@stamhoofd/models 2.119.0 → 2.120.1

package/dist/models/Ticket.js

@@ -0,0 +1,157 @@
+import { __decorate } from "tslib";
+import { column } from '@simonbackx/simple-database';
+import { QueryableModel } from '@stamhoofd/sql';
+import { CartReservedSeat } from '@stamhoofd/structures';
+import basex from 'base-x';
+import crypto from 'crypto';
+import { v4 as uuidv4 } from 'uuid';
+// Note: 0 and O is removed to prevent typing it in wrong
+const ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZ';
+const bs58 = basex(ALPHABET);
+async function randomBytes(size) {
+    return new Promise((resolve, reject) => {
+        crypto.randomBytes(size, (err, buf) => {
+            if (err) {
+                reject(err);
+                return;
+            }
+            resolve(buf);
+        });
+    });
+}
+/**
+ * Use this method when you don't need access to the items of an order.
+ * This avoids the select in the database, saving some bytes in network communication
+ * (especially needed when clients requests all the changed tickets)
+ */
+export class Ticket extends QueryableModel {
+    static table = 'webshop_tickets';
+    // Columns
+    id;
+    /**
+     * Unique per webshop. Used for lookups
+     */
+    secret;
+    organizationId;
+    webshopId;
+    /**
+     * Important note: access to a ticket doesn't guarantee access to an order
+     * because one person could buy 10 tickets and share them with friends.
+     * The order details should remain private to a ticket holder except for the item details
+     * + also the orderID should remain private for the holder (since this provides access via URL, need to add a secret here)
+     */
+    orderId;
+    /**
+     * null = whole order
+     */
+    itemId = null;
+    /**
+     * If multiple items are made for the same product, this contains the index
+     */
+    index = 0;
+    /**
+     * total items with index
+     */
+    total = 0;
+    /**
+     * If multiple items are made for the same product, this contains the index
+     */
+    seat = null;
+    /**
+     * In case the seat is changed, this contains the first assigned seat
+     */
+    originalSeat = null;
+    createdAt;
+    updatedAt;
+    deletedAt = null;
+    scannedAt = null;
+    scannedBy = null;
+    static webshop;
+    static order;
+    static organization;
+    getUrl() {
+        return 'https://' + this.webshop.getHost() + '/ticket/' + this.secret;
+    }
+    get isDeleted() {
+        return this.deletedAt !== null;
+    }
+    async softDelete() {
+        if (this.isDeleted) {
+            return;
+        }
+        this.deletedAt = new Date();
+        await this.save();
+    }
+    async save() {
+        if (!this.secret) {
+            this.secret = bs58.encode(await randomBytes(10));
+        }
+        return super.save();
+    }
+}
+__decorate([
+    column({
+        primary: true, type: 'string', beforeSave(value) {
+            return value ?? uuidv4();
+        },
+    })
+], Ticket.prototype, "id", void 0);
+__decorate([
+    column({ type: 'string' })
+], Ticket.prototype, "secret", void 0);
+__decorate([
+    column({ type: 'string' })
+], Ticket.prototype, "organizationId", void 0);
+__decorate([
+    column({ type: 'string' })
+], Ticket.prototype, "webshopId", void 0);
+__decorate([
+    column({ type: 'string' })
+], Ticket.prototype, "orderId", void 0);
+__decorate([
+    column({ type: 'string', nullable: true })
+], Ticket.prototype, "itemId", void 0);
+__decorate([
+    column({ type: 'number' })
+], Ticket.prototype, "index", void 0);
+__decorate([
+    column({ type: 'number' })
+], Ticket.prototype, "total", void 0);
+__decorate([
+    column({ type: 'json', nullable: true, decoder: CartReservedSeat })
+], Ticket.prototype, "seat", void 0);
+__decorate([
+    column({ type: 'json', nullable: true, decoder: CartReservedSeat })
+], Ticket.prototype, "originalSeat", void 0);
+__decorate([
+    column({
+        type: 'datetime', beforeSave(old) {
+            if (old !== undefined) {
+                return old;
+            }
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        },
+    })
+], Ticket.prototype, "createdAt", void 0);
+__decorate([
+    column({
+        type: 'datetime', beforeSave() {
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        },
+        skipUpdate: true,
+    })
+], Ticket.prototype, "updatedAt", void 0);
+__decorate([
+    column({ type: 'datetime', nullable: true })
+], Ticket.prototype, "deletedAt", void 0);
+__decorate([
+    column({ type: 'datetime', nullable: true })
+], Ticket.prototype, "scannedAt", void 0);
+__decorate([
+    column({ type: 'string', nullable: true })
+], Ticket.prototype, "scannedBy", void 0);
+//# sourceMappingURL=Ticket.js.map

