserNotFoundError extends Error {
+    constructor(message?: string, options?: ErrorOptions);
+}
+export declare class ModerationNotFoundError extends Error {
+    constructor(message?: string, options?: ErrorOptions);
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAEA,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIrD;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIrD;AAED,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIrD;AAED,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIrD;AAED,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIrD;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIrD;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIrD"}

package/dist/errors/index.js

@@ -0,0 +1,43 @@
+//
+export class InvalidCertificationError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "InvalidCertificationError";
+    }
+}
+export class InvalidSiretError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "InvalidSiretError";
+    }
+}
+export class NotFoundError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "NotFoundError";
+    }
+}
+export class OrganizationNotActiveError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "OrganizationNotActiveError";
+    }
+}
+export class OrganizationNotFoundError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "OrganizationNotFoundError";
+    }
+}
+export class UserNotFoundError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "UserNotFoundError";
+    }
+}
+export class ModerationNotFoundError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "ModerationNotFoundError";
+    }
+}

package/dist/managers/certification/distance.d.ts

@@ -0,0 +1,4 @@
+import type { IdentityVector } from "#src/types";
+export declare const millisecondsInDay = 86400000;
+export declare function distance(franceconnectUserInfo: IdentityVector, sourceDirigeant: IdentityVector): number;
+//# sourceMappingURL=distance.d.ts.map

package/dist/managers/certification/distance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"distance.d.ts","sourceRoot":"","sources":["../../../src/managers/certification/distance.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAMjD,eAAO,MAAM,iBAAiB,WAAW,CAAC;AAE1C,wBAAgB,QAAQ,CACtB,qBAAqB,EAAE,cAAc,EACrC,eAAe,EAAE,cAAc,GAC9B,MAAM,CA2BR"}

package/dist/managers/certification/distance.js

@@ -0,0 +1,16 @@
+//
+import leven from "leven";
+//
+// \from https://github.com/date-fns/date-fns/blob/v4.1.0/src/constants/index.ts#L84
+export const millisecondsInDay = 86400000;
+export function distance(franceconnectUserInfo, sourceDirigeant) {
+    const sameGivenName = () => leven(franceconnectUserInfo.given_name?.toUpperCase() ||
+        Math.random().toString(36), sourceDirigeant.given_name?.toUpperCase() || Math.random().toString(36));
+    const sameFamilyName = () => leven(franceconnectUserInfo.family_name?.toUpperCase() ||
+        Math.random().toString(36), sourceDirigeant.family_name?.toUpperCase() || Math.random().toString(36));
+    const sameBirthDay = () => (Number(sourceDirigeant.birthdate) -
+        Number(franceconnectUserInfo.birthdate)) /
+        millisecondsInDay;
+    const sameBirthPlace = () => leven(franceconnectUserInfo.birthplace || Math.random().toString(36), sourceDirigeant.birthplace || Math.random().toString(36));
+    return [sameGivenName, sameFamilyName, sameBirthDay, sameBirthPlace].reduce((value, metric) => value + metric(), 0);
+}

package/dist/managers/certification/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./distance.js";
+export * from "./is-organization-dirigeant.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/managers/certification/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/managers/certification/index.ts"],"names":[],"mappings":"AAEA,cAAc,eAAe,CAAC;AAC9B,cAAc,gCAAgC,CAAC"}

package/dist/managers/certification/index.js

@@ -0,0 +1,3 @@
+//
+export * from "./distance.js";
+export * from "./is-organization-dirigeant.js";

package/dist/managers/certification/is-organization-dirigeant.d.ts

@@ -0,0 +1,15 @@
+import type { GetFranceConnectUserInfoHandler } from "#src/repositories/user";
+import type { EntrepriseApiInfogreffeRepository, EntrepriseApiInseeRepository } from "@proconnect-gouv/proconnect.entreprise/api";
+import type { InseeApiRepository } from "@proconnect-gouv/proconnect.insee/api";
+type IsOrganizationExecutiveFactoryFactoryConfig = {
+    EntrepriseApiInfogreffeRepository: EntrepriseApiInfogreffeRepository;
+    EntrepriseApiInseeRepository: Pick<EntrepriseApiInseeRepository, "findBySiret">;
+    EQUALITY_THRESHOLD?: number;
+    getFranceConnectUserInfo: GetFranceConnectUserInfoHandler;
+    InseeApiRepository: Pick<InseeApiRepository, "findBySiret">;
+    log?: typeof console.log;
+};
+export declare function isOrganizationDirigeantFactory(config: IsOrganizationExecutiveFactoryFactoryConfig): (siret: string, user_id: number) => Promise<boolean>;
+export type IsOrganizationDirigeantHandler = ReturnType<typeof isOrganizationDirigeantFactory>;
+export {};
+//# sourceMappingURL=is-organization-dirigeant.d.ts.map

