@tstdl/base 0.93.83 → 0.93.85

package/authentication/models/authentication-credentials.model.d.ts

@@ -1,6 +1,6 @@
 import { TenantEntity, type Uuid } from '../../orm/index.js';
 export declare class AuthenticationCredentials extends TenantEntity {
-    subject: Uuid;
+    subjectId: Uuid;
     hashVersion: number;
     /**
      * The salt used to hash the secret.

package/authentication/models/authentication-credentials.model.js

@@ -11,7 +11,7 @@ import { Table, TenantEntity, TenantReference, Unique, UuidProperty } from '../.
 import { Integer, Uint8ArrayProperty } from '../../schema/index.js';
 import { Subject } from './subject.model.js';
 let AuthenticationCredentials = class AuthenticationCredentials extends TenantEntity {
-    subject;
+    subjectId;
     hashVersion;
     /**
      * The salt used to hash the secret.
@@ -26,7 +26,7 @@ __decorate([
     TenantReference(() => Subject),
     UuidProperty(),
     __metadata("design:type", String)
-], AuthenticationCredentials.prototype, "subject", void 0);
+], AuthenticationCredentials.prototype, "subjectId", void 0);
 __decorate([
     Integer(),
     __metadata("design:type", Number)
@@ -41,6 +41,6 @@ __decorate([
 ], AuthenticationCredentials.prototype, "hash", void 0);
 AuthenticationCredentials = __decorate([
     Table('credentials', { schema: 'authentication' }),
-    Unique(['tenantId', 'subject'])
+    Unique(['tenantId', 'subjectId'])
 ], AuthenticationCredentials);
 export { AuthenticationCredentials };

package/authentication/models/authentication-session.model.d.ts

@@ -1,7 +1,7 @@
 import type { Timestamp, Uuid } from '../../orm/index.js';
 import { TenantEntity } from '../../orm/index.js';
 export declare class AuthenticationSession extends TenantEntity {
-    subject: Uuid;
+    subjectId: Uuid;
     begin: Timestamp;
     end: Timestamp;
     refreshTokenHashVersion: number;

package/authentication/models/authentication-session.model.js

@@ -11,7 +11,7 @@ import { Table, TenantEntity, TenantReference, TimestampProperty, UuidProperty }
 import { Integer, Uint8ArrayProperty } from '../../schema/index.js';
 import { Subject } from './subject.model.js';
 let AuthenticationSession = class AuthenticationSession extends TenantEntity {
-    subject;
+    subjectId;
     begin;
     end;
     refreshTokenHashVersion;
@@ -28,7 +28,7 @@ __decorate([
     TenantReference(() => Subject),
     UuidProperty(),
     __metadata("design:type", String)
-], AuthenticationSession.prototype, "subject", void 0);
+], AuthenticationSession.prototype, "subjectId", void 0);
 __decorate([
     TimestampProperty(),
     __metadata("design:type", Number)

