@techelusive/nest-auth 0.0.0-stage → 0.2.1

package/dist/features/organizations/organizations.service.js

@@ -0,0 +1,481 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationsService = void 0;
+const common_1 = require("@nestjs/common");
+const typeorm_1 = require("typeorm");
+const auth_error_1 = require("../../common/auth-error.js");
+const random_secrets_1 = require("../../common/crypto/random-secrets.js");
+const identifiers_1 = require("../../common/identifiers.js");
+const constants_1 = require("../../constants.js");
+const entities_1 = require("../../database/entities/index.js");
+const auth_events_service_1 = require("../events/auth-events.service.js");
+const notifications_service_1 = require("../notifications/notifications.service.js");
+const session_service_1 = require("../sessions/session.service.js");
+const settings_service_1 = require("../settings/settings.service.js");
+/**
+ * Organizations (companies, teams, workspaces) and their members.
+ *
+ * Roles inside an organization:
+ *   owner  - everything, including deleting the organization and managing other owners
+ *   admin  - manage members and invitations (but not owners)
+ *   member - belongs to the organization
+ *
+ * A user picks the organization they are working in with switchActiveOrganization(); their access
+ * token then carries "org_id" and "org_role", so your API can scope data with one check.
+ */
+let OrganizationsService = class OrganizationsService {
+    settingsService;
+    sessions;
+    notifications;
+    events;
+    database;
+    constructor(options, settingsService, sessions, notifications, events) {
+        this.settingsService = settingsService;
+        this.sessions = sessions;
+        this.notifications = notifications;
+        this.events = events;
+        this.database = options.dataSource;
+    }
+    // -------------------------------------------------------------------------------------------
+    // Organizations
+    // -------------------------------------------------------------------------------------------
+    /**
+     * Creates an organization; the creator becomes its owner.
+     *
+     * @param userId - The creator.
+     * @param details - Name and URL-friendly slug.
+     * @param isAppAdmin - Lets app admins create one even when users may not.
+     * @param request - Who is asking (for the audit log).
+     * @returns The new organization.
+     * @throws AuthError FORBIDDEN when users may not create organizations.
+     * @throws AuthError ORGANIZATION_SLUG_TAKEN when the slug is in use.
+     * @throws AuthError VALIDATION_ERROR when the user is already in too many organizations.
+     */
+    async createOrganization(userId, details, isAppAdmin, request) {
+        const settings = await this.assertOrganizationsEnabled();
+        if (!settings.organizations.allowUsersToCreate && !isAppAdmin)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.forbidden);
+        const membershipCount = await this.database.getRepository(entities_1.OrganizationMemberEntity).count({ where: { userId } });
+        if (membershipCount >= constants_1.MAXIMUM_ORGANIZATIONS_PER_USER)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.validationFailed, { problems: [constants_1.VALIDATION_PROBLEM.tooManyOrganizations] });
+        const organization = await this.database.transaction(async (transaction) => {
+            const createdOrganization = await this.translateUniqueViolation(transaction.save(entities_1.OrganizationEntity, { name: details.name.trim(), slug: details.slug, metadata: {}, createdByUserId: userId }), constants_1.AUTH_ERRORS.organizationSlugTaken);
+            await transaction.insert(entities_1.OrganizationMemberEntity, { organizationId: createdOrganization.id, userId, role: constants_1.ORGANIZATION_ROLE.owner });
+            return createdOrganization;
+        });
+        await this.events.record({ name: constants_1.AUTH_EVENTS.organizationCreated, userId, request, details: { organizationId: organization.id } });
+        return organization;
+    }
+    /**
+     * The organizations the user belongs to, with their role in each.
+     *
+     * @param userId - The signed-in user.
+     * @returns The organizations, sorted by name.
+     */
+    async listMyOrganizations(userId) {
+        const rows = await this.database.query(`SELECT o.id, o.name, o.slug, o.metadata, m.role, m.created_at AS joined_at
+         FROM auth_organization_members m
+         JOIN auth_organizations o ON o.id = m.organization_id
+        WHERE m.user_id = $1
+        ORDER BY o.name`, [userId]);
+        return rows.map((row) => ({
+            id: row.id,
+            name: row.name,
+            slug: row.slug,
+            metadata: row.metadata,
+            role: row.role,
+            joinedAt: new Date(row.joined_at).toISOString(),
+        }));
+    }
+    /**
+     * @param organizationId - The organization.
+     * @param userId - The signed-in user, who must be a member.
+     * @returns The organization plus `myRole`.
+     * @throws AuthError NOT_FOUND when it doesn't exist or the user isn't a member.
+     */
+    async getOrganization(organizationId, userId) {
+        const membership = await this.requireRole(organizationId, userId, constants_1.ORGANIZATION_ROLE.member);
+        const organization = await this.database.getRepository(entities_1.OrganizationEntity).findOne({ where: { id: organizationId } });
+        if (!organization)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.notFound);
+        return { ...organization, myRole: membership.role };
+    }
+    /**
+     * Changes the name, slug or metadata. Admins and owners only.
