@stamhoofd/models 2.1.1

package/dist/src/models/Token.js

@@ -0,0 +1,218 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Token = exports.apiUserRateLimiter = void 0;
+const tslib_1 = require("tslib");
+const simple_database_1 = require("@simonbackx/simple-database");
+const structures_1 = require("@stamhoofd/structures");
+const crypto_1 = tslib_1.__importDefault(require("crypto"));
+const RateLimiter_1 = require("../helpers/RateLimiter");
+const _1 = require("./");
+async function randomBytes(size) {
+    return new Promise((resolve, reject) => {
+        crypto_1.default.randomBytes(size, (err, buf) => {
+            if (err) {
+                reject(err);
+                return;
+            }
+            resolve(buf);
+        });
+    });
+}
+exports.apiUserRateLimiter = new RateLimiter_1.RateLimiter({
+    limits: [
+        {
+            // Block heavy bursts (5req/s for 5s)
+            limit: 25,
+            duration: 5 * 1000
+        },
+        {
+            // max 1req/s during 150s
+            limit: 150,
+            duration: 150 * 1000
+        },
+        {
+            // 1000 requests per hour
+            limit: 1000,
+            duration: 60 * 1000 * 60
+        },
+        {
+            // 2000 requests per day
+            limit: 2000,
+            duration: 24 * 60 * 1000 * 60
+        }
+    ]
+});
+class Token extends simple_database_1.Model {
+    isAccessTokenExpired() {
+        return this.accessTokenValidUntil < new Date() || this.refreshTokenValidUntil < new Date();
+    }
+    static async getAPIUserWithToken(user) {
+        var _a;
+        if (!user.isApiUser) {
+            throw new Error('Unexpected user type');
+        }
+        const [lastToken] = await this.where({
+            userId: user.id
+        }, { limit: 1 });
+        return structures_1.ApiUser.create({
+            id: user.id,
+            name: user.name,
+            permissions: user.permissions,
+            expiresAt: (_a = lastToken === null || lastToken === void 0 ? void 0 : lastToken.accessTokenValidUntil) !== null && _a !== void 0 ? _a : null,
+            createdAt: user.createdAt,
+        });
+    }
+    /**
+     * Get the token and user for a given accessToken IF it is still valid
+     */
+    static async getByAccessToken(accessToken, ignoreExpireDate = false) {
+        const [rows] = await simple_database_1.Database.select(`SELECT ${this.getDefaultSelect()}, user.*  FROM ${this.table} ${Token.user.joinQuery(this.table, "user")} WHERE ${this.primary.name} = ? LIMIT 1 `, [accessToken]);
+        if (rows.length == 0) {
+            return undefined;
+        }
+        // Read member + address from first row
+        const token = this.fromRow(rows[0][this.table]);
+        if (!token) {
+            return undefined;
+        }
+        if (!ignoreExpireDate && (token.accessTokenValidUntil < new Date() || token.refreshTokenValidUntil < new Date())) {
+            // Also if the refresh token is invalid, the access token will always be invalid
+            return undefined;
+        }
+        const user = _1.User.fromRow(rows[0]["user"]) || null;
+        if (!user) {
+            console.warn("Selected a token without a user!");
+            return undefined;
+        }
+        return token.setRelation(Token.user, user);
+    }
+    // Methods
+    static async getByRefreshToken(refreshToken) {
+        const [rows] = await simple_database_1.Database.select(`SELECT ${this.getDefaultSelect()}, ${_1.User.getDefaultSelect("user")}  FROM ${this.table} ${Token.user.joinQuery(this.table, "user")} WHERE \`refreshToken\` = ? LIMIT 1 `, [refreshToken]);
+        if (rows.length == 0) {
+            return undefined;
+        }
+        // Read member + address from first row
+        const token = this.fromRow(rows[0][this.table]);
+        if (!token) {
+            return undefined;
+        }
+        if (token.refreshTokenValidUntil < new Date()) {
+            // Refreh token invalid = can throw it away
+            token.delete().catch(e => {
+                console.error(e);
+            });
+            return undefined;
+        }
+        const user = _1.User.fromRow(rows[0]["user"]) || null;
+        if (!user || user.isApiUser) {
+            console.warn("Selected a token without a user!");
+            return undefined;
+        }
+        return token.setRelation(Token.user, user);
+    }
+    /**
+     * Create a token that is expired. This can be usefull if renewing the token is restricted by some account state.
