@rakun-kit/core 1.3.11 → 1.4.0

package/dist/cjs/api/operations/manager-manifest.js

@@ -0,0 +1,291 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.managerOperationManifest = void 0;
+exports.managerOperationManifest = {
+    "manager.contentTypes": {
+        kind: "query",
+        method: "get",
+        path: "/manager/contentTypes",
+    },
+    "manager.contentType": {
+        kind: "query",
+        method: "post",
+        path: "/manager/contentType",
+    },
+    "manager.languages": {
+        kind: "query",
+        method: "get",
+        path: "/manager/languages",
+    },
+    "manager.regenerateRoutes": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/regenerateRoutes",
+    },
+    "manager.create": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/create",
+    },
+    "manager.duplicate": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/duplicate",
+    },
+    "manager.update": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/update",
+    },
+    "manager.delete": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/delete",
+    },
+    "manager.trash": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/trash",
+    },
+    "manager.get": {
+        kind: "query",
+        method: "post",
+        path: "/manager/get",
+    },
+    "manager.list": {
+        kind: "query",
+        method: "post",
+        path: "/manager/list",
+    },
+    "manager.favorites.list": {
+        kind: "query",
+        method: "post",
+        path: "/manager/favorites/list",
+    },
+    "manager.favorites.toggle": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/favorites/toggle",
+    },
+    "manager.localeVariants.list": {
+        kind: "query",
+        method: "post",
+        path: "/manager/localeVariants/list",
+    },
+    "manager.localeVariants.create": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/localeVariants/create",
+    },
+    "manager.localeVariants.assign": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/localeVariants/assign",
+    },
+    "manager.localeVariants.unassign": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/localeVariants/unassign",
+    },
+    "manager.users.mentions": {
+        kind: "query",
+        method: "get",
+        path: "/manager/users/mentions",
+    },
+    "manager.comments.list": {
+        kind: "query",
+        method: "post",
+        path: "/manager/comments/list",
+    },
+    "manager.comments.create": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/comments/create",
+    },
+    "manager.comments.toggleReaction": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/comments/toggleReaction",
+    },
+    "manager.setDefaultLanguage": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/setDefaultLanguage",
+    },
+    "manager.permissions": {
+        kind: "query",
+        method: "get",
+        path: "/manager/permissions",
+    },
+    "manager.backups.list": {
+        kind: "query",
+        method: "get",
+        path: "/manager/backups/list",
+    },
+    "manager.backups.create": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/backups/create",
+    },
+    "manager.backups.restore": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/backups/restore",
+    },
+    "manager.migrations.list": {
+        kind: "query",
+        method: "get",
+        path: "/manager/migrations/list",
+    },
+    "manager.versions.list": {
+        kind: "query",
+        method: "post",
+        path: "/manager/versions/list",
+    },
+    "manager.versions.get": {
+        kind: "query",
+        method: "post",
+        path: "/manager/versions/get",
+    },
+    "manager.versions.restore": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/versions/restore",
+    },
+    "manager.translateDocument": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/translateDocument",
+    },
+    "manager.preview.create": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/preview/create",
+    },
+    "manager.apiOperations": {
+        kind: "query",
+        method: "get",
+        path: "/manager/apiOperations",
+    },
+    "manager.media.prepareUpload": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/media/prepareUpload",
+    },
+    "manager.media.finalizeUpload": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/media/finalizeUpload",
+    },
+    "manager.media.getUrl": {
+        kind: "query",
+        method: "post",
+        path: "/manager/media/getUrl",
+    },
+    "manager.media.createFolder": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/media/createFolder",
+    },
+    "manager.media.listFolders": {
+        kind: "query",
+        method: "post",
+        path: "/manager/media/listFolders",
+    },
+    "manager.media.deleteFolder": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/media/deleteFolder",
+    },
+    "manager.literals.list": {
+        kind: "query",
+        method: "post",
+        path: "/manager/literals/list",
+    },
+    "manager.literals.upsert": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/literals/upsert",
+    },
+    "manager.auth.updatePassword": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/updatePassword",
+    },
+    "manager.auth.login": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/login",
+    },
+    "manager.auth.logout": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/logout",
+    },
+    "manager.auth.getSession": {
+        kind: "query",
+        method: "get",
+        path: "/manager/auth/getSession",
+    },
+    "manager.auth.accountInfo": {
+        kind: "query",
+        method: "get",
+        path: "/manager/auth/accountInfo",
+    },
+    "manager.auth.updateAccount": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/updateAccount",
+    },
+    "manager.auth.updateTutorialPreferences": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/updateTutorialPreferences",
+    },
+    "manager.auth.markTourSeen": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/markTourSeen",
+    },
+    "manager.auth.deleteSession": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/deleteSession",
+    },
+    "manager.auth.totp.enroll": {
+        kind: "query",
+        method: "get",
+        path: "/manager/auth/totp/enroll",
+    },
+    "manager.auth.totp.confirm": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/totp/confirm",
+    },
+    "manager.auth.totp.verify": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/totp/verify",
+    },
+    "manager.auth.webauthn.register.options": {
+        kind: "query",
+        method: "post",
+        path: "/manager/auth/webauthn/register/options",
+    },
+    "manager.auth.webauthn.register.verify": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/webauthn/register/verify",
+    },
+    "manager.auth.webauthn.auth.options": {
+        kind: "query",
+        method: "post",
+        path: "/manager/auth/webauthn/auth/options",
+    },
+    "manager.auth.webauthn.auth.verify": {
+        kind: "mutation",
+        method: "post",
+        path: "/manager/auth/webauthn/auth/verify",
+    },
+};
+//# sourceMappingURL=manager-manifest.js.map

