@proteinjs/user-server 1.21.0 → 1.21.1

package/dist/test/ExecutePasswordReset.test.js

@@ -0,0 +1,394 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var moment_1 = __importDefault(require("moment"));
+var db_1 = require("@proteinjs/db");
+var logger_1 = require("@proteinjs/logger");
+var user_1 = require("@proteinjs/user");
+var executePasswordReset_1 = require("../src/routes/executePasswordReset");
+var PasswordHasher_1 = require("../src/authentication/PasswordHasher");
+var PasswordResetToken_1 = require("../src/authentication/PasswordResetToken");
+var UserServerTestEnvironment_1 = require("./UserServerTestEnvironment");
+var testEnv = new UserServerTestEnvironment_1.UserServerTestEnvironment();
+var invokeExecute = function (body) { return __awaiter(void 0, void 0, void 0, function () {
+    var outcome, response;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                outcome = { status: 200 };
+                response = {
+                    status: function (code) {
+                        outcome.status = code;
+                        return this;
+                    },
+                    send: function (body) {
+                        outcome.body = body;
+                    },
+                };
+                return [4 /*yield*/, executePasswordReset_1.executePasswordReset.onRequest({ body: body }, response)];
+            case 1:
+                _a.sent();
+                return [2 /*return*/, outcome];
+        }
+    });
+}); };
+var mintToken = function () { return new PasswordResetToken_1.PasswordResetToken().mint(); };
+var armResetToken = function (email, token, expiration) { return __awaiter(void 0, void 0, void 0, function () {
+    var user;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, testEnv.createUser({ name: 'Reset User', email: email })];
+            case 1:
+                user = _a.sent();
+                return [4 /*yield*/, (0, db_1.getDbAsSystem)().update(user_1.tables.User, {
+                        id: user.id,
+                        passwordResetToken: token,
+                        passwordResetTokenExpiration: expiration,
+                    })];
+            case 2:
+                _a.sent();
+                return [2 /*return*/, user];
+        }
+    });
+}); };
+var userRow = function (id) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+    switch (_a.label) {
+        case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().get(user_1.tables.User, { id: id })];
+        case 1: return [2 /*return*/, _a.sent()];
+    }
+}); }); };
+/** Every password in the table, by email — the whole-table outcome a refused request must leave untouched. */
+var passwordsByEmail = function () { return __awaiter(void 0, void 0, void 0, function () {
+    var byEmail, _i, _a, user;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                byEmail = {};
+                _i = 0;
+                return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.User, {})];
+            case 1:
+                _a = _b.sent();
+                _b.label = 2;
+            case 2:
+                if (!(_i < _a.length)) return [3 /*break*/, 4];
+                user = _a[_i];
+                byEmail[user.email] = user.password;
+                _b.label = 3;
+            case 3:
+                _i++;
+                return [3 /*break*/, 2];
+            case 4: return [2 /*return*/, byEmail];
+        }
+    });
+}); };
+describe('executePasswordReset route', function () {
+    beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.beforeAll()];
+                case 1:
+                    _a.sent();
+                    // No pending reset — the account a `null` token's `IS NULL` filter would match.
+                    return [4 /*yield*/, testEnv.createUser({ name: 'Idle User', email: 'reset-idle@test.local' })];
+                case 2:
+                    // No pending reset — the account a `null` token's `IS NULL` filter would match.
+                    _a.sent();
+                    // An emptied token column — the account an empty token would match.
+                    return [4 /*yield*/, armResetToken('reset-emptied@test.local', '', (0, moment_1.default)().add(1, 'hour'))];
+                case 3:
+                    // An emptied token column — the account an empty token would match.
