@volcanicminds/backend 0.2.38 → 0.2.40

package/dist/lib/api/token/routes.js

@@ -0,0 +1,170 @@
+"use strict";
+module.exports = {
+    config: {
+        title: 'Integration token functions',
+        description: 'Integration token functions',
+        controller: 'controller',
+        tags: ['token'],
+        deprecated: false,
+        version: false,
+        enable: true
+    },
+    routes: [
+        {
+            method: 'GET',
+            path: '/',
+            roles: [roles.admin, roles.backoffice],
+            handler: 'token.find',
+            middlewares: [],
+            config: {
+                title: 'Find tokens',
+                description: 'Get tokens list',
+                query: { $ref: 'getQueryParamsSchema' },
+                response: {
+                    200: {
+                        description: 'Default response',
+                        type: 'array',
+                        items: { $ref: 'tokenSchema#' }
+                    }
+                }
+            }
+        },
+        {
+            method: 'GET',
+            path: '/count',
+            roles: [roles.admin, roles.backoffice],
+            handler: 'token.count',
+            middlewares: [],
+            config: {
+                title: 'Count tokens',
+                description: 'Count tokens',
+                response: {
+                    200: {
+                        description: 'Default response',
+                        type: 'number'
+                    }
+                }
+            }
+        },
+        {
+            method: 'GET',
+            path: '/:id',
+            roles: [roles.admin, roles.backoffice],
+            handler: 'token.findOne',
+            middlewares: [],
+            config: {
+                title: 'Find token',
+                description: 'Get token by id',
+                params: { $ref: 'tokenParamsSchema#' },
+                response: {
+                    200: {
+                        description: 'Default response',
+                        $ref: 'tokenSchema#'
+                    }
+                }
+            }
+        },
+        {
+            method: 'POST',
+            path: '/',
+            roles: [roles.admin, roles.backoffice],
+            handler: 'token.create',
+            middlewares: ['global.isAuthenticated'],
+            config: {
+                title: 'Create new token',
+                description: 'Create a new token',
+                body: { $ref: 'tokenBodySchema' },
+                response: {
+                    200: {
+                        description: 'Default response',
+                        $ref: 'tokenSchema#'
+                    }
+                }
+            }
+        },
+        {
+            method: 'PUT',
+            path: '/:id',
+            roles: [roles.admin, roles.backoffice],
+            handler: 'token.update',
+            middlewares: ['global.isAuthenticated'],
+            config: {
+                title: 'Update existing token',
+                description: 'Update an existing token',
+                params: { $ref: 'tokenParamsSchema#' },
+                body: { $ref: 'tokenBodySchema' },
+                response: {
+                    200: {
+                        description: 'Default response',
+                        $ref: 'tokenSchema#'
+                    }
+                }
+            }
+        },
+        {
+            method: 'DELETE',
+            path: '/:id',
+            roles: [roles.admin, roles.backoffice],
+            handler: 'token.remove',
+            middlewares: ['global.isAuthenticated'],
+            config: {
+                title: 'Unregister existing token (actually disables it)',
+                description: 'Unregister an existing token (actually disables it)',
+                params: { $ref: 'tokenParamsSchema#' },
+                response: {
+                    200: {
+                        description: 'Default response',
+                        type: 'object',
+                        properties: {
+                            ok: { type: 'boolean' }
+                        }
+                    }
+                }
+            }
+        },
+        {
+            method: 'POST',
+            path: '/block/:id',
+            roles: [roles.admin, roles.backoffice],
+            handler: 'token.block',
+            middlewares: ['global.isAuthenticated'],
+            config: {
+                title: 'Block a token by id',
+                description: 'Block a token by id',
+                params: { $ref: 'tokenParamsSchema#' },
+                body: { $ref: 'blockBodySchema' },
+                response: {
+                    200: {
+                        description: 'Default response',
+                        type: 'object',
+                        properties: {
+                            ok: { type: 'boolean' }
+                        }
+                    }
+                }
+            }
+        },
+        {
+            method: 'POST',
+            path: '/unblock/:id',
+            roles: [roles.admin, roles.backoffice],
+            handler: 'token.unblock',
+            middlewares: ['global.isAuthenticated'],
+            config: {
+                title: 'Unblock a token by id',
+                description: 'Unblock a token by id',
+                params: { $ref: 'tokenParamsSchema#' },
+                response: {
+                    200: {
+                        description: 'Default response',
+                        type: 'object',
+                        properties: {
+                            ok: { type: 'boolean' }
+                        }
+                    }
+                }
+            }
+        }
+    ]
+};
+//# sourceMappingURL=routes.js.map

