@spinajs/rbac-http 2.0.38 → 2.0.44

package/lib/2fa/SpeakEasy2FaToken.js

@@ -36,7 +36,6 @@ exports.SpeakEasy2FaToken = void 0;
 const di_1 = require("@spinajs/di");
 const interfaces_1 = require("../interfaces");
 const speakeasy = __importStar(require("speakeasy"));
-const rbac_1 = require("@spinajs/rbac");
 const configuration_1 = require("@spinajs/configuration");
 const log_1 = require("@spinajs/log");
 let SpeakEasy2FaToken = class SpeakEasy2FaToken extends interfaces_1.TwoFactorAuthProvider {
@@ -64,16 +63,16 @@ let SpeakEasy2FaToken = class SpeakEasy2FaToken extends interfaces_1.TwoFactorAu
     }
     async initialize(user) {
         const secret = speakeasy.generateSecret(this.Config);
-        await user.Metadata.add(new rbac_1.UserMetadata({ Value: secret.base32, Key: '2fa_speakeasy_token' }));
+        await (user.Metadata['2fa_speakeasy_token'] = secret.base32);
         return secret.base32;
     }
     async isEnabled(user) {
-        const meta = user.Metadata.find((x) => x.Key === '2fa_enabled');
-        return meta ? meta.asBoolean() : false;
+        const val = await user.Metadata['2fa_enabled'];
+        return val;
     }
     async isInitialized(user) {
-        const meta = user.Metadata.find((x) => x.Key === '2fa_speakeasy_token');
-        return meta ? meta.Value !== '' : false;
+        const val = await user.Metadata['2fa_speakeasy_token'];
+        return val !== '';
     }
 };
 __decorate([

package/lib/2fa/SpeakEasy2FaToken.js.map

@@ -1 +1 @@
-{"version":3,"file":"SpeakEasy2FaToken.js","sourceRoot":"","sources":["../../src/2fa/SpeakEasy2FaToken.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oCAAyC;AACzC,8CAAsD;AACtD,qDAAuC;AACvC,wCAAmD;AACnD,0DAAgD;AAChD,sCAA2C;AAG3C,IAAa,iBAAiB,GAA9B,MAAa,iBAAkB,SAAQ,kCAAqB;IAO1D;QACE,KAAK,EAAE,CAAC;IACV,CAAC;IAEM,OAAO,CAAC,CAAO;QACpB,yDAAyD;QACzD,gCAAgC;QAChC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACM,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,IAAU;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;QAExE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE,EAAE;YAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kDAAkD,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAE5E,OAAO,KAAK,CAAC;SACd;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;YACrC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,QAAQ,EAAE,QAAQ;YAClB,KAAK;YACL,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IACM,KAAK,CAAC,UAAU,CAAC,IAAU;QAChC,MAAM,MAAM,GAAG,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,mBAAY,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;QAChG,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IACM,KAAK,CAAC,SAAS,CAAC,IAAU;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,IAAU;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1C,CAAC;CACF,CAAA;AA9CC;IADC,IAAA,sBAAM,EAAC,gBAAgB,CAAC;;iDACH;AAGtB;IADC,IAAA,YAAM,EAAC,qBAAqB,CAAC;8BACf,SAAG;8CAAC;AALR,iBAAiB;IAD7B,IAAA,eAAU,EAAC,kCAAqB,CAAC;;GACrB,iBAAiB,CAgD7B;AAhDY,8CAAiB"}
+{"version":3,"file":"SpeakEasy2FaToken.js","sourceRoot":"","sources":["../../src/2fa/SpeakEasy2FaToken.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oCAAyC;AACzC,8CAAsD;AACtD,qDAAuC;AAEvC,0DAAgD;AAChD,sCAA2C;AAG3C,IAAa,iBAAiB,GAA9B,MAAa,iBAAkB,SAAQ,kCAAqB;IAO1D;QACE,KAAK,EAAE,CAAC;IACV,CAAC;IAEM,OAAO,CAAC,CAAO;QACpB,yDAAyD;QACzD,gCAAgC;QAChC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,IAAU;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;QAExE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE,EAAE;YAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,kDAAkD,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAE5E,OAAO,KAAK,CAAC;SACd;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;YACrC,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,QAAQ,EAAE,QAAQ;YAClB,KAAK;YACL,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,IAAU;QAChC,MAAM,MAAM,GAAG,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,IAAU;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC/C,OAAO,GAAc,CAAC;IACxB,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,IAAU;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;QACvD,OAAO,GAAG,KAAK,EAAE,CAAC;IACpB,CAAC;CACF,CAAA;AAjDC;IADC,IAAA,sBAAM,EAAC,gBAAgB,CAAC;;iDACH;AAGtB;IADC,IAAA,YAAM,EAAC,qBAAqB,CAAC;8BACf,SAAG;8CAAC;AALR,iBAAiB;IAD7B,IAAA,eAAU,EAAC,kCAAqB,CAAC;;GACrB,iBAAiB,CAmD7B;AAnDY,8CAAiB"}

package/lib/config/rbac-http.js

@@ -15,12 +15,20 @@ module.exports = {
     rbac: {
         twoFactorAuth: {
             enabled: true,
-            service: 'google-auth-2fa',
+            service: 'SpeakEasy2FaToken',
         },
         fingerprint: {
-            enabled: true,
+            enabled: false,
             maxDevices: 3,
-            service: 'fingerprintjs',
+            service: 'FingerprintJs',
+        },
+        password: {
+            // password reset token ttl in minutes
+            tokenTTL: 60,
+            /**
+             * Block account after invalid login attempts
+             */
+            blockAfterAttempts: 3,
         },
     },
     http: {

package/lib/config/rbac-http.js.map

@@ -1 +1 @@
-{"version":3,"file":"rbac-http.js","sourceRoot":"","sources":["../../src/config/rbac-http.ts"],"names":[],"mappings":";;AAAA,+BAAgD;AAEhD,SAAS,GAAG,CAAC,IAAY;IACvB,OAAO,IAAA,cAAO,EAAC,IAAA,gBAAS,EAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,CAAC,OAAO,GAAG;IACf,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,WAAW,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACtC,OAAO,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC9B,KAAK,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;SAC3B;KACF;IACD,IAAI,EAAE;QACJ,aAAa,EAAE;YACb,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,iBAAiB;SAC3B;QACD,WAAW,EAAE;YACX,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,eAAe;SACzB;KACF;IACD,IAAI,EAAE;QACJ,WAAW,EAAE;QACX,0CAA0C;SAC3C;KACF;CACF,CAAC"}
+{"version":3,"file":"rbac-http.js","sourceRoot":"","sources":["../../src/config/rbac-http.ts"],"names":[],"mappings":";;AAAA,+BAAgD;AAEhD,SAAS,GAAG,CAAC,IAAY;IACvB,OAAO,IAAA,cAAO,EAAC,IAAA,gBAAS,EAAC,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,CAAC,OAAO,GAAG;IACf,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,WAAW,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACtC,OAAO,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC9B,KAAK,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;SAC3B;KACF;IACD,IAAI,EAAE;QACJ,aAAa,EAAE;YACb,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,mBAAmB;SAC7B;QACD,WAAW,EAAE;YACX,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,eAAe;SACzB;QACD,QAAQ,EAAE;YACR,sCAAsC;YACtC,QAAQ,EAAE,EAAE;YAEZ;;eAEG;YACH,kBAAkB,EAAE,CAAC;SACtB;KACF;IACD,IAAI,EAAE;QACJ,WAAW,EAAE;QACX,0CAA0C;SAC3C;KACF;CACF,CAAC"}

package/lib/controllers/LoginController.d.ts

@@ -1,18 +1,34 @@
+import { InvalidOperation } from '@spinajs/exceptions';
 import { UserLoginDto } from '../dto/userLogin-dto';
-import { BaseController, Ok, CookieResponse, Unauthorized, NotAllowed } from '@spinajs/http';
-import { AuthProvider, SessionProvider, User as UserModel } from '@spinajs/rbac';
+import { BaseController, Ok, CookieResponse, Unauthorized, BadRequest, NotFound } from '@spinajs/http';
+import { AuthProvider, FederatedAuthProvider, PasswordProvider, PasswordValidationProvider, SessionProvider, User as UserModel } from '@spinajs/rbac';
 import { Configuration } from '@spinajs/configuration';
-import { FingerpringConfig, FingerprintProvider, TwoFactorAuthConfig, TwoFactorAuthProvider } from '../interfaces';
+import { FingerprintProvider, TwoFactorAuthProvider } from '../interfaces';
+import { QueueClient } from '@spinajs/queue';
+import { RestorePasswordDto } from '../dto/restore-password-dto';
 export declare class LoginController extends BaseController {
     protected Configuration: Configuration;
     protected AuthProvider: AuthProvider;
     protected SessionProvider: SessionProvider;
     protected SessionExpirationTime: number;
-    protected TwoFactorConfig: TwoFactorAuthConfig;
-    protected FingerPrintConfig: FingerpringConfig;
+    protected PasswordResetTokenTTL: number;
     protected TwoFactorAuthProvider: TwoFactorAuthProvider;
-    protected FingerprintPrivider: FingerprintProvider;
-    resolveAsync(): Promise<void>;
-    login(credentials: UserLoginDto, logged: UserModel): Promise<Unauthorized | CookieResponse | NotAllowed>;
+    protected FingerprintProvider: FingerprintProvider;
+    protected PasswordValidationService: PasswordValidationProvider;
+    protected FederatedLoginStrategies: FederatedAuthProvider<any>[];
+    protected PasswordProvider: PasswordProvider;
+    protected Queue: QueueClient;
+    loginFederated(credentials: unknown, caller: string): Promise<Unauthorized | CookieResponse>;
+    /**
+     *
+     * Api call for listing avaible federated login strategies
+     *
+     * @returns response with avaible login strategies
+     */
+    federatedLoginList(): Promise<Ok>;
+    login(credentials: UserLoginDto): Promise<Unauthorized | CookieResponse>;
+    setNewPassword(token: string, pwd: RestorePasswordDto): Promise<BadRequest | NotFound>;
+    forgotPassword(login: UserLoginDto): Promise<InvalidOperation | Ok>;
     logout(ssid: string): Promise<Ok | CookieResponse>;
+    protected authenticate(user: UserModel, federated?: boolean): Promise<Unauthorized | CookieResponse>;
 }

