@toa.io/extensions.exposition 1.0.0-alpha.185 → 1.0.0-alpha.187

package/components/identity.otp/source/issue.ts

@@ -4,17 +4,19 @@ export async function effect (input: Input, context: Context): Promise<Output> {
   const { authority, username } = input
   const code = Math.floor(100000 + Math.random() * 900000).toString()
   const key = `${authority}:${username}:${code}`
+  const lifetime = input.lifetime ?? context.configuration.lifetime
 
-  context.logs.debug('Issue OTP', { authority, username, code })
-
-  await context.stash.set(key, 1, 'EX', context.configuration.lifetime)
+  context.logs.debug('Issue OTP', { authority, username, code, lifetime })
 
+  await context.stash.set(key, 1, 'EX', lifetime)
+  
   return { code }
 }
 
 interface Input {
   authority: string
   username: string
+  lifetime?: number
 }
 
 interface Output {

package/documentation/components.md

@@ -95,14 +95,22 @@ password?: string
 
 Access requires basic credentials of the modified Identity or `system:identity:basic` role.
 
+<code>POST</code> Incept new basic credentials. Request body is as follows:
+
+```yaml
+username: string
+password: string
+```
+
+Identity should not have associated basic credentials. Access requires any credentials of the Identity.
+
 #### `/identity/basic/usernames/:username/`
 
 <code>GET</code> Check if the username is available.
 
 `username` must be Base64 URL encoded.
 
-Returns empty response with status `204`
-if the username is already taken or `404` if it is available.
+Returns empty response with status `204` if the username is already taken or `404` if it is available.
 
 ## Identity federation (OpenID connect)
 

package/features/identity.basic.feature

@@ -424,3 +424,53 @@ Feature: Basic authentication
       """
       404 Not Found
       """
+
+  Scenario: Adding new basic credentials
+    Given transient identity
+    When the following request is received:
+      """
+      POST /identity/basic/${{ identity.id }}/ HTTP/1.1
+      host: nex.toa.io
+      authorization: Token ${{ identity.token }}
+      accept: application/yaml
+      content-type: application/yaml
+
+      username: developer
+      password: secret#1234
+      """
+    Then the following reply is sent:
+      """
+      201 Created
+      """
+    When the following request is received:
+      """
+      GET /identity/ HTTP/1.1
+      host: nex.toa.io
+      authorization: Basic ZGV2ZWxvcGVyOnNlY3JldCMxMjM0 
+      accept: application/yaml
+      """
+    Then the following reply is sent:
+      """
+      200 OK
+
+      id: ${{ id }}
+      """
+
+    # credentials already exist
+    When the following request is received:
+      """
+      POST /identity/basic/${{ identity.id }}/ HTTP/1.1
+      host: nex.toa.io
+      authorization: Token ${{ identity.token }}
+      accept: application/yaml
+      content-type: application/yaml
+
+      username: painter
+      password: secret#4321
+      """
+    Then the following reply is sent:
+      """
+      422 Unprocessable Entity
+
+      code: EXISTS
+      """

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toa.io/extensions.exposition",
-  "version": "1.0.0-alpha.185",
+  "version": "1.0.0-alpha.187",
   "description": "Toa Exposition",
   "author": "temich <tema.gurtovoy@gmail.com>",
   "homepage": "https://github.com/toa-io/toa#readme",
@@ -63,5 +63,5 @@
     },
     "testEnvironment": "node"
   },
-  "gitHead": "77151bc325f47d41cd719713c14e4a42eecfaa45"
+  "gitHead": "8279dd4f84dd1862f956682551ef418278be2ee8"
 }

package/components/identity.basic/operations/assert.d.ts

@@ -1,5 +0,0 @@
-import { Context } from './types';
-export declare function effect(input: Input, context: Context): Promise<void>;
-interface Input {
-}
-export {};

package/components/identity.basic/operations/assert.js

@@ -1,7 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.effect = void 0;
-function effect(input, context) {
-}
-exports.effect = effect;
-//# sourceMappingURL=assert.js.map

package/components/identity.basic/operations/assert.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"assert.js","sourceRoot":"","sources":["../source/assert.ts"],"names":[],"mappings":";;;AAEA,SAAgB,MAAM,CAAC,KAAY,EAAE,OAAgB;AAErD,CAAC;AAFD,wBAEC"}