@steedos/auth 2.2.52-beta.6 → 2.2.53-beta.2

package/LICENSE.txt

@@ -6,14 +6,11 @@ To determine under which license you may use a file from the Steedos source code
 please resort to the header of that file.
 
 If the file has no header, the following rules apply
-1. project templates are licensed under MIT, see License.MIT.txt
-2. enterprise features are licensed under Steedos Enterprise Terms, see License.enterprise.txt
-3. source code that is neither (1) nor (2) is licensed under AGPL, see License.AGPL.txt
+1. enterprise features are licensed under Steedos Enterprise Terms, see License.enterprise.txt
+2. source code that is neither (1) is licensed under MIT, see https://opensource.org/licenses/MIT
 
 On request, licenses under different terms are available.
 
-Project templates can be found in the folders steedos-projects/
-
 Source code of enterprise features are files that
 * are in folders named "ee" or start with "ee_", or in subfolders of such folders.
 * contain the strings "ee_" in its filename name.

package/lib/apikey.js

@@ -1,40 +1,108 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
 exports.getAPIKeyAuthHeader = exports.getAPIKey = exports.verifyAPIKey = exports.isAPIKey = void 0;
-const objectql_1 = require("@steedos/objectql");
-const HEADER_AUTH = 'Authorization';
-const AUTH_TYPE = 'Bearer';
+var objectql_1 = require("@steedos/objectql");
+var HEADER_AUTH = 'Authorization';
+var AUTH_TYPE = 'Bearer';
 function isAPIKey(token) {
     return token.startsWith('apikey,');
 }
 exports.isAPIKey = isAPIKey;
-async function verifyAPIKey(token) {
-    if (isAPIKey(token)) {
-        const apikey = token.replace('apikey,', '');
-        const records = await (0, objectql_1.getObject)('api_keys').find({ filters: [['api_key', '=', apikey], ['active', '=', true]] });
-        if (records.length > 0) {
-            const record = records[0];
-            await (0, objectql_1.getObject)('api_keys').update(record._id, { last_use_time: new Date() });
-            return { userId: record.owner, spaceId: record.space };
-        }
-    }
+function verifyAPIKey(token) {
+    return __awaiter(this, void 0, void 0, function () {
+        var apikey, records, record;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    if (!isAPIKey(token)) return [3 /*break*/, 3];
+                    apikey = token.replace('apikey,', '');
+                    return [4 /*yield*/, (0, objectql_1.getObject)('api_keys').find({ filters: [['api_key', '=', apikey], ['active', '=', true]] })];
+                case 1:
+                    records = _a.sent();
+                    if (!(records.length > 0)) return [3 /*break*/, 3];
+                    record = records[0];
+                    return [4 /*yield*/, (0, objectql_1.getObject)('api_keys').update(record._id, { last_use_time: new Date() })];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/, { userId: record.owner, spaceId: record.space }];
+                case 3: return [2 /*return*/];
+            }
+        });
+    });
 }
 exports.verifyAPIKey = verifyAPIKey;
-async function getAPIKey(spaceId) {
-    const space = await (0, objectql_1.getObject)('spaces').findOne(spaceId, {});
-    if (space) {
-        return space.api_key;
-    }
+function getAPIKey(spaceId) {
+    return __awaiter(this, void 0, void 0, function () {
+        var space;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, (0, objectql_1.getObject)('spaces').findOne(spaceId, {})];
+                case 1:
+                    space = _a.sent();
+                    if (space) {
+                        return [2 /*return*/, space.api_key];
+                    }
+                    return [2 /*return*/];
+            }
+        });
+    });
 }
 exports.getAPIKey = getAPIKey;
-async function getAPIKeyAuthHeader(spaceId) {
-    const api_key = await getAPIKey(spaceId);
-    if (!api_key) {
-        throw new objectql_1.SteedosError('space_apikey_notfind');
-    }
-    else {
-        return { [HEADER_AUTH]: `${AUTH_TYPE} apikey,${api_key}` };
-    }
+function getAPIKeyAuthHeader(spaceId) {
+    return __awaiter(this, void 0, void 0, function () {
+        var api_key;
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, getAPIKey(spaceId)];
+                case 1:
+                    api_key = _b.sent();
+                    if (!api_key) {
+                        throw new objectql_1.SteedosError('space_apikey_notfind');
+                    }
+                    else {
+                        return [2 /*return*/, (_a = {}, _a[HEADER_AUTH] = "".concat(AUTH_TYPE, " apikey,").concat(api_key), _a)];
+                    }
+                    return [2 /*return*/];
+            }
+        });
+    });
 }
 exports.getAPIKeyAuthHeader = getAPIKeyAuthHeader;
 //# sourceMappingURL=apikey.js.map

