@semapps/auth 1.1.3 → 1.2.0

package/dist/services/account.d.ts

@@ -0,0 +1,122 @@
+import DbService from 'moleculer-db';
+import { TripleStoreAdapter } from '@semapps/triplestore';
+declare const AuthAccountSchema: {
+    name: "auth.account";
+    mixins: (typeof DbService)[];
+    adapter: TripleStoreAdapter;
+    settings: {
+        idField: string;
+        reservedUsernames: string[];
+        minPasswordLength: number;
+        minUsernameLength: number;
+    };
+    dependencies: string[];
+    actions: {
+        create: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        attachWebId: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        verify: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        usernameExists: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<boolean>;
+        };
+        emailExists: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<boolean>;
+        };
+        find: {
+            /** Overwrite find method, to filter accounts with tombstone. */
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        findByUsername: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        findByWebId: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        findByEmail: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        setPassword: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        setNewPassword: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        generateResetPasswordToken: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        findDatasetByWebId: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        findSettingsByWebId: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<{
+                email: any;
+                preferredLocale: any;
+            }>;
+        };
+        updateAccountSettings: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+        deleteByWebId: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<boolean>;
+        };
+        setTombstone: {
+            handler(ctx: Moleculer.Context<Optionalize<{
+                [x: string]: any;
+            }>, {}, Moleculer.GenericObject>): Promise<any>;
+        };
+    };
+    methods: {
+        isValidUsername(ctx: any, username: any): Promise<{
+            isValid: boolean;
+            error: string | undefined;
+        }>;
+        hashPassword(password: any): Promise<unknown>;
+        comparePassword(password: any, hash: any): Promise<unknown>;
+        generateResetPasswordToken(): Promise<unknown>;
+    };
+};
+export default AuthAccountSchema;
+declare global {
+    export namespace Moleculer {
+        interface AllServices {
+            [AuthAccountSchema.name]: typeof AuthAccountSchema;
+        }
+    }
+}

package/dist/services/account.js

@@ -0,0 +1,324 @@
+// @ts-expect-error TS(7016): Could not find a declaration file for module 'bcry... Remove this comment to see the full error message
+import bcrypt from 'bcrypt';
+// @ts-expect-error TS(7016): Could not find a declaration file for module 'spea... Remove this comment to see the full error message
+import createSlug from 'speakingurl';
+import DbService from 'moleculer-db';
+import { TripleStoreAdapter } from '@semapps/triplestore';
+import crypto from 'crypto';
+// Taken from https://stackoverflow.com/a/9204568/7900695
+const emailRegexp = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+const AuthAccountSchema = {
+    name: 'auth.account',
+    mixins: [DbService],
+    adapter: new TripleStoreAdapter({ type: 'AuthAccount', dataset: 'settings' }),
+    settings: {
+        idField: '@id',
+        reservedUsernames: ['relay'],
+        minPasswordLength: 1,
+        minUsernameLength: 1
+    },
+    dependencies: ['triplestore'],
+    actions: {
+        create: {
+            async handler(ctx) {
+                let { uuid, username, password, email, webId, ...rest } = ctx.params;
+                // FORMAT AND VERIFY PASSWORD
+                if (password) {
+                    if (password.length < this.settings.minPasswordLength) {
+                        throw new Error('password.too-short');
+                    }
+                    password = await this.hashPassword(password);
+                }
+                // FORMAT AND VERIFY EMAIL
+                if (email) {
+                    email = email.toLowerCase();
+                    const emailExists = await ctx.call('auth.account.emailExists', { email });
+                    if (emailExists) {
+                        throw new Error('email.already.exists');
+                    }
+                    if (!emailRegexp.test(email)) {
+                        throw new Error('email.invalid');
+                    }
+                }
+                // FORMAT AND VERIFY USERNAME
+                if (username) {
+                    // @ts-expect-error TS(2339): Property 'isSystemCall' does not exist on type '{}... Remove this comment to see the full error message
+                    if (!ctx.meta.isSystemCall) {
+                        const { isValid, error } = await this.isValidUsername(ctx, username);
+                        if (!isValid)
+                            throw new Error(error);
+                    }
+                }
+                else if (email) {
+                    // If username is not provided, find one automatically from the email (without errors)
+                    username = createSlug(email.split('@')[0].toLowerCase());
+                    let { isValid, error } = await this.isValidUsername(ctx, username);
+                    if (!isValid) {
