@proteinjs/user-server 1.7.0 → 1.9.0

package/dist/test/SignupRoute.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=SignupRoute.test.d.ts.map

package/dist/test/SignupRoute.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignupRoute.test.d.ts","sourceRoot":"","sources":["../../test/SignupRoute.test.ts"],"names":[],"mappings":""}

package/dist/test/SignupRoute.test.js

@@ -0,0 +1,338 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var moment_1 = __importDefault(require("moment"));
+/**
+ * `POST /user/signup` — signup with auto-login. Signup used to be an RPC service, and services
+ * never see the request, so the client was bounced to the login form to type the credentials it
+ * had JUST submitted. Session establishment is a request-level concern; signup now lives at the
+ * route layer beside its siblings (login, dev login) and mints the session through the same
+ * single owner (`establishSession`) in the same request.
+ *
+ * Covered here, outcomes only (rows written, session minted), against the Spanner emulator:
+ * - plain signup: account row created, session established in the same request;
+ * - invited signup: email resolved from the invite, invite consumed, session established;
+ * - already-registered email: response body indistinguishable from success, but NO session —
+ *   auto-login must never hand out a session for an account the caller didn't just create;
+ * - invalid token / invite-only violations: honest error, no session, no account row.
+ *
+ * The email transport is stubbed at the module boundary (SignupInvite.test.ts pattern); the db
+ * stays real.
+ */
+var sendEmail = jest.fn();
+jest.mock('@proteinjs/email-server', function () { return ({
+    EmailSender: jest.fn().mockImplementation(function () { return ({ sendEmail: sendEmail }); }),
+    getDefaultInviteEmailConfigFactory: function () { return ({
+        getConfig: function () { return ({ getEmailContent: function () { return ({ text: 'invite', html: '<p>invite</p>' }); } }); },
+    }); },
+    getDefaultSignupConfirmationEmailConfigFactory: function () { return ({
+        getConfig: function () { return ({
+            getNewUserEmailContent: function () { return ({ text: 'welcome', html: '<p>welcome</p>' }); },
+            getExistingUserEmailContent: function () { return ({ text: 'exists', html: '<p>exists</p>' }); },
+        }); },
+    }); },
+}); });
+var db_1 = require("@proteinjs/db");
+var reflection_1 = require("@proteinjs/reflection");
+var user_1 = require("@proteinjs/user");
+var signup_1 = require("../src/routes/signup");
+var passportSessionHarness_1 = require("./passportSessionHarness");
+var UserServerTestEnvironment_1 = require("./UserServerTestEnvironment");
+var testEnv = new UserServerTestEnvironment_1.UserServerTestEnvironment();
+var INVITE_CONFIG_KEY = '@proteinjs/user-server/DefaultInviteConfigFactory';
+/** Seed the invite-config lookup (tests don't load the generated source graph). */
+var setInviteConfig = function (factories) {
+    reflection_1.SourceRepository.get().objectCache[INVITE_CONFIG_KEY] = factories;
+};
+var invokeSignup = function (body) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, request, events, outcome, response;
+    var _b;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0: return [4 /*yield*/, (0, passportSessionHarness_1.createPassportRequest)({ body: body })];
+            case 1:
+                _a = _c.sent(), request = _a.request, events = _a.events;
+                outcome = { sessionEvents: events };
+                response = {
+                    status: function (code) {
+                        outcome.status = code;
+                        return this;
+                    },
+                    send: function (body) {
+                        outcome.body = body;
+                    },
+                };
+                return [4 /*yield*/, signup_1.signup.onRequest(request, response)];
+            case 2:
+                _c.sent();
+                // The OUTCOME of establishment: the account email bound onto the (post-regeneration) session.
