@toa.io/extensions.exposition 1.0.0-alpha.272 → 1.0.0-alpha.274

package/components/identity.basic/operations/types.d.ts

@@ -1,4 +1,4 @@
-import { type Call, type Maybe, type Observation, type Query, type Transition } from '@toa.io/types';
+import { type Call, type Maybe, type Observation, type Query, type Secret, type Transition } from '@toa.io/types';
 export interface Context {
     local: {
         observe: Observation<Maybe<Entity>>;
@@ -15,7 +15,7 @@ export interface Context {
     };
     configuration: {
         readonly rounds: number;
-        readonly pepper: string;
+        readonly pepper?: Secret;
         readonly principal?: string;
         readonly username: string[];
         readonly password: string[];

package/components/identity.basic/source/authenticate.ts

@@ -1,6 +1,5 @@
 import { compare } from 'bcryptjs'
 import { type Query, type Maybe } from '@toa.io/types'
-import { Err } from 'error-value'
 import { type Context } from './types'
 
 export async function computation (input: Input, context: Context): Promise<Maybe<Output>> {
@@ -18,7 +17,7 @@ export async function computation (input: Input, context: Context): Promise<Mayb
   if (credentials === null)
     return ERR_NOT_FOUND
 
-  const spicy = password + context.configuration.pepper
+  const spicy = password + (context.configuration.pepper?.unwrap() ?? '')
   const match = await compare(spicy, credentials.password)
 
   if (match)
@@ -27,8 +26,13 @@ export async function computation (input: Input, context: Context): Promise<Mayb
     return ERR_PASSWORD_MISMATCH
 }
 
-const ERR_NOT_FOUND = new Err('NOT_FOUND')
-const ERR_PASSWORD_MISMATCH = new Err('PASSWORD_MISMATCH')
+const ERR_NOT_FOUND = new (class NotFoundError extends Error {
+  public readonly code = 'NOT_FOUND'
+})()
+
+const ERR_PASSWORD_MISMATCH = new (class PasswordMismatchError extends Error {
+  public readonly code = 'PASSWORD_MISMATCH'
+})()
 
 interface Input {
   authority: string

package/components/identity.basic/source/incept.ts

@@ -1,4 +1,3 @@
-import { Err } from 'error-value'
 import type { Context } from './types'
 import type { Maybe } from '@toa.io/types'
 
@@ -25,7 +24,9 @@ export async function effect (input: Input, context: Context): Promise<Maybe<Out
   return await context.local.transit(request)
 }
 
-const INVALID_CREDENTIALS = new Err('INVALID_CREDENTIALS')
+const INVALID_CREDENTIALS = new (class InvalidCredentialsError extends Error {
+  public readonly code = 'INVALID_CREDENTIALS'
+})()
 
 interface Input {
   authority: string

package/components/identity.basic/source/transit.ts

@@ -1,5 +1,4 @@
 import { genSalt, hash } from 'bcryptjs'
-import { Err } from 'error-value'
 import type { Maybe, Operation } from '@toa.io/types'
 import type { Context, Entity, TransitInput, IdOutput } from './types'
 
@@ -13,7 +12,7 @@ export class Transition implements Operation {
 
   public mount (context: Context): void {
     this.rounds = context.configuration.rounds
-    this.pepper = context.configuration.pepper
+    this.pepper = context.configuration.pepper?.unwrap() ?? ''
     this.principal = context.configuration.principal
     this.tokens = context.remote.identity.tokens
 
@@ -65,9 +64,24 @@ function invalid (value: string, expressions: RegExp[]): boolean {
   return expressions.some((expression) => !expression.test(value))
 }
 
-const ERR_PRINCIPAL_LOCKED = new Err('PRINCIPAL_LOCKED', 'Principal username cannot be changed')
-const ERR_INVALID_USERNAME = new Err('INVALID_USERNAME', 'Username is not meeting the requirements')
-const ERR_INVALID_PASSWORD = new Err('INVALID_PASSWORD', 'Password is not meeting the requirements')
-const ERR_EXISTS = new Err('EXISTS', 'Basic credentials already exist')
+const ERR_PRINCIPAL_LOCKED = new (class PrincipalLockedError extends Error {
+  public readonly code = 'PRINCIPAL_LOCKED'
+  public override readonly message = 'Principal username cannot be changed'
+})()
+
+const ERR_INVALID_USERNAME = new (class InvalidUsernameError extends Error {
+  public readonly code = 'INVALID_USERNAME'
+  public override readonly message = 'Username is not meeting the requirements'
+})()
+
+const ERR_INVALID_PASSWORD = new (class InvalidPasswordError extends Error {
+  public readonly code = 'INVALID_PASSWORD'
+  public override readonly message = 'Password is not meeting the requirements'
+})()
+
+const ERR_EXISTS = new (class ExistsError extends Error {
+  public readonly code = 'EXISTS'
+  public override readonly message = 'Basic credentials already exist'
+})()
 
 type Tokens = Context['remote']['identity']['tokens']

package/components/identity.basic/source/types.ts

@@ -1,4 +1,4 @@
-import { type Call, type Maybe, type Observation, type Query, type Transition } from '@toa.io/types'
+import { type Call, type Maybe, type Observation, type Query, type Secret, type Transition } from '@toa.io/types'
 
 export interface Context {
   local: {
@@ -16,7 +16,7 @@ export interface Context {
   }
   configuration: {
     readonly rounds: number
-    readonly pepper: string
+    readonly pepper?: Secret
     readonly principal?: string
     readonly username: string[]
     readonly password: string[]

package/components/identity.credentials/manifest.toa.yaml

@@ -10,7 +10,9 @@ operations:
           type: string
         identity:
           type: string
-      required: [authority, identity]
+      required:
+        - authority
+        - identity
     output:
       type: object
       properties:
@@ -21,30 +23,49 @@ operations:
           properties:
             username:
               type: string
-          required: [username]
+          required:
+            - username
         federation:
           type: array
           items:
             type: object
             additionalProperties: false
             properties:
-              id: { type: string }
-              iss: { type: string }
-              _created: { type: number }
-            required: [id, iss, _created]
+              id:
+                type: string
+              iss:
+                type: string
+              _created:
+                type: number
+            required:
+              - id
+              - iss
+              - _created
         passkeys:
           type: array
           items:
             type: object
             additionalProperties: false
             properties:
-              id: { type: string }
-              aid: { type: string }
-              synced: { type: boolean }
-              label: { type: string }
-              _created: { type: number }
-            required: [id, aid, synced, _created]
-      required: [basic, federation, passkeys]
+              id:
+                type: string
+              aid:
+                type: string
+              synced:
+                type: boolean
+              label:
+                type: string
+              _created:
+                type: number
+            required:
+              - id
+              - aid
+              - synced
+              - _created
+      required:
+        - basic
+        - federation
+        - passkeys
 
 exposition:
   /:identity: