@unchainedshop/core-users 2.14.2 → 3.0.0-alpha3

package/lib/module/configureUsersWebAuthnModule.js

@@ -0,0 +1,148 @@
+import { Fido2Lib, } from 'fido2-lib';
+import { createLogger } from '@unchainedshop/logger';
+import { WebAuthnCredentialsCreationRequestsCollection } from '../db/WebAuthnCredentialsCreationRequestsCollection.js';
+const logger = createLogger('unchained:core-users');
+const { ROOT_URL, EMAIL_WEBSITE_NAME } = process.env;
+let setupMDSPromise;
+const setupMDSCollection = async () => {
+    try {
+        const tocResult = await fetch('https://mds.fidoalliance.org');
+        const tocBase64 = await tocResult.text();
+        const mc = Fido2Lib.createMdsCollection('FIDO MDS v3'); // createMdsCollection exists but not typed in official package!
+        const tocObj = await mc.addToc(tocBase64);
+        return tocObj.entries;
+    }
+    catch (e) {
+        logger.error(e);
+        return [];
+    }
+};
+const fetchMDS = async () => {
+    if (setupMDSPromise)
+        return setupMDSPromise;
+    setupMDSPromise = setupMDSCollection();
+    return setupMDSPromise;
+};
+export function toArrayBuffer(buffer) {
+    return buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
+}
+export function buf2hex(buffer) {
+    // buffer is an ArrayBuffer
+    return Array.prototype.map
+        .call(new Uint8Array(buffer), (x) => `00${x.toString(16)}`.slice(-2))
+        .join('');
+}
+export const configureUsersWebAuthnModule = async ({ db, }) => {
+    const WebAuthnCredentialsCreationRequests = await WebAuthnCredentialsCreationRequestsCollection(db);
+    const thisDomain = new URL(ROOT_URL).hostname;
+    const f2l = new Fido2Lib({
+        rpId: thisDomain,
+        rpName: EMAIL_WEBSITE_NAME,
+        rpIcon: 'data:image/png;base64,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',
+        challengeSize: 128,
+        attestation: 'none',
+    });
+    return {
+        findMDSMetadataForAAGUID: async (aaguid) => {
+            const mdsCollection = await fetchMDS();
+            const foundEntry = mdsCollection.find((entry) => {
+                return entry.aaguid === aaguid;
+            });
+            return foundEntry?.metadataStatement;
+        },
+        createCredentialCreationOptions: async (origin, username, extensionOptions) => {
+            const registrationOptions = await f2l.attestationOptions(extensionOptions);
+            const challenge = Buffer.from(registrationOptions.challenge).toString('base64');
+            const { insertedId } = await WebAuthnCredentialsCreationRequests.insertOne({
+                _id: new Date().getTime(),
+                challenge,
+                origin,
+                factor: registrationOptions.factor || 'either',
+                username,
+            });
+            return {
+                ...registrationOptions,
+                challenge,
+                requestId: insertedId,
+            };
+        },
+        createCredentialRequestOptions: async (origin, username, extensionOptions) => {
+            const loginOptions = await f2l.assertionOptions(extensionOptions);
+            const challenge = Buffer.from(loginOptions.challenge).toString('base64');
+            const { insertedId } = await WebAuthnCredentialsCreationRequests.insertOne({
+                _id: new Date().getTime(),
+                challenge,
+                origin,
+                factor: loginOptions.factor || 'either',
+                username,
+            });
+            return {
+                ...loginOptions,
+                challenge,
+                requestId: insertedId,
+            };
+        },
+        verifyCredentialCreation: async (username, credentials) => {
+            const request = await WebAuthnCredentialsCreationRequests.findOne({
+                username,
+            }, { sort: { _id: -1 } });
+            const attestationExpectations = {
+                challenge: request.challenge,
+                origin: request.origin,
+                factor: request.factor,
+            };
+            const id = Buffer.from(credentials.id, 'base64');
+            const attestationObject = Buffer.from(credentials.response.attestationObject, 'base64');
+            const clientDataJSON = Buffer.from(credentials.response.clientDataJSON, 'base64');
+            const attestationResponse = {
+                id: toArrayBuffer(id),
+                response: {
+                    attestationObject: toArrayBuffer(attestationObject),
+                    clientDataJSON: toArrayBuffer(clientDataJSON),
+                },
+            };
+            const registrationOptions = await f2l.attestationResult(attestationResponse, attestationExpectations);
+            const publicKey = registrationOptions?.authnrData?.get('credentialPublicKeyPem');
+            const aaguidArrayBuffer = registrationOptions?.authnrData?.get('aaguid'); // ArrayBuffer Uint8...
+            const counter = registrationOptions?.authnrData?.get('counter');
+            const aaguidConcatenated = buf2hex(aaguidArrayBuffer);
+            const aaguid = `${aaguidConcatenated.slice(0, 8)}-${aaguidConcatenated.slice(8, 12)}-${aaguidConcatenated.slice(12, 16)}-${aaguidConcatenated.slice(16, 20)}-${aaguidConcatenated.slice(20)}`;
+            return { publicKey, counter, id: credentials.id, aaguid, created: new Date() };
+        },
+        verifyCredentialRequest: async (userPublicKeys, username, credentials) => {
+            const request = await WebAuthnCredentialsCreationRequests.findOne({
+                _id: credentials.requestId,
+            }, { sort: { _id: -1 } });
+            const id = Buffer.from(credentials.id, 'base64');
+            const authenticatorData = Buffer.from(credentials.response.authenticatorData, 'base64');
+            const signature = Buffer.from(credentials.response.signature, 'base64');
+            const userHandle = Buffer.from(credentials.response.userHandle, 'base64');
+            const clientDataJSON = Buffer.from(credentials.response.clientDataJSON, 'base64');
+            const { publicKey, counter } = userPublicKeys.find((publicCredentials) => {
+                return credentials.id === publicCredentials.id;
+            }) || {};
+            if (!publicKey)
+                throw new Error('WebAuthn not setup');
+            const assertionExpectations = {
+                challenge: request.challenge,
+                origin: request.origin,
+                factor: request.factor,
+                prevCounter: counter,
+                publicKey,
+                userHandle: toArrayBuffer(Buffer.from(username)),
+            };
+            const assertionResponse = {
+                id: toArrayBuffer(id),
+                response: {
+                    authenticatorData: toArrayBuffer(authenticatorData),
+                    clientDataJSON: toArrayBuffer(clientDataJSON),
+                    signature: toArrayBuffer(signature),
+                    userHandle: toArrayBuffer(userHandle),
+                },
+            };
+            const loginResult = await f2l.assertionResult(assertionResponse, assertionExpectations);
+            return { userHandle: loginResult?.authnrData?.get('userHandle') };
+        },
+    };
+};
+//# sourceMappingURL=configureUsersWebAuthnModule.js.map