package/dist/managers/certification/is-organization-dirigeant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-organization-dirigeant.d.ts","sourceRoot":"","sources":["../../../src/managers/certification/is-organization-dirigeant.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAG9E,OAAO,KAAK,EACV,iCAAiC,EACjC,4BAA4B,EAC7B,MAAM,4CAA4C,CAAC;AAEpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAMhF,KAAK,2CAA2C,GAAG;IACjD,iCAAiC,EAAE,iCAAiC,CAAC;IACrE,4BAA4B,EAAE,IAAI,CAChC,4BAA4B,EAC5B,aAAa,CACd,CAAC;IACF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,+BAA+B,CAAC;IAC1D,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;IAC5D,GAAG,CAAC,EAAE,OAAO,OAAO,CAAC,GAAG,CAAC;CAC1B,CAAC;AAIF,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,2CAA2C,IAYjD,OAAO,MAAM,EACb,SAAS,MAAM,sBAoFlB;AAED,MAAM,MAAM,8BAA8B,GAAG,UAAU,CACrD,OAAO,8BAA8B,CACtC,CAAC"}

package/dist/managers/certification/is-organization-dirigeant.js

@@ -0,0 +1,60 @@
+//
+import { NotFoundError } from "#src/errors";
+import { fromInfogreffe } from "#src/mappers/certification";
+import { fromSiret } from "#src/mappers/organization";
+import { isEntrepriseUnipersonnelle } from "#src/services/organization";
+import { formatBirthdate } from "@proconnect-gouv/proconnect.insee/formatters";
+import { distance } from "./distance.js";
+//
+export function isOrganizationDirigeantFactory(config) {
+    const { EQUALITY_THRESHOLD = 0, EntrepriseApiInseeRepository, EntrepriseApiInfogreffeRepository, InseeApiRepository, getFranceConnectUserInfo, log = () => { }, } = config;
+    return async function isOrganizationDirigeant(siret, user_id) {
+        const establishment = await EntrepriseApiInseeRepository.findBySiret(siret);
+        const franceconnectUserInfo = await getFranceConnectUserInfo(user_id);
+        if (!franceconnectUserInfo) {
+            throw new NotFoundError("FranceConnect UserInfo not found");
+        }
+        const sourceDirigeants = await getSourceDirigeantsFromEstablishment(establishment);
+        if (sourceDirigeants.length === 0) {
+            throw new NotFoundError("No mandataires found");
+        }
+        const distances = sourceDirigeants.map((sourceDirigeant) => Math.abs(distance(franceconnectUserInfo, sourceDirigeant)));
+        const closestSourceDirigeantDistance = Math.min(...distances);
+        const closestSourceDirigeant = sourceDirigeants[distances.indexOf(closestSourceDirigeantDistance)];
+        log(closestSourceDirigeant, " is the closest source dirigeant to ", franceconnectUserInfo, " with a distance of ", closestSourceDirigeantDistance);
+        return closestSourceDirigeantDistance === EQUALITY_THRESHOLD;
+    };
+    async function getSourceDirigeantsFromEstablishment(establishment) {
+        const organization = fromSiret(establishment);
+        if (isEntrepriseUnipersonnelle({
+            cached_libelle_categorie_juridique: organization.libelleCategorieJuridique,
+            cached_tranche_effectifs: organization.trancheEffectifs,
+        })) {
+            return getSourceDirigeantsFromInsseApi(establishment.siret);
+        }
+        return getSourceDirigeantsFromEntrepriseApi(establishment.unite_legale.siren);
+    }
+    async function getSourceDirigeantsFromInsseApi(siret) {
+        const { uniteLegale } = await InseeApiRepository.findBySiret(siret);
+        const birthdate = formatBirthdate(String(uniteLegale?.dateNaissanceUniteLegale));
+        return [
+            {
+                birthplace: uniteLegale?.codeCommuneNaissanceUniteLegale ?? null,
+                birthdate: isNaN(birthdate.getTime()) ? null : birthdate,
+                family_name: uniteLegale?.nomUniteLegale ?? null,
+                given_name: [
+                    uniteLegale?.prenom1UniteLegale,
+                    uniteLegale?.prenom2UniteLegale,
+                    uniteLegale?.prenom3UniteLegale,
+                    uniteLegale?.prenom4UniteLegale,
+                ]
+                    .filter(Boolean)
+                    .join(" "),
+            },
+        ];
+    }
+    async function getSourceDirigeantsFromEntrepriseApi(siren) {
+        const mandataires = await EntrepriseApiInfogreffeRepository.findMandatairesSociauxBySiren(siren);
+        return mandataires.map((mandataire) => fromInfogreffe(mandataire));
+    }
+}