+     *
+     * @param organizationId - The organization.
+     * @param userId - The signed-in user.
+     * @param changes - The fields to change.
+     * @param request - Who is asking (for the audit log).
+     * @returns The updated organization.
+     * @throws AuthError FORBIDDEN for plain members.
+     * @throws AuthError ORGANIZATION_SLUG_TAKEN when the new slug is in use.
+     */
+    async updateOrganization(organizationId, userId, changes, request) {
+        await this.requireRole(organizationId, userId, constants_1.ORGANIZATION_ROLE.admin);
+        const repository = this.database.getRepository(entities_1.OrganizationEntity);
+        const organization = await repository.findOne({ where: { id: organizationId } });
+        if (!organization)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.notFound);
+        if (changes.name !== undefined)
+            organization.name = changes.name.trim();
+        if (changes.slug !== undefined)
+            organization.slug = changes.slug;
+        if (changes.metadata !== undefined)
+            organization.metadata = changes.metadata;
+        const savedOrganization = await this.translateUniqueViolation(repository.save(organization), constants_1.AUTH_ERRORS.organizationSlugTaken);
+        await this.events.record({ name: constants_1.AUTH_EVENTS.organizationUpdated, userId, request, details: { organizationId } });
+        return savedOrganization;
+    }
+    /**
+     * Deletes the organization. Owners only. Members, invitations and API keys of the organization go with it.
+     *
+     * @param organizationId - The organization.
+     * @param userId - The signed-in user.
+     * @param request - Who is asking (for the audit log).
+     * @returns `{ success: true }`.
+     * @throws AuthError FORBIDDEN unless the user is an owner.
+     */
+    async deleteOrganization(organizationId, userId, request) {
+        await this.requireRole(organizationId, userId, constants_1.ORGANIZATION_ROLE.owner);
+        await this.database.getRepository(entities_1.OrganizationEntity).delete({ id: organizationId });
+        await this.events.record({ name: constants_1.AUTH_EVENTS.organizationDeleted, userId, request, details: { organizationId } });
+        return { success: true };
+    }
+    // -------------------------------------------------------------------------------------------
+    // Members
+    // -------------------------------------------------------------------------------------------
+    /**
+     * @param organizationId - The organization.
+     * @param userId - The signed-in user, who must be a member.
+     * @returns The members with their names, emails and roles, oldest first.
+     */
+    async listMembers(organizationId, userId) {
+        await this.requireRole(organizationId, userId, constants_1.ORGANIZATION_ROLE.member);
+        const rows = await this.database.query(`SELECT u.id AS user_id, u.email, u.first_name, u.last_name, m.role, m.created_at AS joined_at
+         FROM auth_organization_members m
+         JOIN auth_users u ON u.id = m.user_id
+        WHERE m.organization_id = $1
+        ORDER BY m.created_at`, [organizationId]);
+        return rows.map((row) => ({
+            userId: row.user_id,
+            email: row.email,
+            firstName: row.first_name,
+            lastName: row.last_name,
+            role: row.role,
+            joinedAt: new Date(row.joined_at).toISOString(),
+        }));
+    }
+    /**
+     * Changes a member's role. Admins manage members and admins; only owners can make or unmake owners.
+     *
+     * @param organizationId - The organization.
+     * @param actorUserId - The signed-in user doing it.
+     * @param targetUserId - The member whose role changes.
+     * @param newRole - "owner", "admin" or "member".
+     * @param request - Who is asking (for the audit log).
+     * @returns `{ success: true }`.
+     * @throws AuthError FORBIDDEN when the actor may not make this change.
+     * @throws AuthError LAST_OWNER when this would leave the organization without an owner.
+     */
+    async changeMemberRole(organizationId, actorUserId, targetUserId, newRole, request) {
+        const actor = await this.requireRole(organizationId, actorUserId, constants_1.ORGANIZATION_ROLE.admin);
+        const target = await this.findMembership(organizationId, targetUserId);
+        if (!target)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.notFound);
+        this.assertMayManage(actor.role, target.role, newRole);
+        if (target.role === constants_1.ORGANIZATION_ROLE.owner && newRole !== constants_1.ORGANIZATION_ROLE.owner)
+            await this.assertNotLastOwner(organizationId);
+        await this.database.getRepository(entities_1.OrganizationMemberEntity).update({ id: target.id }, { role: newRole });
+        await this.events.record({
+            name: constants_1.AUTH_EVENTS.organizationMemberRoleChanged,
+            userId: targetUserId,
+            performedBy: constants_1.PERFORMED_BY.user(actorUserId),
+            request,
+            details: { organizationId, previousRole: target.role, role: newRole },
+        });
+        return { success: true };
+    }
+    /**
+     * Removes a member. Anyone may leave by removing themselves (unless they are the last owner).