package/authentication/server/authentication.service.js

@@ -139,15 +139,15 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         const salt = getRandomBytes(32);
         const hash = await this.getHash(secret, salt);
         await this.#credentialsRepository.transaction(async (tx) => {
-            await this.#credentialsRepository.withTransaction(tx).upsert('subject', {
+            await this.#credentialsRepository.withTransaction(tx).upsert(['tenantId', 'subjectId'], {
                 tenantId: subject.tenantId,
-                subject: subject.id,
+                subjectId: subject.id,
                 hashVersion: 1,
                 salt,
                 hash,
             });
             if (options?.skipSessionInvalidation != true) {
-                await this.#sessionRepository.withTransaction(tx).updateManyByQuery({ tenantId: subject.tenantId, subject: subject.id }, { end: currentTimestamp() });
+                await this.#sessionRepository.withTransaction(tx).updateManyByQuery({ tenantId: subject.tenantId, subjectId: subject.id }, { end: currentTimestamp() });
             }
         });
     }
@@ -162,8 +162,8 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         // Always try to load credentials, even if the subject is not resolved, to reduce information leakage.
         // If the subject is not resolved, we will create a new credentials entry with an empty salt and hash.
         // This way, we do not leak if the subject exists or not via timing attacks.
-        const credentials = await this.#credentialsRepository.tryLoadByQuery({ tenantId: actualSubject?.tenantId ?? NIL_UUID, subject: actualSubject?.id ?? NIL_UUID })
-            ?? { subject: actualSubject, salt: new Uint8Array(), hash: new Uint8Array() };
+        const credentials = await this.#credentialsRepository.tryLoadByQuery({ tenantId: actualSubject?.tenantId ?? NIL_UUID, subjectId: actualSubject?.id ?? NIL_UUID })
+            ?? { subjectId: actualSubject, salt: new Uint8Array(), hash: new Uint8Array() };
         const hash = await this.getHash(secret, credentials.salt);
         const valid = timingSafeBinaryEquals(hash, credentials.hash);
         if (valid) {
@@ -184,7 +184,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         return await this.#sessionRepository.transaction(async (tx) => {
             const session = await this.#sessionRepository.withTransaction(tx).insert({
                 tenantId: subject.tenantId,
-                subject: subject.id,
+                subjectId: subject.id,
                 begin: now,
                 end,
                 refreshTokenHashVersion: 0,
@@ -255,9 +255,9 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
         await this.#sessionRepository.update(sessionId, { end: now });
         await authAuditor.info('logout', {
             tenantId: session.tenantId,
-            actor: session.subject,
+            actor: session.subjectId,
             actorType: ActorType.User,
-            targetId: session.subject,
+            targetId: session.subjectId,
             targetType: 'User',
             details: { sessionId },
         });
@@ -287,7 +287,7 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             const now = currentTimestamp();
             const impersonator = (options.omitImpersonator == true) ? undefined : validatedRefreshToken.payload.impersonator;
             const newEnd = now + this.refreshTokenTimeToLive;
-            const subject = await this.#subjectRepository.loadByQuery({ tenantId: session.tenantId, id: session.subject });
+            const subject = await this.#subjectRepository.loadByQuery({ tenantId: session.tenantId, id: session.subjectId });
             const tokenPayload = await this.#authenticationAncillaryService?.getTokenPayload(subject, authenticationData, { action: GetTokenPayloadContextAction.Refresh });
             const { token, jsonToken } = await this.createToken({ additionalTokenPayload: tokenPayload, subject, sessionId, refreshTokenExpiration: newEnd, impersonator, timestamp: now });
             const newRefreshToken = await this.createRefreshToken(subject, sessionId, newEnd, { impersonator });
@@ -299,9 +299,9 @@ let AuthenticationService = AuthenticationService_1 = class AuthenticationServic
             });
             await authAuditor.info('refresh-success', {
                 tenantId: session.tenantId,
-                actor: session.subject,
+                actor: session.subjectId,
                 actorType: ActorType.User,
-                targetId: session.subject,
+                targetId: session.subjectId,
                 targetType: 'User',
                 details: { sessionId },
             });

package/authentication/server/drizzle/{0000_majestic_proudstar.sql → 0000_normal_paper_doll.sql}