package/dist/models/Ticket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Ticket.js","sourceRoot":"","sources":["../../src/models/Ticket.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,MAAM,QAAQ,CAAC;AAC3B,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAKpC,yDAAyD;AACzD,MAAM,QAAQ,GAAG,mCAAmC,CAAC;AACrD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;AAE7B,KAAK,UAAU,WAAW,CAAC,IAAY;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAiB,EAAE,GAAW,EAAE,EAAE;YACxD,IAAI,GAAG,EAAE,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,MAAO,SAAQ,cAAc;IACtC,MAAM,CAAC,KAAK,GAAG,iBAAiB,CAAC;IAEjC,UAAU;IAMV,EAAE,CAAU;IAEZ;;OAEG;IAEH,MAAM,CAAU;IAGhB,cAAc,CAAS;IAGvB,SAAS,CAAS;IAElB;;;;;OAKG;IAEH,OAAO,CAAS;IAEhB;;OAEG;IAEH,MAAM,GAAkB,IAAI,CAAC;IAE7B;;OAEG;IAEH,KAAK,GAAG,CAAC,CAAC;IAEV;;OAEG;IAEH,KAAK,GAAG,CAAC,CAAC;IAEV;;OAEG;IAEH,IAAI,GAA4B,IAAI,CAAC;IAErC;;OAEG;IAEH,YAAY,GAA4B,IAAI,CAAC;IAY7C,SAAS,CAAO;IAUhB,SAAS,CAAO;IAGhB,SAAS,GAAgB,IAAI,CAAC;IAG9B,SAAS,GAAgB,IAAI,CAAC;IAG9B,SAAS,GAAkB,IAAI,CAAC;IAEhC,MAAM,CAAC,OAAO,CAAwC;IACtD,MAAM,CAAC,KAAK,CAAoC;IAChD,MAAM,CAAC,YAAY,CAAkD;IAErE,MAAM;QACF,OAAO,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1E,CAAC;IAED,IAAI,SAAS;QACT,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,UAAU;QACZ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO;QACX,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;;AA7GD;IALC,MAAM,CAAC;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK;YAC3C,OAAO,KAAK,IAAI,MAAM,EAAE,CAAC;QAC7B,CAAC;KACJ,CAAC;kCACU;AAMZ;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;sCACX;AAGhB;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;8CACJ;AAGvB;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;yCACT;AASlB;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;uCACX;AAMhB;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACd;AAM7B;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;qCACjB;AAMV;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;qCACjB;AAMV;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;oCAC/B;AAMrC;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;4CACvB;AAY7C;IAVC,MAAM,CAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,GAAS;YAClC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,GAAG,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC;yCACc;AAUhB;IARC,MAAM,CAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU;YACxB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,UAAU,EAAE,IAAI;KACnB,CAAC;yCACc;AAGhB;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;yCACf;AAG9B;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;yCACf;AAG9B;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;yCACX"}

package/dist/models/Token.d.ts

@@ -0,0 +1,48 @@
+import type { ManyToOneRelation } from '@simonbackx/simple-database';
+import { QueryableModel } from '@stamhoofd/sql';
+import { ApiUser } from '@stamhoofd/structures';
+import { User } from './User.js';
+export type TokenWithUser = Token & {
+    user: User;
+};
+export declare class Token extends QueryableModel {
+    static table: string;
+    static MAX_DEVICES: number;
+    userId: string;
+    accessToken: string;
+    refreshToken: string;
+    accessTokenValidUntil: Date;
+    refreshTokenValidUntil: Date;
+    createdAt: Date;
+    updatedAt: Date;
+    static user: ManyToOneRelation<'user', User>;
+    isAccessTokenExpired(): boolean;
+    static getAPIUserWithToken(user: User): Promise<ApiUser>;
+    /**
+     * Get the token and user for a given accessToken IF it is still valid
+     */
+    static getByAccessToken(accessToken: string, ignoreExpireDate?: boolean): Promise<TokenWithUser | undefined>;
+    static getByRefreshToken(refreshToken: string): Promise<TokenWithUser | undefined>;
+    /**
+     * Create a token that is expired. This can be usefull if renewing the token is restricted by some account state.
+     * E.g. you cannot renew this token until the e-mail address has been verified.
+     * @param user
+     */
+    static createExpiredToken<U extends User>(user: U): Promise<(Token & {
+        user: U;
+    })>;
+    /***
+     * Create a token without saving it
+     */
+    static createUnsavedToken<U extends User>(user: U): Promise<(Token & {
+        user: U;
+    })>;
+    static createToken<U extends User>(user: U): Promise<(Token & {
+        user: U;
+    })>;
+    static createApiToken<U extends User>(user: U): Promise<(Token & {
+        user: U;
+    })>;
+    static clearFor(userId: string, currentToken: string): Promise<void>;
+}
+//# sourceMappingURL=Token.d.ts.map

