@things-factory/auth-base 10.1.247 → 10.1.254

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/auth-base",
-  "version": "10.1.247",
+  "version": "10.1.254",
   "main": "dist-server/index.js",
   "browser": "dist-client/index.js",
   "things-factory": true,
@@ -35,10 +35,10 @@
     "@reduxjs/toolkit": "^2.2.5",
     "@simplewebauthn/browser": "^13.0.0",
     "@simplewebauthn/server": "^13.0.0",
-    "@things-factory/email-base": "^10.1.247",
+    "@things-factory/email-base": "^10.1.254",
     "@things-factory/env": "^10.1.149",
-    "@things-factory/shell": "^10.1.247",
-    "@things-factory/task-lease": "^10.1.247",
+    "@things-factory/shell": "^10.1.254",
+    "@things-factory/task-lease": "^10.1.254",
     "@things-factory/utils": "^10.1.179",
     "@types/webappsec-credential-management": "^0.6.9",
     "jsonwebtoken": "^9.0.0",
@@ -50,5 +50,5 @@
     "passport-jwt": "^4.0.0",
     "passport-local": "^1.0.0"
   },
-  "gitHead": "3c672029b2ef4a09f3370d37e5d225392856a602"
+  "gitHead": "793e2fd617db5bb917ec892e64956fb690f7e7b0"
 }

package/tests/account-mail.test.ts

@@ -0,0 +1,69 @@
+/**
+ * The four account mails: each in the person's language, with its own subject, in the one mail every module sends -
+ * the application's brand at the head, never the old frame with a logo fetched from hatiolab.com.
+ */
+import fs from 'fs'
+import path from 'path'
+
+import { DEFAULT_BRAND } from '@things-factory/email-base'
+import { i18next, NAMESPACE, translatorFor } from '@things-factory/i18n-base/translator'
+
+import { ACCOUNT_MAIL_KINDS, accountMail, accountMailWords } from '../server/controllers/account-mail'
+
+const LANGUAGES = ['ko', 'en', 'ja', 'zh', 'ms', 'es']
+const LINK = 'https://office.example.com/auth/reset-password#token'
+
+/* A test runs outside an application, so the translator has not gathered this module's words; they are added here. */
+beforeAll(() => {
+  for (const lng of LANGUAGES) {
+    const words = JSON.parse(fs.readFileSync(path.resolve(__dirname, '../translations', `${lng}.json`), 'utf8'))
+    i18next.addResourceBundle(lng, NAMESPACE, words, true, true)
+  }
+})
+
+describe('the words of an account mail', () => {
+  test('every mail has its subject, body and button in every language - never a key', () => {
+    for (const lng of LANGUAGES) {
+      for (const kind of ACCOUNT_MAIL_KINDS) {
+        const words = accountMailWords(translatorFor(lng), kind, 'Brand X')
+
+        for (const [part, text] of Object.entries(words)) {
+          expect([lng, kind, part, text]).not.toEqual([lng, kind, part, expect.stringMatching(/^(title|text|button)\.account-mail-/)])
+          expect([lng, kind, part, text.trim()]).not.toEqual([lng, kind, part, ''])
+        }
+        expect(words.body).toContain('Brand X')
+      }
+    }
+  })
+
+  test('the four subjects differ in every language - a reset is not mistaken for an unlock', () => {
+    for (const lng of LANGUAGES) {
+      const subjects = ACCOUNT_MAIL_KINDS.map(kind => accountMailWords(translatorFor(lng), kind, 'Brand X').subject)
+      expect(new Set(subjects).size).toBe(ACCOUNT_MAIL_KINDS.length)
+    }
+  })
+})
+
+describe('an account mail', () => {
+  const context = (lng?: string) => ({ lng, i18next })
+
+  test('is written in the person’s language, else the language of the request', () => {
+    expect(accountMail({ kind: 'unlock-account', user: { locale: 'ko-KR' }, link: LINK, context: context('en-US') }).subject).toBe('계정 잠김')
+    expect(accountMail({ kind: 'unlock-account', user: { locale: null }, link: LINK, context: context('ja') }).subject).toBe(
+      translatorFor('ja')('title.account-mail-unlock-account')
+    )
+  })
+
+  test('is the one mail: the brand at the head, the subject in the band, the link as the button, no fetched image', () => {
+    const { subject, content } = accountMail({ kind: 'reset-password', user: { locale: 'ko' }, link: LINK, context: context() })
+
+    expect(subject).toBe('비밀번호 재설정')
+    expect(content).toContain('<html lang="ko">')
+    expect(content).toContain(`>${DEFAULT_BRAND.name}<`)
+    expect(content).toContain(`href="${LINK}"`)
+    expect(content).toContain('>비밀번호 재설정</font></a')
+    expect(content).toContain('Copyright © HatioLab Inc. All rights reserved.')
+    expect(content).not.toContain('<img')
+    expect(content).not.toContain('Hatio, Lab.')
+  })
+})

