@webda/core 4.0.0-beta.2 → 4.0.0-beta.4

package/lib/models/ident.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ident.model.js","sourceRoot":"","sources":["../../src/models/ident.model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,2BAA2B,EAAiB,MAAM,eAAe,CAAC;AAChH,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAkBtD,0DAA0D;AAC1D,MAAM,OAAO,YAAa,SAAQ,UAAU,CAAC,SAAS;IACpD,qCAAqC;IACrC,YAAY,OAAO,GAAW,eAAe;QAC3C,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACtB,CAAC;CACF;AAED,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB;;;GAGG;AACH,MAAM,OAAO,KAAM,SAAQ,KAAK;IAC9B,4BAA4B;IAC5B,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAU,CAAC;IAC3D,oEAAoE;IACpE,CAAC,2BAA2B,CAAC,GAAG,GAAG,CAAC;IACpC,gEAAgE;IAChE,WAAW,CAAS;IACpB,oBAAoB;IACpB,QAAQ,CAAS;IACjB,YAAY;IACZ,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,KAA6D;QACrE,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,GAAoB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;YAClF,IAAI,CAAC,GAAG,CAAC,KAAY,CAAC,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;IACH,CAAC;IACD,oCAAoC;IACpC,KAAK,CAAU;IACf,kCAAkC;IAClC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,UAAU,CAAC,KAA6B;QAC1C,IAAI,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAA+B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAChI,CAAC;IACD,iCAAiC;IACjC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,UAAU,CAAC,KAA6B;QAC1C,IAAI,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAA+B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAChI,CAAC;IACD,mCAAmC;IACnC,SAAS,GAAkB,EAAE,CAAC;IAC9B;;;;OAIG;IACH,cAAc,GAAW,CAAC,CAAC;IAC3B,uDAAuD;IACvD,mBAAmB,CAAU;IAC7B,uBAAuB;IACvB,SAAS,CAAO;IAChB,sEAAsE;IACtE,MAAM,CAA8B;IAEpC,iCAAiC;IACjC,YAAY,IAAsB;QAChC,KAAK,EAAE,CAAC;QACR,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1B,mEAAmE;QACnE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,cAAc,CAAC,EAAE,CAAC;YAC5C,IAAY,CAAC,kBAAkB,EAAE,CAAC,EAAE,MAAM,EAAG,IAAY,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,WAAmB,EAAE,QAAgB;QAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI;YACtB,CAAC,aAAa,EAAE,WAAW,CAAC;YAC5B,CAAC,UAAU,EAAE,QAAQ,CAAC;SACvB,EAAE,CAAC;YACF,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,wCAAwC,SAAS,GAAG,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,cAAc,CAAC,GAAW;QAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IAC9E,CAAC;IAED;;;;;OAKG;IACH,YAAY;QACV,MAAM,IAAI,GAAI,IAAY,CAAC,IAAI,CAAC;QAChC,IAAI,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAChF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,cAAc,CAAC,KAAa;QACjC,OAAO,GAAG,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAmB;QACzB,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,OAAO,EAAa,CAAC;QAC1E,IAAI,CAAC,KAAK,KAAK,IAAI,SAAS,CAAO,IAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,GAAsB,EAAE,MAAc;QACjD,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACjF,OAAO,6BAA6B,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gFAAgF;IAChF,MAAM;QACJ,MAAM,MAAM,GAAS,KAAK,CAAC,MAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAQ,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAG,IAAY,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IACS,kBAAkB,CAAC,OAAa;QACxC,CAAC;YACC,IAAI,CAAC,GAAQ,IAAI,CAAC,MAAM,CAAC;YACzB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjF,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,YAAY,cAAc,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,IAAI,cAAc,EAAE,CAAC;gBAClC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACzB,CAAC;gBACD,CAAC,GAAG,IAAI,CAAC;YACX,CAAC;YACA,CAAS,CAAC,aAAa,CAAC,GAAI,CAAS,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAC3D,CAAS,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;YAClF,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}