package/dist/managers/franceconnect/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./openid-client.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/managers/franceconnect/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/managers/franceconnect/index.ts"],"names":[],"mappings":"AAEA,cAAc,oBAAoB,CAAC"}

package/dist/managers/franceconnect/index.js

@@ -0,0 +1,2 @@
+//
+export * from "./openid-client.js";

package/dist/managers/franceconnect/openid-client.d.ts

@@ -0,0 +1,37 @@
+import { type ClientMetadata } from "openid-client";
+export type FranceConnectConfigurationParams = {
+    allowLocalhost?: boolean;
+    clientId: string;
+    clientSecret: string;
+    metadata: Partial<ClientMetadata>;
+    server: URL;
+};
+export declare function getFranceConnectConfigurationFactory(params: FranceConnectConfigurationParams): () => Promise<import("openid-client").Configuration>;
+export type GetFranceConnectConfigurationHandler = ReturnType<typeof getFranceConnectConfigurationFactory>;
+export declare function createOidcChecks(): {
+    state: string;
+    nonce: string;
+};
+export declare function getFranceConnectRedirectUrlFactory(getConfiguration: GetFranceConnectConfigurationHandler, parameters: {
+    callbackUrl: string;
+    scope: string;
+}): (nonce: string, state: string) => Promise<URL>;
+export declare function getFranceConnectUserFactory(getConfiguration: GetFranceConnectConfigurationHandler): (parameters: {
+    code: string;
+    currentUrl: URL;
+    expectedNonce: string;
+    expectedState: string;
+}) => Promise<{
+    user_info: {
+        birthdate: Date;
+        birthplace: string;
+        family_name: string;
+        gender: string;
+        given_name: string;
+        sub: string;
+        preferred_username?: string | undefined;
+    };
+    id_token: string | undefined;
+}>;
+export declare function getFranceConnectLogoutRedirectUrlFactory(getConfiguration: GetFranceConnectConfigurationHandler): (id_token_hint: string, post_logout_redirect_uri: string, state: string) => Promise<URL>;
+//# sourceMappingURL=openid-client.d.ts.map

package/dist/managers/franceconnect/openid-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openid-client.d.ts","sourceRoot":"","sources":["../../../src/managers/franceconnect/openid-client.ts"],"names":[],"mappings":"AAMA,OAAO,EAUL,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AAKvB,MAAM,MAAM,gCAAgC,GAAG;IAC7C,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAClC,MAAM,EAAE,GAAG,CAAC;CACb,CAAC;AAEF,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,gCAAgC,wDAYzC;AAED,MAAM,MAAM,oCAAoC,GAAG,UAAU,CAC3D,OAAO,oCAAoC,CAC5C,CAAC;AAEF,wBAAgB,gBAAgB;;;EAK/B;AAED,wBAAgB,kCAAkC,CAChD,gBAAgB,EAAE,oCAAoC,EACtD,UAAU,EAAE;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf,IAG0C,OAAO,MAAM,EAAE,OAAO,MAAM,kBAaxE;AAED,wBAAgB,2BAA2B,CACzC,gBAAgB,EAAE,oCAAoC,IAEX,YAAY;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,GAAG,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;;;;;;;;;;;GA0BF;AAED,wBAAgB,wCAAwC,CACtD,gBAAgB,EAAE,oCAAoC,IAGpD,eAAe,MAAM,EACrB,0BAA0B,MAAM,EAChC,OAAO,MAAM,kBAShB"}