package/dist/cjs/api/operations/manager-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager-manifest.js","sourceRoot":"","sources":["../../../../src/api/operations/manager-manifest.ts"],"names":[],"mappings":";;;AAOa,QAAA,wBAAwB,GAAG;IACtC,sBAAsB,EAAE;QACtB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,uBAAuB;KAC9B;IACD,qBAAqB,EAAE;QACrB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,sBAAsB;KAC7B;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oBAAoB;KAC3B;IACD,0BAA0B,EAAE;QAC1B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,2BAA2B;KAClC;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;KACxB;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,oBAAoB;KAC3B;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;KACxB;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;KACxB;IACD,eAAe,EAAE;QACf,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gBAAgB;KACvB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,cAAc;KACrB;IACD,cAAc,EAAE;QACd,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,eAAe;KACtB;IACD,wBAAwB,EAAE;QACxB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yBAAyB;KAChC;IACD,0BAA0B,EAAE;QAC1B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,2BAA2B;KAClC;IACD,6BAA6B,EAAE;QAC7B,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,8BAA8B;KACrC;IACD,+BAA+B,EAAE;QAC/B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gCAAgC;KACvC;IACD,+BAA+B,EAAE;QAC/B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gCAAgC;KACvC;IACD,iCAAiC,EAAE;QACjC,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kCAAkC;KACzC;IACD,wBAAwB,EAAE;QACxB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,yBAAyB;KAChC;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wBAAwB;KAC/B;IACD,yBAAyB,EAAE;QACzB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,0BAA0B;KACjC;IACD,iCAAiC,EAAE;QACjC,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kCAAkC;KACzC;IACD,4BAA4B,EAAE;QAC5B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,6BAA6B;KACpC;IACD,qBAAqB,EAAE;QACrB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,sBAAsB;KAC7B;IACD,sBAAsB,EAAE;QACtB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,uBAAuB;KAC9B;IACD,wBAAwB,EAAE;QACxB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yBAAyB;KAChC;IACD,yBAAyB,EAAE;QACzB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,0BAA0B;KACjC;IACD,yBAAyB,EAAE;QACzB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B;KACjC;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wBAAwB;KAC/B;IACD,sBAAsB,EAAE;QACtB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,uBAAuB;KAC9B;IACD,0BAA0B,EAAE;QAC1B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,2BAA2B;KAClC;IACD,2BAA2B,EAAE;QAC3B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,4BAA4B;KACnC;IACD,wBAAwB,EAAE;QACxB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yBAAyB;KAChC;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wBAAwB;KAC/B;IACD,6BAA6B,EAAE;QAC7B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,8BAA8B;KACrC;IACD,8BAA8B,EAAE;QAC9B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,+BAA+B;KACtC;IACD,sBAAsB,EAAE;QACtB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,uBAAuB;KAC9B;IACD,4BAA4B,EAAE;QAC5B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,6BAA6B;KACpC;IACD,2BAA2B,EAAE;QAC3B,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,4BAA4B;KACnC;IACD,4BAA4B,EAAE;QAC5B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,6BAA6B;KACpC;IACD,uBAAuB,EAAE;QACvB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wBAAwB;KAC/B;IACD,yBAAyB,EAAE;QACzB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,0BAA0B;KACjC;IACD,6BAA6B,EAAE;QAC7B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,8BAA8B;KACrC;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,qBAAqB;KAC5B;IACD,qBAAqB,EAAE;QACrB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,sBAAsB;KAC7B;IACD,yBAAyB,EAAE;QACzB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B;KACjC;IACD,0BAA0B,EAAE;QAC1B,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;KAClC;IACD,4BAA4B,EAAE;QAC5B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,6BAA6B;KACpC;IACD,wCAAwC,EAAE;QACxC,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yCAAyC;KAChD;IACD,2BAA2B,EAAE;QAC3B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,4BAA4B;KACnC;IACD,4BAA4B,EAAE;QAC5B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,6BAA6B;KACpC;IACD,0BAA0B,EAAE;QAC1B,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;KAClC;IACD,2BAA2B,EAAE;QAC3B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,4BAA4B;KACnC;IACD,0BAA0B,EAAE;QAC1B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,2BAA2B;KAClC;IACD,wCAAwC,EAAE;QACxC,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yCAAyC;KAChD;IACD,uCAAuC,EAAE;QACvC,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wCAAwC;KAC/C;IACD,oCAAoC,EAAE;QACpC,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,qCAAqC;KAC5C;IACD,mCAAmC,EAAE;QACnC,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,oCAAoC;KAC3C;CACiC,CAAC"}

package/dist/cjs/api/operations/manager.js

@@ -10,10 +10,15 @@ const apiOperations_1 = require("../routes/manager/apiOperations");
 const create_1 = require("../routes/manager/backups/create");
 const list_1 = require("../routes/manager/backups/list");
 const restore_1 = require("../routes/manager/backups/restore");
+const contentType_1 = require("../routes/manager/contentType");
 const contentTypes_1 = require("../routes/manager/contentTypes");
 const create_2 = require("../routes/manager/create");
 const delete_1 = require("../routes/manager/delete");
 const duplicate_1 = require("../routes/manager/duplicate");
+const favorites_1 = require("../routes/manager/favorites");
+const localeVariants_1 = require("../routes/manager/localeVariants");
+const comments_1 = require("../routes/manager/comments");
+const users_1 = require("../routes/manager/users");
 const trash_1 = require("../routes/manager/trash");
 const get_1 = require("../routes/manager/get");
 const list_2 = require("../routes/manager/list");
@@ -58,6 +63,9 @@ const createManagerOperationDefinitions = () => {
         "manager.contentTypes": {
             resolve: contentTypes_1.contentTypesHandler,
         },
+        "manager.contentType": {
+            resolve: contentType_1.contentTypeHandler,
+        },
         "manager.languages": {
             resolve: languages_1.languagesHandler,
         },
@@ -85,6 +93,36 @@ const createManagerOperationDefinitions = () => {
         "manager.list": {
             resolve: list_2.listHandler,
         },
+        "manager.favorites.list": {
+            resolve: favorites_1.listFavoritesHandler,
+        },
+        "manager.favorites.toggle": {
+            resolve: favorites_1.toggleFavoriteHandler,
+        },
+        "manager.localeVariants.list": {
+            resolve: localeVariants_1.listLocaleVariantsHandler,
+        },
+        "manager.localeVariants.create": {
+            resolve: localeVariants_1.createLocaleVariantHandler,
+        },
+        "manager.localeVariants.assign": {
+            resolve: localeVariants_1.assignLocaleVariantHandler,
+        },
+        "manager.localeVariants.unassign": {
+            resolve: localeVariants_1.unassignLocaleVariantHandler,
+        },
+        "manager.users.mentions": {
+            resolve: users_1.listMentionUsersHandler,
+        },
+        "manager.comments.list": {
+            resolve: comments_1.listCommentsHandler,
+        },
+        "manager.comments.create": {
+            resolve: comments_1.createCommentHandler,
+        },
+        "manager.comments.toggleReaction": {
+            resolve: comments_1.toggleCommentReactionHandler,
+        },
         "manager.setDefaultLanguage": {
             resolve: setDefaultLanguage_1.setDefaultLanguageHandler,
         },
@@ -152,7 +190,9 @@ const createManagerOperationDefinitions = () => {
             resolve: login_1.loginHandler,
             onSuccess: ({ ctx, result }) => {
                 if ("token" in result) {
-                    (0, sessionCookie_1.setSessionCookie)(ctx, result.token);
+                    (0, sessionCookie_1.setSessionCookie)(ctx, result.token, {
+                        maxAge: Math.max(0, Date.parse(result.expiresAt) - Date.now()),
+                    });
                 }
             },
         },
@@ -190,7 +230,9 @@ const createManagerOperationDefinitions = () => {
             resolve: verifyTotp_1.verifyTotpHandler,
             onSuccess: ({ ctx, result }) => {
                 if ("token" in result) {
-                    (0, sessionCookie_1.setSessionCookie)(ctx, result.token);
+                    (0, sessionCookie_1.setSessionCookie)(ctx, result.token, {
+                        maxAge: Math.max(0, Date.parse(result.expiresAt) - Date.now()),
+                    });
                 }
             },
         },
@@ -207,7 +249,9 @@ const createManagerOperationDefinitions = () => {
             resolve: webauthnAuthVerify_1.webauthnAuthVerifyHandler,
             onSuccess: ({ ctx, result }) => {
                 if ("token" in result) {
-                    (0, sessionCookie_1.setSessionCookie)(ctx, result.token);
+                    (0, sessionCookie_1.setSessionCookie)(ctx, result.token, {
+                        maxAge: Math.max(0, Date.parse(result.expiresAt) - Date.now()),
+                    });
                 }
             },
         },