+                outcome.loggedInAs = (_b = request.session.passport) === null || _b === void 0 ? void 0 : _b.user;
+                return [2 /*return*/, outcome];
+        }
+    });
+}); };
+var getUserRow = function (email) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+    switch (_a.label) {
+        case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().get(user_1.tables.User, { email: email })];
+        case 1: return [2 /*return*/, _a.sent()];
+    }
+}); }); };
+var userRowCount = function (email) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+    switch (_a.label) {
+        case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.User, { email: email })];
+        case 1: return [2 /*return*/, (_a.sent()).length];
+    }
+}); }); };
+describe('signup route — auto-login after signup', function () {
+    beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.beforeAll()];
+                case 1:
+                    _a.sent();
+                    setInviteConfig([]); // default config: invite optional
+                    return [2 /*return*/];
+            }
+        });
+    }); }, 120000);
+    afterAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.afterAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    beforeEach(function () { return __awaiter(void 0, void 0, void 0, function () {
+        var db;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    jest.clearAllMocks();
+                    setInviteConfig([]);
+                    db = (0, db_1.getDbAsSystem)();
+                    return [4 /*yield*/, db.delete(user_1.tables.Invite, {})];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, db.delete(user_1.tables.User, {})];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('plain signup creates the account and establishes the session in the same request', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var outcome, created;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, invokeSignup({
+                        name: 'Plain Signup',
+                        email: 'Signup.Plain@Test.local',
+                        password: 'pw-plain-1',
+                    })];
+                case 1:
+                    outcome = _a.sent();
+                    expect(outcome.body).toEqual({});
+                    expect(outcome.loggedInAs).toBe('signup.plain@test.local');
+                    // Fresh id on privilege change (fixation), then login, then commit-before-response (the
+                    // client's follow-up navigation must never race the store write and land on /login).
+                    expect(outcome.sessionEvents).toEqual(['regenerate', 'login', 'save']);
+                    return [4 /*yield*/, getUserRow('signup.plain@test.local')];
+                case 2:
+                    created = _a.sent();
+                    expect(created).toBeDefined();
+                    // At-rest contract: argon2id from the first write (the per-login-migration KDF stores
+                    // new credentials as argon2id directly — never a legacy sha256 row).
+                    expect(created.password).toMatch(/^\$argon2id\$/);
+                    expect(created.password).not.toContain('pw-plain-1');
+                    expect(created.emailVerified).toBe(false);
+                    expect(created.roles).toEqual([]);
+                    expect(sendEmail).toHaveBeenCalledTimes(1); // welcome email still goes out
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('invited signup resolves the email from the invite, consumes it, and establishes the session', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var db, outcome, created, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    db = (0, db_1.getDbAsSystem)();
+                    return [4 /*yield*/, db.insert(user_1.tables.Invite, {
+                            email: 'invited@test.local',
+                            token: 'invite-token-1',
+                            tokenExpiresAt: (0, moment_1.default)().add(1, 'day'),
+                            invitedBy: 'inviter-1',
+                        })];
+                case 1:
+                    _b.sent();
+                    return [4 /*yield*/, invokeSignup({
+                            name: 'Invited Signup',
+                            password: 'pw-invited-1',
+                            token: 'invite-token-1',
+                        })];
+                case 2:
+                    outcome = _b.sent();
+                    expect(outcome.body).toEqual({});
+                    expect(outcome.loggedInAs).toBe('invited@test.local');
+                    expect(outcome.sessionEvents).toEqual(['regenerate', 'login', 'save']);
+                    return [4 /*yield*/, getUserRow('invited@test.local')];
+                case 3:
+                    created = _b.sent();
+                    expect(created).toBeDefined();
+                    expect(created.emailVerified).toBe(true); // the email came from the invite record
+                    expect(created.invitedBy).toBe('inviter-1');
+                    _a = expect;
+                    return [4 /*yield*/, db.get(user_1.tables.Invite, { token: 'invite-token-1' })];
+                case 4:
+                    _a.apply(void 0, [_b.sent()]).toBeUndefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('an already-registered email answers indistinguishably but mints NO session', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var outcome, _a, existing;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, testEnv.createUser({ name: 'Existing User', email: 'existing@test.local' })];
+                case 1:
+                    _b.sent();
+                    return [4 /*yield*/, invokeSignup({
+                            name: 'Existing User',
+                            email: 'existing@test.local',
+                            password: 'pw-existing-1',
+                        })];
+                case 2:
+                    outcome = _b.sent();
+                    // The response body must be exactly the success shape (anti-enumeration: existence is
+                    // reported to the mailbox owner by email, never to the caller)...
+                    expect(outcome.body).toEqual({});
+                    // ...but auto-login must never mint a session for an account the caller didn't just create.
