@volcanicminds/backend 0.2.39 → 0.2.41

package/dist/lib/hooks/onRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"onRequest.js","sourceRoot":"","sources":["../../../lib/hooks/onRequest.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,2CAAmD;AAGnD,MAAM,CAAC,OAAO,GAAG,CAAO,GAAG,EAAE,KAAK,EAAE,EAAE;;IAEpC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,CAAA;IACrC,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC,IAAA,gBAAO,EAAC,GAAG,CAAC,CAAA;IAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,IAAA,kBAAS,EAAC,GAAG,CAAC,CAAA;IACrC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9D,GAAG,CAAC,OAAO,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAK,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,CAAA,CAAC,CAAA;IAGxG,MAAM,IAAI,GAAG,CAAA,MAAA,GAAG,CAAC,OAAO,0CAAE,aAAa,KAAI,EAAE,CAAA;IAC7C,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEjH,IAAI,MAAM,KAAK,QAAQ,IAAI,KAAK,IAAI,IAAI,EAAE;QACxC,IAAI,IAAI,GAAsB,EAAuB,CAAA;QACrD,IAAI;YACF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAChD,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,GAAG,CAAC,CAAA;YAC/E,IAAI,CAAC,IAAI,EAAE;gBACT,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;aACtG;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;YACjE,IAAI,CAAC,OAAO,EAAE;gBACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;aACtG;YAGD,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;SAChB;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,CAAC,aAAa,EAAE;gBAClB,MAAM,KAAK,CAAA;aACZ;SACF;KACF;IAED,IAAI,CAAA,MAAA,GAAG,CAAC,WAAW,CAAC,aAAa,0CAAE,MAAM,IAAG,CAAC,EAAE;QAC7C,MAAM,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,WAAW,CAAA;QAChE,MAAM,SAAS,GAAa,CAAA,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAK,0CAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAI,CAAC,CAAA,MAAA,KAAK,CAAC,MAAM,0CAAE,IAAI,KAAI,QAAQ,CAAC,CAAA;QACpG,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEzG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;YACzB,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;YACvE,OAAO,KAAK;iBACT,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;SAClG;KACF;AACH,CAAC,CAAA,CAAA"}
+{"version":3,"file":"onRequest.js","sourceRoot":"","sources":["../../../lib/hooks/onRequest.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,2CAAmD;AAGnD,MAAM,CAAC,OAAO,GAAG,CAAO,GAAG,EAAE,KAAK,EAAE,EAAE;;IAEpC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,CAAA;IACrC,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC,IAAA,gBAAO,EAAC,GAAG,CAAC,CAAA;IAC7B,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,IAAA,kBAAS,EAAC,GAAG,CAAC,CAAA;IACrC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9D,GAAG,CAAC,OAAO,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAK,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,CAAA,CAAC,CAAA;IAGxG,MAAM,IAAI,GAAG,CAAA,MAAA,GAAG,CAAC,OAAO,0CAAE,aAAa,KAAI,EAAE,CAAA;IAC7C,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7C,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEjH,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,IAAI,IAAI,EAAE;QAC9C,IAAI,IAAI,GAA6B,IAAI,CAAA;QACzC,IAAI,KAAK,GAA8B,IAAI,CAAA;QAE3C,IAAI;YACF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YACtD,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,GAAG,CAAC,CAAA;YAC/E,IAAI,CAAC,IAAI,EAAE;gBACT,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,yBAAyB,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,GAAG,CAAC,CAAA;aACnF;YACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE;gBACnB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;aACtG;YACD,IAAI,IAAI,EAAE;gBACR,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;gBACjE,IAAI,CAAC,OAAO,EAAE;oBACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;iBACtG;gBAED,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;aAChB;YACD,IAAI,KAAK,EAAE;gBACT,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;gBACpE,IAAI,CAAC,OAAO,EAAE;oBACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAA;iBACxG;gBAED,GAAG,CAAC,KAAK,GAAG,KAAK,CAAA;aAClB;SACF;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,CAAC,aAAa,EAAE;gBAClB,MAAM,KAAK,CAAA;aACZ;SACF;KACF;IAED,IAAI,CAAA,MAAA,GAAG,CAAC,WAAW,CAAC,aAAa,0CAAE,MAAM,IAAG,CAAC,EAAE;QAC7C,MAAM,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,WAAW,CAAA;QAChE,MAAM,SAAS,GAAa,CAAC,MAAA,CAAC,CAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAK,MAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAA,CAAC,0CAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAc,KAAI;YACtG,CAAA,MAAA,KAAK,CAAC,MAAM,0CAAE,IAAI,KAAI,QAAQ;SAC/B,CAAA;QACD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEzG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;YACzB,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,WAAW,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;YACvE,OAAO,KAAK;iBACT,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;SAClG;KACF;AACH,CAAC,CAAA,CAAA"}

