@things-factory/auth-base 4.3.671 → 4.3.673

package/dist-server/constants/error-code.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VERIFICATION_ERROR = exports.PASSWORD_USED_PAST = exports.USER_DUPLICATED = exports.PASSWORD_PATTERN_NOT_MATCHED = exports.CONFIRM_PASSWORD_NOT_MATCHED = exports.SUBDOMAIN_NOTFOUND = exports.AUTH_INVALID = exports.TOKEN_INVALID = exports.REDIRECT_TO_DEFAULT_DOMAIN = exports.NO_SELECTED_DOMAIN = exports.UNAVAILABLE_DOMAIN = exports.NO_AVAILABLE_DOMAIN = exports.USER_DELETED = exports.USER_LOCKED = exports.USER_NOT_ACTIVATED = exports.PASSWORD_NOT_MATCHED = exports.USER_NOT_FOUND = void 0;
+exports.USER_NOT_FOUND = 'user not found';
+exports.PASSWORD_NOT_MATCHED = 'password-not-matched';
+exports.USER_NOT_ACTIVATED = 'user not activated';
+exports.USER_LOCKED = 'user-locked';
+exports.USER_DELETED = 'user-deleted';
+exports.NO_AVAILABLE_DOMAIN = 'no-available-domain';
+exports.UNAVAILABLE_DOMAIN = 'unavailable-domain';
+exports.NO_SELECTED_DOMAIN = 'no-selected-domain';
+exports.REDIRECT_TO_DEFAULT_DOMAIN = 'redirect-to-default-domain';
+exports.TOKEN_INVALID = 'token-invalid';
+exports.AUTH_INVALID = 'auth-invalid';
+exports.SUBDOMAIN_NOTFOUND = 'subdomain not found';
+exports.CONFIRM_PASSWORD_NOT_MATCHED = 'confirm password not matched';
+exports.PASSWORD_PATTERN_NOT_MATCHED = 'password should match the rule';
+exports.USER_DUPLICATED = 'user duplicated';
+exports.PASSWORD_USED_PAST = 'password used in the past';
+exports.VERIFICATION_ERROR = 'user or verification token not found';
+//# sourceMappingURL=error-code.js.map

package/dist-server/constants/error-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-code.js","sourceRoot":"","sources":["../../server/constants/error-code.ts"],"names":[],"mappings":";;;AAAa,QAAA,cAAc,GAAG,gBAAgB,CAAA;AACjC,QAAA,oBAAoB,GAAG,sBAAsB,CAAA;AAC7C,QAAA,kBAAkB,GAAG,oBAAoB,CAAA;AACzC,QAAA,WAAW,GAAG,aAAa,CAAA;AAC3B,QAAA,YAAY,GAAG,cAAc,CAAA;AAC7B,QAAA,mBAAmB,GAAG,qBAAqB,CAAA;AAC3C,QAAA,kBAAkB,GAAG,oBAAoB,CAAA;AACzC,QAAA,kBAAkB,GAAG,oBAAoB,CAAA;AACzC,QAAA,0BAA0B,GAAG,4BAA4B,CAAA;AACzD,QAAA,aAAa,GAAG,eAAe,CAAA;AAC/B,QAAA,YAAY,GAAG,cAAc,CAAA;AAC7B,QAAA,kBAAkB,GAAG,qBAAqB,CAAA;AAC1C,QAAA,4BAA4B,GAAG,8BAA8B,CAAA;AAC7D,QAAA,4BAA4B,GAAG,gCAAgC,CAAA;AAC/D,QAAA,eAAe,GAAG,iBAAiB,CAAA;AACnC,QAAA,kBAAkB,GAAG,2BAA2B,CAAA;AAChD,QAAA,kBAAkB,GAAG,sCAAsC,CAAA"}

package/dist-server/constants/error-message.js

@@ -0,0 +1 @@
+//# sourceMappingURL=error-message.js.map

package/dist-server/constants/error-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-message.js","sourceRoot":"","sources":["../../server/constants/error-message.ts"],"names":[],"mappings":""}

package/dist-server/constants/max-age.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_AGE = void 0;
+exports.MAX_AGE = 7 * 24 * 3600 * 1000;
+//# sourceMappingURL=max-age.js.map

package/dist-server/constants/max-age.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"max-age.js","sourceRoot":"","sources":["../../server/constants/max-age.ts"],"names":[],"mappings":";;;AAAa,QAAA,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA"}

package/dist-server/controllers/auth.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./change-pwd"), exports);
+__exportStar(require("./signin"), exports);
+__exportStar(require("./signup"), exports);
+__exportStar(require("./verification"), exports);
+//# sourceMappingURL=auth.js.map

package/dist-server/controllers/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../server/controllers/auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA4B;AAC5B,2CAAwB;AACxB,2CAAwB;AACxB,iDAA8B"}