package/lib/controllers/LoginController.js

@@ -11,38 +11,143 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LoginController = void 0;
+const exceptions_1 = require("@spinajs/exceptions");
 const userLogin_dto_1 = require("../dto/userLogin-dto");
 const http_1 = require("@spinajs/http");
 const rbac_1 = require("@spinajs/rbac");
 const di_1 = require("@spinajs/di");
 const configuration_1 = require("@spinajs/configuration");
-const decorators_1 = require("./../decorators");
-const lodash_1 = __importDefault(require("lodash"));
+const interfaces_1 = require("../interfaces");
+const queue_1 = require("@spinajs/queue");
+const NotLoggedPolicy_1 = require("../policies/NotLoggedPolicy");
+const LoggedPolicy_1 = require("../policies/LoggedPolicy");
+const UserPassordRestore_1 = require("../events/UserPassordRestore");
+const restore_password_dto_1 = require("../dto/restore-password-dto");
+const uuid_1 = require("uuid");
+const luxon_1 = require("luxon");
+const rbac_2 = require("@spinajs/rbac");
+const UserLoginSuccess_1 = require("../events/UserLoginSuccess");
 let LoginController = class LoginController extends http_1.BaseController {
-    async resolveAsync() {
-        if (this.TwoFactorConfig.enabled) {
-            if (!di_1.DI.check(this.TwoFactorConfig.service)) {
-                throw new di_1.ServiceNotFound(`2FA provider ${this.TwoFactorConfig.service} not registered in DI container`);
-            }
-            this.TwoFactorAuthProvider = di_1.DI.resolve(this.TwoFactorConfig.service);
+    async loginFederated(credentials, caller) {
+        const strategy = this.FederatedLoginStrategies.find((x) => x.callerCheck(caller));
+        if (!strategy) {
+            throw new exceptions_1.InvalidOperation(`No auth stragegy registered for caller ${caller}`);
         }
-        if (this.FingerPrintConfig.enabled) {
-            if (!di_1.DI.check(this.FingerPrintConfig.service)) {
-                throw new di_1.ServiceNotFound(`Fingerprint provider ${this.FingerPrintConfig.service} not registered in DI container`);
-            }
-            this.FingerprintPrivider = di_1.DI.resolve(this.FingerPrintConfig.service);
+        const result = await strategy.authenticate(credentials);
+        if (!result.Error) {
+            // proceed with standard authentication
+            return await this.authenticate(result.User);
+        }
+        return new http_1.Unauthorized(result.Error);
+    }
+    /**
+     *
+     * Api call for listing avaible federated login strategies
+     *
+     * @returns response with avaible login strategies
+     */
+    async federatedLoginList() {
+        return new http_1.Ok(this.FederatedLoginStrategies.map((x) => x.Name));
+    }
+    async login(credentials) {
+        const result = await this.AuthProvider.authenticate(credentials.Email, credentials.Password);
+        if (!result.Error) {
+            // proceed with standard authentication
+            return await this.authenticate(result.User);
+        }
+        return new http_1.Unauthorized(result.Error);
+    }
+    async setNewPassword(token, pwd) {
+        const user = await rbac_1.User.query()
+            .innerJoin(rbac_1.UserMetadata, function () {
+            this.where({
+                Key: 'password:reset:token',
+                Value: token,
+            });
+        })
+            .populate('Metadata')
+            .first();
+        if (!user) {
+            return new http_1.NotFound({
+                error: {
+                    code: 'ERR_USER_NOT_FOUND',
+                    message: 'No user found for this reset token',
+                },
+            });
+        }
+        const val = (await user.Metadata['password:reset:start']);
+        const now = luxon_1.DateTime.now().plus({ seconds: -this.PasswordResetTokenTTL });
+        if (val < now) {
+            return new http_1.BadRequest({
+                error: {
+                    code: 'ERR_RESET_TOKEN_EXPIRED',
+                    message: 'Password reset token expired',
+                },
+            });
         }
+        if (!this.PasswordValidationService.check(pwd.Password)) {
+            return new http_1.BadRequest({
+                error: {
+                    code: 'ERR_PASSWORD_RULE',
+                    message: 'Invalid password, does not match password rules',
+                },
+            });
+        }
+        if (pwd.Password !== pwd.ConfirmPassword) {
+            return new http_1.BadRequest({
+                error: {
+                    code: 'ERR_PASSWORD_NOT_MATCH',
+                    message: 'Password and repeat password does not match',
+                },
+            });
+        }
+        const hashedPassword = await this.PasswordProvider.hash(pwd.Password);
+        user.Password = hashedPassword;
+        await user.update();
+        /**
+         * Delete all reset related meta for user
+         */
+        await user.Metadata.delete(/password:reset.*/);
+        // add to action list
+        await user.Actions.add(new rbac_2.UserAction({
+            Persistent: true,
+            Action: 'password:reset',
+        }));
+        // inform others
+        await this.Queue.emit(new rbac_1.UserPasswordChanged(user.Uuid));
     }
-    async login(credentials, logged) {
-        if (logged) {
-            return new http_1.NotAllowed('User already logged in. Please logout before trying to authorize.');
+    async forgotPassword(login) {
+        const user = await this.AuthProvider.getByEmail(login.Email);
+        if (!user.IsActive || user.IsBanned || user.DeletedAt !== null) {
+            return new exceptions_1.InvalidOperation('User is inactive, banned or deleted. Contact system administrator');
         }
-        const user = await this.AuthProvider.authenticate(credentials.Email, credentials.Password);
+        const token = (0, uuid_1.v4)();
+        // assign meta to user
+        await (user.Metadata['password:reset'] = true);
+        await (user.Metadata['password:reset:token'] = token);
+        await (user.Metadata['password:reset:start'] = luxon_1.DateTime.now());
+        await user.Actions.add(new rbac_2.UserAction({
+            Action: 'user:password:reset',
+            Data: luxon_1.DateTime.now().toISO(),
+            Persistent: true,
+        }));
+        await this.Queue.emit(new UserPassordRestore_1.UserPasswordRestore(user.Uuid, token));
+        return new http_1.Ok({
+            reset_token: token,
+            ttl: this.PasswordResetTokenTTL,
+        });
+    }
+    async logout(ssid) {
+        if (!ssid) {
+            return new http_1.Ok();
+        }
+        await this.SessionProvider.delete(ssid);
+        // send empty cookie to confirm session deletion
+        return new http_1.CookieResponse('ssid', null, this.SessionExpirationTime);
+    }
+    async authenticate(user, federated) {
         if (!user) {
             return new http_1.Unauthorized({
                 error: {
@@ -58,8 +163,10 @@ let LoginController = class LoginController extends http_1.BaseController {
         // eg. 2fa auth is not performed
         // create session, but user is not yet authorized
         session.Data.set('Authorized', false);
-        await this.SessionProvider.save(session);
-        if (this.TwoFactorConfig.enabled) {
+        // if its federated login, skip 2fa - assume
+        // external login service provided it
+        if (this.TwoFactorConfig.enabled || !federated) {
+            await this.SessionProvider.save(session);
             const enabledForUser = await this.TwoFactorAuthProvider.isEnabled(user);
             /**
              * if 2fa is enabled for user, proceed
@@ -73,7 +180,7 @@ let LoginController = class LoginController extends http_1.BaseController {
                     const twoFaResult = await this.TwoFactorAuthProvider.initialize(user);
                     return new http_1.CookieResponse('ssid', session.SessionId, this.SessionExpirationTime, true, {
                         toFactorAuth: true,
-                        initialize: true,
+                        twoFactorAuthFirstTime: true,
                         method: this.TwoFactorConfig.service,
                         data: twoFaResult,
                     }, { httpOnly: true });
@@ -90,17 +197,12 @@ let LoginController = class LoginController extends http_1.BaseController {
         // 2fa is not enabled, so we found user, it means it is logged
         session.Data.set('Authorized', true);
         await this.SessionProvider.save(session);
+        await this.Queue.emit(new UserLoginSuccess_1.UserLoginSuccess(user.Uuid));
+        user.LastLoginAt = luxon_1.DateTime.now();
+        await user.update();
         // BEWARE: httpOnly coockie, only accesible via http method in browser
         // return coockie session id with additional user data
-        return new http_1.CookieResponse('ssid', session.SessionId, this.SessionExpirationTime, true, lodash_1.default.omit(dUser, ['Id']), { httpOnly: true });
-    }
-    async logout(ssid) {
-        if (!ssid) {
-            return new http_1.Ok();
-        }
-        await this.SessionProvider.delete(ssid);
-        // send empty cookie to confirm session deletion
-        return new http_1.CookieResponse('ssid', null, this.SessionExpirationTime);
+        return new http_1.CookieResponse('ssid', session.SessionId, this.SessionExpirationTime, true, dUser, { httpOnly: true });
     }
 };
 __decorate([
@@ -108,35 +210,91 @@ __decorate([
     __metadata("design:type", configuration_1.Configuration)
 ], LoginController.prototype, "Configuration", void 0);
 __decorate([
-    (0, di_1.Autoinject)(),
+    (0, configuration_1.AutoinjectService)('rbac.auth'),
     __metadata("design:type", rbac_1.AuthProvider)
 ], LoginController.prototype, "AuthProvider", void 0);
 __decorate([
-    (0, di_1.Autoinject)(),
+    (0, configuration_1.AutoinjectService)('rbac.session'),
     __metadata("design:type", rbac_1.SessionProvider)
 ], LoginController.prototype, "SessionProvider", void 0);
 __decorate([
-    (0, configuration_1.Config)('rbac.session.expiration', 120),
+    (0, configuration_1.Config)('rbac.session.expiration', {
+        defaultValue: 120,
+    }),
     __metadata("design:type", Number)
 ], LoginController.prototype, "SessionExpirationTime", void 0);
 __decorate([
-    (0, configuration_1.Config)('rbac.twoFactorAuth'),
-    __metadata("design:type", Object)
-], LoginController.prototype, "TwoFactorConfig", void 0);
+    (0, configuration_1.Config)('rbac.password_reset.ttl'),
+    __metadata("design:type", Number)
+], LoginController.prototype, "PasswordResetTokenTTL", void 0);
+__decorate([
+    (0, configuration_1.AutoinjectService)('rbac.twoFactorAuth'),
+    __metadata("design:type", interfaces_1.TwoFactorAuthProvider)
+], LoginController.prototype, "TwoFactorAuthProvider", void 0);
 __decorate([
-    (0, configuration_1.Config)('rbac.fingerprint'),
-    __metadata("design:type", Object)
-], LoginController.prototype, "FingerPrintConfig", void 0);
+    (0, configuration_1.AutoinjectService)('rbac.fingerprint.provider'),
+    __metadata("design:type", interfaces_1.FingerprintProvider)
+], LoginController.prototype, "FingerprintProvider", void 0);
+__decorate([
+    (0, configuration_1.AutoinjectService)('rbac.password.validation'),
+    __metadata("design:type", rbac_1.PasswordValidationProvider)
+], LoginController.prototype, "PasswordValidationService", void 0);
+__decorate([
+    (0, di_1.Autoinject)(rbac_1.FederatedAuthProvider),
+    __metadata("design:type", Array)
+], LoginController.prototype, "FederatedLoginStrategies", void 0);
+__decorate([
+    (0, di_1.Autoinject)(),
+    __metadata("design:type", rbac_1.PasswordProvider)
+], LoginController.prototype, "PasswordProvider", void 0);
+__decorate([
+    (0, di_1.Autoinject)(queue_1.QueueClient),
+    __metadata("design:type", queue_1.QueueClient)
+], LoginController.prototype, "Queue", void 0);
+__decorate([
+    (0, http_1.Post)('federated-login'),
+    (0, http_1.Policy)(NotLoggedPolicy_1.NotLoggedPolicy),
+    __param(0, (0, http_1.Body)()),
+    __param(1, (0, http_1.Header)('Host')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String]),
+    __metadata("design:returntype", Promise)
+], LoginController.prototype, "loginFederated", null);
+__decorate([
+    (0, http_1.Get)(),
+    (0, http_1.Policy)(NotLoggedPolicy_1.NotLoggedPolicy),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], LoginController.prototype, "federatedLoginList", null);
 __decorate([
     (0, http_1.Post)(),
+    (0, http_1.Policy)(NotLoggedPolicy_1.NotLoggedPolicy),
     __param(0, (0, http_1.Body)()),
-    __param(1, (0, decorators_1.User)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [userLogin_dto_1.UserLoginDto, rbac_1.User]),
+    __metadata("design:paramtypes", [userLogin_dto_1.UserLoginDto]),
     __metadata("design:returntype", Promise)
 ], LoginController.prototype, "login", null);
+__decorate([
+    (0, http_1.Post)('new-password'),
+    (0, http_1.Policy)(NotLoggedPolicy_1.NotLoggedPolicy),
+    __param(0, (0, http_1.Query)()),
+    __param(1, (0, http_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, restore_password_dto_1.RestorePasswordDto]),
+    __metadata("design:returntype", Promise)
+], LoginController.prototype, "setNewPassword", null);
+__decorate([
+    (0, http_1.Post)('forgot-password'),
+    (0, http_1.Policy)(NotLoggedPolicy_1.NotLoggedPolicy),
+    __param(0, (0, http_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [userLogin_dto_1.UserLoginDto]),
+    __metadata("design:returntype", Promise)
+], LoginController.prototype, "forgotPassword", null);
 __decorate([
     (0, http_1.Get)(),
+    (0, http_1.Policy)(LoggedPolicy_1.LoggedPolicy),
     __param(0, (0, http_1.Cookie)()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [String]),