package/dist/models/Token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Token.d.ts","sourceRoot":"","sources":["../../src/models/Token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAErE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAIhD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,CAAC;AAcnD,qBAAa,KAAM,SAAQ,cAAc;IACrC,MAAM,CAAC,KAAK,SAAY;IACxB,MAAM,CAAC,WAAW,SAAM;IAGxB,MAAM,EAAE,MAAM,CAAC;IAIf,WAAW,EAAE,MAAM,CAAC;IAGpB,YAAY,EAAE,MAAM,CAAC;IAGrB,qBAAqB,EAAE,IAAI,CAAC;IAG5B,sBAAsB,EAAE,IAAI,CAAC;IAY7B,SAAS,EAAE,IAAI,CAAC;IAUhB,SAAS,EAAE,IAAI,CAAC;IAEhB,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE7C,oBAAoB,IAAI,OAAO;WAIlB,mBAAmB,CAAC,IAAI,EAAE,IAAI;IAoB3C;;OAEG;WACU,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,UAAQ,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;WAmCnG,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAsCxF;;;;OAIG;WACU,kBAAkB,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,KAAK,GAAG;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IAWxF;;OAEG;WACU,kBAAkB,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,KAAK,GAAG;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;WA2C3E,WAAW,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,KAAK,GAAG;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;WAMpE,cAAc,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,KAAK,GAAG;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;WAgBvE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;CAI7D"}

