@tomei/sso 0.60.4-dev.7 → 0.60.4-dev.9

package/dist/src/components/login-user/user.js

@@ -100,6 +100,12 @@ class User extends general_1.UserBase {
     set MFAConfig(value) {
         this._MFAConfig = value;
     }
+    get MFABypassYN() {
+        return this._MFABypassYN;
+    }
+    set MFABypassYN(value) {
+        this._MFABypassYN = value;
+    }
     get RecoveryEmail() {
         return this._RecoveryEmail;
     }
@@ -203,6 +209,7 @@ class User extends general_1.UserBase {
             this.LastLoginAt = userInfo.LastLoginAt;
             this.MFAEnabled = userInfo.MFAEnabled;
             this.MFAConfig = userInfo.MFAConfig;
+            this.MFABypassYN = userInfo.MFABypassYN;
             this.RecoveryEmail = userInfo.RecoveryEmail;
             this.FailedLoginAttemptCount = userInfo.FailedLoginAttemptCount;
             this.LastFailedLoginAt = userInfo.LastFailedLoginAt;
@@ -253,6 +260,7 @@ class User extends general_1.UserBase {
                         LastLoginAt: user.LastLoginAt,
                         MFAEnabled: user.MFAEnabled,
                         MFAConfig: user.MFAConfig,
+                        MFABypassYN: user.MFABypassYN,
                         RecoveryEmail: user.RecoveryEmail,
                         FailedLoginAttemptCount: user.FailedLoginAttemptCount,
                         LastFailedLoginAt: user.LastFailedLoginAt,
@@ -312,6 +320,7 @@ class User extends general_1.UserBase {
                         LastLoginAt: user.LastLoginAt,
                         MFAEnabled: user.MFAEnabled,
                         MFAConfig: user.MFAConfig,
+                        MFABypassYN: user.MFABypassYN,
                         RecoveryEmail: user.RecoveryEmail,
                         FailedLoginAttemptCount: user.FailedLoginAttemptCount,
                         LastFailedLoginAt: user.LastFailedLoginAt,
@@ -389,6 +398,7 @@ class User extends general_1.UserBase {
                             LastLoginAt: user.LastLoginAt,
                             MFAEnabled: user.MFAEnabled,
                             MFAConfig: user.MFAConfig,
+                            MFABypassYN: user.MFABypassYN,
                             RecoveryEmail: user.RecoveryEmail,
                             FailedLoginAttemptCount: user.FailedLoginAttemptCount,
                             LastFailedLoginAt: user.LastFailedLoginAt,
@@ -1076,6 +1086,7 @@ class User extends general_1.UserBase {
                     LastLoginAt: null,
                     MFAEnabled: null,
                     MFAConfig: null,
+                    MFABypassYN: yn_enum_1.YN.No,
                     RecoveryEmail: null,
                     FailedLoginAttemptCount: 0,
                     LastFailedLoginAt: null,
@@ -1750,6 +1761,7 @@ class User extends general_1.UserBase {
                 LastLoginAt: user.LastLoginAt,
                 MFAEnabled: user.MFAEnabled,
                 MFAConfig: user.MFAConfig,
+                MFABypassYN: user.MFABypassYN,
                 RecoveryEmail: user.RecoveryEmail,
                 FailedLoginAttemptCount: user.FailedLoginAttemptCount,
                 LastFailedLoginAt: user.LastFailedLoginAt,
@@ -1832,6 +1844,7 @@ class User extends general_1.UserBase {
                     LastLoginAt: user.LastLoginAt,
                     MFAEnabled: user.MFAEnabled,
                     MFAConfig: user.MFAConfig,
+                    MFABypassYN: user.MFABypassYN,
                     RecoveryEmail: user.RecoveryEmail,
                     FailedLoginAttemptCount: user.FailedLoginAttemptCount,
                     LastFailedLoginAt: user.LastFailedLoginAt,
@@ -1877,6 +1890,7 @@ class User extends general_1.UserBase {
                     LastLoginAt: this.LastLoginAt,
                     MFAEnabled: this.MFAEnabled,
                     MFAConfig: this.MFAConfig,
+                    MFABypassYN: this.MFABypassYN,
                     RecoveryEmail: this.RecoveryEmail,
                     FailedLoginAttemptCount: this.FailedLoginAttemptCount,