+     * E.g. you cannot renew this token until the e-mail address has been verified.
+     * @param user
+     */
+    static async createExpiredToken(user) {
+        const token = await this.createUnsavedToken(user);
+        /// Expired a month ago (to prevent any timezone bugs)
+        token.accessTokenValidUntil = new Date(Date.now() - 24 * 60 * 60 * 1000 * 31);
+        token.accessTokenValidUntil.setMilliseconds(0);
+        await token.save();
+        return token;
+    }
+    /***
+     * Create a token without saving it
+     */
+    static async createUnsavedToken(user) {
+        // Get all the tokens of the user that are olde
+        // First search if we already have more than 5 tokens (we only allow up to 5 devices)
+        // In case we already have a token for that deviceId, we'll delete it first.
+        try {
+            const [rows,] = await simple_database_1.Database.delete(`DELETE FROM \`${this.table}\` WHERE ${this.primary.name} IN (SELECT ${this.primary.name} FROM (SELECT ${this.primary.name} FROM \`${this.table}\` WHERE \`userId\` = ? ORDER BY\`refreshTokenValidUntil\` DESC LIMIT ? OFFSET ?) x)`, [user.id, this.MAX_DEVICES, this.MAX_DEVICES]);
+            if (rows.affectedRows > 0) {
+                console.log(`Deleted ${rows.affectedRows} old tokens first`);
+            }
+        }
+        catch (e) {
+            // This is not a crucial operation, so don't fail when there is a deadlock problem in the query
+            console.error(e);
+        }
+        const token = new Token().setRelation(Token.user, user);
+        token.accessTokenValidUntil = new Date();
+        token.accessTokenValidUntil.setTime(token.accessTokenValidUntil.getTime() + 3600 * 1000);
+        token.accessTokenValidUntil.setMilliseconds(0);
+        token.refreshTokenValidUntil = new Date();
+        token.refreshTokenValidUntil.setTime(token.refreshTokenValidUntil.getTime() + 3600 * 1000 * 24 * 365);
+        token.refreshTokenValidUntil.setMilliseconds(0);
+        token.accessToken = (await randomBytes(192)).toString("base64").toUpperCase();
+        token.refreshToken = (await randomBytes(192)).toString("base64").toUpperCase();
+        return token;
+    }
+    static async createToken(user) {
+        const token = await this.createUnsavedToken(user);
+        await token.save();
+        return token;
+    }
+    static async createApiToken(user) {
+        const token = await this.createUnsavedToken(user);
+        // 5 year valid
+        token.accessTokenValidUntil = new Date();
+        token.accessTokenValidUntil.setTime(token.accessTokenValidUntil.getTime() + 1000 * 60 * 60 * 24 * 365 * 5);
+        token.accessTokenValidUntil.setMilliseconds(0);
+        token.refreshTokenValidUntil = new Date();
+        token.refreshTokenValidUntil.setTime(token.accessTokenValidUntil.getTime());
+        token.refreshTokenValidUntil.setMilliseconds(0);
+        await token.save();
+        return token;
+    }
+    static async clearFor(userId, currentToken) {
+        const query = `DELETE from ${this.table} where userId = ? AND accessToken != ?`;
+        await simple_database_1.Database.delete(query, [userId, currentToken]);
+    }
+}
+exports.Token = Token;
+Token.table = "tokens";
+Token.MAX_DEVICES = 15;
+Token.user = new simple_database_1.ManyToOneRelation(_1.User, "user");
+tslib_1.__decorate([
+    (0, simple_database_1.column)({ type: "string", foreignKey: Token.user })
+], Token.prototype, "userId", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({ primary: true, type: "string" })
+], Token.prototype, "accessToken", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({ type: "string" })
+], Token.prototype, "refreshToken", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({ type: "datetime" })
+], Token.prototype, "accessTokenValidUntil", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({ type: "datetime" })
+], Token.prototype, "refreshTokenValidUntil", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({
+        type: "datetime", beforeSave(old) {
+            if (old !== undefined) {
+                return old;
+            }
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        }
+    })
+], Token.prototype, "createdAt", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({
+        type: "datetime", beforeSave() {
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        },
+        skipUpdate: true
+    })
+], Token.prototype, "updatedAt", void 0);
+//# sourceMappingURL=Token.js.map