package/tests/mail-request-answers-db.test.ts

@@ -2,6 +2,7 @@ const mockSentMail: any[] = []
 let mockMailFails = false
 
 jest.mock('@things-factory/email-base', () => ({
+  ...jest.requireActual('@things-factory/email-base'),
   sendEmail: async (mail: any) => {
     if (mockMailFails) throw new Error('smtp down')
     mockSentMail.push(mail)
@@ -10,6 +11,7 @@ jest.mock('@things-factory/email-base', () => ({
 
 import { closeAuthDatabase, Domain, getRepository, openAuthDatabase, resetAuthDatabase } from './db'
 import { loadCompiled } from './compiled'
+import { i18next } from '@things-factory/i18n-base/translator'
 
 const { User } = loadCompiled('service/user/user')
 const { authPublicProcessRouter } = loadCompiled('router/auth-public-process-router')
@@ -35,6 +37,7 @@ function handler(path: string) {
 async function post(path: string, body: any) {
   const context: any = {
     t: (key: string) => key,
+    i18next,
     lng: 'en-US',
     headers: {},
     header: {},

package/tests/passkey-signin-route-db.test.ts

@@ -0,0 +1,139 @@
+/**
+ * The passkey sign-in route, through `authenticate401Middleware`, the way the sign-in screen reaches it.
+ *
+ * The screen used to fetch it. A fetch says `Accept: *\/*`, the middleware takes that for a page request,
+ * so a locked account got the whole `auth-activate` page back as the body - and the screen put that body
+ * in a toast. Now the screen posts a form, as the password does, and every refusal is answered with the
+ * page its code leads to: the activate page for a locked or unconfirmed account, the sign-in page with
+ * its one line for the rest.
+ */
+
+import { closeAuthDatabase, Domain, getRepository, openAuthDatabase, resetAuthDatabase } from './db'
+import { loadCompiled } from './compiled'
+import { SoftwareAuthenticator } from './passkey-authenticator'
+
+const { User } = loadCompiled('service/user/user')
+const { authenticate401Middleware } = loadCompiled('middlewares/authenticate-401-middleware')
+const { webAuthnGlobalPublicRouter } = loadCompiled('router/webauthn-router')
+const CODES = loadCompiled('constants/error-code')
+const passkey = loadCompiled('controllers/passkey')
+
+const SITE = { rpID: 'localhost', origin: 'http://localhost:3000' }
+const NAVIGATION = 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8'
+
+let domain: any
+let kim: any
+
+const signinRoute = webAuthnGlobalPublicRouter.stack.find(
+  (layer: any) => layer.path === '/auth/signin-webauthn' && layer.methods.includes('POST')
+)
+
+/** What the browser gets back for the form the screen posts. */
+async function post(body: (challenge: string) => any) {
+  const { challenge } = await passkey.signinOptions(SITE)
+  const answer: any = { status: 200, cookies: {} }
+
+  const context: any = {
+    t: (key: string) => key,
+    method: 'POST',
+    path: '/auth/signin-webauthn',
+    originalUrl: '/auth/signin-webauthn',
+    header: { accept: NAVIGATION },
+    hostname: SITE.rpID,
+    origin: SITE.origin,
+    secure: false,
+    query: {},
+    session: { challenge },
+    state: { domain },
+    request: { body: body(challenge) },
+    cookies: { set: (key: string, value: string) => (answer.cookies[key] = value) },
+    render: async (view: string, options: any) => (answer.page = { view, ...options }),
+    redirect: (url: string) => (answer.redirect = url)
+  }
+
+  await authenticate401Middleware(context, () => signinRoute.stack[0](context, async () => {}))
+
+  return { ...answer, status: context.status, body: context.body }
+}
+
+async function registered(user: any) {
+  const authenticator = new SoftwareAuthenticator()
+  const { challenge } = await passkey.registrationOptions(user, 'Operato', SITE)
+  await passkey.registerPasskey(user, authenticator.register(challenge, SITE), 'macOS · Chrome', challenge, SITE)
+  return authenticator
+}
+
+const formWith = (authenticator: SoftwareAuthenticator) => (challenge: string) => ({
+  response: JSON.stringify(authenticator.assert(challenge, SITE)),
+  redirectTo: '/office'
+})
+
+beforeAll(async () => {
+  await openAuthDatabase()
+})
+
+afterAll(async () => {
+  await closeAuthDatabase()
+})
+
+beforeEach(async () => {
+  await resetAuthDatabase()
+  domain = await getRepository(Domain).save({ name: 'factory', subdomain: 'factory' })
+
+  const salt = User.generateSalt()
+  kim = await getRepository(User).save({
+    username: 'kim',
+    email: 'kim@example.com',
+    name: 'kim',
+    salt,
+    password: User.encode('Passw0rd!', salt),
+    status: 'activated',
+    domains: [domain]
+  })
+})
+
+it('signs in and goes on to check-in, with the token in the cookie', async () => {
+  const answer = await post(formWith(await registered(kim)))
+
+  expect(answer.redirect).toBe('/auth/checkin/factory?redirect_to=%2Foffice')
+  expect(Object.values(answer.cookies)).toHaveLength(1)
+})
+
+describe.each([
+  ['locked', CODES.USER_LOCKED],
+  ['inactive', CODES.USER_NOT_ACTIVATED]
+])('a %s account', (status, errorCode) => {
+  it('lands on the activate page with its code and its line, the way a password does', async () => {
+    const authenticator = await registered(kim)
+    await getRepository(User).update({ id: kim.id }, { status, lockedAt: new Date() })
+
+    const answer = await post(formWith(authenticator))
+
+    expect(answer.status).toBe(401)
+    expect(answer.page.pageElement).toBe('auth-activate')
+    expect(answer.page.data).toMatchObject({ errorCode, message: `error.${errorCode}`, username: 'kim', redirectTo: '/office' })
+    expect(answer.cookies).toEqual({})
+  })
+})
+
+describe.each([
+  ['deleted', CODES.USER_DELETED],
+  ['password_reset_required', CODES.PASSWORD_SETUP_PENDING]
+])('a %s account', (status, errorCode) => {
+  it('stays on the sign-in page with its one line', async () => {
+    const authenticator = await registered(kim)
+    await getRepository(User).update({ id: kim.id }, { status })
+
+    const answer = await post(formWith(authenticator))
+
+    expect(answer.page.pageElement).toBe('auth-signin')
+    expect(answer.page.data.message).toBe(`error.${errorCode}`)
+  })
+})
+
+it('an answer that is not JSON is a failed verification, said in one line on the sign-in page', async () => {
+  const answer = await post(() => ({ response: '<not json>', redirectTo: '/office' }))
+
+  expect(answer.page.pageElement).toBe('auth-signin')
+  expect(answer.page.data.message).toBe(`error.${CODES.AUTHN_VERIFICATION_FAILED}`)
+})