+                        if (error === 'username.invalid' || error === 'username.too-short') {
+                            // If username generated from email is invalid, use a generic name
+                            username = 'user';
+                        }
+                        // If necessary, add a number after the username
+                        let i = 0;
+                        do {
+                            username = i === 0 ? username : username + i;
+                            ({ isValid } = await this.isValidUsername(ctx, username));
+                        } while (!isValid);
+                    }
+                }
+                else {
+                    throw new Error('You must provide at least a username or an email address');
+                }
+                return await this._create(ctx, {
+                    ...rest,
+                    uuid,
+                    username,
+                    email,
+                    hashedPassword: password,
+                    webId
+                });
+            }
+        },
+        attachWebId: {
+            async handler(ctx) {
+                const { accountUri, webId } = ctx.params;
+                return await this._update(ctx, {
+                    '@id': accountUri,
+                    webId
+                });
+            }
+        },
+        verify: {
+            async handler(ctx) {
+                const { username, password } = ctx.params;
+                // If the username includes a @, assume it is an email
+                const query = username.includes('@') ? { email: username } : { username };
+                const accounts = await this._find(ctx, { query });
+                if (accounts.length > 0) {
+                    const passwordMatch = await this.comparePassword(password, accounts[0].hashedPassword);
+                    if (passwordMatch) {
+                        return accounts[0];
+                    }
+                    throw new Error('account.not-found');
+                }
+                else {
+                    throw new Error('account.not-found');
+                }
+            }
+        },
+        usernameExists: {
+            async handler(ctx) {
+                const { username } = ctx.params;
+                const accounts = await this._find(ctx, { query: { username } });
+                return accounts.length > 0;
+            }
+        },
+        emailExists: {
+            async handler(ctx) {
+                const { email } = ctx.params;
+                const accounts = await this._find(ctx, { query: { email } });
+                return accounts.length > 0;
+            }
+        },
+        find: {
+            /** Overwrite find method, to filter accounts with tombstone. */
+            async handler(ctx) {
+                /** @type {object[]} */
+                const accounts = await this._find(ctx, ctx.params);
+                return accounts.filter((account) => !account.deletedAt);
+            }
+        },
+        findByUsername: {
+            async handler(ctx) {
+                const { username } = ctx.params;
+                const accounts = await this._find(ctx, { query: { username } });
+                return accounts.length > 0 ? accounts[0] : null;
+            }
+        },
+        findByWebId: {
+            async handler(ctx) {
+                const { webId } = ctx.params;
+                const accounts = await this._find(ctx, { query: { webId } });
+                return accounts.length > 0 ? accounts[0] : null;
+            }
+        },
+        findByEmail: {
+            async handler(ctx) {
+                const { email } = ctx.params;
+                const accounts = await this._find(ctx, { query: { email } });
+                return accounts.length > 0 ? accounts[0] : null;
+            }
+        },
+        setPassword: {
+            async handler(ctx) {
+                const { webId, password } = ctx.params;
+                const hashedPassword = await this.hashPassword(password);
+                const account = await ctx.call('auth.account.findByWebId', { webId });
+                return await this._update(ctx, {
+                    '@id': account['@id'],
+                    hashedPassword
+                });
+            }
+        },
+        setNewPassword: {
+            async handler(ctx) {
+                const { webId, token, password } = ctx.params;
+                const hashedPassword = await this.hashPassword(password);
+                const account = await ctx.call('auth.account.findByWebId', { webId });
+                if (account.resetPasswordToken !== token) {
+                    throw new Error('auth.password.invalid_reset_token');
+                }
+                return await this._update(ctx, {
+                    '@id': account['@id'],
+                    hashedPassword,
+                    resetPasswordToken: undefined
+                });
+            }
+        },
+        generateResetPasswordToken: {
+            async handler(ctx) {
+                const { webId } = ctx.params;
+                const resetPasswordToken = await this.generateResetPasswordToken();
+                const account = await ctx.call('auth.account.findByWebId', { webId });
+                await this._update(ctx, {
+                    '@id': account['@id'],
+                    resetPasswordToken
+                });
+                return resetPasswordToken;
+            }
+        },
+        findDatasetByWebId: {
+            async handler(ctx) {
+                // @ts-expect-error TS(2339): Property 'webId' does not exist on type '{}'.