package/dist/src/models/Token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Token.js","sourceRoot":"","sources":["../../../src/models/Token.ts"],"names":[],"mappings":";;;;AAAA,iEAAyF;AACzF,sDAAgD;AAChD,4DAA4B;AAE5B,wDAAqD;AACrD,yBAA0B;AAI1B,KAAK,UAAU,WAAW,CAAC,IAAY;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,gBAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAiB,EAAE,GAAW,EAAE,EAAE;YACxD,IAAI,GAAG,EAAE,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAEY,QAAA,kBAAkB,GAAG,IAAI,yBAAW,CAAC;IAC9C,MAAM,EAAE;QACJ;YACI,qCAAqC;YACrC,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,CAAC,GAAG,IAAI;SACrB;QACD;YACI,yBAAyB;YACzB,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,GAAG,GAAG,IAAI;SACvB;QACD;YACI,yBAAyB;YACzB,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,EAAE,GAAG,IAAI,GAAG,EAAE;SAC3B;QACD;YACI,wBAAwB;YACxB,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE;SAChC;KACJ;CACJ,CAAC,CAAC;AAEH,MAAa,KAAM,SAAQ,uBAAK;IA4C5B,oBAAoB;QAChB,OAAO,IAAI,CAAC,qBAAqB,GAAG,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAA;IAC9F,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAU;;QACvC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;QAC3C,CAAC;QAED,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,EAAE;SAClB,EAAE,EAAC,KAAK,EAAE,CAAC,EAAC,CAAC,CAAA;QAEd,OAAO,oBAAO,CAAC,MAAM,CAAC;YAClB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,qBAAqB,mCAAI,IAAI;YACnD,SAAS,EAAE,IAAI,CAAC,SAAS;SAC5B,CAAC,CAAA;IACN,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,gBAAgB,GAAG,KAAK;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,0BAAQ,CAAC,MAAM,CAChC,UAAU,IAAI,CAAC,gBAAgB,EAAE,kBAC7B,IAAI,CAAC,KACT,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,eAAe,EACtF,CAAC,WAAW,CAAC,CAChB,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,uCAAuC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEhD,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/G,gFAAgF;YAChF,OAAO,SAAS,CAAA;QACpB,CAAC;QAED,MAAM,IAAI,GAAG,OAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;QAEnD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACjD,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,UAAU;IACV,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,0BAAQ,CAAC,MAAM,CAChC,UAAU,IAAI,CAAC,gBAAgB,EAAE,KAAK,OAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UACnE,IAAI,CAAC,KACL,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,sCAAsC,EAClF,CAAC,YAAY,CAAC,CACjB,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,uCAAuC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEhD,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAI,KAAK,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC5C,2CAA2C;YAC3C,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBACrB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACpB,CAAC,CAAC,CAAA;YACF,OAAO,SAAS,CAAA;QACpB,CAAC;QAED,MAAM,IAAI,GAAG,OAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;QAEnD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACjD,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAiB,IAAO;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAElD,sDAAsD;QACtD,KAAK,CAAC,qBAAqB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,CAAE,CAAC;QAC/E,KAAK,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE/C,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAiB,IAAO;QACnD,+CAA+C;QAE/C,qFAAqF;QACrF,4EAA4E;QAC5E,IAAI,CAAC;YACD,MAAM,CACF,IAAI,EACP,GAAG,MAAM,0BAAQ,CAAC,MAAM,CACrB,iBAAiB,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,eAAe,IAAI,CAAC,OAAO,CAAC,IAAI,iBAAiB,IAAI,CAAC,OAAO,CAAC,IAAI,WAAW,IAAI,CAAC,KAAK,sFAAsF,EACrO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAChD,CAAC;YAEF,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,YAAY,mBAAmB,CAAC,CAAC;YACjE,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,+FAA+F;YAC/F,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACpB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxD,KAAK,CAAC,qBAAqB,GAAG,IAAI,IAAI,EAAE,CAAC;QACzC,KAAK,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QACzF,KAAK,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE/C,KAAK,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC;QAC1C,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;QACtG,KAAK,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAEhD,KAAK,CAAC,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9E,KAAK,CAAC,YAAY,GAAG,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,WAAW,CAAiB,IAAO;QAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,cAAc,CAAiB,IAAO;QAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAElD,eAAe;QACf,KAAK,CAAC,qBAAqB,GAAG,IAAI,IAAI,EAAE,CAAC;QACzC,KAAK,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;QAC3G,KAAK,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE/C,KAAK,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC;QAC1C,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,KAAK,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAEhD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,YAAoB;QACtD,MAAM,KAAK,GAAG,eAAe,IAAI,CAAC,KAAK,wCAAwC,CAAC;QAChF,MAAM,0BAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAA;IACxD,CAAC;;AA5NL,sBA6NC;AA5NU,WAAK,GAAG,QAAQ,CAAC;AACjB,iBAAW,GAAG,EAAE,CAAC;AAwCjB,UAAI,GAAG,IAAI,mCAAiB,CAAC,OAAI,EAAE,MAAM,CAAC,CAAC;AArClD;IADC,IAAA,wBAAM,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;qCACpC;AAIf;IADC,IAAA,wBAAM,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;0CACtB;AAGpB;IADC,IAAA,wBAAM,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;2CACN;AAGrB;IADC,IAAA,wBAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;oDACD;AAG5B;IADC,IAAA,wBAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;qDACA;AAY7B;IAVC,IAAA,wBAAM,EAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,GAAS;YAClC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,GAAG,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAA;YACvB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YACvB,OAAO,IAAI,CAAA;QACf,CAAC;KACJ,CAAC;wCACa;AAUf;IARC,IAAA,wBAAM,EAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU;YACxB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAA;YACvB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YACvB,OAAO,IAAI,CAAA;QACf,CAAC;QACD,UAAU,EAAE,IAAI;KACnB,CAAC;wCACa"}