package/dist/cjs/api/operations/manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../../src/api/operations/manager.ts"],"names":[],"mappings":";;;AACA,mCAAkD;AAClD,uCAA8C;AAC9C,yDAAqE;AACrE,qCAAgF;AAChF,oDAAoD;AACpD,mEAAuE;AACvE,6DAAuE;AACvE,yDAAoE;AACpE,+DAAyE;AACzE,iEAAqE;AACrE,qDAAyD;AACzD,qDAAyD;AACzD,2DAA+D;AAC/D,mDAAuD;AACvD,+CAAmD;AACnD,iDAAqD;AACrD,2DAA+D;AAC/D,4DAA0E;AAC1E,+DAAmE;AACnE,yEAA6E;AAC7E,6EAAiF;AACjF,qDAAyD;AACzD,wDAA4D;AAC5D,uEAA2E;AAC3E,0DAA8D;AAC9D,0EAA8E;AAC9E,yEAA6E;AAC7E,uEAA2E;AAC3E,kEAAsE;AACtE,qGAAyG;AACzG,mGAAuG;AACvG,6FAAiG;AACjG,2FAA+F;AAC/F,oEAAwE;AACxE,wEAA4E;AAC5E,gGAAoG;AACpG,sEAA0E;AAC1E,wEAA4E;AAC5E,yEAA6E;AAC7E,2EAA+E;AAC/E,qEAAyE;AACzE,uEAA2E;AAC3E,qEAAyE;AACzE,uEAA2E;AAC3E,0DAAsE;AACtE,8DAAyE;AACzE,wDAAmE;AACnE,0DAAsE;AACtE,gEAA2E;AAC3E,2EAA+E;AAC/E,6DAAwE;AAEjE,MAAM,iCAAiC,GAAG,GAAG,EAAE;IACpD,MAAM,SAAS,GAAG,IAAA,kDAA+B,GAAE,CAAC;IACpD,MAAM,eAAe,GAAsD;QACzE,sBAAsB,EAAE;YACtB,OAAO,EAAE,kCAAmB;SAC7B;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,4BAAgB;SAC1B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,0CAAuB;SACjC;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,sBAAa;SACvB;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,4BAAgB;SAC1B;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,sBAAa;SACvB;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,sBAAa;SACvB;QACD,eAAe,EAAE;YACf,OAAO,EAAE,oBAAY;SACtB;QACD,aAAa,EAAE;YACb,OAAO,EAAE,gBAAU;SACpB;QACD,cAAc,EAAE;YACd,OAAO,EAAE,kBAAW;SACrB;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,8CAAyB;SACnC;QACD,qBAAqB,EAAE;YACrB,OAAO,EAAE,gCAAkB;SAC5B;QACD,sBAAsB,EAAE;YACtB,OAAO,EAAE,yBAAkB;SAC5B;QACD,wBAAwB,EAAE;YACxB,OAAO,EAAE,4BAAmB;SAC7B;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,8BAAoB;SAC9B;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,4BAAqB;SAC/B;QACD,uBAAuB,EAAE;YACvB,OAAO,EAAE,0BAAmB;SAC7B;QACD,sBAAsB,EAAE;YACtB,OAAO,EAAE,uBAAiB;SAC3B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,+BAAqB;SAC/B;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,4CAAwB;SAClC;QACD,wBAAwB,EAAE;YACxB,OAAO,EAAE,6BAAoB;SAC9B;QACD,uBAAuB,EAAE;YACvB,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,IAAA,oCAAoB,EAAC,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC;SAChF;QACD,6BAA6B,EAAE;YAC7B,OAAO,EAAE,oCAAoB;SAC9B;QACD,8BAA8B,EAAE;YAC9B,OAAO,EAAE,sCAAqB;SAC/B;QACD,sBAAsB,EAAE;YACtB,OAAO,EAAE,gCAAkB;SAC5B;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,kCAAmB;SAC7B;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,gCAAkB;SAC5B;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,kCAAmB;SAC7B;QACD,uBAAuB,EAAE;YACvB,OAAO,EAAE,0BAAmB;SAC7B;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,6BAAoB;SAC9B;QACD,6BAA6B,EAAE;YAC7B,OAAO,EAAE,sCAAqB;SAC/B;QACD,oBAAoB,EAAE;YACpB,OAAO,EAAE,oBAAY;YACrB,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;gBAC7B,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACtB,IAAA,gCAAgB,EAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;SACF;QACD,qBAAqB,EAAE;YACrB,OAAO,EAAE,sBAAa;YACtB,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;gBACrB,IAAA,gCAAgB,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3C,CAAC;SACF;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,8BAAiB;SAC3B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,gCAAkB;SAC5B;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,oCAAoB;SAC9B;QACD,wCAAwC,EAAE;YACxC,OAAO,EAAE,4DAAgC;SAC1C;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,kCAAmB;SAC7B;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,oCAAoB;SAC9B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,8BAAiB;SAC3B;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,gCAAkB;SAC5B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,8BAAiB;YAC1B,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;gBAC7B,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACtB,IAAA,gCAAgB,EAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;SACF;QACD,wCAAwC,EAAE;YACxC,OAAO,EAAE,wDAA8B;SACxC;QACD,uCAAuC,EAAE;YACvC,OAAO,EAAE,sDAA6B;SACvC;QACD,oCAAoC,EAAE;YACpC,OAAO,EAAE,gDAA0B;SACpC;QACD,mCAAmC,EAAE;YACnC,OAAO,EAAE,8CAAyB;YAClC,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;gBAC7B,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACtB,IAAA,gCAAgB,EAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;SACF;KACF,CAAC;IAEF,OAAO,IAAA,2BAAiB,EACtB,IAAA,2BAAkB,EAChB,IAAA,+BAAuB,EAAC,SAAS,EAAE,eAAe,CAAC,EACnD,IAAA,yCAAgC,EAAC,SAAS,CAAC,CAC5C,CACF,CAAC;AACJ,CAAC,CAAC;AAvKW,QAAA,iCAAiC,qCAuK5C"}