package/dist/lib/api/token/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../../lib/api/token/routes.ts"],"names":[],"mappings":";AAAA,MAAM,CAAC,OAAO,GAAG;IACf,MAAM,EAAE;QACN,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,6BAA6B;QAC1C,UAAU,EAAE,YAAY;QACxB,IAAI,EAAE,CAAC,OAAO,CAAC;QACf,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,IAAI;KACb;IACD,MAAM,EAAE;QACN;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,GAAG;YACT,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YACtC,OAAO,EAAE,YAAY;YACrB,WAAW,EAAE,EAAE;YACf,MAAM,EAAE;gBACN,KAAK,EAAE,aAAa;gBACpB,WAAW,EAAE,iBAAiB;gBAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;gBACvC,QAAQ,EAAE;oBACR,GAAG,EAAE;wBACH,WAAW,EAAE,kBAAkB;wBAC/B,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;qBAChC;iBACF;aACF;SACF;QACD;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YACtC,OAAO,EAAE,aAAa;YACtB,WAAW,EAAE,EAAE;YACf,MAAM,EAAE;gBACN,KAAK,EAAE,cAAc;gBACrB,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE;oBACR,GAAG,EAAE;wBACH,WAAW,EAAE,kBAAkB;wBAC/B,IAAI,EAAE,QAAQ;qBACf;iBACF;aACF;SACF;QACD;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YACtC,OAAO,EAAE,eAAe;YACxB,WAAW,EAAE,EAAE;YACf,MAAM,EAAE;gBACN,KAAK,EAAE,YAAY;gBACnB,WAAW,EAAE,iBAAiB;gBAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;gBACtC,QAAQ,EAAE;oBACR,GAAG,EAAE;wBACH,WAAW,EAAE,kBAAkB;wBAC/B,IAAI,EAAE,cAAc;qBACrB;iBACF;aACF;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG;YACT,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YACtC,OAAO,EAAE,cAAc;YACvB,WAAW,EAAE,CAAC,wBAAwB,CAAC;YACvC,MAAM,EAAE;gBACN,KAAK,EAAE,kBAAkB;gBACzB,WAAW,EAAE,oBAAoB;gBACjC,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACjC,QAAQ,EAAE;oBACR,GAAG,EAAE;wBACH,WAAW,EAAE,kBAAkB;wBAC/B,IAAI,EAAE,cAAc;qBACrB;iBACF;aACF;SACF;QACD;YACE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YACtC,OAAO,EAAE,cAAc;YACvB,WAAW,EAAE,CAAC,wBAAwB,CAAC;YACvC,MAAM,EAAE;gBACN,KAAK,EAAE,uBAAuB;gBAC9B,WAAW,EAAE,0BAA0B;gBACvC,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;gBACtC,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACjC,QAAQ,EAAE;oBACR,GAAG,EAAE;wBACH,WAAW,EAAE,kBAAkB;wBAC/B,IAAI,EAAE,cAAc;qBACrB;iBACF;aACF;SACF;QACD;YACE,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YACtC,OAAO,EAAE,cAAc;YACvB,WAAW,EAAE,CAAC,wBAAwB,CAAC;YACvC,MAAM,EAAE;gBACN,KAAK,EAAE,kDAAkD;gBACzD,WAAW,EAAE,qDAAqD;gBAClE,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;gBACtC,QAAQ,EAAE;oBACR,GAAG,EAAE;wBACH,WAAW,EAAE,kBAAkB;wBAC/B,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;yBACxB;qBACF;iBACF;aACF;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YACtC,OAAO,EAAE,aAAa;YACtB,WAAW,EAAE,CAAC,wBAAwB,CAAC;YACvC,MAAM,EAAE;gBACN,KAAK,EAAE,qBAAqB;gBAC5B,WAAW,EAAE,qBAAqB;gBAClC,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;gBACtC,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBACjC,QAAQ,EAAE;oBACR,GAAG,EAAE;wBACH,WAAW,EAAE,kBAAkB;wBAC/B,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;yBACxB;qBACF;iBACF;aACF;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;YACtC,OAAO,EAAE,eAAe;YACxB,WAAW,EAAE,CAAC,wBAAwB,CAAC;YACvC,MAAM,EAAE;gBACN,KAAK,EAAE,uBAAuB;gBAC9B,WAAW,EAAE,uBAAuB;gBACpC,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;gBACtC,QAAQ,EAAE;oBACR,GAAG,EAAE;wBACH,WAAW,EAAE,kBAAkB;wBAC/B,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;yBACxB;qBACF;iBACF;aACF;SACF;KACF;CACF,CAAA"}

