@webda/core 4.0.0-beta.3 → 4.0.0-beta.4

package/lib/models/ident.model.d.ts

@@ -1,89 +1,128 @@
-import type { Settable } from "@webda/models";
-import { OwnerModel } from "./ownermodel.model.js";
-import type { User } from "./user.model.js";
-/** OAuth tokens associated with an identity provider */
-export declare class IdentTokens {
-    refresh: string;
-    access: string;
+import type { PrimaryKeyType } from "@webda/models";
+import { Model, ModelLink, WEBDA_PRIMARY_KEY, WEBDA_PRIMARY_KEY_SEPARATOR, type Settable } from "@webda/models";
+import * as WebdaError from "../errors/errors.js";
+import type { IOperationContext } from "../contexts/icontext.js";
+import { User } from "./user.model.js";
+import { EncryptedField } from "./encrypted.model.js";
+/** Tokens (credentials) of an identity provider, as the provider returns them */
+export interface IdentTokens {
+    /** Access token */
+    access_token?: string;
+    /** Refresh token */
+    refresh_token?: string;
+    /** Any other provider field */
+    [key: string]: any;
+}
+/** Email sending throttle state of an ident (login failures are top-level `Ident` attributes) */
+export interface IdentThrottle {
+    /** Timestamp of the last email sent */
+    lastSentAt?: number;
+}
+/** Raised for malformed ident keys (400 INVALID_IDENT) */
+export declare class InvalidIdent extends WebdaError.HttpError {
+    /** @param message - error message */
+    constructor(message?: string);
 }
 /**
- * First basic model for Ident
- * @class
+ * An identity linked to a user: `<providerUid>:<provider>`
  * @WebdaModel
  */
-export declare class Ident extends OwnerModel {
-    /** Create a new Ident
-     * @param data - initial data
-     */
-    constructor(data?: Settable<Ident>);
-    /**
-     * Type of the ident
-     */
-    _type: string;
-    /**
-     * Uid on the provider
-     */
-    uid: string;
-    /**
-     * Provider profile
-     */
-    __profile: any;
-    /**
-     * Tokens for this ident
-     */
-    __tokens: IdentTokens;
-    /**
-     * Last time the ident was used
-     */
-    get _lastUsed(): Date;
-    set _lastUsed(value: string | number | Date);
+export declare class Ident extends Model {
+    /** Composite primary key */
+    [WEBDA_PRIMARY_KEY]: readonly ["providerUid", "provider"];
+    [WEBDA_PRIMARY_KEY_SEPARATOR]: string;
+    /** Identifier on the provider (normalised email for "email") */
+    providerUid: string;
+    /** Provider name */
+    provider: string;
+    /** Owner */
+    get _user(): ModelLink<User>;
+    set _user(value: string | User | PrimaryKeyType<User> | ModelLink<User>);
+    /** Email asserted for this ident */
+    email?: string;
+    /** When the ident was verified */
+    get verifiedAt(): Date;
+    set verifiedAt(value: string | number | Date);
+    /** Last login with this ident */
+    get lastUsedAt(): Date;
+    set lastUsedAt(value: string | number | Date);
+    /** Email sending throttle state */
+    _throttle: IdentThrottle;
     /**
-     * If the ident is validated
-     */
-    _failedLogin: number;
+     * Login attempts counted since the last successful login
+     *
+     * Top-level so stores can increment it atomically (nested-path atomic operations are not portable)
+     */
+    _loginAttempts: number;
+    /** Timestamp (ms) of the last counted login attempt */
+    _lastLoginAttemptAt?: number;
+    /** Provider profile */
+    __profile?: any;
+    /** Provider tokens, encrypted at rest (`await ident.tokens.get()`) */
+    tokens: EncryptedField<IdentTokens>;
+    /** @param data - initial data */
+    constructor(data?: Settable<Ident>);
     /**
-     * If EmailIdent
-     */
-    _lastValidationEmail?: number;
+     * Build and validate a key
+     * @param providerUid - uid on the provider
+     * @param provider - provider name
+     * @returns the composite key
+     */
+    static key(providerUid: string, provider: string): {
+        providerUid: string;
+        provider: string;
+    };
     /**
-     * When the ident was validated
-     */
-    get _validation(): Date;
-    set _validation(value: string | number | Date);
+     * Parse a v3 storage key `"<providerUid>_<provider>"`, split on its LAST "_" (provider names never
+     * contain "_", provider uids such as emails may)
+     *
+     * Consulted by repositories for keys that are not `"<providerUid>:<provider>"` (see `WEBDA_LEGACY_UID`),
+     * so v3 records stay addressable and queryable until they are upgraded.