package/dist/lib/schemas/auth.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=auth.js.map

package/dist/lib/schemas/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../lib/schemas/auth.ts"],"names":[],"mappings":""}

package/dist/lib/schemas/common.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.blockBodySchema = exports.getQueryParamsSchema = void 0;
+exports.getQueryParamsSchema = {
+    $id: 'getQueryParamsSchema',
+    type: 'object',
+    nullable: true,
+    properties: {
+        page: {
+            type: 'number',
+            description: 'Page **number** (default 1)'
+        },
+        pageSize: {
+            type: 'number',
+            description: 'Page **size** (default 25)'
+        },
+        sort: {
+            type: 'array',
+            description: 'Sorting **order** (default ascending).<br/>\
+        Otherwise, use the postfix `:desc` or `:asc` (like `&sort=myfield:desc`)',
+            items: { type: 'string' }
+        }
+    }
+};
+exports.blockBodySchema = {
+    $id: 'blockBodySchema',
+    type: 'object',
+    nullable: true,
+    properties: {
+        reason: { type: 'string' }
+    }
+};
+//# sourceMappingURL=common.js.map

package/dist/lib/schemas/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../lib/schemas/common.ts"],"names":[],"mappings":";;;AAAa,QAAA,oBAAoB,GAAG;IAClC,GAAG,EAAE,sBAAsB;IAC3B,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE;QACV,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,6BAA6B;SAC3C;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,4BAA4B;SAC1C;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,OAAO;YACb,WAAW,EACT;iFACyE;YAC3E,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;KACF;CACF,CAAA;AAEY,QAAA,eAAe,GAAG;IAC7B,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE;QACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC3B;CACF,CAAA"}

package/dist/lib/schemas/token.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tokenSchema = exports.tokenBodySchema = exports.tokenParamsSchema = void 0;
+exports.tokenParamsSchema = {
+    $id: 'tokenParamsSchema',
+    type: 'object',
+    nullable: true,
+    properties: {
+        id: {
+            type: 'string',
+            description: 'Token id'
+        }
+    }
+};
+exports.tokenBodySchema = {
+    $id: 'tokenBodySchema',
+    type: 'object',
+    nullable: true,
+    properties: {
+        name: { type: 'string' },
+        description: { type: 'string' },
+        requiredRoles: { type: 'array', items: { type: 'string' } }
+    }
+};
+exports.tokenSchema = {
+    $id: 'tokenSchema',
+    type: 'object',
+    nullable: true,
+    properties: {
+        id: { type: 'string' },
+        _id: { type: 'string' },
+        externalId: { type: 'string' },
+        name: { type: 'string' },
+        description: { type: 'string' },
+        token: { type: 'string' },
+        roles: { type: 'array', items: { type: 'string' } }
+    }
+};
+//# sourceMappingURL=token.js.map

package/dist/lib/schemas/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../lib/schemas/token.ts"],"names":[],"mappings":";;;AAAa,QAAA,iBAAiB,GAAG;IAC/B,GAAG,EAAE,mBAAmB;IACxB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE;QACV,EAAE,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,UAAU;SACxB;KACF;CACF,CAAA;AAEY,QAAA,eAAe,GAAG;IAC7B,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KAC5D;CACF,CAAA;AAEY,QAAA,WAAW,GAAG;IACzB,GAAG,EAAE,aAAa;IAClB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACtB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACvB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KACpD;CACF,CAAA"}

package/index.d.ts

@@ -3,6 +3,7 @@ export {
   FastifyReply,
   FastifyRequest,
   AuthenticatedUser,
+  AuthenticatedToken,
   Role,
   Data,
   Roles,