                     LastFailedLoginAt: this.LastFailedLoginAt,
@@ -1906,6 +1920,7 @@ class User extends general_1.UserBase {
                     LastLoginAt: this.LastLoginAt,
                     MFAEnabled: this.MFAEnabled,
                     MFAConfig: this.MFAConfig,
+                    MFABypassYN: this.MFABypassYN,
                     RecoveryEmail: this.RecoveryEmail,
                     FailedLoginAttemptCount: this.FailedLoginAttemptCount,
                     LastFailedLoginAt: this.LastFailedLoginAt,
@@ -1967,6 +1982,7 @@ class User extends general_1.UserBase {
                     LastLoginAt: this.LastLoginAt,
                     MFAEnabled: this.MFAEnabled,
                     MFAConfig: this.MFAConfig,
+                    MFABypassYN: this.MFABypassYN,
                     RecoveryEmail: this.RecoveryEmail,
                     FailedLoginAttemptCount: this.FailedLoginAttemptCount,
                     LastFailedLoginAt: this.LastFailedLoginAt,
@@ -1996,6 +2012,7 @@ class User extends general_1.UserBase {
                     LastLoginAt: this.LastLoginAt,
                     MFAEnabled: this.MFAEnabled,
                     MFAConfig: this.MFAConfig,
+                    MFABypassYN: this.MFABypassYN,
                     RecoveryEmail: this.RecoveryEmail,
                     FailedLoginAttemptCount: this.FailedLoginAttemptCount,
                     LastFailedLoginAt: this.LastFailedLoginAt,
@@ -2122,6 +2139,293 @@ class User extends general_1.UserBase {
             }
         });
     }
+    enable2FABypass(loginUser, dbTransaction) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                if (this.MFABypassYN === yn_enum_1.YN.Yes) {
+                    throw new general_1.ClassError('User', 'UserErrMsg0X', 'Bypass already enabled.', 'enable2FABypass');
+                }
+                const systemCode = config_1.ApplicationConfig.getComponentConfigValue('system-code');
+                const isPrivileged = yield loginUser.checkPrivileges(systemCode, 'MANAGE_MFA');
+                if (!isPrivileged) {
+                    throw new general_1.ClassError('LoginUser', 'LoginUserErrMsg0X', 'You do not have permission to enable MFA bypass.');
+                }
+                const entityValueBefore = {
+                    UserId: this.UserId,
+                    UserName: this.UserName,
+                    FullName: this.FullName,
+                    IDNo: this.IDNo,
+                    IDType: this.IDType,
+                    ContactNo: this.ContactNo,
+                    Email: this.Email,
+                    Password: this.Password,
+                    Status: this.Status,
+                    DefaultPasswordChangedYN: this.DefaultPasswordChangedYN,
+                    FirstLoginAt: this.FirstLoginAt,
+                    LastLoginAt: this.LastLoginAt,
+                    MFAEnabled: this.MFAEnabled,
+                    MFAConfig: this.MFAConfig,
+                    MFABypassYN: this.MFABypassYN,
+                    RecoveryEmail: this.RecoveryEmail,
+                    FailedLoginAttemptCount: this.FailedLoginAttemptCount,
+                    LastFailedLoginAt: this.LastFailedLoginAt,
+                    LastPasswordChangedAt: this.LastPasswordChangedAt,
+                    NeedToChangePasswordYN: this.NeedToChangePasswordYN,
+                    CreatedById: this.CreatedById,
+                    CreatedAt: this.CreatedAt,
+                    UpdatedById: this.UpdatedById,
+                    UpdatedAt: this.UpdatedAt,
+                    PasscodeHash: this.PasscodeHash,
+                    PasscodeUpdatedAt: this.PasscodeUpdatedAt,
+                };
+                this.MFABypassYN = yn_enum_1.YN.Yes;
+                this.UpdatedAt = new Date();
+                this.UpdatedById = loginUser.UserId;
+                yield User._Repository.update({
+                    MFABypassYN: this.MFABypassYN,
+                    UpdatedAt: this.UpdatedAt,
+                    UpdatedById: this.UpdatedById,
+                }, {