package/dist-server/controllers/change-pwd.js

@@ -0,0 +1,80 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.changePwd = void 0;
+const typeorm_1 = require("typeorm");
+const user_1 = require("../service/user/user");
+const password_history_1 = require("../service/password-history/password-history");
+const auth_error_1 = require("../errors/auth-error");
+const error_code_1 = require("../constants/error-code");
+const env_1 = require("@things-factory/env");
+const debug = require('debug')('things-factory:auth-base:changed-pwd');
+const HISTORY_SIZE = env_1.config.get('password', { history: 0 }).history;
+async function changePwd(attrs, currentPass, newPass, confirmPass, context) {
+    const { domain } = context.state;
+    // TODO 이 사용자가 이 도메인에 속한 사용자인지 확인해야함.
+    const repository = (0, typeorm_1.getRepository)(user_1.User);
+    const user = await repository.findOne({ where: { email: attrs.email } });
+    if (!user) {
+        throw new auth_error_1.AuthError({
+            errorCode: error_code_1.USER_NOT_FOUND
+        });
+    }
+    if (newPass !== confirmPass) {
+        throw new auth_error_1.AuthError({
+            errorCode: error_code_1.CONFIRM_PASSWORD_NOT_MATCHED
+        });
+    }
+    if (!user_1.User.verify(user.password, currentPass, user.salt)) {
+        throw new auth_error_1.AuthError({
+            errorCode: error_code_1.PASSWORD_NOT_MATCHED,
+            detail: {
+                failCount: user.failCount
+            }
+        });
+    }
+    /* check if password is following the rule */
+    user_1.User.validatePasswordByRule(newPass, context === null || context === void 0 ? void 0 : context.lng);
+    user.password = user_1.User.encode(newPass, user.salt);
+    if (HISTORY_SIZE > 0) {
+        var passwordHistory = await (0, typeorm_1.getRepository)(password_history_1.PasswordHistory).findOne(user.id);
+        var history = [];
+        if (passwordHistory) {
+            try {
+                history = JSON.parse(passwordHistory.history);
+                if (!(history instanceof Array)) {
+                    debug('password history maybe currupted - not an array');
+                    history = [];
+                }
+            }
+            catch (e) {
+                debug('password history currupted - not json format');
+            }
+            const found = history.slice(0, HISTORY_SIZE).find(h => {
+                return user_1.User.verify(h.password, newPass, h.salt);
+            });
+            if (found) {
+                throw new auth_error_1.AuthError({
+                    errorCode: error_code_1.PASSWORD_USED_PAST
+                });
+            }
+        }
+    }
+    await repository.save(Object.assign(Object.assign({}, user), { passwordUpdatedAt: new Date() }));
+    if (HISTORY_SIZE > 0) {
+        history = [
+            {
+                password: user.password,
+                salt: user.salt
+            },
+            ...history
+        ].slice(0, HISTORY_SIZE);
+        await (0, typeorm_1.getRepository)(password_history_1.PasswordHistory).save({
+            userId: user.id,
+            history: JSON.stringify(history)
+        });
+        debug('password history updated', history.length);
+    }
+    return await user.sign({ subdomain: domain.subdomain });
+}
+exports.changePwd = changePwd;
+//# sourceMappingURL=change-pwd.js.map

package/dist-server/controllers/change-pwd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-pwd.js","sourceRoot":"","sources":["../../server/controllers/change-pwd.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,+CAA2C;AAC3C,mFAA8E;AAC9E,qDAAgD;AAChD,wDAKgC;AAEhC,6CAA4C;AAE5C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,sCAAsC,CAAC,CAAA;AAEtE,MAAM,YAAY,GAAG,YAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAA;AAE5D,KAAK,UAAU,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO;IAC/E,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAA;IAEhC,qCAAqC;IACrC,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,WAAI,CAAC,CAAA;IACtC,MAAM,IAAI,GAAS,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAE9E,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,2BAAc;SAC1B,CAAC,CAAA;KACH;IAED,IAAI,OAAO,KAAK,WAAW,EAAE;QAC3B,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,yCAA4B;SACxC,CAAC,CAAA;KACH;IAED,IAAI,CAAC,WAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;QACvD,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,iCAAoB;YAC/B,MAAM,EAAE;gBACN,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;SACF,CAAC,CAAA;KACH;IACD,6CAA6C;IAC7C,WAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,CAAC,CAAA;IAElD,IAAI,CAAC,QAAQ,GAAG,WAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAE/C,IAAI,YAAY,GAAG,CAAC,EAAE;QACpB,IAAI,eAAe,GAAoB,MAAM,IAAA,uBAAa,EAAC,kCAAe,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5F,IAAI,OAAO,GAAG,EAAE,CAAA;QAEhB,IAAI,eAAe,EAAE;YACnB,IAAI;gBACF,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;gBAC7C,IAAI,CAAC,CAAC,OAAO,YAAY,KAAK,CAAC,EAAE;oBAC/B,KAAK,CAAC,iDAAiD,CAAC,CAAA;oBACxD,OAAO,GAAG,EAAE,CAAA;iBACb;aACF;YAAC,OAAO,CAAC,EAAE;gBACV,KAAK,CAAC,8CAA8C,CAAC,CAAA;aACtD;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;gBACpD,OAAO,WAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YACjD,CAAC,CAAC,CAAA;YAEF,IAAI,KAAK,EAAE;gBACT,MAAM,IAAI,sBAAS,CAAC;oBAClB,SAAS,EAAE,+BAAkB;iBAC9B,CAAC,CAAA;aACH;SACF;KACF;IAED,MAAM,UAAU,CAAC,IAAI,iCAChB,IAAI,KACP,iBAAiB,EAAE,IAAI,IAAI,EAAE,IAC7B,CAAA;IAEF,IAAI,YAAY,GAAG,CAAC,EAAE;QACpB,OAAO,GAAG;YACR;gBACE,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB;YACD,GAAG,OAAO;SACX,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;QAExB,MAAM,IAAA,uBAAa,EAAC,kCAAe,CAAC,CAAC,IAAI,CAAC;YACxC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SACjC,CAAC,CAAA;QAEF,KAAK,CAAC,0BAA0B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;KAClD;IAED,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAA;AACzD,CAAC;AAlFD,8BAkFC"}