package/lib/apikey.js.map

@@ -1 +1 @@
-{"version":3,"file":"apikey.js","sourceRoot":"","sources":["../src/apikey.ts"],"names":[],"mappings":";;;AAAA,gDAA4D;AAE5D,MAAM,WAAW,GAAG,eAAe,CAAC;AACpC,MAAM,SAAS,GAAG,QAAQ,CAAC;AAE3B,SAAgB,QAAQ,CAAC,KAAK;IAC1B,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;AACtC,CAAC;AAFD,4BAEC;AAEM,KAAK,UAAU,YAAY,CAAC,KAAK;IACpC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE;QACjB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,IAAA,oBAAS,EAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QACjH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;YACpB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,MAAM,IAAA,oBAAS,EAAC,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;SAC1D;KACJ;AACL,CAAC;AAVD,oCAUC;AAEM,KAAK,UAAU,SAAS,CAAC,OAAO;IACnC,MAAM,KAAK,GAAG,MAAM,IAAA,oBAAS,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,KAAK,EAAE;QACP,OAAO,KAAK,CAAC,OAAO,CAAC;KACxB;AACL,CAAC;AALD,8BAKC;AAEM,KAAK,UAAU,mBAAmB,CAAC,OAAO;IAC7C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE;QACV,MAAM,IAAI,uBAAY,CAAC,sBAAsB,CAAC,CAAC;KAClD;SAAI;QACD,OAAO,EAAC,CAAC,WAAW,CAAC,EAAE,GAAG,SAAS,WAAW,OAAO,EAAE,EAAC,CAAC;KAC5D;AACL,CAAC;AAPD,kDAOC"}
+{"version":3,"file":"apikey.js","sourceRoot":"","sources":["../src/apikey.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAA4D;AAE5D,IAAM,WAAW,GAAG,eAAe,CAAC;AACpC,IAAM,SAAS,GAAG,QAAQ,CAAC;AAE3B,SAAgB,QAAQ,CAAC,KAAK;IAC1B,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;AACtC,CAAC;AAFD,4BAEC;AAED,SAAsB,YAAY,CAAC,KAAK;;;;;;yBAChC,QAAQ,CAAC,KAAK,CAAC,EAAf,wBAAe;oBACT,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBAC5B,qBAAM,IAAA,oBAAS,EAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,EAAA;;oBAA1G,OAAO,GAAG,SAAgG;yBAC5G,CAAA,OAAO,CAAC,MAAM,GAAG,CAAC,CAAA,EAAlB,wBAAkB;oBACZ,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC1B,qBAAM,IAAA,oBAAS,EAAC,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,EAAA;;oBAA7E,SAA6E,CAAC;oBAC9E,sBAAO,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAC;;;;;CAGlE;AAVD,oCAUC;AAED,SAAsB,SAAS,CAAC,OAAO;;;;;wBACrB,qBAAM,IAAA,oBAAS,EAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAA;;oBAAtD,KAAK,GAAG,SAA8C;oBAC5D,IAAI,KAAK,EAAE;wBACP,sBAAO,KAAK,CAAC,OAAO,EAAC;qBACxB;;;;;CACJ;AALD,8BAKC;AAED,SAAsB,mBAAmB,CAAC,OAAO;;;;;;wBAC7B,qBAAM,SAAS,CAAC,OAAO,CAAC,EAAA;;oBAAlC,OAAO,GAAG,SAAwB;oBACxC,IAAI,CAAC,OAAO,EAAE;wBACV,MAAM,IAAI,uBAAY,CAAC,sBAAsB,CAAC,CAAC;qBAClD;yBAAI;wBACD,gCAAQ,GAAC,WAAW,IAAG,UAAG,SAAS,qBAAW,OAAO,CAAE,OAAE;qBAC5D;;;;;CACJ;AAPD,kDAOC"}