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../../src/api/operations/manager.ts"],"names":[],"mappings":";;;AACA,mCAAkD;AAClD,uCAA8C;AAC9C,yDAAqE;AACrE,qCAAgF;AAChF,oDAAoD;AACpD,mEAAuE;AACvE,6DAAuE;AACvE,yDAAoE;AACpE,+DAAyE;AACzE,+DAAmE;AACnE,iEAAqE;AACrE,qDAAyD;AACzD,qDAAyD;AACzD,2DAA+D;AAC/D,2DAGqC;AACrC,qEAK0C;AAC1C,yDAIoC;AACpC,mDAAkE;AAClE,mDAAuD;AACvD,+CAAmD;AACnD,iDAAqD;AACrD,2DAA+D;AAC/D,4DAA0E;AAC1E,+DAAmE;AACnE,yEAA6E;AAC7E,6EAAiF;AACjF,qDAAyD;AACzD,wDAA4D;AAC5D,uEAA2E;AAC3E,0DAA8D;AAC9D,0EAA8E;AAC9E,yEAA6E;AAC7E,uEAA2E;AAC3E,kEAAsE;AACtE,qGAAyG;AACzG,mGAAuG;AACvG,6FAAiG;AACjG,2FAA+F;AAC/F,oEAAwE;AACxE,wEAA4E;AAC5E,gGAAoG;AACpG,sEAA0E;AAC1E,wEAA4E;AAC5E,yEAA6E;AAC7E,2EAA+E;AAC/E,qEAAyE;AACzE,uEAA2E;AAC3E,qEAAyE;AACzE,uEAA2E;AAC3E,0DAAsE;AACtE,8DAAyE;AACzE,wDAAmE;AACnE,0DAAsE;AACtE,gEAA2E;AAC3E,2EAA+E;AAC/E,6DAAwE;AAEjE,MAAM,iCAAiC,GAAG,GAAG,EAAE;IACpD,MAAM,SAAS,GAAG,IAAA,kDAA+B,GAAE,CAAC;IACpD,MAAM,eAAe,GAAsD;QACzE,sBAAsB,EAAE;YACtB,OAAO,EAAE,kCAAmB;SAC7B;QACD,qBAAqB,EAAE;YACrB,OAAO,EAAE,gCAAkB;SAC5B;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,4BAAgB;SAC1B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,0CAAuB;SACjC;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,sBAAa;SACvB;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,4BAAgB;SAC1B;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,sBAAa;SACvB;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,sBAAa;SACvB;QACD,eAAe,EAAE;YACf,OAAO,EAAE,oBAAY;SACtB;QACD,aAAa,EAAE;YACb,OAAO,EAAE,gBAAU;SACpB;QACD,cAAc,EAAE;YACd,OAAO,EAAE,kBAAW;SACrB;QACD,wBAAwB,EAAE;YACxB,OAAO,EAAE,gCAAoB;SAC9B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,iCAAqB;SAC/B;QACD,6BAA6B,EAAE;YAC7B,OAAO,EAAE,0CAAyB;SACnC;QACD,+BAA+B,EAAE;YAC/B,OAAO,EAAE,2CAA0B;SACpC;QACD,+BAA+B,EAAE;YAC/B,OAAO,EAAE,2CAA0B;SACpC;QACD,iCAAiC,EAAE;YACjC,OAAO,EAAE,6CAA4B;SACtC;QACD,wBAAwB,EAAE;YACxB,OAAO,EAAE,+BAAuB;SACjC;QACD,uBAAuB,EAAE;YACvB,OAAO,EAAE,8BAAmB;SAC7B;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,+BAAoB;SAC9B;QACD,iCAAiC,EAAE;YACjC,OAAO,EAAE,uCAA4B;SACtC;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,8CAAyB;SACnC;QACD,qBAAqB,EAAE;YACrB,OAAO,EAAE,gCAAkB;SAC5B;QACD,sBAAsB,EAAE;YACtB,OAAO,EAAE,yBAAkB;SAC5B;QACD,wBAAwB,EAAE;YACxB,OAAO,EAAE,4BAAmB;SAC7B;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,8BAAoB;SAC9B;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,4BAAqB;SAC/B;QACD,uBAAuB,EAAE;YACvB,OAAO,EAAE,0BAAmB;SAC7B;QACD,sBAAsB,EAAE;YACtB,OAAO,EAAE,uBAAiB;SAC3B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,+BAAqB;SAC/B;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,4CAAwB;SAClC;QACD,wBAAwB,EAAE;YACxB,OAAO,EAAE,6BAAoB;SAC9B;QACD,uBAAuB,EAAE;YACvB,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,IAAA,oCAAoB,EAAC,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC;SAChF;QACD,6BAA6B,EAAE;YAC7B,OAAO,EAAE,oCAAoB;SAC9B;QACD,8BAA8B,EAAE;YAC9B,OAAO,EAAE,sCAAqB;SAC/B;QACD,sBAAsB,EAAE;YACtB,OAAO,EAAE,gCAAkB;SAC5B;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,kCAAmB;SAC7B;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,gCAAkB;SAC5B;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,kCAAmB;SAC7B;QACD,uBAAuB,EAAE;YACvB,OAAO,EAAE,0BAAmB;SAC7B;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,6BAAoB;SAC9B;QACD,6BAA6B,EAAE;YAC7B,OAAO,EAAE,sCAAqB;SAC/B;QACD,oBAAoB,EAAE;YACpB,OAAO,EAAE,oBAAY;YACrB,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;gBAC7B,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACtB,IAAA,gCAAgB,EAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE;wBAClC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;qBAC/D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF;QACD,qBAAqB,EAAE;YACrB,OAAO,EAAE,sBAAa;YACtB,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;gBACrB,IAAA,gCAAgB,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3C,CAAC;SACF;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,8BAAiB;SAC3B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,gCAAkB;SAC5B;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,oCAAoB;SAC9B;QACD,wCAAwC,EAAE;YACxC,OAAO,EAAE,4DAAgC;SAC1C;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,kCAAmB;SAC7B;QACD,4BAA4B,EAAE;YAC5B,OAAO,EAAE,oCAAoB;SAC9B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,8BAAiB;SAC3B;QACD,2BAA2B,EAAE;YAC3B,OAAO,EAAE,gCAAkB;SAC5B;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,8BAAiB;YAC1B,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;gBAC7B,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACtB,IAAA,gCAAgB,EAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE;wBAClC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;qBAC/D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF;QACD,wCAAwC,EAAE;YACxC,OAAO,EAAE,wDAA8B;SACxC;QACD,uCAAuC,EAAE;YACvC,OAAO,EAAE,sDAA6B;SACvC;QACD,oCAAoC,EAAE;YACpC,OAAO,EAAE,gDAA0B;SACpC;QACD,mCAAmC,EAAE;YACnC,OAAO,EAAE,8CAAyB;YAClC,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;gBAC7B,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACtB,IAAA,gCAAgB,EAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE;wBAClC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;qBAC/D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF;KACF,CAAC;IAEF,OAAO,IAAA,2BAAiB,EACtB,IAAA,2BAAkB,EAChB,IAAA,+BAAuB,EAAC,SAAS,EAAE,eAAe,CAAC,EACnD,IAAA,yCAAgC,EAAC,SAAS,CAAC,CAC5C,CACF,CAAC;AACJ,CAAC,CAAC;AA9MW,QAAA,iCAAiC,qCA8M5C"}