package/index.ts

@@ -27,7 +27,7 @@ import fastifyApollo, { fastifyApolloDrainPlugin } from '@as-integrations/fastif
 import { myContextFunction, MyContext } from './lib/apollo/context'
 import resolvers from './lib/apollo/resolvers'
 import typeDefs from './lib/apollo/type-defs'
-import { UserManagement } from './types/global'
+import { UserManagement, TokenManagement } from './types/global'
 
 global.log = logger
 
@@ -168,6 +168,9 @@ const start = async (decorators) => {
   // defaults
   decorators = {
     userManager: {
+      isValidUser(data: any) {
+        throw Error('Not implemented')
+      },
       createUser(data: any) {
         throw Error('Not implemented')
       },
@@ -210,16 +213,54 @@ const start = async (decorators) => {
       resetPassword(user: any, password: string) {
         throw Error('Not implemented')
       },
-      enableUserById(id: string) {
+      blockUserById(id: string, reason: string) {
         throw Error('Not implemented')
       },
-      disableUserById(id: string) {
+      unblockUserById(data: any) {
         throw Error('Not implemented')
       },
-      isValidUser(data: any) {
+      countQuery(data: any) {
+        throw Error('Not implemented')
+      },
+      findQuery(data: any) {
         throw Error('Not implemented')
       }
     } as UserManagement,
+    tokenManager: {
+      isValidToken(data: any) {
+        throw Error('Not implemented')
+      },
+      createToken(data: any) {
+        throw Error('Not implemented')
+      },
+      resetExternalId(id: string) {
+        throw Error('Not implemented')
+      },
+      updateTokenById(id: string, token: any) {
+        throw Error('Not implemented')
+      },
+      retrieveTokenById(id: string) {
+        throw Error('Not implemented')
+      },
+      retrieveTokenByExternalId(id: string) {
+        throw Error('Not implemented')
+      },
+      blockTokenById(id: string, reason: string) {
+        throw Error('Not implemented')
+      },
+      unblockTokenById(id: string) {
+        throw Error('Not implemented')
+      },
+      countQuery(data: any) {
+        throw Error('Not implemented')
+      },
+      findQuery(data: any) {
+        throw Error('Not implemented')
+      },
+      removeTokenById(id: string) {
+        throw Error('Not implemented')
+      }
+    } as TokenManagement,
     ...decorators
   }
 
@@ -252,13 +293,15 @@ export {
   FastifyReply,
   FastifyRequest,
   AuthenticatedUser,
+  AuthenticatedToken,
   Role,
   Data,
   Roles,
   Route,
   RouteConfig,
   ConfiguredRoute,
-  UserManagement
+  UserManagement,
+  TokenManagement
 } from './types/global'
 
 /**

package/lib/api/auth/controller/auth.ts

@@ -56,6 +56,21 @@ export async function unregister(req: FastifyRequest, reply: FastifyReply) {
   return { ok: true }
 }
 
+export async function validatePassword(req: FastifyRequest, reply: FastifyReply) {
+  const { password } = req.data()
+
+  if (!password) {
+    return reply.status(400).send(Error('Password cannot be null'))
+  }
+
+  const match = regExp.password.test(password)
+  if (!match) {
+    return reply.status(400).send(Error('Password is not valid'))
+  }
+
+  return { ok: match }
+}
+
 export async function changePassword(req: FastifyRequest, reply: FastifyReply) {
   const { email, oldPassword, newPassword1, newPassword2 } = req.data()
 

package/lib/api/auth/routes.ts

@@ -72,6 +72,32 @@ module.exports = {
         }
       }
     },
+    {
+      method: 'POST',
+      path: '/validate-password',
+      roles: [],
+      handler: 'auth.validatePassword',
+      middlewares: [],
+      config: {
+        title: 'Validate password',
+        description: 'Validate password if valid and usable',
+        body: {
+          type: 'object',
+          properties: {
+            password: { type: 'string' }
+          }
+        },
+        response: {
+          200: {
+            description: 'Default response',
+            type: 'object',
+            properties: {
+              ok: { type: 'boolean' }
+            }
+          }
+        }
+      }
+    },
     {
       method: 'POST',
       path: '/change-password',
@@ -253,6 +279,7 @@ module.exports = {
             }
           }
         },
+        body: { $ref: 'blockBodySchema' },
         response: {
           200: {
             description: 'Default response',