package/lib/models/ownermodel.model.d.ts

@@ -0,0 +1,68 @@
+import { type ModelClass, ModelLink, type PrimaryKeyType, UuidModel } from "@webda/models";
+import { User } from "./user.model.js";
+import { IOperationContext } from "../contexts/icontext.js";
+/**
+ * Abstract class to define an object with an owner
+ *
+ * The owner is the user that created the object
+ * The owner can be changed by the owner
+ */
+export declare abstract class AbstractOwnerModel<T extends User> extends UuidModel {
+    /**
+     * Default owner of the object
+     */
+    get _user(): ModelLink<T>;
+    set _user(value: string | T | PrimaryKeyType<T> | ModelLink<T>);
+    /**
+     * Define if the object is publicly readable
+     * @default false
+     */
+    public?: boolean;
+    /**
+     *
+     * @returns
+     */
+    abstract getOwnerModel(): ModelClass<T>;
+    /**
+     * Set object owner
+     * @param uuid - the unique identifier
+     */
+    setOwner(uuid: PrimaryKeyType<T>): void;
+    /**
+     * Return the owner of the object
+     *
+     * Only the owner can do update to the object
+     * @returns the result
+     */
+    getOwner(): ModelLink<T>;
+    /**
+     * Check if the current user can perform the given action based on ownership
+     * @param context - the execution context
+     * @param action - the action to check
+     * @returns the result
+     */
+    canAct(context: IOperationContext, action: string): Promise<string | boolean>;
+    /**
+     * Return a query to filter OwnerModel
+     *
+     * @param context - the execution context
+     * @returns the result
+     */
+    static getPermissionQuery(context?: IOperationContext): null | {
+        partial: boolean;
+        query: string;
+    };
+    /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
+    toJSON(): any;
+}
+/**
+ * @WebdaModel
+ */
+export declare class OwnerModel extends AbstractOwnerModel<User> {
+    /**
+     * Get the User model class used for ownership
+     * @returns the result
+     */
+    getOwnerModel(): ModelClass<User>;
+}
+//# sourceMappingURL=ownermodel.model.d.ts.map

package/lib/models/ownermodel.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownermodel.model.d.ts","sourceRoot":"","sources":["../../src/models/ownermodel.model.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,UAAU,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;GAKG;AACH,8BAAsB,kBAAkB,CAAC,CAAC,SAAS,IAAI,CAAE,SAAQ,SAAS;IACxE;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,CAExB;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,EAU7D;IACD;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;OAGG;IACH,QAAQ,CAAC,aAAa,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAExC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAGtC;IAED;;;;;OAKG;IACH,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAEvB;IAED;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAalF;IAED;;;;;OAKG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAQjG;IAED,gFAAgF;IAChF,MAAM,IAAI,GAAG,CAQZ;CACF;AAED;;GAEG;AACH,qBAAa,UAAW,SAAQ,kBAAkB,CAAC,IAAI,CAAC;IACtD;;;OAGG;IACH,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,CAEhC;CACF"}