package/dist/managers/franceconnect/openid-client.js

@@ -0,0 +1,54 @@
+//
+import { FranceConnectUserInfoResponseSchema, } from "#src/types";
+import { allowInsecureRequests, authorizationCodeGrant, buildAuthorizationUrl, buildEndSessionUrl, ClientSecretBasic, discovery, fetchUserInfo, randomNonce, randomState, } from "openid-client";
+import { z } from "zod";
+export function getFranceConnectConfigurationFactory(params) {
+    const { allowLocalhost, clientId, clientSecret, metadata, server } = params;
+    return function getFranceConnectConfiguration() {
+        return discovery(server, clientId, metadata, ClientSecretBasic(clientSecret), allowLocalhost ? { execute: [allowInsecureRequests] } : undefined);
+    };
+}
+export function createOidcChecks() {
+    return {
+        state: randomState(),
+        nonce: randomNonce(),
+    };
+}
+export function getFranceConnectRedirectUrlFactory(getConfiguration, parameters) {
+    const { callbackUrl, scope } = parameters;
+    return async function getFranceConnectUser(nonce, state) {
+        const config = await getConfiguration();
+        return buildAuthorizationUrl(config, new URLSearchParams({
+            acr_values: "eidas1",
+            nonce,
+            redirect_uri: callbackUrl,
+            scope,
+            state,
+        }));
+    };
+}
+export function getFranceConnectUserFactory(getConfiguration) {
+    return async function getFranceConnectUser(parameters) {
+        const { code, currentUrl, expectedNonce, expectedState } = parameters;
+        const config = await getConfiguration();
+        const tokens = await authorizationCodeGrant(config, currentUrl, {
+            expectedNonce,
+            expectedState,
+        }, { code });
+        const claims = tokens.claims();
+        const { sub } = await z.object({ sub: z.string() }).parseAsync(claims);
+        const user_info_response = await fetchUserInfo(config, tokens.access_token, sub);
+        const user_info = await FranceConnectUserInfoResponseSchema.parseAsync(user_info_response);
+        return { user_info, id_token: tokens.id_token };
+    };
+}
+export function getFranceConnectLogoutRedirectUrlFactory(getConfiguration) {
+    return async function getFranceConnectLogoutRedirectUrl(id_token_hint, post_logout_redirect_uri, state) {
+        const config = await getConfiguration();
+        return buildEndSessionUrl(config, {
+            id_token_hint,
+            post_logout_redirect_uri,
+            state,
+        });
+    };
+}

package/dist/managers/organization/force-join-organization.d.ts

@@ -0,0 +1,29 @@
+import type { FindEmailDomainsByOrganizationIdHandler } from "#src/repositories/email-domain";
+import type { GetByIdHandler as GetOrganizationByIdHandler, LinkUserToOrganizationHandler } from "#src/repositories/organization";
+import type { GetByIdHandler as GetUserByIdHandler } from "#src/repositories/user";
+type FactoryDependencies = {
+    findEmailDomainsByOrganizationId: FindEmailDomainsByOrganizationIdHandler;
+    getById: GetOrganizationByIdHandler;
+    getUserById: GetUserByIdHandler;
+    linkUserToOrganization: LinkUserToOrganizationHandler;
+};
+export declare function forceJoinOrganizationFactory({ findEmailDomainsByOrganizationId, getById, getUserById, linkUserToOrganization, }: FactoryDependencies): ({ organization_id, user_id, is_external, }: {
+    organization_id: number;
+    user_id: number;
+    is_external?: boolean;
+}) => Promise<{
+    is_external: boolean;
+    verification_type: "code_sent_to_official_contact_email" | "domain" | "imported_from_coop_mediation_numerique" | "imported_from_inclusion_connect" | "in_liste_dirigeants_rna" | "in_liste_dirigeants_rne" | "no_validation_means_available" | "no_verification_means_for_entreprise_unipersonnelle" | "no_verification_means_for_small_association" | "official_contact_email" | "organization_dirigeant" | "proof_received" | "bypassed" | null;
+    verified_at: Date | null;
+    has_been_greeted: boolean;
+    needs_official_contact_email_verification: boolean;
+    official_contact_email_verification_token: string | null;
+    official_contact_email_verification_sent_at: Date | null;
+    user_id: number;
+    organization_id: number;
+    created_at: Date;
+    updated_at: Date;
+}>;
+export type ForceJoinOrganizationHandler = ReturnType<typeof forceJoinOrganizationFactory>;
+export {};
+//# sourceMappingURL=force-join-organization.d.ts.map