+                const webId = ctx.params.webId || ctx.meta.webId;
+                const account = await ctx.call('auth.account.findByWebId', { webId });
+                return account?.username;
+            }
+        },
+        findSettingsByWebId: {
+            async handler(ctx) {
+                // @ts-expect-error TS(2339): Property 'webId' does not exist on type '{}'.
+                const { webId } = ctx.meta;
+                const account = await ctx.call('auth.account.findByWebId', { webId });
+                return {
+                    email: account.email,
+                    preferredLocale: account.preferredLocale
+                };
+            }
+        },
+        updateAccountSettings: {
+            async handler(ctx) {
+                const { currentPassword, email, newPassword } = ctx.params;
+                // @ts-expect-error TS(2339): Property 'webId' does not exist on type '{}'.
+                const { webId } = ctx.meta;
+                const account = await ctx.call('auth.account.findByWebId', { webId });
+                const passwordMatch = await this.comparePassword(currentPassword, account.hashedPassword);
+                let params = {};
+                if (!passwordMatch) {
+                    throw new Error('auth.account.invalid_password');
+                }
+                if (newPassword) {
+                    const hashedPassword = await this.hashPassword(newPassword);
+                    params = { ...params, hashedPassword };
+                }
+                if (email !== account.email) {
+                    const existing = await ctx.call('auth.account.findByEmail', { email });
+                    if (existing) {
+                        throw new Error('email.already.exists');
+                    }
+                    params = { ...params, email };
+                }
+                return await this._update(ctx, {
+                    '@id': account['@id'],
+                    ...params
+                });
+            }
+        },
+        deleteByWebId: {
+            async handler(ctx) {
+                const { webId } = ctx.params;
+                const account = await ctx.call('auth.account.findByWebId', { webId });
+                if (account) {
+                    await this._remove(ctx, { id: account['@id'] });
+                    return true;
+                }
+                return false;
+            }
+        },
+        setTombstone: {
+            // Remove email and password from an account, set deletedAt timestamp.
+            async handler(ctx) {
+                const { webId } = ctx.params;
+                const account = await ctx.call('auth.account.findByWebId', { webId });
+                return await this._update(ctx, {
+                    // Set all values to undefined...
+                    ...Object.fromEntries(Object.keys(account).map(key => [key, null])),
+                    '@id': account['@id'],
+                    // ...except for
+                    webId: account.webId,
+                    username: account.username,
+                    // And add a deletedAt date.
+                    deletedAt: new Date().toISOString()
+                });
+            }
+        }
+    },
+    methods: {
+        async isValidUsername(ctx, username) {
+            let error;
+            // Ensure the username has no space or special characters
+            if (!/^[a-z0-9\-+_.]+$/.exec(username)) {
+                error = 'username.invalid';
+            }
+            if (username.length < this.settings.minUsernameLength) {
+                error = 'username.too-short';
+            }
+            // Ensure we don't use reservedUsernames
+            if (this.settings.reservedUsernames.includes(username)) {
+                error = 'username.reserved';
+            }
+            // Ensure username doesn't already exist
+            const usernameExists = await ctx.call('auth.account.usernameExists', { username });
+            if (usernameExists) {
+                error = 'username.already.exists';
+            }
+            return { isValid: !error, error };
+        },
+        async hashPassword(password) {
+            return new Promise((resolve, reject) => {
+                bcrypt.hash(password, 10, (err, hash) => {
+                    if (err) {
+                        reject(err);
+                    }
+                    else {
+                        resolve(hash);
+                    }
+                });
+            });
+        },
+        async comparePassword(password, hash) {
+            return new Promise(resolve => {
+                bcrypt.compare(password, hash, (err, res) => {
+                    if (res === true) {
+                        resolve(true);
+                    }
+                    else {
+                        resolve(false);
+                    }
+                });
+            });
+        },
+        async generateResetPasswordToken() {
+            return new Promise((resolve, reject) => {
+                crypto.randomBytes(32, (ex, buf) => {
+                    if (ex) {
