@tstdl/base 0.85.18 → 0.85.20
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.eslintrc.json +1 -0
- package/authentication/server/authentication-secret-requirements.validator.d.ts +11 -2
- package/authentication/server/authentication-secret-requirements.validator.js +10 -3
- package/authentication/server/authentication.service.d.ts +3 -0
- package/authentication/server/authentication.service.js +6 -0
- package/package.json +2 -2
- package/signals/index.d.ts +1 -0
- package/signals/index.js +1 -0
- package/signals/lazylize.d.ts +2 -0
- package/signals/lazylize.js +28 -0
package/.eslintrc.json
CHANGED
|
@@ -26,6 +26,7 @@
|
|
|
26
26
|
"rules": {
|
|
27
27
|
/** typescript */
|
|
28
28
|
"@typescript-eslint/brace-style": ["error", "stroustrup", { "allowSingleLine": true }],
|
|
29
|
+
"@typescript-eslint/class-methods-use-this": ["error", { "ignoreOverrideMethods": true, "ignoreClassesThatImplementAnInterface": true }],
|
|
29
30
|
"@typescript-eslint/consistent-type-definitions": "off",
|
|
30
31
|
"@typescript-eslint/explicit-function-return-type": ["error", { "allowExpressions": true }],
|
|
31
32
|
"@typescript-eslint/explicit-member-accessibility": ["error", { "accessibility": "no-public" }],
|
|
@@ -1,9 +1,18 @@
|
|
|
1
1
|
import type { SecretCheckResult } from '../models/secret-check-result.model.js';
|
|
2
|
+
export type SecretTestResult = {
|
|
3
|
+
success: true;
|
|
4
|
+
reason?: undefined;
|
|
5
|
+
} | {
|
|
6
|
+
success: false;
|
|
7
|
+
reason: string;
|
|
8
|
+
};
|
|
2
9
|
export declare abstract class AuthenticationSecretRequirementsValidator {
|
|
3
|
-
abstract checkSecretRequirements(secret: string):
|
|
4
|
-
abstract
|
|
10
|
+
abstract checkSecretRequirements(secret: string): Promise<SecretCheckResult>;
|
|
11
|
+
abstract testSecretRequirements(secret: string): Promise<SecretTestResult>;
|
|
12
|
+
abstract validateSecretRequirements(secret: string): Promise<void>;
|
|
5
13
|
}
|
|
6
14
|
export declare class DefaultAuthenticationSecretRequirementsValidator extends AuthenticationSecretRequirementsValidator {
|
|
7
15
|
checkSecretRequirements(secret: string): Promise<SecretCheckResult>;
|
|
16
|
+
testSecretRequirements(secret: string): Promise<SecretTestResult>;
|
|
8
17
|
validateSecretRequirements(secret: string): Promise<void>;
|
|
9
18
|
}
|
|
@@ -43,13 +43,20 @@ let DefaultAuthenticationSecretRequirementsValidator = class DefaultAuthenticati
|
|
|
43
43
|
async checkSecretRequirements(secret) {
|
|
44
44
|
return (0, import_password_check.checkPassword)(secret, { checkForPwned: true });
|
|
45
45
|
}
|
|
46
|
-
async
|
|
46
|
+
async testSecretRequirements(secret) {
|
|
47
47
|
const result = await this.checkSecretRequirements(secret);
|
|
48
48
|
if ((0, import_type_guards.isNumber)(result.pwned) && result.pwned > 0) {
|
|
49
|
-
|
|
49
|
+
return { success: false, reason: "Password is exposed in data breach (https://haveibeenpwned.com/passwords)." };
|
|
50
50
|
}
|
|
51
51
|
if (result.strength < import_password_check_result_model.PasswordStrength.Medium) {
|
|
52
|
-
|
|
52
|
+
return { success: false, reason: "Password is too weak." };
|
|
53
|
+
}
|
|
54
|
+
return { success: true };
|
|
55
|
+
}
|
|
56
|
+
async validateSecretRequirements(secret) {
|
|
57
|
+
const result = await this.testSecretRequirements(secret);
|
|
58
|
+
if (!result.success) {
|
|
59
|
+
throw new import_secret_requirements_error.SecretRequirementsError(result.reason);
|
|
53
60
|
}
|
|
54
61
|
}
|
|
55
62
|
};
|
|
@@ -3,6 +3,7 @@ import { afterResolve } from '../../container/index.js';
|
|
|
3
3
|
import type { Record } from '../../types.js';
|
|
4
4
|
import type { RefreshToken, SecretCheckResult, SecretResetToken, Token } from '../models/index.js';
|
|
5
5
|
import { AuthenticationCredentialsRepository } from './authentication-credentials.repository.js';
|
|
6
|
+
import type { SecretTestResult } from './authentication-secret-requirements.validator.js';
|
|
6
7
|
import { AuthenticationSecretRequirementsValidator } from './authentication-secret-requirements.validator.js';
|
|
7
8
|
import { AuthenticationSecretResetHandler } from './authentication-secret-reset.handler.js';