package/dist/cjs/api/routes/manager/apiOperations.js

@@ -8,7 +8,7 @@ const web_1 = require("../../operations/web");
 const checkPermissions_1 = require("../../utils/checkPermissions");
 const apiOperationsHandler = async ({ contracts, implementations, ctx, }) => {
     const user = ctx.getUser();
-    (0, checkPermissions_1.checkPermissions)(user, ["manager.apiOperations.readAny"]);
+    (0, checkPermissions_1.checkPermissions)(user, ["content.ApiOperation.readAny"]);
     const managerOperations = (0, custom_1.mergeOperationMaps)((0, types_1.mergeOperationContracts)(contracts, implementations), (0, custom_1.getCustomApiOperationDefinitions)("manager"));
     const coreOperations = {
         ...managerOperations,

package/dist/cjs/api/routes/manager/apiOperations.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiOperations.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/apiOperations.ts"],"names":[],"mappings":";;;AAMA,sDAAqE;AACrE,oDAGiC;AACjC,kDAAiE;AACjE,8CAAqE;AACrE,mEAAgE;AAEzD,MAAM,oBAAoB,GAAG,KAAK,EAEvC,EACA,SAAS,EACT,eAAe,EACf,GAAG,GAKJ,EAAgC,EAAE;IACjC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,IAAA,mCAAgB,EAAC,IAAI,EAAE,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAE1D,MAAM,iBAAiB,GAAG,IAAA,2BAAkB,EAC1C,IAAA,+BAAuB,EAAC,SAAS,EAAE,eAAe,CAAC,EACnD,IAAA,yCAAgC,EAAC,SAAS,CAAC,CAC5C,CAAC;IACF,MAAM,cAAc,GAAG;QACrB,GAAG,iBAAiB;QACpB,GAAG,IAAA,mCAA6B,GAAE;KACnC,CAAC;IACF,MAAM,UAAU,GAAG,IAAA,2BAAkB,EACnC,cAAc,EACd,IAAA,yCAAgC,EAAC,UAAU,CAAC,CAC7C,CAAC;IAEF,OAAO,IAAA,mCAAyB,EAAC,UAAU,CAAC,CAAC;AAC/C,CAAC,CAAC;AA5BW,QAAA,oBAAoB,wBA4B/B"}
+{"version":3,"file":"apiOperations.js","sourceRoot":"","sources":["../../../../../src/api/routes/manager/apiOperations.ts"],"names":[],"mappings":";;;AAMA,sDAAqE;AACrE,oDAGiC;AACjC,kDAAiE;AACjE,8CAAqE;AACrE,mEAAgE;AAEzD,MAAM,oBAAoB,GAAG,KAAK,EAEvC,EACA,SAAS,EACT,eAAe,EACf,GAAG,GAKJ,EAAgC,EAAE;IACjC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,IAAA,mCAAgB,EAAC,IAAI,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAEzD,MAAM,iBAAiB,GAAG,IAAA,2BAAkB,EAC1C,IAAA,+BAAuB,EAAC,SAAS,EAAE,eAAe,CAAC,EACnD,IAAA,yCAAgC,EAAC,SAAS,CAAC,CAC5C,CAAC;IACF,MAAM,cAAc,GAAG;QACrB,GAAG,iBAAiB;QACpB,GAAG,IAAA,mCAA6B,GAAE;KACnC,CAAC;IACF,MAAM,UAAU,GAAG,IAAA,2BAAkB,EACnC,cAAc,EACd,IAAA,yCAAgC,EAAC,UAAU,CAAC,CAC7C,CAAC;IAEF,OAAO,IAAA,mCAAyB,EAAC,UAAU,CAAC,CAAC;AAC/C,CAAC,CAAC;AA5BW,QAAA,oBAAoB,wBA4B/B"}