package/dist/models/Token.js

@@ -0,0 +1,208 @@
+import { __decorate } from "tslib";
+import { column, Database } from '@simonbackx/simple-database';
+import { QueryableModel } from '@stamhoofd/sql';
+import { ApiUser } from '@stamhoofd/structures';
+import crypto from 'crypto';
+import { SimpleError } from '@simonbackx/simple-errors';
+import { User } from './User.js';
+async function randomBytes(size) {
+    return new Promise((resolve, reject) => {
+        crypto.randomBytes(size, (err, buf) => {
+            if (err) {
+                reject(err);
+                return;
+            }
+            resolve(buf);
+        });
+    });
+}
+export class Token extends QueryableModel {
+    static table = 'tokens';
+    static MAX_DEVICES = 15;
+    userId;
+    // Columns
+    accessToken;
+    refreshToken;
+    accessTokenValidUntil;
+    refreshTokenValidUntil;
+    createdAt;
+    updatedAt;
+    static user;
+    isAccessTokenExpired() {
+        return this.accessTokenValidUntil < new Date() || this.refreshTokenValidUntil < new Date();
+    }
+    static async getAPIUserWithToken(user) {
+        if (!user.isApiUser) {
+            throw new Error('Unexpected user type');
+        }
+        const [lastToken] = await this.where({
+            userId: user.id,
+        }, { limit: 1 });
+        return ApiUser.create({
+            id: user.id,
+            organizationId: user.organizationId,
+            name: user.name,
+            permissions: user.permissions,
+            expiresAt: lastToken?.accessTokenValidUntil ?? null,
+            createdAt: user.createdAt,
+            meta: user.meta,
+        });
+    }
+    /**
+     * Get the token and user for a given accessToken IF it is still valid
+     */
+    static async getByAccessToken(accessToken, ignoreExpireDate = false) {
+        const [rows] = await Database.select(`SELECT ${this.getDefaultSelect()}, user.*  FROM ${this.table} ${Token.user.joinQuery(this.table, 'user')} WHERE ${this.primary.name} = ? LIMIT 1 `, [accessToken]);
+        if (rows.length == 0) {
+            return undefined;
+        }
+        // Read member + address from first row
+        const token = this.fromRow(rows[0][this.table]);
+        if (!token) {
+            return undefined;
+        }
+        if (!ignoreExpireDate && (token.accessTokenValidUntil < new Date() || token.refreshTokenValidUntil < new Date())) {
+            // Also if the refresh token is invalid, the access token will always be invalid
+            return undefined;
+        }
+        const user = User.fromRow(rows[0]['user']) || null;
+        if (!user) {
+            console.warn('Selected a token without a user!');
+            return undefined;
+        }
+        return token.setRelation(Token.user, user);
+    }
+    // Methods
+    static async getByRefreshToken(refreshToken) {
+        const [rows] = await Database.select(`SELECT ${this.getDefaultSelect()}, ${User.getDefaultSelect('user')}  FROM ${this.table} ${Token.user.joinQuery(this.table, 'user')} WHERE \`refreshToken\` = ? LIMIT 1 `, [refreshToken]);
+        if (rows.length == 0) {
+            return undefined;
+        }
+        // Read member + address from first row
+        const token = this.fromRow(rows[0][this.table]);
+        if (!token) {
+            return undefined;
+        }
+        if (token.refreshTokenValidUntil < new Date()) {
+            // If a user tries to use a refresh token that is expired - there is a possibility of a user
+            // being compromised.
+            // So we delete all tokens for this user.
+            console.error('Detected an expired refresh token, deleting all tokens for user', token.userId);
+            await this.delete().where('userId', token.userId);
+            return undefined;
+        }
+        const user = User.fromRow(rows[0]['user']) || null;
+        if (!user || user.isApiUser) {
+            console.warn('Selected a token without a user!');
+            return undefined;
+        }
+        return token.setRelation(Token.user, user);
+    }
+    /**
+     * Create a token that is expired. This can be usefull if renewing the token is restricted by some account state.
+     * E.g. you cannot renew this token until the e-mail address has been verified.
+     * @param user
+     */
+    static async createExpiredToken(user) {
+        const token = await this.createUnsavedToken(user);
+        /// Expired a month ago (to prevent any timezone bugs)
+        token.accessTokenValidUntil = new Date(Date.now() - 24 * 60 * 60 * 1000 * 31);
+        token.accessTokenValidUntil.setMilliseconds(0);
+        await token.save();
+        return token;
+    }
+    /***
+     * Create a token without saving it
+     */
+    static async createUnsavedToken(user) {
+        if (user.isSystemUser) {
+            throw new SimpleError({
+                code: 'internal_error',
+                message: 'Cannot create token for system user',
+                statusCode: 500,
+            });
+        }
+        // Get all the tokens of the user that are olde
+        // First search if we already have more than 5 tokens (we only allow up to 5 devices)
+        // In case we already have a token for that deviceId, we'll delete it first.
+        try {
+            const [rows,] = await Database.delete(`DELETE FROM \`${this.table}\` WHERE ${this.primary.name} IN (SELECT ${this.primary.name} FROM (SELECT ${this.primary.name} FROM \`${this.table}\` WHERE \`userId\` = ? ORDER BY\`createdAt\` DESC LIMIT ? OFFSET ?) x)`, [user.id, this.MAX_DEVICES, this.MAX_DEVICES]);
+            if (rows.affectedRows > 0) {
+                console.log(`Deleted ${rows.affectedRows} old tokens first`);
+            }
+        }
+        catch (e) {
+            // This is not a crucial operation, so don't fail when there is a deadlock problem in the query
+            console.error(e);
+        }
+        const token = new Token().setRelation(Token.user, user);
+        token.accessTokenValidUntil = new Date();
+        token.accessTokenValidUntil.setTime(token.accessTokenValidUntil.getTime() + 3600 * 1000);
+        token.accessTokenValidUntil.setMilliseconds(0);
+        token.refreshTokenValidUntil = new Date();
+        token.refreshTokenValidUntil.setTime(token.refreshTokenValidUntil.getTime() + 3600 * 1000 * 24 * 365);
+        token.refreshTokenValidUntil.setMilliseconds(0);
+        token.accessToken = (await randomBytes(192)).toString('base64').toUpperCase();
+        token.refreshToken = (await randomBytes(192)).toString('base64').toUpperCase();
+        return token;
+    }
+    static async createToken(user) {
+        const token = await this.createUnsavedToken(user);
+        await token.save();
+        return token;
+    }
+    static async createApiToken(user) {
+        const token = await this.createUnsavedToken(user);
+        // 5 year valid
+        token.accessTokenValidUntil = new Date();
+        token.accessTokenValidUntil.setTime(token.accessTokenValidUntil.getTime() + 1000 * 60 * 60 * 24 * 365 * 5);
+        token.accessTokenValidUntil.setMilliseconds(0);
+        token.refreshTokenValidUntil = new Date();
+        token.refreshTokenValidUntil.setTime(token.accessTokenValidUntil.getTime());
+        token.refreshTokenValidUntil.setMilliseconds(0);
+        await token.save();
+        return token;
+    }
+    static async clearFor(userId, currentToken) {
+        const query = `DELETE from ${this.table} where userId = ? AND accessToken != ?`;
+        await Database.delete(query, [userId, currentToken]);
+    }
+}
+__decorate([
+    column({ type: 'string' })
+], Token.prototype, "userId", void 0);
+__decorate([
+    column({ primary: true, type: 'string' })
+], Token.prototype, "accessToken", void 0);
+__decorate([
+    column({ type: 'string' })
+], Token.prototype, "refreshToken", void 0);
+__decorate([
+    column({ type: 'datetime' })
+], Token.prototype, "accessTokenValidUntil", void 0);
+__decorate([
+    column({ type: 'datetime' })
+], Token.prototype, "refreshTokenValidUntil", void 0);
+__decorate([
+    column({
+        type: 'datetime', beforeSave(old) {
+            if (old !== undefined) {
+                return old;
+            }
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        },
+    })
+], Token.prototype, "createdAt", void 0);
+__decorate([
+    column({
+        type: 'datetime', beforeSave() {
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        },
+        skipUpdate: true,
+    })
+], Token.prototype, "updatedAt", void 0);
+//# sourceMappingURL=Token.js.map