+                    where: {
+                        UserId: this.UserId,
+                    },
+                    transaction: dbTransaction,
+                });
+                const entityValueAfter = {
+                    UserId: this.UserId,
+                    UserName: this.UserName,
+                    FullName: this.FullName,
+                    IDNo: this.IDNo,
+                    IDType: this.IDType,
+                    ContactNo: this.ContactNo,
+                    Email: this.Email,
+                    Password: this.Password,
+                    Status: this.Status,
+                    DefaultPasswordChangedYN: this.DefaultPasswordChangedYN,
+                    FirstLoginAt: this.FirstLoginAt,
+                    LastLoginAt: this.LastLoginAt,
+                    MFAEnabled: this.MFAEnabled,
+                    MFAConfig: this.MFAConfig,
+                    MFABypassYN: this.MFABypassYN,
+                    RecoveryEmail: this.RecoveryEmail,
+                    FailedLoginAttemptCount: this.FailedLoginAttemptCount,
+                    LastFailedLoginAt: this.LastFailedLoginAt,
+                    LastPasswordChangedAt: this.LastPasswordChangedAt,
+                    NeedToChangePasswordYN: this.NeedToChangePasswordYN,
+                    CreatedById: this.CreatedById,
+                    CreatedAt: this.CreatedAt,
+                    UpdatedById: this.UpdatedById,
+                    UpdatedAt: this.UpdatedAt,
+                    PasscodeHash: this.PasscodeHash,
+                    PasscodeUpdatedAt: this.PasscodeUpdatedAt,
+                };
+                const activity = new activity_history_1.Activity();
+                activity.ActivityId = activity.createId();
+                activity.Action = activity_history_1.ActionEnum.UPDATE;
+                activity.Description = `Enable 2FA Bypass For User ${this.Email}`;
+                activity.EntityType = this.ObjectType;
+                activity.EntityId = this.UserId.toString();
+                activity.EntityValueBefore = JSON.stringify(entityValueBefore);
+                activity.EntityValueAfter = JSON.stringify(entityValueAfter);
+                yield activity.create(loginUser.ObjectId, dbTransaction);
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    disable2FABypass(loginUser, dbTransaction) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                if (this.MFABypassYN === yn_enum_1.YN.No) {
+                    throw new general_1.ClassError('User', 'UserErrMsg0X', 'Bypass already disabled.', 'disable2FABypass');
+                }
+                const systemCode = config_1.ApplicationConfig.getComponentConfigValue('system-code');
+                const isPrivileged = yield loginUser.checkPrivileges(systemCode, 'MANAGE_MFA');
+                if (!isPrivileged) {
+                    throw new general_1.ClassError('LoginUser', 'LoginUserErrMsg0X', 'You do not have permission to enable MFA bypass.');
+                }
+                const entityValueBefore = {
+                    UserId: this.UserId,
+                    UserName: this.UserName,
+                    FullName: this.FullName,
+                    IDNo: this.IDNo,
+                    IDType: this.IDType,
+                    ContactNo: this.ContactNo,
+                    Email: this.Email,
+                    Password: this.Password,
+                    Status: this.Status,
+                    DefaultPasswordChangedYN: this.DefaultPasswordChangedYN,
+                    FirstLoginAt: this.FirstLoginAt,
+                    LastLoginAt: this.LastLoginAt,
+                    MFAEnabled: this.MFAEnabled,
+                    MFAConfig: this.MFAConfig,
+                    MFABypassYN: this.MFABypassYN,
+                    RecoveryEmail: this.RecoveryEmail,
+                    FailedLoginAttemptCount: this.FailedLoginAttemptCount,
+                    LastFailedLoginAt: this.LastFailedLoginAt,
+                    LastPasswordChangedAt: this.LastPasswordChangedAt,