+                    expect(outcome.loggedInAs).toBeUndefined();
+                    expect(outcome.sessionEvents).toEqual([]);
+                    _a = expect;
+                    return [4 /*yield*/, userRowCount('existing@test.local')];
+                case 3:
+                    _a.apply(void 0, [_b.sent()]).toBe(1);
+                    return [4 /*yield*/, getUserRow('existing@test.local')];
+                case 4:
+                    existing = _b.sent();
+                    expect(existing.password).toBe('test'); // untouched — seeded by testEnv.createUser
+                    expect(sendEmail).toHaveBeenCalledTimes(1); // "account already exists" email
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('an unknown invite token gets the honest error — no session, no account', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var outcome, _a;
+        var _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0: return [4 /*yield*/, invokeSignup({
+                        name: 'Token Guess',
+                        password: 'pw-guess-1',
+                        token: 'never-existed',
+                    })];
+                case 1:
+                    outcome = _c.sent();
+                    expect((_b = outcome.body) === null || _b === void 0 ? void 0 : _b.error).toMatch(/no longer valid/i);
+                    expect(outcome.loggedInAs).toBeUndefined();
+                    expect(outcome.sessionEvents).toEqual([]);
+                    _a = expect;
+                    return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.User, {})];
+                case 2:
+                    _a.apply(void 0, [(_c.sent()).length]).toBe(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('invite-only mode refuses a tokenless signup — no session, no account', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var outcome, _a;
+        var _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0:
+                    setInviteConfig([{ getConfig: function () { return ({ isInviteOnly: true }); } }]);
+                    return [4 /*yield*/, invokeSignup({
+                            name: 'No Invite',
+                            email: 'no.invite@test.local',
+                            password: 'pw-noinvite-1',
+                        })];
+                case 1:
+                    outcome = _c.sent();
+                    expect((_b = outcome.body) === null || _b === void 0 ? void 0 : _b.error).toMatch(/invite is required/i);
+                    expect(outcome.loggedInAs).toBeUndefined();
+                    expect(outcome.sessionEvents).toEqual([]);
+                    _a = expect;
+                    return [4 /*yield*/, getUserRow('no.invite@test.local')];
+                case 2:
+                    _a.apply(void 0, [_c.sent()]).toBeUndefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('a blank name or password is refused before any write', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var missingName, missingPassword, _a;
+        var _b, _c;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
+                case 0: return [4 /*yield*/, invokeSignup({ email: 'blank@test.local', password: 'pw-blank-1' })];
+                case 1:
+                    missingName = _d.sent();
+                    expect((_b = missingName.body) === null || _b === void 0 ? void 0 : _b.error).toBeTruthy();
+                    expect(missingName.sessionEvents).toEqual([]);
+                    return [4 /*yield*/, invokeSignup({ name: 'Blank', email: 'blank@test.local' })];
+                case 2:
+                    missingPassword = _d.sent();
+                    expect((_c = missingPassword.body) === null || _c === void 0 ? void 0 : _c.error).toBeTruthy();
+                    expect(missingPassword.sessionEvents).toEqual([]);
+                    _a = expect;
+                    return [4 /*yield*/, getUserRow('blank@test.local')];