+     * The member's devices stop working in this organization.
+     *
+     * @param organizationId - The organization.
+     * @param actorUserId - The signed-in user doing it.
+     * @param targetUserId - The member to remove (the actor themselves to leave).
+     * @param request - Who is asking (for the audit log).
+     * @returns `{ success: true }`.
+     * @throws AuthError FORBIDDEN when the actor may not remove this member.
+     * @throws AuthError LAST_OWNER when removing the last owner.
+     */
+    async removeMember(organizationId, actorUserId, targetUserId, request) {
+        const target = await this.findMembership(organizationId, targetUserId);
+        if (!target)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.notFound);
+        if (actorUserId !== targetUserId) {
+            const actor = await this.requireRole(organizationId, actorUserId, constants_1.ORGANIZATION_ROLE.admin);
+            this.assertMayManage(actor.role, target.role, target.role);
+        }
+        if (target.role === constants_1.ORGANIZATION_ROLE.owner)
+            await this.assertNotLastOwner(organizationId);
+        await this.database.getRepository(entities_1.OrganizationMemberEntity).delete({ id: target.id });
+        await this.clearActiveOrganization(targetUserId, organizationId);
+        await this.events.record({
+            name: constants_1.AUTH_EVENTS.organizationMemberRemoved,
+            userId: targetUserId,
+            performedBy: constants_1.PERFORMED_BY.user(actorUserId),
+            request,
+            details: { organizationId },
+        });
+        return { success: true };
+    }
+    // -------------------------------------------------------------------------------------------
+    // Invitations
+    // -------------------------------------------------------------------------------------------
+    /**
+     * Emails an invitation link. The invited person accepts it after signing in with that email.
+     * A new invitation replaces any open one for the same email.
+     *
+     * @param organizationId - The organization.
+     * @param actorUserId - The signed-in user doing it.
+     * @param typedEmail - Who to invite.
+     * @param role - The role they get when they accept.
+     * @param request - Who is asking (for the audit log).
+     * @returns `{ success: true }`.
+     * @throws AuthError FORBIDDEN for plain members, or when an admin tries to invite an owner.
+     */
+    async inviteMember(organizationId, actorUserId, typedEmail, role, request) {
+        const settings = await this.assertOrganizationsEnabled();
+        const actor = await this.requireRole(organizationId, actorUserId, constants_1.ORGANIZATION_ROLE.admin);
+        this.assertMayManage(actor.role, constants_1.ORGANIZATION_ROLE.member, role);
+        const email = (0, identifiers_1.normalizeEmail)(typedEmail);
+        const organization = await this.database.getRepository(entities_1.OrganizationEntity).findOneOrFail({ where: { id: organizationId } });
+        const inviter = await this.database.getRepository(entities_1.UserEntity).findOne({ where: { id: actorUserId } });
+        const { plainToken, tokenHash } = (0, random_secrets_1.createRandomToken)(constants_1.TOKEN_PREFIX.organizationInvitation);
+        await this.database.transaction(async (transaction) => {
+            // A new invitation replaces any open one for the same email.
+            await transaction.update(entities_1.OrganizationInvitationEntity, { organizationId, email, acceptedAt: (0, typeorm_1.IsNull)(), revokedAt: (0, typeorm_1.IsNull)() }, { revokedAt: new Date() });
+            await transaction.insert(entities_1.OrganizationInvitationEntity, {
+                organizationId,
+                email,
+                role,
+                tokenHash,
+                invitedByUserId: actorUserId,
+                expiresAt: new Date(Date.now() + settings.organizations.invitationExpiresInDays * constants_1.DAY_IN_SECONDS * constants_1.SECOND_IN_MILLISECONDS),
+            });
+        });
+        await this.notifications.sendRequiredEmail({
+            type: constants_1.EMAIL_TYPE.organizationInvitation,
+            to: email,
+            token: plainToken,
+            organizationName: organization.name,
+            invitedByName: [inviter?.firstName, inviter?.lastName].filter(Boolean).join(constants_1.DISPLAY_NAME_SEPARATOR) || null,
+        });
+        await this.events.record({
+            name: constants_1.AUTH_EVENTS.organizationInvitationSent,
+            userId: actorUserId,
+            request,
+            details: { organizationId, role },
+        });
+        return { success: true };
+    }
+    /**
+     * @param organizationId - The organization.
+     * @param actorUserId - The signed-in user, who must be an admin or owner.
+     * @returns Open invitations (not accepted or revoked), newest first, without their token hashes.