package/dist/models/Token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Token.js","sourceRoot":"","sources":["../../src/models/Token.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,KAAK,UAAU,WAAW,CAAC,IAAY;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,GAAiB,EAAE,GAAW,EAAE,EAAE;YACxD,IAAI,GAAG,EAAE,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,OAAO;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,OAAO,KAAM,SAAQ,cAAc;IACrC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;IACxB,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;IAGxB,MAAM,CAAS;IAEf,UAAU;IAEV,WAAW,CAAS;IAGpB,YAAY,CAAS;IAGrB,qBAAqB,CAAO;IAG5B,sBAAsB,CAAO;IAY7B,SAAS,CAAO;IAUhB,SAAS,CAAO;IAEhB,MAAM,CAAC,IAAI,CAAkC;IAE7C,oBAAoB;QAChB,OAAO,IAAI,CAAC,qBAAqB,GAAG,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAU;QACvC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;YACjC,MAAM,EAAE,IAAI,CAAC,EAAE;SAClB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAEjB,OAAO,OAAO,CAAC,MAAM,CAAC;YAClB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,SAAS,EAAE,qBAAqB,IAAI,IAAI;YACnD,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;SAClB,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,gBAAgB,GAAG,KAAK;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,CAChC,UAAU,IAAI,CAAC,gBAAgB,EAAE,kBAC7B,IAAI,CAAC,KACT,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,eAAe,EACtF,CAAC,WAAW,CAAC,CAChB,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,uCAAuC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEhD,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/G,gFAAgF;YAChF,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;QAEnD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACjD,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,UAAU;IACV,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,CAChC,UAAU,IAAI,CAAC,gBAAgB,EAAE,KAAK,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAC/D,IAAI,CAAC,KACT,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,sCAAsC,EAClF,CAAC,YAAY,CAAC,CACjB,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,uCAAuC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEhD,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAI,KAAK,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC5C,4FAA4F;YAC5F,qBAAqB;YACrB,yCAAyC;YACzC,OAAO,CAAC,KAAK,CAAC,iEAAiE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/F,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;QAEnD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACjD,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAiB,IAAO;QACnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAElD,sDAAsD;QACtD,KAAK,CAAC,qBAAqB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;QAC9E,KAAK,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE/C,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAiB,IAAO;QACnD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,IAAI,WAAW,CAAC;gBAClB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,qCAAqC;gBAC9C,UAAU,EAAE,GAAG;aAClB,CAAC,CAAC;QACP,CAAC;QACD,+CAA+C;QAE/C,qFAAqF;QACrF,4EAA4E;QAC5E,IAAI,CAAC;YACD,MAAM,CACF,IAAI,EACP,GAAG,MAAM,QAAQ,CAAC,MAAM,CACrB,iBAAiB,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,eAAe,IAAI,CAAC,OAAO,CAAC,IAAI,iBAAiB,IAAI,CAAC,OAAO,CAAC,IAAI,WAAW,IAAI,CAAC,KAAK,yEAAyE,EACxN,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAChD,CAAC;YAEF,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,YAAY,mBAAmB,CAAC,CAAC;YACjE,CAAC;QACL,CAAC;QACD,OAAO,CAAC,EAAE,CAAC;YACP,+FAA+F;YAC/F,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxD,KAAK,CAAC,qBAAqB,GAAG,IAAI,IAAI,EAAE,CAAC;QACzC,KAAK,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QACzF,KAAK,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE/C,KAAK,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC;QAC1C,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;QACtG,KAAK,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAEhD,KAAK,CAAC,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9E,KAAK,CAAC,YAAY,GAAG,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,WAAW,CAAiB,IAAO;QAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,cAAc,CAAiB,IAAO;QAC/C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAElD,eAAe;QACf,KAAK,CAAC,qBAAqB,GAAG,IAAI,IAAI,EAAE,CAAC;QACzC,KAAK,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC;QAC3G,KAAK,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE/C,KAAK,CAAC,sBAAsB,GAAG,IAAI,IAAI,EAAE,CAAC;QAC1C,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,KAAK,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAEhD,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,YAAoB;QACtD,MAAM,KAAK,GAAG,eAAe,IAAI,CAAC,KAAK,wCAAwC,CAAC;QAChF,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACzD,CAAC;;AAlOD;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;qCACZ;AAIf;IADC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;0CACtB;AAGpB;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;2CACN;AAGrB;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;oDACD;AAG5B;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;qDACA;AAY7B;IAVC,MAAM,CAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,GAAS;YAClC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,GAAG,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC;wCACc;AAUhB;IARC,MAAM,CAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU;YACxB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,UAAU,EAAE,IAAI;KACnB,CAAC;wCACc"}

