@things-factory/auth-base 10.1.205 → 10.1.208

package/dist-server/service/web-auth-credential/web-auth-credential.d.ts

@@ -6,8 +6,12 @@ export declare class WebAuthCredential {
     credentialId: string;
     publicKey: string;
     counter: number;
+    name?: string;
+    transports?: string[];
+    lastUsedAt?: Date;
     createdAt?: Date;
     updatedAt?: Date;
+    deletedAt?: Date;
     creator?: User;
     creatorId?: string;
     updater?: User;

package/dist-server/service/web-auth-credential/web-auth-credential.js

@@ -37,6 +37,21 @@ tslib_1.__decorate([
     (0, type_graphql_1.Field)({ nullable: true, description: 'The signature counter, used to prevent replay attacks.' }),
     tslib_1.__metadata("design:type", Number)
 ], WebAuthCredential.prototype, "counter", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: "The owner's label for this passkey, such as the device it was made on." }),
+    tslib_1.__metadata("design:type", String)
+], WebAuthCredential.prototype, "name", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('simple-array', { nullable: true }),
+    (0, type_graphql_1.Field)(type => [String], { nullable: true, description: 'How the authenticator can be reached: usb, nfc, ble, hybrid, internal.' }),
+    tslib_1.__metadata("design:type", Array)
+], WebAuthCredential.prototype, "transports", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'When this passkey was last used to sign in.' }),
+    tslib_1.__metadata("design:type", Date)
+], WebAuthCredential.prototype, "lastUsedAt", void 0);
 tslib_1.__decorate([
     (0, typeorm_1.CreateDateColumn)(),
     (0, type_graphql_1.Field)({ nullable: true, description: 'The timestamp when the credential was created.' }),
@@ -45,8 +60,15 @@ tslib_1.__decorate([
 tslib_1.__decorate([
     (0, typeorm_1.UpdateDateColumn)(),
     (0, type_graphql_1.Field)({ nullable: true, description: 'The timestamp when the credential was last updated.' }),
-    tslib_1.__metadata("design:type", Date)
+    tslib_1.__metadata("design:type", Date
+    /* A removed passkey signs nobody in - every find skips it. */
+    )
 ], WebAuthCredential.prototype, "updatedAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.DeleteDateColumn)(),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'When the credential was removed.' }),
+    tslib_1.__metadata("design:type", Date)
+], WebAuthCredential.prototype, "deletedAt", void 0);
 tslib_1.__decorate([
     (0, typeorm_1.ManyToOne)(type => user_js_1.User, { nullable: true }),
     (0, type_graphql_1.Field)(type => user_js_1.User, { nullable: true, description: 'The user who created the credential.' }),
@@ -67,7 +89,7 @@ tslib_1.__decorate([
 ], WebAuthCredential.prototype, "updaterId", void 0);
 exports.WebAuthCredential = WebAuthCredential = tslib_1.__decorate([
     (0, typeorm_1.Entity)(),
-    (0, typeorm_1.Index)('ix_web_auth_credential_0', (webAuthCredential) => [webAuthCredential.user, webAuthCredential.credentialId], { unique: true }),
+    (0, typeorm_1.Index)('ix_web_auth_credential_0', (webAuthCredential) => [webAuthCredential.user, webAuthCredential.credentialId], { unique: true, where: '"deleted_at" IS NULL' }),
     (0, type_graphql_1.ObjectType)({ description: 'Represents a WebAuthn credential for passwordless authentication.' })
 ], WebAuthCredential);
 //# sourceMappingURL=web-auth-credential.js.map

