@zlooks.cn/password-auth-server 1.0.8 → 1.1.0

package/.hile-rsc/build-mu41ll5m-02df9102/plugin.json

@@ -0,0 +1,126 @@
+{
+  "protocolVersion": 1,
+  "pluginId": "auth.password",
+  "buildId": "build-mu41ll5m-02df9102",
+  "runtime": {
+    "react": "19.2.8",
+    "reactDom": "19.2.8",
+    "rsc": "19.2.8"
+  },
+  "server": {
+    "entry": "server-rsc/index.js",
+    "integrity": "sha256-l3h8Daulm0BJfwweeHGhbAFzeCJQeZDNBc9A8EnKzS0=",
+    "size": 595248
+  },
+  "serverFunctions": [],
+  "clients": [
+    {
+      "id": "auth.password/src/plugin/page-frame#default",
+      "module": "client-browser/src-plugin-page-frame-07c4de56a6-24L24OGL.js",
+      "ssrModule": "client-ssr/src-plugin-page-frame-07c4de56a6-LN2W67ZP.js",
+      "exportName": "default",
+      "chunks": [
+        {
+          "path": "client-browser/chunks/chunk-ZV6MPT36.js",
+          "integrity": "sha256-nBXxFdtW/TJZ6rL/qjXWf5b+9f50eyolwgQ/wqK5sWY=",
+          "size": 1454536
+        }
+      ],
+      "ssrChunks": [
+        {
+          "path": "client-ssr/chunks/chunk-EWBYMJX4.js",
+          "integrity": "sha256-y7EBbPKD/jls8C9T0gvbLPfJIrExxjKI0HMRkgdZPxY=",
+          "size": 1382378
+        }
+      ],
+      "integrity": "sha256-BWhlIHmeEVS/NRaX2+CNwsIyFp6VPhPVSnTwLNzaNa8=",
+      "ssrIntegrity": "sha256-5LLawGustoilEMLuktDShS7ceVc45e9d7yPSdyHlVT4=",
+      "size": 81661,
+      "ssrSize": 525253,
+      "styles": [
+        "client-browser/src-plugin-page-frame-07c4de56a6-3F24AYCH.css"
+      ]
+    },
+    {
+      "id": "auth.password/src/plugin/password-form#default",
+      "module": "client-browser/src-plugin-password-form-3bd63d69e5-MO3JJSBS.js",
+      "ssrModule": "client-ssr/src-plugin-password-form-3bd63d69e5-MWQ7H3E5.js",
+      "exportName": "default",
+      "chunks": [
+        {
+          "path": "client-browser/chunks/chunk-ZV6MPT36.js",
+          "integrity": "sha256-nBXxFdtW/TJZ6rL/qjXWf5b+9f50eyolwgQ/wqK5sWY=",
+          "size": 1454536
+        }
+      ],
+      "ssrChunks": [
+        {
+          "path": "client-ssr/chunks/chunk-EWBYMJX4.js",
+          "integrity": "sha256-y7EBbPKD/jls8C9T0gvbLPfJIrExxjKI0HMRkgdZPxY=",
+          "size": 1382378
+        }
+      ],
+      "integrity": "sha256-GCIqr29sGLCZaBQxRIlPxAgxZ+aGCjDBHc79SryUVLE=",
+      "ssrIntegrity": "sha256-/VE2aLgO1pj4K4yr0J9owOOZsSNScwDnvM16yX+5IpI=",
+      "size": 173584,
+      "ssrSize": 4801433,
+      "styles": [
+        "client-browser/src-plugin-password-form-3bd63d69e5-TRYMJX4F.css"
+      ]
+    }
+  ],
+  "styles": [
+    {
+      "path": "styles/4b3193c4f2b317ffed425ccf401342a4bdd6ccfd5f9c42def3315e776f166975.css",
+      "integrity": "sha256-SzGTxPKzF//tQlzPQBNCpL3WzP1fnELe8zFed28WaXU=",
+      "size": 1266149,
+      "scope": "plugin"
+    },
+    {
+      "path": "client-browser/src-plugin-page-frame-07c4de56a6-3F24AYCH.css",
+      "integrity": "sha256-qGzKKqMEGOzq9wFBdXLCZAHsAMbgCw24JBtE3BN2EWA=",
+      "size": 3891,
+      "scope": "client"
+    },
+    {
+      "path": "client-browser/src-plugin-password-form-3bd63d69e5-TRYMJX4F.css",
+      "integrity": "sha256-M4Xlrb9ikrWsYdYw6ynS4Fq8tVTCeq1Jab1Ta2FcLMA=",
+      "size": 4545,
+      "scope": "client"
+    }
+  ],
+  "routes": [
+    {
+      "path": "/login",
+      "entry": "LoginPage",
+      "prefetch": "assets",
+      "clientReferences": [
+        "auth.password/src/plugin/page-frame#default",
+        "auth.password/src/plugin/password-form#default"
+      ]
+    },
+    {
+      "path": "/register",
+      "entry": "RegistrationPage",
+      "prefetch": "assets",
+      "clientReferences": [
+        "auth.password/src/plugin/page-frame#default",
+        "auth.password/src/plugin/password-form#default"
+      ]
+    },
+    {
+      "path": "/recovery",
+      "entry": "RecoveryPage",
+      "prefetch": "assets",
+      "clientReferences": [
+        "auth.password/src/plugin/page-frame#default",
+        "auth.password/src/plugin/password-form#default"
+      ]
+    }
+  ],
+  "metadata": {
+    "displayName": "密码认证",
+    "description": "邮箱密码、验证码登录、注册及找回密码组件",
+    "navigation": []
+  }
+}

package/.hile-rsc/{build-mu23gtxh-f44b8610 → build-mu41ll5m-02df9102}/server-rsc/index.js