+     * @param uid - raw storage key
+     * @returns the key parts, or undefined when the key is not a v3 ident key
+     */
+    static parseLegacyUID(uid: string): {
+        providerUid: string;
+        provider: string;
+    } | undefined;
     /**
-     * Email for this ident if it exist
+     * v3 storage key of a record stored before the composite key (v3 kept it as `uuid` in the body)
+     *
+     * Such an ident has no `providerUid`: it must be upgraded (`@webda/auth` `upgradeIdent`) before use.
+     * @returns the v3 key, or undefined for a current ident
      */
-    email?: string;
+    getLegacyUID(): string | undefined;
     /**
-     * Provider id
+     * Normalise an email for use as providerUid
+     * @param email - raw email
+     * @returns trimmed lowercase email
      */
-    provider?: string;
+    static normalizeEmail(email: string): string;
     /**
-     * Get the email for this ident
-     * @returns the result string
+     * @returns the owner link
      */
-    getEmail(): string;
+    getUser(): ModelLink<User>;
     /**
-     * Get the provider type
-     * @returns the result
+     * @param user - owner uuid or user
      */
-    getType(): string;
+    setUser(user: string | User): void;
     /**
-     * Set the provider type
-     * @param type - the type to look up
+     * @returns the email of this ident
      */
-    setType(type: any): void;
+    getEmail(): string | undefined;
     /**
-     * Get the user who owns this ident
-     * @returns the result
+     * @returns true when verified
      */
-    getUser(): import("@webda/models").ModelLink<User>;
+    isVerified(): boolean;
     /**
-     * Set the user who owns this ident
-     * @param uuid - the unique identifier
+     * Only the owner may act on an ident
+     * @param ctx - operation context
+     * @param action - action name
+     * @returns true or a refusal reason
      */
-    setUser(uuid: string | User): void;
+    canAct(ctx: IOperationContext, action: string): Promise<string | boolean>;
     /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
     toJSON(): any;
+    protected __hydrateBehaviors(rawData?: any): void;
 }
 //# sourceMappingURL=ident.model.d.ts.map

package/lib/models/ident.model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ident.model.d.ts","sourceRoot":"","sources":["../../src/models/ident.model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAA8B,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAE5C,wDAAwD;AACxD,qBAAa,WAAW;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,qBAAa,KAAM,SAAQ,UAAU;IACnC;;OAEG;IACH,YAAY,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,EAEjC;IACD;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,SAAS,EAAE,GAAG,CAAC;IACf;;OAEG;IACH,QAAQ,EAAE,WAAW,CAAC;IACtB;;OAEG;IACH,IAAI,SAAS,IAAI,IAAI,CAEpB;IACD,IAAI,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAE1C;IACD;;OAEG;IACH,YAAY,EAAE,MAAM,CAAK;IACzB;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAK;IAClC;;OAEG;IACH,IAAI,WAAW,IAAI,IAAI,CAEtB;IACD,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAE5C;IACD;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;OAGG;IACH,QAAQ,IAAI,MAAM,CAEjB;IAED;;;OAGG;IACH,OAAO,WAEN;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI,KAAA,QAEX;IAED;;;OAGG;IACH,OAAO,4CAEN;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,QAE1B;IAED,gFAAgF;IAChF,MAAM,IAAI,GAAG,CAOZ;CACF"}