package/tests/password-setup-db.test.ts

@@ -9,6 +9,7 @@
 
 import { authDataSource, closeAuthDatabase, Domain, getRepository, openAuthDatabase, resetAuthDatabase } from './db'
 import { loadCompiled } from './compiled'
+import { i18next } from '@things-factory/i18n-base/translator'
 
 const jwt = require('jsonwebtoken')
 
@@ -29,6 +30,7 @@ function context(tx?: any) {
   return {
     state: { domain: here, tx },
     t: (key: string) => key,
+    i18next,
     headers: {},
     request: { protocol: 'https', host: 'acme.example.com' }
   } as any

package/tests/verification-token-db.test.ts

@@ -1,6 +1,7 @@
 const sentMail: any[] = []
 
 jest.mock('@things-factory/email-base', () => ({
+  ...jest.requireActual('@things-factory/email-base'),
   sendEmail: async (mail: any) => {
     sentMail.push(mail)
   }
@@ -8,6 +9,7 @@ jest.mock('@things-factory/email-base', () => ({
 
 import { closeAuthDatabase, Domain, getRepository, openAuthDatabase, resetAuthDatabase } from './db'
 import { loadCompiled } from './compiled'
+import { i18next } from '@things-factory/i18n-base/translator'
 import {
   hashVerificationToken,
   isVerificationTokenLive,
@@ -45,6 +47,7 @@ const HOUR = 60 * 60 * 1000
 
 const context: any = {
   t: (key: string) => key,
+  i18next,
   lng: 'en-US',
   headers: {},
   request: { protocol: 'https', host: 'acme.example.com' }

package/translations/en.json

@@ -271,5 +271,17 @@
   "error.identity confirmation required": "confirm it is you to see this",
   "error.passkey-not-found": "There is no passkey of yours with this id. Reload the list.",
   "error.passkey-name-too-long": "A passkey name takes up to {max} characters; this one has {length}.",
-  "error.domain not specified": "This account cannot enter the $t(term.domain) {subdomain}."
+  "error.domain not specified": "This account cannot enter the $t(term.domain) {subdomain}.",
+  "title.account-mail-verify-email": "Confirm your email address",
+  "text.account-mail-verify-email": "To finish signing up for {brand}, confirm that this email address is yours. Press the button below and you are done.\nThe link works for 48 hours.\nIf you did not sign up, you can ignore this mail.",
+  "button.account-mail-verify-email": "Confirm email",
+  "title.account-mail-reset-password": "Reset your password",
+  "text.account-mail-reset-password": "We received a request to reset the password of your {brand} account. Press the button below to choose a new one.\nThe link works once, for 1 hour.\nIf you did not ask for this, you can ignore this mail - your password stays as it is.",
+  "button.account-mail-reset-password": "Reset password",
+  "title.account-mail-set-password": "Set your password",
+  "text.account-mail-set-password": "An administrator sent you a link to set the password of your {brand} account. Press the button below to choose one.\nThe link works once, for 48 hours, and the page asks for this email address.",
+  "button.account-mail-set-password": "Set password",
+  "title.account-mail-unlock-account": "Your account is locked",
+  "text.account-mail-unlock-account": "Your {brand} account was locked after too many wrong passwords. Press the button below and choose a new password to unlock it.\nThe link works once, for 1 hour.\nIf it was not you signing in, someone else may have tried your password - choose a new one with this link.",
+  "button.account-mail-unlock-account": "Unlock account"
 }