package/dist/managers/organization/force-join-organization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"force-join-organization.d.ts","sourceRoot":"","sources":["../../../src/managers/organization/force-join-organization.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,gCAAgC,CAAC;AAC9F,OAAO,KAAK,EACV,cAAc,IAAI,0BAA0B,EAC5C,6BAA6B,EAC9B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,cAAc,IAAI,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAQnF,KAAK,mBAAmB,GAAG;IACzB,gCAAgC,EAAE,uCAAuC,CAAC;IAC1E,OAAO,EAAE,0BAA0B,CAAC;IACpC,WAAW,EAAE,kBAAkB,CAAC;IAChC,sBAAsB,EAAE,6BAA6B,CAAC;CACvD,CAAC;AAIF,wBAAgB,4BAA4B,CAAC,EAC3C,gCAAgC,EAChC,OAAO,EACP,WAAW,EACX,sBAAsB,GACvB,EAAE,mBAAmB,IACwB,4CAIzC;IACD,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;;;;;;;;;;;;GA+CF;AAED,MAAM,MAAM,4BAA4B,GAAG,UAAU,CACnD,OAAO,4BAA4B,CACpC,CAAC"}

package/dist/managers/organization/force-join-organization.js

@@ -0,0 +1,33 @@
+//
+import { getEmailDomain } from "@proconnect-gouv/proconnect.core/services/email";
+import { match } from "ts-pattern";
+import { UserOrganizationLinkVerificationTypeSchema } from "../../types/index.js";
+//
+export function forceJoinOrganizationFactory({ findEmailDomainsByOrganizationId, getById, getUserById, linkUserToOrganization, }) {
+    return async function forceJoinOrganization({ organization_id, user_id, is_external = false, }) {
+        const user = await getUserById(user_id);
+        // Ensure that the organization exists (Ceinture Bretelle)
+        await getById(organization_id);
+        const { email } = user;
+        const domain = getEmailDomain(email);
+        const organizationEmailDomains = await findEmailDomainsByOrganizationId(organization_id);
+        const link_verification_type = organizationEmailDomains
+            .filter(({ domain: currentDomain }) => currentDomain === domain)
+            .reduce((acc, { verification_type }) => {
+            if (acc === "domain") {
+                return acc;
+            }
+            return match(verification_type)
+                .with("verified", "trackdechets_postal_mail", "external", "official_contact", () => UserOrganizationLinkVerificationTypeSchema.enum.domain)
+                .with(null, "blacklisted", "refused", () => UserOrganizationLinkVerificationTypeSchema.enum
+                .no_validation_means_available)
+                .exhaustive();
+        }, "no_validation_means_available");
+        return await linkUserToOrganization({
+            organization_id,
+            user_id,
+            is_external,
+            verification_type: link_verification_type,
+        });
+    };
+}

package/dist/managers/organization/get-organization-info.d.ts

@@ -0,0 +1,5 @@
+import { type OrganizationInfo } from "#src/types";
+import type { EntrepriseApiInseeRepository } from "@proconnect-gouv/proconnect.entreprise/api";
+export declare function getOrganizationInfoFactory(config: EntrepriseApiInseeRepository): (siretOrSiren: string) => Promise<OrganizationInfo>;
+export type GetOrganizationInfoHandler = ReturnType<typeof getOrganizationInfoFactory>;
+//# sourceMappingURL=get-organization-info.d.ts.map

package/dist/managers/organization/get-organization-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-organization-info.d.ts","sourceRoot":"","sources":["../../../src/managers/organization/get-organization-info.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAQ/F,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,4BAA4B,IAKlC,cAAc,MAAM,KACnB,OAAO,CAAC,gBAAgB,CAAC,CAiC7B;AAED,MAAM,MAAM,0BAA0B,GAAG,UAAU,CACjD,OAAO,0BAA0B,CAClC,CAAC"}