package/lib/models/ownermodel.model.js

@@ -0,0 +1,113 @@
+import { WEBDA_STORAGE } from "@webda/models";
+//import { UuidModel } from "./uuid.js";
+import { ModelLink, UuidModel } from "@webda/models";
+import { User } from "./user.model.js";
+/**
+ * Abstract class to define an object with an owner
+ *
+ * The owner is the user that created the object
+ * The owner can be changed by the owner
+ */
+export class AbstractOwnerModel extends UuidModel {
+    /**
+     * Default owner of the object
+     */
+    get _user() {
+        return this[WEBDA_STORAGE]["_user"];
+    }
+    set _user(value) {
+        if (value instanceof ModelLink) {
+            this[WEBDA_STORAGE]["_user"] = value;
+        }
+        else if (value != null) {
+            const inst = this[WEBDA_STORAGE]["_user"] || new ModelLink(User);
+            inst.set(value);
+            this[WEBDA_STORAGE]["_user"] = inst;
+        }
+        else {
+            this[WEBDA_STORAGE]["_user"] = value;
+        }
+    }
+    /**
+     * Define if the object is publicly readable
+     * @default false
+     */
+    public;
+    /**
+     * Set object owner
+     * @param uuid - the unique identifier
+     */
+    setOwner(uuid) {
+        this._user ??= new ModelLink(this.getOwnerModel()).set(uuid);
+        this._user.set(uuid);
+    }
+    /**
+     * Return the owner of the object
+     *
+     * Only the owner can do update to the object
+     * @returns the result
+     */
+    getOwner() {
+        return this._user;
+    }
+    /**
+     * Check if the current user can perform the given action based on ownership
+     * @param context - the execution context
+     * @param action - the action to check
+     * @returns the result
+     */
+    async canAct(context, action) {
+        // Object is public
+        if (this.public && (action === "get" || action === "get_binary")) {
+            return true;
+        }
+        else if (!context.getCurrentUserId()) {
+            return "You need to be logged in to access this object";
+        }
+        else if (!this.getOwner() && action !== "create") {
+            return "Object does not have an owner";
+        }
+        if (action === "create") {
+            //this.setOwner(Uuid.parse(ctx.getCurrentUserId(), this.getOwnerModel()));
+        }
+        return context.getCurrentUserId() === this.getOwner()?.toString();
+    }
+    /**
+     * Return a query to filter OwnerModel
+     *
+     * @param context - the execution context
+     * @returns the result
+     */
+    static getPermissionQuery(context) {
+        if (!context) {
+            return null;
+        }
+        return {
+            query: `_user = '${context.getCurrentUserId()}' OR public = TRUE`,
+            partial: false
+        };
+    }
+    /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
+    toJSON() {
+        const parent = super.toJSON ? super.toJSON() : {};
+        const result = parent === this ? {} : parent;
+        for (const key of Object.keys(this)) {
+            result[key] = this[key];
+        }
+        Object.assign(result, this[WEBDA_STORAGE]);
+        return result;
+    }
+}
+/**
+ * @WebdaModel
+ */
+export class OwnerModel extends AbstractOwnerModel {
+    /**
+     * Get the User model class used for ownership
+     * @returns the result
+     */
+    getOwnerModel() {
+        return User;
+    }
+}
+//# sourceMappingURL=ownermodel.model.js.map

package/lib/models/ownermodel.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownermodel.model.js","sourceRoot":"","sources":["../../src/models/ownermodel.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,wCAAwC;AACxC,OAAO,EAAmB,SAAS,EAAuB,SAAS,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAGvC;;;;;GAKG;AACH,MAAM,OAAgB,kBAAmC,SAAQ,SAAS;IACxE;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,KAAoD;QAC5D,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,GAAiB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/E,IAAI,CAAC,GAAG,CAAC,KAAY,CAAC,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;IACH,CAAC;IACD;;;OAGG;IACH,MAAM,CAAW;IAQjB;;;OAGG;IACH,QAAQ,CAAC,IAAuB;QAC9B,IAAI,CAAC,KAAK,KAAK,IAAI,SAAS,CAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,OAA0B,EAAE,MAAc;QACrD,mBAAmB;QACnB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,YAAY,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACvC,OAAO,gDAAgD,CAAC;QAC1D,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,+BAA+B,CAAC;QACzC,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,0EAA0E;QAC5E,CAAC;QACD,OAAO,OAAO,CAAC,gBAAgB,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC;IACpE,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAA2B;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,KAAK,EAAE,YAAY,OAAO,CAAC,gBAAgB,EAAE,oBAAoB;YACjE,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,MAAM;QACJ,MAAM,MAAM,GAAS,KAAK,CAAC,MAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAQ,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAG,IAAY,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,kBAAwB;IACtD;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/lib/models/password.model.d.ts