package/lib/module/configureUsersWebAuthnModule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configureUsersWebAuthnModule.js","sourceRoot":"","sources":["../../src/module/configureUsersWebAuthnModule.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,QAAQ,GAGT,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,6CAA6C,EAAE,MAAM,wDAAwD,CAAC;AAoBvH,MAAM,MAAM,GAAG,YAAY,CAAC,sBAAsB,CAAC,CAAC;AAEpD,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;AAOrD,IAAI,eAAe,CAAC;AACpB,MAAM,kBAAkB,GAAG,KAAK,IAAI,EAAE;IACpC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,EAAE,GAAI,QAAgB,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,gEAAgE;QACjI,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;IAC1B,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAC5C,eAAe,GAAG,kBAAkB,EAAE,CAAC;IACvC,OAAO,eAAe,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,MAAM;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,MAAM;IAC5B,2BAA2B;IAC3B,OAAO,KAAK,CAAC,SAAS,CAAC,GAAG;SACvB,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SACpE,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,EAAE,EACjD,EAAE,GACe,EAAgC,EAAE;IACnD,MAAM,mCAAmC,GAAG,MAAM,6CAA6C,CAAC,EAAE,CAAC,CAAC;IAEpG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;IAE9C,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC;QACvB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,kBAAkB;QAC1B,MAAM,EACJ,olDAAolD;QACtlD,aAAa,EAAE,GAAG;QAClB,WAAW,EAAE,MAAM;KACpB,CAAC,CAAC;IAEH,OAAO;QACL,wBAAwB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACzC,MAAM,aAAa,GAAG,MAAM,QAAQ,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC9C,OAAO,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,OAAO,UAAU,EAAE,iBAAiB,CAAC;QACvC,CAAC;QAED,+BAA+B,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE;YAC5E,MAAM,mBAAmB,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChF,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,mCAAmC,CAAC,SAAS,CAAC;gBACzE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBACzB,SAAS;gBACT,MAAM;gBACN,MAAM,EAAG,mBAA2B,CAAC,MAAM,IAAI,QAAQ;gBACvD,QAAQ;aACT,CAAC,CAAC;YAEH,OAAO;gBACL,GAAG,mBAAmB;gBACtB,SAAS;gBACT,SAAS,EAAE,UAAU;aACmC,CAAC;QAC7D,CAAC;QAED,8BAA8B,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE;YAC3E,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,mCAAmC,CAAC,SAAS,CAAC;gBACzE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;gBACzB,SAAS;gBACT,MAAM;gBACN,MAAM,EAAG,YAAoB,CAAC,MAAM,IAAI,QAAQ;gBAChD,QAAQ;aACT,CAAC,CAAC;YAEH,OAAO;gBACL,GAAG,YAAY;gBACf,SAAS;gBACT,SAAS,EAAE,UAAU;aACkC,CAAC;QAC5D,CAAC;QAED,wBAAwB,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;YACxD,MAAM,OAAO,GAAG,MAAM,mCAAmC,CAAC,OAAO,CAC/D;gBACE,QAAQ;aACT,EACD,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CACtB,CAAC;YAEF,MAAM,uBAAuB,GAAG;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC;YAEF,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACjD,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YACxF,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YAElF,MAAM,mBAAmB,GAAG;gBAC1B,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;gBACrB,QAAQ,EAAE;oBACR,iBAAiB,EAAE,aAAa,CAAC,iBAAiB,CAAC;oBACnD,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC;iBAC9C;aACF,CAAC;YAEF,MAAM,mBAAmB,GAAG,MAAM,GAAG,CAAC,iBAAiB,CACrD,mBAAmB,EACnB,uBAAuB,CACxB,CAAC;YAEF,MAAM,SAAS,GAAG,mBAAmB,EAAE,UAAU,EAAE,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACjF,MAAM,iBAAiB,GAAG,mBAAmB,EAAE,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,uBAAuB;YACjG,MAAM,OAAO,GAAG,mBAAmB,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YAEhE,MAAM,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAC1E,CAAC,EACD,EAAE,CACH,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAC/D,EAAE,EACF,EAAE,CACH,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAEpC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACjF,CAAC;QAED,uBAAuB,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;YACvE,MAAM,OAAO,GAAG,MAAM,mCAAmC,CAAC,OAAO,CAC/D;gBACE,GAAG,EAAE,WAAW,CAAC,SAAS;aAC3B,EACD,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CACtB,CAAC;YAEF,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACjD,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YACxF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC1E,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YAElF,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAC1B,cAAc,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,EAAE;gBACxC,OAAO,WAAW,CAAC,EAAE,KAAK,iBAAiB,CAAC,EAAE,CAAC;YACjD,CAAC,CAAC,IAAI,EAAE,CAAC;YAEX,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAEtD,MAAM,qBAAqB,GAAG;gBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,WAAW,EAAE,OAAO;gBACpB,SAAS;gBACT,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aACjD,CAAC;YAEF,MAAM,iBAAiB,GAAG;gBACxB,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;gBACrB,QAAQ,EAAE;oBACR,iBAAiB,EAAE,aAAa,CAAC,iBAAiB,CAAC;oBACnD,cAAc,EAAE,aAAa,CAAC,cAAc,CAAC;oBAC7C,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC;oBACnC,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC;iBACtC;aACF,CAAC;YAEF,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;YACxF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/lib/module/pbkdf2.d.ts