@@ -14844,92 +14844,6 @@ function isBrowserApiFailure(response) {
   return response.code !== 0;
 }
 
-// ../user-shared/dist/identity.js
-var USER_SERVICE_NAMESPACE = "cn.zlooks.user.server";
-
-// ../user-shared/dist/events/snapshots.js
-var userSessionRevocationReasonSchema = external_exports.enum([
-  "logout",
-  "user-request",
-  "family-limit",
-  "credential-recovery"
-]);
-var displayNameSchema = external_exports.string().refine((value) => value === value.trim().normalize("NFKC"), "Display name must be normalized").refine((value) => Array.from(value).length >= 1 && Array.from(value).length <= 160, "Display name must contain 1 to 160 Unicode code points");
-var bioSchema = external_exports.string().refine((value) => value === value.trim().normalize("NFKC"), "Bio must be normalized").refine((value) => Array.from(value).length >= 1 && Array.from(value).length <= 500, "Bio must contain 1 to 500 Unicode code points");
-var httpUrlSchema = external_exports.url().max(2048).refine((value) => {
-  const protocol = new URL(value).protocol;
-  return protocol === "http:" || protocol === "https:";
-}, "URL must use HTTP or HTTPS").refine((value) => value === new URL(value).toString(), "URL must be canonical");
-var emailSchema = external_exports.email().max(320).refine((value) => value === value.toLocaleLowerCase("en-US"), "Email must be lowercase");
-var userEventSnapshotSchema = external_exports.strictObject({
-  id: external_exports.uuid(),
-  displayName: displayNameSchema.nullable(),
-  avatar: httpUrlSchema.nullable(),
-  homepage: httpUrlSchema.nullable(),
-  bio: bioSchema.nullable(),
-  email: emailSchema.nullable(),
-  emailVerified: external_exports.boolean(),
-  status: external_exports.enum(["active", "disabled", "deleted"]),
-  createdAt: external_exports.iso.datetime({ offset: true }),
-  updatedAt: external_exports.iso.datetime({ offset: true }),
-  version: external_exports.number().int().positive()
-}).superRefine((user, context) => {
-  if (user.emailVerified && user.email === null) {
-    context.addIssue({
-      code: "custom",
-      message: "A verified user snapshot must include its email",
-      path: ["email"]
-    });
-  }
-  if (Date.parse(user.updatedAt) < Date.parse(user.createdAt)) {
-    context.addIssue({
-      code: "custom",
-      message: "User updated time must not precede creation time",
-      path: ["updatedAt"]
-    });
-  }
-}).readonly();
-var userSessionFamilyEventSnapshotSchema = external_exports.strictObject({
-  id: external_exports.uuid(),
-  userId: external_exports.uuid(),
-  createdAt: external_exports.iso.datetime({ offset: true }),
-  expiresAt: external_exports.iso.datetime({ offset: true }),
-  lastSeenAt: external_exports.iso.datetime({ offset: true }),
-  revokedAt: external_exports.iso.datetime({ offset: true }).nullable(),
-  revokeReason: userSessionRevocationReasonSchema.nullable()
-}).superRefine((session, context) => {
-  const createdAt = Date.parse(session.createdAt);
-  if (session.revokedAt === null !== (session.revokeReason === null)) {
-    context.addIssue({
-      code: "custom",
-      message: "Session revocation time and reason must be present together",
-      path: ["revokedAt"]
-    });
-  }
-  if (Date.parse(session.expiresAt) <= createdAt) {
-    context.addIssue({
-      code: "custom",
-      message: "Session expiry must follow creation time",
-      path: ["expiresAt"]
-    });
-  }
-  const lastSeenAt = Date.parse(session.lastSeenAt);
-  if (lastSeenAt < createdAt || lastSeenAt > Date.parse(session.expiresAt)) {
-    context.addIssue({
-      code: "custom",
-      message: "Session last-seen time must fall within its lifetime",
-      path: ["lastSeenAt"]
-    });
-  }
-  if (session.revokedAt !== null && Date.parse(session.revokedAt) < createdAt) {
-    context.addIssue({
-      code: "custom",
-      message: "Session revoked time must not precede creation time",
-      path: ["revokedAt"]
-    });
-  }
-}).readonly();
-
 // ../event-bus/dist/index.js
 var EVENT_PROTOCOL = "zlooks.event";
 var EVENT_PROTOCOL_VERSION = 1;
@@ -15072,6 +14986,92 @@ function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 
+// ../user-shared/dist/identity.js
+var USER_SERVICE_NAMESPACE = "cn.zlooks.user.server";
+
+// ../user-shared/dist/events/snapshots.js
+var userSessionRevocationReasonSchema = external_exports.enum([
+  "logout",
+  "user-request",
+  "family-limit",
+  "credential-recovery"