package/dist/src/models/Token.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Token.test.d.ts.map

package/dist/src/models/Token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Token.test.d.ts","sourceRoot":"","sources":["../../../src/models/Token.test.ts"],"names":[],"mappings":""}

package/dist/src/models/Token.test.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const simple_database_1 = require("@simonbackx/simple-database");
+const OrganizationFactory_1 = require("../factories/OrganizationFactory");
+const UserFactory_1 = require("../factories/UserFactory");
+const Token_1 = require("./Token");
+describe("Model.Token", () => {
+    const existingToken = "ABCDEFG";
+    let user;
+    let organization;
+    beforeAll(async () => {
+        organization = await new OrganizationFactory_1.OrganizationFactory({}).create();
+        user = await new UserFactory_1.UserFactory({ organization }).create();
+        await simple_database_1.Database.insert("INSERT INTO " + Token_1.Token.table + " SET ?", [
+            {
+                accessToken: existingToken,
+                refreshToken: "refreshtoken",
+                accessTokenValidUntil: "2050-08-29 14:30:15",
+                refreshTokenValidUntil: "2050-08-29 14:30:15",
+                userId: user.id,
+                // = "myPassword"
+                createdAt: "2020-03-29 14:30:15",
+                updatedAt: "2020-03-29 14:30:15",
+            },
+        ]);
+    });
+    test("Get token", async () => {
+        const token = await Token_1.Token.getByAccessToken(existingToken);
+        expect(token).toBeDefined();
+        expect(token).toBeInstanceOf(Token_1.Token);
+        expect(token.user.id).toEqual(user.id);
+        expect(token.accessToken).toEqual(existingToken);
+        expect(token.userId).toEqual(user.id);
+    });
+    test("Create a token", async () => {
+        const token = await Token_1.Token.createToken(user);
+        expect(token).toBeDefined();
+        if (!token)
+            return;
+        expect(token).toBeInstanceOf(Token_1.Token);
+        expect(token.user.id).toEqual(user.id);
+        expect(token.accessToken).toHaveLength(256);
+        expect(token.refreshToken).toHaveLength(256);
+        expect(token.accessTokenValidUntil.getTime()).toBeGreaterThan(new Date().getTime() + (3600 * 1000) / 2 - 1);
+        expect(token.accessTokenValidUntil.getTime()).toBeLessThan(new Date().getTime() + 3600 * 1000 * 24 * 365);
+        expect(token.refreshTokenValidUntil.getTime()).toBeGreaterThan(token.accessTokenValidUntil.getTime());
+        expect(token.refreshTokenValidUntil.getTime()).toBeLessThan(new Date().getTime() + 3600 * 1000 * 24 * 365);
+        expect(token.userId).toEqual(user.id);
+        const search = await Token_1.Token.getByAccessToken(token.accessToken);
+        // Make sure we do not compare the organization, since that won't be loaded now, but is loaded on user, and on token
+        expect(search).toMatchObject({
+            accessToken: token.accessToken,
+            refreshToken: token.refreshToken,
+            userId: token.userId,
+            accessTokenValidUntil: token.accessTokenValidUntil,
+            refreshTokenValidUntil: token.refreshTokenValidUntil
+        });
+    });
+});
+//# sourceMappingURL=Token.test.js.map

package/dist/src/models/Token.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Token.test.js","sourceRoot":"","sources":["../../../src/models/Token.test.ts"],"names":[],"mappings":";;AAAA,iEAAuD;AAEvD,0EAAuE;AACvE,0DAAuD;AAEvD,mCAAgC;AAGhC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IACzB,MAAM,aAAa,GAAG,SAAS,CAAC;IAChC,IAAI,IAAU,CAAC;IACf,IAAI,YAA0B,CAAC;IAE/B,SAAS,CAAC,KAAK,IAAI,EAAE;QACjB,YAAY,GAAG,MAAM,IAAI,yCAAmB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1D,IAAI,GAAG,MAAM,IAAI,yBAAW,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAExD,MAAM,0BAAQ,CAAC,MAAM,CAAC,cAAc,GAAG,aAAK,CAAC,KAAK,GAAG,QAAQ,EAAE;YAC3D;gBACI,WAAW,EAAE,aAAa;gBAC1B,YAAY,EAAE,cAAc;gBAE5B,qBAAqB,EAAE,qBAAqB;gBAC5C,sBAAsB,EAAE,qBAAqB;gBAC7C,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,iBAAiB;gBACjB,SAAS,EAAE,qBAAqB;gBAChC,SAAS,EAAE,qBAAqB;aACnC;SACJ,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;QACzB,MAAM,KAAK,GAAQ,MAAM,aAAK,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,aAAK,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,KAAK,GAAG,MAAM,aAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,aAAK,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5G,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;QAE1G,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC,CAAC;QACtG,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;QAE3G,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,aAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/D,oHAAoH;QAEpH,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YACzB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;YAClD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;SACvD,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/src/models/UsedRegisterCode.d.ts

