@riao/authn-password 1.0.0 → 1.1.0

package/README.md

@@ -67,10 +67,13 @@ const userId = await authService.createPrincipal({
   password: 'securePassword123',
 });
 
+// Change a password
+await authService.changePassword(userId, 'newPassword123');
+
 // Authenticate a user
 const user = await authService.authenticate({
   login: 'john.doe',
-  password: 'securePassword123',
+  password: 'newPassword123',
 });
 
 if (user) {

package/authentication-password-migrations.d.ts

@@ -1,5 +1,6 @@
-import { Migration } from '@riao/dbal';
-import { AuthMigrations } from '@riao/iam/auth/auth-migrations';
-export declare class AuthenticationPasswordMigrations extends AuthMigrations {
+import { Migration, MigrationPackage } from '@riao/dbal';
+export declare class AuthenticationPasswordMigrations extends MigrationPackage {
+    package: string;
+    name: string;
     getMigrations(): Promise<Record<string, typeof Migration<any>>>;
 }

package/authentication-password-migrations.js

@@ -1,12 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthenticationPasswordMigrations = void 0;
-const auth_migrations_1 = require("@riao/iam/auth/auth-migrations");
+const dbal_1 = require("@riao/dbal");
 const _001_create_passwords_table_1 = require("./migrations/001-create-passwords-table");
-class AuthenticationPasswordMigrations extends auth_migrations_1.AuthMigrations {
+class AuthenticationPasswordMigrations extends dbal_1.MigrationPackage {
+    package = '@riao/iam-authn-password';
+    name = '@riao/iam-authn-password';
     async getMigrations() {
         return {
-            ...(await super.getMigrations()),
             'create-passwords-table': _001_create_passwords_table_1.CreatePasswordsTable,
         };
     }

package/authentication-password-migrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication-password-migrations.js","sourceRoot":"","sources":["../../src/authentication-password-migrations.ts"],"names":[],"mappings":";;;AACA,oEAAgE;AAChE,yFAA+E;AAE/E,MAAa,gCAAiC,SAAQ,gCAAc;IAC1D,KAAK,CAAC,aAAa;QAI3B,OAAO;YACN,GAAG,CAAC,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;YAChC,wBAAwB,EAAE,kDAAoB;SAC9C,CAAC;IACH,CAAC;CACD;AAVD,4EAUC"}
+{"version":3,"file":"authentication-password-migrations.js","sourceRoot":"","sources":["../../src/authentication-password-migrations.ts"],"names":[],"mappings":";;;AAAA,qCAAyD;AACzD,yFAA+E;AAE/E,MAAa,gCAAiC,SAAQ,uBAAgB;IAC5D,OAAO,GAAG,0BAA0B,CAAC;IACrC,IAAI,GAAG,0BAA0B,CAAC;IAElC,KAAK,CAAC,aAAa;QAI3B,OAAO;YACN,wBAAwB,EAAE,kDAAoB;SAC9C,CAAC;IACH,CAAC;CACD;AAZD,4EAYC"}

package/authentication-password.d.ts

@@ -14,7 +14,10 @@ export declare abstract class PasswordAuthentication<TPrincipal extends Principa
     createPrincipal(principal: Omit<TPrincipal, 'id' | 'create_timestamp'> & {
         password: string;
     }): Promise<DatabaseRecordId>;
+    changePassword(principalId: DatabaseRecordId, newPassword: string): Promise<void>;
     authenticate(credentials: Partial<TPrincipal & {
         password: string;
     }>): Promise<TPrincipal | null>;
+    protected revokePasswords(principalId: DatabaseRecordId): Promise<void>;
+    protected insertPassword(principalId: DatabaseRecordId, hash: string): Promise<void>;
 }

package/authentication-password.js

@@ -18,14 +18,16 @@ class PasswordAuthentication extends authentication_1.Authentication {
         const hash = await this.hash.make(principal.password);
         delete principal.password;
         const principalId = await super.createPrincipal(principal);
-        await this.passwordsRepo.insertOne({
-            record: {
-                principal_id: principalId,
-                password_hash: hash,
-            },
-        });
+        await this.insertPassword(principalId, hash);
         return principalId;
     }
+    async changePassword(principalId, newPassword) {
+        // eslint-disable-next-line no-console
+        console.log('Changing password for principal ID:', principalId, newPassword);
+        const hash = await this.hash.make(newPassword);
+        await this.revokePasswords(principalId);
+        await this.insertPassword(principalId, hash);
+    }
     async authenticate(credentials) {
         const principal = await this.findActivePrincipal({
             where: {
@@ -45,6 +47,23 @@ class PasswordAuthentication extends authentication_1.Authentication {
         const isValid = await this.hash.check(credentials.password, passwordRecord?.password_hash);
         return isValid ? principal : null;
     }
+    async revokePasswords(principalId) {
+        await this.passwordsRepo.update({
+            set: { deactivate_timestamp: new Date() },
+            where: {
+                principal_id: principalId,
+                deactivate_timestamp: null,
+            },
+        });
+    }
+    async insertPassword(principalId, hash) {
+        await this.passwordsRepo.insertOne({
+            record: {
+                principal_id: principalId,
+                password_hash: hash,
+            },
+        });
+    }
 }
 exports.PasswordAuthentication = PasswordAuthentication;
 //# sourceMappingURL=authentication-password.js.map