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    afterAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.afterAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    describe('a request without a well-formed token is refused before any lookup', function () {
+        it.each([
+            ['absent', {}],
+            ['null', { token: null }],
+            ['empty', { token: '' }],
+            ['not a token string', { token: 'tok-valid-1' }],
+            ['a number', { token: 123 }],
+            ['an array', { token: ['a', 'b'] }],
+            ['an object', { token: { passwordResetToken: null } }],
+        ])('%s: 400, and no password in the table changes', function (_label, tokenField) { return __awaiter(void 0, void 0, void 0, function () {
+            var before, outcome, _a;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0: return [4 /*yield*/, passwordsByEmail()];
+                    case 1:
+                        before = _b.sent();
+                        return [4 /*yield*/, invokeExecute(__assign(__assign({}, tokenField), { newPassword: 'hijacked' }))];
+                    case 2:
+                        outcome = _b.sent();
+                        expect(outcome.status).toBe(400);
+                        expect(outcome.body).toEqual({ error: 'Invalid or expired reset token' });
+                        _a = expect;
+                        return [4 /*yield*/, passwordsByEmail()];
+                    case 3:
+                        _a.apply(void 0, [_b.sent()]).toEqual(before);
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+    });
+    it('a live token resets the password once: the row verifies it, the token clears, a re-presentation is refused', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var token, user, first, afterFirst, second, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    token = mintToken();
+                    return [4 /*yield*/, armResetToken('reset-live@test.local', token, (0, moment_1.default)().add(1, 'hour'))];
+                case 1:
+                    user = _b.sent();
+                    return [4 /*yield*/, invokeExecute({ token: token, newPassword: 'first new password' })];
+                case 2:
+                    first = _b.sent();
+                    expect(first.status).toBe(200);
+                    expect(first.body).toEqual({ message: 'Password has been successfully reset' });
+                    return [4 /*yield*/, userRow(user.id)];
+                case 3:
+                    afterFirst = _b.sent();
+                    return [4 /*yield*/, expect(new PasswordHasher_1.PasswordHasher().verify(afterFirst.password, 'first new password')).resolves.toBe(true)];
+                case 4:
+                    _b.sent();
+                    expect(afterFirst.passwordResetToken).toBeNull();
+                    expect(afterFirst.passwordResetTokenExpiration).toBeNull();
+                    return [4 /*yield*/, invokeExecute({ token: token, newPassword: 'second new password' })];
+                case 5:
+                    second = _b.sent();
+                    expect(second.status).toBe(400);
+                    _a = expect;
+                    return [4 /*yield*/, userRow(user.id)];
+                case 6:
+                    _a.apply(void 0, [(_b.sent()).password]).toBe(afterFirst.password);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('an expired token is refused and changes nothing', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var token, user, before, outcome, row;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    token = mintToken();
+                    return [4 /*yield*/, armResetToken('reset-expired@test.local', token, (0, moment_1.default)().subtract(1, 'minute'))];
+                case 1:
+                    user = _a.sent();
+                    return [4 /*yield*/, userRow(user.id)];
+                case 2:
+                    before = (_a.sent()).password;
+                    return [4 /*yield*/, invokeExecute({ token: token, newPassword: 'hijacked' })];
+                case 3:
+                    outcome = _a.sent();
+                    expect(outcome.status).toBe(400);
+                    expect(outcome.body).toEqual({ error: 'Reset token has expired' });