package/lib/api/token/controller/token.ts

@@ -0,0 +1,104 @@
+import { FastifyReply, FastifyRequest } from 'fastify'
+
+export async function count(req: FastifyRequest, reply: FastifyReply) {
+  return await req.server['tokenManager'].countQuery(req.data())
+}
+
+export async function find(req: FastifyRequest, reply: FastifyReply) {
+  const { headers, records } = await req.server['tokenManager'].findQuery(req.data())
+  return reply.type('application/json').headers(headers).send(records)
+}
+
+export async function findOne(req: FastifyRequest, reply: FastifyReply) {
+  const { id } = req.parameters()
+
+  const token = await req.server['tokenManager'].retrieveTokenById(id)
+  return token || reply.status(404).send()
+}
+
+export async function create(req: FastifyRequest, reply: FastifyReply) {
+  const data = req.data()
+
+  if (!data.name) {
+    return reply.status(404).send(Error('Token name not valid'))
+  }
+
+  // public is the default
+  const publicRole = global.roles?.public?.code || 'public'
+  data.roles = (data.requiredRoles || []).map((r) => global.roles[r]?.code).filter((r) => !!r)
+  if (!data.roles.includes(publicRole)) {
+    data.roles.push(publicRole)
+  }
+
+  let token = await req.server['tokenManager'].createToken(data)
+  if (!token || !token.getId() || !token.externalId) {
+    return reply.status(400).send(Error('Token not registered'))
+  }
+
+  const bearerToken = await reply.jwtSign(
+    { sub: token.externalId },
+    {
+      sign: { expiresIn: undefined }
+    }
+  )
+  if (!bearerToken) {
+    return reply.status(400).send(Error('Token not signed'))
+  }
+
+  token = await req.server['tokenManager'].updateTokenById(token.getId(), { token: bearerToken })
+  return token
+}
+
+export async function remove(req: FastifyRequest, reply: FastifyReply) {
+  const { id } = req.parameters()
+  if (!id) {
+    return reply.status(404).send()
+  }
+
+  let token = await req.server['tokenManager'].retrieveTokenById(id)
+  if (!token) {
+    return reply.status(403).send(Error('Token not found'))
+  }
+
+  token = await req.server['tokenManager'].removeTokenById(id)
+  return { ok: true }
+}
+
+export async function update(req: FastifyRequest, reply: FastifyReply) {
+  const { id } = req.parameters()
+  if (!id) {
+    return reply.status(404).send()
+  }
+
+  const token = await req.server['tokenManager'].retrieveTokenById(id)
+  if (!token || !token.getId()) {
+    return reply.status(404).send()
+  }
+
+  const data = req.data() || {}
+  return req.server['tokenManager'].updateTokenById(token.getId(), data)
+}
+
+export async function block(req: FastifyRequest, reply: FastifyReply) {
+  if (!req.hasRole(roles.admin) && !req.hasRole(roles.backoffice)) {
+    return reply.status(403).send({ statusCode: 403, code: 'ROLE_NOT_ALLOWED', message: 'Not allowed to block a user' })
+  }
+
+  const { id: userId } = req.parameters()
+  const { reason } = req.data()
+
+  const user = await req.server['tokenManager'].blockTokenById(userId, reason)
+  return { ok: !!user.getId() }
+}
+
+export async function unblock(req: FastifyRequest, reply: FastifyReply) {
+  if (!req.hasRole(roles.admin) && !req.hasRole(roles.backoffice)) {
+    return reply
+      .status(403)
+      .send({ statusCode: 403, code: 'ROLE_NOT_ALLOWED', message: 'Not allowed to unblock a user' })
+  }
+
+  const { id: userId } = req.parameters()
+  const user = await req.server['tokenManager'].unblockTokenById(userId)
+  return { ok: !!user.getId() }
+}