package/lib/controllers/LoginController.js.map

@@ -1 +1 @@
-{"version":3,"file":"LoginController.js","sourceRoot":"","sources":["../../src/controllers/LoginController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,wDAAoD;AACpD,wCAAgI;AAChI,wCAA0F;AAC1F,oCAA8D;AAC9D,0DAA+D;AAC/D,gDAAuC;AACvC,oDAAuB;AAIvB,IAAa,eAAe,GAA5B,MAAa,eAAgB,SAAQ,qBAAc;IAuB1C,KAAK,CAAC,YAAY;QACvB,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE;YAChC,IAAI,CAAC,OAAE,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE;gBAC3C,MAAM,IAAI,oBAAe,CAAC,gBAAgB,IAAI,CAAC,eAAe,CAAC,OAAO,iCAAiC,CAAC,CAAC;aAC1G;YACD,IAAI,CAAC,qBAAqB,GAAG,OAAE,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;SACvE;QAED,IAAI,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE;YAClC,IAAI,CAAC,OAAE,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE;gBAC7C,MAAM,IAAI,oBAAe,CAAC,wBAAwB,IAAI,CAAC,iBAAiB,CAAC,OAAO,iCAAiC,CAAC,CAAC;aACpH;YACD,IAAI,CAAC,mBAAmB,GAAG,OAAE,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;SACvE;IACH,CAAC;IAGM,KAAK,CAAC,KAAK,CAAS,WAAyB,EAAU,MAAiB;QAC7E,IAAI,MAAM,EAAE;YACV,OAAO,IAAI,iBAAU,CAAC,mEAAmE,CAAC,CAAC;SAC5F;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;QAE3F,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,IAAI,mBAAY,CAAC;gBACtB,KAAK,EAAE;oBACL,OAAO,EAAE,6BAA6B;iBACvC;aACF,CAAC,CAAC;SACJ;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAE/B,MAAM,OAAO,GAAG,IAAI,cAAO,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhC,wDAAwD;QACxD,gCAAgC;QAChC,iDAAiD;QACjD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAEtC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEzC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE;YAChC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAExE;;eAEG;YACH,IAAI,cAAc,EAAE;gBAClB;;mBAEG;gBACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC3E,IAAI,CAAC,aAAa,EAAE;oBAClB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBAEtE,OAAO,IAAI,qBAAc,CACvB,MAAM,EACN,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,qBAAqB,EAC1B,IAAI,EACJ;wBACE,YAAY,EAAE,IAAI;wBAClB,UAAU,EAAE,IAAI;wBAChB,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO;wBACpC,IAAI,EAAE,WAAW;qBAClB,EACD,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;iBACH;gBAED,mDAAmD;gBACnD,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAE/C,kCAAkC;gBAClC,iDAAiD;gBACjD,OAAO,IAAI,qBAAc,CACvB,MAAM,EACN,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,qBAAqB,EAC1B,IAAI,EACJ;oBACE,YAAY,EAAE,IAAI;iBACnB,EACD,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;aACH;SACF;QAED,8DAA8D;QAC9D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEzC,sEAAsE;QACtE,sDAAsD;QACtD,OAAO,IAAI,qBAAc,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,qBAAqB,EAAE,IAAI,EAAE,gBAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpI,CAAC;IAGM,KAAK,CAAC,MAAM,CAAW,IAAY;QACxC,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,IAAI,SAAE,EAAE,CAAC;SACjB;QAED,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAExC,gDAAgD;QAChD,OAAO,IAAI,qBAAc,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtE,CAAC;CACF,CAAA;AArIC;IADC,IAAA,eAAU,GAAE;8BACY,6BAAa;sDAAC;AAGvC;IADC,IAAA,eAAU,GAAE;8BACW,mBAAY;qDAAC;AAGrC;IADC,IAAA,eAAU,GAAE;8BACc,sBAAe;wDAAC;AAG3C;IADC,IAAA,sBAAM,EAAC,yBAAyB,EAAE,GAAG,CAAC;;8DACC;AAGxC;IADC,IAAA,sBAAM,EAAC,oBAAoB,CAAC;;wDACkB;AAG/C;IADC,IAAA,sBAAM,EAAC,kBAAkB,CAAC;;0DACoB;AAuB/C;IADC,IAAA,WAAI,GAAE;IACa,WAAA,IAAA,WAAI,GAAE,CAAA;IAA6B,WAAA,IAAA,iBAAI,GAAE,CAAA;;qCAArB,4BAAY,EAAkB,WAAS;;4CAkF9E;AAGD;IADC,IAAA,UAAG,GAAE;IACe,WAAA,IAAA,aAAM,GAAE,CAAA;;;;6CAS5B;AAtIU,eAAe;IAD3B,IAAA,eAAQ,EAAC,WAAW,CAAC;GACT,eAAe,CAuI3B;AAvIY,0CAAe"}
+{"version":3,"file":"LoginController.js","sourceRoot":"","sources":["../../src/controllers/LoginController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,oDAAuD;AACvD,wDAAoD;AACpD,wCAAiK;AACjK,wCAAwM;AACxM,oCAAyC;AACzC,0DAAkF;AAElF,8CAA2E;AAC3E,0CAA6C;AAE7C,iEAA8D;AAC9D,2DAAwD;AACxD,qEAAmE;AACnE,sEAAiE;AAEjE,+BAAoC;AACpC,iCAAiC;AACjC,wCAA2C;AAC3C,iEAA8D;AAG9D,IAAa,eAAe,GAA5B,MAAa,eAAgB,SAAQ,qBAAc;IAsC1C,KAAK,CAAC,cAAc,CAAS,WAAoB,EAAkB,MAAc;QACtF,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,EAAE;YACb,MAAM,IAAI,6BAAgB,CAAC,0CAA0C,MAAM,EAAE,CAAC,CAAC;SAChF;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YACjB,uCAAuC;YACvC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SAC7C;QAED,OAAO,IAAI,mBAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IAGI,KAAK,CAAC,kBAAkB;QAC7B,OAAO,IAAI,SAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;IAIM,KAAK,CAAC,KAAK,CAAS,WAAyB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;QAE7F,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;YACjB,uCAAuC;YACvC,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SAC7C;QAED,OAAO,IAAI,mBAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAIM,KAAK,CAAC,cAAc,CAAU,KAAa,EAAU,GAAuB;QACjF,MAAM,IAAI,GAAG,MAAM,WAAI,CAAC,KAAK,EAAE;aAC5B,SAAS,CAAC,mBAAY,EAAE;YACvB,IAAI,CAAC,KAAK,CAAC;gBACT,GAAG,EAAE,sBAAsB;gBAC3B,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC,CAAC;aACD,QAAQ,CAAC,UAAU,CAAC;aACpB,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,IAAI,eAAQ,CAAC;gBAClB,KAAK,EAAE;oBACL,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,oCAAoC;iBAC9C;aACF,CAAC,CAAC;SACJ;QAED,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAa,CAAC;QACtE,MAAM,GAAG,GAAG,gBAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;QAE1E,IAAI,GAAG,GAAG,GAAG,EAAE;YACb,OAAO,IAAI,iBAAU,CAAC;gBACpB,KAAK,EAAE;oBACL,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,8BAA8B;iBACxC;aACF,CAAC,CAAC;SACJ;QAED,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;YACvD,OAAO,IAAI,iBAAU,CAAC;gBACpB,KAAK,EAAE;oBACL,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,iDAAiD;iBAC3D;aACF,CAAC,CAAC;SACJ;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,eAAe,EAAE;YACxC,OAAO,IAAI,iBAAU,CAAC;gBACpB,KAAK,EAAE;oBACL,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,6CAA6C;iBACvD;aACF,CAAC,CAAC;SACJ;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC;QAE/B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAEpB;;WAEG;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAE/C,qBAAqB;QACrB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACpB,IAAI,iBAAU,CAAC;YACb,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,gBAAgB;SACzB,CAAC,CACH,CAAC;QAEF,gBAAgB;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,0BAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAIM,KAAK,CAAC,cAAc,CAAS,KAAmB;QACrD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE;YAC9D,OAAO,IAAI,6BAAgB,CAAC,mEAAmE,CAAC,CAAC;SAClG;QAED,MAAM,KAAK,GAAG,IAAA,SAAM,GAAE,CAAC;QAEvB,sBAAsB;QACtB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,GAAG,gBAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QAE/D,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACpB,IAAI,iBAAU,CAAC;YACb,MAAM,EAAE,qBAAqB;YAC7B,IAAI,EAAE,gBAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE;YAC5B,UAAU,EAAE,IAAI;SACjB,CAAC,CACH,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,wCAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAEjE,OAAO,IAAI,SAAE,CAAC;YACZ,WAAW,EAAE,KAAK;YAClB,GAAG,EAAE,IAAI,CAAC,qBAAqB;SAChC,CAAC,CAAC;IACL,CAAC;IAIM,KAAK,CAAC,MAAM,CAAW,IAAY;QACxC,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,IAAI,SAAE,EAAE,CAAC;SACjB;QAED,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAExC,gDAAgD;QAChD,OAAO,IAAI,qBAAc,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtE,CAAC;IAES,KAAK,CAAC,YAAY,CAAC,IAAe,EAAE,SAAmB;QAC/D,IAAI,CAAC,IAAI,EAAE;YACT,OAAO,IAAI,mBAAY,CAAC;gBACtB,KAAK,EAAE;oBACL,OAAO,EAAE,6BAA6B;iBACvC;aACF,CAAC,CAAC;SACJ;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAE/B,MAAM,OAAO,GAAG,IAAI,cAAO,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEhC,wDAAwD;QACxD,gCAAgC;QAChC,iDAAiD;QACjD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAEtC,4CAA4C;QAC5C,qCAAqC;QACrC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE;YAC9C,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEzC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAExE;;eAEG;YACH,IAAI,cAAc,EAAE;gBAClB;;mBAEG;gBACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC3E,IAAI,CAAC,aAAa,EAAE;oBAClB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBAEtE,OAAO,IAAI,qBAAc,CACvB,MAAM,EACN,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,qBAAqB,EAC1B,IAAI,EACJ;wBACE,YAAY,EAAE,IAAI;wBAClB,sBAAsB,EAAE,IAAI;wBAC5B,MAAM,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO;wBACpC,IAAI,EAAE,WAAW;qBAClB,EACD,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;iBACH;gBAED,mDAAmD;gBACnD,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAE/C,kCAAkC;gBAClC,iDAAiD;gBACjD,OAAO,IAAI,qBAAc,CACvB,MAAM,EACN,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,qBAAqB,EAC1B,IAAI,EACJ;oBACE,YAAY,EAAE,IAAI;iBACnB,EACD,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;aACH;SACF;QAED,8DAA8D;QAC9D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEzC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,mCAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEvD,IAAI,CAAC,WAAW,GAAG,gBAAQ,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAEpB,sEAAsE;QACtE,sDAAsD;QACtD,OAAO,IAAI,qBAAc,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,qBAAqB,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpH,CAAC;CACF,CAAA;AAvRC;IADC,IAAA,eAAU,GAAE;8BACY,6BAAa;sDAAC;AAGvC;IADC,IAAA,iCAAiB,EAAC,WAAW,CAAC;8BACP,mBAAY;qDAAC;AAGrC;IADC,IAAA,iCAAiB,EAAC,cAAc,CAAC;8BACP,sBAAe;wDAAC;AAK3C;IAHC,IAAA,sBAAM,EAAC,yBAAyB,EAAE;QACjC,YAAY,EAAE,GAAG;KAClB,CAAC;;8DACsC;AAGxC;IADC,IAAA,sBAAM,EAAC,yBAAyB,CAAC;;8DACM;AAGxC;IADC,IAAA,iCAAiB,EAAC,oBAAoB,CAAC;8BACP,kCAAqB;8DAAC;AAGvD;IADC,IAAA,iCAAiB,EAAC,2BAA2B,CAAC;8BAChB,gCAAmB;4DAAC;AAGnD;IADC,IAAA,iCAAiB,EAAC,0BAA0B,CAAC;8BACT,iCAA0B;kEAAC;AAGhE;IADC,IAAA,eAAU,EAAC,4BAAqB,CAAC;;iEAC+B;AAGjE;IADC,IAAA,eAAU,GAAE;8BACe,uBAAgB;yDAAC;AAG7C;IADC,IAAA,eAAU,EAAC,mBAAW,CAAC;8BACP,mBAAW;8CAAC;AAI7B;IAFC,IAAA,WAAI,EAAC,iBAAiB,CAAC;IACvB,IAAA,aAAM,EAAC,iCAAe,CAAC;IACK,WAAA,IAAA,WAAI,GAAE,CAAA;IAAwB,WAAA,IAAA,aAAM,EAAC,MAAM,CAAC,CAAA;;;;qDAaxE;AAUD;IAFC,IAAA,UAAG,GAAE;IACL,IAAA,aAAM,EAAC,iCAAe,CAAC;;;;yDAGvB;AAID;IAFC,IAAA,WAAI,GAAE;IACN,IAAA,aAAM,EAAC,iCAAe,CAAC;IACJ,WAAA,IAAA,WAAI,GAAE,CAAA;;qCAAc,4BAAY;;4CASnD;AAID;IAFC,IAAA,WAAI,EAAC,cAAc,CAAC;IACpB,IAAA,aAAM,EAAC,iCAAe,CAAC;IACK,WAAA,IAAA,YAAK,GAAE,CAAA;IAAiB,WAAA,IAAA,WAAI,GAAE,CAAA;;6CAAM,yCAAkB;;qDAsElF;AAID;IAFC,IAAA,WAAI,EAAC,iBAAiB,CAAC;IACvB,IAAA,aAAM,EAAC,iCAAe,CAAC;IACK,WAAA,IAAA,WAAI,GAAE,CAAA;;qCAAQ,4BAAY;;qDA4BtD;AAID;IAFC,IAAA,UAAG,GAAE;IACL,IAAA,aAAM,EAAC,2BAAY,CAAC;IACA,WAAA,IAAA,aAAM,GAAE,CAAA;;;;6CAS5B;AAnMU,eAAe;IAD3B,IAAA,eAAQ,EAAC,WAAW,CAAC;GACT,eAAe,CAyR3B;AAzRY,0CAAe"}

package/lib/controllers/TwoFactorAuthController.d.ts

@@ -1,11 +1,11 @@
 import { TokenDto } from './../dto/token-dto';
 import { BaseController, Ok, Unauthorized } from '@spinajs/http';
 import { SessionProvider, User as UserModel } from '@spinajs/rbac';
-import { TwoFactorAuthConfig, TwoFactorAuthProvider } from '../interfaces';
+import { TwoFactorAuthProvider } from '../interfaces';
+import { QueueClient } from '@spinajs/queue';
 export declare class TwoFactorAuthController extends BaseController {
-    protected TwoFactorConfig: TwoFactorAuthConfig;
+    protected Queue: QueueClient;
     protected SessionProvider: SessionProvider;
     protected TwoFactorAuthProvider: TwoFactorAuthProvider;
-    resolveAsync(): Promise<void>;
     verifyToken(logged: UserModel, token: TokenDto, ssid: string): Promise<Ok | Unauthorized>;
 }

package/lib/controllers/TwoFactorAuthController.js

@@ -11,50 +11,49 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TwoFactorAuthController = void 0;
 const token_dto_1 = require("./../dto/token-dto");
 const http_1 = require("@spinajs/http");
 const rbac_1 = require("@spinajs/rbac");
 const http_2 = require("@spinajs/http");
-const lodash_1 = __importDefault(require("lodash"));
 const decorators_1 = require("../decorators");
 const _2FaPolicy_1 = require("../policies/2FaPolicy");
 const configuration_1 = require("@spinajs/configuration");
+const interfaces_1 = require("../interfaces");
+const luxon_1 = require("luxon");
+const UserLoginSuccess_1 = require("../events/UserLoginSuccess");
 const di_1 = require("@spinajs/di");
+const queue_1 = require("@spinajs/queue");
 let TwoFactorAuthController = class TwoFactorAuthController extends http_1.BaseController {
-    async resolveAsync() {
-        if (this.TwoFactorConfig.enabled) {
-            if (!di_1.DI.check(this.TwoFactorConfig.service)) {
-                throw new di_1.ServiceNotFound(`2FA provider ${this.TwoFactorConfig.service} not registered in DI container`);
-            }
-            this.TwoFactorAuthProvider = di_1.DI.resolve(this.TwoFactorConfig.service);
-        }
-    }
     async verifyToken(logged, token, ssid) {
         const result = await this.TwoFactorAuthProvider.verifyToken(token.Token, logged);
         if (result) {
             return new http_1.Unauthorized(`invalid token`);
         }
-        const session = await this.SessionProvider.restore(ssid);
-        session.Data.set('Authorized', true);
-        session.Data.set('2fa_check', true);
-        await this.SessionProvider.save(session);
+        logged.LastLoginAt = luxon_1.DateTime.now();
+        await logged.update();
+        await this.Queue.emit(new UserLoginSuccess_1.UserLoginSuccess(logged.Uuid));
+        await this.SessionProvider.save(ssid, {
+            Authorized: true,
+            TwoFactorAuth_check: true,
+        });
         // return user data
-        return new http_1.Ok(lodash_1.default.omit(logged.dehydrate(), ['Id']));
+        return new http_1.Ok(logged.dehydrate());
     }
 };
 __decorate([
-    (0, configuration_1.Config)('rbac.twoFactorAuth'),
-    __metadata("design:type", Object)
-], TwoFactorAuthController.prototype, "TwoFactorConfig", void 0);
+    (0, di_1.Autoinject)(queue_1.QueueClient),
+    __metadata("design:type", queue_1.QueueClient)
+], TwoFactorAuthController.prototype, "Queue", void 0);
 __decorate([
-    (0, di_1.Autoinject)(),
+    (0, configuration_1.AutoinjectService)('rbac.session'),
     __metadata("design:type", rbac_1.SessionProvider)
 ], TwoFactorAuthController.prototype, "SessionProvider", void 0);
+__decorate([
+    (0, configuration_1.AutoinjectService)('rbac.twoFactorAuth'),
+    __metadata("design:type", interfaces_1.TwoFactorAuthProvider)
+], TwoFactorAuthController.prototype, "TwoFactorAuthProvider", void 0);
 __decorate([
     (0, http_1.Post)('2fa/verify'),
     __param(0, (0, decorators_1.User)()),