+                        reject(ex);
+                    }
+                    resolve(buf.toString('hex'));
+                });
+            });
+        }
+    }
+};
+export default AuthAccountSchema;
+//# sourceMappingURL=account.js.map

package/dist/services/account.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.js","sourceRoot":"","sources":["../../services/account.ts"],"names":[],"mappings":"AAAA,qIAAqI;AACrI,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,qIAAqI;AACrI,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,SAAS,MAAM,cAAc,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,yDAAyD;AACzD,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAEjD,MAAM,iBAAiB,GAAG;IACxB,IAAI,EAAE,cAAuB;IAC7B,MAAM,EAAE,CAAC,SAAS,CAAC;IACnB,OAAO,EAAE,IAAI,kBAAkB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC7E,QAAQ,EAAE;QACR,OAAO,EAAE,KAAK;QACd,iBAAiB,EAAE,CAAC,OAAO,CAAC;QAC5B,iBAAiB,EAAE,CAAC;QACpB,iBAAiB,EAAE,CAAC;KACrB;IACD,YAAY,EAAE,CAAC,aAAa,CAAC;IAC7B,OAAO,EAAE;QACP,MAAM,EAAE;YACN,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAErE,6BAA6B;gBAE7B,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;wBACtD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBACxC,CAAC;oBAED,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC/C,CAAC;gBAED,0BAA0B;gBAE1B,IAAI,KAAK,EAAE,CAAC;oBACV,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;oBAE5B,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC1E,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBAC1C,CAAC;oBAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC7B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;gBAED,6BAA6B;gBAE7B,IAAI,QAAQ,EAAE,CAAC;oBACb,qIAAqI;oBACrI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;wBAC3B,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;wBACrE,IAAI,CAAC,OAAO;4BAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;qBAAM,IAAI,KAAK,EAAE,CAAC;oBACjB,sFAAsF;oBACtF,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;oBAEzD,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;oBAEnE,IAAI,CAAC,OAAO,EAAE,CAAC;wBACb,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,oBAAoB,EAAE,CAAC;4BACnE,kEAAkE;4BAClE,QAAQ,GAAG,MAAM,CAAC;wBACpB,CAAC;wBAED,gDAAgD;wBAChD,IAAI,CAAC,GAAG,CAAC,CAAC;wBACV,GAAG,CAAC;4BACF,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;4BAC7C,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;wBAC5D,CAAC,QAAQ,CAAC,OAAO,EAAE;oBACrB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBAC9E,CAAC;gBAED,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAC7B,GAAG,IAAI;oBACP,IAAI;oBACJ,QAAQ;oBACR,KAAK;oBACL,cAAc,EAAE,QAAQ;oBACxB,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;SACF;QAED,WAAW,EAAE;YACX,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAEzC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAC7B,KAAK,EAAE,UAAU;oBACjB,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;SACF;QAED,MAAM,EAAE;YACN,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAE1C,sDAAsD;gBACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;gBAE1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAElD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;oBACvF,IAAI,aAAa,EAAE,CAAC;wBAClB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACrB,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBACvC,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;SACF;QAED,cAAc,EAAE;YACd,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAChE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7B,CAAC;SACF;QAED,WAAW,EAAE;YACX,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC7D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7B,CAAC;SACF;QAED,IAAI,EAAE;YACJ,gEAAgE;YAChE,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,uBAAuB;gBACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBACnD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/D,CAAC;SACF;QAED,cAAc,EAAE;YACd,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAChE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,CAAC;SACF;QAED,WAAW,EAAE;YACX,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC7D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,CAAC;SACF;QAED,WAAW,EAAE;YACX,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC7D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,CAAC;SACF;QAED,WAAW,EAAE;YACX,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBACvC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAEtE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAC7B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;oBACrB,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QAED,cAAc,EAAE;YACd,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC9C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAEtE,IAAI,OAAO,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;oBACzC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACvD,CAAC;gBAED,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAC7B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;oBACrB,cAAc;oBACd,kBAAkB,EAAE,SAAS;iBAC9B,CAAC,CAAC;YACL,CAAC;SACF;QAED,0BAA0B,EAAE;YAC1B,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC7B,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBACnE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAEtE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBACtB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;oBACrB,kBAAkB;iBACnB,CAAC,CAAC;gBAEH,OAAO,kBAAkB,CAAC;YAC5B,CAAC;SACF;QAED,kBAAkB,EAAE;YAClB,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,2EAA2E;gBAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;gBACjD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,OAAO,OAAO,EAAE,QAAQ,CAAC;YAC3B,CAAC;SACF;QAED,mBAAmB,EAAE;YACnB,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,2EAA2E;gBAC3E,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;gBAE3B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAEtE,OAAO;oBACL,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,eAAe,EAAE,OAAO,CAAC,eAAe;iBACzC,CAAC;YACJ,CAAC;SACF;QAED,qBAAqB,EAAE;YACrB,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC3D,2EAA2E;gBAC3E,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;gBAC3B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC1F,IAAI,MAAM,GAAG,EAAE,CAAC;gBAEhB,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,CAAC;gBAED,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;oBAC5D,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;gBACzC,CAAC;gBAED,IAAI,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;oBACvE,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBAC1C,CAAC;oBAED,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;gBAChC,CAAC;gBAED,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAC7B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;oBACrB,GAAG,MAAM;iBACV,CAAC,CAAC;YACL,CAAC;SACF;QAED,aAAa,EAAE;YACb,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC7B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAEtE,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAChD,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,OAAO,KAAK,CAAC;YACf,CAAC;SACF;QAED,YAAY,EAAE;YACZ,sEAAsE;YACtE,KAAK,CAAC,OAAO,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBAC7B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAEtE,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;oBAC7B,iCAAiC;oBACjC,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;oBACnE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;oBACrB,gBAAgB;oBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,4BAA4B;oBAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;YACL,CAAC;SACF;KACF;IACD,OAAO,EAAE;QACP,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ;YACjC,IAAI,KAAK,CAAC;YAEV,yDAAyD;YACzD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvC,KAAK,GAAG,kBAAkB,CAAC;YAC7B,CAAC;YAED,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBACtD,KAAK,GAAG,oBAAoB,CAAC;YAC/B,CAAC;YAED,wCAAwC;YACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,KAAK,GAAG,mBAAmB,CAAC;YAC9B,CAAC;YAED,wCAAwC;YACxC,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnF,IAAI,cAAc,EAAE,CAAC;gBACnB,KAAK,GAAG,yBAAyB,CAAC;YACpC,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,QAAQ;YACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,GAAQ,EAAE,IAAS,EAAE,EAAE;oBAChD,IAAI,GAAG,EAAE,CAAC;wBACR,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,CAAC,CAAC;oBAChB,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI;YAClC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC3B,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAQ,EAAE,GAAQ,EAAE,EAAE;oBACpD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;wBACjB,OAAO,CAAC,IAAI,CAAC,CAAC;oBAChB,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,KAAK,CAAC,CAAC;oBACjB,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,0BAA0B;YAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE;oBACjC,IAAI,EAAE,EAAE,CAAC;wBACP,MAAM,CAAC,EAAE,CAAC,CAAC;oBACb,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/B,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF;CACsB,CAAC;AAE1B,eAAe,iBAAiB,CAAC"}

package/dist/services/auth.cas.d.ts

@@ -0,0 +1,100 @@
+declare const AuthCASService: {
+    name: "auth";
+    mixins: {
+        mixins: {
+            settings: {
+                baseUrl: null;
+                jwtPath: null;
+                capabilitiesPath: undefined;
+                registrationAllowed: boolean;
+                reservedUsernames: never[];
+                minPasswordLength: number;
+                minUsernameLength: number;
+                webIdSelection: never[];
+                accountSelection: never[];
+                accountsDataset: string;
+                podProvider: boolean;
+            };
+            dependencies: string[];
+            created(this: Moleculer.Service<Moleculer.ServiceSettingSchema>): Promise<void>;
+            started(this: Moleculer.Service<Moleculer.ServiceSettingSchema>): Promise<void>;
+            actions: {
+                authenticate: {
+                    handler(ctx: Moleculer.Context<Optionalize<{
+                        [x: string]: any;
+                    }>, {}, Moleculer.GenericObject>): Promise<any>;
+                };
+                authorize: {
+                    handler(ctx: Moleculer.Context<Optionalize<{