package/dist/lib/api/users/controller/user.js

@@ -20,7 +20,7 @@ exports.user = user;
 function isAdmin(req, reply) {
     return __awaiter(this, void 0, void 0, function* () {
         const user = req.user;
-        reply.send({ isAdmin: (user === null || user === void 0 ? void 0 : user.id) && req.hasRole(roles.admin) });
+        reply.send({ isAdmin: (user === null || user === void 0 ? void 0 : user.getId()) && req.hasRole(roles.admin) });
     });
 }
 exports.isAdmin = isAdmin;

package/dist/lib/api/users/controller/user.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.js","sourceRoot":"","sources":["../../../../../lib/api/users/controller/user.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA,SAAsB,IAAI,CAAC,GAAmB,EAAE,KAAmB;;QACjE,MAAM,IAAI,GAAkC,GAAG,CAAC,IAAI,CAAA;QACpD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,iCAAM,IAAI,KAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAG,CAAC,CAAC,EAAE,CAAC,CAAA;IACzD,CAAC;CAAA;AAHD,oBAGC;AAED,SAAsB,OAAO,CAAC,GAAmB,EAAE,KAAmB;;QACpE,MAAM,IAAI,GAAkC,GAAG,CAAC,IAAI,CAAA;QACpD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,EAAE,KAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC/D,CAAC;CAAA;AAHD,0BAGC"}
+{"version":3,"file":"user.js","sourceRoot":"","sources":["../../../../../lib/api/users/controller/user.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA,SAAsB,IAAI,CAAC,GAAmB,EAAE,KAAmB;;QACjE,MAAM,IAAI,GAAkC,GAAG,CAAC,IAAI,CAAA;QACpD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,iCAAM,IAAI,KAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAG,CAAC,CAAC,EAAE,CAAC,CAAA;IACzD,CAAC;CAAA;AAHD,oBAGC;AAED,SAAsB,OAAO,CAAC,GAAmB,EAAE,KAAmB;;QACpE,MAAM,IAAI,GAAkC,GAAG,CAAC,IAAI,CAAA;QACpD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,EAAE,KAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACpE,CAAC;CAAA;AAHD,0BAGC"}