@@ -0,0 +1,4 @@
+export declare function generateSalt(saltLength?: number): string;
+export declare function getDerivedKey(salt: string, password: string, iterations?: number, keyLength?: number): Promise<string>;
+export declare function compare(password: string, hash: string, salt: string): Promise<boolean>;
+//# sourceMappingURL=pbkdf2.d.ts.map

package/lib/module/pbkdf2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf2.d.ts","sourceRoot":"","sources":["../../src/module/pbkdf2.ts"],"names":[],"mappings":"AAKA,wBAAgB,YAAY,CAAC,UAAU,SAAqB,UAG3D;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,SAAoB,EAC9B,SAAS,SAAoB,mBAmB9B;AAED,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,oBAGzE"}

package/lib/module/pbkdf2.js

@@ -0,0 +1,27 @@
+// https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2
+const PBKDF2_ITERATIONS = 300000; // Iterations, > 210'000
+const PBKDF2_KEY_LENGTH = 256; // Bytes
+const PBKDF2_SALT_LENGTH = 16; // Bytes
+export function generateSalt(saltLength = PBKDF2_SALT_LENGTH) {
+    const array = new Uint32Array(saltLength);
+    return Buffer.from(crypto.getRandomValues(array)).toString('hex');
+}
+export async function getDerivedKey(salt, password, iterations = PBKDF2_ITERATIONS, keyLength = PBKDF2_KEY_LENGTH) {
+    const textEncoder = new TextEncoder();
+    const passwordBuffer = textEncoder.encode(password);
+    const importedKey = await crypto.subtle.importKey('raw', passwordBuffer, 'PBKDF2', false, [
+        'deriveBits',
+    ]);
+    const bits = await crypto.subtle.deriveBits({
+        name: 'PBKDF2',
+        hash: 'SHA-512',
+        salt: textEncoder.encode(salt),
+        iterations,
+    }, importedKey, keyLength);
+    return Buffer.from(bits).toString('hex');
+}
+export async function compare(password, hash, salt) {
+    const comparableHash = await getDerivedKey(salt, password);
+    return comparableHash === hash;
+}
+//# sourceMappingURL=pbkdf2.js.map