package/dist/cjs/api/routes/manager/auth/login.js

@@ -5,19 +5,34 @@ const crypto_1 = require("crypto");
 const internal_content_types_1 = require("../../../../internal-content-types");
 const errors_1 = require("../../../../lib/errors");
 const orm_1 = require("../../../../orm");
+const sessionCookie_1 = require("../../../sessionCookie");
+const authRateLimit_1 = require("../../../utils/authRateLimit");
 const passwords_1 = require("../../../utils/passwords");
-const loginHandler = async ({ input, }) => {
+const loginHandler = async ({ input, ctx, }) => {
     const { username, password } = input;
     const db = await (0, orm_1.getMongoService)();
+    const rateLimitKey = `login:${(0, authRateLimit_1.getRequestRateLimitIdentifier)(ctx)}:${username.toLowerCase()}`;
+    (0, authRateLimit_1.assertAuthRateLimit)({
+        key: rateLimitKey,
+        limit: 8,
+        windowMs: 15 * 60 * 1000,
+    });
     const user = await db.find(internal_content_types_1.ManagerUser, { email: username });
     if (!user)
         (0, errors_1.throwAppError)("FORBIDDEN", {
             reason: "INVALID_CREDENTIALS",
         });
-    if (!(0, passwords_1.verifyPassword)(password, user.password))
+    const passwordCheck = (0, passwords_1.verifyStoredPassword)(password, user.password);
+    if (!passwordCheck.valid)
         (0, errors_1.throwAppError)("FORBIDDEN", {
             reason: "INVALID_CREDENTIALS",
         });
+    if (passwordCheck.needsRehash) {
+        await db.update(internal_content_types_1.ManagerUser, user._id, {
+            password: (0, passwords_1.hashPassword)(password),
+        });
+    }
+    (0, authRateLimit_1.resetAuthRateLimit)(rateLimitKey);
     const mfa = await db.find(internal_content_types_1.UserMfa, { "user._id": user._id });
     if (mfa?.enabled) {
         const challenge = (0, crypto_1.randomBytes)(32).toString("hex");
@@ -41,7 +56,7 @@ const loginHandler = async ({ input, }) => {
         };
     }
     const token = crypto.randomUUID();
-    const expiresAt = new Date(Date.now() + 1000 * 60 * 60 * 24); // 1 day
+    const expiresAt = new Date(Date.now() + sessionCookie_1.SESSION_MAX_AGE_MS);
     await db.create(internal_content_types_1.Session, {
         token,
         user: {
@@ -54,6 +69,7 @@ const loginHandler = async ({ input, }) => {
     });
     return {
         token,
+        expiresAt: expiresAt.toISOString(),
     };
 };
 exports.loginHandler = loginHandler;

package/dist/cjs/api/routes/manager/auth/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/login.ts"],"names":[],"mappings":";;;AAAA,mCAAqC;AAErC,+EAK4C;AAC5C,mDAAuD;AACvD,yCAAkD;AAKlD,wDAA0D;AAEnD,MAAM,YAAY,GAAG,KAAK,EAAE,EACjC,KAAK,GAGN,EAAwB,EAAE;IACzB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IAEnC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,oCAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QACP,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IAEL,IAAI,CAAC,IAAA,0BAAc,EAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC;QAC1C,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IAEL,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY;QAEpE,MAAM,EAAE,CAAC,MAAM,CAAC,qCAAY,EAAE;YAC5B,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE;gBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,oCAAW,CAAC,IAAI;gBAC7B,IAAI,EAAE,UAAU;aACjB;YACD,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;YACrC,SAAS;YACT,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,cAAc;SACtB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS;YACT,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;YACrC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ;IAEtE,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;QACvB,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,oCAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AA9DW,QAAA,YAAY,gBA8DvB"}
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/login.ts"],"names":[],"mappings":";;;AAAA,mCAAqC;AAErC,+EAK4C;AAC5C,mDAAuD;AACvD,yCAAkD;AAMlD,0DAA4D;AAC5D,gEAIsC;AACtC,wDAA8E;AAEvE,MAAM,YAAY,GAAG,KAAK,EAAE,EACjC,KAAK,EACL,GAAG,GAIJ,EAAwB,EAAE;IACzB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,YAAY,GAAG,SAAS,IAAA,6CAA6B,EAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;IAE7F,IAAA,mCAAmB,EAAC;QAClB,GAAG,EAAE,YAAY;QACjB,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;KACzB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,oCAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QACP,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IAEL,MAAM,aAAa,GAAG,IAAA,gCAAoB,EAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,aAAa,CAAC,KAAK;QACtB,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IAEL,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;YACrC,QAAQ,EAAE,IAAA,wBAAY,EAAC,QAAQ,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IAAA,kCAAkB,EAAC,YAAY,CAAC,CAAC;IAEjC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY;QAEpE,MAAM,EAAE,CAAC,MAAM,CAAC,qCAAY,EAAE;YAC5B,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE;gBACJ,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,WAAW,EAAE,oCAAW,CAAC,IAAI;gBAC7B,IAAI,EAAE,UAAU;aACjB;YACD,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;YACrC,SAAS;YACT,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,cAAc;SACtB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS;YACT,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;YACrC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;SACnC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kCAAkB,CAAC,CAAC;IAE5D,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;QACvB,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,oCAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;QACL,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;KACnC,CAAC;AACJ,CAAC,CAAC;AAhFW,QAAA,YAAY,gBAgFvB"}

package/dist/cjs/api/routes/manager/auth/markTourSeen.js

@@ -10,7 +10,9 @@ const markTourSeenHandler = async ({ input, ctx, }) => {
     const updated = await db.update(internal_content_types_1.ManagerUser, user._id, {
         seenTours: (0, exports.getUpdatedSeenTours)(user.seenTours, input.tourId),
     });
-    return await (0, populateRelations_1.populateRelations)(updated);
+    return await (0, populateRelations_1.populateRelations)(updated, {
+        exposePrivateMedia: true,
+    });
 };
 exports.markTourSeenHandler = markTourSeenHandler;
 const getUpdatedSeenTours = (seenTours, tourId) => Array.from(new Set([...(seenTours ?? []).filter(Boolean), tourId]));