package/dist/models/UitpasClientCredential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UitpasClientCredential.d.ts","sourceRoot":"","sources":["../../src/models/UitpasClientCredential.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGhD,qBAAa,sBAAuB,SAAQ,cAAc;IACtD,MAAM,CAAC,KAAK,SAA+B;IAO3C,EAAE,EAAG,MAAM,CAAC;IAGZ,QAAQ,EAAE,MAAM,CAAC;IAGjB,YAAY,EAAE,MAAM,CAAC;IAErB;;;OAGG;IAEH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAY9B,SAAS,EAAE,IAAI,CAAC;IAUhB,SAAS,EAAE,IAAI,CAAC;IAEV,IAAI;CAMb"}

package/dist/models/UitpasClientCredential.js

@@ -0,0 +1,62 @@
+import { __decorate } from "tslib";
+import { column } from '@simonbackx/simple-database';
+import { QueryableModel } from '@stamhoofd/sql';
+import { v4 as uuidv4 } from 'uuid';
+export class UitpasClientCredential extends QueryableModel {
+    static table = 'uitpas_client_credentials';
+    id;
+    clientId;
+    clientSecret;
+    /**
+     * The organizationId is the ID of the organization that this token belongs to.
+     * If it is null, it means that this token is for the platform.
+     */
+    organizationId;
+    createdAt;
+    updatedAt;
+    async save() {
+        if (this.organizationId === null) {
+            throw new Error('Not allowed to save uitpas client credentials for platform (organizationId = null)');
+        }
+        return await super.save();
+    }
+}
+__decorate([
+    column({
+        primary: true, type: 'string', beforeSave(value) {
+            return value ?? uuidv4();
+        },
+    })
+], UitpasClientCredential.prototype, "id", void 0);
+__decorate([
+    column({ type: 'string' })
+], UitpasClientCredential.prototype, "clientId", void 0);
+__decorate([
+    column({ type: 'string' })
+], UitpasClientCredential.prototype, "clientSecret", void 0);
+__decorate([
+    column({ type: 'string', nullable: true })
+], UitpasClientCredential.prototype, "organizationId", void 0);
+__decorate([
+    column({
+        type: 'datetime', beforeSave(old) {
+            if (old !== undefined) {
+                return old;
+            }
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        },
+    })
+], UitpasClientCredential.prototype, "createdAt", void 0);
+__decorate([
+    column({
+        type: 'datetime', beforeSave() {
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        },
+        skipUpdate: true,
+    })
+], UitpasClientCredential.prototype, "updatedAt", void 0);
+//# sourceMappingURL=UitpasClientCredential.js.map

package/dist/models/UitpasClientCredential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UitpasClientCredential.js","sourceRoot":"","sources":["../../src/models/UitpasClientCredential.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,MAAM,OAAO,sBAAuB,SAAQ,cAAc;IACtD,MAAM,CAAC,KAAK,GAAG,2BAA2B,CAAC;IAO3C,EAAE,CAAU;IAGZ,QAAQ,CAAS;IAGjB,YAAY,CAAS;IAErB;;;OAGG;IAEH,cAAc,CAAgB;IAY9B,SAAS,CAAO;IAUhB,SAAS,CAAO;IAEhB,KAAK,CAAC,IAAI;QACN,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;;AA1CD;IALC,MAAM,CAAC;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK;YAC3C,OAAO,KAAK,IAAI,MAAM,EAAE,CAAC;QAC7B,CAAC;KACJ,CAAC;kDACU;AAGZ;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;wDACV;AAGjB;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;4DACN;AAOrB;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;8DACb;AAY9B;IAVC,MAAM,CAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,GAAS;YAClC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,GAAG,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC;yDACc;AAUhB;IARC,MAAM,CAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU;YACxB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,UAAU,EAAE,IAAI;KACnB,CAAC;yDACc"}