+{"version":3,"file":"ident.model.d.ts","sourceRoot":"","sources":["../../src/models/ident.model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAChH,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,mBAAmB;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,iGAAiG;AACjG,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,0DAA0D;AAC1D,qBAAa,YAAa,SAAQ,UAAU,CAAC,SAAS;IACpD,qCAAqC;IACrC,YAAY,OAAO,GAAE,MAAwB,EAE5C;CACF;AAID;;;GAGG;AACH,qBAAa,KAAM,SAAQ,KAAK;IAC9B,4BAA4B;IAC5B,CAAC,iBAAiB,CAAC,YAAI,aAAa,EAAE,UAAU,EAAW;IAE3D,CAAC,2BAA2B,CAAC,SAAO;IACpC,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY;IACZ,IAAI,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,CAE3B;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,EAUtE;IACD,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,IAAI,UAAU,IAAI,IAAI,CAErB;IACD,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAE3C;IACD,iCAAiC;IACjC,IAAI,UAAU,IAAI,IAAI,CAErB;IACD,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,EAE3C;IACD,mCAAmC;IACnC,SAAS,EAAE,aAAa,CAAM;IAC9B;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAK;IAC3B,uDAAuD;IACvD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB;IACvB,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,sEAAsE;IACtE,MAAM,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;IAEpC,iCAAiC;IACjC,YAAY,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,EAOjC;IAED;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAU3F;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CASxF;IAED;;;;;OAKG;IACH,YAAY,IAAI,MAAM,GAAG,SAAS,CAMjC;IAED;;;;OAIG;IACH,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3C;IAED;;OAEG;IACH,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,CAEzB;IAED;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAIjC;IAED;;OAEG;IACH,QAAQ,IAAI,MAAM,GAAG,SAAS,CAE7B;IAED;;OAEG;IACH,UAAU,IAAI,OAAO,CAEpB;IAED;;;;;OAKG;IACG,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAK9E;IAED,gFAAgF;IAChF,MAAM,IAAI,GAAG,CAQZ;IACD,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,IAAI,CAiBhD;CACF"}

package/lib/models/ident.model.js

@@ -1,115 +1,207 @@
 import { WEBDA_STORAGE } from "@webda/models";
-import { OwnerModel } from "./ownermodel.model.js";
-/** OAuth tokens associated with an identity provider */
-export class IdentTokens {
-    refresh;
-    access;
+import { Model, ModelLink, WEBDA_PRIMARY_KEY, WEBDA_PRIMARY_KEY_SEPARATOR } from "@webda/models";
+import * as WebdaError from "../errors/errors.js";
+import { User } from "./user.model.js";
+import { EncryptedField } from "./encrypted.model.js";
+/** Raised for malformed ident keys (400 INVALID_IDENT) */
+export class InvalidIdent extends WebdaError.HttpError {
+    /** @param message - error message */
+    constructor(message = "Invalid ident") {
+        super(message, 400);
+    }
 }
+const SEPARATOR = ":";
 /**
- * First basic model for Ident
- * @class
+ * An identity linked to a user: `<providerUid>:<provider>`
  * @WebdaModel
  */
-export class Ident extends OwnerModel {
-    /** Create a new Ident
-     * @param data - initial data
-     */
-    constructor(data) {
-        super(data);
+export class Ident extends Model {
+    /** Composite primary key */
+    [WEBDA_PRIMARY_KEY] = ["providerUid", "provider"];
+    // Must stay a string literal: the content mapper reads it textually
+    [WEBDA_PRIMARY_KEY_SEPARATOR] = ":";
+    /** Identifier on the provider (normalised email for "email") */
+    providerUid;
+    /** Provider name */
+    provider;
+    /** Owner */
+    get _user() {
+        return this[WEBDA_STORAGE]["_user"];
     }
-    /**
-     * Type of the ident
-     */
-    _type;
-    /**
-     * Uid on the provider
-     */
-    uid;
-    /**
-     * Provider profile
-     */
-    __profile;
-    /**
-     * Tokens for this ident
-     */
-    __tokens;
-    /**
-     * Last time the ident was used
-     */
-    get _lastUsed() {
-        return this[WEBDA_STORAGE]["_lastUsed"] ?? undefined;
+    set _user(value) {
+        if (value instanceof ModelLink) {
+            this[WEBDA_STORAGE]["_user"] = value;
+        }
+        else if (value != null) {
+            const inst = this[WEBDA_STORAGE]["_user"] || new ModelLink(User);
+            inst.set(value);
+            this[WEBDA_STORAGE]["_user"] = inst;