+                        [x: string]: any;
+                    }>, {}, Moleculer.GenericObject>): Promise<any>;
+                };
+                impersonate: {
+                    handler(ctx: Moleculer.Context<Optionalize<{
+                        [x: string]: any;
+                    }>, {}, Moleculer.GenericObject>): Promise<any>;
+                };
+            };
+            methods: {
+                validateCapability(ctx: any, token: any): Promise<any>;
+                getStrategy(): never;
+                getApiRoutes(): never;
+                pickWebIdData(data: any): any;
+                pickAccountData(data: any): {
+                    [k: string]: any;
+                };
+            };
+        }[];
+        settings: {
+            baseUrl: null;
+            jwtPath: null;
+            registrationAllowed: boolean;
+            reservedUsernames: never[];
+            webIdSelection: never[];
+            sessionSecret: string;
+            selectSsoData: null;
+        };
+        actions: {
+            loginOrSignup: {
+                handler(ctx: Moleculer.Context<Optionalize<{
+                    [x: string]: any;
+                }>, {}, Moleculer.GenericObject>): Promise<{
+                    token: any;
+                    newUser: boolean;
+                }>;
+            };
+        };
+        methods: {
+            getApiRoutes(basePath: any): {
+                path: string;
+                name: string;
+                use: any[];
+                aliases: {
+                    'GET /': any[];
+                };
+            }[];
+        };
+    }[];
+    settings: {
+        baseUrl: null;
+        jwtPath: null;
+        registrationAllowed: boolean;
+        reservedUsernames: never[];
+        webIdSelection: never[];
+        sessionSecret: string;
+        selectSsoData: null;
+        casUrl: null;
+    };
+    created(this: Moleculer.Service<Moleculer.ServiceSettingSchema>): Promise<void>;
+    methods: {
+        getStrategy(): any;
+    };
+};
+export default AuthCASService;
+declare global {
+    export namespace Moleculer {
+        interface AllServices {
+            [AuthCASService.name]: typeof AuthCASService;
+        }
+    }
+}

package/dist/services/auth.cas.js

@@ -0,0 +1,43 @@
+// @ts-expect-error TS(7016): Could not find a declaration file for module 'pass... Remove this comment to see the full error message
+import { Strategy } from 'passport-cas2';
+// @ts-expect-error TS(2614): Module '"moleculer-web"' has no exported member 'E... Remove this comment to see the full error message
+import { Errors as E } from 'moleculer-web';
+import AuthSSOMixin from "../mixins/auth.sso.js";
+const AuthCASService = {
+    name: 'auth',
+    mixins: [AuthSSOMixin],
+    settings: {
+        baseUrl: null,
+        jwtPath: null,
+        registrationAllowed: true,
+        reservedUsernames: [],
+        webIdSelection: [],
+        // SSO-specific settings
+        sessionSecret: 's€m@pps',
+        selectSsoData: null,
+        // Cas-specific settings
+        casUrl: null
+    },
+    async created() {
+        this.passportId = 'cas';
+    },
+    methods: {
+        getStrategy() {
+            return new Strategy({
+                casURL: this.settings.casUrl,
+                passReqToCallback: true
+            }, (req, username, profile, done) => {
+                req.$ctx
+                    .call('auth.loginOrSignup', { ssoData: { username, ...profile } })
+                    .then((loginData) => {
+                    done(null, loginData);
+                })
+                    .catch((e) => {
+                    done(new E.UnAuthorizedError(e.message), false);
+                });
+            });
+        }
+    }
+};
+export default AuthCASService;
+//# sourceMappingURL=auth.cas.js.map

package/dist/services/auth.cas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.cas.js","sourceRoot":"","sources":["../../services/auth.cas.ts"],"names":[],"mappings":"AAAA,qIAAqI;AACrI,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,qIAAqI;AACrI,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,YAAY,MAAM,uBAAuB,CAAC;AAEjD,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,MAAe;IACrB,MAAM,EAAE,CAAC,YAAY,CAAC;IACtB,QAAQ,EAAE;QACR,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,mBAAmB,EAAE,IAAI;QACzB,iBAAiB,EAAE,EAAE;QACrB,cAAc,EAAE,EAAE;QAClB,wBAAwB;QACxB,aAAa,EAAE,SAAS;QACxB,aAAa,EAAE,IAAI;QACnB,wBAAwB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE;QACP,WAAW;YACT,OAAO,IAAI,QAAQ,CACjB;gBACE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAC5B,iBAAiB,EAAE,IAAI;aACxB,EACD,CAAC,GAAQ,EAAE,QAAa,EAAE,OAAY,EAAE,IAAS,EAAE,EAAE;gBACnD,GAAG,CAAC,IAAI;qBACL,IAAI,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;qBACjE,IAAI,CAAC,CAAC,SAAc,EAAE,EAAE;oBACvB,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACxB,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE;oBAChB,IAAI,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;gBAClD,CAAC,CAAC,CAAC;YACP,CAAC,CACF,CAAC;QACJ,CAAC;KACF;CACsB,CAAC;AAE1B,eAAe,cAAc,CAAC"}