+                case 3:
+                    _a.apply(void 0, [_d.sent()]).toBeUndefined();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+//# sourceMappingURL=SignupRoute.test.js.map

package/dist/test/SignupRoute.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignupRoute.test.js","sourceRoot":"","sources":["../../test/SignupRoute.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA4B;AAE5B;;;;;;;;;;;;;;;;GAgBG;AAEH,IAAM,SAAS,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;AAE5B,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,cAAM,OAAA,CAAC;IAC1C,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,cAAM,OAAA,CAAC,EAAE,SAAS,WAAA,EAAE,CAAC,EAAf,CAAe,CAAC;IAChE,kCAAkC,EAAE,cAAM,OAAA,CAAC;QACzC,SAAS,EAAE,cAAM,OAAA,CAAC,EAAE,eAAe,EAAE,cAAM,OAAA,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAA3C,CAA2C,EAAE,CAAC,EAAxE,CAAwE;KAC1F,CAAC,EAFwC,CAExC;IACF,8CAA8C,EAAE,cAAM,OAAA,CAAC;QACrD,SAAS,EAAE,cAAM,OAAA,CAAC;YAChB,sBAAsB,EAAE,cAAM,OAAA,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAA7C,CAA6C;YAC3E,2BAA2B,EAAE,cAAM,OAAA,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAA3C,CAA2C;SAC/E,CAAC,EAHe,CAGf;KACH,CAAC,EALoD,CAKpD;CACH,CAAC,EAXyC,CAWzC,CAAC,CAAC;AAEJ,oCAA8C;AAC9C,oDAAyD;AACzD,wCAAyC;AACzC,+CAA8C;AAC9C,mEAAiE;AACjE,yEAAwE;AAExE,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAEhD,IAAM,iBAAiB,GAAG,mDAAmD,CAAC;AAI9E,mFAAmF;AACnF,IAAM,eAAe,GAAG,UAAC,SAAoB;IAC1C,6BAAgB,CAAC,GAAG,EAA6B,CAAC,WAAW,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;AAChG,CAAC,CAAC;AAiBF,IAAM,YAAY,GAAG,UAAO,IAA6B;;;;;oBAC3B,qBAAM,IAAA,8CAAqB,EAAC,EAAE,IAAI,MAAA,EAAE,CAAC,EAAA;;gBAA3D,KAAsB,SAAqC,EAAzD,OAAO,aAAA,EAAE,MAAM,YAAA;gBACjB,OAAO,GAAiB,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;gBAClD,QAAQ,GAAG;oBACf,MAAM,YAAC,IAAY;wBACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;wBACtB,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,IAAI,YAAC,IAAc;wBACjB,OAAO,CAAC,IAAI,GAAG,IAA4B,CAAC;oBAC9C,CAAC;iBACF,CAAC;gBACF,qBAAM,eAAM,CAAC,SAAS,CAAC,OAAgB,EAAE,QAAiB,CAAC,EAAA;;gBAA3D,SAA2D,CAAC;gBAC5D,8FAA8F;gBAC9F,OAAO,CAAC,UAAU,GAAG,MAAA,OAAO,CAAC,OAAO,CAAC,QAAQ,0CAAE,IAAI,CAAC;gBACpD,sBAAO,OAAO,EAAC;;;KAChB,CAAC;AAEF,IAAM,UAAU,GAAG,UAAO,KAAa;;gBAAK,qBAAM,IAAA,kBAAa,GAAE,CAAC,GAAG,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;gBAAjD,sBAAA,SAAiD,EAAA;;SAAA,CAAC;AAC9F,IAAM,YAAY,GAAG,UAAO,KAAa;;gBAAM,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;gBAApD,sBAAA,CAAC,SAAmD,CAAC,CAAC,MAAM,EAAA;;SAAA,CAAC;AAE3G,QAAQ,CAAC,wCAAwC,EAAE;IACjD,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;oBAC1B,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC;;;;SACxD,EAAE,MAAM,CAAC,CAAC;IAEX,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,UAAU,CAAC;;;;;oBACT,IAAI,CAAC,aAAa,EAAE,CAAC;oBACrB,eAAe,CAAC,EAAE,CAAC,CAAC;oBACd,EAAE,GAAG,IAAA,kBAAa,GAAE,CAAC;oBAC3B,qBAAM,EAAE,CAAC,MAAM,CAAC,aAAM,CAAC,MAAM,EAAE,EAAE,CAAC,EAAA;;oBAAlC,SAAkC,CAAC;oBACnC,qBAAM,EAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAA;;oBAAhC,SAAgC,CAAC;;;;SAClC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE;;;;wBACrE,qBAAM,YAAY,CAAC;wBACjC,IAAI,EAAE,cAAc;wBACpB,KAAK,EAAE,yBAAyB;wBAChC,QAAQ,EAAE,YAAY;qBACvB,CAAC,EAAA;;oBAJI,OAAO,GAAG,SAId;oBAEF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;oBAC3D,wFAAwF;oBACxF,qFAAqF;oBACrF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;oBAEvD,qBAAM,UAAU,CAAC,yBAAyB,CAAC,EAAA;;oBAArD,OAAO,GAAG,SAA2C;oBAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC9B,sFAAsF;oBACtF,qEAAqE;oBACrE,MAAM,CAAC,OAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;oBACnD,MAAM,CAAC,OAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;oBACtD,MAAM,CAAC,OAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC3C,MAAM,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACnC,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;;;;SAC5E,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE;;;;;oBAC1F,EAAE,GAAG,IAAA,kBAAa,GAAE,CAAC;oBAC3B,qBAAM,EAAE