package/translations/es.json

@@ -271,5 +271,17 @@
   "error.identity confirmation required": "confirme que es usted para ver esto",
   "error.passkey-not-found": "No tiene ninguna llave de acceso con este id. Vuelva a cargar la lista.",
   "error.passkey-name-too-long": "El nombre de una llave de acceso admite hasta {max} caracteres; este tiene {length}.",
-  "error.domain not specified": "Esta cuenta no puede entrar en el $t(term.domain) {subdomain}."
+  "error.domain not specified": "Esta cuenta no puede entrar en el $t(term.domain) {subdomain}.",
+  "title.account-mail-verify-email": "Confirma tu correo electrónico",
+  "text.account-mail-verify-email": "Para terminar el registro en {brand}, confirma que esta dirección de correo es tuya. Pulsa el botón de abajo y listo.\nEl enlace funciona durante 48 horas.\nSi no te registraste, puedes ignorar este correo.",
+  "button.account-mail-verify-email": "Confirmar correo",
+  "title.account-mail-reset-password": "Restablecer contraseña",
+  "text.account-mail-reset-password": "Recibimos una solicitud para restablecer la contraseña de tu cuenta de {brand}. Pulsa el botón de abajo para elegir una nueva.\nEl enlace funciona una vez, durante 1 hora.\nSi no lo pediste, puedes ignorar este correo: tu contraseña no cambia.",
+  "button.account-mail-reset-password": "Restablecer contraseña",
+  "title.account-mail-set-password": "Establece tu contraseña",
+  "text.account-mail-set-password": "Un administrador te envió un enlace para establecer la contraseña de tu cuenta de {brand}. Pulsa el botón de abajo para elegirla.\nEl enlace funciona una vez, durante 48 horas, y la página pide esta dirección de correo.",
+  "button.account-mail-set-password": "Establecer contraseña",
+  "title.account-mail-unlock-account": "Tu cuenta está bloqueada",
+  "text.account-mail-unlock-account": "Tu cuenta de {brand} se bloqueó tras demasiadas contraseñas incorrectas. Pulsa el botón de abajo y elige una nueva contraseña para desbloquearla.\nEl enlace funciona una vez, durante 1 hora.\nSi no eras tú quien iniciaba sesión, alguien pudo haber probado tu contraseña: elige una nueva con este enlace.",
+  "button.account-mail-unlock-account": "Desbloquear cuenta"
 }

package/translations/ja.json

@@ -271,5 +271,17 @@
   "error.identity confirmation required": "本人確認が必要です。",
   "error.passkey-not-found": "あなたのパスキーにこのパスキーはありません。一覧を再読み込みしてください。",
   "error.passkey-name-too-long": "パスキー名は{max}文字までです。今は{length}文字です。",
-  "error.domain not specified": "このアカウントで入れる$t(term.domain)ではありません: {subdomain}"
+  "error.domain not specified": "このアカウントで入れる$t(term.domain)ではありません: {subdomain}",
+  "title.account-mail-verify-email": "メールアドレスの確認",
+  "text.account-mail-verify-email": "{brand} の登録を完了するには、このメールアドレスがご本人のものか確認してください。下のボタンを押すと確認が完了します。\nリンクは48時間有効です。\n登録していない場合は、このメールを無視してください。",
+  "button.account-mail-verify-email": "メールを確認",
+  "title.account-mail-reset-password": "パスワードの再設定",
+  "text.account-mail-reset-password": "{brand} アカウントのパスワード再設定の依頼を受け付けました。下のボタンから新しいパスワードを設定してください。\nリンクは1時間、1回だけ使えます。\n依頼していない場合は、このメールを無視してください。パスワードは変わりません。",
+  "button.account-mail-reset-password": "パスワードを再設定",
+  "title.account-mail-set-password": "パスワードの設定",
+  "text.account-mail-set-password": "管理者が {brand} アカウントのパスワード設定リンクを送りました。下のボタンからパスワードを設定してください。\nリンクは48時間、1回だけ使えます。開いたページでこのメールアドレスを入力します。",
+  "button.account-mail-set-password": "パスワードを設定",
+  "title.account-mail-unlock-account": "アカウントがロックされました",
+  "text.account-mail-unlock-account": "パスワードを何度も間違えたため、{brand} アカウントがロックされました。下のボタンから新しいパスワードを設定するとロックが解除されます。\nリンクは1時間、1回だけ使えます。\nご自身でサインインしていない場合、他の人がパスワードを試した可能性があります。このリンクで新しいパスワードを設定してください。",
+  "button.account-mail-unlock-account": "ロックを解除"
 }