@@ -0,0 +1,22 @@
+import { Model } from "@simonbackx/simple-database";
+export declare class UsedRegisterCode extends Model {
+    static table: string;
+    id: string;
+    code: string;
+    /**
+     * Code is used by...
+     */
+    organizationId: string;
+    /**
+     * Set if this has been rewarded
+     */
+    creditId: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+    static getFor(organizationId: string): Promise<UsedRegisterCode | undefined>;
+    reward(): Promise<void>;
+    static getAll(code: string): Promise<UsedRegisterCode[]>;
+    static getUsed(code: string): Promise<UsedRegisterCode[]>;
+    static getUsedCount(code: string): Promise<number>;
+}
+//# sourceMappingURL=UsedRegisterCode.d.ts.map

package/dist/src/models/UsedRegisterCode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UsedRegisterCode.d.ts","sourceRoot":"","sources":["../../../src/models/UsedRegisterCode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,EAAE,MAAM,6BAA6B,CAAC;AAS5D,qBAAa,gBAAiB,SAAQ,KAAK;IACvC,MAAM,CAAC,KAAK,SAAyB;IAOrC,EAAE,EAAG,MAAM,CAAC;IAGZ,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IAEH,cAAc,EAAE,MAAM,CAAC;IAEvB;;OAEG;IAEH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAY/B,SAAS,EAAE,IAAI,CAAA;IAUf,SAAS,EAAE,IAAI,CAAA;WAEF,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAK5E,MAAM;WAkFC,MAAM,CAAC,IAAI,EAAE,MAAM;WAOnB,OAAO,CAAC,IAAI,EAAE,MAAM;WAWpB,YAAY,CAAC,IAAI,EAAE,MAAM;CAIzC"}