package/dist/lib/hooks/onRequest.js

@@ -11,28 +11,44 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 const common_1 = require("../util/common");
 module.exports = (req, reply) => __awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b, _c, _d, _e;
+    var _a, _b, _c, _d, _e, _f;
     log.i && (req.startedAt = new Date());
     req.data = () => (0, common_1.getData)(req);
     req.parameters = () => (0, common_1.getParams)(req);
     req.roles = () => (req.user ? req.user.roles : [roles.public]);
     req.hasRole = (r) => (req.user ? req.user.roles : [roles.public]).some((role) => role === (r === null || r === void 0 ? void 0 : r.code));
     const auth = ((_a = req.headers) === null || _a === void 0 ? void 0 : _a.authorization) || '';
-    const [prefix, token] = auth.split(' ');
+    const [prefix, bearerToken] = auth.split(' ');
     const isRoutePublic = (req.routeConfig.requiredRoles || []).some((role) => role.code === roles.public.code);
-    if (prefix === 'Bearer' && token != null) {
+    if (prefix === 'Bearer' && bearerToken != null) {
         let user = {};
+        let token = {};
+        console.log('bearer ' + bearerToken);
         try {
-            const tokenData = reply.server.jwt.verify(token);
+            const tokenData = reply.server.jwt.verify(bearerToken);
             user = yield req.server['userManager'].retrieveUserByExternalId(tokenData === null || tokenData === void 0 ? void 0 : tokenData.sub);
+            console.log(user);
             if (!user) {
+                token = yield req.server['tokenManager'].retrieveTokenByExternalId(tokenData === null || tokenData === void 0 ? void 0 : tokenData.sub);
+                console.log(token);
+            }
+            if (!user && !token) {
                 return reply.status(404).send({ statusCode: 404, code: 'USER_NOT_FOUND', message: 'User not found' });
             }
-            const isValid = yield req.server['userManager'].isValidUser(user);
-            if (!isValid) {
-                return reply.status(404).send({ statusCode: 404, code: 'USER_NOT_VALID', message: 'User not valid' });
+            if (user) {
+                const isValid = yield req.server['userManager'].isValidUser(user);
+                if (!isValid) {
+                    return reply.status(404).send({ statusCode: 404, code: 'USER_NOT_VALID', message: 'User not valid' });
+                }
+                req.user = user;
+            }
+            if (token) {
+                const isValid = yield req.server['tokenManager'].isValidToken(token);
+                if (!isValid) {
+                    return reply.status(404).send({ statusCode: 404, code: 'TOKEN_NOT_VALID', message: 'Token not valid' });
+                }
+                req.token = token;
             }
-            req.user = user;
         }
         catch (error) {
             if (!isRoutePublic) {
@@ -42,8 +58,10 @@ module.exports = (req, reply) => __awaiter(void 0, void 0, void 0, function* ()
     }
     if (((_b = req.routeConfig.requiredRoles) === null || _b === void 0 ? void 0 : _b.length) > 0) {
         const { method = '', url = '', requiredRoles } = req.routeConfig;
-        const userRoles = ((_d = (_c = req.user) === null || _c === void 0 ? void 0 : _c.roles) === null || _d === void 0 ? void 0 : _d.map((code) => code)) || [((_e = roles.public) === null || _e === void 0 ? void 0 : _e.code) || 'public'];
-        const resolvedRoles = userRoles.length > 0 ? requiredRoles.filter((r) => userRoles.includes(r.code)) : [];
+        const authRoles = ((_e = (((_c = req.user) === null || _c === void 0 ? void 0 : _c.roles) || ((_d = req.token) === null || _d === void 0 ? void 0 : _d.roles))) === null || _e === void 0 ? void 0 : _e.map((code) => code)) || [
+            ((_f = roles.public) === null || _f === void 0 ? void 0 : _f.code) || 'public'
+        ];
+        const resolvedRoles = authRoles.length > 0 ? requiredRoles.filter((r) => authRoles.includes(r.code)) : [];
         if (!resolvedRoles.length) {
             log.w && log.warn(`Not allowed to call ${method.toUpperCase()} ${url}`);
             return reply