|
|
8
9
|
import { AuthenticationSessionRepository } from './authentication-session.repository.js';
|
|
@@ -87,6 +88,8 @@ export declare class AuthenticationService<AdditionalTokenPayload extends Record
|
|
|
87
88
|
initResetSecret(subject: string): Promise<void>;
|
|
88
89
|
resetSecret(tokenString: string, newSecret: string): Promise<void>;
|
|
89
90
|
checkSecret(secret: string): Promise<SecretCheckResult>;
|
|
91
|
+
testSecret(secret: string): Promise<SecretTestResult>;
|
|
92
|
+
validateSecret(secret: string): Promise<void>;
|
|
90
93
|
validateToken(token: string): Promise<Token<AdditionalTokenPayload>>;
|
|
91
94
|
validateRefreshToken(token: string): Promise<RefreshToken>;
|
|
92
95
|
validateSecretResetToken(token: string): Promise<SecretResetToken>;
|
|
@@ -212,6 +212,12 @@ let AuthenticationService = class AuthenticationService2 {
|
|
|
212
212
|
async checkSecret(secret) {
|
|
213
213
|
return this.authenticationSecretRequirementsValidator.checkSecretRequirements(secret);
|
|
214
214
|
}
|
|
215
|
+
async testSecret(secret) {
|
|
216
|
+
return this.authenticationSecretRequirementsValidator.testSecretRequirements(secret);
|
|
217
|
+
}
|
|
218
|
+
async validateSecret(secret) {
|
|
219
|
+
return this.authenticationSecretRequirementsValidator.validateSecretRequirements(secret);
|
|
220
|
+
}
|
|
215
221
|
async validateToken(token) {
|
|
216
222
|
return (0, import_helper.getTokenFromString)(token, this.tokenVersion, this.derivedTokenSigningSecret);
|
|
217
223
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@tstdl/base",
|
|
3
|
-
"version": "0.85.
|
|
3
|
+
"version": "0.85.20",
|
|
4
4
|
"author": "Patrick Hein",
|
|
5
5
|
"publishConfig": {
|
|
6
6
|
"access": "public"
|
|
@@ -45,7 +45,7 @@
|
|
|
45
45
|
"typescript": "5.1"
|
|
46
46
|
},
|
|
47
47
|
"peerDependencies": {
|
|
48
|
-
"@elastic/elasticsearch": "^8.
|
|
48
|
+
"@elastic/elasticsearch": "^8.9",
|
|
49
49
|
"@koa/router": "^12.0",
|
|
50
50
|
"@tstdl/angular": "^0.85",
|
|
51
51
|
"@zxcvbn-ts/core": "^3.0",
|
package/signals/index.d.ts
CHANGED
package/signals/index.js
CHANGED
|
@@ -18,6 +18,7 @@ module.exports = __toCommonJS(signals_exports);
|
|
|
18
18
|
__reExport(signals_exports, require("./api.js"), module.exports);
|
|
19
19
|
__reExport(signals_exports, require("./computed-with-dependencies.js"), module.exports);
|
|
20
20
|
__reExport(signals_exports, require("./effect-with-dependencies.js"), module.exports);
|
|
21
|
+
__reExport(signals_exports, require("./lazylize.js"), module.exports);
|
|
21
22
|
__reExport(signals_exports, require("./pipe.js"), module.exports);
|
|
22
23
|
__reExport(signals_exports, require("./switch-map.js"), module.exports);
|
|
23
24
|
__reExport(signals_exports, require("./to-signal-2.js"), module.exports);
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __defProp = Object.defineProperty;
|
|
3
|
+
var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
|
|
4
|
+
var __getOwnPropNames = Object.getOwnPropertyNames;
|
|
5
|
+
var __hasOwnProp = Object.prototype.hasOwnProperty;
|
|
6
|
+
var __export = (target, all) => {
|
|
7
|
+
for (var name in all)
|
|
8
|
+
__defProp(target, name, { get: all[name], enumerable: true });
|
|
9
|
+
};
|
|
10
|
+
var __copyProps = (to, from, except, desc) => {
|
|
11
|
+
if (from && typeof from === "object" || typeof from === "function") {
|
|
12
|
+
for (let key of __getOwnPropNames(from))
|
|
13
|
+
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
14
|
+
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
15
|
+
}
|
|
16
|
+
return to;
|
|
17
|
+
};
|
|
18
|
+
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
19
|
+
var lazylize_exports = {};
|
|
20
|
+
__export(lazylize_exports, {
|
|
21
|
+
lazylize: () => lazylize
|
|
22
|
+
});
|
|
23
|
+
module.exports = __toCommonJS(lazylize_exports);
|
|
24
|
+
var import_api = require("./api.js");
|
|
25
|
+
function lazylize(signalProvider) {
|
|
26
|
+
let source;
|
|
27
|
+
return (0, import_api.computed)(() => (source ??= (0, import_api.untracked)(() => signalProvider()))());
|
|
28
|
+
}
|