+     */
+    async listInvitations(organizationId, actorUserId) {
+        await this.requireRole(organizationId, actorUserId, constants_1.ORGANIZATION_ROLE.admin);
+        const invitations = await this.database.getRepository(entities_1.OrganizationInvitationEntity).find({
+            where: { organizationId, acceptedAt: (0, typeorm_1.IsNull)(), revokedAt: (0, typeorm_1.IsNull)() },
+            order: { createdAt: constants_1.SORT_ORDER.newestFirst },
+        });
+        return invitations.map(({ tokenHash: _hiddenHash, ...invitation }) => invitation);
+    }
+    /**
+     * Cancels an open invitation; its link stops working.
+     *
+     * @param organizationId - The organization.
+     * @param actorUserId - The signed-in user doing it.
+     * @param invitationId - The invitation.
+     * @returns `{ success: true }`.
+     * @throws AuthError NOT_FOUND when there is no open invitation with this id.
+     */
+    async revokeInvitation(organizationId, actorUserId, invitationId) {
+        await this.requireRole(organizationId, actorUserId, constants_1.ORGANIZATION_ROLE.admin);
+        const result = await this.database
+            .getRepository(entities_1.OrganizationInvitationEntity)
+            .update({ id: invitationId, organizationId, acceptedAt: (0, typeorm_1.IsNull)(), revokedAt: (0, typeorm_1.IsNull)() }, { revokedAt: new Date() });
+        if (!result.affected)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.notFound);
+        return { success: true };
+    }
+    /**
+     * Accepts an invitation. The signed-in user's VERIFIED email must be the invited email, so a
+     * forwarded or leaked link can't be used by someone else.
+     *
+     * @param userId - The signed-in user.
+     * @param invitationToken - The token from the invitation link.
+     * @param request - Who is asking (for the audit log).
+     * @returns The organization joined and the role given.
+     * @throws AuthError INVALID_TOKEN when the link is unknown, used, expired or for another email.
+     * @throws AuthError ALREADY_MEMBER when the user is already in the organization.
+     */
+    async acceptInvitation(userId, invitationToken, request) {
+        await this.assertOrganizationsEnabled();
+        if (!(0, random_secrets_1.hasRandomTokenFormat)(invitationToken, constants_1.TOKEN_PREFIX.organizationInvitation))
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.invalidOrExpiredLink);
+        const invitations = this.database.getRepository(entities_1.OrganizationInvitationEntity);
+        const invitation = await invitations.findOne({
+            where: { tokenHash: (0, random_secrets_1.sha256Hex)(invitationToken), acceptedAt: (0, typeorm_1.IsNull)(), revokedAt: (0, typeorm_1.IsNull)() },
+        });
+        if (!invitation || invitation.expiresAt.getTime() <= Date.now())
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.invalidOrExpiredLink);
+        const user = await this.database.getRepository(entities_1.UserEntity).findOne({ where: { id: userId } });
+        if (!user || user.email !== invitation.email || !user.isEmailVerified)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.invalidOrExpiredLink);
+        await this.database.transaction(async (transaction) => {
+            const claimed = await transaction.update(entities_1.OrganizationInvitationEntity, { id: invitation.id, acceptedAt: (0, typeorm_1.IsNull)() }, { acceptedAt: new Date() });
+            if (!claimed.affected)
+                throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.invalidOrExpiredLink);
+            await this.translateUniqueViolation(transaction.insert(entities_1.OrganizationMemberEntity, { organizationId: invitation.organizationId, userId, role: invitation.role }), constants_1.AUTH_ERRORS.alreadyOrganizationMember);
+        });
+        await this.events.record({
+            name: constants_1.AUTH_EVENTS.organizationMemberAdded,
+            userId,
+            request,
+            details: { organizationId: invitation.organizationId, role: invitation.role },
+        });
+        return { success: true, organizationId: invitation.organizationId, role: invitation.role };
+    }
+    // -------------------------------------------------------------------------------------------
+    // Active organization
+    // -------------------------------------------------------------------------------------------
+    /**
+     * Picks the organization this device works in. The new access token carries "org_id" and "org_role".
+     *
+     * @param userId - The signed-in user.
+     * @param sessionId - This device's session.
+     * @param organizationId - The organization to switch to, or null for none.
+     * @returns A new access token and its lifetime.
+     * @throws AuthError NOT_FOUND when the user isn't a member of that organization.
+     */
+    async switchActiveOrganization(userId, sessionId, organizationId) {
+        const settings = await this.assertOrganizationsEnabled();
+        if (organizationId)
+            await this.requireRole(organizationId, userId, constants_1.ORGANIZATION_ROLE.member);
+        const { accessToken, expiresIn } = await this.sessions.switchActiveOrganization(sessionId, organizationId, settings);
+        return { success: true, accessToken, expiresIn, organizationId };
+    }
+    // -------------------------------------------------------------------------------------------
+    /**
+     * @returns The current settings.
+     * @throws AuthError FEATURE_DISABLED when organizations are turned off.