package/lib/controllers/TwoFactorAuthController.js.map

@@ -1 +1 @@
-{"version":3,"file":"TwoFactorAuthController.js","sourceRoot":"","sources":["../../src/controllers/TwoFactorAuthController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,kDAA8C;AAC9C,wCAAyF;AACzF,wCAAmE;AACnE,wCAA6C;AAC7C,oDAAuB;AACvB,8CAAqC;AACrC,sDAA2D;AAC3D,0DAAgD;AAEhD,oCAA8D;AAI9D,IAAa,uBAAuB,GAApC,MAAa,uBAAwB,SAAQ,qBAAc;IASlD,KAAK,CAAC,YAAY;QACvB,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE;YAChC,IAAI,CAAC,OAAE,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE;gBAC3C,MAAM,IAAI,oBAAe,CAAC,gBAAgB,IAAI,CAAC,eAAe,CAAC,OAAO,iCAAiC,CAAC,CAAC;aAC1G;YACD,IAAI,CAAC,qBAAqB,GAAG,OAAE,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;SACvE;IACH,CAAC;IAGM,KAAK,CAAC,WAAW,CAAS,MAAiB,EAAU,KAAe,EAAY,IAAY;QACjG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEjF,IAAI,MAAM,EAAE;YACV,OAAO,IAAI,mBAAY,CAAC,eAAe,CAAC,CAAC;SAC1C;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAEpC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEzC,mBAAmB;QACnB,OAAO,IAAI,SAAE,CAAC,gBAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;CACF,CAAA;AAjCC;IADC,IAAA,sBAAM,EAAC,oBAAoB,CAAC;;gEACkB;AAG/C;IADC,IAAA,eAAU,GAAE;8BACc,sBAAe;gEAAC;AAc3C;IADC,IAAA,WAAI,EAAC,YAAY,CAAC;IACO,WAAA,IAAA,iBAAI,GAAE,CAAA;IAAqB,WAAA,IAAA,WAAI,GAAE,CAAA;IAAmB,WAAA,IAAA,aAAM,GAAE,CAAA;;qCAA7C,WAAS,EAAiB,oBAAQ;;0DAe1E;AAlCU,uBAAuB;IAFnC,IAAA,eAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,aAAM,EAAC,+BAAkB,CAAC;GACd,uBAAuB,CAmCnC;AAnCY,0DAAuB"}
+{"version":3,"file":"TwoFactorAuthController.js","sourceRoot":"","sources":["../../src/controllers/TwoFactorAuthController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,kDAA8C;AAC9C,wCAAyF;AACzF,wCAAmE;AACnE,wCAA6C;AAE7C,8CAAqC;AACrC,sDAA2D;AAC3D,0DAA2D;AAC3D,8CAAsD;AACtD,iCAAiC;AACjC,iEAA8D;AAC9D,oCAAyC;AACzC,0CAA6C;AAI7C,IAAa,uBAAuB,GAApC,MAAa,uBAAwB,SAAQ,qBAAc;IAWlD,KAAK,CAAC,WAAW,CAAS,MAAiB,EAAU,KAAe,EAAY,IAAY;QACjG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEjF,IAAI,MAAM,EAAE;YACV,OAAO,IAAI,mBAAY,CAAC,eAAe,CAAC,CAAC;SAC1C;QAED,MAAM,CAAC,WAAW,GAAG,gBAAQ,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAEtB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,mCAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAEzD,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE;YACpC,UAAU,EAAE,IAAI;YAChB,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QAEH,mBAAmB;QACnB,OAAO,IAAI,SAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AA7BC;IADC,IAAA,eAAU,EAAC,mBAAW,CAAC;8BACP,mBAAW;sDAAC;AAG7B;IADC,IAAA,iCAAiB,EAAC,cAAc,CAAC;8BACP,sBAAe;gEAAC;AAG3C;IADC,IAAA,iCAAiB,EAAC,oBAAoB,CAAC;8BACP,kCAAqB;sEAAC;AAGvD;IADC,IAAA,WAAI,EAAC,YAAY,CAAC;IACO,WAAA,IAAA,iBAAI,GAAE,CAAA;IAAqB,WAAA,IAAA,WAAI,GAAE,CAAA;IAAmB,WAAA,IAAA,aAAM,GAAE,CAAA;;qCAA7C,WAAS,EAAiB,oBAAQ;;0DAmB1E;AA9BU,uBAAuB;IAFnC,IAAA,eAAQ,EAAC,WAAW,CAAC;IACrB,IAAA,aAAM,EAAC,+BAAkB,CAAC;GACd,uBAAuB,CA+BnC;AA/BY,0DAAuB"}

package/lib/controllers/UserController.d.ts

@@ -1,5 +1,4 @@
 import { PasswordDto } from '../dto/password-dto';
-import { UserLoginDto } from '../dto/login-dto';
 import { User as UserModel, PasswordProvider, SessionProvider } from '@spinajs/rbac';
 import { BaseController, Ok } from '@spinajs/http';
 export declare class UserController extends BaseController {
@@ -7,6 +6,5 @@ export declare class UserController extends BaseController {
     protected CoockieSecret: string;
     protected SessionProvider: SessionProvider;
     refresh(user: UserModel, ssid: string): Promise<Ok>;
-    restorePassword(_login: UserLoginDto): Promise<void>;
-    newPassword(login: string, pwd: PasswordDto): Promise<Ok>;
+    newPassword(user: UserModel, pwd: PasswordDto): Promise<Ok>;
 }

package/lib/controllers/UserController.js

@@ -34,13 +34,9 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UserController = void 0;
 const password_dto_1 = require("../dto/password-dto");
-const login_dto_1 = require("../dto/login-dto");
 const rbac_1 = require("@spinajs/rbac");
 const http_1 = require("@spinajs/http");
 const exceptions_1 = require("@spinajs/exceptions");
@@ -48,8 +44,6 @@ const di_1 = require("@spinajs/di");
 const decorators_1 = require("../decorators");
 const configuration_1 = require("@spinajs/configuration");
 const cs = __importStar(require("cookie-signature"));
-const lodash_1 = __importDefault(require("lodash"));
-const http_2 = require("@spinajs/http");
 let UserController = class UserController extends http_1.BaseController {
     async refresh(user, ssid) {
         // get user data from db
@@ -63,14 +57,12 @@ let UserController = class UserController extends http_1.BaseController {
                 session.Data.set('User', user.dehydrate());
             }
         }
-        return new http_1.Ok(lodash_1.default.omit(user.dehydrate(), ['Id']));
+        return new http_1.Ok(user.dehydrate());
     }
-    async restorePassword(_login) { }
-    async newPassword(login, pwd) {
+    async newPassword(user, pwd) {
         if (pwd.Password !== pwd.ConfirmPassword) {
             throw new exceptions_1.InvalidArgument('password does not match');
         }
-        const user = await rbac_1.User.where({ Login: login }).firstOrFail();
         const isValid = await this.PasswordProvider.verify(user.Password, pwd.OldPassword);
         if (!isValid) {
             throw new exceptions_1.Forbidden('old password do not match');
@@ -103,18 +95,11 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "refresh", null);
 __decorate([
-    (0, http_2.Post)('password/restore'),
-    __param(0, (0, http_1.Body)()),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [login_dto_1.UserLoginDto]),
-    __metadata("design:returntype", Promise)
-], UserController.prototype, "restorePassword", null);
-__decorate([
-    (0, http_1.Patch)('/password/:login'),
-    __param(0, (0, http_1.Param)()),
+    (0, http_1.Patch)('/password'),
+    __param(0, (0, decorators_1.User)()),
     __param(1, (0, http_1.Body)()),
     __metadata("design:type", Function),
-    __metadata("design:paramtypes", [String, password_dto_1.PasswordDto]),
+    __metadata("design:paramtypes", [rbac_1.User, password_dto_1.PasswordDto]),
     __metadata("design:returntype", Promise)
 ], UserController.prototype, "newPassword", null);
 UserController = __decorate([

package/lib/controllers/UserController.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserController.js","sourceRoot":"","sources":["../../src/controllers/UserController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,sDAAkD;AAClD,gDAAgD;AAChD,wCAAqF;AACrF,wCAA8F;AAC9F,oDAAiE;AACjE,oCAAyC;AACzC,8CAA2D;AAC3D,0DAAgD;AAChD,qDAAuC;AACvC,oDAAuB;AACvB,wCAAqC;AAIrC,IAAa,cAAc,GAA3B,MAAa,cAAe,SAAQ,qBAAc;IAYzC,KAAK,CAAC,OAAO,CAAS,IAAe,EAAY,IAAY;QAClE,wBAAwB;QACxB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAE/B,+BAA+B;QAC/B,MAAM,GAAG,GAAmB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAChE,IAAI,GAAG,EAAE;YACP,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,OAAO,EAAE;gBACX,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;aAC5C;SACF;QAED,OAAO,IAAI,SAAE,CAAC,gBAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAGM,KAAK,CAAC,eAAe,CAAS,MAAoB,IAAG,CAAC;IAGtD,KAAK,CAAC,WAAW,CAAU,KAAa,EAAU,GAAgB;QACvE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,eAAe,EAAE;YACxC,MAAM,IAAI,4BAAe,CAAC,yBAAyB,CAAC,CAAC;SACtD;QAED,MAAM,IAAI,GAAG,MAAM,WAAS,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAEnF,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,sBAAS,CAAC,2BAA2B,CAAC,CAAC;SAClD;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC;QAC/B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,IAAI,SAAE,EAAE,CAAC;IAClB,CAAC;CACF,CAAA;AAhDC;IADC,IAAA,eAAU,GAAE;8BACe,uBAAgB;wDAAC;AAG7C;IADC,IAAA,sBAAM,EAAC,oBAAoB,CAAC;;qDACG;AAGhC;IADC,IAAA,eAAU,GAAE;8BACc,sBAAe;uDAAC;AAI3C;IAFC,IAAA,UAAG,GAAE;IACL,IAAA,uBAAU,EAAC,SAAS,CAAC;IACA,WAAA,IAAA,iBAAI,GAAE,CAAA;IAAmB,WAAA,IAAA,aAAM,GAAE,CAAA;;qCAApB,WAAS;;6CAe3C;AAGD;IADC,IAAA,WAAI,EAAC,kBAAkB,CAAC;IACK,WAAA,IAAA,WAAI,GAAE,CAAA;;qCAAS,wBAAY;;qDAAI;AAG7D;IADC,IAAA,YAAK,EAAC,kBAAkB,CAAC;IACA,WAAA,IAAA,YAAK,GAAE,CAAA;IAAiB,WAAA,IAAA,WAAI,GAAE,CAAA;;6CAAM,0BAAW;;iDAgBxE;AAjDU,cAAc;IAF1B,IAAA,eAAQ,EAAC,MAAM,CAAC;IAChB,IAAA,qBAAQ,EAAC,MAAM,CAAC;GACJ,cAAc,CAkD1B;AAlDY,wCAAc"}
+{"version":3,"file":"UserController.js","sourceRoot":"","sources":["../../src/controllers/UserController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,sDAAkD;AAClD,wCAAqF;AACrF,wCAAuF;AACvF,oDAAiE;AACjE,oCAAyC;AACzC,8CAA2D;AAC3D,0DAAgD;AAChD,qDAAuC;AAKvC,IAAa,cAAc,GAA3B,MAAa,cAAe,SAAQ,qBAAc;IAYzC,KAAK,CAAC,OAAO,CAAS,IAAe,EAAY,IAAY;QAClE,wBAAwB;QACxB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAE/B,+BAA+B;QAC/B,MAAM,GAAG,GAAmB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAChE,IAAI,GAAG,EAAE;YACP,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,OAAO,EAAE;gBACX,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;aAC5C;SACF;QAED,OAAO,IAAI,SAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAClC,CAAC;IAGM,KAAK,CAAC,WAAW,CAAS,IAAe,EAAU,GAAgB;QACxE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,eAAe,EAAE;YACxC,MAAM,IAAI,4BAAe,CAAC,yBAAyB,CAAC,CAAC;SACtD;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAEnF,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,sBAAS,CAAC,2BAA2B,CAAC,CAAC;SAClD;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC;QAC/B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,IAAI,SAAE,EAAE,CAAC;IAClB,CAAC;CACF,CAAA;AA5CC;IADC,IAAA,eAAU,GAAE;8BACe,uBAAgB;wDAAC;AAG7C;IADC,IAAA,sBAAM,EAAC,oBAAoB,CAAC;;qDACG;AAGhC;IADC,IAAA,eAAU,GAAE;8BACc,sBAAe;uDAAC;AAI3C;IAFC,IAAA,UAAG,GAAE;IACL,IAAA,uBAAU,EAAC,SAAS,CAAC;IACA,WAAA,IAAA,iBAAI,GAAE,CAAA;IAAmB,WAAA,IAAA,aAAM,GAAE,CAAA;;qCAApB,WAAS;;6CAe3C;AAGD;IADC,IAAA,YAAK,EAAC,WAAW,CAAC;IACO,WAAA,IAAA,iBAAI,GAAE,CAAA;IAAmB,WAAA,IAAA,WAAI,GAAE,CAAA;;qCAAlB,WAAS,EAAe,0BAAW;;iDAezE;AA7CU,cAAc;IAF1B,IAAA,eAAQ,EAAC,MAAM,CAAC;IAChB,IAAA,qBAAQ,EAAC,MAAM,CAAC;GACJ,cAAc,CA8C1B;AA9CY,wCAAc"}