package/dist/lib/hooks/onRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"onRequest.js","sourceRoot":"","sources":["../../../lib/hooks/onRequest.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,2CAAmD;AAGnD,MAAM,CAAC,OAAO,GAAG,CAAO,GAAG,EAAE,KAAK,EAAE,EAAE;;IAEpC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,CAAA;IACrC,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC,IAAA,gBAAO,EAAC,GAAG,CAAC,CAAA;IAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,IAAA,kBAAS,EAAC,GAAG,CAAC,CAAA;IACrC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9D,GAAG,CAAC,OAAO,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAK,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,CAAA,CAAC,CAAA;IAGxG,MAAM,IAAI,GAAG,CAAA,MAAA,GAAG,CAAC,OAAO,0CAAE,aAAa,KAAI,EAAE,CAAA;IAC7C,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEjH,IAAI,MAAM,KAAK,QAAQ,IAAI,KAAK,IAAI,IAAI,EAAE;QACxC,IAAI,IAAI,GAAsB,EAAuB,CAAA;QACrD,IAAI;YACF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAChD,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,GAAG,CAAC,CAAA;YAC/E,IAAI,CAAC,IAAI,EAAE;gBACT,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;aACtG;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;YACjE,IAAI,CAAC,OAAO,EAAE;gBACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;aACtG;YAGD,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;SAChB;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,CAAC,aAAa,EAAE;gBAClB,MAAM,KAAK,CAAA;aACZ;SACF;KACF;IAED,IAAI,CAAA,MAAA,GAAG,CAAC,WAAW,CAAC,aAAa,0CAAE,MAAM,IAAG,CAAC,EAAE;QAC7C,MAAM,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,WAAW,CAAA;QAChE,MAAM,SAAS,GAAa,CAAA,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAK,0CAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAI,CAAC,CAAA,MAAA,KAAK,CAAC,MAAM,0CAAE,IAAI,KAAI,QAAQ,CAAC,CAAA;QACpG,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEzG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;YACzB,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;YACvE,OAAO,KAAK;iBACT,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;SAClG;KACF;AACH,CAAC,CAAA,CAAA"}
+{"version":3,"file":"onRequest.js","sourceRoot":"","sources":["../../../lib/hooks/onRequest.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,2CAAmD;AAGnD,MAAM,CAAC,OAAO,GAAG,CAAO,GAAG,EAAE,KAAK,EAAE,EAAE;;IAEpC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,CAAA;IACrC,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC,IAAA,gBAAO,EAAC,GAAG,CAAC,CAAA;IAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,IAAA,kBAAS,EAAC,GAAG,CAAC,CAAA;IACrC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9D,GAAG,CAAC,OAAO,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAK,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,CAAA,CAAC,CAAA;IAGxG,MAAM,IAAI,GAAG,CAAA,MAAA,GAAG,CAAC,OAAO,0CAAE,aAAa,KAAI,EAAE,CAAA;IAC7C,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7C,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEjH,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI,EAAE;QAC9C,IAAI,IAAI,GAAsB,EAAuB,CAAA;QACrD,IAAI,KAAK,GAAuB,EAAwB,CAAA;QAExD,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,WAAW,CAAC,CAAA;QAEpC,IAAI;YACF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YACtD,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,GAAG,CAAC,CAAA;YAC/E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACjB,IAAI,CAAC,IAAI,EAAE;gBACT,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,yBAAyB,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,GAAG,CAAC,CAAA;gBAClF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;aACnB;YACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;gBACnB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;aACtG;YACD,IAAI,IAAI,EAAE;gBACR,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;gBACjE,IAAI,CAAC,OAAO,EAAE;oBACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;iBACtG;gBAED,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;aAChB;YACD,IAAI,KAAK,EAAE;gBACT,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;gBACpE,IAAI,CAAC,OAAO,EAAE;oBACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAA;iBACxG;gBAED,GAAG,CAAC,KAAK,GAAG,KAAK,CAAA;aAClB;SACF;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,CAAC,aAAa,EAAE;gBAClB,MAAM,KAAK,CAAA;aACZ;SACF;KACF;IAED,IAAI,CAAA,MAAA,GAAG,CAAC,WAAW,CAAC,aAAa,0CAAE,MAAM,IAAG,CAAC,EAAE;QAC7C,MAAM,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,WAAW,CAAA;QAChE,MAAM,SAAS,GAAa,CAAC,MAAA,CAAC,CAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAK,MAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAA,CAAC,0CAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAc,KAAI;YACtG,CAAA,MAAA,KAAK,CAAC,MAAM,0CAAE,IAAI,KAAI,QAAQ;SAC/B,CAAA;QACD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEzG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;YACzB,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;YACvE,OAAO,KAAK;iBACT,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;SAClG;KACF;AACH,CAAC,CAAA,CAAA"}

package/dist/lib/middleware/isAdmin.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.preHandler = void 0;
 function preHandler(req, res, done) {
     try {
-        if (req.user && req.user.id && req.hasRole(roles.admin)) {
+        if (req.user && req.user.getId() && req.hasRole(roles.admin)) {
             return done();
         }
         throw new Error('User without this privilege');

package/dist/lib/middleware/isAdmin.js.map

@@ -1 +1 @@
-{"version":3,"file":"isAdmin.js","sourceRoot":"","sources":["../../../lib/middleware/isAdmin.ts"],"names":[],"mappings":";;;AAEA,SAAgB,UAAU,CAAC,GAAmB,EAAE,GAAiB,EAAE,IAAS;IAC1E,IAAI;QACF,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACvD,OAAO,IAAI,EAAE,CAAA;SACd;QAED,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;KAC/C;IAAC,OAAO,GAAG,EAAE;QACZ,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAA;QAC1D,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;KACxB;AACH,CAAC;AAXD,gCAWC"}
+{"version":3,"file":"isAdmin.js","sourceRoot":"","sources":["../../../lib/middleware/isAdmin.ts"],"names":[],"mappings":";;;AAEA,SAAgB,UAAU,CAAC,GAAmB,EAAE,GAAiB,EAAE,IAAS;IAC1E,IAAI;QACF,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAC5D,OAAO,IAAI,EAAE,CAAA;SACd;QAED,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;KAC/C;IAAC,OAAO,GAAG,EAAE;QACZ,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAA;QAC1D,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;KACxB;AACH,CAAC;AAXD,gCAWC"}