package/translations/ko.json

@@ -271,5 +271,17 @@
   "error.identity confirmation required": "본인 확인이 필요합니다.",
   "error.passkey-not-found": "내 패스키 가운데 이 패스키가 없습니다. 목록을 새로 불러오세요.",
   "error.passkey-name-too-long": "패스키 이름은 {max}자까지입니다. 지금 {length}자입니다.",
-  "error.domain not specified": "이 계정으로 들어갈 수 있는 $t(term.domain)이 아닙니다: {subdomain}"
+  "error.domain not specified": "이 계정으로 들어갈 수 있는 $t(term.domain)이 아닙니다: {subdomain}",
+  "title.account-mail-verify-email": "이메일 주소 확인",
+  "text.account-mail-verify-email": "{brand} 가입을 마치려면 이 이메일 주소가 맞는지 확인해 주세요. 아래 단추를 누르면 확인이 끝납니다.\n링크는 48시간 동안 쓸 수 있습니다.\n가입한 적이 없다면 이 메일은 무시해도 됩니다.",
+  "button.account-mail-verify-email": "이메일 확인",
+  "title.account-mail-reset-password": "비밀번호 재설정",
+  "text.account-mail-reset-password": "{brand} 계정의 비밀번호 재설정 요청을 받았습니다. 아래 단추를 눌러 새 비밀번호를 정하세요.\n링크는 1시간 동안 한 번 쓸 수 있습니다.\n요청한 적이 없다면 이 메일은 무시해도 됩니다. 비밀번호는 바뀌지 않습니다.",
+  "button.account-mail-reset-password": "비밀번호 재설정",
+  "title.account-mail-set-password": "비밀번호 설정",
+  "text.account-mail-set-password": "관리자가 {brand} 계정의 비밀번호 설정 링크를 보냈습니다. 아래 단추를 눌러 비밀번호를 정하세요.\n링크는 48시간 동안 한 번 쓸 수 있고, 열리는 페이지에서 이 이메일 주소를 묻습니다.",
+  "button.account-mail-set-password": "비밀번호 설정",
+  "title.account-mail-unlock-account": "계정 잠김",
+  "text.account-mail-unlock-account": "비밀번호를 여러 번 잘못 입력해 {brand} 계정이 잠겼습니다. 아래 단추를 눌러 새 비밀번호를 정하면 잠금이 풀립니다.\n링크는 1시간 동안 한 번 쓸 수 있습니다.\n직접 로그인하지 않았다면 다른 사람이 비밀번호를 시도한 것일 수 있습니다. 이 링크로 새 비밀번호를 정하세요.",
+  "button.account-mail-unlock-account": "잠금 풀기"
 }

package/translations/ms.json

@@ -271,5 +271,17 @@
   "error.identity confirmation required": "sahkan ini anda untuk melihat ini",
   "error.passkey-not-found": "Tiada kunci laluan anda dengan id ini. Muat semula senarai.",
   "error.passkey-name-too-long": "Nama kunci laluan boleh sehingga {max} aksara; nama ini ada {length}.",
-  "error.domain not specified": "Akaun ini tidak boleh memasuki $t(term.domain) {subdomain}."
+  "error.domain not specified": "Akaun ini tidak boleh memasuki $t(term.domain) {subdomain}.",
+  "title.account-mail-verify-email": "Sahkan alamat e-mel anda",
+  "text.account-mail-verify-email": "Untuk melengkapkan pendaftaran {brand}, sahkan bahawa alamat e-mel ini milik anda. Tekan butang di bawah dan selesai.\nPautan sah selama 48 jam.\nJika anda tidak mendaftar, abaikan e-mel ini.",
+  "button.account-mail-verify-email": "Sahkan e-mel",
+  "title.account-mail-reset-password": "Tetapkan semula kata laluan",
+  "text.account-mail-reset-password": "Kami menerima permintaan untuk menetapkan semula kata laluan akaun {brand} anda. Tekan butang di bawah untuk memilih kata laluan baharu.\nPautan boleh digunakan sekali, selama 1 jam.\nJika anda tidak memintanya, abaikan e-mel ini - kata laluan anda tidak berubah.",
+  "button.account-mail-reset-password": "Tetapkan semula kata laluan",
+  "title.account-mail-set-password": "Tetapkan kata laluan anda",
+  "text.account-mail-set-password": "Pentadbir menghantar pautan untuk menetapkan kata laluan akaun {brand} anda. Tekan butang di bawah untuk memilihnya.\nPautan boleh digunakan sekali, selama 48 jam, dan halaman itu akan meminta alamat e-mel ini.",
+  "button.account-mail-set-password": "Tetapkan kata laluan",
+  "title.account-mail-unlock-account": "Akaun anda dikunci",
+  "text.account-mail-unlock-account": "Akaun {brand} anda dikunci selepas terlalu banyak kata laluan salah. Tekan butang di bawah dan pilih kata laluan baharu untuk membukanya.\nPautan boleh digunakan sekali, selama 1 jam.\nJika bukan anda yang log masuk, orang lain mungkin telah mencuba kata laluan anda - pilih kata laluan baharu dengan pautan ini.",
+  "button.account-mail-unlock-account": "Buka kunci akaun"
 }