@@ -0,0 +1,78 @@
+import { WEBDA_STORAGE } from "@webda/models";
+import * as WebdaError from "../errors/errors.js";
+import type { User } from "./user.model.js";
+/** Rule a candidate password must satisfy */
+export interface PasswordPolicy {
+    /**
+     * @param password - candidate password
+     * @param user - user setting it, when known
+     * @returns true when acceptable
+     */
+    validate(password: string, user?: User): Promise<boolean>;
+}
+/**
+ * Replace the active password policy (undefined restores the default `.{8,}`)
+ * @param policy - the policy
+ */
+export declare function registerPasswordPolicy(policy: PasswordPolicy | undefined): void;
+/**
+ * Get the active password policy
+ * @returns the policy
+ */
+export declare function usePasswordPolicy(): PasswordPolicy;
+/** Raised when a password does not satisfy the active policy (400 PASSWORD_POLICY) */
+export declare class PasswordPolicyError extends WebdaError.HttpError {
+    /** @param message - error message */
+    constructor(message?: string);
+}
+/**
+ * Non-enumerable flag set on a User whose data carried a v3 top-level `__password` mapped onto `password` at
+ * hydration: its stored record still has the v3 layout until it is saved again (`webda auth migrate`)
+ */
+export declare const V3_PASSWORD_MAPPED: unique symbol;
+/**
+ * Password credential of a user: bcrypt hash and change timestamp
+ * @WebdaBehavior Webda/Password
+ */
+export declare class Password {
+    [WEBDA_STORAGE]: Record<string, any>;
+    /** bcrypt hash, never output */
+    __hash?: string;
+    /** Last change, ms since epoch */
+    changedAt?: number;
+    /**
+     * Owning user (set by behavior hydration)
+     * @returns the user or undefined when detached
+     */
+    protected getUser(): User | undefined;
+    /**
+     * @returns true when a password is set
+     */
+    hasPassword(): boolean;
+    /**
+     * Compare a candidate with the stored hash
+     * @param plain - candidate password
+     * @returns true when it matches
+     */
+    verify(plain: string): Promise<boolean>;
+    /**
+     * Validate against the policy and store a new hash (does not save the user)
+     * @param plain - new password
+     */
+    set(plain: string): Promise<void>;
+    /**
+     * Store an existing hash (migration)
+     * @param hash - bcrypt hash
+     * @param changedAt - change timestamp
+     */
+    setHash(hash: string, changedAt?: number): void;
+    /**
+     * Change the password of the owning user
+     * @param current - current password
+     * @param next - new password
+     */
+    change(current: string, next: string): Promise<void>;
+    get parent(): any;
+    toJSON(): Record<string, any>;
+}
+//# sourceMappingURL=password.model.d.ts.map

package/lib/models/password.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.model.d.ts","sourceRoot":"","sources":["../../src/models/password.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAC;AAGlD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAE5C,6CAA6C;AAC7C,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAKD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,CAE/E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAElD;AAED,sFAAsF;AACtF,qBAAa,mBAAoB,SAAQ,UAAU,CAAC,SAAS;IAC3D,qCAAqC;IACrC,YAAY,OAAO,GAAE,MAA6C,EAGjE;CACF;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,eAA6B,CAAC;AAE7D;;;GAGG;AACH,qBAAa,QAAQ;IACnB,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAM;IAC1C,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,SAAS,CAAC,OAAO,IAAI,IAAI,GAAG,SAAS,CAEpC;IAED;;OAEG;IACH,WAAW,IAAI,OAAO,CAErB;IAED;;;;OAIG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAU5C;IAED;;;OAGG;IACG,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMtC;IAED;;;;OAIG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,GAAE,MAAmB,GAAG,IAAI,CAG1D;IAED;;;;OAIG;IAEG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzD;IACD,IAAI,MAAM,QAAgD;IAC1D,MAAM,wBAcL;CACF"}