+        }
+        else {
+            this[WEBDA_STORAGE]["_user"] = value;
+        }
+    }
+    /** Email asserted for this ident */
+    email;
+    /** When the ident was verified */
+    get verifiedAt() {
+        return this[WEBDA_STORAGE]["verifiedAt"];
     }
-    set _lastUsed(value) {
-        this[WEBDA_STORAGE]["_lastUsed"] = value !== undefined && value !== null ? new Date(value) : value;
+    set verifiedAt(value) {
+        this[WEBDA_STORAGE]["verifiedAt"] = value !== undefined && value !== null ? new Date(value) : value;
     }
+    /** Last login with this ident */
+    get lastUsedAt() {
+        return this[WEBDA_STORAGE]["lastUsedAt"];
+    }
+    set lastUsedAt(value) {
+        this[WEBDA_STORAGE]["lastUsedAt"] = value !== undefined && value !== null ? new Date(value) : value;
+    }
+    /** Email sending throttle state */
+    _throttle = {};
     /**
-     * If the ident is validated
-     */
-    _failedLogin = 0;
-    /**
-     * If EmailIdent
-     */
-    _lastValidationEmail = 0;
+     * Login attempts counted since the last successful login
+     *
+     * Top-level so stores can increment it atomically (nested-path atomic operations are not portable)
+     */
+    _loginAttempts = 0;
+    /** Timestamp (ms) of the last counted login attempt */
+    _lastLoginAttemptAt;
+    /** Provider profile */
+    __profile;
+    /** Provider tokens, encrypted at rest (`await ident.tokens.get()`) */
+    tokens;
+    /** @param data - initial data */
+    constructor(data) {
+        super();
+        Object.assign(this, data);
+        // Raw stored data (or none) must become an EncryptedField behavior
+        if (!(this.tokens instanceof EncryptedField)) {
+            this.__hydrateBehaviors?.({ tokens: data?.tokens ?? {} });
+        }
+    }
     /**
-     * When the ident was validated
-     */
-    get _validation() {
-        return this[WEBDA_STORAGE]["_validation"];
+     * Build and validate a key
+     * @param providerUid - uid on the provider
+     * @param provider - provider name
+     * @returns the composite key
+     */
+    static key(providerUid, provider) {
+        for (const [name, v] of [
+            ["providerUid", providerUid],
+            ["provider", provider]
+        ]) {
+            if (typeof v !== "string" || v.length === 0 || v.includes(SEPARATOR)) {
+                throw new InvalidIdent(`${name} must be a non-empty string without '${SEPARATOR}'`);
+            }
+        }
+        return { providerUid, provider };
     }
-    set _validation(value) {
-        this[WEBDA_STORAGE]["_validation"] = value !== undefined && value !== null ? new Date(value) : value;
+    /**
+     * Parse a v3 storage key `"<providerUid>_<provider>"`, split on its LAST "_" (provider names never
+     * contain "_", provider uids such as emails may)
+     *
+     * Consulted by repositories for keys that are not `"<providerUid>:<provider>"` (see `WEBDA_LEGACY_UID`),
+     * so v3 records stay addressable and queryable until they are upgraded.
+     * @param uid - raw storage key
+     * @returns the key parts, or undefined when the key is not a v3 ident key
+     */
+    static parseLegacyUID(uid) {
+        if (typeof uid !== "string" || uid.includes(SEPARATOR)) {
+            return undefined;
+        }
+        const i = uid.lastIndexOf("_");
+        if (i <= 0 || i === uid.length - 1) {
+            return undefined;
+        }
+        return { providerUid: uid.substring(0, i), provider: uid.substring(i + 1) };
     }
     /**
-     * Email for this ident if it exist
-     */
-    email;
+     * v3 storage key of a record stored before the composite key (v3 kept it as `uuid` in the body)
+     *
+     * Such an ident has no `providerUid`: it must be upgraded (`@webda/auth` `upgradeIdent`) before use.