package/translations/zh.json

@@ -271,5 +271,17 @@
   "error.identity confirmation required": "需要确认身份。",
   "error.passkey-not-found": "您的通行密钥中没有这一个。请重新加载列表。",
   "error.passkey-name-too-long": "通行密钥名称最多 {max} 个字符,现在是 {length} 个。",
-  "error.domain not specified": "此账户无法进入该$t(term.domain): {subdomain}"
+  "error.domain not specified": "此账户无法进入该$t(term.domain): {subdomain}",
+  "title.account-mail-verify-email": "确认邮箱地址",
+  "text.account-mail-verify-email": "要完成 {brand} 的注册，请确认此邮箱地址属于您。点击下方按钮即可完成确认。\n链接 48 小时内有效。\n如果您没有注册，请忽略此邮件。",
+  "button.account-mail-verify-email": "确认邮箱",
+  "title.account-mail-reset-password": "重置密码",
+  "text.account-mail-reset-password": "我们收到了重置您 {brand} 账户密码的请求。请点击下方按钮设置新密码。\n链接 1 小时内有效，只能使用一次。\n如果不是您本人的请求，请忽略此邮件，密码不会改变。",
+  "button.account-mail-reset-password": "重置密码",
+  "title.account-mail-set-password": "设置密码",
+  "text.account-mail-set-password": "管理员向您发送了 {brand} 账户的密码设置链接。请点击下方按钮设置密码。\n链接 48 小时内有效，只能使用一次，打开的页面会要求输入此邮箱地址。",
+  "button.account-mail-set-password": "设置密码",
+  "title.account-mail-unlock-account": "账户已锁定",
+  "text.account-mail-unlock-account": "由于多次输错密码，您的 {brand} 账户已被锁定。点击下方按钮设置新密码即可解锁。\n链接 1 小时内有效，只能使用一次。\n如果不是您本人登录，可能有他人尝试了您的密码，请用此链接设置新密码。",
+  "button.account-mail-unlock-account": "解锁账户"
 }

package/dist-server/templates/account-unlock-email.d.ts

@@ -1,5 +0,0 @@
-export declare function getUnlockUserEmailForm({ username, name, resetUrl }: {
-    username: any;
-    name: any;
-    resetUrl: any;
-}): string;

package/dist-server/templates/account-unlock-email.js

@@ -1,69 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getUnlockUserEmailForm = getUnlockUserEmailForm;
-function getUnlockUserEmailForm({ username, name, resetUrl }) {
-    return `
-  <html lang="en">
-    <head>
-      <meta charset="utf-8" />
-      
-      <title>reset password</title>
-      <meta name="description" content="Password Reset" />
-      <meta name="author" content="hatiolab" />
-      <meta name="google" content="notranslate"/>
-    </head>
-
-    <body>
-      <div style="background-color:#f6f6f6">
-        <!--header begin-->
-        <div style="background-color:#fff;padding:0 10px;border-top: 2px solid #394e64;">
-          <a href="#" target="_blank"
-            ><img
-              src="http://www.hatiolab.com/assets/img/logo-operato.png"
-              style="max-height:50px"
-          /></a>
-        </div>
-        <!--header end-->
-
-        <!--title begin-->
-        <div
-          style="background-color:#22a6a7;padding:12px 10px 10px 10px;min-height:50px;"
-        >
-          <img
-            src="http://www.hatiolab.com/assets/img/icon-mail.png"
-            style="float:left;margin:0 10px 0 40px"
-          />
-          <span style="display:block;color:#fff;font-size:20px"
-            >Hi ${name}!</span
-          >
-          <span style="display:block;color:#fff;font-size:34px;font-weight:bold"
-            >Unlock Account</span
-          >
-        </div>
-        <!--title end-->
-
-        <!--body begin-->
-        <p style="padding:10px 20px;line-height:1.5;font-size:16px">
-          Click the button below to unlock account and reset password.
-          <br />
-          <a
-            href="${resetUrl}"
-            style="display:inline-block;margin:10px 5px 5px 0;border-radius:7px;background-color:#22a6a7;padding:7px 15px;color:#fff;font-size:18px;text-decoration:none;text-transform:capitalize;"
-            >unlock account</a
-          >
-        </p>
-        <!--body end-->
-
-        <!--footer begin-->
-        <div
-          style="background-color:#3d5874;padding:7px 20px 5px 20px;font-size:12px;color:#efefef"
-        >
-          © Hatio, Lab. Inc. All rights reserved.
-        </div>
-        <!--footer end-->
-      </div>
-    </body>
-  </html>
-  `;
-}
-//# sourceMappingURL=account-unlock-email.js.map