package/lib/models/password.model.js

@@ -0,0 +1,171 @@
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+import { WEBDA_STORAGE } from "@webda/models";
+import bcrypt from "bcryptjs";
+import * as WebdaError from "../errors/errors.js";
+import { Action } from "./decorator.js";
+import { useDynamicService } from "../core/hooks.js";
+const DEFAULT_POLICY = { validate: async (p) => /.{8,}/.test(p) };
+let currentPolicy = DEFAULT_POLICY;
+/**
+ * Replace the active password policy (undefined restores the default `.{8,}`)
+ * @param policy - the policy
+ */
+export function registerPasswordPolicy(policy) {
+    currentPolicy = policy ?? DEFAULT_POLICY;
+}
+/**
+ * Get the active password policy
+ * @returns the policy
+ */
+export function usePasswordPolicy() {
+    return currentPolicy;
+}
+/** Raised when a password does not satisfy the active policy (400 PASSWORD_POLICY) */
+export class PasswordPolicyError extends WebdaError.HttpError {
+    /** @param message - error message */
+    constructor(message = "Password does not match the policy") {
+        super(message, 400);
+        this.code = "PASSWORD_POLICY";
+    }
+}
+/**
+ * Non-enumerable flag set on a User whose data carried a v3 top-level `__password` mapped onto `password` at
+ * hydration: its stored record still has the v3 layout until it is saved again (`webda auth migrate`)
+ */
+export const V3_PASSWORD_MAPPED = Symbol("v3PasswordMapped");
+/**
+ * Password credential of a user: bcrypt hash and change timestamp
+ * @WebdaBehavior Webda/Password
+ */
+let Password = (() => {
+    let _instanceExtraInitializers = [];
+    let _change_decorators;
+    return class Password {
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(null) : void 0;
+            _change_decorators = [Action({ rest: { method: "PUT" } })];
+            __esDecorate(this, null, _change_decorators, { kind: "method", name: "change", static: false, private: false, access: { has: obj => "change" in obj, get: obj => obj.change }, metadata: _metadata }, null, _instanceExtraInitializers);
+            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+        }
+        [WEBDA_STORAGE] = (__runInitializers(this, _instanceExtraInitializers), {});
+        /** bcrypt hash, never output */
+        __hash;
+        /** Last change, ms since epoch */
+        changedAt;
+        /**
+         * Owning user (set by behavior hydration)
+         * @returns the user or undefined when detached
+         */
+        getUser() {
+            return this.parent?.instance;
+        }
+        /**
+         * @returns true when a password is set
+         */
+        hasPassword() {
+            return typeof this.__hash === "string" && this.__hash.length > 0;
+        }
+        /**
+         * Compare a candidate with the stored hash
+         * @param plain - candidate password
+         * @returns true when it matches
+         */
+        async verify(plain) {
+            if (!this.hasPassword() || typeof plain !== "string") {
+                return false;
+            }
+            try {
+                return await bcrypt.compare(plain, this.__hash);
+            }
+            catch {
+                // Malformed stored hash
+                return false;
+            }
+        }
+        /**
+         * Validate against the policy and store a new hash (does not save the user)
+         * @param plain - new password
+         */
+        async set(plain) {
+            if (typeof plain !== "string" || !(await usePasswordPolicy().validate(plain, this.getUser()))) {
+                throw new PasswordPolicyError();
+            }
+            this.__hash = await bcrypt.hash(plain, 10);
+            this.changedAt = Date.now();
+        }
+        /**
+         * Store an existing hash (migration)
+         * @param hash - bcrypt hash
+         * @param changedAt - change timestamp
+         */
+        setHash(hash, changedAt = Date.now()) {
+            this.__hash = hash;
+            this.changedAt = changedAt;
+        }
+        /**
+         * Change the password of the owning user
+         * @param current - current password
+         * @param next - new password
+         */
+        async change(current, next) {
+            if (!(await this.verify(current))) {
+                throw new WebdaError.Forbidden("Invalid password");
+            }
+            await this.set(next);
+            const user = this.getUser();
+            await user?.save();
+            await useDynamicService("TokenService")?.revokeUser?.(user?.getUUID());
+        }
+        get parent() { return this[WEBDA_STORAGE]["__parent__"]; }
+        toJSON() {
+            const result = {};
+            for (const key of Object.keys(this)) {
+                result[key] = this[key];
+            }
+            const storage = this[WEBDA_STORAGE];
+            if (storage) {
+                for (const key of Object.keys(storage)) {
+                    if (key !== "__parent__") {
+                        result[key] = storage[key];
+                    }
+                }
+            }
+            return result;
+        }
+    };
+})();
+export { Password };
+//# sourceMappingURL=password.model.js.map