package/dist/models/UsedRegisterCode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UsedRegisterCode.d.ts","sourceRoot":"","sources":["../../src/models/UsedRegisterCode.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGhD,qBAAa,gBAAiB,SAAQ,cAAc;IAChD,MAAM,CAAC,KAAK,SAAyB;IAOrC,EAAE,EAAG,MAAM,CAAC;IAGZ,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IAEH,cAAc,EAAE,MAAM,CAAC;IAEvB;;OAEG;IAEH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAY/B,SAAS,EAAE,IAAI,CAAC;IAUhB,SAAS,EAAE,IAAI,CAAC;CACnB"}

package/dist/models/UsedRegisterCode.js

@@ -0,0 +1,58 @@
+import { __decorate } from "tslib";
+import { column } from '@simonbackx/simple-database';
+import { QueryableModel } from '@stamhoofd/sql';
+import { v4 as uuidv4 } from 'uuid';
+export class UsedRegisterCode extends QueryableModel {
+    static table = 'used_register_codes';
+    id;
+    code;
+    /**
+     * Code is used by...
+     */
+    organizationId;
+    /**
+     * Set if this has been rewarded
+     */
+    creditId = null;
+    createdAt;
+    updatedAt;
+}
+__decorate([
+    column({
+        primary: true, type: 'string', beforeSave(value) {
+            return value ?? uuidv4();
+        },
+    })
+], UsedRegisterCode.prototype, "id", void 0);
+__decorate([
+    column({ type: 'string' })
+], UsedRegisterCode.prototype, "code", void 0);
+__decorate([
+    column({ type: 'string' })
+], UsedRegisterCode.prototype, "organizationId", void 0);
+__decorate([
+    column({ type: 'string', nullable: true })
+], UsedRegisterCode.prototype, "creditId", void 0);
+__decorate([
+    column({
+        type: 'datetime', beforeSave(old) {
+            if (old !== undefined) {
+                return old;
+            }
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        },
+    })
+], UsedRegisterCode.prototype, "createdAt", void 0);
+__decorate([
+    column({
+        type: 'datetime', beforeSave() {
+            const date = new Date();
+            date.setMilliseconds(0);
+            return date;
+        },
+        skipUpdate: true,
+    })
+], UsedRegisterCode.prototype, "updatedAt", void 0);
+//# sourceMappingURL=UsedRegisterCode.js.map

package/dist/models/UsedRegisterCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UsedRegisterCode.js","sourceRoot":"","sources":["../../src/models/UsedRegisterCode.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAEpC,MAAM,OAAO,gBAAiB,SAAQ,cAAc;IAChD,MAAM,CAAC,KAAK,GAAG,qBAAqB,CAAC;IAOrC,EAAE,CAAU;IAGZ,IAAI,CAAS;IAEb;;OAEG;IAEH,cAAc,CAAS;IAEvB;;OAEG;IAEH,QAAQ,GAAkB,IAAI,CAAC;IAY/B,SAAS,CAAO;IAUhB,SAAS,CAAO;;AArChB;IALC,MAAM,CAAC;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK;YAC3C,OAAO,KAAK,IAAI,MAAM,EAAE,CAAC;QAC7B,CAAC;KACJ,CAAC;4CACU;AAGZ;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;8CACd;AAMb;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;wDACJ;AAMvB;IADC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;kDACZ;AAY/B;IAVC,MAAM,CAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,GAAS;YAClC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,GAAG,CAAC;YACf,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC;mDACc;AAUhB;IARC,MAAM,CAAC;QACJ,IAAI,EAAE,UAAU,EAAE,UAAU;YACxB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,UAAU,EAAE,IAAI;KACnB,CAAC;mDACc"}