package/dist/src/models/UsedRegisterCode.js

@@ -0,0 +1,158 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UsedRegisterCode = void 0;
+const tslib_1 = require("tslib");
+const simple_database_1 = require("@simonbackx/simple-database");
+const email_1 = require("@stamhoofd/email");
+const utility_1 = require("@stamhoofd/utility");
+const uuid_1 = require("uuid");
+const _1 = require("./");
+const structures_1 = require("@stamhoofd/structures");
+const queues_1 = require("@stamhoofd/queues");
+class UsedRegisterCode extends simple_database_1.Model {
+    constructor() {
+        super(...arguments);
+        /**
+         * Set if this has been rewarded
+         */
+        this.creditId = null;
+    }
+    static async getFor(organizationId) {
+        var _a;
+        const code = await this.where({ organizationId }, { limit: 1 });
+        return (_a = code[0]) !== null && _a !== void 0 ? _a : undefined;
+    }
+    async reward() {
+        if (this.creditId) {
+            // Already received
+            console.error("Already rewarded for used register code " + this.id);
+            return;
+        }
+        const code = await _1.RegisterCode.getByID(this.code);
+        if (!code || !code.organizationId) {
+            console.error("Couldn't find code " + this.code + " for used register code " + this.id);
+            return;
+        }
+        const organization = await _1.Organization.getByID(this.organizationId);
+        if (!organization) {
+            console.error("Couldn't find organization with id " + this.organizationId + " for used register code " + this.id);
+            return;
+        }
+        const receivingOrganization = await _1.Organization.getByID(code.organizationId);
+        if (!receivingOrganization) {
+            console.error("Couldn't find receiving organization with id " + code.organizationId + " for used register code " + this.id);
+            return;
+        }
+        const usedCount = await UsedRegisterCode.getUsedCount(this.code) + 1;
+        const credit = new _1.STCredit();
+        credit.organizationId = code.organizationId;
+        credit.change = code.invoiceValue ? 0 : Math.min(100 * 100, usedCount * 10 * 100);
+        credit.description = organization.name + " doorverwezen 🙌";
+        // Expire in one year (will get extended for every purchase or activation)
+        credit.expireAt = new Date();
+        credit.expireAt.setFullYear(credit.expireAt.getFullYear() + 1);
+        credit.expireAt.setMilliseconds(0);
+        await credit.save();
+        this.creditId = credit.id;
+        await this.save();
+        if (code.invoiceValue) {
+            const name = "Aankoop Stamhoofd voor " + organization.name;
+            const item = structures_1.STInvoiceItem.create({
+                name,
+                description: "Via doorverwijzingscode",
+                amount: 1,
+                unitPrice: code.invoiceValue,
+                canUseCredits: false
+            });
+            console.log("Scheduling code charge for ", code);
+            await queues_1.QueueHandler.schedule("billing/invoices-" + receivingOrganization.id, async () => {
+                await _1.STPendingInvoice.addItems(receivingOrganization, [item]);
+            });
+        }
+        const admins = await receivingOrganization.getAdminToEmails();
+        if (admins) {
+            if (code.invoiceValue) {
+                email_1.Email.sendInternal({
+                    to: admins,
+                    bcc: "simon@stamhoofd.be",
+                    subject: `${organization.name} heeft jullie tegoed gebruikt`,
+                    text: "Dag " + receivingOrganization.name + ",\n\n" + organization.name + " had jullie doorverwijzingslink gebruikt om zich op Stamhoofd te registreren, en nu hebben ze dit ook gebruikt. Zoals afgesproken wordt hiervoor " + utility_1.Formatter.price(code.invoiceValue) + " aangerekend via jullie openstaand saldo in jullie Stamhoofd account."
+                        + "\n\n— Stamhoofd"
+                }, organization.i18n);
+            }
+            else {
+                // Delay email until everything is validated and saved
+                email_1.Email.sendInternal({
+                    to: admins,
+                    bcc: "simon@stamhoofd.be",
+                    subject: "Je hebt " + utility_1.Formatter.price(credit.change) + " tegoed ontvangen 💰",
+                    text: "Dag " + receivingOrganization.name + ",\n\nGeweldig nieuws! " + organization.name + " had jullie doorverwijzingslink gebruikt om zich op Stamhoofd te registreren, en nu hebben ze ook voor het eerst minstens één euro uitgegeven. Daardoor ontvangen jullie " + utility_1.Formatter.price(credit.change) + " tegoed voor Stamhoofd (zie daarvoor Stamhoofd > Instellingen). "
+                        + (credit.change <= 90 * 100 ? ("Bij de volgende vereniging ontvangen jullie nog meer: " + utility_1.Formatter.price(credit.change + 10 * 100) + ". ") : "")
+                        + (credit.change <= 80 * 100 ? ("En dat blijft oplopen tot € 100,00 per vereniging die je aanbrengt 🎁 ") : "")
+                        + "Doe zo verder! Lees zeker onze tips na om nog een groter bedrag te verzamelen 😉\n\n— Stamhoofd"
+                }, organization.i18n);
+            }
+        }
+    }
+    static async getAll(code) {
+        const used = await UsedRegisterCode.where({
+            code
+        });
+        return used;
+    }
+    static async getUsed(code) {
+        const used = await UsedRegisterCode.where({
+            code,
+            creditId: {
+                value: null,
+                sign: "!="
+            }
+        });
+        return used;
+    }
+    static async getUsedCount(code) {
+        const used = await this.getUsed(code);
+        return used.length;
+    }
+}
+exports.UsedRegisterCode = UsedRegisterCode;
+UsedRegisterCode.table = "used_register_codes";
+tslib_1.__decorate([
+    (0, simple_database_1.column)({
+        primary: true, type: "string", beforeSave(value) {
+            return value !== null && value !== void 0 ? value : (0, uuid_1.v4)();
+        }
+    })
+], UsedRegisterCode.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({ type: "string" })
+], UsedRegisterCode.prototype, "code", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({ type: "string" })
+], UsedRegisterCode.prototype, "organizationId", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({ type: "string", nullable: true })
+], UsedRegisterCode.prototype, "creditId", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({
+        type: "datetime", beforeSave(old) {
+            if (old !== undefined) {
+                return old;
+            }
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        }
+    })
+], UsedRegisterCode.prototype, "createdAt", void 0);
+tslib_1.__decorate([
+    (0, simple_database_1.column)({
+        type: "datetime", beforeSave() {
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        },
+        skipUpdate: true
+    })
+], UsedRegisterCode.prototype, "updatedAt", void 0);
+//# sourceMappingURL=UsedRegisterCode.js.map