,CAAC,MAAM,CAAC,aAAM,CAAC,MAAM,EAAE;4BAC7B,KAAK,EAAE,oBAAoB;4BAC3B,KAAK,EAAE,gBAAgB;4BACvB,cAAc,EAAE,IAAA,gBAAM,GAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC;4BACtC,SAAS,EAAE,WAAW;yBACvB,CAAC,EAAA;;oBALF,SAKE,CAAC;oBAEa,qBAAM,YAAY,CAAC;4BACjC,IAAI,EAAE,gBAAgB;4BACtB,QAAQ,EAAE,cAAc;4BACxB,KAAK,EAAE,gBAAgB;yBACxB,CAAC,EAAA;;oBAJI,OAAO,GAAG,SAId;oBAEF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;oBACtD,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;oBAEvD,qBAAM,UAAU,CAAC,oBAAoB,CAAC,EAAA;;oBAAhD,OAAO,GAAG,SAAsC;oBACtD,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC9B,MAAM,CAAC,OAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,wCAAwC;oBACnF,MAAM,CAAC,OAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC7C,KAAA,MAAM,CAAA;oBAAC,qBAAM,EAAE,CAAC,GAAG,CAAC,aAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAA;;oBAA/D,kBAAO,SAAwD,EAAC,CAAC,aAAa,EAAE,CAAC;;;;SAClF,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE;;;;wBAC/E,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,EAAA;;oBAAjF,SAAiF,CAAC;oBAElE,qBAAM,YAAY,CAAC;4BACjC,IAAI,EAAE,eAAe;4BACrB,KAAK,EAAE,qBAAqB;4BAC5B,QAAQ,EAAE,eAAe;yBAC1B,CAAC,EAAA;;oBAJI,OAAO,GAAG,SAId;oBAEF,sFAAsF;oBACtF,kEAAkE;oBAClE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACjC,4FAA4F;oBAC5F,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;oBAC3C,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAE1C,KAAA,MAAM,CAAA;oBAAC,qBAAM,YAAY,CAAC,qBAAqB,CAAC,EAAA;;oBAAhD,kBAAO,SAAyC,EAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACzC,qBAAM,UAAU,CAAC,qBAAqB,CAAC,EAAA;;oBAAlD,QAAQ,GAAG,SAAuC;oBACxD,MAAM,CAAC,QAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,2CAA2C;oBACpF,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,iCAAiC;;;;SAC9E,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE;;;;;wBAC3D,qBAAM,YAAY,CAAC;wBACjC,IAAI,EAAE,aAAa;wBACnB,QAAQ,EAAE,YAAY;wBACtB,KAAK,EAAE,eAAe;qBACvB,CAAC,EAAA;;oBAJI,OAAO,GAAG,SAId;oBAEF,MAAM,CAAC,MAAA,OAAO,CAAC,IAAI,0CAAE,KAAK,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;oBACxD,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;oBAC3C,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1C,KAAA,MAAM,CAAA;oBAAE,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAA;;oBAApD,kBAAO,CAAC,SAA4C,CAAC,CAAC,MAAM,EAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;;;SACvE,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE;;;;;;oBACzE,eAAe,CAAC,CAAC,EAAE,SAAS,EAAE,cAAM,OAAA,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAxB,CAAwB,EAAE,CAAC,CAAC,CAAC;oBAEjD,qBAAM,YAAY,CAAC;4BACjC,IAAI,EAAE,WAAW;4BACjB,KAAK,EAAE,sBAAsB;4BAC7B,QAAQ,EAAE,eAAe;yBAC1B,CAAC,EAAA;;oBAJI,OAAO,GAAG,SAId;oBAEF,MAAM,CAAC,MAAA,OAAO,CAAC,IAAI,0CAAE,KAAK,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;oBAC3D,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;oBAC3C,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC1C,KAAA,MAAM,CAAA;oBAAC,qBAAM,UAAU,CAAC,sBAAsB,CAAC,EAAA;;oBAA/C,kBAAO,SAAwC,EAAC,CAAC,aAAa,EAAE,CAAC;;;;SAClE,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE;;;;;wBACrC,qBAAM,YAAY,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAA;;oBAAvF,WAAW,GAAG,SAAyE;oBAC7F,MAAM,CAAC,MAAA,WAAW,CAAC,IAAI,0CAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;oBAC7C,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAEtB,qBAAM,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,EAAA;;oBAAlF,eAAe,GAAG,SAAgE;oBACxF,MAAM,CAAC,MAAA,eAAe,CAAC,IAAI,0CAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;oBACjD,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAElD,KAAA,MAAM,CAAA;oBAAC,qBAAM,UAAU,CAAC,kBAAkB,CAAC,EAAA;;oBAA3C,kBAAO,SAAoC,EAAC,CAAC,aAAa,EAAE,CAAC;;;;SAC9D,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/UserStatusGate.integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=UserStatusGate.integration.test.d.ts.map