+                    return [4 /*yield*/, userRow(user.id)];
+                case 4:
+                    row = _a.sent();
+                    expect(row.password).toBe(before);
+                    expect(row.passwordResetToken).toBe(token);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('a token whose row carries no expiry is refused — never live by omission', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var token, user, before, outcome, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    token = mintToken();
+                    return [4 /*yield*/, armResetToken('reset-no-expiry@test.local', token, null)];
+                case 1:
+                    user = _b.sent();
+                    return [4 /*yield*/, userRow(user.id)];
+                case 2:
+                    before = (_b.sent()).password;
+                    return [4 /*yield*/, invokeExecute({ token: token, newPassword: 'hijacked' })];
+                case 3:
+                    outcome = _b.sent();
+                    expect(outcome.status).toBe(400);
+                    _a = expect;
+                    return [4 /*yield*/, userRow(user.id)];
+                case 4:
+                    _a.apply(void 0, [(_b.sent()).password]).toBe(before);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('a blank new password is refused without consuming the token', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var token, user, before, _i, _a, newPassword, outcome, row;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    token = mintToken();
+                    return [4 /*yield*/, armResetToken('reset-blank@test.local', token, (0, moment_1.default)().add(1, 'hour'))];
+                case 1:
+                    user = _b.sent();
+                    return [4 /*yield*/, userRow(user.id)];
+                case 2:
+                    before = (_b.sent()).password;
+                    _i = 0, _a = ['', undefined, 42];
+                    _b.label = 3;
+                case 3:
+                    if (!(_i < _a.length)) return [3 /*break*/, 6];
+                    newPassword = _a[_i];
+                    return [4 /*yield*/, invokeExecute({ token: token, newPassword: newPassword })];
+                case 4:
+                    outcome = _b.sent();
+                    expect(outcome.status).toBe(400);
+                    _b.label = 5;
+                case 5:
+                    _i++;
+                    return [3 /*break*/, 3];
+                case 6: return [4 /*yield*/, userRow(user.id)];
+                case 7:
+                    row = _b.sent();
+                    expect(row.password).toBe(before);
+                    expect(row.passwordResetToken).toBe(token);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('the presented token never reaches the log', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var token, info, _i, _a, entry;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    token = mintToken();
+                    info = jest.spyOn(logger_1.Logger.prototype, 'info');
+                    _b.label = 1;
+                case 1:
+                    _b.trys.push([1, , 3, 4]);
+                    return [4 /*yield*/, invokeExecute({ token: token, newPassword: 'hijacked' })];
+                case 2:
+                    _b.sent();
+                    expect(info).toHaveBeenCalled();
+                    for (_i = 0, _a = info.mock.calls; _i < _a.length; _i++) {
+                        entry = _a[_i][0];
+                        expect(JSON.stringify(entry)).not.toContain(token);
+                    }
+                    return [3 /*break*/, 4];
+                case 3:
+                    info.mockRestore();
+                    return [7 /*endfinally*/];
+                case 4: return [2 /*return*/];
+            }
+        });
+    }); });
+    describe('PasswordResetToken', function () {
+        var internals = new PasswordResetToken_1.PasswordResetToken();
+        it('mints 64 lowercase hex characters, fresh each time', function () {
+            var token = mintToken();
+            expect(token).toMatch(/^[0-9a-f]{64}$/);
+            expect(mintToken()).not.toBe(token);
+        });