+     * @returns the v3 key, or undefined for a current ident
+     */
+    getLegacyUID() {
+        const uuid = this.uuid;
+        if (this.providerUid || typeof uuid !== "string" || !Ident.parseLegacyUID(uuid)) {
+            return undefined;
+        }
+        return uuid;
+    }
     /**
-     * Provider id
+     * Normalise an email for use as providerUid
+     * @param email - raw email
+     * @returns trimmed lowercase email
      */
-    provider;
+    static normalizeEmail(email) {
+        return `${email ?? ""}`.trim().toLowerCase();
+    }
     /**
-     * Get the email for this ident
-     * @returns the result string
+     * @returns the owner link
      */
-    getEmail() {
-        return this.email;
+    getUser() {
+        return this._user;
     }
     /**
-     * Get the provider type
-     * @returns the result
+     * @param user - owner uuid or user
      */
-    getType() {
-        return this._type;
+    setUser(user) {
+        const uuid = typeof user === "string" ? user : user.getUUID();
+        this._user ??= new ModelLink(User).set(uuid);
+        this._user.set(uuid);
     }
     /**
-     * Set the provider type
-     * @param type - the type to look up
+     * @returns the email of this ident
      */
-    setType(type) {
-        this._type = type;
+    getEmail() {
+        return this.email;
     }
     /**
-     * Get the user who owns this ident
-     * @returns the result
+     * @returns true when verified
      */
-    getUser() {
-        return this.getOwner();
+    isVerified() {
+        return this.verifiedAt !== undefined && this.verifiedAt !== null;
     }
     /**
-     * Set the user who owns this ident
-     * @param uuid - the unique identifier
-     */
-    setUser(uuid) {
-        this.setOwner(typeof uuid === "string" ? uuid : uuid.getPrimaryKey());
+     * Only the owner may act on an ident
+     * @param ctx - operation context
+     * @param action - action name
+     * @returns true or a refusal reason
+     */
+    async canAct(ctx, action) {
+        if (!ctx.getCurrentUserId() || this._user?.toString() !== ctx.getCurrentUserId()) {
+            return "You can't act on this ident";
+        }
+        return true;
     }
     /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
     toJSON() {
-        const result = super.toJSON ? super.toJSON() : {};
+        const parent = super.toJSON ? super.toJSON() : {};
+        const result = parent === this ? {} : parent;
         for (const key of Object.keys(this)) {
             result[key] = this[key];
         }
         Object.assign(result, this[WEBDA_STORAGE]);
         return result;
     }
+    __hydrateBehaviors(rawData) {
+        {
+            let v = this.tokens;
+            if (rawData !== undefined && rawData !== null && rawData["tokens"] !== undefined) {
+                v = rawData["tokens"];
+            }
+            if (!(v instanceof EncryptedField)) {
+                const inst = new EncryptedField();
+                if (v !== undefined && v !== null) {
+                    Object.assign(inst, v);
+                }
+                v = inst;
+            }
+            v[WEBDA_STORAGE] = v[WEBDA_STORAGE] || {};
+            v[WEBDA_STORAGE]["__parent__"] = { instance: this, attribute: "tokens" };
+            this.tokens = v;
+        }
+    }
 }
 //# sourceMappingURL=ident.model.js.map

package/lib/models/ident.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"ident.model.js","sourceRoot":"","sources":["../../src/models/ident.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,wDAAwD;AACxD,MAAM,OAAO,WAAW;IACtB,OAAO,CAAS;IAChB,MAAM,CAAS;CAChB;AAED;;;;GAIG;AACH,MAAM,OAAO,KAAM,SAAQ,UAAU;IACnC;;OAEG;IACH,YAAY,IAAsB;QAChC,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IACD;;OAEG;IACH,KAAK,CAAS;IACd;;OAEG;IACH,GAAG,CAAS;IACZ;;OAEG;IACH,SAAS,CAAM;IACf;;OAEG;IACH,QAAQ,CAAc;IACtB;;OAEG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;IACvD,CAAC;IACD,IAAI,SAAS,CAAC,KAA6B;QACzC,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAA+B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/H,CAAC;IACD;;OAEG;IACH,YAAY,GAAW,CAAC,CAAC;IACzB;;OAEG;IACH,oBAAoB,GAAY,CAAC,CAAC;IAClC;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,WAAW,CAAC,KAA6B;QAC3C,IAAI,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAA+B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjI,CAAC;IACD;;OAEG;IACH,KAAK,CAAU;IACf;;OAEG;IACH,QAAQ,CAAU;IAElB;;;OAGG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,IAAI;QACV,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,IAAmB;QACzB,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,gFAAgF;IAChF,MAAM;QACJ,MAAM,MAAM,GAAS,KAAK,CAAC,MAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAG,IAAY,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}