+     */
+    async assertOrganizationsEnabled() {
+        const settings = await this.settingsService.getSettings();
+        if (!settings.organizations.enabled)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.featureDisabled);
+        return settings;
+    }
+    /**
+     * @param organizationId - The organization.
+     * @param userId - The user.
+     * @returns The membership row, or null if the user isn't a member.
+     */
+    findMembership(organizationId, userId) {
+        return this.database.getRepository(entities_1.OrganizationMemberEntity).findOne({ where: { organizationId, userId } });
+    }
+    /**
+     * Checks that the user is a member with at least `minimumRole` (owner > admin > member).
+     *
+     * @param organizationId - The organization.
+     * @param userId - The user.
+     * @param minimumRole - The lowest role allowed.
+     * @returns The user's membership.
+     * @throws AuthError NOT_FOUND when the user is not a member (so outsiders can't probe which organizations exist).
+     * @throws AuthError FORBIDDEN when their role is too low.
+     */
+    async requireRole(organizationId, userId, minimumRole) {
+        await this.assertOrganizationsEnabled();
+        const membership = await this.findMembership(organizationId, userId);
+        // "Not found" rather than "forbidden", so outsiders can't probe which organizations exist.
+        if (!membership)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.notFound);
+        if (constants_1.ORGANIZATION_ROLE_RANK[membership.role] < constants_1.ORGANIZATION_ROLE_RANK[minimumRole])
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.forbidden);
+        return membership;
+    }
+    /**
+     * Admins may act on members and admins; anything touching an owner needs an owner.
+     *
+     * @param actorRole - The role of the user making the change.
+     * @param currentRole - The target's role now.
+     * @param newRole - The target's role after the change.
+     * @throws AuthError FORBIDDEN when the actor may not make this change.
+     */
+    assertMayManage(actorRole, currentRole, newRole) {
+        const touchesOwner = currentRole === constants_1.ORGANIZATION_ROLE.owner || newRole === constants_1.ORGANIZATION_ROLE.owner;
+        if (touchesOwner && actorRole !== constants_1.ORGANIZATION_ROLE.owner)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.forbidden);
+    }
+    /**
+     * @param organizationId - The organization.
+     * @throws AuthError LAST_OWNER when the organization has only one owner left.
+     */
+    async assertNotLastOwner(organizationId) {
+        const ownerCount = await this.database.getRepository(entities_1.OrganizationMemberEntity).count({ where: { organizationId, role: constants_1.ORGANIZATION_ROLE.owner } });
+        if (ownerCount <= 1)
+            throw new auth_error_1.AuthError(constants_1.AUTH_ERRORS.lastOrganizationOwner);
+    }
+    /**
+     * A removed member's devices stop working in that organization.
+     *
+     * @param userId - The removed member.
+     * @param organizationId - The organization they left.
+     */
+    async clearActiveOrganization(userId, organizationId) {
+        await this.database.query(`UPDATE auth_sessions SET active_organization_id = NULL WHERE user_id = $1 AND active_organization_id = $2`, [userId, organizationId]);
+    }
+    /**
+     * Runs a database write and turns a "duplicate value" error into a friendly AuthError.
+     *
+     * @param operation - The write to wait for.
+     * @param errorOnDuplicate - The error to throw when Postgres refuses a duplicate.
+     * @returns What the write returned.
+     * @throws AuthError `errorOnDuplicate` on a duplicate; any other error is re-thrown as is.
+     */
+    async translateUniqueViolation(operation, errorOnDuplicate) {
+        try {
+            return await operation;
+        }
+        catch (error) {
+            const code = error.code;
+            if (error instanceof typeorm_1.QueryFailedError && code === constants_1.POSTGRES_UNIQUE_VIOLATION_CODE)
+                throw new auth_error_1.AuthError(errorOnDuplicate);
+            throw error;
+        }
+    }
+};
+exports.OrganizationsService = OrganizationsService;
+exports.OrganizationsService = OrganizationsService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(constants_1.AUTH_OPTIONS_TOKEN)),
+    __metadata("design:paramtypes", [Object, settings_service_1.SettingsService,
+        session_service_1.SessionService,
+        notifications_service_1.NotificationsService,
+        auth_events_service_1.AuthEventsService])
+], OrganizationsService);
+//# sourceMappingURL=organizations.service.js.map

package/dist/features/organizations/organizations.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.service.js","sourceRoot":"","sources":["../../../src/features/organizations/organizations.