package/lib/auth-middleware.js

@@ -1,16 +1,59 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
 exports.requireAuthentication = void 0;
-const session_1 = require("./session");
-const requireAuthentication = async (req, res, next) => {
-    await (0, session_1.setRequestUser)(req, res, function () {
-        if (req.user) {
-            next();
-        }
-        else {
-            res.status(401).send({ status: 'error', message: 'You must be logged in to do this.' });
+var session_1 = require("./session");
+var requireAuthentication = function (req, res, next) { return __awaiter(void 0, void 0, void 0, function () {
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0: return [4 /*yield*/, (0, session_1.setRequestUser)(req, res, function () {
+                    if (req.user) {
+                        next();
+                    }
+                    else {
+                        res.status(401).send({ status: 'error', message: 'You must be logged in to do this.' });
+                    }
+                })];
+            case 1:
+                _a.sent();
+                return [2 /*return*/];
         }
     });
-};
+}); };
 exports.requireAuthentication = requireAuthentication;
 //# sourceMappingURL=auth-middleware.js.map

package/lib/auth-middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-middleware.js","sourceRoot":"","sources":["../src/auth-middleware.ts"],"names":[],"mappings":";;;AAAA,uCAA2C;AAOpC,MAAM,qBAAqB,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAgB,EAAE,EAAE;IACzF,MAAM,IAAA,wBAAc,EAAC,GAAG,EAAE,GAAG,EAAE;QAC3B,IAAI,GAAG,CAAC,IAAI,EAAE;YACV,IAAI,EAAE,CAAC;SACV;aACI;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;SAC3F;IACL,CAAC,CAAC,CAAC;AAEP,CAAC,CAAA;AAVY,QAAA,qBAAqB,yBAUjC"}
+{"version":3,"file":"auth-middleware.js","sourceRoot":"","sources":["../src/auth-middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,qCAA2C;AAOpC,IAAM,qBAAqB,GAAG,UAAO,GAAY,EAAE,GAAa,EAAE,IAAgB;;;oBACrF,qBAAM,IAAA,wBAAc,EAAC,GAAG,EAAE,GAAG,EAAE;oBAC3B,IAAI,GAAG,CAAC,IAAI,EAAE;wBACV,IAAI,EAAE,CAAC;qBACV;yBACI;wBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;qBAC3F;gBACL,CAAC,CAAC,EAAA;;gBAPF,SAOE,CAAC;;;;KAEN,CAAA;AAVY,QAAA,qBAAqB,yBAUjC"}