+                    NeedToChangePasswordYN: this.NeedToChangePasswordYN,
+                    CreatedById: this.CreatedById,
+                    CreatedAt: this.CreatedAt,
+                    UpdatedById: this.UpdatedById,
+                    UpdatedAt: this.UpdatedAt,
+                    PasscodeHash: this.PasscodeHash,
+                    PasscodeUpdatedAt: this.PasscodeUpdatedAt,
+                };
+                this.MFABypassYN = yn_enum_1.YN.No;
+                this.UpdatedAt = new Date();
+                this.UpdatedById = loginUser.UserId;
+                yield User._Repository.update({
+                    MFABypassYN: this.MFABypassYN,
+                    UpdatedAt: this.UpdatedAt,
+                    UpdatedById: this.UpdatedById,
+                }, {
+                    where: {
+                        UserId: this.UserId,
+                    },
+                    transaction: dbTransaction,
+                });
+                const entityValueAfter = {
+                    UserId: this.UserId,
+                    UserName: this.UserName,
+                    FullName: this.FullName,
+                    IDNo: this.IDNo,
+                    IDType: this.IDType,
+                    ContactNo: this.ContactNo,
+                    Email: this.Email,
+                    Password: this.Password,
+                    Status: this.Status,
+                    DefaultPasswordChangedYN: this.DefaultPasswordChangedYN,
+                    FirstLoginAt: this.FirstLoginAt,
+                    LastLoginAt: this.LastLoginAt,
+                    MFAEnabled: this.MFAEnabled,
+                    MFAConfig: this.MFAConfig,
+                    MFABypassYN: this.MFABypassYN,
+                    RecoveryEmail: this.RecoveryEmail,
+                    FailedLoginAttemptCount: this.FailedLoginAttemptCount,
+                    LastFailedLoginAt: this.LastFailedLoginAt,
+                    LastPasswordChangedAt: this.LastPasswordChangedAt,
+                    NeedToChangePasswordYN: this.NeedToChangePasswordYN,
+                    CreatedById: this.CreatedById,
+                    CreatedAt: this.CreatedAt,
+                    UpdatedById: this.UpdatedById,
+                    UpdatedAt: this.UpdatedAt,
+                    PasscodeHash: this.PasscodeHash,
+                    PasscodeUpdatedAt: this.PasscodeUpdatedAt,
+                };
+                const activity = new activity_history_1.Activity();
+                activity.ActivityId = activity.createId();
+                activity.Action = activity_history_1.ActionEnum.UPDATE;
+                activity.Description = `Disable 2FA Bypass For User ${this.Email}`;
+                activity.EntityType = this.ObjectType;
+                activity.EntityId = this.UserId.toString();
+                activity.EntityValueBefore = JSON.stringify(entityValueBefore);
+                activity.EntityValueAfter = JSON.stringify(entityValueAfter);
+                yield activity.create(loginUser.ObjectId, dbTransaction);
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
+    reset2FA(loginUser, dbTransaction) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                if (this.MFAEnabled === 0) {
+                    throw new general_1.ClassError('User', 'UserErrMsg0X', 'User not yet setup 2FA.', 'reset2FA');
+                }
+                const systemCode = config_1.ApplicationConfig.getComponentConfigValue('system-code');
+                const isPrivileged = yield loginUser.checkPrivileges(systemCode, 'MANAGE_MFA');
+                if (!isPrivileged) {
+                    throw new general_1.ClassError('LoginUser', 'LoginUserErrMsg0X', 'You do not have permission to reset 2FA.');
+                }
+                const entityValueBefore = {
+                    UserId: this.UserId,
+                    UserName: this.UserName,
+                    FullName: this.FullName,
+                    IDNo: this.IDNo,
+                    IDType: this.IDType,
+                    ContactNo: this.ContactNo,