package/lib/models/password.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.model.js","sourceRoot":"","sources":["../../src/models/password.model.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAarD,MAAM,cAAc,GAAmB,EAAE,QAAQ,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAChF,IAAI,aAAa,GAAmB,cAAc,CAAC;AAEnD;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAkC;IACvE,aAAa,GAAG,MAAM,IAAI,cAAc,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,sFAAsF;AACtF,MAAM,OAAO,mBAAoB,SAAQ,UAAU,CAAC,SAAS;IAC3D,qCAAqC;IACrC,YAAY,OAAO,GAAW,oCAAoC;QAChE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAE7D;;;GAGG;IACU,QAAQ;;;iBAAR,QAAQ;;;kCAkElB,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACpC,qKAAM,MAAM,6DAQX;;;QA1ED,CAAC,aAAa,CAAC,IADJ,mDAAQ,EACoB,EAAE,EAAC;QAC1C,gCAAgC;QAChC,MAAM,CAAU;QAChB,kCAAkC;QAClC,SAAS,CAAU;QAEnB;;;WAGG;QACO,OAAO;YACf,OAAQ,IAAY,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxC,CAAC;QAED;;WAEG;QACH,WAAW;YACT,OAAO,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACnE,CAAC;QAED;;;;WAIG;QACH,KAAK,CAAC,MAAM,CAAC,KAAa;YACxB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;gBACxB,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,GAAG,CAAC,KAAa;YACrB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,iBAAiB,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC9F,MAAM,IAAI,mBAAmB,EAAE,CAAC;YAClC,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,CAAC;QAED;;;;WAIG;QACH,OAAO,CAAC,IAAY,EAAE,SAAS,GAAW,IAAI,CAAC,GAAG,EAAE;YAClD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;QAED;;;;WAIG;QAEH,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,IAAY;YACxC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,EAAE,IAAI,EAAE,CAAC;YACnB,MAAO,iBAAiB,CAAC,cAAc,CAAS,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM;YACJ,MAAM,MAAM,GAAwB,EAAE,CAAC;YACvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,CAAC,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;YACD,MAAM,OAAO,GAAqC,IAAY,CAAC,aAAa,CAAC,CAAC;YAC9E,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvC,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;wBACzB,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;;;SA3FU,QAAQ"}

package/lib/models/refreshtoken.model.d.ts

@@ -0,0 +1,30 @@
+import { Model, WEBDA_PRIMARY_KEY } from "@webda/models";
+import type { MfaState } from "../session/session.js";
+/**
+ * Stored refresh token (only its SHA-256 hash)
+ * @WebdaModel
+ */
+export declare class RefreshToken extends Model {
+    [WEBDA_PRIMARY_KEY]: readonly ["hash"];
+    /** SHA-256 hex of the token */
+    hash: string;
+    /** Owner */
+    userId: string;
+    /** Ident used to log in */
+    identId: string;
+    /** Provider used */
+    provider?: string;
+    /** Authentication methods */
+    amr: string[];
+    /** MFA state of the session that issued the token */
+    mfa: MfaState;
+    /** Rotation family */
+    family: string;
+    /** Expiry, ms since epoch */
+    expiresAt: number;
+    /** Set once exchanged */
+    rotatedAt?: number;
+    /** Set when revoked */
+    revokedAt?: number;
+}
+//# sourceMappingURL=refreshtoken.model.d.ts.map

package/lib/models/refreshtoken.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refreshtoken.model.d.ts","sourceRoot":"","sources":["../../src/models/refreshtoken.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEtD;;;GAGG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,CAAC,iBAAiB,CAAC,YAAI,MAAM,EAAW;IACxC,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,GAAG,EAAE,MAAM,EAAE,CAAM;IACnB,qDAAqD;IACrD,GAAG,EAAE,QAAQ,CAAU;IACvB,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uBAAuB;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/lib/models/refreshtoken.model.js

@@ -0,0 +1,29 @@
+import { Model, WEBDA_PRIMARY_KEY } from "@webda/models";
+/**
+ * Stored refresh token (only its SHA-256 hash)
+ * @WebdaModel
+ */
+export class RefreshToken extends Model {
+    [WEBDA_PRIMARY_KEY] = ["hash"];
+    /** SHA-256 hex of the token */
+    hash;
+    /** Owner */
+    userId;
+    /** Ident used to log in */
+    identId;
+    /** Provider used */
+    provider;
+    /** Authentication methods */
+    amr = [];
+    /** MFA state of the session that issued the token */
+    mfa = "none";
+    /** Rotation family */
+    family;
+    /** Expiry, ms since epoch */
+    expiresAt;
+    /** Set once exchanged */
+    rotatedAt;
+    /** Set when revoked */
+    revokedAt;
+}
+//# sourceMappingURL=refreshtoken.model.js.map