+{"version":3,"file":"ident.model.js","sourceRoot":"","sources":["../../src/models/ident.model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,2BAA2B,EAAiB,MAAM,eAAe,CAAC;AAChH,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAkBtD,0DAA0D;AAC1D,MAAM,OAAO,YAAa,SAAQ,UAAU,CAAC,SAAS;IACpD,qCAAqC;IACrC,YAAY,OAAO,GAAW,eAAe;QAC3C,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACtB,CAAC;CACF;AAED,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB;;;GAGG;AACH,MAAM,OAAO,KAAM,SAAQ,KAAK;IAC9B,4BAA4B;IAC5B,CAAC,iBAAiB,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAU,CAAC;IAC3D,oEAAoE;IACpE,CAAC,2BAA2B,CAAC,GAAG,GAAG,CAAC;IACpC,gEAAgE;IAChE,WAAW,CAAS;IACpB,oBAAoB;IACpB,QAAQ,CAAS;IACjB,YAAY;IACZ,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,KAA6D;QACrE,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,GAAoB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;YAClF,IAAI,CAAC,GAAG,CAAC,KAAY,CAAC,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;IACH,CAAC;IACD,oCAAoC;IACpC,KAAK,CAAU;IACf,kCAAkC;IAClC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,UAAU,CAAC,KAA6B;QAC1C,IAAI,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAA+B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAChI,CAAC;IACD,iCAAiC;IACjC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,UAAU,CAAC,KAA6B;QAC1C,IAAI,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAA+B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAChI,CAAC;IACD,mCAAmC;IACnC,SAAS,GAAkB,EAAE,CAAC;IAC9B;;;;OAIG;IACH,cAAc,GAAW,CAAC,CAAC;IAC3B,uDAAuD;IACvD,mBAAmB,CAAU;IAC7B,uBAAuB;IACvB,SAAS,CAAO;IAChB,sEAAsE;IACtE,MAAM,CAA8B;IAEpC,iCAAiC;IACjC,YAAY,IAAsB;QAChC,KAAK,EAAE,CAAC;QACR,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1B,mEAAmE;QACnE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,YAAY,cAAc,CAAC,EAAE,CAAC;YAC5C,IAAY,CAAC,kBAAkB,EAAE,CAAC,EAAE,MAAM,EAAG,IAAY,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,WAAmB,EAAE,QAAgB;QAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI;YACtB,CAAC,aAAa,EAAE,WAAW,CAAC;YAC5B,CAAC,UAAU,EAAE,QAAQ,CAAC;SACvB,EAAE,CAAC;YACF,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,wCAAwC,SAAS,GAAG,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,cAAc,CAAC,GAAW;QAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IAC9E,CAAC;IAED;;;;;OAKG;IACH,YAAY;QACV,MAAM,IAAI,GAAI,IAAY,CAAC,IAAI,CAAC;QAChC,IAAI,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAChF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,cAAc,CAAC,KAAa;QACjC,OAAO,GAAG,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAmB;QACzB,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,OAAO,EAAa,CAAC;QAC1E,IAAI,CAAC,KAAK,KAAK,IAAI,SAAS,CAAO,IAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC;IACnE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,GAAsB,EAAE,MAAc;QACjD,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACjF,OAAO,6BAA6B,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gFAAgF;IAChF,MAAM;QACJ,MAAM,MAAM,GAAS,KAAK,CAAC,MAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAQ,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAG,IAAY,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IACS,kBAAkB,CAAC,OAAa;QACxC,CAAC;YACC,IAAI,CAAC,GAAQ,IAAI,CAAC,MAAM,CAAC;YACzB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjF,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;YACD,IAAI,CAAC,CAAC,CAAC,YAAY,cAAc,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,IAAI,cAAc,EAAE,CAAC;gBAClC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACzB,CAAC;gBACD,CAAC,GAAG,IAAI,CAAC;YACX,CAAC;YACA,CAAS,CAAC,aAAa,CAAC,GAAI,CAAS,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAC3D,CAAS,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;YAClF,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}

package/lib/models/ownermodel.model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ownermodel.model.d.ts","sourceRoot":"","sources":["../../src/models/ownermodel.model.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,UAAU,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;GAKG;AACH,8BAAsB,kBAAkB,CAAC,CAAC,SAAS,IAAI,CAAE,SAAQ,SAAS;IACxE;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,CAExB;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,EAU7D;IACD;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;OAGG;IACH,QAAQ,CAAC,aAAa,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAExC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAGtC;IAED;;;;;OAKG;IACH,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAEvB;IAED;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAalF;IAED;;;;;OAKG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAQjG;IAED,gFAAgF;IAChF,MAAM,IAAI,GAAG,CAOZ;CACF;AAED;;GAEG;AACH,qBAAa,UAAW,SAAQ,kBAAkB,CAAC,IAAI,CAAC;IACtD;;;OAGG;IACH,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,CAEhC;CACF"}