package/dist-server/service/web-auth-credential/web-auth-credential.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-auth-credential.js","sourceRoot":"","sources":["../../../server/service/web-auth-credential/web-auth-credential.ts"],"names":[],"mappings":";;;;AAAA,+CAAoD;AACpD,qCASgB;AAEhB,6CAAsC;AAS/B,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;CA6C7B,CAAA;AA7CY,8CAAiB;AAGnB;IAFR,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,iBAAE,EAAE,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;;6CACzD;AAInB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;sCAC3F,cAAI;+CAAA;AAGX;IADC,IAAA,oBAAU,EAAC,CAAC,iBAAoC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;;iDAC9D;AAIf;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,mEAAmE,EAAE,CAAC;;uDACxF;AAIpB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;;oDAC3D;AAIjB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;;kDAClF;AAIf;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;sCAC7E,IAAI;oDAAA;AAIhB;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;sCAClF,IAAI;oDAAA;AAIhB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;sCACnF,cAAI;kDAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,iBAAoC,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC;;oDAC9D;AAIlB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;sCACxF,cAAI;kDAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,iBAAoC,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC;;oDAC9D;4BA5CP,iBAAiB;IAP7B,IAAA,gBAAM,GAAE;IACR,IAAA,eAAK,EACJ,0BAA0B,EAC1B,CAAC,iBAAoC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAClG,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB;IACA,IAAA,yBAAU,EAAC,EAAE,WAAW,EAAE,mEAAmE,EAAE,CAAC;GACpF,iBAAiB,CA6C7B","sourcesContent":["import { Field, ID, ObjectType } from 'type-graphql'\nimport {\n  CreateDateColumn,\n  UpdateDateColumn,\n  Entity,\n  Index,\n  Column,\n  RelationId,\n  ManyToOne,\n  PrimaryGeneratedColumn\n} from 'typeorm'\n\nimport { User } from '../user/user.js'\n\n@Entity()\n@Index(\n  'ix_web_auth_credential_0',\n  (webAuthCredential: WebAuthCredential) => [webAuthCredential.user, webAuthCredential.credentialId],\n  { unique: true }\n)\n@ObjectType({ description: 'Represents a WebAuthn credential for passwordless authentication.' })\nexport class WebAuthCredential {\n  @PrimaryGeneratedColumn('uuid')\n  @Field(type => ID, { description: 'Unique identifier for the credential.' })\n  readonly id: string\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true, description: 'The user associated with this credential.' })\n  user?: User\n\n  @RelationId((webAuthCredential: WebAuthCredential) => webAuthCredential.user)\n  userId?: string\n\n  @Column()\n  @Field({ nullable: true, description: 'The unique ID for this credential, provided by the authenticator.' })\n  credentialId: string\n\n  @Column()\n  @Field({ nullable: true, description: 'The public key of the credential.' })\n  publicKey: string\n\n  @Column()\n  @Field({ nullable: true, description: 'The signature counter, used to prevent replay attacks.' })\n  counter: number\n\n  @CreateDateColumn()\n  @Field({ nullable: true, description: 'The timestamp when the credential was created.' })\n  createdAt?: Date\n\n  @UpdateDateColumn()\n  @Field({ nullable: true, description: 'The timestamp when the credential was last updated.' })\n  updatedAt?: Date\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true, description: 'The user who created the credential.' })\n  creator?: User\n\n  @RelationId((webAuthCredential: WebAuthCredential) => webAuthCredential.creator)\n  creatorId?: string\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true, description: 'The user who last updated the credential.' })\n  updater?: User\n\n  @RelationId((webAuthCredential: WebAuthCredential) => webAuthCredential.updater)\n  updaterId?: string\n}\n"]}