+        it('a stored token matches only the same string — never an absent or emptied one', function () {
+            var token = mintToken();
+            expect(internals.matches(token, token)).toBe(true);
+            expect(internals.matches(mintToken(), token)).toBe(false);
+            expect(internals.matches(null, token)).toBe(false);
+            expect(internals.matches(undefined, token)).toBe(false);
+            expect(internals.matches('', token)).toBe(false);
+        });
+        it('an expiry is live only as a valid timestamp in the future', function () {
+            expect(internals.isLive((0, moment_1.default)().add(1, 'minute'))).toBe(true);
+            expect(internals.isLive((0, moment_1.default)().subtract(1, 'minute'))).toBe(false);
+            expect(internals.isLive(null)).toBe(false);
+            expect(internals.isLive(undefined)).toBe(false);
+            expect(internals.isLive(moment_1.default.invalid())).toBe(false);
+        });
+        it('redeem writes only while the row still carries the token', function () { return __awaiter(void 0, void 0, void 0, function () {
+            var live, user, before, _a, row;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        live = mintToken();
+                        return [4 /*yield*/, armResetToken('reset-redeem@test.local', live, (0, moment_1.default)().add(1, 'hour'))];
+                    case 1:
+                        user = _b.sent();
+                        return [4 /*yield*/, userRow(user.id)];
+                    case 2:
+                        before = (_b.sent()).password;
+                        return [4 /*yield*/, expect(new PasswordResetToken_1.PasswordResetToken().redeem(user, mintToken(), 'other-hash')).resolves.toBe(false)];
+                    case 3:
+                        _b.sent();
+                        _a = expect;
+                        return [4 /*yield*/, userRow(user.id)];
+                    case 4:
+                        _a.apply(void 0, [(_b.sent()).password]).toBe(before);
+                        return [4 /*yield*/, expect(new PasswordResetToken_1.PasswordResetToken().redeem(user, live, 'new-hash')).resolves.toBe(true)];
+                    case 5:
+                        _b.sent();
+                        return [4 /*yield*/, userRow(user.id)];
+                    case 6:
+                        row = _b.sent();
+                        expect(row.password).toBe('new-hash');
+                        expect(row.passwordResetToken).toBeNull();
+                        expect(row.passwordResetTokenExpiration).toBeNull();
+                        return [2 /*return*/];
+                }
+            });
+        }); });
+    });
+});
+//# sourceMappingURL=ExecutePasswordReset.test.js.map

package/dist/test/ExecutePasswordReset.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutePasswordReset.test.js","sourceRoot":"","sources":["../../test/ExecutePasswordReset.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAAwC;AACxC,oCAA8C;AAC9C,4CAA2C;AAC3C,wCAA+C;AAC/C,2EAA0E;AAC1E,uEAAsE;AACtE,+EAA8E;AAC9E,yEAAwE;AAExE,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAqBhD,IAAM,aAAa,GAAG,UAAO,IAA6B;;;;;gBAClD,OAAO,GAAiB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;gBACxC,QAAQ,GAAG;oBACf,MAAM,YAAC,IAAY;wBACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;wBACtB,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,IAAI,YAAC,IAAc;wBACjB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBACtB,CAAC;iBACF,CAAC;gBACF,qBAAM,2CAAoB,CAAC,SAAS,CAAC,EAAE,IAAI,MAAA,EAAW,EAAE,QAAiB,CAAC,EAAA;;gBAA1E,SAA0E,CAAC;gBAC3E,sBAAO,OAAO,EAAC;;;KAChB,CAAC;AAEF,IAAM,SAAS,GAAG,cAAM,OAAA,IAAI,uCAAkB,EAAE,CAAC,IAAI,EAAE,EAA/B,CAA+B,CAAC;AAExD,IAAM,aAAa,GAAG,UAAO,KAAa,EAAE,KAAoB,EAAE,UAAyB;;;;oBAC5E,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;gBAA9D,IAAI,GAAG,SAAuD;gBACpE,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE;wBACxC,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,kBAAkB,EAAE,KAAK;wBACzB,4BAA4B,EAAE,UAAU;qBACzC,CAAC,EAAA;;gBAJF,SAIE,CAAC;gBACH,sBAAO,IAAI,EAAC;;;KACb,CAAC;AAEF,IAAM,OAAO,GAAG,UAAO,EAAU;;gBAAK,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,EAAE,IAAA,EAAE,CAAC,EAAA;gBAA9C,sBAAA,SAA8C,EAAA;;SAAA,CAAC;AAErF,8GAA8G;