+{"version":3,"file":"ownermodel.model.d.ts","sourceRoot":"","sources":["../../src/models/ownermodel.model.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,UAAU,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D;;;;;GAKG;AACH,8BAAsB,kBAAkB,CAAC,CAAC,SAAS,IAAI,CAAE,SAAQ,SAAS;IACxE;;OAEG;IACH,IAAI,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,CAExB;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,EAU7D;IACD;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;OAGG;IACH,QAAQ,CAAC,aAAa,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAExC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAGtC;IAED;;;;;OAKG;IACH,QAAQ,IAAI,SAAS,CAAC,CAAC,CAAC,CAEvB;IAED;;;;;OAKG;IACG,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAalF;IAED;;;;;OAKG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAQjG;IAED,gFAAgF;IAChF,MAAM,IAAI,GAAG,CAQZ;CACF;AAED;;GAEG;AACH,qBAAa,UAAW,SAAQ,kBAAkB,CAAC,IAAI,CAAC;IACtD;;;OAGG;IACH,aAAa,IAAI,UAAU,CAAC,IAAI,CAAC,CAEhC;CACF"}

package/lib/models/ownermodel.model.js

@@ -89,7 +89,8 @@ export class AbstractOwnerModel extends UuidModel {
     }
     /** Generated by @webda/content-mapper: include values held in WEBDA_STORAGE. */
     toJSON() {
-        const result = super.toJSON ? super.toJSON() : {};
+        const parent = super.toJSON ? super.toJSON() : {};
+        const result = parent === this ? {} : parent;
         for (const key of Object.keys(this)) {
             result[key] = this[key];
         }

package/lib/models/ownermodel.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"ownermodel.model.js","sourceRoot":"","sources":["../../src/models/ownermodel.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,wCAAwC;AACxC,OAAO,EAAmB,SAAS,EAAuB,SAAS,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAGvC;;;;;GAKG;AACH,MAAM,OAAgB,kBAAmC,SAAQ,SAAS;IACxE;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,KAAoD;QAC5D,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,GAAiB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/E,IAAI,CAAC,GAAG,CAAC,KAAY,CAAC,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;IACH,CAAC;IACD;;;OAGG;IACH,MAAM,CAAW;IAQjB;;;OAGG;IACH,QAAQ,CAAC,IAAuB;QAC9B,IAAI,CAAC,KAAK,KAAK,IAAI,SAAS,CAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,OAA0B,EAAE,MAAc;QACrD,mBAAmB;QACnB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,YAAY,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACvC,OAAO,gDAAgD,CAAC;QAC1D,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,+BAA+B,CAAC;QACzC,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,0EAA0E;QAC5E,CAAC;QACD,OAAO,OAAO,CAAC,gBAAgB,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC;IACpE,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAA2B;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,KAAK,EAAE,YAAY,OAAO,CAAC,gBAAgB,EAAE,oBAAoB;YACjE,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,MAAM;QACJ,MAAM,MAAM,GAAS,KAAK,CAAC,MAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAG,IAAY,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,kBAAwB;IACtD;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
+{"version":3,"file":"ownermodel.model.js","sourceRoot":"","sources":["../../src/models/ownermodel.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,wCAAwC;AACxC,OAAO,EAAmB,SAAS,EAAuB,SAAS,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAGvC;;;;;GAKG;AACH,MAAM,OAAgB,kBAAmC,SAAQ,SAAS;IACxE;;OAEG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,KAAoD;QAC5D,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,GAAiB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/E,IAAI,CAAC,GAAG,CAAC,KAAY,CAAC,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACvC,CAAC;IACH,CAAC;IACD;;;OAGG;IACH,MAAM,CAAW;IAQjB;;;OAGG;IACH,QAAQ,CAAC,IAAuB;QAC9B,IAAI,CAAC,KAAK,KAAK,IAAI,SAAS,CAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,OAA0B,EAAE,MAAc;QACrD,mBAAmB;QACnB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,YAAY,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACvC,OAAO,gDAAgD,CAAC;QAC1D,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,+BAA+B,CAAC;QACzC,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,0EAA0E;QAC5E,CAAC;QACD,OAAO,OAAO,CAAC,gBAAgB,EAAE,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC;IACpE,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAA2B;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,KAAK,EAAE,YAAY,OAAO,CAAC,gBAAgB,EAAE,oBAAoB;YACjE,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,MAAM;QACJ,MAAM,MAAM,GAAS,KAAK,CAAC,MAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAQ,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,GAAI,IAAY,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAG,IAAY,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,UAAW,SAAQ,kBAAwB;IACtD;;;OAGG;IACH,aAAa;QACX,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/lib/models/password.model.d.ts