+{"version":3,"file":"web-auth-credential.js","sourceRoot":"","sources":["../../../server/service/web-auth-credential/web-auth-credential.ts"],"names":[],"mappings":";;;;AAAA,+CAAoD;AACpD,qCAUgB;AAEhB,6CAAsC;AAS/B,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;CAgE7B,CAAA;AAhEY,8CAAiB;AAGnB;IAFR,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,iBAAE,EAAE,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;;6CACzD;AAInB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;sCAC3F,cAAI;+CAAA;AAGX;IADC,IAAA,oBAAU,EAAC,CAAC,iBAAoC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;;iDAC9D;AAIf;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,mEAAmE,EAAE,CAAC;;uDACxF;AAIpB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;;oDAC3D;AAIjB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;;kDAClF;AAKf;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wEAAwE,EAAE,CAAC;;+CACpG;AAKb;IAFC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wEAAwE,EAAE,CAAC;;qDAC9G;AAIrB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,6CAA6C,EAAE,CAAC;sCACzE,IAAI;qDAAA;AAIjB;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gDAAgD,EAAE,CAAC;sCAC7E,IAAI;oDAAA;AAIhB;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;sCAClF,IAAI;IAEhB,8DAA8D;;oDAF9C;AAKhB;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;sCAC/D,IAAI;oDAAA;AAIhB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;sCACnF,cAAI;kDAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,iBAAoC,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC;;oDAC9D;AAIlB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;sCACxF,cAAI;kDAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,iBAAoC,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC;;oDAC9D;4BA/DP,iBAAiB;IAP7B,IAAA,gBAAM,GAAE;IACR,IAAA,eAAK,EACJ,0BAA0B,EAC1B,CAAC,iBAAoC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAClG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAChD;IACA,IAAA,yBAAU,EAAC,EAAE,WAAW,EAAE,mEAAmE,EAAE,CAAC;GACpF,iBAAiB,CAgE7B","sourcesContent":["import { Field, ID, ObjectType } from 'type-graphql'\nimport {\n  CreateDateColumn,\n  UpdateDateColumn,\n  DeleteDateColumn,\n  Entity,\n  Index,\n  Column,\n  RelationId,\n  ManyToOne,\n  PrimaryGeneratedColumn\n} from 'typeorm'\n\nimport { User } from '../user/user.js'\n\n@Entity()\n@Index(\n  'ix_web_auth_credential_0',\n  (webAuthCredential: WebAuthCredential) => [webAuthCredential.user, webAuthCredential.credentialId],\n  { unique: true, where: '\"deleted_at\" IS NULL' }\n)\n@ObjectType({ description: 'Represents a WebAuthn credential for passwordless authentication.' })\nexport class WebAuthCredential {\n  @PrimaryGeneratedColumn('uuid')\n  @Field(type => ID, { description: 'Unique identifier for the credential.' })\n  readonly id: string\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true, description: 'The user associated with this credential.' })\n  user?: User\n\n  @RelationId((webAuthCredential: WebAuthCredential) => webAuthCredential.user)\n  userId?: string\n\n  @Column()\n  @Field({ nullable: true, description: 'The unique ID for this credential, provided by the authenticator.' })\n  credentialId: string\n\n  @Column()\n  @Field({ nullable: true, description: 'The public key of the credential.' })\n  publicKey: string\n\n  @Column()\n  @Field({ nullable: true, description: 'The signature counter, used to prevent replay attacks.' })\n  counter: number\n\n  /* The person's own label for it. The screen proposes one from the device and browser (ADR-0156 decision 6). */\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: \"The owner's label for this passkey, such as the device it was made on.\" })\n  name?: string\n\n  /* What the authenticator said it can be reached by - usb, nfc, ble, hybrid, internal. Handed back to the browser as a hint. */\n  @Column('simple-array', { nullable: true })\n  @Field(type => [String], { nullable: true, description: 'How the authenticator can be reached: usb, nfc, ble, hybrid, internal.' })\n  transports?: string[]\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'When this passkey was last used to sign in.' })\n  lastUsedAt?: Date\n\n  @CreateDateColumn()\n  @Field({ nullable: true, description: 'The timestamp when the credential was created.' })\n  createdAt?: Date\n\n  @UpdateDateColumn()\n  @Field({ nullable: true, description: 'The timestamp when the credential was last updated.' })\n  updatedAt?: Date\n\n  /* A removed passkey signs nobody in - every find skips it. */\n  @DeleteDateColumn()\n  @Field({ nullable: true, description: 'When the credential was removed.' })\n  deletedAt?: Date\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true, description: 'The user who created the credential.' })\n  creator?: User\n\n  @RelationId((webAuthCredential: WebAuthCredential) => webAuthCredential.creator)\n  creatorId?: string\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true, description: 'The user who last updated the credential.' })\n  updater?: User\n\n  @RelationId((webAuthCredential: WebAuthCredential) => webAuthCredential.updater)\n  updaterId?: string\n}\n"]}