package/lib/module/pbkdf2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf2.js","sourceRoot":"","sources":["../../src/module/pbkdf2.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,wBAAwB;AAC1D,MAAM,iBAAiB,GAAG,GAAG,CAAC,CAAC,QAAQ;AACvC,MAAM,kBAAkB,GAAG,EAAE,CAAC,CAAC,QAAQ;AAEvC,MAAM,UAAU,YAAY,CAAC,UAAU,GAAG,kBAAkB;IAC1D,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,QAAgB,EAChB,UAAU,GAAG,iBAAiB,EAC9B,SAAS,GAAG,iBAAiB;IAE7B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IACtC,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE;QACxF,YAAY;KACb,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CACzC;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,UAAU;KACX,EACD,WAAW,EACX,SAAS,CACV,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAY;IACxE,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3D,OAAO,cAAc,KAAK,IAAI,CAAC;AACjC,CAAC"}

package/lib/module/sha256.d.ts

@@ -0,0 +1,2 @@
+export declare const hash: (message: any) => Promise<string>;
+//# sourceMappingURL=sha256.d.ts.map

package/lib/module/sha256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.d.ts","sourceRoot":"","sources":["../../src/module/sha256.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,IAAI,mCAIhB,CAAC"}

package/lib/module/sha256.js

@@ -0,0 +1,6 @@
+export const hash = async (message) => {
+    const bytes = new TextEncoder().encode(message);
+    const hashBuffer = await crypto.subtle.digest('SHA-256', bytes);
+    return Buffer.from(hashBuffer).toString('hex');
+};
+//# sourceMappingURL=sha256.js.map

package/lib/module/sha256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.js","sourceRoot":"","sources":["../../src/module/sha256.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE;IACpC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC,CAAC"}

package/lib/services/migrateUserDataService.d.ts

@@ -0,0 +1,4 @@
+import { UnchainedCore } from '@unchainedshop/core';
+export type MigrateUserDataService = (userIdBeforeLogin: any, userId: any, unchainedAPI: UnchainedCore) => Promise<void>;
+export declare const migrateUserDataService: MigrateUserDataService;
+//# sourceMappingURL=migrateUserDataService.d.ts.map

package/lib/services/migrateUserDataService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrateUserDataService.d.ts","sourceRoot":"","sources":["../../src/services/migrateUserDataService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,MAAM,MAAM,sBAAsB,GAAG,CACnC,iBAAiB,KAAA,EACjB,MAAM,KAAA,EACN,YAAY,EAAE,aAAa,KACxB,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,eAAO,MAAM,sBAAsB,EAAE,sBA2BpC,CAAC"}

package/lib/services/migrateUserDataService.js

@@ -0,0 +1,18 @@
+import { userSettings } from '../users-settings.js';
+export const migrateUserDataService = async (userIdBeforeLogin, userId, unchainedAPI) => {
+    const user = await unchainedAPI.modules.users.findUserById(userId);
+    const userBeforeLogin = await unchainedAPI.modules.users.findUserById(userIdBeforeLogin);
+    await unchainedAPI.services.orders.migrateOrderCarts({
+        fromUserId: userIdBeforeLogin,
+        toUserId: userId,
+        shouldMerge: userSettings.mergeUserCartsOnLogin,
+        countryContext: userBeforeLogin.lastLogin?.countryCode || user.lastLogin?.countryCode,
+    }, unchainedAPI);
+    await unchainedAPI.services.bookmarks.migrateBookmarks({
+        fromUserId: userIdBeforeLogin,
+        toUserId: userId,
+        shouldMerge: userSettings.mergeUserCartsOnLogin,
+        countryContext: userBeforeLogin.lastLogin?.countryCode || user.lastLogin?.countryCode,
+    }, unchainedAPI);
+};
+//# sourceMappingURL=migrateUserDataService.js.map

package/lib/services/migrateUserDataService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrateUserDataService.js","sourceRoot":"","sources":["../../src/services/migrateUserDataService.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAQpD,MAAM,CAAC,MAAM,sBAAsB,GAA2B,KAAK,EACjE,iBAAiB,EACjB,MAAM,EACN,YAAY,EACZ,EAAE;IACF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAEzF,MAAM,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAClD;QACE,UAAU,EAAE,iBAAiB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,YAAY,CAAC,qBAAqB;QAC/C,cAAc,EAAE,eAAe,CAAC,SAAS,EAAE,WAAW,IAAI,IAAI,CAAC,SAAS,EAAE,WAAW;KACtF,EACD,YAAY,CACb,CAAC;IAEF,MAAM,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CACpD;QACE,UAAU,EAAE,iBAAiB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,YAAY,CAAC,qBAAqB;QAC/C,cAAc,EAAE,eAAe,CAAC,SAAS,EAAE,WAAW,IAAI,IAAI,CAAC,SAAS,EAAE,WAAW;KACtF,EACD,YAAY,CACb,CAAC;AACJ,CAAC,CAAC"}