package/lib/api/token/routes.ts

@@ -0,0 +1,168 @@
+module.exports = {
+  config: {
+    title: 'Integration token functions',
+    description: 'Integration token functions',
+    controller: 'controller',
+    tags: ['token'],
+    deprecated: false,
+    version: false,
+    enable: true
+  },
+  routes: [
+    {
+      method: 'GET',
+      path: '/',
+      roles: [roles.admin, roles.backoffice],
+      handler: 'token.find',
+      middlewares: [],
+      config: {
+        title: 'Find tokens',
+        description: 'Get tokens list',
+        query: { $ref: 'getQueryParamsSchema' },
+        response: {
+          200: {
+            description: 'Default response',
+            type: 'array',
+            items: { $ref: 'tokenSchema#' }
+          }
+        }
+      }
+    },
+    {
+      method: 'GET',
+      path: '/count',
+      roles: [roles.admin, roles.backoffice],
+      handler: 'token.count',
+      middlewares: [],
+      config: {
+        title: 'Count tokens',
+        description: 'Count tokens',
+        response: {
+          200: {
+            description: 'Default response',
+            type: 'number'
+          }
+        }
+      }
+    },
+    {
+      method: 'GET',
+      path: '/:id',
+      roles: [roles.admin, roles.backoffice],
+      handler: 'token.findOne',
+      middlewares: [],
+      config: {
+        title: 'Find token',
+        description: 'Get token by id',
+        params: { $ref: 'tokenParamsSchema#' },
+        response: {
+          200: {
+            description: 'Default response',
+            $ref: 'tokenSchema#'
+          }
+        }
+      }
+    },
+    {
+      method: 'POST',
+      path: '/',
+      roles: [roles.admin, roles.backoffice],
+      handler: 'token.create',
+      middlewares: ['global.isAuthenticated'],
+      config: {
+        title: 'Create new token',
+        description: 'Create a new token',
+        body: { $ref: 'tokenBodySchema' },
+        response: {
+          200: {
+            description: 'Default response',
+            $ref: 'tokenSchema#'
+          }
+        }
+      }
+    },
+    {
+      method: 'PUT',
+      path: '/:id',
+      roles: [roles.admin, roles.backoffice],
+      handler: 'token.update',
+      middlewares: ['global.isAuthenticated'],
+      config: {
+        title: 'Update existing token',
+        description: 'Update an existing token',
+        params: { $ref: 'tokenParamsSchema#' },
+        body: { $ref: 'tokenBodySchema' },
+        response: {
+          200: {
+            description: 'Default response',
+            $ref: 'tokenSchema#'
+          }
+        }
+      }
+    },
+    {
+      method: 'DELETE',
+      path: '/:id',
+      roles: [roles.admin, roles.backoffice],
+      handler: 'token.remove',
+      middlewares: ['global.isAuthenticated'],
+      config: {
+        title: 'Unregister existing token (actually disables it)',
+        description: 'Unregister an existing token (actually disables it)',
+        params: { $ref: 'tokenParamsSchema#' },
+        response: {
+          200: {
+            description: 'Default response',
+            type: 'object',
+            properties: {
+              ok: { type: 'boolean' }
+            }
+          }
+        }
+      }
+    },
+    {
+      method: 'POST',
+      path: '/block/:id',
+      roles: [roles.admin, roles.backoffice],
+      handler: 'token.block',
+      middlewares: ['global.isAuthenticated'],
+      config: {
+        title: 'Block a token by id',
+        description: 'Block a token by id',
+        params: { $ref: 'tokenParamsSchema#' },
+        body: { $ref: 'blockBodySchema' },
+        response: {
+          200: {
+            description: 'Default response',
+            type: 'object',
+            properties: {
+              ok: { type: 'boolean' }
+            }
+          }
+        }
+      }
+    },
+    {
+      method: 'POST',
+      path: '/unblock/:id',
+      roles: [roles.admin, roles.backoffice],
+      handler: 'token.unblock',
+      middlewares: ['global.isAuthenticated'],
+      config: {
+        title: 'Unblock a token by id',
+        description: 'Unblock a token by id',
+        params: { $ref: 'tokenParamsSchema#' },
+        response: {
+          200: {
+            description: 'Default response',
+            type: 'object',
+            properties: {
+              ok: { type: 'boolean' }
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/lib/hooks/onRequest.ts