package/dist-server/controllers/checkin.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkin = void 0;
+const get_user_domains_1 = require("../utils/get-user-domains");
+const typeorm_1 = require("typeorm");
+const user_1 = require("../service/user/user");
+async function checkin({ userId, subdomain }) {
+    const userRepo = (0, typeorm_1.getRepository)(user_1.User);
+    const user = await userRepo.findOne({ where: { id: userId } });
+    const domains = await (0, get_user_domains_1.getUserDomains)(user);
+    if (!(domains === null || domains === void 0 ? void 0 : domains.length)) {
+        return false;
+    }
+    const domain = domains.find(domain => domain.subdomain == subdomain);
+    if (!domain) {
+        return false;
+    }
+    return await user.sign({ subdomain });
+}
+exports.checkin = checkin;
+//# sourceMappingURL=checkin.js.map

package/dist-server/controllers/checkin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkin.js","sourceRoot":"","sources":["../../server/controllers/checkin.ts"],"names":[],"mappings":";;;AAAA,gEAA0D;AAE1D,qCAAuC;AACvC,+CAA2C;AAEpC,KAAK,UAAU,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE;IACjD,MAAM,QAAQ,GAAG,IAAA,uBAAa,EAAC,WAAI,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9D,MAAM,OAAO,GAAa,MAAM,IAAA,iCAAc,EAAC,IAAI,CAAC,CAAA;IAEpD,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,EAAE;QACpB,OAAO,KAAK,CAAA;KACb;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,EAAE;QACX,OAAO,KAAK,CAAA;KACb;IAED,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;AACvC,CAAC;AAfD,0BAeC"}

package/dist-server/controllers/delete-user.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deleteUsers = exports.deleteUser = void 0;
+const typeorm_1 = require("typeorm");
+const user_1 = require("../service/user/user");
+const auth_error_1 = require("../errors/auth-error");
+const error_code_1 = require("../constants/error-code");
+async function deleteUser(attrs, tx) {
+    // TODO 이 사용자가 이 도메인에 속한 사용자인지 확인해야함.
+    // TODO 다른 도메인에도 포함되어있다면, domains-users 관게와 해당 도메인 관련 정보만 삭제해야 함.
+    const repository = tx === null || tx === void 0 ? void 0 : tx.getRepository(user_1.User);
+    const user = await repository.findOne({ where: { email: attrs.email } });
+    if (!user) {
+        throw new auth_error_1.AuthError({
+            errorCode: error_code_1.USER_NOT_FOUND
+        });
+    }
+    user.status = user_1.UserStatus.DELETED;
+    user.domains = [];
+    await repository.save(user);
+    // repository api는 작동하지 않음.
+    // await txManager
+    //   .createQueryBuilder()
+    //   .delete()
+    //   .from('users_domains')
+    //   .where({
+    //     usersId: user.id
+    //   })
+    //   .execute()
+}
+exports.deleteUser = deleteUser;
+async function deleteUsers(attrs, tx) {
+    // TODO 이 사용자가 이 도메인에 속한 사용자인지 확인해야함.
+    // TODO 다른 도메인에도 포함되어있다면, domains-users 관게와 해당 도메인 관련 정보만 삭제해야 함.
+    const { emails } = attrs;
+    const repo = tx === null || tx === void 0 ? void 0 : tx.getRepository(user_1.User);
+    const users = await repo.find({
+        where: {
+            email: (0, typeorm_1.In)(emails)
+        }
+    });
+    const userIds = [];
+    users.forEach(user => {
+        user.status = user_1.UserStatus.DELETED;
+        user.domains = [];
+        userIds.push(user.id);
+    });
+    await repo.save(users);
+    // repository api는 작동하지 않음.
+    // await txManager
+    //   .createQueryBuilder()
+    //   .delete()
+    //   .from('users_domains')
+    //   .where({
+    //     usersId: In(userIds)
+    //   })
+    //   .execute()
+    return true;
+}
+exports.deleteUsers = deleteUsers;
+//# sourceMappingURL=delete-user.js.map

package/dist-server/controllers/delete-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-user.js","sourceRoot":"","sources":["../../server/controllers/delete-user.ts"],"names":[],"mappings":";;;AAAA,qCAA2C;AAC3C,+CAAuD;AACvD,qDAAgD;AAChD,wDAAwD;AAEjD,KAAK,UAAU,UAAU,CAAC,KAAK,EAAE,EAAkB;IACxD,qCAAqC;IACrC,iEAAiE;IAEjE,MAAM,UAAU,GAAG,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,aAAa,CAAC,WAAI,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACxE,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,2BAAc;SAC1B,CAAC,CAAA;KACH;IAED,IAAI,CAAC,MAAM,GAAG,iBAAU,CAAC,OAAO,CAAA;IAChC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;IAEjB,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAE3B,2BAA2B;IAC3B,kBAAkB;IAClB,0BAA0B;IAC1B,cAAc;IACd,2BAA2B;IAC3B,aAAa;IACb,uBAAuB;IACvB,OAAO;IACP,eAAe;AACjB,CAAC;AA1BD,gCA0BC;AAEM,KAAK,UAAU,WAAW,CAAC,KAAK,EAAE,EAAkB;IACzD,qCAAqC;IACrC,iEAAiE;IAEjE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IAExB,MAAM,IAAI,GAAG,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,aAAa,CAAC,WAAI,CAAC,CAAA;IAEpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;QAC5B,KAAK,EAAE;YACL,KAAK,EAAE,IAAA,YAAE,EAAC,MAAM,CAAC;SAClB;KACF,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,EAAE,CAAA;IAClB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACnB,IAAI,CAAC,MAAM,GAAG,iBAAU,CAAC,OAAO,CAAA;QAChC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;QAEjB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAEtB,2BAA2B;IAC3B,kBAAkB;IAClB,0BAA0B;IAC1B,cAAc;IACd,2BAA2B;IAC3B,aAAa;IACb,2BAA2B;IAC3B,OAAO;IACP,eAAe;IACf,OAAO,IAAI,CAAA;AACb,CAAC;AAlCD,kCAkCC"}