package/dist/managers/organization/get-organization-info.js

@@ -0,0 +1,33 @@
+//
+import { InvalidSiretError, NotFoundError } from "#src/errors";
+import { OrganizationInfoMapper } from "#src/mappers";
+import {} from "#src/types";
+import { EntrepriseApiConnectionError, EntrepriseApiInvalidSiret, } from "@proconnect-gouv/proconnect.entreprise/types";
+//
+export function getOrganizationInfoFactory(config) {
+    const { findBySiren, findBySiret } = config;
+    return async function getOrganizationInfo(siretOrSiren) {
+        try {
+            let establishment;
+            if (siretOrSiren.match(/^\d{14}$/)) {
+                establishment = OrganizationInfoMapper.fromSiret(await findBySiret(siretOrSiren));
+            }
+            else if (siretOrSiren.match(/^\d{9}$/)) {
+                establishment = OrganizationInfoMapper.fromSiret(await findBySiren(siretOrSiren));
+            }
+            else {
+                throw new InvalidSiretError();
+            }
+            const { statutDiffusion } = establishment;
+            if (statutDiffusion === "non_diffusible") {
+                throw new NotFoundError();
+            }
+            return establishment;
+        }
+        catch (e) {
+            if (EntrepriseApiInvalidSiret.isInvalidSiret(e))
+                throw new InvalidSiretError();
+            throw new EntrepriseApiConnectionError("unknown error while fetching entreprise.api.gouv.fr", { cause: e });
+        }
+    };
+}

package/dist/managers/organization/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./force-join-organization.js";
+export * from "./get-organization-info.js";
+export * from "./mark-domain-as-verified.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/managers/organization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/managers/organization/index.ts"],"names":[],"mappings":"AAEA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC"}

package/dist/managers/organization/index.js

@@ -0,0 +1,4 @@
+//
+export * from "./force-join-organization.js";
+export * from "./get-organization-info.js";
+export * from "./mark-domain-as-verified.js";

package/dist/managers/organization/mark-domain-as-verified.d.ts

@@ -0,0 +1,20 @@
+import type { GetUsersByOrganizationHandler } from "#src/repositories/organization";
+import type { UpdateUserOrganizationLinkHandler } from "#src/repositories/user";
+import type { AddDomainHandler, DeleteEmailDomainsByVerificationTypesHandler } from "@proconnect-gouv/proconnect.identite/repositories/email-domain";
+import type { FindByIdHandler } from "@proconnect-gouv/proconnect.identite/repositories/organization";
+import { type EmailDomainVerificationType } from "@proconnect-gouv/proconnect.identite/types";
+type FactoryDependencies = {
+    addDomain: AddDomainHandler;
+    deleteEmailDomainsByVerificationTypes: DeleteEmailDomainsByVerificationTypesHandler;
+    findOrganizationById: FindByIdHandler;
+    getUsers: GetUsersByOrganizationHandler;
+    updateUserOrganizationLink: UpdateUserOrganizationLinkHandler;
+};
+export declare function markDomainAsVerifiedFactory({ addDomain, deleteEmailDomainsByVerificationTypes, findOrganizationById, getUsers, updateUserOrganizationLink, }: FactoryDependencies): ({ organization_id, domain, domain_verification_type, }: {
+    organization_id: number;
+    domain: string;
+    domain_verification_type: NonNullable<EmailDomainVerificationType>;
+}) => Promise<import("@proconnect-gouv/proconnect.identite/types").EmailDomain>;
+export type MarkDomainAsVerifiedHandler = ReturnType<typeof markDomainAsVerifiedFactory>;
+export {};
+//# sourceMappingURL=mark-domain-as-verified.d.ts.map

package/dist/managers/organization/mark-domain-as-verified.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mark-domain-as-verified.d.ts","sourceRoot":"","sources":["../../../src/managers/organization/mark-domain-as-verified.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,KAAK,EACV,gBAAgB,EAChB,4CAA4C,EAC7C,MAAM,gEAAgE,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gEAAgE,CAAC;AACtG,OAAO,EAKL,KAAK,2BAA2B,EACjC,MAAM,4CAA4C,CAAC;AAMpD,KAAK,mBAAmB,GAAG;IACzB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,qCAAqC,EAAE,4CAA4C,CAAC;IACpF,oBAAoB,EAAE,eAAe,CAAC;IACtC,QAAQ,EAAE,6BAA6B,CAAC;IACxC,0BAA0B,EAAE,iCAAiC,CAAC;CAC/D,CAAC;AAEF,wBAAgB,2BAA2B,CAAC,EAC1C,SAAS,EACT,qCAAqC,EACrC,oBAAoB,EACpB,QAAQ,EACR,0BAA0B,GAC3B,EAAE,mBAAmB,IAMuB,wDAIxC;IACD,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,wBAAwB,EAAE,WAAW,CAAC,2BAA2B,CAAC,CAAC;CACpE,+EAoFF;AAED,MAAM,MAAM,2BAA2B,GAAG,UAAU,CAClD,OAAO,2BAA2B,CACnC,CAAC"}