package/dist/test/UserStatusGate.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserStatusGate.integration.test.d.ts","sourceRoot":"","sources":["../../test/UserStatusGate.integration.test.ts"],"names":[],"mappings":""}

package/dist/test/UserStatusGate.integration.test.js

@@ -0,0 +1,162 @@
+"use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var sha256_1 = __importDefault(require("crypto-js/sha256"));
+var db_1 = require("@proteinjs/db");
+var user_1 = require("@proteinjs/user");
+var authenticate_1 = require("../src/authentication/authenticate");
+var userCache_1 = require("../src/authorization/userCache");
+var UserServerTestEnvironment_1 = require("./UserServerTestEnvironment");
+var testEnv = new UserServerTestEnvironment_1.UserServerTestEnvironment();
+/**
+ * The deactivation gate, both halves, asserted on outcomes against the emulator:
+ * - login half (authenticate): correct credentials on a deactivated account are refused;
+ * - session half (userCache): the session cache is rebuilt per request, so a live session stops
+ *   resolving the moment its account is deactivated — requests run as the unauthenticated guest.
+ */
+describe('user status gate — login refusal and session resolution', function () {
+    beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.beforeAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); }, 120000);
+    afterAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.afterAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    /** Insert an account the way the product stores it: lowercased email, sha256 password. */
+    var createAccount = function (email, password, status) { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().insert(user_1.tables.User, __assign({ name: 'Gate test user', email: email, password: (0, sha256_1.default)(password).toString(), emailVerified: true, roles: [] }, (status ? { status: status } : {})))];
+                case 1: return [2 /*return*/, _a.sent()];
+            }
+        });
+    }); };
+    it('refuses login for a deactivated account even with correct credentials', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var result;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createAccount('deactivated-login@test.local', 'correct-password', 'deactivated')];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('deactivated-login@test.local', 'correct-password')];
+                case 2:
+                    result = _a.sent();
+                    expect(result).toBe('This account has been deactivated');
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('logs an active account in unaffected', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a, _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0: return [4 /*yield*/, createAccount('active-login@test.local', 'correct-password')];
+                case 1:
+                    _c.sent();
+                    _a = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('active-login@test.local', 'correct-password')];
+                case 2:
+                    _a.apply(void 0, [_c.sent()]).toBe(true);
+                    _b = expect;
+                    return [4 /*yield*/, (0, authenticate_1.authenticate)('active-login@test.local', 'wrong-password')];
+                case 3:
+                    _b.apply(void 0, [_c.sent()]).toBe('User name or password incorrect');
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('stops resolving a live session once its user is deactivated, and resumes on reactivation', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var account, before, during, after;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, createAccount('live-session@test.local', 'correct-password')];
+                case 1:
+                    account = _a.sent();
+                    return [4 /*yield*/, userCache_1.userCache.create('live-session', 'live-session@test.local')];
+                case 2:
+                    before = _a.sent();
+                    expect(before.id).toBe(account.id);