package/lib/services/updateUserAvatarAfterUploadService.d.ts

@@ -1,3 +1,7 @@
-import { UpdateUserAvatarAfterUploadService } from '@unchainedshop/types/user.js';
+import { File } from '@unchainedshop/core-files';
+import { UnchainedCore } from '@unchainedshop/core';
+export type UpdateUserAvatarAfterUploadService = (params: {
+    file: File;
+}, context: UnchainedCore) => Promise<void>;
 export declare const updateUserAvatarAfterUploadService: UpdateUserAvatarAfterUploadService;
 //# sourceMappingURL=updateUserAvatarAfterUploadService.d.ts.map

package/lib/services/updateUserAvatarAfterUploadService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updateUserAvatarAfterUploadService.d.ts","sourceRoot":"","sources":["../../src/services/updateUserAvatarAfterUploadService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kCAAkC,EAAE,MAAM,8BAA8B,CAAC;AAGlF,eAAO,MAAM,kCAAkC,EAAE,kCA6BhD,CAAC"}
+{"version":3,"file":"updateUserAvatarAfterUploadService.d.ts","sourceRoot":"","sources":["../../src/services/updateUserAvatarAfterUploadService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,MAAM,kCAAkC,GAAG,CAC/C,MAAM,EAAE;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,EACtB,OAAO,EAAE,aAAa,KACnB,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,eAAO,MAAM,kCAAkC,EAAE,kCA6BhD,CAAC"}

package/lib/services/updateUserAvatarAfterUploadService.js.map

@@ -1 +1 @@
-{"version":3,"file":"updateUserAvatarAfterUploadService.js","sourceRoot":"","sources":["../../src/services/updateUserAvatarAfterUploadService.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,CAAC,MAAM,kCAAkC,GAAuC,KAAK,EACzF,EAAE,IAAI,EAAE,EACR,OAAO,EACP,EAAE;IACF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAA0B,CAAC;IAEnD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,MAAM;KACtB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAExC,IAAI,CAAC;QACH,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,CAC9B;gBACE,OAAO;aACR,EACD,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,8BAA8B;QAC9B,GAAG,CAAC,uCAAwC,CAAW,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC,CAAC"}
+{"version":3,"file":"updateUserAvatarAfterUploadService.js","sourceRoot":"","sources":["../../src/services/updateUserAvatarAfterUploadService.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAQtD,MAAM,CAAC,MAAM,kCAAkC,GAAuC,KAAK,EACzF,EAAE,IAAI,EAAE,EACR,OAAO,EACP,EAAE;IACF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAA0B,CAAC;IAEnD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,MAAM;KACtB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAExC,IAAI,CAAC;QACH,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,CAC9B;gBACE,OAAO;aACR,EACD,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,8BAA8B;QAC9B,GAAG,CAAC,uCAAwC,CAAW,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC,CAAC"}

package/lib/services/userServices.d.ts

@@ -1,3 +1,8 @@
-import { UserServices } from '@unchainedshop/types/user.js';
+import { UpdateUserAvatarAfterUploadService } from './updateUserAvatarAfterUploadService.js';
+import { MigrateUserDataService } from './migrateUserDataService.js';
+export interface UserServices {
+    updateUserAvatarAfterUpload: UpdateUserAvatarAfterUploadService;
+    migrateUserData: MigrateUserDataService;
+}
 export declare const userServices: UserServices;
 //# sourceMappingURL=userServices.d.ts.map

package/lib/services/userServices.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"userServices.d.ts","sourceRoot":"","sources":["../../src/services/userServices.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAK5D,eAAO,MAAM,YAAY,EAAE,YAI1B,CAAC"}
+{"version":3,"file":"userServices.d.ts","sourceRoot":"","sources":["../../src/services/userServices.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kCAAkC,EACnC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAA0B,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE7F,MAAM,WAAW,YAAY;IAC3B,2BAA2B,EAAE,kCAAkC,CAAC;IAChE,eAAe,EAAE,sBAAsB,CAAC;CACzC;AAED,eAAO,MAAM,YAAY,EAAE,YAG1B,CAAC"}

package/lib/services/userServices.js

@@ -1,9 +1,7 @@
-import { getUserCountryService } from './getUserCountryService.js';
-import { getUserLanguageService } from './getUserLanguageService.js';
-import { updateUserAvatarAfterUploadService } from './updateUserAvatarAfterUploadService.js';
+import { updateUserAvatarAfterUploadService, } from './updateUserAvatarAfterUploadService.js';
+import { migrateUserDataService } from './migrateUserDataService.js';
 export const userServices = {
-    getUserCountry: getUserCountryService,
-    getUserLanguage: getUserLanguageService,
     updateUserAvatarAfterUpload: updateUserAvatarAfterUploadService,
+    migrateUserData: migrateUserDataService,
 };
 //# sourceMappingURL=userServices.js.map