package/dist-server/controllers/invitation.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resendInvitationEmail = exports.sendInvitationEmail = exports.acceptInvitation = exports.invite = void 0;
+const shell_1 = require("@things-factory/shell");
+const email_base_1 = require("@things-factory/email-base");
+const typeorm_1 = require("typeorm");
+const url_1 = require("url");
+const user_1 = require("../service/user/user");
+const invitation_1 = require("../service/invitation/invitation");
+const invitation_email_1 = require("../templates/invitation-email");
+const make_invitation_token_1 = require("./utils/make-invitation-token");
+const save_invitation_token_1 = require("./utils/save-invitation-token");
+const debug = require('debug')('things-factory:auth-base:invitation');
+async function invite(attrs, withEmailInvitation) {
+    const { email, reference, type, context } = attrs;
+    var user = await (0, typeorm_1.getRepository)(user_1.User).findOne({ where: { email }, relations: ['domains'] });
+    var domains = user.domains;
+    // TODO reference should not be a domain.id (security reason)
+    debug('invite', email, reference, type);
+    if (user) {
+        const domain = domains.find(domain => domain.id == reference);
+        if (domain) {
+            const msg = `user already a member of the ${type}.`;
+            debug('invite', msg);
+            throw new Error(msg);
+        }
+    }
+    if (withEmailInvitation) {
+        var invitation = await (0, typeorm_1.getRepository)(invitation_1.Invitation).findOne({
+            email,
+            reference,
+            type
+        });
+        if (!invitation) {
+            invitation = await (0, typeorm_1.getRepository)(invitation_1.Invitation).save({
+                email,
+                reference,
+                type
+            });
+        }
+        return await sendInvitationEmail({
+            invitation,
+            context
+        });
+    }
+    if (user) {
+        user.domains = [...domains, await (0, typeorm_1.getRepository)(shell_1.Domain).findOne(reference)];
+        await (0, typeorm_1.getRepository)(user_1.User).save(user);
+    }
+    else {
+        // TODO need to signup
+    }
+}
+exports.invite = invite;
+async function acceptInvitation(token) {
+    var invitation = await (0, typeorm_1.getRepository)(invitation_1.Invitation).findOne({
+        token
+    });
+    debug('accept-invitation', invitation);
+    if (!invitation) {
+        throw new Error(`not found invitation.`);
+    }
+    var { email, reference, type } = invitation;
+    var user = await (0, typeorm_1.getRepository)(user_1.User).findOne({ where: { email }, relations: ['domains'] });
+    if (user) {
+        var domains = user.domains;
+        const domain = domains.find(domain => domain.id == reference);
+        if (domain) {
+            const msg = `user already a member of the ${type}.`;
+            debug('accept-invitation', msg);
+            throw new Error(msg);
+        }
+        user.domains = [...domains, await (0, typeorm_1.getRepository)(shell_1.Domain).findOne(reference)];
+        await (0, typeorm_1.getRepository)(user_1.User).save(user);
+        await (0, typeorm_1.getRepository)(invitation_1.Invitation).delete(invitation.id);
+    }
+    else {
+        // TODO goto signup
+    }
+    return true;
+}
+exports.acceptInvitation = acceptInvitation;
+async function sendInvitationEmail({ invitation, context }) {
+    try {
+        var token = (0, make_invitation_token_1.makeInvitationToken)();
+        var verifaction = await (0, save_invitation_token_1.saveInvitationToken)(invitation.id, token);
+        if (verifaction) {
+            var serviceUrl = new url_1.URL(`/auth/accept/${token}`, context.header.referer);
+            await (0, email_base_1.sendEmail)({
+                receiver: invitation.email,
+                subject: 'Invitation',
+                content: (0, invitation_email_1.getInvitationEmailForm)({
+                    email: invitation.email,
+                    acceptUrl: serviceUrl
+                })
+            });
+            return true;
+        }
+    }
+    catch (e) {
+        return false;
+    }
+}
+exports.sendInvitationEmail = sendInvitationEmail;
+async function resendInvitationEmail({ email, reference, type }, context) {
+    var invitation = await (0, typeorm_1.getRepository)(invitation_1.Invitation).findOne({
+        email,
+        reference,
+        type
+    });
+    if (!invitation)
+        return false;
+    return await sendInvitationEmail({
+        invitation,
+        context
+    });
+}
+exports.resendInvitationEmail = resendInvitationEmail;
+//# sourceMappingURL=invitation.js.map