AAC9G,IAAM,gBAAgB,GAAG;;;;;gBACjB,OAAO,GAA2B,EAAE,CAAC;sBACoB;gBAA5C,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAA;;gBAA5C,KAAA,SAA4C;;;qBAA5C,CAAA,cAA4C,CAAA;gBAApD,IAAI;gBACb,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;;;gBADnB,IAA4C,CAAA;;oBAG/D,sBAAO,OAAO,EAAC;;;KAChB,CAAC;AAOF,QAAQ,CAAC,4BAA4B,EAAE;IACrC,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;oBAC1B,gFAAgF;oBAChF,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAA;;oBAD/E,gFAAgF;oBAChF,SAA+E,CAAC;oBAChF,oEAAoE;oBACpE,qBAAM,aAAa,CAAC,0BAA0B,EAAE,EAAE,EAAE,IAAA,gBAAM,GAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAA;;oBAD5E,oEAAoE;oBACpE,SAA4E,CAAC;;;;SAC9E,CAAC,CAAC;IAEH,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,QAAQ,CAAC,oEAAoE,EAAE;QAC7E,EAAE,CAAC,IAAI,CAAC;YACN,CAAC,QAAQ,EAAE,EAAE,CAAC;YACd,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACxB,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;YAChD,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YAC5B,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YACnC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAC;SACvD,CAAC,CAAC,+CAA+C,EAAE,UAAO,MAAM,EAAE,UAAU;;;;4BAC5D,qBAAM,gBAAgB,EAAE,EAAA;;wBAAjC,MAAM,GAAG,SAAwB;wBAEvB,qBAAM,aAAa,uBAAM,UAAU,KAAE,WAAW,EAAE,UAAU,IAAG,EAAA;;wBAAzE,OAAO,GAAG,SAA+D;wBAE/E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;wBAC1E,KAAA,MAAM,CAAA;wBAAC,qBAAM,gBAAgB,EAAE,EAAA;;wBAA/B,kBAAO,SAAwB,EAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;;;;aAClD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4GAA4G,EAAE;;;;;oBACzG,KAAK,GAAG,SAAS,EAAE,CAAC;oBACb,qBAAM,aAAa,CAAC,uBAAuB,EAAE,KAAK,EAAE,IAAA,gBAAM,GAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAA;;oBAAnF,IAAI,GAAG,SAA4E;oBAE3E,qBAAM,aAAa,CAAC,EAAE,KAAK,OAAA,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,EAAA;;oBAAzE,KAAK,GAAG,SAAiE;oBAE/E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC/B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;oBAC7D,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAnC,UAAU,GAAG,SAAsB;oBACzC,qBAAM,MAAM,CAAC,IAAI,+BAAc,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAA;;oBAAxG,SAAwG,CAAC;oBACzG,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACjD,MAAM,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE,CAAC;oBAE5C,qBAAM,aAAa,CAAC,EAAE,KAAK,OAAA,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC,EAAA;;oBAA3E,MAAM,GAAG,SAAkE;oBAEjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAChC,KAAA,MAAM,CAAA;oBAAE,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAA9B,kBAAO,CAAC,SAAsB,CAAC,CAAC,QAAQ,EAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;;;;SACrE,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE;;;;;oBAC9C,KAAK,GAAG,SAAS,EAAE,CAAC;oBACb,qBAAM,aAAa,CAAC,0BAA0B,EAAE,KAAK,EAAE,IAAA,gBAAM,GAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAA;;oBAA7F,IAAI,GAAG,SAAsF;oBACnF,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAhC,MAAM,GAAG,CAAC,SAAsB,CAAC,CAAC,QAAQ;oBAEhC,qBAAM,aAAa,CAAC,EAAE,KAAK,OAAA,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAAjE,OAAO,GAAG,SAAuD;oBAEvE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;oBACvD,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAA5B,GAAG,GAAG,SAAsB;oBAClC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAClC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;;;SAC5C,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE;;;;;oBACtE,KAAK,GAAG,SAAS,EAAE,CAAC;oBACb,qBAAM,aAAa,CAAC,4BAA4B,EAAE,KAAK,EAAE,IAAI,CAAC,EAAA;;oBAArE,IAAI,GAAG,SAA8D;oBAC3D,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAhC,MAAM,GAAG,CAAC,SAAsB,CAAC,CAAC,QAAQ;oBAEhC,qBAAM,aAAa,CAAC,EAAE,KAAK,OAAA,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAAjE,OAAO,GAAG,SAAuD;oBAEvE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,KAAA,MAAM,CAAA;oBAAE,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAA9B,kBAAO,CAAC,SAAsB,CAAC,CAAC,QAAQ,EAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;;;SACxD,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE;;;;;oBAC1D,KAAK,GAAG,SAAS,EAAE,CAAC;oBACb,qBAAM,aAAa,CAAC,wBAAwB,EAAE,KAAK,EAAE,IAAA,gBAAM,GAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAA;;oBAApF,IAAI,GAAG,SAA6E;oBAC1E,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAhC,MAAM,GAAG,CAAC,SAAsB,CAAC,CAAC,QAAQ;0BAEH,EAAnB,MAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;;;yBAAnB,CAAA,cAAmB,CAAA;oBAAlC,WAAW;oBACJ,qBAAM,aAAa,CAAC,EAAE,KAAK,OAAA,EAAE,WAAW,aAAA,EAAE,CAAC,EAAA;;oBAArD,OAAO,GAAG,SAA2C;oBAC3D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;;oBAFT,IAAmB,CAAA;;wBAKjC,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAA5B,GAAG,GAAG,SAAsB;oBAClC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAClC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;;;SAC5C,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE;;;;;oBACxC,KAAK,GAAG,SAAS,EAAE,CAAC;oBACpB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,eAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;;;;oBAEhD,qBAAM,aAAa,CAAC,EAAE,KAAK,OAAA,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAA;;oBAAvD,SAAuD,CAAC;oBAExD,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;oBAChC,WAAqC,EAAf,KAAA,IAAI,CAAC,IAAI,CAAC,KAAK,EAAf,cAAe,EAAf,IAAe,EAAE;wBAA3B,KAAK,YAAA;wBACf,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;qBACpD;;;oBAED,IAAI,CAAC,WAAW,EAAE,CAAC;;;;;SAEtB,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE;QAC7B,IAAM,SAAS,GAAG,IAAI,uCAAkB,EAA+B,CAAC;QAExE,EAAE,CAAC,oDAAoD,EAAE;YACvD,IAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAE1B,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACxC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8EAA8E,EAAE;YACjF,IAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAE1B,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE;YAC9D,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAA,gBAAM,GAAE,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAA,gBAAM,GAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE;;;;;wBACvD,IAAI,GAAG,SAAS,EAAE,CAAC;wBACZ,qBAAM,aAAa,CAAC,yBAAyB,EAAE,IAAI,EAAE,IAAA,gBAAM,GAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAA;;wBAApF,IAAI,GAAG,SAA6E;wBAC1E,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;wBAAhC,MAAM,GAAG,CAAC,SAAsB,CAAC,CAAC,QAAQ;wBAEhD,qBAAM,MAAM,CAAC,IAAI,uCAAkB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAA;;wBAAnG,SAAmG,CAAC;wBACpG,KAAA,MAAM,CAAA;wBAAE,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;wBAA9B,kBAAO,CAAC,SAAsB,CAAC,CAAC,QAAQ,EAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAEvD,qBAAM,MAAM,CAAC,IAAI,uCAAkB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAA;;wBAAzF,SAAyF,CAAC;wBAC9E,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;wBAA5B,GAAG,GAAG,SAAsB;wBAClC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;wBACtC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,CAAC;wBAC1C,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE,CAAC;;;;aACrD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/ValidateResetToken.test.js

@@ -43,6 +43,7 @@ var moment_1 = __importDefault(require("moment"));
 var db_1 = require("@proteinjs/db");
 var user_1 = require("@proteinjs/user");
 var validateResetPasswordToken_1 = require("../src/routes/validateResetPasswordToken");
+var PasswordResetToken_1 = require("../src/authentication/PasswordResetToken");
 var UserServerTestEnvironment_1 = require("./UserServerTestEnvironment");
 var testEnv = new UserServerTestEnvironment_1.UserServerTestEnvironment();
 var invokeValidate = function (query) { return __awaiter(void 0, void 0, void 0, function () {
@@ -67,6 +68,7 @@ var invokeValidate = function (query) { return __awaiter(void 0, void 0, void 0,
         }
     });
 }); };
+var mintToken = function () { return new PasswordResetToken_1.PasswordResetToken().mint(); };
 var armResetToken = function (email, token, expiration) { return __awaiter(void 0, void 0, void 0, function () {
     var user;
     return __generator(this, function (_a) {
@@ -107,13 +109,15 @@ describe('validateResetPasswordToken route', function () {
         });
     }); });
     it('a valid token resolves isValid WITH the account email (the reset form identifier)', function () { return __awaiter(void 0, void 0, void 0, function () {
-        var outcome;
+        var token, outcome;
         return __generator(this, function (_a) {
             switch (_a.label) {
-                case 0: return [4 /*yield*/, armResetToken('reset-valid@test.local', 'tok-valid-1', (0, moment_1.default)().add(1, 'hour'))];