package/dist/cjs/api/routes/manager/auth/markTourSeen.js.map

@@ -1 +1 @@
-{"version":3,"file":"markTourSeen.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/markTourSeen.ts"],"names":[],"mappings":";;;AAAA,+EAAiE;AACjE,yCAAkD;AAGlD,kFAA+E;AAExE,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACxC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IAEnC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrD,SAAS,EAAE,IAAA,2BAAmB,EAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;KAC7D,CAAC,CAAC;IAEH,OAAO,MAAM,IAAA,qCAAiB,EAAc,OAAO,CAAC,CAAC;AACvD,CAAC,CAAC;AAfW,QAAA,mBAAmB,uBAe9B;AAEK,MAAM,mBAAmB,GAAG,CACjC,SAA6C,EAC7C,MAAc,EACd,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAH5D,QAAA,mBAAmB,uBAGyC"}
+{"version":3,"file":"markTourSeen.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/markTourSeen.ts"],"names":[],"mappings":";;;AAAA,+EAAiE;AACjE,yCAAkD;AAGlD,kFAA+E;AAExE,MAAM,mBAAmB,GAAG,KAAK,EAAE,EACxC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IAEnC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrD,SAAS,EAAE,IAAA,2BAAmB,EAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;KAC7D,CAAC,CAAC;IAEH,OAAO,MAAM,IAAA,qCAAiB,EAAc,OAAO,EAAE;QACnD,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;AACL,CAAC,CAAC;AAjBW,QAAA,mBAAmB,uBAiB9B;AAEK,MAAM,mBAAmB,GAAG,CACjC,SAA6C,EAC7C,MAAc,EACd,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAH5D,QAAA,mBAAmB,uBAGyC"}

package/dist/cjs/api/routes/manager/auth/totp/verifyTotp.js

@@ -38,9 +38,17 @@ const OTPAuth = __importStar(require("otpauth"));
 const internal_content_types_1 = require("../../../../../internal-content-types");
 const errors_1 = require("../../../../../lib/errors");
 const orm_1 = require("../../../../../orm");
+const sessionCookie_1 = require("../../../../sessionCookie");
+const authRateLimit_1 = require("../../../../utils/authRateLimit");
 const verifyTotpHandler = async ({ input, }) => {
     const db = await (0, orm_1.getMongoService)();
     const { challenge, code } = input;
+    const rateLimitKey = `mfa:totp:${challenge}`;
+    (0, authRateLimit_1.assertAuthRateLimit)({
+        key: rateLimitKey,
+        limit: 8,
+        windowMs: 5 * 60 * 1000,
+    });
     const mfaChallenge = await db.find(internal_content_types_1.MfaChallenge, { token: challenge });
     if (!mfaChallenge) {
         (0, errors_1.throwAppError)("NOT_FOUND", {
@@ -98,10 +106,11 @@ const verifyTotpHandler = async ({ input, }) => {
             error: "INVALID_CODE",
         };
     }
+    (0, authRateLimit_1.resetAuthRateLimit)(rateLimitKey);
     // consume challenge (así no se reutiliza)
     await db.update(internal_content_types_1.MfaChallenge, mfaChallenge._id, { consumedAt: new Date() });
     const token = crypto.randomUUID();
-    const expiresAt = new Date(Date.now() + 1000 * 60 * 60 * 24); // 1 day
+    const expiresAt = new Date(Date.now() + sessionCookie_1.SESSION_MAX_AGE_MS);
     await db.create(internal_content_types_1.Session, {
         token,
         user: {
@@ -114,6 +123,7 @@ const verifyTotpHandler = async ({ input, }) => {
     });
     return {
         token,
+        expiresAt: expiresAt.toISOString(),
     };
 };
 exports.verifyTotpHandler = verifyTotpHandler;

package/dist/cjs/api/routes/manager/auth/totp/verifyTotp.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifyTotp.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/totp/verifyTotp.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAmC;AACnC,kFAK+C;AAC/C,sDAA0D;AAC1D,4CAAqD;AAG9C,MAAM,iBAAiB,GAAG,KAAK,EAAE,EACtC,KAAK,GAGN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IAEnC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAElC,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,qCAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,EAAE,EAAE,SAAS;YACb,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACnC,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,2BAA2B,YAAY,CAAC,MAAM,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;QAC5B,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,gCAAgC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7D,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IACpD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,qCAAY,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;IAErC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,oCAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,EAAE,EAAE,MAAM;YACV,QAAQ,EAAE,aAAa;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;QACtC,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;KAClD,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,KAAK,EAAE,cAAc;SACtB,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,MAAM,EAAE,CAAC,MAAM,CAAC,qCAAY,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ;IAEtE,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;QACvB,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,oCAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;KACN,CAAC;AACJ,CAAC,CAAC;AAhGW,QAAA,iBAAiB,qBAgG5B"}
+{"version":3,"file":"verifyTotp.js","sourceRoot":"","sources":["../../../../../../../src/api/routes/manager/auth/totp/verifyTotp.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAmC;AACnC,kFAK+C;AAC/C,sDAA0D;AAC1D,4CAAqD;AAErD,6DAA+D;AAC/D,mEAGyC;AAElC,MAAM,iBAAiB,GAAG,KAAK,EAAE,EACtC,KAAK,GAGN,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IAEnC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,YAAY,GAAG,YAAY,SAAS,EAAE,CAAC;IAE7C,IAAA,mCAAmB,EAAC;QAClB,GAAG,EAAE,YAAY;QACjB,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;KACxB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,qCAAY,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,EAAE,EAAE,SAAS;YACb,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACnC,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,2BAA2B,YAAY,CAAC,MAAM,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;QAC5B,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,gCAAgC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7D,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;IACpD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,qCAAY,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;IAErC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,oCAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,EAAE,EAAE,MAAM;YACV,QAAQ,EAAE,aAAa;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,gCAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;QACtC,IAAA,sBAAa,EAAC,UAAU,EAAE;YACxB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;KAClD,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,KAAK,EAAE,cAAc;SACtB,CAAC;IACJ,CAAC;IACD,IAAA,kCAAkB,EAAC,YAAY,CAAC,CAAC;IAEjC,0CAA0C;IAC1C,MAAM,EAAE,CAAC,MAAM,CAAC,qCAAY,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kCAAkB,CAAC,CAAC;IAE5D,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;QACvB,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,oCAAW,CAAC,IAAI;YAC7B,IAAI,EAAE,UAAU;SACjB;QACD,SAAS;QACT,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,KAAK;QACL,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;KACnC,CAAC;AACJ,CAAC,CAAC;AAzGW,QAAA,iBAAiB,qBAyG5B"}