package/dist-server/controllers/invitation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.js","sourceRoot":"","sources":["../../server/controllers/invitation.ts"],"names":[],"mappings":";;;AAAA,iDAA8C;AAC9C,2DAAsD;AACtD,qCAAuC;AACvC,6BAAyB;AACzB,+CAAuD;AACvD,iEAA6D;AAC7D,oEAAsE;AACtE,yEAAmE;AACnE,yEAAmE;AAEnE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,qCAAqC,CAAC,CAAA;AAE9D,KAAK,UAAU,MAAM,CAAC,KAAK,EAAE,mBAA6B;IAC/D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;IAEjD,IAAI,IAAI,GAAG,MAAM,IAAA,uBAAa,EAAC,WAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC1F,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAE1B,6DAA6D;IAC7D,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;IAEvC,IAAI,IAAI,EAAE;QACR,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,SAAS,CAAC,CAAA;QAE7D,IAAI,MAAM,EAAE;YACV,MAAM,GAAG,GAAG,gCAAgC,IAAI,GAAG,CAAA;YACnD,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YACpB,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAA;SACrB;KACF;IAED,IAAI,mBAAmB,EAAE;QACvB,IAAI,UAAU,GAAG,MAAM,IAAA,uBAAa,EAAC,uBAAU,CAAC,CAAC,OAAO,CAAC;YACvD,KAAK;YACL,SAAS;YACT,IAAI;SACL,CAAC,CAAA;QAEF,IAAI,CAAC,UAAU,EAAE;YACf,UAAU,GAAG,MAAM,IAAA,uBAAa,EAAC,uBAAU,CAAC,CAAC,IAAI,CAAC;gBAChD,KAAK;gBACL,SAAS;gBACT,IAAI;aACL,CAAC,CAAA;SACH;QAED,OAAO,MAAM,mBAAmB,CAAC;YAC/B,UAAU;YACV,OAAO;SACR,CAAC,CAAA;KACH;IAED,IAAI,IAAI,EAAE;QACR,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,OAAO,EAAE,MAAM,IAAA,uBAAa,EAAC,cAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;QAC3E,MAAM,IAAA,uBAAa,EAAC,WAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;KACrC;SAAM;QACL,sBAAsB;KACvB;AACH,CAAC;AA9CD,wBA8CC;AAEM,KAAK,UAAU,gBAAgB,CAAC,KAAK;IAC1C,IAAI,UAAU,GAAG,MAAM,IAAA,uBAAa,EAAC,uBAAU,CAAC,CAAC,OAAO,CAAC;QACvD,KAAK;KACN,CAAC,CAAA;IAEF,KAAK,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAA;IAEtC,IAAI,CAAC,UAAU,EAAE;QACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;KACzC;IAED,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,UAAU,CAAA;IAE3C,IAAI,IAAI,GAAG,MAAM,IAAA,uBAAa,EAAC,WAAI,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAE1F,IAAI,IAAI,EAAE;QACR,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,SAAS,CAAC,CAAA;QAE7D,IAAI,MAAM,EAAE;YACV,MAAM,GAAG,GAAG,gCAAgC,IAAI,GAAG,CAAA;YACnD,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAA;YAC/B,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAA;SACrB;QAED,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,OAAO,EAAE,MAAM,IAAA,uBAAa,EAAC,cAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;QAC3E,MAAM,IAAA,uBAAa,EAAC,WAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAEpC,MAAM,IAAA,uBAAa,EAAC,uBAAU,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;KACtD;SAAM;QACL,mBAAmB;KACpB;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAlCD,4CAkCC;AAEM,KAAK,UAAU,mBAAmB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE;IAC/D,IAAI;QACF,IAAI,KAAK,GAAG,IAAA,2CAAmB,GAAE,CAAA;QACjC,IAAI,WAAW,GAAG,MAAM,IAAA,2CAAmB,EAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QAEjE,IAAI,WAAW,EAAE;YACf,IAAI,UAAU,GAAG,IAAI,SAAG,CAAC,gBAAgB,KAAK,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAEzE,MAAM,IAAA,sBAAS,EAAC;gBACd,QAAQ,EAAE,UAAU,CAAC,KAAK;gBAC1B,OAAO,EAAE,YAAY;gBACrB,OAAO,EAAE,IAAA,yCAAsB,EAAC;oBAC9B,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,SAAS,EAAE,UAAU;iBACtB,CAAC;aACH,CAAC,CAAA;YAEF,OAAO,IAAI,CAAA;SACZ;KACF;IAAC,OAAO,CAAC,EAAE;QACV,OAAO,KAAK,CAAA;KACb;AACH,CAAC;AAtBD,kDAsBC;AAEM,KAAK,UAAU,qBAAqB,CACzC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAsD,EAC9E,OAAO;IAEP,IAAI,UAAU,GAAG,MAAM,IAAA,uBAAa,EAAC,uBAAU,CAAC,CAAC,OAAO,CAAC;QACvD,KAAK;QACL,SAAS;QACT,IAAI;KACL,CAAC,CAAA;IAEF,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAE7B,OAAO,MAAM,mBAAmB,CAAC;QAC/B,UAAU;QACV,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAhBD,sDAgBC"}