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,qCAA+D;AAE/D,oDAAgD;AAChD,mEAAoG;AACpG,sDAAsD;AAEtD,2CAkBqB;AACrB,kDAK6B;AAC7B,+EAA0E;AAC1E,0FAAsF;AACtF,yEAAqE;AACrE,2EAAuE;AASvE;;;;;;;;;;GAUG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAKZ;IACA;IACA;IACA;IAPF,QAAQ,CAAa;IAEtC,YAC8B,OAAoB,EAC/B,eAAgC,EAChC,QAAwB,EACxB,aAAmC,EACnC,MAAyB;QAHzB,oBAAe,GAAf,eAAe,CAAiB;QAChC,aAAQ,GAAR,QAAQ,CAAgB;QACxB,kBAAa,GAAb,aAAa,CAAsB;QACnC,WAAM,GAAN,MAAM,CAAmB;QAE1C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IACrC,CAAC;IAED,8FAA8F;IAC9F,gBAAgB;IAChB,8FAA8F;IAE9F;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,OAA6D,EAAE,UAAmB,EAAE,OAAuB;QAClJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,kBAAkB,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,SAAS,CAAC,CAAC;QAC1G,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,mCAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjH,IAAI,eAAe,IAAI,0CAA8B;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,CAAC,8BAAkB,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAElK,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;YACzE,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAC7D,WAAW,CAAC,IAAI,CAAC,6BAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,EAC9H,uBAAW,CAAC,qBAAqB,CAClC,CAAC;YACF,MAAM,WAAW,CAAC,MAAM,CAAC,mCAAwB,EAAE,EAAE,cAAc,EAAE,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,6BAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;YACtI,OAAO,mBAAmB,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,uBAAW,CAAC,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACnI,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,MAAM,IAAI,GAA+B,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAChE;;;;wBAIkB,EAClB,CAAC,MAAM,CAAC,CACT,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,GAAG,CAAC,IAAwB;YAClC,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,cAAsB,EAAE,MAAc;QAC1D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,6BAAiB,CAAC,MAAM,CAAC,CAAC;QAC5F,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,6BAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QACtH,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,QAAQ,CAAC,CAAC;QAC7D,OAAO,EAAE,GAAG,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,kBAAkB,CAAC,cAAsB,EAAE,MAAc,EAAE,OAA4B,EAAE,OAAuB;QACpH,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,6BAAiB,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,6BAAkB,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,QAAQ,CAAC,CAAC;QAE7D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACxE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,YAAY,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC7E,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,uBAAW,CAAC,qBAAqB,CAAC,CAAC;QAChI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,uBAAW,CAAC,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAClH,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,kBAAkB,CAAC,cAAsB,EAAE,MAAc,EAAE,OAAuB;QACtF,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,6BAAiB,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,6BAAkB,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,uBAAW,CAAC,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAClH,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;IACpC,CAAC;IAED,8FAA8F;IAC9F,UAAU;IACV,8FAA8F;IAE9F;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,MAAc;QACtD,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,6BAAiB,CAAC,MAAM,CAAC,CAAC;QACzE,MAAM,IAAI,GAA+B,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAChE;;;;8BAIwB,EACxB,CAAC,cAAc,CAAC,CACjB,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,IAAI,EAAE,GAAG,CAAC,IAAwB;YAClC,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,gBAAgB,CAAC,cAAsB,EAAE,WAAmB,EAAE,YAAoB,EAAE,OAAyB,EAAE,OAAuB;QAC1I,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,EAAE,6BAAiB,CAAC,KAAK,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,IAAI,KAAK,6BAAiB,CAAC,KAAK,IAAI,OAAO,KAAK,6BAAiB,CAAC,KAAK;YAAE,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAElI,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,mCAAwB,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACzG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACvB,IAAI,EAAE,uBAAW,CAAC,6BAA6B;YAC/C,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,wBAAY,CAAC,IAAI,CAAC,WAAW,CAAC;YAC3C,OAAO;YACP,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;SACtE,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,YAAY,CAAC,cAAsB,EAAE,WAAmB,EAAE,YAAoB,EAAE,OAAuB;QAC3G,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,EAAE,6BAAiB,CAAC,KAAK,CAAC,CAAC;YAC3F,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,6BAAiB,CAAC,KAAK;YAAE,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAE3F,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,mCAAwB,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACvB,IAAI,EAAE,uBAAW,CAAC,yBAAyB;YAC3C,MAAM,EAAE,YAAY;YACpB,WAAW,EAAE,wBAAY,CAAC,IAAI,CAAC,WAAW,CAAC;YAC3C,OAAO;YACP,OAAO,EAAE,EAAE,cAAc,EAAE;SAC5B,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;IACpC,CAAC;IAED,8FAA8F;IAC9F,cAAc;IACd,8FAA8F;IAE9F;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,YAAY,CAAC,cAAsB,EAAE,WAAmB,EAAE,UAAmB,EAAE,IAAsB,EAAE,OAAuB;QAClI,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,EAAE,6BAAiB,CAAC,KAAK,CAAC,CAAC;QAC3F,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,6BAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAA,4BAAc,EAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,6BAAkB,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAC5H,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,qBAAU,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACtG,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAA,kCAAiB,EAAC,wBAAY,CAAC,sBAAsB,CAAC,CAAC;QAEzF,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;YACpD,6DAA6D;YAC7D,MAAM,WAAW,CAAC,MAAM,CACtB,uCAA4B,EAC5B,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,IAAA,gBAAM,GAAE,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE,EACpE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAC1B,CAAC;YACF,MAAM,WAAW,CAAC,MAAM,CAAC,uCAA4B,EAAE;gBACrD,cAAc;gBACd,KAAK;gBACL,IAAI;gBACJ,SAAS;gBACT,eAAe,EAAE