package/lib/services/userServices.js.map

@@ -1 +1 @@
-{"version":3,"file":"userServices.js","sourceRoot":"","sources":["../../src/services/userServices.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,yCAAyC,CAAC;AAE7F,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,cAAc,EAAE,qBAAqB;IACrC,eAAe,EAAE,sBAAsB;IACvC,2BAA2B,EAAE,kCAAkC;CAChE,CAAC"}
+{"version":3,"file":"userServices.js","sourceRoot":"","sources":["../../src/services/userServices.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,GAEnC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAA0B,MAAM,6BAA6B,CAAC;AAO7F,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,2BAA2B,EAAE,kCAAkC;IAC/D,eAAe,EAAE,sBAAsB;CACxC,CAAC"}

package/lib/types.d.ts

@@ -0,0 +1,88 @@
+import type { TimestampFields, Address, Contact, mongodb } from '@unchainedshop/mongodb';
+export interface PushSubscription {
+    _id: string;
+    userAgent: string;
+    expirationTime: number;
+    endpoint: string;
+}
+export interface UserProfile {
+    displayName?: string;
+    birthday?: Date;
+    phoneMobile?: string;
+    gender?: string;
+    address?: Address;
+}
+export interface UserLastLogin {
+    timestamp?: Date;
+    locale?: string;
+    countryCode?: string;
+    remoteAddress?: string;
+    remotePort?: string;
+    userAgent?: string;
+}
+export interface Email {
+    address: string;
+    verified: boolean;
+}
+export interface WebAuthnCredentials {
+    id: string;
+    publicKey: string;
+    created: Date;
+    aaguid: string;
+    counter: number;
+    mdsMetadata: any;
+}
+export interface Web3Address {
+    address: string;
+    nonce?: number;
+    verified: boolean;
+}
+export interface PushSubscriptionObject {
+    userAgent: string;
+    endpoint: string;
+    expirationTime?: number;
+    keys: {
+        auth: string;
+        p256dh: string;
+    };
+}
+export type User = {
+    _id?: string;
+    deleted?: Date;
+    avatarId?: string;
+    emails: Array<Email>;
+    guest: boolean;
+    initialPassword: boolean;
+    lastBillingAddress?: Address;
+    lastContact?: Contact;
+    lastLogin?: UserLastLogin;
+    profile?: UserProfile;
+    roles: Array<string>;
+    services: any;
+    tags?: Array<string>;
+    pushSubscriptions: Array<PushSubscriptionObject>;
+    username?: string;
+    meta?: any;
+} & TimestampFields;
+export type UserQuery = mongodb.Filter<User> & {
+    includeGuests?: boolean;
+    queryString?: string;
+};
+export interface WebAuthnCredentialsCreationRequest {
+    challenge: string;
+    username: string;
+    origin: string;
+    factor: 'first' | 'second' | 'either';
+}
+export interface UserData {
+    email?: string;
+    guest?: boolean;
+    initialPassword?: boolean;
+    lastBillingAddress?: User['lastBillingAddress'];
+    password: string | null;
+    webAuthnPublicKeyCredentials?: any;
+    profile?: UserProfile;
+    roles?: Array<string>;
+    username?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEzF,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,KAAK;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,GAAG,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,MAAM,IAAI,GAAG;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,QAAQ,EAAE,GAAG,CAAC;IACd,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,iBAAiB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ,GAAG,eAAe,CAAC;AAEpB,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;IAC7C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,kCAAkC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;CACvC;AAKD,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kBAAkB,CAAC,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAChD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,4BAA4B,CAAC,EAAE,GAAG,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/lib/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/lib/users-index.d.ts

@@ -1,3 +1,5 @@
-export { configureUsersModule } from './module/configureUsersModule.js';
-export { userServices } from './services/userServices.js';
+export * from './types.js';
+export * from './module/configureUsersModule.js';
+export * from './services/userServices.js';
+export * from './users-settings.js';
 //# sourceMappingURL=users-index.d.ts.map

package/lib/users-index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"users-index.d.ts","sourceRoot":"","sources":["../src/users-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"users-index.d.ts","sourceRoot":"","sources":["../src/users-index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC"}

package/lib/users-index.js

@@ -1,3 +1,5 @@
-export { configureUsersModule } from './module/configureUsersModule.js';
-export { userServices } from './services/userServices.js';
+export * from './types.js';
+export * from './module/configureUsersModule.js';
+export * from './services/userServices.js';
+export * from './users-settings.js';
 //# sourceMappingURL=users-index.js.map

package/lib/users-index.js.map

@@ -1 +1 @@
-{"version":3,"file":"users-index.js","sourceRoot":"","sources":["../src/users-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"users-index.js","sourceRoot":"","sources":["../src/users-index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC"}