@@ -1,5 +1,5 @@
 import { getParams, getData } from '../util/common'
-import { AuthenticatedUser, Role } from '../../types/global'
+import { AuthenticatedUser, AuthenticatedToken, Role } from '../../types/global'
 
 module.exports = async (req, reply) => {
   // request enrichment
@@ -11,24 +11,38 @@ module.exports = async (req, reply) => {
 
   // authorization check
   const auth = req.headers?.authorization || ''
-  const [prefix, token] = auth.split(' ')
+  const [prefix, bearerToken] = auth.split(' ')
   const isRoutePublic = (req.routeConfig.requiredRoles || []).some((role: Role) => role.code === roles.public.code)
 
-  if (prefix === 'Bearer' && token != null) {
-    let user: AuthenticatedUser = {} as AuthenticatedUser
+  if (prefix === 'Bearer' && bearerToken != null) {
+    let user: null | AuthenticatedUser = null
+    let token: null | AuthenticatedToken = null
+
     try {
-      const tokenData = reply.server.jwt.verify(token)
+      const tokenData = reply.server.jwt.verify(bearerToken)
       user = await req.server['userManager'].retrieveUserByExternalId(tokenData?.sub)
       if (!user) {
+        token = await req.server['tokenManager'].retrieveTokenByExternalId(tokenData?.sub)
+      }
+      if (!user && !token) {
         return reply.status(404).send({ statusCode: 404, code: 'USER_NOT_FOUND', message: 'User not found' })
       }
-      const isValid = await req.server['userManager'].isValidUser(user)
-      if (!isValid) {
-        return reply.status(404).send({ statusCode: 404, code: 'USER_NOT_VALID', message: 'User not valid' })
+      if (user) {
+        const isValid = await req.server['userManager'].isValidUser(user)
+        if (!isValid) {
+          return reply.status(404).send({ statusCode: 404, code: 'USER_NOT_VALID', message: 'User not valid' })
+        }
+        // ok, we have the full user here
+        req.user = user
+      }
+      if (token) {
+        const isValid = await req.server['tokenManager'].isValidToken(token)
+        if (!isValid) {
+          return reply.status(404).send({ statusCode: 404, code: 'TOKEN_NOT_VALID', message: 'Token not valid' })
+        }
+        // ok, we have the full user here
+        req.token = token
       }
-
-      // ok, we have the full user here
-      req.user = user
     } catch (error) {
       if (!isRoutePublic) {
         throw error
@@ -38,8 +52,10 @@ module.exports = async (req, reply) => {
 
   if (req.routeConfig.requiredRoles?.length > 0) {
     const { method = '', url = '', requiredRoles } = req.routeConfig
-    const userRoles: string[] = req.user?.roles?.map((code) => code) || [roles.public?.code || 'public']
-    const resolvedRoles = userRoles.length > 0 ? requiredRoles.filter((r) => userRoles.includes(r.code)) : []
+    const authRoles: string[] = ((req.user?.roles || req.token?.roles)?.map((code) => code) as string[]) || [
+      roles.public?.code || 'public'
+    ]
+    const resolvedRoles = authRoles.length > 0 ? requiredRoles.filter((r) => authRoles.includes(r.code)) : []
 
     if (!resolvedRoles.length) {
       log.w && log.warn(`Not allowed to call ${method.toUpperCase()} ${url}`)

package/lib/schemas/common.ts

@@ -0,0 +1,31 @@
+export const getQueryParamsSchema = {
+  $id: 'getQueryParamsSchema',
+  type: 'object',
+  nullable: true,
+  properties: {
+    page: {
+      type: 'number',
+      description: 'Page **number** (default 1)'
+    },
+    pageSize: {
+      type: 'number',
+      description: 'Page **size** (default 25)'
+    },
+    sort: {
+      type: 'array',
+      description:
+        'Sorting **order** (default ascending).<br/>\
+        Otherwise, use the postfix `:desc` or `:asc` (like `&sort=myfield:desc`)',
+      items: { type: 'string' }
+    }
+  }
+}
+
+export const blockBodySchema = {
+  $id: 'blockBodySchema',
+  type: 'object',
+  nullable: true,
+  properties: {
+    reason: { type: 'string' }
+  }
+}