,WAAW;gBAC5B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,uBAAuB,GAAG,0BAAc,GAAG,kCAAsB,CAAC;aAC3H,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC;YACzC,IAAI,EAAE,sBAAU,CAAC,sBAAsB;YACvC,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,UAAU;YACjB,gBAAgB,EAAE,YAAY,CAAC,IAAI;YACnC,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kCAAsB,CAAC,IAAI,IAAI;SAC5G,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACvB,IAAI,EAAE,uBAAW,CAAC,0BAA0B;YAC5C,MAAM,EAAE,WAAW;YACnB,OAAO;YACP,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;SAClC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,cAAsB,EAAE,WAAmB;QAC/D,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,EAAE,6BAAiB,CAAC,KAAK,CAAC,CAAC;QAC7E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,uCAA4B,CAAC,CAAC,IAAI,CAAC;YACvF,KAAK,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,IAAA,gBAAM,GAAE,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE;YACpE,KAAK,EAAE,EAAE,SAAS,EAAE,sBAAU,CAAC,WAAW,EAAE;SAC7C,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;IACpF,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,gBAAgB,CAAC,cAAsB,EAAE,WAAmB,EAAE,YAAoB;QACtF,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,EAAE,6BAAiB,CAAC,KAAK,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ;aAC/B,aAAa,CAAC,uCAA4B,CAAC;aAC3C,MAAM,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,IAAA,gBAAM,GAAE,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACtH,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,QAAQ,CAAC,CAAC;QAChE,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;IACpC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,eAAwB,EAAE,OAAuB;QACtF,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxC,IAAI,CAAC,IAAA,qCAAoB,EAAC,eAAe,EAAE,wBAAY,CAAC,sBAAsB,CAAC;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,oBAAoB,CAAC,CAAC;QACvI,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,uCAA4B,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,EAAE,SAAS,EAAE,IAAA,0BAAS,EAAC,eAAe,CAAC,EAAE,UAAU,EAAE,IAAA,gBAAM,GAAE,EAAE,SAAS,EAAE,IAAA,gBAAM,GAAE,EAAE;SAC5F,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,oBAAoB,CAAC,CAAC;QAEvH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,qBAAU,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,oBAAoB,CAAC,CAAC;QAE7H,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CACtC,uCAA4B,EAC5B,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,IAAA,gBAAM,GAAE,EAAE,EAC3C,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAC3B,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,oBAAoB,CAAC,CAAC;YAC7E,MAAM,IAAI,CAAC,wBAAwB,CACjC,WAAW,CAAC,MAAM,CAAC,mCAAwB,EAAE,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,EAC1H,uBAAW,CAAC,yBAAyB,CACtC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACvB,IAAI,EAAE,uBAAW,CAAC,uBAAuB;YACzC,MAAM;YACN,OAAO;YACP,OAAO,EAAE,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE;SAC9E,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;IACtG,CAAC;IAED,8FAA8F;IAC9F,sBAAsB;IACtB,8FAA8F;IAE9F;;;;;;;;OAQG;IACH,KAAK,CAAC,wBAAwB,CAAC,MAAc,EAAE,SAAiB,EAAE,cAA6B;QAC7F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACzD,IAAI,cAAc;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,6BAAiB,CAAC,MAAM,CAAC,CAAC;QAC7F,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QACrH,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5E,CAAC;IAED,8FAA8F;IAE9F;;;OAGG;IACK,KAAK,CAAC,0BAA0B;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,eAAe,CAAC,CAAC;QACtF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,cAAsB,EAAE,MAAc;QAC3D,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,mCAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,MAAc,EAAE,WAA6B;QAC7F,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACrE,2FAA2F;QAC3F,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,kCAAsB,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,kCAAsB,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,SAAS,CAAC,CAAC;QAC9H,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;;;;OAOG;IACK,eAAe,CAAC,SAA2B,EAAE,WAA6B,EAAE,OAAyB;QAC3G,MAAM,YAAY,GAAG,WAAW,KAAK,6BAAiB,CAAC,KAAK,IAAI,OAAO,KAAK,6BAAiB,CAAC,KAAK,CAAC;QACpG,IAAI,YAAY,IAAI,SAAS,KAAK,6BAAiB,CAAC,KAAK;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,SAAS,CAAC,CAAC;IACxG,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,kBAAkB,CAAC,cAAsB;QACrD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,mCAAwB,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,6BAAiB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnJ,IAAI,UAAU,IAAI,CAAC;YAAE,MAAM,IAAI,sBAAS,CAAC,uBAAW,CAAC,qBAAqB,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,uBAAuB,CAAC,MAAc,EAAE,cAAsB;QAC1E,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CACvB,2GAA2G,EAC3G,CAAC,MAAM,EAAE,cAAc,CAAC,CACzB,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,wBAAwB,CAAI,SAAqB,EAAE,gBAAqC;QACpG,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA8C,CAAC,IAAI,CAAC;YAClE,IAAI,KAAK,YAAY,0BAAgB,IAAI,IAAI,KAAK,0CAA8B;gBAAE,MAAM,IAAI,sBAAS,CAAC,gBAAgB,CAAC,CAAC;YACxH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAjdY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,8BAAkB,CAAC,CAAA;6CACO,kCAAe;QACtB,gCAAc;QACT,4CAAoB;QAC3B,uCAAiB;GARjC,oBAAoB,CAidhC"}

package/dist/features/passkeys/passkeys.controller.d.ts

@@ -0,0 +1,92 @@
+import { RequestContext } from '../../common/request-context.js';
+import { FinishPasskeyCeremonyInput, RenamePasskeyInput } from './passkeys.dto';
+import { PasskeysService } from './passkeys.service';
+/**
+ * Passkeys.