@@ -0,0 +1,78 @@
+import { WEBDA_STORAGE } from "@webda/models";
+import * as WebdaError from "../errors/errors.js";
+import type { User } from "./user.model.js";
+/** Rule a candidate password must satisfy */
+export interface PasswordPolicy {
+    /**
+     * @param password - candidate password
+     * @param user - user setting it, when known
+     * @returns true when acceptable
+     */
+    validate(password: string, user?: User): Promise<boolean>;
+}
+/**
+ * Replace the active password policy (undefined restores the default `.{8,}`)
+ * @param policy - the policy
+ */
+export declare function registerPasswordPolicy(policy: PasswordPolicy | undefined): void;
+/**
+ * Get the active password policy
+ * @returns the policy
+ */
+export declare function usePasswordPolicy(): PasswordPolicy;
+/** Raised when a password does not satisfy the active policy (400 PASSWORD_POLICY) */
+export declare class PasswordPolicyError extends WebdaError.HttpError {
+    /** @param message - error message */
+    constructor(message?: string);
+}
+/**
+ * Non-enumerable flag set on a User whose data carried a v3 top-level `__password` mapped onto `password` at
+ * hydration: its stored record still has the v3 layout until it is saved again (`webda auth migrate`)
+ */
+export declare const V3_PASSWORD_MAPPED: unique symbol;
+/**
+ * Password credential of a user: bcrypt hash and change timestamp
+ * @WebdaBehavior Webda/Password
+ */
+export declare class Password {
+    [WEBDA_STORAGE]: Record<string, any>;
+    /** bcrypt hash, never output */
+    __hash?: string;
+    /** Last change, ms since epoch */
+    changedAt?: number;
+    /**
+     * Owning user (set by behavior hydration)
+     * @returns the user or undefined when detached
+     */
+    protected getUser(): User | undefined;
+    /**
+     * @returns true when a password is set
+     */
+    hasPassword(): boolean;
+    /**
+     * Compare a candidate with the stored hash
+     * @param plain - candidate password
+     * @returns true when it matches
+     */
+    verify(plain: string): Promise<boolean>;
+    /**
+     * Validate against the policy and store a new hash (does not save the user)
+     * @param plain - new password
+     */
+    set(plain: string): Promise<void>;
+    /**
+     * Store an existing hash (migration)
+     * @param hash - bcrypt hash
+     * @param changedAt - change timestamp
+     */
+    setHash(hash: string, changedAt?: number): void;
+    /**
+     * Change the password of the owning user
+     * @param current - current password
+     * @param next - new password
+     */
+    change(current: string, next: string): Promise<void>;
+    get parent(): any;
+    toJSON(): Record<string, any>;
+}
+//# sourceMappingURL=password.model.d.ts.map

package/lib/models/password.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.model.d.ts","sourceRoot":"","sources":["../../src/models/password.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,KAAK,UAAU,MAAM,qBAAqB,CAAC;AAGlD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAE5C,6CAA6C;AAC7C,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAKD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,CAE/E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAElD;AAED,sFAAsF;AACtF,qBAAa,mBAAoB,SAAQ,UAAU,CAAC,SAAS;IAC3D,qCAAqC;IACrC,YAAY,OAAO,GAAE,MAA6C,EAGjE;CACF;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,eAA6B,CAAC;AAE7D;;;GAGG;AACH,qBAAa,QAAQ;IACnB,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAM;IAC1C,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,SAAS,CAAC,OAAO,IAAI,IAAI,GAAG,SAAS,CAEpC;IAED;;OAEG;IACH,WAAW,IAAI,OAAO,CAErB;IAED;;;;OAIG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAU5C;IAED;;;OAGG;IACG,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMtC;IAED;;;;OAIG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,GAAE,MAAmB,GAAG,IAAI,CAG1D;IAED;;;;OAIG;IAEG,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQzD;IACD,IAAI,MAAM,QAAgD;IAC1D,MAAM,wBAcL;CACF"}