package/lib/endpoints/jwt.js

@@ -1,8 +1,44 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+exports.__esModule = true;
 exports.jwtSSO = void 0;
-const utils_1 = require("../utils");
-const objectql_1 = require("@steedos/objectql");
+var utils_1 = require("../utils");
+var objectql_1 = require("@steedos/objectql");
 // function secretCallback(req, payload, done) {
 //   let issuer = payload.iss
 //   let collection = getSteedosSchema().getObject('OAuth2Clients')
@@ -14,65 +50,90 @@ const objectql_1 = require("@steedos/objectql");
 //     done(reject, '')
 //   })
 // }
-async function getTokenInfo(req) {
-    let payload = req.user;
-    let data = { userId: '', authToken: '' };
-    let userObj = (0, objectql_1.getSteedosSchema)().getObject('users');
-    let user = (await userObj.find({ filters: `username eq '${payload.username}'`, fields: ['_id'] }))[0];
-    if (user) {
-        let userId = user._id;
-        let authToken = payload.sessionId ? `${payload.iss}-${payload.username}-${payload.sessionId}` : `${payload.iss}-${payload.username}`;
-        let hashedToken = (0, utils_1.hashLoginToken)(authToken).replace(/\//g, '%2F');
-        let filters = `(services/resume/loginTokens/hashedToken eq '${hashedToken}')`;
-        if (await userObj.count({ filters: filters })) {
-            data = { userId: userId, authToken: authToken };
-        }
-        else {
-            let stampedToken = {
-                token: authToken,
-                when: new Date
-            };
-            let hashedTokenObj = (0, utils_1.hashStampedToken)(stampedToken);
-            await (0, utils_1.insertHashedLoginToken)(userId, hashedTokenObj);
-            data = { userId: userId, authToken: authToken };
-        }
-    }
-    return data;
+function getTokenInfo(req) {
+    return __awaiter(this, void 0, void 0, function () {
+        var payload, data, userObj, user, userId, authToken, hashedToken, filters, stampedToken, hashedTokenObj;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    payload = req.user;
+                    data = { userId: '', authToken: '' };
+                    userObj = (0, objectql_1.getSteedosSchema)().getObject('users');
+                    return [4 /*yield*/, userObj.find({ filters: "username eq '".concat(payload.username, "'"), fields: ['_id'] })];
+                case 1:
+                    user = (_a.sent())[0];
+                    if (!user) return [3 /*break*/, 5];
+                    userId = user._id;
+                    authToken = payload.sessionId ? "".concat(payload.iss, "-").concat(payload.username, "-").concat(payload.sessionId) : "".concat(payload.iss, "-").concat(payload.username);
+                    hashedToken = (0, utils_1.hashLoginToken)(authToken).replace(/\//g, '%2F');
+                    filters = "(services/resume/loginTokens/hashedToken eq '".concat(hashedToken, "')");
+                    return [4 /*yield*/, userObj.count({ filters: filters })];
+                case 2:
+                    if (!_a.sent()) return [3 /*break*/, 3];
+                    data = { userId: userId, authToken: authToken };
+                    return [3 /*break*/, 5];
+                case 3:
+                    stampedToken = {
+                        token: authToken,
+                        when: new Date
+                    };
+                    hashedTokenObj = (0, utils_1.hashStampedToken)(stampedToken);
+                    return [4 /*yield*/, (0, utils_1.insertHashedLoginToken)(userId, hashedTokenObj)];
+                case 4:
+                    _a.sent();
+                    data = { userId: userId, authToken: authToken };
+                    _a.label = 5;
+                case 5: return [2 /*return*/, data];
+            }
+        });
+    });
 }
-const jwtSSO = async (req, res) => {
-    try {
-        let jwt = require('jsonwebtoken');
-        let token = req.query.jwt_token;
-        if (!token) {
-            throw new Error('jwt_token is needed!');
+var jwtSSO = function (req, res) { return __awaiter(void 0, void 0, void 0, function () {
+    var jwt, token, decoded, payload, issuer, collection, clients, clientInfo, secret, spaceId, verifiedPayload, data, redirectUrl, error_1;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                _a.trys.push([0, 3, , 4]);
+                jwt = require('jsonwebtoken');
+                token = req.query.jwt_token;
+                if (!token) {
+                    throw new Error('jwt_token is needed!');
+                }
+                decoded = jwt.decode(token, { complete: true });
+                payload = decoded.payload;
+                issuer = payload.iss;
+                if (!issuer) {
+                    throw new Error('issuer is needed!');
+                }
+                collection = (0, objectql_1.getSteedosSchema)().getObject('OAuth2Clients');
+                return [4 /*yield*/, collection.find({ filters: "clientId eq '".concat(issuer, "'") })];
+            case 1:
+                clients = _a.sent();
+                clientInfo = clients[0];
+                secret = clientInfo ? clientInfo.clientSecret : '';
+                spaceId = clientInfo ? clientInfo.space : '';
+                if (!secret) {
+                    throw new Error('secret is needed!');
+                }
+                if (!spaceId) {
+                    throw new Error('spaceId is needed!');
+                }
+                verifiedPayload = jwt.verify(token, secret);
+                return [4 /*yield*/, getTokenInfo({ user: verifiedPayload })];
+            case 2:
+                data = _a.sent();
+                (0, utils_1.setAuthCookies)(req, res, data.userId, data.authToken, spaceId);
+                redirectUrl = verifiedPayload.redirect_url;
+                res.redirect(302, redirectUrl);
+                return [3 /*break*/, 4];
+            case 3:
+                error_1 = _a.sent();
+                console.error(error_1);
+                res.status(500).send(error_1.messenger);
+                return [3 /*break*/, 4];
+            case 4: return [2 /*return*/];
         }
-        let decoded = jwt.decode(token, { complete: true });
-        let payload = decoded.payload;
-        let issuer = payload.iss;
-        if (!issuer) {
-            throw new Error('issuer is needed!');
-        }
-        let collection = (0, objectql_1.getSteedosSchema)().getObject('OAuth2Clients');
-        let clients = await collection.find({ filters: `clientId eq '${issuer}'` });
-        let clientInfo = clients[0];
-        let secret = clientInfo ? clientInfo.clientSecret : '';
-        let spaceId = clientInfo ? clientInfo.space : '';
-        if (!secret) {
-            throw new Error('secret is needed!');
-        }
-        if (!spaceId) {
-            throw new Error('spaceId is needed!');
-        }
-        let verifiedPayload = jwt.verify(token, secret);
-        let data = await getTokenInfo({ user: verifiedPayload });
-        (0, utils_1.setAuthCookies)(req, res, data.userId, data.authToken, spaceId);
-        let redirectUrl = verifiedPayload.redirect_url;
-        res.redirect(302, redirectUrl);
-    }
-    catch (error) {
-        console.error(error);
-        res.status(500).send(error.messenger);
-    }
-};
+    });
+}); };
 exports.jwtSSO = jwtSSO;
 //# sourceMappingURL=jwt.js.map