package/dist/src/models/UsedRegisterCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UsedRegisterCode.js","sourceRoot":"","sources":["../../../src/models/UsedRegisterCode.ts"],"names":[],"mappings":";;;;AAAA,iEAA4D;AAC5D,4CAAyC;AACzC,gDAA+C;AAC/C,+BAAoC;AAEpC,yBAA4E;AAC5E,sDAAsD;AACtD,8CAAiD;AAEjD,MAAa,gBAAiB,SAAQ,uBAAK;IAA3C;;QAmBI;;WAEG;QAEH,aAAQ,GAAkB,IAAI,CAAC;IAqInC,CAAC;IA7GG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAsB;;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QAC/D,OAAO,MAAA,IAAI,CAAC,CAAC,CAAC,mCAAI,SAAS,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM;QACR,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,mBAAmB;YACnB,OAAO,CAAC,KAAK,CAAC,0CAA0C,GAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACjE,OAAM;QACV,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,eAAY,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAC,IAAI,CAAC,IAAI,GAAC,0BAA0B,GAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACjF,OAAM;QACV,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,eAAY,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,qCAAqC,GAAC,IAAI,CAAC,cAAc,GAAC,0BAA0B,GAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC3G,OAAM;QACV,CAAC;QAED,MAAM,qBAAqB,GAAG,MAAM,eAAY,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC7E,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CAAC,+CAA+C,GAAC,IAAI,CAAC,cAAc,GAAC,0BAA0B,GAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACrH,OAAM;QACV,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAEpE,MAAM,MAAM,GAAG,IAAI,WAAQ,EAAE,CAAA;QAC7B,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QAC3C,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,EAAE,SAAS,GAAG,EAAE,GAAG,GAAG,CAAC,CAAA;QACjF,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC,IAAI,GAAC,kBAAkB,CAAA;QAEzD,0EAA0E;QAC1E,MAAM,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAA;QAC5B,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAA;QAC9D,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAElC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QACnB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAA;QACzB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAEjB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,yBAAyB,GAAG,YAAY,CAAC,IAAI,CAAA;YAC1D,MAAM,IAAI,GAAG,0BAAa,CAAC,MAAM,CAAC;gBAC9B,IAAI;gBACJ,WAAW,EAAE,yBAAyB;gBACtC,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,IAAI,CAAC,YAAY;gBAC5B,aAAa,EAAE,KAAK;aACvB,CAAC,CAAA;YACF,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAA;YAChD,MAAM,qBAAY,CAAC,QAAQ,CAAC,mBAAmB,GAAC,qBAAqB,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;gBACjF,MAAM,mBAAgB,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;YAClE,CAAC,CAAC,CAAC;QACP,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,CAAA;QAC7D,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,aAAK,CAAC,YAAY,CAAC;oBACf,EAAE,EAAE,MAAM;oBACV,GAAG,EAAE,oBAAoB;oBACzB,OAAO,EAAE,GAAG,YAAY,CAAC,IAAI,+BAA+B;oBAC5D,IAAI,EAAE,MAAM,GAAC,qBAAqB,CAAC,IAAI,GAAC,OAAO,GAAC,YAAY,CAAC,IAAI,GAAC,mJAAmJ,GAAG,mBAAS,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,GAAE,uEAAuE;0BACjU,iBAAiB;iBACtB,EAAE,YAAY,CAAC,IAAI,CAAC,CAAA;YAEzB,CAAC;iBAAM,CAAC;gBACJ,sDAAsD;gBACtD,aAAK,CAAC,YAAY,CAAC;oBACf,EAAE,EAAE,MAAM;oBACV,GAAG,EAAE,oBAAoB;oBACzB,OAAO,EAAE,UAAU,GAAC,mBAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAC,sBAAsB;oBACzE,IAAI,EAAE,MAAM,GAAC,qBAAqB,CAAC,IAAI,GAAC,wBAAwB,GAAC,YAAY,CAAC,IAAI,GAAC,2KAA2K,GAAC,mBAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAC,kEAAkE;0BAC9V,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,GAAC,GAAG,CAAC,CAAC,CAAC,CAAC,wDAAwD,GAAC,mBAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,GAAC,GAAG,CAAC,GAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;0BACxI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,GAAC,GAAG,CAAC,CAAC,CAAC,CAAC,wEAAwE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;0BAC3G,iGAAiG;iBACtG,EAAE,YAAY,CAAC,IAAI,CAAC,CAAA;YACzB,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAY;QAC5B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC;YACtC,IAAI;SACP,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACf,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAY;QAC7B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC;YACtC,IAAI;YACJ,QAAQ,EAAE;gBACN,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,IAAI;aACb;SACJ,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACf,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAY;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACrC,OAAO,IAAI,CAAC,MAAM,CAAA;IACtB,CAAC;;AA3JL,4CA4JC;AA3JU,sBAAK,GAAG,qBAAqB,AAAxB,CAAyB;AAOrC;IALC,IAAA,wBAAM,EAAC;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK;YAC3C,OAAO,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,IAAA,SAAM,GAAE,CAAC;QAC7B,CAAC;KACJ,CAAC;4CACU;AAGZ;IADC,IAAA,wBAAM,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;8CACd;AAMb;IADC,IAAA,wBAAM,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;wDACJ;AAMvB;IADC,IAAA,wBAAM,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;kDACZ;AAY/B;IAVC,IAAA,wBAAM,EAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,GAAS;YAClC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,GAAG,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAA;YACvB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YACvB,OAAO,IAAI,CAAA;QACf,CAAC;KACJ,CAAC;mDACa;AAUf;IARC,IAAA,wBAAM,EAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU;YACxB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAA;YACvB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YACvB,OAAO,IAAI,CAAA;QACf,CAAC;QACD,UAAU,EAAE,IAAI;KACnB,CAAC;mDACa"}