package/lib/controllers/UserMetadata.js

@@ -63,4 +63,8 @@ UserMetaController = __decorate([
     (0, decorators_1.Resource)('user.metadata')
 ], UserMetaController);
 exports.UserMetaController = UserMetaController;
+// function userOwnerPermissionStrategy(){
+//    // 1. obtain current logged user
+//    // 2. find
+// }
 //# sourceMappingURL=UserMetadata.js.map

package/lib/controllers/UserMetadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserMetadata.js","sourceRoot":"","sources":["../../src/controllers/UserMetadata.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wCAAqE;AACrE,wCAAgE;AAChE,gDAA2C;AAC3C,8CAAiD;AACjD,gDAAuD;AAIvD,IAAa,kBAAkB,GAA/B,MAAa,kBAAkB;IAGtB,KAAK,CAAC,WAAW,CAAS,MAAiB,EAAe,IAAe,EAAa,IAAkB;QAC7G,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE;YACzB,MAAM,IAAI,gBAAS,CAAC,qCAAqC,CAAC,CAAC;SAC5D;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,SAAE,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAIM,KAAK,CAAC,cAAc,CAAS,MAAiB,EAAe,IAAe,EAAe,IAAkB;QAClH,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE;YACzB,MAAM,IAAI,gBAAS,CAAC,qCAAqC,CAAC,CAAC;SAC5D;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,EAAE;YACpC,MAAM,IAAI,gBAAS,CAAC,8CAA8C,CAAC,CAAC;SACrE;QAED,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAEpB,OAAO,IAAI,SAAE,EAAE,CAAC;IAClB,CAAC;CACF,CAAA;AAzBC;IAFC,IAAA,WAAI,GAAE;IACN,IAAA,uBAAU,EAAC,WAAW,CAAC;IACE,WAAA,IAAA,iBAAI,GAAE,CAAA;IAAqB,WAAA,IAAA,oBAAS,GAAE,CAAA;IAAmB,WAAA,IAAA,kBAAO,GAAE,CAAA;;qCAAnD,WAAS,EAAqB,WAAS,EAAmB,mBAAY;;qDAO9G;AAID;IAFC,IAAA,YAAK,EAAC,2BAA2B,CAAC;IAClC,IAAA,uBAAU,EAAC,WAAW,CAAC;IACK,WAAA,IAAA,iBAAI,GAAE,CAAA;IAAqB,WAAA,IAAA,oBAAS,GAAE,CAAA;IAAmB,WAAA,IAAA,oBAAS,GAAE,CAAA;;qCAArD,WAAS,EAAqB,WAAS,EAAqB,mBAAY;;wDAanH;AA3BU,kBAAkB;IAF9B,IAAA,eAAQ,EAAC,qBAAqB,CAAC;IAC/B,IAAA,qBAAQ,EAAC,eAAe,CAAC;GACb,kBAAkB,CA4B9B;AA5BY,gDAAkB"}
+{"version":3,"file":"UserMetadata.js","sourceRoot":"","sources":["../../src/controllers/UserMetadata.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wCAAqE;AACrE,wCAAgE;AAChE,gDAA2C;AAC3C,8CAAiD;AACjD,gDAAuD;AAIvD,IAAa,kBAAkB,GAA/B,MAAa,kBAAkB;IAGtB,KAAK,CAAC,WAAW,CAAS,MAAiB,EAAe,IAAe,EAAa,IAAkB;QAC7G,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE;YACzB,MAAM,IAAI,gBAAS,CAAC,qCAAqC,CAAC,CAAC;SAC5D;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,SAAE,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAIM,KAAK,CAAC,cAAc,CAAS,MAAiB,EAAe,IAAe,EAAe,IAAkB;QAClH,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE;YACzB,MAAM,IAAI,gBAAS,CAAC,qCAAqC,CAAC,CAAC;SAC5D;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,EAAE;YACpC,MAAM,IAAI,gBAAS,CAAC,8CAA8C,CAAC,CAAC;SACrE;QAED,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAEpB,OAAO,IAAI,SAAE,EAAE,CAAC;IAClB,CAAC;CACF,CAAA;AAzBC;IAFC,IAAA,WAAI,GAAE;IACN,IAAA,uBAAU,EAAC,WAAW,CAAC;IACE,WAAA,IAAA,iBAAI,GAAE,CAAA;IAAqB,WAAA,IAAA,oBAAS,GAAE,CAAA;IAAmB,WAAA,IAAA,kBAAO,GAAE,CAAA;;qCAAnD,WAAS,EAAqB,WAAS,EAAmB,mBAAY;;qDAO9G;AAID;IAFC,IAAA,YAAK,EAAC,2BAA2B,CAAC;IAClC,IAAA,uBAAU,EAAC,WAAW,CAAC;IACK,WAAA,IAAA,iBAAI,GAAE,CAAA;IAAqB,WAAA,IAAA,oBAAS,GAAE,CAAA;IAAmB,WAAA,IAAA,oBAAS,GAAE,CAAA;;qCAArD,WAAS,EAAqB,WAAS,EAAqB,mBAAY;;wDAanH;AA3BU,kBAAkB;IAF9B,IAAA,eAAQ,EAAC,qBAAqB,CAAC;IAC/B,IAAA,qBAAQ,EAAC,eAAe,CAAC;GACb,kBAAkB,CA4B9B;AA5BY,gDAAkB;AA8B/B,0CAA0C;AAE1C,sCAAsC;AACtC,gBAAgB;AAEhB,IAAI"}

package/lib/decorators.js

@@ -57,17 +57,13 @@ exports.Resource = Resource;
  */
 function Permission(permission = 'readOwn') {
     return descriptor((metadata, target, propertyKey) => {
-        let route = null;
         if (propertyKey) {
-            if (metadata.Routes.has(propertyKey)) {
-                route = metadata.Routes.get(propertyKey);
-            }
-            else {
-                route = {
+            if (!metadata.Routes.has(propertyKey)) {
+                const route = {
                     Permission: permission,
                 };
+                metadata.Routes.set(propertyKey, route);
             }
-            metadata.Routes.set(propertyKey, route);
         }
         (0, http_1.Policy)(RbacPolicy_1.RbacPolicy)(target, propertyKey, null);
     });

package/lib/decorators.js.map

@@ -1 +1 @@
-{"version":3,"file":"decorators.js","sourceRoot":"","sources":["../src/decorators.ts"],"names":[],"mappings":";;;AACA,wCAAyD;AACzD,sDAAmD;AAEtC,QAAA,yBAAyB,GAAG,MAAM,CAAC,kCAAkC,CAAC,CAAC;AAEpF,SAAgB,eAAe,CAAC,MAAW,EAAE,QAAyC;IACpF,IAAI,QAAQ,GAAoB,OAAO,CAAC,WAAW,CAAC,iCAAyB,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IAC3G,IAAI,CAAC,QAAQ,EAAE;QACb,QAAQ,GAAG;YACT,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,IAAI,GAAG,EAA0C;YACzD,UAAU,EAAE,SAAS;SACtB,CAAC;QAEF,OAAO,CAAC,cAAc,CAAC,iCAAyB,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;KACzF;IAED,IAAI,QAAQ,EAAE;QACZ,QAAQ,CAAC,QAAQ,CAAC,CAAC;KACpB;AACH,CAAC;AAfD,0CAeC;AAED,SAAS,UAAU,CAAC,QAA0I;IAC5J,OAAO,CAAC,MAAW,EAAE,WAA4B,EAAE,iBAA8C,EAAE,EAAE;QACnG,IAAI,QAAQ,GAAoB,OAAO,CAAC,WAAW,CAAC,iCAAyB,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAC3G,IAAI,CAAC,QAAQ,EAAE;YACb,QAAQ,GAAG;gBACT,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,IAAI,GAAG,EAA0C;gBACzD,UAAU,EAAE,SAAS;aACtB,CAAC;YAEF,OAAO,CAAC,cAAc,CAAC,iCAAyB,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;SACzF;QAED,IAAI,QAAQ,EAAE;YACZ,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;SAC5D;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,QAAQ,CAAC,QAAgB,EAAE,aAA6B,SAAS;IAC/E,OAAO,UAAU,CAAC,CAAC,QAAyB,EAAE,MAAW,EAAE,EAAE;QAC3D,IAAA,aAAM,EAAC,uBAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvC,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7B,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAPD,4BAOC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,aAA6B,SAAS;IAC/D,OAAO,UAAU,CAAC,CAAC,QAAyB,EAAE,MAAW,EAAE,WAAmB,EAAE,EAAE;QAChF,IAAI,KAAK,GAAmC,IAAI,CAAC;QAEjD,IAAI,WAAW,EAAE;YACf,IAAI,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;gBACpC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;aAC1C;iBAAM;gBACL,KAAK,GAAG;oBACN,UAAU,EAAE,UAAU;iBACvB,CAAC;aACH;YAED,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;SACzC;QAED,IAAA,aAAM,EAAC,uBAAU,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAlBD,gCAkBC;AAED;;GAEG;AACH,SAAgB,IAAI;IAClB,OAAO,IAAA,YAAK,EAAC,IAAA,gBAAS,EAAC,SAAS,CAAC,CAAC,CAAC;AACrC,CAAC;AAFD,oBAEC;AAED;;GAEG;AACH,SAAgB,OAAO;IACrB,OAAO,IAAA,YAAK,EAAC,IAAA,gBAAS,EAAC,YAAY,CAAC,CAAC,CAAC;AACxC,CAAC;AAFD,0BAEC"}
+{"version":3,"file":"decorators.js","sourceRoot":"","sources":["../src/decorators.ts"],"names":[],"mappings":";;;AACA,wCAAyD;AACzD,sDAAmD;AAEtC,QAAA,yBAAyB,GAAG,MAAM,CAAC,kCAAkC,CAAC,CAAC;AAEpF,SAAgB,eAAe,CAAC,MAAW,EAAE,QAAyC;IACpF,IAAI,QAAQ,GAAoB,OAAO,CAAC,WAAW,CAAC,iCAAyB,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IAC3G,IAAI,CAAC,QAAQ,EAAE;QACb,QAAQ,GAAG;YACT,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,IAAI,GAAG,EAA0C;YACzD,UAAU,EAAE,SAAS;SACtB,CAAC;QAEF,OAAO,CAAC,cAAc,CAAC,iCAAyB,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;KACzF;IAED,IAAI,QAAQ,EAAE;QACZ,QAAQ,CAAC,QAAQ,CAAC,CAAC;KACpB;AACH,CAAC;AAfD,0CAeC;AAED,SAAS,UAAU,CAAC,QAA0I;IAC5J,OAAO,CAAC,MAAW,EAAE,WAA4B,EAAE,iBAA8C,EAAE,EAAE;QACnG,IAAI,QAAQ,GAAoB,OAAO,CAAC,WAAW,CAAC,iCAAyB,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAC3G,IAAI,CAAC,QAAQ,EAAE;YACb,QAAQ,GAAG;gBACT,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,IAAI,GAAG,EAA0C;gBACzD,UAAU,EAAE,SAAS;aACtB,CAAC;YAEF,OAAO,CAAC,cAAc,CAAC,iCAAyB,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;SACzF;QAED,IAAI,QAAQ,EAAE;YACZ,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;SAC5D;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,QAAQ,CAAC,QAAgB,EAAE,aAA6B,SAAS;IAC/E,OAAO,UAAU,CAAC,CAAC,QAAyB,EAAE,MAAW,EAAE,EAAE;QAC3D,IAAA,aAAM,EAAC,uBAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvC,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC7B,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAPD,4BAOC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,aAA6B,SAAS;IAC/D,OAAO,UAAU,CAAC,CAAC,QAAyB,EAAE,MAAW,EAAE,WAAmB,EAAE,EAAE;QAChF,IAAI,WAAW,EAAE;YACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE;gBACrC,MAAM,KAAK,GAAG;oBACZ,UAAU,EAAE,UAAU;iBACvB,CAAC;gBACF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;aACzC;SACF;QAED,IAAA,aAAM,EAAC,uBAAU,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAbD,gCAaC;AAED;;GAEG;AACH,SAAgB,IAAI;IAClB,OAAO,IAAA,YAAK,EAAC,IAAA,gBAAS,EAAC,SAAS,CAAC,CAAC,CAAC;AACrC,CAAC;AAFD,oBAEC;AAED;;GAEG;AACH,SAAgB,OAAO;IACrB,OAAO,IAAA,YAAK,EAAC,IAAA,gBAAS,EAAC,YAAY,CAAC,CAAC,CAAC;AACxC,CAAC;AAFD,0BAEC"}