package/dist-server/templates/account-unlock-email.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"account-unlock-email.js","sourceRoot":"","sources":["../../server/templates/account-unlock-email.ts"],"names":[],"mappings":";;AAAA,wDAgEC;AAhED,SAAgB,sBAAsB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;IACjE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgCS,IAAI;;;;;;;;;;;;;oBAaF,QAAQ;;;;;;;;;;;;;;;;;GAiBzB,CAAA;AACH,CAAC","sourcesContent":["export function getUnlockUserEmailForm({ username, name, resetUrl }) {\n  return `\n  <html lang=\"en\">\n    <head>\n      <meta charset=\"utf-8\" />\n      \n      <title>reset password</title>\n      <meta name=\"description\" content=\"Password Reset\" />\n      <meta name=\"author\" content=\"hatiolab\" />\n      <meta name=\"google\" content=\"notranslate\"/>\n    </head>\n\n    <body>\n      <div style=\"background-color:#f6f6f6\">\n        <!--header begin-->\n        <div style=\"background-color:#fff;padding:0 10px;border-top: 2px solid #394e64;\">\n          <a href=\"#\" target=\"_blank\"\n            ><img\n              src=\"http://www.hatiolab.com/assets/img/logo-operato.png\"\n              style=\"max-height:50px\"\n          /></a>\n        </div>\n        <!--header end-->\n\n        <!--title begin-->\n        <div\n          style=\"background-color:#22a6a7;padding:12px 10px 10px 10px;min-height:50px;\"\n        >\n          <img\n            src=\"http://www.hatiolab.com/assets/img/icon-mail.png\"\n            style=\"float:left;margin:0 10px 0 40px\"\n          />\n          <span style=\"display:block;color:#fff;font-size:20px\"\n            >Hi ${name}!</span\n          >\n          <span style=\"display:block;color:#fff;font-size:34px;font-weight:bold\"\n            >Unlock Account</span\n          >\n        </div>\n        <!--title end-->\n\n        <!--body begin-->\n        <p style=\"padding:10px 20px;line-height:1.5;font-size:16px\">\n          Click the button below to unlock account and reset password.\n          <br />\n          <a\n            href=\"${resetUrl}\"\n            style=\"display:inline-block;margin:10px 5px 5px 0;border-radius:7px;background-color:#22a6a7;padding:7px 15px;color:#fff;font-size:18px;text-decoration:none;text-transform:capitalize;\"\n            >unlock account</a\n          >\n        </p>\n        <!--body end-->\n\n        <!--footer begin-->\n        <div\n          style=\"background-color:#3d5874;padding:7px 20px 5px 20px;font-size:12px;color:#efefef\"\n        >\n          © Hatio, Lab. Inc. All rights reserved.\n        </div>\n        <!--footer end-->\n      </div>\n    </body>\n  </html>\n  `\n}\n"]}

package/dist-server/templates/reset-password-email.d.ts

@@ -1,11 +0,0 @@
-/**
- * The mail that carries a link to the password page. A person who forgot theirs gets it (`Reset password`), and so
- * does a person whose administrator issued a password setup link (ADR-0161) - one page, one mail, two headings.
- */
-export declare function getResetPasswordEmailForm({ name, resetUrl, heading, action, note }: {
-    name: string;
-    resetUrl: string;
-    heading?: string;
-    action?: string;
-    note?: string;
-}): string;

package/dist-server/templates/reset-password-email.js

@@ -1,73 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getResetPasswordEmailForm = getResetPasswordEmailForm;
-/**
- * The mail that carries a link to the password page. A person who forgot theirs gets it (`Reset password`), and so
- * does a person whose administrator issued a password setup link (ADR-0161) - one page, one mail, two headings.
- */
-function getResetPasswordEmailForm({ name, resetUrl, heading = 'Reset password', action = 'reset password', note = '' }) {
-    return `
-  <html lang="en">
-    <head>
-      <meta charset="utf-8" />
-      
-      <title>reset password</title>
-      <meta name="description" content="Password Reset" />
-      <meta name="author" content="hatiolab" />
-      <meta name="google" content="notranslate"/>
-    </head>
-
-    <body>
-      <div style="background-color:#f6f6f6">
-        <!--header begin-->
-        <div style="background-color:#fff;padding:0 10px;border-top: 2px solid #394e64;">
-          <a href="#" target="_blank"
-            ><img
-              src="http://www.hatiolab.com/assets/img/logo-operato.png"
-              style="max-height:50px"
-          /></a>
-        </div>
-        <!--header end-->
-
-        <!--title begin-->
-        <div
-          style="background-color:#22a6a7;padding:12px 10px 10px 10px;min-height:50px;"
-        >
-          <img
-            src="http://www.hatiolab.com/assets/img/icon-mail.png"
-            style="float:left;margin:0 10px 0 40px"
-          />
-          <span style="display:block;color:#fff;font-size:20px"
-            >Hi ${name}!</span
-          >
-          <span style="display:block;color:#fff;font-size:34px;font-weight:bold"
-            >${heading}</span
-          >
-        </div>
-        <!--title end-->
-
-        <!--body begin-->
-        <p style="padding:10px 20px;line-height:1.5;font-size:16px">
-          Click the button below to ${action}.${note ? ` ${note}` : ''}
-          <br />
-          <a
-            href="${resetUrl}"
-            style="display:inline-block;margin:10px 5px 5px 0;border-radius:7px;background-color:#22a6a7;padding:7px 15px;color:#fff;font-size:18px;text-decoration:none;text-transform:capitalize;"
-            >${action}</a
-          >
-        </p>
-        <!--body end-->
-
-        <!--footer begin-->
-        <div
-          style="background-color:#3d5874;padding:7px 20px 5px 20px;font-size:12px;color:#efefef"
-        >
-          © Hatio, Lab. Inc. All rights reserved.
-        </div>
-        <!--footer end-->
-      </div>
-    </body>
-  </html>
-  `;
-}
-//# sourceMappingURL=reset-password-email.js.map