+                    expect(before.email).toBe('live-session@test.local');
+                    return [4 /*yield*/, (0, db_1.getDbAsSystem)().update(user_1.tables.User, { id: account.id, status: 'deactivated' })];
+                case 3:
+                    _a.sent();
+                    return [4 /*yield*/, userCache_1.userCache.create('live-session', 'live-session@test.local')];
+                case 4:
+                    during = _a.sent();
+                    expect(during.id).toBe('guest');
+                    expect(during.roles).toEqual([]);
+                    return [4 /*yield*/, (0, db_1.getDbAsSystem)().update(user_1.tables.User, { id: account.id, status: 'active' })];
+                case 5:
+                    _a.sent();
+                    return [4 /*yield*/, userCache_1.userCache.create('live-session', 'live-session@test.local')];
+                case 6:
+                    after = _a.sent();
+                    expect(after.id).toBe(account.id);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+//# sourceMappingURL=UserStatusGate.integration.test.js.map

package/dist/test/UserStatusGate.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserStatusGate.integration.test.js","sourceRoot":"","sources":["../../test/UserStatusGate.integration.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4DAAsC;AACtC,oCAA8C;AAC9C,wCAAyC;AACzC,mEAAkE;AAClE,4DAA2D;AAC3D,yEAAwE;AAExE,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAEhD;;;;;GAKG;AACH,QAAQ,CAAC,yDAAyD,EAAE;IAClE,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;;;;SAC3B,EAAE,MAAM,CAAC,CAAC;IAEX,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,0FAA0F;IAC1F,IAAM,aAAa,GAAG,UAAO,KAAa,EAAE,QAAgB,EAAE,MAAiC;;;wBACtF,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,aAC7C,IAAI,EAAE,gBAAgB,EACtB,KAAK,OAAA,EACL,QAAQ,EAAE,IAAA,gBAAM,EAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,EACrC,aAAa,EAAE,IAAI,EACnB,KAAK,EAAE,EAAE,IACN,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,QAAA,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7B,EAAA;wBAPF,sBAAO,SAOL,EAAC;;;SACJ,CAAC;IAEF,EAAE,CAAC,uEAAuE,EAAE;;;;wBAC1E,qBAAM,aAAa,CAAC,8BAA8B,EAAE,kBAAkB,EAAE,aAAa,CAAC,EAAA;;oBAAtF,SAAsF,CAAC;oBAExE,qBAAM,IAAA,2BAAY,EAAC,8BAA8B,EAAE,kBAAkB,CAAC,EAAA;;oBAA/E,MAAM,GAAG,SAAsE;oBAErF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;;;;SAC1D,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE;;;;wBACzC,qBAAM,aAAa,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,EAAA;;oBAAlE,SAAkE,CAAC;oBAEnE,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,yBAAyB,EAAE,kBAAkB,CAAC,EAAA;;oBAAxE,kBAAO,SAAiE,EAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrF,KAAA,MAAM,CAAA;oBAAC,qBAAM,IAAA,2BAAY,EAAC,yBAAyB,EAAE,gBAAgB,CAAC,EAAA;;oBAAtE,kBAAO,SAA+D,EAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;;;;SACjH,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE;;;;wBAC7E,qBAAM,aAAa,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,EAAA;;oBAA5E,OAAO,GAAG,SAAkE;oBAEnE,qBAAM,qBAAS,CAAC,MAAM,CAAC,cAAc,EAAE,yBAAyB,CAAC,EAAA;;oBAA1E,MAAM,GAAG,SAAiE;oBAChF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;oBAErD,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAA;;oBAApF,SAAoF,CAAC;oBACtE,qBAAM,qBAAS,CAAC,MAAM,CAAC,cAAc,EAAE,yBAAyB,CAAC,EAAA;;oBAA1E,MAAM,GAAG,SAAiE;oBAChF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAEjC,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAA;;oBAA/E,SAA+E,CAAC;oBAClE,qBAAM,qBAAS,CAAC,MAAM,CAAC,cAAc,EAAE,yBAAyB,CAAC,EAAA;;oBAAzE,KAAK,GAAG,SAAiE;oBAC/E,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;;;;SACnC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/ValidateResetToken.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ValidateResetToken.test.d.ts.map

package/dist/test/ValidateResetToken.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ValidateResetToken.test.d.ts","sourceRoot":"","sources":["../../test/ValidateResetToken.test.ts"],"names":[],"mappings":""}