package/lib/dto/restore-password-dto.d.ts

@@ -0,0 +1,23 @@
+export declare const RestorePasswordDtoSchema: {
+    $schema: string;
+    title: string;
+    type: string;
+    properties: {
+        Password: {
+            type: string;
+            maxLength: number;
+            minLength: number;
+        };
+        ConfirmPassword: {
+            type: string;
+            maxLength: number;
+            minLength: number;
+        };
+    };
+    required: string[];
+};
+export declare class RestorePasswordDto {
+    Password: string;
+    ConfirmPassword: string;
+    constructor(data: any);
+}

package/lib/dto/restore-password-dto.js

@@ -0,0 +1,34 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RestorePasswordDto = exports.RestorePasswordDtoSchema = void 0;
+const validation_1 = require("@spinajs/validation");
+exports.RestorePasswordDtoSchema = {
+    $schema: 'http://json-schema.org/draft-07/schema#',
+    title: 'User password DTO',
+    type: 'object',
+    properties: {
+        Password: { type: 'string', maxLength: 32, minLength: 6 },
+        ConfirmPassword: { type: 'string', maxLength: 32, minLength: 6 },
+    },
+    required: ['Password', 'ConfirmPassword'],
+};
+let RestorePasswordDto = class RestorePasswordDto {
+    constructor(data) {
+        Object.assign(this, data);
+    }
+};
+RestorePasswordDto = __decorate([
+    (0, validation_1.Schema)(exports.RestorePasswordDtoSchema),
+    __metadata("design:paramtypes", [Object])
+], RestorePasswordDto);
+exports.RestorePasswordDto = RestorePasswordDto;
+//# sourceMappingURL=restore-password-dto.js.map

package/lib/dto/restore-password-dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-password-dto.js","sourceRoot":"","sources":["../../src/dto/restore-password-dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oDAA6C;AAEhC,QAAA,wBAAwB,GAAG;IACtC,OAAO,EAAE,yCAAyC;IAClD,KAAK,EAAE,mBAAmB;IAC1B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;QACzD,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;KACjE;IACD,QAAQ,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC;CAC1C,CAAC;AAGF,IAAa,kBAAkB,GAA/B,MAAa,kBAAkB;IAK7B,YAAY,IAAS;QACnB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;CACF,CAAA;AARY,kBAAkB;IAD9B,IAAA,mBAAM,EAAC,gCAAwB,CAAC;;GACpB,kBAAkB,CAQ9B;AARY,gDAAkB"}

package/lib/events/UserLoginFailed.d.ts

@@ -0,0 +1,5 @@
+import { QueueEvent } from '@spinajs/queue';
+export declare class UserLoginFailed extends QueueEvent {
+    UserUUID: string;
+    constructor(UserUUID: string);
+}

package/lib/events/UserLoginFailed.js

@@ -0,0 +1,25 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserLoginFailed = void 0;
+const queue_1 = require("@spinajs/queue");
+let UserLoginFailed = class UserLoginFailed extends queue_1.QueueEvent {
+    constructor(UserUUID) {
+        super();
+        this.UserUUID = UserUUID;
+    }
+};
+UserLoginFailed = __decorate([
+    (0, queue_1.Event)(),
+    __metadata("design:paramtypes", [String])
+], UserLoginFailed);
+exports.UserLoginFailed = UserLoginFailed;
+//# sourceMappingURL=UserLoginFailed.js.map

package/lib/events/UserLoginFailed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserLoginFailed.js","sourceRoot":"","sources":["../../src/events/UserLoginFailed.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0CAAmD;AAGnD,IAAa,eAAe,GAA5B,MAAa,eAAgB,SAAQ,kBAAU;IAC7C,YAAmB,QAAgB;QACjC,KAAK,EAAE,CAAC;QADS,aAAQ,GAAR,QAAQ,CAAQ;IAEnC,CAAC;CACF,CAAA;AAJY,eAAe;IAD3B,IAAA,aAAK,GAAE;;GACK,eAAe,CAI3B;AAJY,0CAAe"}

package/lib/events/UserLoginSuccess.d.ts

@@ -0,0 +1,5 @@
+import { QueueEvent } from '@spinajs/queue';
+export declare class UserLoginSuccess extends QueueEvent {
+    UserUUID: string;
+    constructor(UserUUID: string);
+}

package/lib/events/UserLoginSuccess.js

@@ -0,0 +1,25 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserLoginSuccess = void 0;
+const queue_1 = require("@spinajs/queue");
+let UserLoginSuccess = class UserLoginSuccess extends queue_1.QueueEvent {
+    constructor(UserUUID) {
+        super();
+        this.UserUUID = UserUUID;
+    }
+};
+UserLoginSuccess = __decorate([
+    (0, queue_1.Event)(),
+    __metadata("design:paramtypes", [String])
+], UserLoginSuccess);
+exports.UserLoginSuccess = UserLoginSuccess;
+//# sourceMappingURL=UserLoginSuccess.js.map

package/lib/events/UserLoginSuccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserLoginSuccess.js","sourceRoot":"","sources":["../../src/events/UserLoginSuccess.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0CAAmD;AAGnD,IAAa,gBAAgB,GAA7B,MAAa,gBAAiB,SAAQ,kBAAU;IAC9C,YAAmB,QAAgB;QACjC,KAAK,EAAE,CAAC;QADS,aAAQ,GAAR,QAAQ,CAAQ;IAEnC,CAAC;CACF,CAAA;AAJY,gBAAgB;IAD5B,IAAA,aAAK,GAAE;;GACK,gBAAgB,CAI5B;AAJY,4CAAgB"}

package/lib/events/UserPassordRestore.d.ts

@@ -0,0 +1,6 @@
+import { QueueEvent } from '@spinajs/queue';
+export declare class UserPasswordRestore extends QueueEvent {
+    UserUUID: string;
+    resetToken: string;
+    constructor(UserUUID: string, resetToken: string);
+}

package/lib/events/UserPassordRestore.js

@@ -0,0 +1,26 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserPasswordRestore = void 0;
+const queue_1 = require("@spinajs/queue");
+let UserPasswordRestore = class UserPasswordRestore extends queue_1.QueueEvent {
+    constructor(UserUUID, resetToken) {
+        super();
+        this.UserUUID = UserUUID;
+        this.resetToken = resetToken;
+    }
+};
+UserPasswordRestore = __decorate([
+    (0, queue_1.Event)(),
+    __metadata("design:paramtypes", [String, String])
+], UserPasswordRestore);
+exports.UserPasswordRestore = UserPasswordRestore;
+//# sourceMappingURL=UserPassordRestore.js.map

package/lib/events/UserPassordRestore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserPassordRestore.js","sourceRoot":"","sources":["../../src/events/UserPassordRestore.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0CAAmD;AAGnD,IAAa,mBAAmB,GAAhC,MAAa,mBAAoB,SAAQ,kBAAU;IACjD,YAAmB,QAAgB,EAAS,UAAkB;QAC5D,KAAK,EAAE,CAAC;QADS,aAAQ,GAAR,QAAQ,CAAQ;QAAS,eAAU,GAAV,UAAU,CAAQ;IAE9D,CAAC;CACF,CAAA;AAJY,mBAAmB;IAD/B,IAAA,aAAK,GAAE;;GACK,mBAAmB,CAI/B;AAJY,kDAAmB"}

package/lib/fingerprint/FingerprintJs.d.ts

@@ -0,0 +1,3 @@
+import { FingerprintProvider } from '../interfaces';
+export declare class FingerprintJs extends FingerprintProvider {
+}

package/lib/fingerprint/FingerprintJs.js

@@ -0,0 +1,18 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FingerprintJs = void 0;
+const di_1 = require("@spinajs/di");
+const interfaces_1 = require("../interfaces");
+let FingerprintJs = class FingerprintJs extends interfaces_1.FingerprintProvider {
+};
+FingerprintJs = __decorate([
+    (0, di_1.Injectable)(interfaces_1.FingerprintProvider)
+], FingerprintJs);
+exports.FingerprintJs = FingerprintJs;
+//# sourceMappingURL=FingerprintJs.js.map

package/lib/fingerprint/FingerprintJs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FingerprintJs.js","sourceRoot":"","sources":["../../src/fingerprint/FingerprintJs.ts"],"names":[],"mappings":";;;;;;;;;AAAA,oCAAyC;AACzC,8CAAoD;AAGpD,IAAa,aAAa,GAA1B,MAAa,aAAc,SAAQ,gCAAmB;CAAG,CAAA;AAA5C,aAAa;IADzB,IAAA,eAAU,EAAC,gCAAmB,CAAC;GACnB,aAAa,CAA+B;AAA5C,sCAAa"}

package/lib/interfaces.d.ts

@@ -54,8 +54,6 @@ export declare abstract class TwoFactorAuthProvider {
 }
 export declare abstract class FingerprintProvider {
 }
-export interface AuthProvider {
-}
 export interface TwoFactorAuthConfig {
     enabled: boolean;
     service: string;

package/lib/middlewares/AttributeFilter.d.ts

@@ -0,0 +1,10 @@
+import { RouteMiddleware, IController, IRoute } from '@spinajs/http';
+/**
+ * Filters attributes of db models
+ */
+export declare class FilterAttribute extends RouteMiddleware {
+    onResponse(): Promise<void>;
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    onBefore(): Promise<void>;
+    onAfter(): Promise<void>;
+}

package/lib/middlewares/AttributeFilter.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FilterAttribute = void 0;
+const http_1 = require("@spinajs/http");
+/**
+ * Filters attributes of db models
+ */
+class FilterAttribute extends http_1.RouteMiddleware {
+    async onResponse() { }
+    isEnabled(_action, _instance) {
+        return true;
+    }
+    // tslint:disable-next-line: no-empty
+    async onBefore() { }
+    // tslint:disable-next-line: no-empty
+    async onAfter() { }
+}
+exports.FilterAttribute = FilterAttribute;
+//# sourceMappingURL=AttributeFilter.js.map