package/lib/users-settings.d.ts

@@ -0,0 +1,21 @@
+import { User } from './types.js';
+import { mongodb } from '@unchainedshop/mongodb';
+export interface UserSettingsOptions {
+    mergeUserCartsOnLogin?: boolean;
+    autoMessagingAfterUserCreation?: boolean;
+    validateEmail?: (email: string) => Promise<boolean>;
+    validateUsername?: (username: string) => Promise<boolean>;
+    validateNewUser?: (user: Partial<User>) => Promise<User>;
+    validatePassword?: (password: string) => Promise<boolean>;
+}
+export interface UserSettings {
+    mergeUserCartsOnLogin: boolean;
+    autoMessagingAfterUserCreation: boolean;
+    validateEmail: (email: string) => Promise<boolean>;
+    validateUsername: (username: string) => Promise<boolean>;
+    validateNewUser: (user: Partial<User>) => Promise<User>;
+    validatePassword: (password: string) => Promise<boolean>;
+    configureSettings: (options: UserSettingsOptions, db: mongodb.Db) => void;
+}
+export declare const userSettings: UserSettings;
+//# sourceMappingURL=users-settings.d.ts.map

package/lib/users-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-settings.d.ts","sourceRoot":"","sources":["../src/users-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,MAAM,WAAW,mBAAmB;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AACD,MAAM,WAAW,YAAY;IAC3B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,8BAA8B,EAAE,OAAO,CAAC;IACxC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,eAAe,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,iBAAiB,EAAE,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC;CAC3E;AAED,eAAO,MAAM,YAAY,EAAE,YAwD1B,CAAC"}

package/lib/users-settings.js

@@ -0,0 +1,48 @@
+export const userSettings = {
+    autoMessagingAfterUserCreation: null,
+    mergeUserCartsOnLogin: null,
+    validateEmail: null,
+    validateUsername: null,
+    validateNewUser: null,
+    validatePassword: null,
+    configureSettings: ({ mergeUserCartsOnLogin, autoMessagingAfterUserCreation, validateEmail, validateUsername, validateNewUser, validatePassword, }, db) => {
+        const defaultAutoMessagingAfterUserCreation = true;
+        const defaultMergeUserCartsOnLogin = true;
+        const defaultValidateEmail = async (rawEmail) => {
+            const email = rawEmail.toLowerCase().trim();
+            if (!email?.includes?.('@'))
+                return false;
+            const emailAlreadyExists = await db
+                .collection('users')
+                .countDocuments({ 'emails.address': { $regex: email, $options: 'i' } }, { limit: 1 });
+            if (emailAlreadyExists)
+                return false;
+            return true;
+        };
+        const defaultValidateUsername = async (rawUsername) => {
+            const username = rawUsername.toLowerCase().trim();
+            if (username?.length < 3)
+                return false;
+            const usernameAlreadyExists = await db
+                .collection('users')
+                .countDocuments({ username: { $regex: username, $options: 'i' } }, { limit: 1 });
+            if (usernameAlreadyExists)
+                return false;
+            return true;
+        };
+        const defaultValidateNewUser = async (user) => {
+            return user;
+        };
+        const defaultValidatePassword = async (password) => {
+            return password?.length >= 8;
+        };
+        userSettings.mergeUserCartsOnLogin = mergeUserCartsOnLogin ?? defaultMergeUserCartsOnLogin;
+        userSettings.autoMessagingAfterUserCreation =
+            autoMessagingAfterUserCreation ?? defaultAutoMessagingAfterUserCreation;
+        userSettings.validateEmail = validateEmail || defaultValidateEmail;
+        userSettings.validateUsername = validateUsername || defaultValidateUsername;
+        userSettings.validateNewUser = validateNewUser || defaultValidateNewUser;
+        userSettings.validatePassword = validatePassword || defaultValidatePassword;
+    },
+};
+//# sourceMappingURL=users-settings.js.map