package/dist/src/models/User.d.ts

@@ -0,0 +1,55 @@
+import { ManyToOneRelation, Model } from "@simonbackx/simple-database";
+import { EmailInterfaceRecipient } from "@stamhoofd/email";
+import { LoginProviderType, NewUser, Permissions, User as UserStruct, UserMeta } from "@stamhoofd/structures";
+import { Organization } from "./";
+export declare class User extends Model {
+    static table: string;
+    id: string;
+    organizationId: string;
+    firstName: string | null;
+    lastName: string | null;
+    email: string;
+    password: string | null;
+    verified: boolean;
+    /**
+     * This field is cached and recalculated when permissions are changed. This avoids database joins on every request.
+     * It is a combination of all user_permissions rows for this user and globalPermissions
+     */
+    permissions: Permissions | null;
+    meta: UserMeta | null;
+    createdAt: Date;
+    updatedAt: Date;
+    static organization: ManyToOneRelation<"organization", Organization>;
+    get name(): string | null;
+    static getAdmins(organizationIds: string[], options?: {
+        verified?: boolean;
+    }): Promise<User[]>;
+    static getApiUsers(organizationIds: string[]): Promise<User[]>;
+    merge(other: User): Promise<void>;
+    static login(organizationId: string, email: string, password: string): Promise<User | undefined>;
+    static deleteForDeletedMember(memberId: string): Promise<{
+        affectedRows: number;
+    }>;
+    hasPasswordBasedAccount(): boolean;
+    get isApiUser(): boolean;
+    hasAccount(): boolean;
+    protected hasKeys(): boolean;
+    static getForRegister(organization: Organization, email: string): Promise<User | undefined>;
+    static getForRegisterWithoutOrg(organizationId: string, email: string): Promise<User | undefined>;
+    static getForAuthentication(organizationId: string, email: string): Promise<User | undefined>;
+    static hash(password: string): Promise<string>;
+    static register(organization: Organization, data: NewUser): Promise<User | undefined>;
+    linkLoginProvider(type: LoginProviderType, sub: string): void;
+    static registerSSO(organization: Organization, data: {
+        email: any;
+        id: any;
+        firstName: any;
+        lastName: any;
+        type: LoginProviderType;
+        sub: string;
+    }): Promise<User | undefined>;
+    changePassword(password: string): Promise<void>;
+    getStructure(): UserStruct;
+    getEmailTo(): EmailInterfaceRecipient[];
+}
+//# sourceMappingURL=User.d.ts.map

package/dist/src/models/User.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"User.d.ts","sourceRoot":"","sources":["../../../src/models/User.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,iBAAiB,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,UAAU,EAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAI7G,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAElC,qBAAa,IAAK,SAAQ,KAAK;IAC3B,MAAM,CAAC,KAAK,SAAW;IAQvB,EAAE,EAAG,MAAM,CAAC;IAGZ,cAAc,EAAE,MAAM,CAAC;IAGvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAQ;IAGhC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAG/B,KAAK,EAAE,MAAM,CAAC;IAGd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAG/B,QAAQ,UAAQ;IAEhB;;;OAGG;IAEH,WAAW,EAAE,WAAW,GAAG,IAAI,CAAO;IAGtC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAO;IAY5B,SAAS,EAAE,IAAI,CAAA;IAUf,SAAS,EAAE,IAAI,CAAA;IAEf,MAAM,CAAC,YAAY,kDAAuD;IAE1E,IAAI,IAAI,kBAcP;WAEY,SAAS,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAC;WAmBnE,WAAW,CAAC,eAAe,EAAE,MAAM,EAAE;IAI5C,KAAK,CAAC,KAAK,EAAE,IAAI;WA8CV,KAAK,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;WA4BzF,sBAAsB,CAAC,QAAQ,EAAE,MAAM;;;IAKpD,uBAAuB;IAQvB,IAAI,SAAS,YAEZ;IAED,UAAU;IAaV,SAAS,CAAC,OAAO;WASJ,cAAc,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;WAWpF,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;WAe1F,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;WAgBtF,IAAI,CAAC,QAAQ,EAAE,MAAM;WAKrB,QAAQ,CACjB,YAAY,EAAE,YAAY,EAC1B,IAAI,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IAmC5B,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM;WAOzC,WAAW,CACpB,YAAY,EAAE,YAAY,EAC1B,IAAI,EAAE;QAAC,KAAK,MAAC;QAAC,EAAE,MAAC;QAAC,SAAS,MAAC;QAAC,QAAQ,MAAC;QAAC,IAAI,EAAE,iBAAiB,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAC,GAC7E,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IA8BtB,cAAc,CAAC,QAAQ,EAAE,MAAM;IAIrC,YAAY;IAYZ,UAAU,IAAI,uBAAuB,EAAE;CAS1C"}