package/dist/cjs/api/routes/manager/auth/updateAccount.js

@@ -11,6 +11,9 @@ const updateAccountHandler = async ({ input, ctx, }) => {
         ? await db.get(internal_content_types_1.Media, input.avatarId)
         : undefined;
     const updated = await db.update(internal_content_types_1.ManagerUser, user._id, {
+        ...(input.name !== undefined
+            ? { name: input.name?.trim() ?? "" }
+            : {}),
         user: input.user.trim(),
         avatarId: avatar?._id ?? user.avatarId,
         avatarKey: avatar?.key ?? user.avatarKey,
@@ -18,7 +21,9 @@ const updateAccountHandler = async ({ input, ctx, }) => {
         avatarUrl: avatar?.url ?? user.avatarUrl,
         avatarPreviewUrl: avatar?.previewUrl ?? user.avatarPreviewUrl,
     });
-    return await (0, populateRelations_1.populateRelations)(updated);
+    return await (0, populateRelations_1.populateRelations)(updated, {
+        exposePrivateMedia: true,
+    });
 };
 exports.updateAccountHandler = updateAccountHandler;
 //# sourceMappingURL=updateAccount.js.map

package/dist/cjs/api/routes/manager/auth/updateAccount.js.map

@@ -1 +1 @@
-{"version":3,"file":"updateAccount.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updateAccount.ts"],"names":[],"mappings":";;;AAAA,+EAAwE;AACxE,yCAAkD;AAKlD,kFAA+E;AAExE,MAAM,oBAAoB,GAAG,KAAK,EAAE,EACzC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,MAAM,GACV,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;QAChD,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,8BAAK,EAAE,KAAK,CAAC,QAAQ,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ;QACtC,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS;QACxC,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,YAAY;QACjD,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS;QACxC,gBAAgB,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,gBAAgB;KAC9D,CAAC,CAAC;IAEH,OAAO,MAAM,IAAA,qCAAiB,EAAc,OAAO,CAAC,CAAC;AACvD,CAAC,CAAC;AAxBW,QAAA,oBAAoB,wBAwB/B"}
+{"version":3,"file":"updateAccount.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updateAccount.ts"],"names":[],"mappings":";;;AAAA,+EAAwE;AACxE,yCAAkD;AAKlD,kFAA+E;AAExE,MAAM,oBAAoB,GAAG,KAAK,EAAE,EACzC,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,MAAM,GACV,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;QAChD,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,8BAAK,EAAE,KAAK,CAAC,QAAQ,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ;QACtC,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS;QACxC,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,YAAY;QACjD,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS;QACxC,gBAAgB,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,gBAAgB;KAC9D,CAAC,CAAC;IAEH,OAAO,MAAM,IAAA,qCAAiB,EAAc,OAAO,EAAE;QACnD,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;AACL,CAAC,CAAC;AA7BW,QAAA,oBAAoB,wBA6B/B"}

package/dist/cjs/api/routes/manager/auth/updatePassword.js

@@ -2,17 +2,27 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.updatePasswordHandler = void 0;
 const internal_content_types_1 = require("../../../../internal-content-types");
+const errors_1 = require("../../../../lib/errors");
 const orm_1 = require("../../../../orm");
+const sessionCookie_1 = require("../../../sessionCookie");
 const passwords_1 = require("../../../utils/passwords");
 const updatePasswordHandler = async ({ input, ctx, }) => {
     const db = await (0, orm_1.getMongoService)();
     const user = ctx.getUser();
     const password = (await db.get(internal_content_types_1.ManagerUser, user._id, ["password"])).password;
-    if (!(0, passwords_1.verifyPassword)(input.currentPassword, password)) {
-        throw new Error("Current password is incorrect");
+    if (!(0, passwords_1.verifyStoredPassword)(input.currentPassword, password).valid) {
+        (0, errors_1.throwAppError)("FORBIDDEN", {
+            reason: "INVALID_CREDENTIALS",
+        });
     }
     await db.update(internal_content_types_1.ManagerUser, user._id, {
-        password: (0, passwords_1.hashPassword)(input.newPassword),
+        password: input.newPassword,
+    });
+    await db.delete(internal_content_types_1.Session, {
+        "user._id": user._id,
+        ...((0, sessionCookie_1.getSessionCookie)(ctx)
+            ? { token: { $ne: (0, sessionCookie_1.getSessionCookie)(ctx) } }
+            : {}),
     });
     return { ok: true };
 };

package/dist/cjs/api/routes/manager/auth/updatePassword.js.map

@@ -1 +1 @@
-{"version":3,"file":"updatePassword.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updatePassword.ts"],"names":[],"mappings":";;;AAAA,+EAAiE;AACjE,yCAAkD;AAGlD,wDAAwE;AAEjE,MAAM,qBAAqB,GAAG,KAAK,EAAE,EAC1C,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE9E,IAAI,CAAC,IAAA,0BAAc,EAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrC,QAAQ,EAAE,IAAA,wBAAY,EAAC,KAAK,CAAC,WAAW,CAAC;KAC1C,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC;AApBW,QAAA,qBAAqB,yBAoBhC"}
+{"version":3,"file":"updatePassword.js","sourceRoot":"","sources":["../../../../../../src/api/routes/manager/auth/updatePassword.ts"],"names":[],"mappings":";;;AAAA,+EAA0E;AAC1E,mDAAuD;AACvD,yCAAkD;AAElD,0DAA0D;AAE1D,wDAAgE;AAEzD,MAAM,qBAAqB,GAAG,KAAK,EAAE,EAC1C,KAAK,EACL,GAAG,GAIJ,EAAE,EAAE;IACH,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAe,GAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE9E,IAAI,CAAC,IAAA,gCAAoB,EAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;QACjE,IAAA,sBAAa,EAAC,WAAW,EAAE;YACzB,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,CAAC,oCAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACrC,QAAQ,EAAE,KAAK,CAAC,WAAW;KAC5B,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,MAAM,CAAC,gCAAO,EAAE;QACvB,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,GAAG,CAAC,IAAA,gCAAgB,EAAC,GAAG,CAAC;YACvB,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAA,gCAAgB,EAAC,GAAG,CAAC,EAAE,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;KACC,CAAC,CAAC;IAEZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC,CAAC;AA5BW,QAAA,qBAAqB,yBA4BhC"}