package/authentication-password.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication-password.js","sourceRoot":"","sources":["../../src/authentication-password.ts"],"names":[],"mappings":";;;AACA,yCAAsC;AAEtC,6DAA0D;AAQ1D,MAAsB,sBAEpB,SAAQ,+BAA0B;IAC5B,aAAa,CAA4B;IAEtC,IAAI,CAAO;IAErB,YAAmB,OAAsC;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,WAAI,EAAE,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC,kBAAkB,CAAW;YAC5D,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,IAAI;SAClB,CAAC,CAAC;IACJ,CAAC;IAEe,KAAK,CAAC,eAAe,CACpC,SAEC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAQ,SAAmC,CAAC,QAAQ,CAAC;QAErD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE3D,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE;gBACP,YAAY,EAAE,WAAqB;gBACnC,aAAa,EAAE,IAAI;aACnB;SACD,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,YAAY,CACxB,WAAuD;QAEvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;YAChD,KAAK,EAAc;gBAClB,KAAK,EAAE,WAAW,CAAC,KAAK;aACxB;SACD,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE;YACjE,OAAO,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC,WAAW,CAAC,QAAkB,EAC9B,cAAc,EAAE,aAAuB,CACvC,CAAC;QAEF,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;CACD;AAjED,wDAiEC"}
+{"version":3,"file":"authentication-password.js","sourceRoot":"","sources":["../../src/authentication-password.ts"],"names":[],"mappings":";;;AACA,yCAAsC;AAEtC,6DAA0D;AAQ1D,MAAsB,sBAEpB,SAAQ,+BAA0B;IAC5B,aAAa,CAA4B;IAEtC,IAAI,CAAO;IAErB,YAAmB,OAAsC;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,WAAI,EAAE,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC,kBAAkB,CAAW;YAC5D,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,IAAI;SAClB,CAAC,CAAC;IACJ,CAAC;IAEe,KAAK,CAAC,eAAe,CACpC,SAEC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtD,OAAQ,SAAmC,CAAC,QAAQ,CAAC;QAErD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE7C,OAAO,WAAW,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,cAAc,CAC1B,WAA6B,EAC7B,WAAmB;QAEnB,sCAAsC;QACtC,OAAO,CAAC,GAAG,CACV,qCAAqC,EACrC,WAAW,EACX,WAAW,CACX,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE/C,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAEM,KAAK,CAAC,YAAY,CACxB,WAAuD;QAEvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;YAChD,KAAK,EAAc;gBAClB,KAAK,EAAE,WAAW,CAAC,KAAK;aACxB;SACD,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YACvD,KAAK,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE;YACjE,OAAO,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACpC,WAAW,CAAC,QAAkB,EAC9B,cAAc,EAAE,aAAuB,CACvC,CAAC;QAEF,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;IAES,KAAK,CAAC,eAAe,CAC9B,WAA6B;QAE7B,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAC/B,GAAG,EAAE,EAAE,oBAAoB,EAAE,IAAI,IAAI,EAAE,EAAE;YACzC,KAAK,EAAE;gBACN,YAAY,EAAE,WAAqB;gBACnC,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAC;IACJ,CAAC;IAES,KAAK,CAAC,cAAc,CAC7B,WAA6B,EAC7B,IAAY;QAEZ,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;YAClC,MAAM,EAAE;gBACP,YAAY,EAAE,WAAqB;gBACnC,aAAa,EAAE,IAAI;aACnB;SACD,CAAC,CAAC;IACJ,CAAC;CACD;AAnGD,wDAmGC"}

package/index.d.ts

@@ -1 +1,2 @@
-export { PasswordAuthentication } from './authentication-password';
+export { PasswordAuthentication, PasswordAuthenticationOptions, } from './authentication-password';
+export * from './password';

package/index.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PasswordAuthentication = void 0;
+const tslib_1 = require("tslib");
 var authentication_password_1 = require("./authentication-password");
 Object.defineProperty(exports, "PasswordAuthentication", { enumerable: true, get: function () { return authentication_password_1.PasswordAuthentication; } });
+tslib_1.__exportStar(require("./password"), exports);
 //# sourceMappingURL=index.js.map

package/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;AAAA,qEAAmE;AAA1D,iIAAA,sBAAsB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;AAAA,qEAGmC;AAFlC,iIAAA,sBAAsB,OAAA;AAGvB,qDAA2B"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@riao/authn-password",
-	"version": "1.0.0",
+	"version": "1.1.0",
 	"description": "Password driver for Riao",
 	"typescript-template": {
 		"base": "1.0.1",