package/lib/endpoints/jwt.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/endpoints/jwt.ts"],"names":[],"mappings":";;;AAAA,oCAAoG;AACpG,gDAAoD;AAEpD,gDAAgD;AAChD,6BAA6B;AAC7B,mEAAmE;AACnE,sFAAsF;AACtF,kCAAkC;AAClC,mEAAmE;AACnE,+BAA+B;AAC/B,iCAAiC;AACjC,uBAAuB;AACvB,OAAO;AACP,IAAI;AAEJ,KAAK,UAAU,YAAY,CAAC,GAAG;IAC7B,IAAI,OAAO,GAAG,GAAG,CAAC,IAAI,CAAA;IACtB,IAAI,IAAI,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IACxC,IAAI,OAAO,GAAG,IAAA,2BAAgB,GAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACnD,IAAI,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,OAAO,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACrG,IAAI,IAAI,EAAE;QACR,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,CAAA;QACrB,IAAI,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAA;QACpI,IAAI,WAAW,GAAG,IAAA,sBAAc,EAAC,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,OAAO,GAAG,gDAAgD,WAAW,IAAI,CAAC;QAC9E,IAAI,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;YAC7C,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;SAChD;aAAM;YACL,IAAI,YAAY,GAAG;gBACjB,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,IAAI,IAAI;aACf,CAAA;YACD,IAAI,cAAc,GAAG,IAAA,wBAAgB,EAAC,YAAY,CAAC,CAAA;YACnD,MAAM,IAAA,8BAAsB,EAAC,MAAM,EAAE,cAAc,CAAC,CAAA;YAEpD,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;SAChD;KACF;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAEM,MAAM,MAAM,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACvC,IAAI;QACF,IAAI,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE;YACV,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;SACxC;QACD,IAAI,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC9B,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QACzB,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;SACrC;QACD,IAAI,UAAU,GAAG,IAAA,2BAAgB,GAAE,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QAC9D,IAAI,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,MAAM,GAAG,EAAE,CAAC,CAAA;QAC3E,IAAI,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAA;QACtD,IAAI,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QAChD,IAAI,CAAC,MAAM,EAAE;YACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;SACrC;QACD,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;SACtC;QACD,IAAI,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,IAAI,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAA;QACxD,IAAA,sBAAc,EAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC9D,IAAI,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;KAChC;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;KACtC;AAEH,CAAC,CAAA;AAlCY,QAAA,MAAM,UAkClB"}
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/endpoints/jwt.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kCAAoG;AACpG,8CAAoD;AAEpD,gDAAgD;AAChD,6BAA6B;AAC7B,mEAAmE;AACnE,sFAAsF;AACtF,kCAAkC;AAClC,mEAAmE;AACnE,+BAA+B;AAC/B,iCAAiC;AACjC,uBAAuB;AACvB,OAAO;AACP,IAAI;AAEJ,SAAe,YAAY,CAAC,GAAG;;;;;;oBACzB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAA;oBAClB,IAAI,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;oBACpC,OAAO,GAAG,IAAA,2BAAgB,GAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;oBACvC,qBAAM,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uBAAgB,OAAO,CAAC,QAAQ,MAAG,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAA;;oBAA7F,IAAI,GAAG,CAAC,SAAqF,CAAC,CAAC,CAAC,CAAC;yBACjG,IAAI,EAAJ,wBAAI;oBACF,MAAM,GAAG,IAAI,CAAC,GAAG,CAAA;oBACjB,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,UAAG,OAAO,CAAC,GAAG,cAAI,OAAO,CAAC,QAAQ,cAAI,OAAO,CAAC,SAAS,CAAE,CAAC,CAAC,CAAC,UAAG,OAAO,CAAC,GAAG,cAAI,OAAO,CAAC,QAAQ,CAAE,CAAA;oBAChI,WAAW,GAAG,IAAA,sBAAc,EAAC,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBAC9D,OAAO,GAAG,uDAAgD,WAAW,OAAI,CAAC;oBAC1E,qBAAM,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAA;;yBAAzC,SAAyC,EAAzC,wBAAyC;oBAC3C,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;;;oBAE3C,YAAY,GAAG;wBACjB,KAAK,EAAE,SAAS;wBAChB,IAAI,EAAE,IAAI,IAAI;qBACf,CAAA;oBACG,cAAc,GAAG,IAAA,wBAAgB,EAAC,YAAY,CAAC,CAAA;oBACnD,qBAAM,IAAA,8BAAsB,EAAC,MAAM,EAAE,cAAc,CAAC,EAAA;;oBAApD,SAAoD,CAAA;oBAEpD,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;;wBAInD,sBAAO,IAAI,EAAC;;;;CACb;AAEM,IAAM,MAAM,GAAG,UAAO,GAAG,EAAE,GAAG;;;;;;gBAE7B,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC9B,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;gBAChC,IAAI,CAAC,KAAK,EAAE;oBACV,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;iBACxC;gBACG,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;gBAC1B,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;gBACzB,IAAI,CAAC,MAAM,EAAE;oBACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;iBACrC;gBACG,UAAU,GAAG,IAAA,2BAAgB,GAAE,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;gBAChD,qBAAM,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,uBAAgB,MAAM,MAAG,EAAE,CAAC,EAAA;;gBAAvE,OAAO,GAAG,SAA6D;gBACvE,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;gBACvB,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAA;gBAClD,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;gBAChD,IAAI,CAAC,MAAM,EAAE;oBACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;iBACrC;gBACD,IAAI,CAAC,OAAO,EAAE;oBACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;iBACtC;gBACG,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACrC,qBAAM,YAAY,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAA;;gBAApD,IAAI,GAAG,SAA6C;gBACxD,IAAA,sBAAc,EAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;gBAC1D,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC;gBAC/C,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;;;;gBAE/B,OAAO,CAAC,KAAK,CAAC,OAAK,CAAC,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAK,CAAC,SAAS,CAAC,CAAA;;;;;KAGxC,CAAA;AAlCY,QAAA,MAAM,UAkClB"}