package/dist/lib/middleware/isAuthenticated.js

@@ -4,7 +4,7 @@ exports.preHandler = void 0;
 function preHandler(req, res, done) {
     var _a;
     try {
-        if (!!((_a = req.user) === null || _a === void 0 ? void 0 : _a.id)) {
+        if (!!((_a = req.user) === null || _a === void 0 ? void 0 : _a.getId())) {
             return done();
         }
         throw new Error('Unauthorized');

package/dist/lib/middleware/isAuthenticated.js.map

@@ -1 +1 @@
-{"version":3,"file":"isAuthenticated.js","sourceRoot":"","sources":["../../../lib/middleware/isAuthenticated.ts"],"names":[],"mappings":";;;AAEA,SAAgB,UAAU,CAAC,GAAmB,EAAE,GAAiB,EAAE,IAAS;;IAC1E,IAAI;QACF,IAAI,CAAC,CAAC,CAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,EAAE,CAAA,EAAE;YAClB,OAAO,IAAI,EAAE,CAAA;SACd;QAED,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;KAChC;IAAC,OAAO,GAAG,EAAE;QACZ,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAA;QAC1D,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;KAC/B;AACH,CAAC;AAXD,gCAWC"}
+{"version":3,"file":"isAuthenticated.js","sourceRoot":"","sources":["../../../lib/middleware/isAuthenticated.ts"],"names":[],"mappings":";;;AAEA,SAAgB,UAAU,CAAC,GAAmB,EAAE,GAAiB,EAAE,IAAS;;IAC1E,IAAI;QACF,IAAI,CAAC,CAAC,CAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAK,EAAE,CAAA,EAAE;YACvB,OAAO,IAAI,EAAE,CAAA;SACd;QAED,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;KAChC;IAAC,OAAO,GAAG,EAAE;QACZ,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAA;QAC1D,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;KAC/B;AACH,CAAC;AAXD,gCAWC"}

package/dist/lib/schemas/auth.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=auth.js.map

package/dist/lib/schemas/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../lib/schemas/auth.ts"],"names":[],"mappings":""}

package/dist/lib/schemas/common.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.blockBodySchema = exports.getQueryParamsSchema = void 0;
+exports.getQueryParamsSchema = {
+    $id: 'getQueryParamsSchema',
+    type: 'object',
+    nullable: true,
+    properties: {
+        page: {
+            type: 'number',
+            description: 'Page **number** (default 1)'
+        },
+        pageSize: {
+            type: 'number',
+            description: 'Page **size** (default 25)'
+        },
+        sort: {
+            type: 'array',
+            description: 'Sorting **order** (default ascending).<br/>\
+        Otherwise, use the postfix `:desc` or `:asc` (like `&sort=myfield:desc`)',
+            items: { type: 'string' }
+        }
+    }
+};
+exports.blockBodySchema = {
+    $id: 'blockBodySchema',
+    type: 'object',
+    nullable: true,
+    properties: {
+        reason: { type: 'string' }
+    }
+};
+//# sourceMappingURL=common.js.map

package/dist/lib/schemas/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../lib/schemas/common.ts"],"names":[],"mappings":";;;AAAa,QAAA,oBAAoB,GAAG;IAClC,GAAG,EAAE,sBAAsB;IAC3B,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE;QACV,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,6BAA6B;SAC3C;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,4BAA4B;SAC1C;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,OAAO;YACb,WAAW,EACT;iFACyE;YAC3E,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;KACF;CACF,CAAA;AAEY,QAAA,eAAe,GAAG;IAC7B,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE;QACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC3B;CACF,CAAA"}

package/dist/lib/schemas/token.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tokenSchema = exports.tokenBodySchema = exports.tokenParamsSchema = void 0;
+exports.tokenParamsSchema = {
+    $id: 'tokenParamsSchema',
+    type: 'object',
+    nullable: true,
+    properties: {
+        id: {
+            type: 'string',
+            description: 'Token id'
+        }
+    }
+};
+exports.tokenBodySchema = {
+    $id: 'tokenBodySchema',
+    type: 'object',
+    nullable: true,
+    properties: {
+        name: { type: 'string' },
+        description: { type: 'string' },
+        requiredRoles: { type: 'array', items: { type: 'string' } }
+    }
+};
+exports.tokenSchema = {
+    $id: 'tokenSchema',
+    type: 'object',
+    nullable: true,
+    properties: {
+        id: { type: 'string' },
+        _id: { type: 'string' },
+        externalId: { type: 'string' },
+        name: { type: 'string' },
+        description: { type: 'string' },
+        token: { type: 'string' },
+        roles: { type: 'array', items: { type: 'string' } }
+    }
+};
+//# sourceMappingURL=token.js.map

