@silexpert/core 1.3.156 → 1.3.157-2

package/ts/api/resources/Mfa.ts

@@ -0,0 +1,29 @@
+import { MfaSetupInitResult, MfaSetupVerifyResult } from '../../types/Interface/api/mfa/mfa';
+import { Resource } from '../Resource';
+
+export class UserMfa extends Resource {
+  setupInit(userId: number, userEmail: string): Promise<MfaSetupInitResult> {
+    return this.axios.$post('/mfa/setup/init', { userId, userEmail });
+  }
+
+  setupVerify(userId: number, code: string): Promise<MfaSetupVerifyResult> {
+    return this.axios.$post('/mfa/setup/verify', { userId, code });
+  }
+
+  disable(userId: number): Promise<boolean> {
+    return this.axios.$post('/mfa/disable', { userId });
+  }
+
+  verifyCode(userId: number, code: string): Promise<{ success: boolean; token?: string }> {
+    return this.axios.$post('/mfa/verify/code', { userId, code });
+  }
+
+  verifyRecoveryCode(userId: number, recoveryCode: string): Promise<{ success: boolean; token?: string }> {
+    return this.axios.$post('/mfa/verify/recovery-code', { userId, recoveryCode });
+  }
+
+  isMfaEnabled(userId?: number): Promise<{ isEnabled: boolean }> {
+    // Si userId est fourni, l'envoyer en query param, sinon vérifier l'user connecté
+    return this.axios.$get('/mfa/is-enabled', userId ? { params: { userId } } : undefined);
+  }
+}

package/ts/api/resources.ts

@@ -181,6 +181,7 @@ import { Gdpr } from './resources/Gdpr';
 import { Sellsy } from './resources/Sellsy';
 import { BankDedup } from './resources/BankDedup';
 import { StripePurchase } from './resources/StripePurchase';
+import { UserMfa } from './resources/Mfa';
 import { DashboardLayout } from './resources/DashboardLayout';
 import { DocumentRequest } from './resources/DocumentRequest';
 import { BalanceSheetReport } from './resources/BalanceSheetReport';
@@ -321,6 +322,7 @@ export const resources = {
   visualizedInformation: VisualizedInformation,
   fusion: Fusion,
   salesContract: SalesContract,
+  userMfa: UserMfa,
   leadsToPartners: LeadsToPartners,
   changeLog: ChangeLog,
   constitutionHistory: ConstitutionHistory,

package/ts/types/Interface/api/authentification/AuthenticationResponse.ts

@@ -0,0 +1,6 @@
+export interface IAuthenticationResponse {
+  requiresMfa?: boolean;
+  userId?: number;
+  message?: string;
+  token?: string;
+}

package/ts/types/Interface/api/mfa/DisableMfa.ts

@@ -0,0 +1,7 @@
+import { IsInt, IsNotEmpty } from 'class-validator';
+
+export class MfaDisable {
+  @IsNotEmpty()
+  @IsInt()
+  userId: number;
+}

package/ts/types/Interface/api/mfa/SetupInit.ts

@@ -0,0 +1,11 @@
+import { IsEmail, IsInt, IsNotEmpty, IsString } from 'class-validator';
+
+export class MfaSetupInit {
+  @IsNotEmpty()
+  @IsInt()
+  userId: number;
+
+  @IsEmail()
+  @IsString()
+  userEmail: string;
+}

package/ts/types/Interface/api/mfa/SetupVerify.ts

@@ -0,0 +1,11 @@
+import { IsInt, IsNotEmpty, IsString } from 'class-validator';
+
+export class MfaSetupVerify {
+  @IsNotEmpty()
+  @IsInt()
+  userId: number;
+
+  @IsNotEmpty()
+  @IsString()
+  code: string;
+}

package/ts/types/Interface/api/mfa/VerifyCode.ts

@@ -0,0 +1,11 @@
+import { IsInt, IsNotEmpty, IsString, Length } from 'class-validator';
+
+export class MfaVerifyCode {
+  @IsNotEmpty()
+  @IsInt()
+  userId: number;
+
+  @IsString()
+  @Length(6, 6)
+  code: string;
+}

package/ts/types/Interface/api/mfa/VerifyRecoveryCode.ts

@@ -0,0 +1,11 @@
+import { IsInt, IsNotEmpty, IsString } from 'class-validator';
+
+export class MfaVerifyRecoveryCode {
+  @IsNotEmpty()
+  @IsInt()
+  userId: number;
+
+  @IsString()
+  @IsNotEmpty()
+  recoveryCode: string;
+}

package/ts/types/Interface/api/mfa/mfa.ts

@@ -0,0 +1,21 @@
+export interface MfaSetupInitResult {
+  otpauthUri: string;
+  tempSecret: string;
+  label: string;
+}
+
+export interface MfaSetupVerifyResult {
+  success: boolean;
+  recoveryCodes: string[];
+}
+
+export interface MfaAuthenticationResponse {
+  requiresMfa: boolean;
+  userId?: number;
+  token?: string;
+}
+
+export interface MfaVerificationResponse {
+  success: boolean;
+  token?: string;
+}

package/ts/types/Interface/models/IUser.ts

@@ -51,6 +51,7 @@ export interface IUser {
   textMessageNumber?: string | null;
   prefix?: string | null;
   tokenLostPassword?: string | null;
+  twoFactorEnabled?: boolean | null;
   tokenApi?: string | null;
   tokenNotification?: string | null;
   tokenSocket?: string | null;

package/ts/types/Interface/models/IUserMfa.ts

@@ -0,0 +1,11 @@
+export interface IUserMfa {
+  idUserMfa: number;
+  idUser: number;
+  method: 'totp' | 'sms' | 'email';
+  secretEnc: string;
+  tempSecretEnc: string;
+  verifiedAt: Date;
+  isPrimary: boolean;
+  createdAt?: Date;
+  updatedAt?: Date;
+}

package/ts/types/Interface/models/IUserMfaRecoveryCode.ts

@@ -0,0 +1,8 @@
+export interface IUserMfaRecoveryCode {
+  id: number;
+  idUserMfa: number;
+  recoveryCodeEnc: string; // haché, jamais en clair
+  usedAt: Date | null; // nullable
+  createdAt?: Date;
+  updatedAt?: Date;
+}

package/ts/types/index.ts

@@ -557,6 +557,7 @@ export * from './Enum/PartneredAccountantServiceTypeId';
 export * from './Enum/PaymentAttempt';
 
 // Interfaces API
+export * from './Interface/api/authentification/AuthenticationResponse';
 export * from './Interface/api/exercice/ReadExercice';
 export * from './Interface/api/balanceSheet/consistency/Read';
 export * from './Interface/api/kilometricAllowance/ReadKilometricAllowance';