package/lib/endpoints/login.js

@@ -1,38 +1,86 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.login = void 0;
-const SHA256 = require("sha256");
-const bcrypt = require('bcryptjs');
-const session_1 = require("../session");
-const utils_1 = require("../utils");
-const login = async (req, res) => {
-    let username = req.body["username"];
-    let password = req.body["password"];
-    let spaceId = req.body["spaceId"]; // 需要登录的工作区Id，如果不传入，自动选中第一个工作区
-    let bcryptPassword = SHA256(password);
-    let user = Meteor.users.findOne({
-        $or: [{ "username": username }, { "emails.address": username }, { "mobile": username }]
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
-    if (!user) {
-        res.status(401).send();
-        return;
-    }
-    let match = await bcrypt.compare(bcryptPassword, user.services.password.bcrypt);
-    if (!match) {
-        res.status(401).send();
-        return;
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (_) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
-    let authtToken = null;
-    let stampedAuthToken = (0, utils_1.generateStampedLoginToken)();
-    authtToken = stampedAuthToken.token;
-    let hashedToken = (0, utils_1.hashStampedToken)(stampedAuthToken);
-    await (0, utils_1.insertHashedLoginToken)(user._id, hashedToken);
-    let userSession = await (0, session_1.getSession)(authtToken, spaceId);
-    // set cookie to response
-    // maxAge 3 month
-    (0, utils_1.setAuthCookies)(req, res, user._id, authtToken, userSession.spaceId);
-    res.setHeader('X-Space-Token', userSession.spaceId + ',' + authtToken);
-    return res.send(userSession);
 };
+exports.__esModule = true;
+exports.login = void 0;
+var SHA256 = require("sha256");
+var bcrypt = require('bcryptjs');
+var session_1 = require("../session");
+var utils_1 = require("../utils");
+var login = function (req, res) { return __awaiter(void 0, void 0, void 0, function () {
+    var username, password, spaceId, bcryptPassword, user, match, authtToken, stampedAuthToken, hashedToken, userSession;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                username = req.body["username"];
+                password = req.body["password"];
+                spaceId = req.body["spaceId"];
+                bcryptPassword = SHA256(password);
+                user = Meteor.users.findOne({
+                    $or: [{ "username": username }, { "emails.address": username }, { "mobile": username }]
+                });
+                if (!user) {
+                    res.status(401).send();
+                    return [2 /*return*/];
+                }
+                return [4 /*yield*/, bcrypt.compare(bcryptPassword, user.services.password.bcrypt)];
+            case 1:
+                match = _a.sent();
+                if (!match) {
+                    res.status(401).send();
+                    return [2 /*return*/];
+                }
+                authtToken = null;
+                stampedAuthToken = (0, utils_1.generateStampedLoginToken)();
+                authtToken = stampedAuthToken.token;
+                hashedToken = (0, utils_1.hashStampedToken)(stampedAuthToken);
+                return [4 /*yield*/, (0, utils_1.insertHashedLoginToken)(user._id, hashedToken)];
+            case 2:
+                _a.sent();
+                return [4 /*yield*/, (0, session_1.getSession)(authtToken, spaceId)];
+            case 3:
+                userSession = _a.sent();
+                // set cookie to response
+                // maxAge 3 month
+                (0, utils_1.setAuthCookies)(req, res, user._id, authtToken, userSession.spaceId);
+                res.setHeader('X-Space-Token', userSession.spaceId + ',' + authtToken);
+                return [2 /*return*/, res.send(userSession)];
+        }
+    });
+}); };
 exports.login = login;
 //# sourceMappingURL=login.js.map