package/dist-server/templates/reset-password-email.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reset-password-email.js","sourceRoot":"","sources":["../../server/templates/reset-password-email.ts"],"names":[],"mappings":";;AAIA,8DA4EC;AAhFD;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,EACxC,IAAI,EACJ,QAAQ,EACR,OAAO,GAAG,gBAAgB,EAC1B,MAAM,GAAG,gBAAgB,EACzB,IAAI,GAAG,EAAE,EAOV;IACC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgCS,IAAI;;;eAGP,OAAO;;;;;;;sCAOgB,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;;;oBAGlD,QAAQ;;eAEb,MAAM;;;;;;;;;;;;;;;GAelB,CAAA;AACH,CAAC","sourcesContent":["/**\n * The mail that carries a link to the password page. A person who forgot theirs gets it (`Reset password`), and so\n * does a person whose administrator issued a password setup link (ADR-0161) - one page, one mail, two headings.\n */\nexport function getResetPasswordEmailForm({\n  name,\n  resetUrl,\n  heading = 'Reset password',\n  action = 'reset password',\n  note = ''\n}: {\n  name: string\n  resetUrl: string\n  heading?: string\n  action?: string\n  note?: string\n}) {\n  return `\n  <html lang=\"en\">\n    <head>\n      <meta charset=\"utf-8\" />\n      \n      <title>reset password</title>\n      <meta name=\"description\" content=\"Password Reset\" />\n      <meta name=\"author\" content=\"hatiolab\" />\n      <meta name=\"google\" content=\"notranslate\"/>\n    </head>\n\n    <body>\n      <div style=\"background-color:#f6f6f6\">\n        <!--header begin-->\n        <div style=\"background-color:#fff;padding:0 10px;border-top: 2px solid #394e64;\">\n          <a href=\"#\" target=\"_blank\"\n            ><img\n              src=\"http://www.hatiolab.com/assets/img/logo-operato.png\"\n              style=\"max-height:50px\"\n          /></a>\n        </div>\n        <!--header end-->\n\n        <!--title begin-->\n        <div\n          style=\"background-color:#22a6a7;padding:12px 10px 10px 10px;min-height:50px;\"\n        >\n          <img\n            src=\"http://www.hatiolab.com/assets/img/icon-mail.png\"\n            style=\"float:left;margin:0 10px 0 40px\"\n          />\n          <span style=\"display:block;color:#fff;font-size:20px\"\n            >Hi ${name}!</span\n          >\n          <span style=\"display:block;color:#fff;font-size:34px;font-weight:bold\"\n            >${heading}</span\n          >\n        </div>\n        <!--title end-->\n\n        <!--body begin-->\n        <p style=\"padding:10px 20px;line-height:1.5;font-size:16px\">\n          Click the button below to ${action}.${note ? ` ${note}` : ''}\n          <br />\n          <a\n            href=\"${resetUrl}\"\n            style=\"display:inline-block;margin:10px 5px 5px 0;border-radius:7px;background-color:#22a6a7;padding:7px 15px;color:#fff;font-size:18px;text-decoration:none;text-transform:capitalize;\"\n            >${action}</a\n          >\n        </p>\n        <!--body end-->\n\n        <!--footer begin-->\n        <div\n          style=\"background-color:#3d5874;padding:7px 20px 5px 20px;font-size:12px;color:#efefef\"\n        >\n          © Hatio, Lab. Inc. All rights reserved.\n        </div>\n        <!--footer end-->\n      </div>\n    </body>\n  </html>\n  `\n}\n"]}

package/dist-server/templates/verification-email.d.ts

@@ -1,5 +0,0 @@
-export declare function getVerificationEmailForm({ username, name, verifyUrl }: {
-    username: any;
-    name: any;
-    verifyUrl: any;
-}): string;