package/dist/lib/schemas/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../lib/schemas/token.ts"],"names":[],"mappings":";;;AAAa,QAAA,iBAAiB,GAAG;IAC/B,GAAG,EAAE,mBAAmB;IACxB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE;QACV,EAAE,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,UAAU;SACxB;KACF;CACF,CAAA;AAEY,QAAA,eAAe,GAAG;IAC7B,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC5D;CACF,CAAA;AAEY,QAAA,WAAW,GAAG;IACzB,GAAG,EAAE,aAAa;IAClB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACtB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACvB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KACpD;CACF,CAAA"}

package/index.d.ts

@@ -3,6 +3,7 @@ export {
   FastifyReply,
   FastifyRequest,
   AuthenticatedUser,
+  AuthenticatedToken,
   Role,
   Data,
   Roles,

package/index.ts

@@ -27,7 +27,7 @@ import fastifyApollo, { fastifyApolloDrainPlugin } from '@as-integrations/fastif
 import { myContextFunction, MyContext } from './lib/apollo/context'
 import resolvers from './lib/apollo/resolvers'
 import typeDefs from './lib/apollo/type-defs'
-import { UserManagement } from './types/global'
+import { UserManagement, TokenManagement } from './types/global'
 
 global.log = logger
 
@@ -168,6 +168,9 @@ const start = async (decorators) => {
   // defaults
   decorators = {
     userManager: {
+      isValidUser(data: any) {
+        throw Error('Not implemented')
+      },
       createUser(data: any) {
         throw Error('Not implemented')
       },
@@ -183,6 +186,15 @@ const start = async (decorators) => {
       retrieveUserByEmail(email: string) {
         throw Error('Not implemented')
       },
+      retrieveUserByConfirmationToken(code: string) {
+        throw Error('Not implemented')
+      },
+      retrieveUserByResetPasswordToken(code: string) {
+        throw Error('Not implemented')
+      },
+      retrieveUserByUsername(username: string) {
+        throw Error('Not implemented')
+      },
       retrieveUserByExternalId(externalId: string) {
         throw Error('Not implemented')
       },
@@ -201,16 +213,54 @@ const start = async (decorators) => {
       resetPassword(user: any, password: string) {
         throw Error('Not implemented')
       },
-      enableUserById(id: string) {
+      blockUserById(id: string, reason: string) {
         throw Error('Not implemented')
       },
-      disableUserById(id: string) {
+      unblockUserById(data: any) {
         throw Error('Not implemented')
       },
-      isValidUser(data: any) {
+      countQuery(data: any) {
+        throw Error('Not implemented')
+      },
+      findQuery(data: any) {
         throw Error('Not implemented')
       }
     } as UserManagement,
+    tokenManager: {
+      isValidToken(data: any) {
+        throw Error('Not implemented')
+      },
+      createToken(data: any) {
+        throw Error('Not implemented')
+      },
+      resetExternalId(id: string) {
+        throw Error('Not implemented')
+      },
+      updateTokenById(id: string, token: any) {
+        throw Error('Not implemented')
+      },
+      retrieveTokenById(id: string) {
+        throw Error('Not implemented')
+      },
+      retrieveTokenByExternalId(id: string) {
+        throw Error('Not implemented')
+      },
+      blockTokenById(id: string, reason: string) {
+        throw Error('Not implemented')
+      },
+      unblockTokenById(id: string) {
+        throw Error('Not implemented')
+      },
+      countQuery(data: any) {
+        throw Error('Not implemented')
+      },
+      findQuery(data: any) {
+        throw Error('Not implemented')
+      },
+      removeTokenById(id: string) {
+        throw Error('Not implemented')
+      }
+    } as TokenManagement,
     ...decorators
   }
 
@@ -243,13 +293,15 @@ export {
   FastifyReply,
   FastifyRequest,
   AuthenticatedUser,
+  AuthenticatedToken,
   Role,
   Data,
   Roles,
   Route,
   RouteConfig,
   ConfiguredRoute,
-  UserManagement
+  UserManagement,
+  TokenManagement
 } from './types/global'
 
 /**

package/lib/api/auth/controller/auth.ts

@@ -46,7 +46,7 @@ export async function unregister(req: FastifyRequest, reply: FastifyReply) {
     return reply.status(403).send(Error('User blocked'))
   }
 