package/dist-server/controllers/profile.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateProfile = void 0;
+const typeorm_1 = require("typeorm");
+const error_code_1 = require("../constants/error-code");
+const user_1 = require("../service/user/user");
+const auth_error_1 = require("../errors/auth-error");
+async function updateProfile({ id }, newProfiles) {
+    const repository = (0, typeorm_1.getRepository)(user_1.User);
+    const user = await repository.findOne(id);
+    if (!user) {
+        throw new auth_error_1.AuthError({
+            errorCode: error_code_1.USER_NOT_FOUND
+        });
+    }
+    /* only 'name', 'email' and 'locale' attributes can be changed */
+    var allowed = ['name', 'email', 'locale']
+        .filter(attr => attr in newProfiles)
+        .reduce((sum, attr) => {
+        sum[attr] = newProfiles[attr];
+        return sum;
+    }, {});
+    return await repository.save(Object.assign(Object.assign({}, user), allowed));
+}
+exports.updateProfile = updateProfile;
+//# sourceMappingURL=profile.js.map

package/dist-server/controllers/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../server/controllers/profile.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,wDAAwD;AACxD,+CAA2C;AAC3C,qDAAgD;AAEzC,KAAK,UAAU,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW;IACrD,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,WAAI,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACzC,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,2BAAc;SAC1B,CAAC,CAAA;KACH;IAED,iEAAiE;IACjE,IAAI,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;SACtC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,WAAW,CAAC;SACnC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QACpB,GAAG,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;QAC7B,OAAO,GAAG,CAAA;IACZ,CAAC,EAAE,EAAE,CAAC,CAAA;IAER,OAAO,MAAM,UAAU,CAAC,IAAI,iCACvB,IAAI,GACJ,OAAO,EACV,CAAA;AACJ,CAAC;AArBD,sCAqBC"}

package/dist-server/controllers/reset-password.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetPassword = exports.sendPasswordResetEmail = void 0;
+const email_base_1 = require("@things-factory/email-base");
+const typeorm_1 = require("typeorm");
+const url_1 = require("url");
+const user_1 = require("../service/user/user");
+const verification_token_1 = require("../service/verification-token/verification-token");
+const password_history_1 = require("../service/password-history/password-history");
+const reset_password_email_1 = require("../templates/reset-password-email");
+const make_verification_token_1 = require("./utils/make-verification-token");
+const save_verification_token_1 = require("./utils/save-verification-token");
+const env_1 = require("@things-factory/env");
+const error_code_1 = require("../constants/error-code");
+const auth_error_1 = require("../errors/auth-error");
+const HISTORY_SIZE = env_1.config.get('password', { history: 0 }).history;
+const debug = require('debug')('things-factory:auth-base:reset-password');
+async function sendPasswordResetEmail({ user, context }) {
+    try {
+        var token = (0, make_verification_token_1.makeVerificationToken)();
+        var verifaction = await (0, save_verification_token_1.saveVerificationToken)(user.id, token, verification_token_1.VerificationTokenType.PASSWORD_RESET);
+        if (verifaction) {
+            var serviceUrl = new url_1.URL(`/auth/reset-password?token=${token}`, context.header.referer);
+            await (0, email_base_1.sendEmail)({
+                receiver: user.email,
+                subject: 'Reset your password',
+                content: (0, reset_password_email_1.getResetPasswordEmailForm)({
+                    resetUrl: serviceUrl
+                })
+            });
+            return true;
+        }
+    }
+    catch (e) {
+        return false;
+    }
+}
+exports.sendPasswordResetEmail = sendPasswordResetEmail;
+async function resetPassword(token, password, context) {
+    const { t } = context;
+    const verificationToken = await (0, typeorm_1.getRepository)(verification_token_1.VerificationToken).findOne({
+        where: {
+            token,
+            type: verification_token_1.VerificationTokenType.PASSWORD_RESET
+        }
+    });
+    if (!verificationToken) {
+        throw new Error(t('text.invalid verification token'));
+    }
+    const { userId } = verificationToken;
+    if (!userId) {
+        throw new Error(t('text.invalid verification token'));
+    }
+    var user = await (0, typeorm_1.getRepository)(user_1.User).findOne(userId);
+    if (!user) {
+        throw new Error(t('error.user not found'));
+    }
+    // if (user.status == UserStatus.INACTIVE) {
+    //   throw new Error(t('text.inactive user'))
+    // }
+    /* check if password is following the rule */
+    user_1.User.validatePasswordByRule(password, context === null || context === void 0 ? void 0 : context.lng);
+    user.password = user_1.User.encode(password, user.salt);
+    if (HISTORY_SIZE > 0) {
+        var passwordHistory = await (0, typeorm_1.getRepository)(password_history_1.PasswordHistory).findOne(user.id);
+        var history = [];
+        if (passwordHistory) {
+            try {
+                history = JSON.parse(passwordHistory.history);
+                if (!(history instanceof Array)) {
+                    debug('password history maybe currupted - not an array');
+                    history = [];
+                }
+            }
+            catch (e) {
+                debug('password history currupted - not json format');
+            }
+            const found = history.slice(0, HISTORY_SIZE).find(h => {
+                return user_1.User.verify(h.password, password, h.salt);
+            });
+            if (found) {
+                throw new auth_error_1.AuthError({
+                    errorCode: error_code_1.PASSWORD_USED_PAST
+                });
+            }
+        }
+    }
+    await (0, typeorm_1.getRepository)(user_1.User).save(Object.assign(Object.assign({}, user), { passwordUpdatedAt: new Date() }));
+    await (0, typeorm_1.getRepository)(verification_token_1.VerificationToken).delete({
+        userId,
+        token,
+        type: verification_token_1.VerificationTokenType.PASSWORD_RESET
+    });
+    if (HISTORY_SIZE > 0) {
+        history = [
+            {
+                password: user.password,
+                salt: user.salt
+            },
+            ...history
+        ].slice(0, HISTORY_SIZE);
+        await (0, typeorm_1.getRepository)(password_history_1.PasswordHistory).save({
+            userId: user.id,
+            history: JSON.stringify(history)
+        });
+        debug('password history updated', history.length);
+    }
+}
+exports.resetPassword = resetPassword;
+//# sourceMappingURL=reset-password.js.map