package/lib/models/refreshtoken.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refreshtoken.model.js","sourceRoot":"","sources":["../../src/models/refreshtoken.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGzD;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAU,CAAC;IACxC,+BAA+B;IAC/B,IAAI,CAAS;IACb,YAAY;IACZ,MAAM,CAAS;IACf,2BAA2B;IAC3B,OAAO,CAAS;IAChB,oBAAoB;IACpB,QAAQ,CAAU;IAClB,6BAA6B;IAC7B,GAAG,GAAa,EAAE,CAAC;IACnB,qDAAqD;IACrD,GAAG,GAAa,MAAM,CAAC;IACvB,sBAAsB;IACtB,MAAM,CAAS;IACf,6BAA6B;IAC7B,SAAS,CAAS;IAClB,yBAAyB;IACzB,SAAS,CAAU;IACnB,uBAAuB;IACvB,SAAS,CAAU;CACpB"}

package/lib/models/registry.model.d.ts

@@ -0,0 +1,76 @@
+import { type Settable, UuidModel } from "@webda/models";
+/**
+ * Specific type for registry
+ */
+export declare class RegistryEntry extends UuidModel {
+    /** Create a new RegistryEntry
+     * @param data - initial data
+     */
+    constructor(data?: Settable<RegistryEntry>);
+    /**
+     * Registry entries are not serializable to DTO
+     * @returns the result
+     */
+    toDTO(): undefined;
+    /**
+     * No-op DTO deserialization for registry entries
+     * @returns this for chaining
+     */
+    fromDTO(): this;
+    /**
+     * Remove an attribute from the registry
+     * @param uuid - the unique identifier
+     * @param attribute - the attribute name
+     * @returns the result
+     */
+    static removeAttribute(uuid: string, attribute: string): Promise<void>;
+    /**
+     * Set an attribute from the registry
+     * @param uuid - the unique identifier
+     * @param attribute - the attribute name
+     * @param value - the value to set
+     * @returns the result
+     */
+    static setAttribute(uuid: string, attribute: string, value: any): Promise<void>;
+    /**
+     * Helper for upsert
+     * @param uuid - the unique identifier
+     * @param data - the data to process
+     * @returns the result
+     */
+    static get<K = any>(uuid: string, data?: K): Promise<RegistryEntry & K>;
+    /**
+     * Helper for upsert
+     * @param uuid - the unique identifier
+     * @param data - the data to process
+     * @returns the result
+     */
+    static put<K = any>(uuid: string, data: K): Promise<K & RegistryEntry>;
+    /**
+     * Delete a registry entry by UUID
+     * @param uuid - the unique identifier
+     * @returns the result
+     */
+    static delete(uuid: string): Promise<void>;
+    /**
+     * Check if a registry entry exists
+     * @param uuid - the unique identifier
+     * @returns the result
+     */
+    static exists(uuid: string): Promise<boolean>;
+    /**
+     * Perform a conditional patch
+     * @param uuid - the unique identifier
+     * @param patch - the patch to apply
+     * @param conditionField - the condition field name
+     * @param conditionValue - the condition value
+     * @returns the result
+     */
+    static patch(uuid: string, patch: any, conditionField: string, conditionValue: any): Promise<void>;
+}
+/**
+ * Use the registry
+ * @returns the result
+ */
+export declare function useRegistry(): typeof RegistryEntry;
+//# sourceMappingURL=registry.model.d.ts.map

package/lib/models/registry.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.model.d.ts","sourceRoot":"","sources":["../../src/models/registry.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,QAAQ,EACb,SAAS,EACV,MAAM,eAAe,CAAC;AAGvB;;GAEG;AACH,qBAAa,aAAc,SAAQ,SAAS;IAC1C;;OAEG;IACH,YAAY,IAAI,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,EAGzC;IAED;;;OAGG;IACH,KAAK,IAAI,SAAS,CAEjB;IAED;;;OAGG;IACH,OAAO,IAAI,IAAI,CAEd;IAED;;;;;OAKG;IACH,OAAa,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,iBAG3D;IAED;;;;;;OAMG;IACH,OAAa,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,iBAGpE;IAED;;;;;OAKG;IACH,OAAa,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC,CAI5E;IAED;;;;;OAKG;IACH,OAAa,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,aAAa,CAAC,CAE3E;IAED;;;;OAIG;IACH,OAAa,MAAM,CAAC,IAAI,EAAE,MAAM,iBAE/B;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,oBAEzB;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,iBAGjF;CACF;AAED;;;GAGG;AACH,wBAAgB,WAAW,yBAE1B"}