package/dist/models/User.d.ts

@@ -0,0 +1,76 @@
+import type { EmailInterfaceRecipient } from '@stamhoofd/email';
+import { QueryableModel } from '@stamhoofd/sql';
+import type { LoginProviderType, NewUser } from '@stamhoofd/structures';
+import { Permissions, Recipient, Replacement, UserMeta, UserPermissions, User as UserStruct } from '@stamhoofd/structures';
+import type { Organization } from './Organization.js';
+export declare class User extends QueryableModel {
+    static table: string;
+    id: string;
+    organizationId: string | null;
+    memberId: string | null;
+    firstName: string | null;
+    lastName: string | null;
+    email: string;
+    password: string | null;
+    verified: boolean;
+    permissions: UserPermissions | null;
+    /**
+     * @deprecated
+     * use permissions
+     */
+    organizationPermissions: Permissions | null;
+    meta: UserMeta | null;
+    createdAt: Date;
+    updatedAt: Date;
+    get name(): string | null;
+    createRecipient(...replacements: Replacement[]): Recipient;
+    static getPlatformAdmins(options?: {
+        verified?: boolean;
+    }): Promise<User[]>;
+    static getAdmins(organizationId: string, options?: {
+        verified?: boolean;
+    }): Promise<User[]>;
+    static getApiUsers(organizationIds: string[]): Promise<User[]>;
+    merge(other: User): Promise<void>;
+    static login(organizationId: string | null, email: string, password: string): Promise<User | undefined>;
+    static deleteForDeletedMember(memberId: string): Promise<{
+        affectedRows: number;
+    }>;
+    hasPasswordBasedAccount(): boolean;
+    get isApiUser(): boolean;
+    get isSystemUser(): boolean;
+    hasAccount(): boolean;
+    protected hasKeys(): boolean;
+    static getForRegister(organizationId: string | null, email: string): Promise<User | undefined>;
+    static getOrganizationLevelUser(organizationId: string, email: string): Promise<User | undefined>;
+    static getForAuthentication(organizationId: string | null, email: string, { allowWithoutAccount }?: {
+        allowWithoutAccount?: boolean;
+    }): Promise<User | undefined>;
+    static hash(password: string): Promise<string>;
+    static createInvited(organization: Organization | null, data: {
+        firstName: string | null;
+        lastName: string | null;
+        email: string;
+        allowPlatform?: boolean;
+    }): Promise<User | undefined>;
+    static register(organization: Organization | null, data: NewUser, options?: {
+        allowPlatform?: boolean;
+    }): Promise<User | undefined>;
+    linkLoginProvider(type: LoginProviderType, sub: string, allowAdditional?: boolean): void;
+    static registerSSO(organization: Organization | null, data: {
+        email: any;
+        id: any;
+        firstName: any;
+        lastName: any;
+        type: LoginProviderType;
+        sub: string;
+    }): Promise<User | undefined>;
+    changePassword(password: string): Promise<void>;
+    getStructure(): UserStruct;
+    getEmailTo(): EmailInterfaceRecipient[];
+    /**
+     * Get internal system user that can be used on places that require a user object but the system is the actor
+     */
+    static getSystem(): Promise<User>;
+}
+//# sourceMappingURL=User.d.ts.map

package/dist/models/User.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"User.d.ts","sourceRoot":"","sources":["../../src/models/User.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAoB,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAC,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAM3H,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,mBAAmB,CAAC;AAEpD,qBAAa,IAAK,SAAQ,cAAc;IACpC,MAAM,CAAC,KAAK,SAAW;IASvB,EAAE,EAAG,MAAM,CAAC;IAGZ,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAG9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAG/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAQ;IAGhC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAG/B,KAAK,EAAE,MAAM,CAAC;IAGd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAQ;IAG/B,QAAQ,UAAS;IAGjB,WAAW,EAAE,eAAe,GAAG,IAAI,CAAQ;IAE3C;;;OAGG;IAEH,uBAAuB,EAAE,WAAW,GAAG,IAAI,CAAQ;IAGnD,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAQ;IAY7B,SAAS,EAAE,IAAI,CAAC;IAUhB,SAAS,EAAE,IAAI,CAAC;IAEhB,IAAI,IAAI,kBAcP;IAED,eAAe,CAAC,GAAG,YAAY,EAAE,WAAW,EAAE;WAuBjC,iBAAiB,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE;WAwBlD,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE;WA8ClE,WAAW,CAAC,eAAe,EAAE,MAAM,EAAE;IAI5C,KAAK,CAAC,KAAK,EAAE,IAAI;WAqDV,KAAK,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;WA6BhG,sBAAsB,CAAC,QAAQ,EAAE,MAAM;;;IAKpD,uBAAuB;IAQvB,IAAI,SAAS,YAEZ;IAED,IAAI,YAAY,YAEf;IAED,UAAU;IAaV,SAAS,CAAC,OAAO;WASJ,cAAc,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;WAIvF,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;WAoB1F,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,mBAA2B,EAAE,GAAE;QAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;WA2BtK,IAAI,CAAC,QAAQ,EAAE,MAAM;WAKrB,aAAa,CACtB,YAAY,EAAE,YAAY,GAAG,IAAI,EACjC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GACpG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;WAiCf,QAAQ,CACjB,YAAY,EAAE,YAAY,GAAG,IAAI,EACjC,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GACtC,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IA6C5B,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,UAAQ;WA8BlE,WAAW,CACpB,YAAY,EAAE,YAAY,GAAG,IAAI,EACjC,IAAI,EAAE;QAAE,KAAK,MAAC;QAAC,EAAE,MAAC;QAAC,SAAS,MAAC;QAAC,QAAQ,MAAC;QAAC,IAAI,EAAE,iBAAiB,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAC/E,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC;IA0CtB,cAAc,CAAC,QAAQ,EAAE,MAAM;IASrC,YAAY;IAeZ,UAAU,IAAI,uBAAuB,EAAE;IASvC;;OAEG;WACU,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;CAsB1C"}