package/dist-server/controllers/reset-password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-password.js","sourceRoot":"","sources":["../../server/controllers/reset-password.ts"],"names":[],"mappings":";;;AAAA,2DAAsD;AACtD,qCAAuC;AACvC,6BAAyB;AACzB,+CAAuD;AACvD,yFAA2G;AAC3G,mFAA8E;AAC9E,4EAA6E;AAC7E,6EAAuE;AACvE,6EAAuE;AACvE,6CAA4C;AAC5C,wDAA4D;AAC5D,qDAAgD;AAEhD,MAAM,YAAY,GAAG,YAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAA;AACnE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,yCAAyC,CAAC,CAAA;AAElE,KAAK,UAAU,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5D,IAAI;QACF,IAAI,KAAK,GAAG,IAAA,+CAAqB,GAAE,CAAA;QACnC,IAAI,WAAW,GAAG,MAAM,IAAA,+CAAqB,EAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,0CAAqB,CAAC,cAAc,CAAC,CAAA;QAEnG,IAAI,WAAW,EAAE;YACf,IAAI,UAAU,GAAG,IAAI,SAAG,CAAC,8BAA8B,KAAK,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACvF,MAAM,IAAA,sBAAS,EAAC;gBACd,QAAQ,EAAE,IAAI,CAAC,KAAK;gBACpB,OAAO,EAAE,qBAAqB;gBAC9B,OAAO,EAAE,IAAA,gDAAyB,EAAC;oBACjC,QAAQ,EAAE,UAAU;iBACrB,CAAC;aACH,CAAC,CAAA;YAEF,OAAO,IAAI,CAAA;SACZ;KACF;IAAC,OAAO,CAAC,EAAE;QACV,OAAO,KAAK,CAAA;KACb;AACH,CAAC;AApBD,wDAoBC;AAEM,KAAK,UAAU,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO;IAC1D,MAAM,EAAE,CAAC,EAAE,GAAG,OAAO,CAAA;IAErB,MAAM,iBAAiB,GAAG,MAAM,IAAA,uBAAa,EAAC,sCAAiB,CAAC,CAAC,OAAO,CAAC;QACvE,KAAK,EAAE;YACL,KAAK;YACL,IAAI,EAAE,0CAAqB,CAAC,cAAc;SAC3C;KACF,CAAC,CAAA;IAEF,IAAI,CAAC,iBAAiB,EAAE;QACtB,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAA;KACtD;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAA;IACpC,IAAI,CAAC,MAAM,EAAE;QACX,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAA;KACtD;IAED,IAAI,IAAI,GAAG,MAAM,IAAA,uBAAa,EAAC,WAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACpD,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAA;KAC3C;IAED,4CAA4C;IAC5C,6CAA6C;IAC7C,IAAI;IAEJ,6CAA6C;IAC7C,WAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,CAAC,CAAA;IAEnD,IAAI,CAAC,QAAQ,GAAG,WAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAEhD,IAAI,YAAY,GAAG,CAAC,EAAE;QACpB,IAAI,eAAe,GAAoB,MAAM,IAAA,uBAAa,EAAC,kCAAe,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5F,IAAI,OAAO,GAAG,EAAE,CAAA;QAEhB,IAAI,eAAe,EAAE;YACnB,IAAI;gBACF,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;gBAC7C,IAAI,CAAC,CAAC,OAAO,YAAY,KAAK,CAAC,EAAE;oBAC/B,KAAK,CAAC,iDAAiD,CAAC,CAAA;oBACxD,OAAO,GAAG,EAAE,CAAA;iBACb;aACF;YAAC,OAAO,CAAC,EAAE;gBACV,KAAK,CAAC,8CAA8C,CAAC,CAAA;aACtD;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;gBACpD,OAAO,WAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YAClD,CAAC,CAAC,CAAA;YAEF,IAAI,KAAK,EAAE;gBACT,MAAM,IAAI,sBAAS,CAAC;oBAClB,SAAS,EAAE,+BAAkB;iBAC9B,CAAC,CAAA;aACH;SACF;KACF;IAED,MAAM,IAAA,uBAAa,EAAC,WAAI,CAAC,CAAC,IAAI,iCACzB,IAAI,KACP,iBAAiB,EAAE,IAAI,IAAI,EAAE,IAC7B,CAAA;IAEF,MAAM,IAAA,uBAAa,EAAC,sCAAiB,CAAC,CAAC,MAAM,CAAC;QAC5C,MAAM;QACN,KAAK;QACL,IAAI,EAAE,0CAAqB,CAAC,cAAc;KAC3C,CAAC,CAAA;IAEF,IAAI,YAAY,GAAG,CAAC,EAAE;QACpB,OAAO,GAAG;YACR;gBACE,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB;YACD,GAAG,OAAO;SACX,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;QAExB,MAAM,IAAA,uBAAa,EAAC,kCAAe,CAAC,CAAC,IAAI,CAAC;YACxC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SACjC,CAAC,CAAA;QAEF,KAAK,CAAC,0BAA0B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;KAClD;AACH,CAAC;AAvFD,sCAuFC"}