package/lib/users-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-settings.js","sourceRoot":"","sources":["../src/users-settings.ts"],"names":[],"mappings":"AAqBA,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,8BAA8B,EAAE,IAAI;IACpC,qBAAqB,EAAE,IAAI;IAC3B,aAAa,EAAE,IAAI;IACnB,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,IAAI;IACrB,gBAAgB,EAAE,IAAI;IAEtB,iBAAiB,EAAE,CACjB,EACE,qBAAqB,EACrB,8BAA8B,EAC9B,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACI,EACtB,EAAc,EACd,EAAE;QACF,MAAM,qCAAqC,GAAG,IAAI,CAAC;QACnD,MAAM,4BAA4B,GAAG,IAAI,CAAC;QAE1C,MAAM,oBAAoB,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE;YACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,MAAM,kBAAkB,GAAG,MAAM,EAAE;iBAChC,UAAU,CAAC,OAAO,CAAC;iBACnB,cAAc,CAAC,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACxF,IAAI,kBAAkB;gBAAE,OAAO,KAAK,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,MAAM,uBAAuB,GAAG,KAAK,EAAE,WAAmB,EAAE,EAAE;YAC5D,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,QAAQ,EAAE,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,MAAM,qBAAqB,GAAG,MAAM,EAAE;iBACnC,UAAU,CAAC,OAAO,CAAC;iBACnB,cAAc,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACnF,IAAI,qBAAqB;gBAAE,OAAO,KAAK,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,MAAM,sBAAsB,GAAG,KAAK,EAAE,IAAU,EAAE,EAAE;YAClD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,uBAAuB,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE;YACzD,OAAO,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC;QAEF,YAAY,CAAC,qBAAqB,GAAG,qBAAqB,IAAI,4BAA4B,CAAC;QAC3F,YAAY,CAAC,8BAA8B;YACzC,8BAA8B,IAAI,qCAAqC,CAAC;QAC1E,YAAY,CAAC,aAAa,GAAG,aAAa,IAAI,oBAAoB,CAAC;QACnE,YAAY,CAAC,gBAAgB,GAAG,gBAAgB,IAAI,uBAAuB,CAAC;QAC5E,YAAY,CAAC,eAAe,GAAG,eAAe,IAAI,sBAAsB,CAAC;QACzE,YAAY,CAAC,gBAAgB,GAAG,gBAAgB,IAAI,uBAAuB,CAAC;IAC9E,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unchainedshop/core-users",
-  "version": "2.14.2",
+  "version": "3.0.0-alpha3",
   "main": "lib/users-index.js",
   "exports": {
     ".": "./lib/users-index.js",
@@ -31,20 +31,19 @@
   },
   "homepage": "https://github.com/unchainedshop/unchained#readme",
   "dependencies": {
-    "@unchainedshop/events": "^2.14.2",
-    "@unchainedshop/file-upload": "^2.14.2",
-    "@unchainedshop/logger": "^2.14.2",
-    "@unchainedshop/roles": "^2.14.2",
-    "@unchainedshop/utils": "^2.14.2",
-    "locale": "^0.1.0",
-    "simpl-schema": "^3.4.6",
+    "@unchainedshop/events": "^3.0.0-alpha3",
+    "@unchainedshop/file-upload": "^3.0.0-alpha3",
+    "@unchainedshop/logger": "^3.0.0-alpha3",
+    "@unchainedshop/roles": "^3.0.0-alpha3",
+    "@unchainedshop/utils": "^3.0.0-alpha3",
+    "bcryptjs": "^2.4.3",
+    "fido2-lib": "^3.5.3",
     "uuid": "^10.0.0"
   },
   "devDependencies": {
-    "@types/node": "^20.16.5",
-    "@unchainedshop/types": "^2.14.2",
+    "@types/node": "^22.5.5",
     "jest": "^29.7.0",
     "ts-jest": "^29.2.5",
-    "typescript": "^5.5.4"
+    "typescript": "^5.6.2"
   }
 }

package/src/db/UsersCollection.ts

@@ -1,5 +1,5 @@
 import { mongodb, buildDbIndexes } from '@unchainedshop/mongodb';
-import { User } from '@unchainedshop/types/user.js';
+import { User } from '../types.js';
 
 export const UsersCollection = async (db: mongodb.Db) => {
   const Users = db.collection<User>('users');
@@ -64,15 +64,6 @@ export const UsersCollection = async (db: mongodb.Db) => {
       },
     },
 
-    {
-      index: {
-        'services.resume.loginTokens.hashedToken': 1,
-      } as any,
-      options: {
-        sparse: true,
-      },
-    },
-
     {
       index: {
         _id: 'text',

package/src/db/WebAuthnCredentialsCreationRequestsCollection.ts

@@ -0,0 +1,20 @@
+import { WebAuthnCredentialsCreationRequest } from '../types.js';
+import { mongodb, buildDbIndexes } from '@unchainedshop/mongodb';
+
+type Collection = WebAuthnCredentialsCreationRequest & { _id: number };
+
+export const WebAuthnCredentialsCreationRequestsCollection = async (db: mongodb.Db) => {
+  const WebAuthnCredentialsCreationRequests = db.collection<Collection>(
+    'accounts_webauthn_credentials_creation_requests',
+  );
+
+  await buildDbIndexes<Collection>(WebAuthnCredentialsCreationRequests, [
+    {
+      index: {
+        username: 1,
+      },
+    },
+  ]);
+
+  return WebAuthnCredentialsCreationRequests;
+};

package/src/module/addMigrations.ts

@@ -1,4 +1,4 @@
-import { Migration, MigrationRepository } from '@unchainedshop/types/core.js';
+import { Migration, MigrationRepository } from '@unchainedshop/core';
 import { UsersCollection } from '../db/UsersCollection.js';
 
 const convertTagsToLowerCase = async (collection: Awaited<ReturnType<typeof UsersCollection>>) => {