package/lib/endpoints/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/endpoints/login.ts"],"names":[],"mappings":";;;AAEA,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACnC,wCAAwC;AACxC,oCAA+G;AAIxG,MAAM,KAAK,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;IACvE,IAAI,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B;IACjE,IAAI,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;KAC1F,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,EAAE;QACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO;KACV;IACD,IAAI,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChF,IAAI,CAAC,KAAK,EAAE;QACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO;KACV;IACD,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,gBAAgB,GAAG,IAAA,iCAAyB,GAAE,CAAC;IACnD,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC;IACpC,IAAI,WAAW,GAAG,IAAA,wBAAgB,EAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,IAAA,8BAAsB,EAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,WAAW,GAAG,MAAM,IAAA,oBAAU,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxD,yBAAyB;IACzB,iBAAiB;IACjB,IAAA,sBAAc,EAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IACpE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,WAAW,CAAC,OAAO,GAAG,GAAG,GAAG,UAAU,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC,CAAA;AA5BY,QAAA,KAAK,SA4BjB"}
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/endpoints/login.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,IAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;AACjC,IAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACnC,sCAAwC;AACxC,kCAA+G;AAKxG,IAAM,KAAK,GAAG,UAAO,GAAY,EAAE,GAAa;;;;;gBAC/C,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9B,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC5B,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;iBAC1F,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,EAAE;oBACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;oBACvB,sBAAO;iBACV;gBACW,qBAAM,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAA;;gBAA3E,KAAK,GAAG,SAAmE;gBAC/E,IAAI,CAAC,KAAK,EAAE;oBACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;oBACvB,sBAAO;iBACV;gBACG,UAAU,GAAG,IAAI,CAAC;gBAClB,gBAAgB,GAAG,IAAA,iCAAyB,GAAE,CAAC;gBACnD,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC;gBAChC,WAAW,GAAG,IAAA,wBAAgB,EAAC,gBAAgB,CAAC,CAAC;gBACrD,qBAAM,IAAA,8BAAsB,EAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAA;;gBAAnD,SAAmD,CAAC;gBAClC,qBAAM,IAAA,oBAAU,EAAC,UAAU,EAAE,OAAO,CAAC,EAAA;;gBAAnD,WAAW,GAAG,SAAqC;gBACvD,yBAAyB;gBACzB,iBAAiB;gBACjB,IAAA,sBAAc,EAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;gBACpE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,WAAW,CAAC,OAAO,GAAG,GAAG,GAAG,UAAU,CAAC,CAAC;gBACvE,sBAAO,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAC;;;KAChC,CAAA;AA5BY,QAAA,KAAK,SA4BjB"}