package/dist-server/controllers/signin.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signin = void 0;
+const typeorm_1 = require("typeorm");
+const unlock_user_1 = require("../controllers/unlock-user");
+const user_1 = require("../service/user/user");
+const auth_error_1 = require("../errors/auth-error");
+async function signin(attrs, context) {
+    const { domain } = (context === null || context === void 0 ? void 0 : context.state) || {};
+    const repository = (0, typeorm_1.getRepository)(user_1.User);
+    const user = await repository.findOne({ where: { email: attrs.email }, relations: ['domains'] });
+    if (!user)
+        throw new auth_error_1.AuthError({
+            errorCode: auth_error_1.AuthError.ERROR_CODES.USER_NOT_FOUND
+        });
+    if (user.status == user_1.UserStatus.DELETED) {
+        throw new auth_error_1.AuthError({
+            errorCode: auth_error_1.AuthError.ERROR_CODES.USER_DELETED
+        });
+    }
+    if (user.status == user_1.UserStatus.LOCKED) {
+        (0, unlock_user_1.sendUnlockUserEmail)({
+            user,
+            context
+        });
+        throw new auth_error_1.AuthError({
+            errorCode: auth_error_1.AuthError.ERROR_CODES.USER_LOCKED,
+            detail: {
+                email: user.email
+            }
+        });
+    }
+    if (!user_1.User.verify(user.password, attrs.password, user.salt)) {
+        user.failCount++;
+        if (user.failCount >= 5)
+            user.status = user_1.UserStatus.LOCKED;
+        await repository.save(user);
+        if (user.status == user_1.UserStatus.LOCKED) {
+            (0, unlock_user_1.sendUnlockUserEmail)({
+                user,
+                context
+            });
+            throw new auth_error_1.AuthError({
+                errorCode: auth_error_1.AuthError.ERROR_CODES.USER_LOCKED,
+                detail: {
+                    email: user.email
+                }
+            });
+        }
+        throw new auth_error_1.AuthError({
+            errorCode: auth_error_1.AuthError.ERROR_CODES.PASSWORD_NOT_MATCHED,
+            detail: {
+                failCount: user.failCount
+            }
+        });
+    }
+    else {
+        user.failCount = 0;
+        await repository.save(user);
+    }
+    if (user.status == user_1.UserStatus.INACTIVE) {
+        throw new auth_error_1.AuthError({
+            errorCode: auth_error_1.AuthError.ERROR_CODES.USER_NOT_ACTIVATED,
+            detail: {
+                email: user.email
+            }
+        });
+    }
+    return {
+        user,
+        token: await user.sign({ subdomain: domain === null || domain === void 0 ? void 0 : domain.subdomain }),
+        domains: user.domains || []
+    };
+}
+exports.signin = signin;
+//# sourceMappingURL=signin.js.map

package/dist-server/controllers/signin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signin.js","sourceRoot":"","sources":["../../server/controllers/signin.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,4DAAgE;AAChE,+CAAuD;AACvD,qDAAgD;AAEzC,KAAK,UAAU,MAAM,CAAC,KAAK,EAAE,OAAQ;IAC1C,MAAM,EAAE,MAAM,EAAE,GAAG,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,KAAI,EAAE,CAAA;IAEvC,MAAM,UAAU,GAAG,IAAA,uBAAa,EAAC,WAAI,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAChG,IAAI,CAAC,IAAI;QACP,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,cAAc;SAChD,CAAC,CAAA;IAEJ,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAU,CAAC,OAAO,EAAE;QACrC,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,YAAY;SAC9C,CAAC,CAAA;KACH;IAED,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAU,CAAC,MAAM,EAAE;QACpC,IAAA,iCAAmB,EAAC;YAClB,IAAI;YACJ,OAAO;SACR,CAAC,CAAA;QACF,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,WAAW;YAC5C,MAAM,EAAE;gBACN,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB;SACF,CAAC,CAAA;KACH;IAED,IAAI,CAAC,WAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1D,IAAI,CAAC,SAAS,EAAE,CAAA;QAChB,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC;YAAE,IAAI,CAAC,MAAM,GAAG,iBAAU,CAAC,MAAM,CAAA;QACxD,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3B,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAU,CAAC,MAAM,EAAE;YACpC,IAAA,iCAAmB,EAAC;gBAClB,IAAI;gBACJ,OAAO;aACR,CAAC,CAAA;YACF,MAAM,IAAI,sBAAS,CAAC;gBAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,WAAW;gBAC5C,MAAM,EAAE;oBACN,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB;aACF,CAAC,CAAA;SACH;QACD,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,oBAAoB;YACrD,MAAM,EAAE;gBACN,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;SACF,CAAC,CAAA;KACH;SAAM;QACL,IAAI,CAAC,SAAS,GAAG,CAAC,CAAA;QAClB,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;KAC5B;IAED,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAU,CAAC,QAAQ,EAAE;QACtC,MAAM,IAAI,sBAAS,CAAC;YAClB,SAAS,EAAE,sBAAS,CAAC,WAAW,CAAC,kBAAkB;YACnD,MAAM,EAAE;gBACN,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB;SACF,CAAC,CAAA;KACH;IAED,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,EAAE,CAAC;QACxD,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;KAC5B,CAAA;AACH,CAAC;AAtED,wBAsEC"}