+ *
+ *   POST   /auth/passkeys/register/options   signed in: start adding a passkey
+ *   POST   /auth/passkeys/register/verify    signed in: finish adding it
+ *   POST   /auth/passkeys/sign-in/options    start signing in with a passkey
+ *   POST   /auth/passkeys/sign-in/verify     finish signing in
+ *   GET    /auth/passkeys                    list my passkeys
+ *   PATCH  /auth/passkeys/:id                rename
+ *   DELETE /auth/passkeys/:id                remove
+ */
+export declare class PasskeysController {
+    private readonly passkeys;
+    constructor(passkeys: PasskeysService);
+    /**
+     * POST /auth/passkeys/register/options — Starts adding a passkey.
+     *
+     * @param userId - From the access token.
+     * @returns Options for the device and a challenge token.
+     */
+    startRegistration(userId: string): Promise<{
+        success: true;
+        challengeToken: string;
+        options: import("@simplewebauthn/server").PublicKeyCredentialCreationOptionsJSON;
+    }>;
+    /**
+     * POST /auth/passkeys/register/verify — Finishes adding a passkey.
+     *
+     * @param userId - From the access token.
+     * @param body - `{ challengeToken, response, name? }`.
+     * @param request - Who is asking.
+     * @returns The saved passkey.
+     */
+    finishRegistration(userId: string, body: FinishPasskeyCeremonyInput, request: RequestContext): Promise<{
+        success: true;
+        passkey: import("./passkeys.service").PasskeySummary;
+    }>;
+    /**
+     * POST /auth/passkeys/sign-in/options — Starts signing in with a passkey. Public.
+     *
+     * @param request - Who is asking.
+     * @returns Options for the device and a challenge token.
+     */
+    startSignIn(request: RequestContext): Promise<{
+        success: true;
+        challengeToken: string;
+        options: import("@simplewebauthn/server").PublicKeyCredentialRequestOptionsJSON;
+    }>;
+    /**
+     * POST /auth/passkeys/sign-in/verify — Finishes signing in with a passkey. Public.
+     *
+     * @param body - `{ challengeToken, response }`.
+     * @param request - Who is asking.
+     * @returns Tokens.
+     */
+    finishSignIn(body: FinishPasskeyCeremonyInput, request: RequestContext): Promise<import("../..").SignInResult>;
+    /**
+     * GET /auth/passkeys — The signed-in user's passkeys.
+     *
+     * @param userId - From the access token.
+     * @returns The passkeys.
+     */
+    list(userId: string): Promise<{
+        success: boolean;
+        passkeys: import("./passkeys.service").PasskeySummary[];
+    }>;
+    /**
+     * PATCH /auth/passkeys/:passkeyId — Renames a passkey.
+     *
+     * @param userId - From the access token.
+     * @param passkeyId - From the URL.
+     * @param body - `{ name }`.
+     * @returns `{ success: true }`.
+     */
+    rename(userId: string, passkeyId: string, body: RenamePasskeyInput): Promise<{
+        success: true;
+    }>;
+    /**
+     * DELETE /auth/passkeys/:passkeyId — Removes a passkey.
+     *
+     * @param userId - From the access token.
+     * @param passkeyId - From the URL.
+     * @param request - Who is asking.
+     * @returns `{ success: true }`.
+     */
+    remove(userId: string, passkeyId: string, request: RequestContext): Promise<{
+        success: true;
+    }>;
+}