-  user = await req.server['userManager'].disableUserById(user?.id)
+  user = await req.server['userManager'].disableUserById(user.getId())
   isValid = await req.server['userManager'].isValidUser(user)
 
   if (!isValid) {
@@ -56,6 +56,21 @@ export async function unregister(req: FastifyRequest, reply: FastifyReply) {
   return { ok: true }
 }
 
+export async function validatePassword(req: FastifyRequest, reply: FastifyReply) {
+  const { password } = req.data()
+
+  if (!password) {
+    return reply.status(400).send(Error('Password cannot be null'))
+  }
+
+  const match = regExp.password.test(password)
+  if (!match) {
+    return reply.status(400).send(Error('Password is not valid'))
+  }
+
+  return { ok: match }
+}
+
 export async function changePassword(req: FastifyRequest, reply: FastifyReply) {
   const { email, oldPassword, newPassword1, newPassword2 } = req.data()
 
@@ -90,16 +105,20 @@ export async function forgotPassword(req: FastifyRequest, reply: FastifyReply) {
     return reply.status(400).send(Error('Missing a valid user identifier'))
   }
 
-  let user = await repository.users.findOne({
-    where: [{ username }, { email }]
-  })
+  let user = null as any
+  if (email) {
+    user = await req.server['userManager'].retrieveUserByEmail(email)
+  } else if (username) {
+    user = await req.server['userManager'].retrieveUserByUsername(username)
+  }
+
   let isValid = await req.server['userManager'].isValidUser(user)
 
   if (!isValid) {
     return reply.status(403).send(Error('Wrong credentials'))
   }
 
-  if (user.blocked) {
+  if (user?.blocked) {
     return reply.status(403).send(Error('User blocked'))
   }
 
@@ -116,9 +135,7 @@ export async function confirmEmail(req: FastifyRequest, reply: FastifyReply) {
     return reply.status(400).send(Error('Missing the confirm email token'))
   }
 
-  let user = await repository.users.findOne({
-    where: { confirmationToken: code }
-  })
+  let user = await req.server['userManager'].retrieveUserByConfirmationToken(code)
   let isValid = await req.server['userManager'].isValidUser(user)
 
   if (!isValid) {
@@ -146,9 +163,7 @@ export async function resetPassword(req: FastifyRequest, reply: FastifyReply) {
     return reply.status(400).send(Error('Repeated new password not match'))
   }
 
-  let user = await repository.users.findOne({
-    where: { resetPasswordToken: code }
-  })
+  let user = await req.server['userManager'].retrieveUserByResetPasswordToken(code)
   let isValid = await req.server['userManager'].isValidUser(user)
 
   if (!isValid) {
@@ -181,6 +196,10 @@ export async function login(req: FastifyRequest, reply: FastifyReply) {
     return reply.status(403).send(Error('Wrong credentials'))
   }
 
+  if (!(user.confirmed === true)) {
+    return reply.status(403).send(Error('User email unconfirmed'))
+  }
+
   if (user.blocked) {
     return reply.status(403).send(Error('User blocked'))
   }
@@ -197,11 +216,11 @@ export async function login(req: FastifyRequest, reply: FastifyReply) {
 
 export async function invalidateTokens(req: FastifyRequest, reply: FastifyReply) {
   let isValid = await req.server['userManager'].isValidUser(req.user)
-  if (!isValid) {
+  if (!req.user || !isValid) {
     return reply.status(403).send(Error('User not linked'))
   }
 
-  const user = await req.server['userManager'].resetExternalId(req.user?.id)
+  const user = await req.server['userManager'].resetExternalId(req.user.getId())
   isValid = await req.server['userManager'].isValidUser(user)
   return { ok: isValid }
 }
@@ -215,7 +234,7 @@ export async function block(req: FastifyRequest, reply: FastifyReply) {
   const { reason } = req.data()
 
   const user = await req.server['userManager'].blockUserById(userId, reason)
-  return { ok: !!user?.id }
+  return { ok: !!user.getId() }
 }
 
 export async function unblock(req: FastifyRequest, reply: FastifyReply) {
@@ -227,5 +246,5 @@ export async function unblock(req: FastifyRequest, reply: FastifyReply) {
 
   const { id: userId } = req.parameters()
   const user = await req.server['userManager'].unblockUserById(userId)
-  return { ok: !!user?.id }
+  return { ok: !!user.getId() }
 }