package/lib/middlewares/AttributeFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AttributeFilter.js","sourceRoot":"","sources":["../../src/middlewares/AttributeFilter.ts"],"names":[],"mappings":";;;AAAA,wCAAqE;AAErE;;GAEG;AACH,MAAa,eAAgB,SAAQ,sBAAe;IAC3C,KAAK,CAAC,UAAU,KAAmB,CAAC;IAEpC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qCAAqC;IAC9B,KAAK,CAAC,QAAQ,KAAmB,CAAC;IAEzC,qCAAqC;IAC9B,KAAK,CAAC,OAAO,KAAmB,CAAC;CACzC;AAZD,0CAYC"}

package/lib/middlewares.d.ts

@@ -5,7 +5,7 @@ import { Request as sRequest, ServerMiddleware } from '@spinajs/http';
 export declare class RbacMiddleware extends ServerMiddleware {
     protected CoockieSecret: string;
     protected SessionProvider: SessionProvider;
-    resolveAsync(): Promise<void>;
+    resolve(): Promise<void>;
     before(): (req: sRequest, res: express.Response, next: express.NextFunction) => void;
     after(): (req: sRequest, res: express.Response, next: express.NextFunction) => void;
 }

package/lib/middlewares.js

@@ -40,7 +40,7 @@ const configuration_1 = require("@spinajs/configuration");
 const cs = __importStar(require("cookie-signature"));
 const http_1 = require("@spinajs/http");
 let RbacMiddleware = class RbacMiddleware extends http_1.ServerMiddleware {
-    async resolveAsync() {
+    async resolve() {
         if (!this.CoockieSecret) {
             throw new Error('http.cookie.secres is not set, cannot start UserFromSessionMiddleware. Set this value in configuration file !');
         }

package/lib/middlewares.js.map

@@ -1 +1 @@
-{"version":3,"file":"middlewares.js","sourceRoot":"","sources":["../src/middlewares.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wCAAsD;AACtD,oCAAqD;AACrD,4BAA0B;AAE1B,0DAAgD;AAChD,qDAAuC;AACvC,wCAAsE;AAGtE,IAAa,cAAc,GAA3B,MAAa,cAAe,SAAQ,uBAAgB;IAO3C,KAAK,CAAC,YAAY;QACvB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,MAAM,IAAI,KAAK,CAAC,+GAA+G,CAAC,CAAC;SAClI;IACH,CAAC;IAEM,MAAM;QACX,OAAO,KAAK,EAAE,GAAa,EAAE,IAAsB,EAAE,IAA0B,EAAE,EAAE;YACjF,IAAI;gBACF,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;oBACpB,MAAM,IAAI,GAAmB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC7E,IAAI,IAAI,EAAE;wBACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBACzD,IAAI,OAAO,EAAE;4BACX,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,WAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;4BACtD,GAAG,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;yBAC/B;6BAAM;4BACL,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;yBACzB;qBACF;yBAAM;wBACL,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;qBACzB;iBACF;gBACD,IAAI,EAAE,CAAC;aACR;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,CAAC,GAAG,CAAC,CAAC;aACX;QACH,CAAC,CAAC;IACJ,CAAC;IACM,KAAK;QACV,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AArCC;IADC,IAAA,sBAAM,EAAC,oBAAoB,CAAC;;qDACG;AAGhC;IADC,IAAA,eAAU,GAAE;8BACc,sBAAe;uDAAC;AALhC,cAAc;IAD1B,IAAA,eAAU,EAAC,uBAAgB,CAAC;GAChB,cAAc,CAuC1B;AAvCY,wCAAc"}
+{"version":3,"file":"middlewares.js","sourceRoot":"","sources":["../src/middlewares.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wCAAsD;AACtD,oCAAqD;AACrD,4BAA0B;AAE1B,0DAAgD;AAChD,qDAAuC;AACvC,wCAAsE;AAGtE,IAAa,cAAc,GAA3B,MAAa,cAAe,SAAQ,uBAAgB;IAO3C,KAAK,CAAC,OAAO;QAClB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACvB,MAAM,IAAI,KAAK,CAAC,+GAA+G,CAAC,CAAC;SAClI;IACH,CAAC;IAEM,MAAM;QACX,OAAO,KAAK,EAAE,GAAa,EAAE,IAAsB,EAAE,IAA0B,EAAE,EAAE;YACjF,IAAI;gBACF,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;oBACpB,MAAM,IAAI,GAAmB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC7E,IAAI,IAAI,EAAE;wBACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBACzD,IAAI,OAAO,EAAE;4BACX,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,WAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;4BACtD,GAAG,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;yBAC/B;6BAAM;4BACL,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;yBACzB;qBACF;yBAAM;wBACL,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;qBACzB;iBACF;gBACD,IAAI,EAAE,CAAC;aACR;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,CAAC,GAAG,CAAC,CAAC;aACX;QACH,CAAC,CAAC;IACJ,CAAC;IACM,KAAK;QACV,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AArCC;IADC,IAAA,sBAAM,EAAC,oBAAoB,CAAC;;qDACG;AAGhC;IADC,IAAA,eAAU,GAAE;8BACc,sBAAe;uDAAC;AALhC,cAAc;IAD1B,IAAA,eAAU,EAAC,uBAAgB,CAAC;GAChB,cAAc,CAuC1B;AAvCY,wCAAc"}

package/lib/policies/LoggedPolicy.d.ts

@@ -0,0 +1,9 @@
+import { BasePolicy, IController, IRoute, Request as sRequest } from '@spinajs/http';
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+export declare class LoggedPolicy extends BasePolicy {
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    execute(req: sRequest): Promise<void>;
+}

package/lib/policies/LoggedPolicy.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoggedPolicy = void 0;
+const http_1 = require("@spinajs/http");
+const exceptions_1 = require("@spinajs/exceptions");
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+class LoggedPolicy extends http_1.BasePolicy {
+    isEnabled(_action, _instance) {
+        // acl is always on if set
+        return true;
+    }
+    async execute(req) {
+        if (!req.storage || !req.storage.user || !req.storage.session.Data.get('Authorized')) {
+            throw new exceptions_1.Forbidden('user not logged or session expired');
+        }
+        return Promise.resolve();
+    }
+}
+exports.LoggedPolicy = LoggedPolicy;
+//# sourceMappingURL=LoggedPolicy.js.map

package/lib/policies/LoggedPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoggedPolicy.js","sourceRoot":"","sources":["../../src/policies/LoggedPolicy.ts"],"names":[],"mappings":";;;AAAA,wCAAqF;AACrF,oDAAgD;AAEhD;;;GAGG;AACH,MAAa,YAAa,SAAQ,iBAAU;IACnC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,0BAA0B;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE;YACpF,MAAM,IAAI,sBAAS,CAAC,oCAAoC,CAAC,CAAC;SAC3D;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF;AAbD,oCAaC"}

package/lib/policies/NotLoggedPolicy.d.ts

@@ -0,0 +1,9 @@
+import { BasePolicy, IController, IRoute, Request as sRequest } from '@spinajs/http';
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+export declare class NotLoggedPolicy extends BasePolicy {
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    execute(req: sRequest): Promise<void>;
+}

package/lib/policies/NotLoggedPolicy.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotLoggedPolicy = void 0;
+const http_1 = require("@spinajs/http");
+const exceptions_1 = require("@spinajs/exceptions");
+/**
+ * Simple policy to only check if user is authorized ( do not check permissions for routes)
+ * Usefull if we want to give acces for all logged users
+ */
+class NotLoggedPolicy extends http_1.BasePolicy {
+    isEnabled(_action, _instance) {
+        return true;
+    }
+    async execute(req) {
+        if (!req.storage || !req.storage.user || !req.storage.session.Data.get('Authorized')) {
+            return Promise.resolve();
+        }
+        throw new exceptions_1.InvalidOperation('Cannot perform action when user is logged.');
+    }
+}
+exports.NotLoggedPolicy = NotLoggedPolicy;
+//# sourceMappingURL=NotLoggedPolicy.js.map

package/lib/policies/NotLoggedPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotLoggedPolicy.js","sourceRoot":"","sources":["../../src/policies/NotLoggedPolicy.ts"],"names":[],"mappings":";;;AAAA,wCAAqF;AACrF,oDAAuD;AAEvD;;;GAGG;AACH,MAAa,eAAgB,SAAQ,iBAAU;IACtC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,GAAa;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE;YACpF,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;SAC1B;QAED,MAAM,IAAI,6BAAgB,CAAC,4CAA4C,CAAC,CAAC;IAC3E,CAAC;CACF;AAZD,0CAYC"}

package/lib/policies/captchaPolicy.js

@@ -0,0 +1 @@
+//# sourceMappingURL=captchaPolicy.js.map

package/lib/policies/captchaPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"captchaPolicy.js","sourceRoot":"","sources":["../../src/policies/captchaPolicy.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spinajs/rbac-http",
-  "version": "2.0.38",
+  "version": "2.0.44",
   "description": "HTTP API for user session & permissions",
   "main": "lib/index.js",
   "private": false,
@@ -38,24 +38,26 @@
   },
   "homepage": "https://github.com/spinajs/main#readme",
   "dependencies": {
-    "@spinajs/configuration": "^2.0.38",
-    "@spinajs/di": "^2.0.38",
-    "@spinajs/exceptions": "^2.0.12",
-    "@spinajs/http": "^2.0.38",
-    "@spinajs/log": "^2.0.38",
-    "@spinajs/orm": "^2.0.38",
-    "@spinajs/orm-http": "^2.0.38",
-    "@spinajs/rbac": "^2.0.38",
-    "@spinajs/reflection": "^2.0.38",
+    "@spinajs/configuration": "^2.0.44",
+    "@spinajs/di": "^2.0.44",
+    "@spinajs/exceptions": "^2.0.39",
+    "@spinajs/http": "^2.0.44",
+    "@spinajs/log": "^2.0.44",
+    "@spinajs/orm": "^2.0.44",
+    "@spinajs/orm-http": "^2.0.44",
+    "@spinajs/rbac": "^2.0.44",
+    "@spinajs/reflection": "^2.0.44",
     "accesscontrol": "^2.2.1",
-    "luxon": "^2.4.0",
+    "luxon": "^3.2.1",
     "qrcode": "^1.5.1",
-    "speakeasy": "^2.0.0"
+    "speakeasy": "^2.0.0",
+    "uuid": "^8.3.2"
   },
   "devDependencies": {
-    "@spinajs/orm-sqlite": "^2.0.38",
+    "@spinajs/orm-sqlite": "^2.0.44",
     "@types/qrcode": "^1.4.2",
-    "@types/speakeasy": "^2.0.7"
+    "@types/speakeasy": "^2.0.7",
+    "@types/uuid": "^8.3.3"
   },
-  "gitHead": "5ea5440ee9db49595f531592ebdbc6d69f457082"
+  "gitHead": "1857a6e3626e0fed22ffb0b44b48d587c79898db"
 }