@@ -3,7 +3,7 @@ CREATE TYPE "authentication"."user_status" AS ENUM('active', 'suspended', 'pendi
 CREATE TABLE "authentication"."credentials" (
 	"id" uuid DEFAULT gen_random_uuid() NOT NULL,
 	"tenant_id" uuid NOT NULL,
-	"subject" uuid NOT NULL,
+	"subject_id" uuid NOT NULL,
 	"hash_version" integer NOT NULL,
 	"salt" "bytea" NOT NULL,
 	"hash" "bytea" NOT NULL,
@@ -13,13 +13,13 @@ CREATE TABLE "authentication"."credentials" (
 	"delete_timestamp" timestamp with time zone,
 	"attributes" jsonb DEFAULT '{}'::jsonb NOT NULL,
 	CONSTRAINT "credentials_tenant_id_id_pk" PRIMARY KEY("tenant_id","id"),
-	CONSTRAINT "credentials_tenant_id_subject_unique" UNIQUE("tenant_id","subject")
+	CONSTRAINT "credentials_tenant_id_subject_id_unique" UNIQUE("tenant_id","subject_id")
 );
 --> statement-breakpoint
 CREATE TABLE "authentication"."session" (
 	"id" uuid DEFAULT gen_random_uuid() NOT NULL,
 	"tenant_id" uuid NOT NULL,
-	"subject" uuid NOT NULL,
+	"subject_id" uuid NOT NULL,
 	"begin" timestamp with time zone NOT NULL,
 	"end" timestamp with time zone NOT NULL,
 	"refresh_token_hash_version" integer NOT NULL,
@@ -96,8 +96,8 @@ CREATE TABLE "authentication"."user" (
 	CONSTRAINT "user_tenant_id_email_unique" UNIQUE("tenant_id","email")
 );
 --> statement-breakpoint
-ALTER TABLE "authentication"."credentials" ADD CONSTRAINT "credentials_id_subject_fkey" FOREIGN KEY ("tenant_id","subject") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "authentication"."session" ADD CONSTRAINT "session_id_subject_fkey" FOREIGN KEY ("tenant_id","subject") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "authentication"."credentials" ADD CONSTRAINT "credentials_id_subject_fkey" FOREIGN KEY ("tenant_id","subject_id") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "authentication"."session" ADD CONSTRAINT "session_id_subject_fkey" FOREIGN KEY ("tenant_id","subject_id") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "authentication"."service_account" ADD CONSTRAINT "service_account_id_subject_fkey" FOREIGN KEY ("tenant_id","parent") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "authentication"."subject" ADD CONSTRAINT "subject_id_system_account_fkey" FOREIGN KEY ("tenant_id","system_account_id") REFERENCES "authentication"."system_account"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "authentication"."subject" ADD CONSTRAINT "subject_id_user_fkey" FOREIGN KEY ("tenant_id","user_id") REFERENCES "authentication"."user"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint

package/authentication/server/drizzle/meta/0000_snapshot.json

@@ -1,5 +1,5 @@
 {
-  "id": "9385eff0-25d7-4ef6-be4b-8019af0a1424",
+  "id": "685f89da-0f2a-4523-9cbc-c9daea5f70c2",
   "prevId": "00000000-0000-0000-0000-000000000000",
   "version": "7",
   "dialect": "postgresql",
@@ -21,8 +21,8 @@
           "primaryKey": false,
           "notNull": true
         },
-        "subject": {
-          "name": "subject",
+        "subject_id": {
+          "name": "subject_id",
           "type": "uuid",
           "primaryKey": false,
           "notNull": true
@@ -86,7 +86,7 @@
           "schemaTo": "authentication",
           "columnsFrom": [
             "tenant_id",
-            "subject"
+            "subject_id"
           ],
           "columnsTo": [
             "tenant_id",
@@ -106,12 +106,12 @@
         }
       },
       "uniqueConstraints": {
-        "credentials_tenant_id_subject_unique": {
-          "name": "credentials_tenant_id_subject_unique",
+        "credentials_tenant_id_subject_id_unique": {
+          "name": "credentials_tenant_id_subject_id_unique",
           "nullsNotDistinct": false,
           "columns": [
             "tenant_id",
-            "subject"
+            "subject_id"
           ]
         }
       },
@@ -136,8 +136,8 @@
           "primaryKey": false,
           "notNull": true
         },
-        "subject": {
-          "name": "subject",
+        "subject_id": {
+          "name": "subject_id",
           "type": "uuid",
           "primaryKey": false,
           "notNull": true
@@ -213,7 +213,7 @@
           "schemaTo": "authentication",
           "columnsFrom": [
             "tenant_id",
-            "subject"
+            "subject_id"
           ],
           "columnsTo": [
             "tenant_id",

package/authentication/server/drizzle/meta/_journal.json

@@ -5,8 +5,8 @@
     {
       "idx": 0,
       "version": "7",
-      "when": 1767838186408,
-      "tag": "0000_majestic_proudstar",
+      "when": 1767839299143,
+      "tag": "0000_normal_paper_doll",
       "breakpoints": true
     }
   ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tstdl/base",
-  "version": "0.93.83",
+  "version": "0.93.85",
   "author": "Patrick Hein",
   "publishConfig": {
     "access": "public"
@@ -48,6 +48,8 @@
     "./authentication/server": "./authentication/server/index.js",
     "./browser": "./browser/index.js",
     "./cancellation": "./cancellation/index.js",
+    "./circuit-breaker": "./circuit-breaker/index.js",
+    "./circuit-breaker/postgres": "./circuit-breaker/postgres/index.js",
     "./cookie": "./cookie/index.js",
     "./css": "./css/index.js",
     "./data-structures": "./data-structures/index.js",