+                case 0:
+                    token = mintToken();
+                    return [4 /*yield*/, armResetToken('reset-valid@test.local', token, (0, moment_1.default)().add(1, 'hour'))];
                 case 1:
                     _a.sent();
-                    return [4 /*yield*/, invokeValidate({ token: 'tok-valid-1' })];
+                    return [4 /*yield*/, invokeValidate({ token: token })];
                 case 2:
                     outcome = _a.sent();
                     expect(outcome.status).toBe(200);
@@ -123,13 +127,15 @@ describe('validateResetPasswordToken route', function () {
         });
     }); });
     it('an expired token resolves invalid and leaks no email', function () { return __awaiter(void 0, void 0, void 0, function () {
-        var outcome;
+        var token, outcome;
         return __generator(this, function (_a) {
             switch (_a.label) {
-                case 0: return [4 /*yield*/, armResetToken('reset-expired@test.local', 'tok-expired-1', (0, moment_1.default)().subtract(1, 'minute'))];
+                case 0:
+                    token = mintToken();
+                    return [4 /*yield*/, armResetToken('reset-expired@test.local', token, (0, moment_1.default)().subtract(1, 'minute'))];
                 case 1:
                     _a.sent();
-                    return [4 /*yield*/, invokeValidate({ token: 'tok-expired-1' })];
+                    return [4 /*yield*/, invokeValidate({ token: token })];
                 case 2:
                     outcome = _a.sent();
                     expect(outcome.status).toBe(200);
@@ -143,7 +149,7 @@ describe('validateResetPasswordToken route', function () {
         var outcome;
         return __generator(this, function (_a) {
             switch (_a.label) {
-                case 0: return [4 /*yield*/, invokeValidate({ token: 'tok-never-issued' })];
+                case 0: return [4 /*yield*/, invokeValidate({ token: mintToken() })];
                 case 1:
                     outcome = _a.sent();
                     expect(outcome.status).toBe(200);
@@ -153,6 +159,23 @@ describe('validateResetPasswordToken route', function () {
             }
         });
     }); });
+    it.each([
+        ['a string of another shape', 'tok-never-issued'],
+        ['a parsed array', ['a', 'b']],
+        ['a parsed object', { passwordResetToken: null }],
+    ])('%s resolves invalid without a lookup and leaks no email', function (_label, token) { return __awaiter(void 0, void 0, void 0, function () {
+        var outcome;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, invokeValidate({ token: token })];
+                case 1:
+                    outcome = _a.sent();
+                    expect(outcome.status).toBe(200);
+                    expect(outcome.body).toEqual({ isValid: false, message: 'Invalid token' });
+                    return [2 /*return*/];
+            }
+        });
+    }); });
     it('a missing token is a 400', function () { return __awaiter(void 0, void 0, void 0, function () {
         var outcome;
         return __generator(this, function (_a) {

package/dist/test/ValidateResetToken.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"ValidateResetToken.test.js","sourceRoot":"","sources":["../../test/ValidateResetToken.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA4B;AAC5B,oCAA8C;AAC9C,wCAAyC;AACzC,uFAAsF;AACtF,yEAAwE;AAExE,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAahD,IAAM,cAAc,GAAG,UAAO,KAA8B;;;;;gBACpD,OAAO,GAAiB,EAAE,CAAC;gBAC3B,QAAQ,GAAG;oBACf,MAAM,YAAC,IAAY;wBACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;wBACtB,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,IAAI,YAAC,IAAc;wBACjB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBACtB,CAAC;iBACF,CAAC;gBACF,qBAAM,uDAA0B,CAAC,SAAS,CAAC,EAAE,KAAK,OAAA,EAAW,EAAE,QAAiB,CAAC,EAAA;;gBAAjF,SAAiF,CAAC;gBAClF,sBAAO,OAAO,EAAC;;;KAChB,CAAC;AAEF,IAAM,aAAa,GAAG,UAAO,KAAa,EAAE,KAAa,EAAE,UAAyB;;;;oBACrE,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;gBAA9D,IAAI,GAAG,SAAuD;gBACpE,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE;wBACxC,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,kBAAkB,EAAE,KAAK;wBACzB,4BAA4B,EAAE,UAAU;qBACzC,CAAC,EAAA;;gBAJF,SAIE,CAAC;;;;KACJ,CAAC;AAEF,QAAQ,CAAC,kCAAkC,EAAE;IAC3C,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;;;;SAC3B,CAAC,CAAC;IAEH,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE;;;;wBACtF,qBAAM,aAAa,CAAC,wBAAwB,EAAE,aAAa,EAAE,IAAA,gBAAM,GAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAA;;oBAArF,SAAqF,CAAC;oBAEtE,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAA;;oBAAxD,OAAO,GAAG,SAA8C;oBAE9D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;;;;SAClF,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE;;;;wBACzD,qBAAM,aAAa,CAAC,0BAA0B,EAAE,eAAe,EAAE,IAAA,gBAAM,GAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAA;;oBAAhG,SAAgG,CAAC;oBAEjF,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,EAAA;;oBAA1D,OAAO,GAAG,SAAgD;oBAEhE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;;;;SAC5C,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE;;;;wBACzC,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,EAAA;;oBAA7D,OAAO,GAAG,SAAmD;oBAEnE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;;;;SAC5C,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE;;;;wBACb,qBAAM,cAAc,CAAC,EAAE,CAAC,EAAA;;oBAAlC,OAAO,GAAG,SAAwB;oBAExC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;;;SAC1C,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"ValidateResetToken.test.js","sourceRoot":"","sources":["../../test/ValidateResetToken.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA4B;AAC5B,oCAA8C;AAC9C,wCAAyC;AACzC,uFAAsF;AACtF,+EAA8E;AAC9E,yEAAwE;AAExE,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAehD,IAAM,cAAc,GAAG,UAAO,KAA8B;;;;;gBACpD,OAAO,GAAiB,EAAE,CAAC;gBAC3B,QAAQ,GAAG;oBACf,MAAM,YAAC,IAAY;wBACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;wBACtB,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,IAAI,YAAC,IAAc;wBACjB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBACtB,CAAC;iBACF,CAAC;gBACF,qBAAM,uDAA0B,CAAC,SAAS,CAAC,EAAE,KAAK,OAAA,EAAW,EAAE,QAAiB,CAAC,EAAA;;gBAAjF,SAAiF,CAAC;gBAClF,sBAAO,OAAO,EAAC;;;KAChB,CAAC;AAEF,IAAM,SAAS,GAAG,cAAM,OAAA,IAAI,uCAAkB,EAAE,CAAC,IAAI,EAAE,EAA/B,CAA+B,CAAC;AAExD,IAAM,aAAa,GAAG,UAAO,KAAa,EAAE,KAAa,EAAE,UAAyB;;;;oBACrE,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;gBAA9D,IAAI,GAAG,SAAuD;gBACpE,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE;wBACxC,EAAE,EAAE,IAAI,CAAC,EAAE;wBACX,kBAAkB,EAAE,KAAK;wBACzB,4BAA4B,EAAE,UAAU;qBACzC,CAAC,EAAA;;gBAJF,SAIE,CAAC;;;;KACJ,CAAC;AAEF,QAAQ,CAAC,kCAAkC,EAAE;IAC3C,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;;;;SAC3B,CAAC,CAAC;IAEH,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE;;;;;oBAChF,KAAK,GAAG,SAAS,EAAE,CAAC;oBAC1B,qBAAM,aAAa,CAAC,wBAAwB,EAAE,KAAK,EAAE,IAAA,gBAAM,GAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAA;;oBAA7E,SAA6E,CAAC;oBAE9D,qBAAM,cAAc,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;oBAAzC,OAAO,GAAG,SAA+B;oBAE/C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;;;;SAClF,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE;;;;;oBACnD,KAAK,GAAG,SAAS,EAAE,CAAC;oBAC1B,qBAAM,aAAa,CAAC,0BAA0B,EAAE,KAAK,EAAE,IAAA,gBAAM,GAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAA;;oBAAtF,SAAsF,CAAC;oBAEvE,qBAAM,cAAc,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;oBAAzC,OAAO,GAAG,SAA+B;oBAE/C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;;;;SAC5C,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE;;;;wBACzC,qBAAM,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,EAAA;;oBAAtD,OAAO,GAAG,SAA4C;oBAE5D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACzC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;;;;SAC5C,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,2BAA2B,EAAE,kBAAkB,CAAC;QACjD,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC,iBAAiB,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;KAClD,CAAC,CAAC,yDAAyD,EAAE,UAAO,MAAM,EAAE,KAAK;;;;wBAChE,qBAAM,cAAc,CAAC,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;;oBAAzC,OAAO,GAAG,SAA+B;oBAE/C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;;;;SAC5E,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE;;;;wBACb,qBAAM,cAAc,CAAC,EAAE,CAAC,EAAA;;oBAAlC,OAAO,GAAG,SAAwB;oBAExC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;;;SAC1C,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}