+                    Email: this.Email,
+                    Password: this.Password,
+                    Status: this.Status,
+                    DefaultPasswordChangedYN: this.DefaultPasswordChangedYN,
+                    FirstLoginAt: this.FirstLoginAt,
+                    LastLoginAt: this.LastLoginAt,
+                    MFAEnabled: this.MFAEnabled,
+                    MFAConfig: this.MFAConfig,
+                    MFABypassYN: this.MFABypassYN,
+                    RecoveryEmail: this.RecoveryEmail,
+                    FailedLoginAttemptCount: this.FailedLoginAttemptCount,
+                    LastFailedLoginAt: this.LastFailedLoginAt,
+                    LastPasswordChangedAt: this.LastPasswordChangedAt,
+                    NeedToChangePasswordYN: this.NeedToChangePasswordYN,
+                    CreatedById: this.CreatedById,
+                    CreatedAt: this.CreatedAt,
+                    UpdatedById: this.UpdatedById,
+                    UpdatedAt: this.UpdatedAt,
+                    PasscodeHash: this.PasscodeHash,
+                    PasscodeUpdatedAt: this.PasscodeUpdatedAt,
+                };
+                this.MFAEnabled = 0;
+                this.MFABypassYN = yn_enum_1.YN.No;
+                this.UpdatedAt = new Date();
+                this.UpdatedById = loginUser.UserId;
+                yield User._Repository.update({
+                    MFAEnabled: this.MFAEnabled,
+                    MFABypassYN: this.MFABypassYN,
+                    UpdatedAt: this.UpdatedAt,
+                    UpdatedById: this.UpdatedById,
+                }, {
+                    where: {
+                        UserId: this.UserId,
+                    },
+                    transaction: dbTransaction,
+                });
+                const entityValueAfter = {
+                    UserId: this.UserId,
+                    UserName: this.UserName,
+                    FullName: this.FullName,
+                    IDNo: this.IDNo,
+                    IDType: this.IDType,
+                    ContactNo: this.ContactNo,
+                    Email: this.Email,
+                    Password: this.Password,
+                    Status: this.Status,
+                    DefaultPasswordChangedYN: this.DefaultPasswordChangedYN,
+                    FirstLoginAt: this.FirstLoginAt,
+                    LastLoginAt: this.LastLoginAt,
+                    MFAEnabled: this.MFAEnabled,
+                    MFAConfig: this.MFAConfig,
+                    MFABypassYN: this.MFABypassYN,
+                    RecoveryEmail: this.RecoveryEmail,
+                    FailedLoginAttemptCount: this.FailedLoginAttemptCount,
+                    LastFailedLoginAt: this.LastFailedLoginAt,
+                    LastPasswordChangedAt: this.LastPasswordChangedAt,
+                    NeedToChangePasswordYN: this.NeedToChangePasswordYN,
+                    CreatedById: this.CreatedById,
+                    CreatedAt: this.CreatedAt,
+                    UpdatedById: this.UpdatedById,
+                    UpdatedAt: this.UpdatedAt,
+                    PasscodeHash: this.PasscodeHash,
+                    PasscodeUpdatedAt: this.PasscodeUpdatedAt,
+                };
+                const activity = new activity_history_1.Activity();
+                activity.ActivityId = activity.createId();
+                activity.Action = activity_history_1.ActionEnum.UPDATE;
+                activity.Description = `Reset 2FA for User ${this.Email}`;
+                activity.EntityType = this.ObjectType;
+                activity.EntityId = this.UserId.toString();
+                activity.EntityValueBefore = JSON.stringify(entityValueBefore);
+                activity.EntityValueAfter = JSON.stringify(entityValueAfter);
+                yield activity.create(loginUser.ObjectId, dbTransaction);
+            }
+            catch (error) {
+                throw error;
+            }
+        });
+    }
 }
 exports.User = User;
 User._Repository = new user_repository_1.UserRepository();