+]);
+var displayNameSchema = external_exports.string().refine((value) => value === value.trim().normalize("NFKC"), "Display name must be normalized").refine((value) => Array.from(value).length >= 1 && Array.from(value).length <= 160, "Display name must contain 1 to 160 Unicode code points");
+var bioSchema = external_exports.string().refine((value) => value === value.trim().normalize("NFKC"), "Bio must be normalized").refine((value) => Array.from(value).length >= 1 && Array.from(value).length <= 500, "Bio must contain 1 to 500 Unicode code points");
+var httpUrlSchema = external_exports.url().max(2048).refine((value) => {
+  const protocol = new URL(value).protocol;
+  return protocol === "http:" || protocol === "https:";
+}, "URL must use HTTP or HTTPS").refine((value) => value === new URL(value).toString(), "URL must be canonical");
+var emailSchema = external_exports.email().max(320).refine((value) => value === value.toLocaleLowerCase("en-US"), "Email must be lowercase");
+var userEventSnapshotSchema = external_exports.strictObject({
+  id: external_exports.uuid(),
+  displayName: displayNameSchema.nullable(),
+  avatar: httpUrlSchema.nullable(),
+  homepage: httpUrlSchema.nullable(),
+  bio: bioSchema.nullable(),
+  email: emailSchema.nullable(),
+  emailVerified: external_exports.boolean(),
+  status: external_exports.enum(["active", "disabled", "deleted"]),
+  createdAt: external_exports.iso.datetime({ offset: true }),
+  updatedAt: external_exports.iso.datetime({ offset: true }),
+  version: external_exports.number().int().positive()
+}).superRefine((user, context) => {
+  if (user.emailVerified && user.email === null) {
+    context.addIssue({
+      code: "custom",
+      message: "A verified user snapshot must include its email",
+      path: ["email"]
+    });
+  }
+  if (Date.parse(user.updatedAt) < Date.parse(user.createdAt)) {
+    context.addIssue({
+      code: "custom",
+      message: "User updated time must not precede creation time",
+      path: ["updatedAt"]
+    });
+  }
+}).readonly();
+var userSessionFamilyEventSnapshotSchema = external_exports.strictObject({
+  id: external_exports.uuid(),
+  userId: external_exports.uuid(),
+  createdAt: external_exports.iso.datetime({ offset: true }),
+  expiresAt: external_exports.iso.datetime({ offset: true }),
+  lastSeenAt: external_exports.iso.datetime({ offset: true }),
+  revokedAt: external_exports.iso.datetime({ offset: true }).nullable(),
+  revokeReason: userSessionRevocationReasonSchema.nullable()
+}).superRefine((session, context) => {
+  const createdAt = Date.parse(session.createdAt);
+  if (session.revokedAt === null !== (session.revokeReason === null)) {
+    context.addIssue({
+      code: "custom",
+      message: "Session revocation time and reason must be present together",
+      path: ["revokedAt"]
+    });
+  }
+  if (Date.parse(session.expiresAt) <= createdAt) {
+    context.addIssue({
+      code: "custom",
+      message: "Session expiry must follow creation time",
+      path: ["expiresAt"]
+    });
+  }
+  const lastSeenAt = Date.parse(session.lastSeenAt);
+  if (lastSeenAt < createdAt || lastSeenAt > Date.parse(session.expiresAt)) {
+    context.addIssue({
+      code: "custom",
+      message: "Session last-seen time must fall within its lifetime",
+      path: ["lastSeenAt"]
+    });
+  }
+  if (session.revokedAt !== null && Date.parse(session.revokedAt) < createdAt) {
+    context.addIssue({
+      code: "custom",
+      message: "Session revoked time must not precede creation time",
+      path: ["revokedAt"]
+    });
+  }
+}).readonly();
+
 // ../user-shared/dist/events/definition.js
 function defineUserEvent(type, aggregateType2, dataSchema5, aggregateId2) {
   return defineEvent(type, dataSchema5, {
@@ -15203,6 +15203,7 @@ var USER_EVENT_CATALOG = defineEventCatalog({
 
 // ../user-shared/dist/index.js
 var USER_CREDENTIAL_LIFECYCLE_PROTOCOL = "zlooks.user.credential-lifecycle";
+var USER_CREDENTIAL_LIFECYCLE_EVENT_TYPE = "cn.zlooks.password.credential-lifecycle.v1";
 var USER_BROWSER_AUTH_METHODS_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/methods");
 var USER_BROWSER_AUTH_TRANSACTIONS_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/transactions");
 var USER_BROWSER_LOGOUT_PATH = browserApiPath(USER_SERVICE_NAMESPACE, "/api/auth/logout");
@@ -15425,6 +15426,11 @@ var userCredentialLifecycleEventSchema = external_exports.strictObject({
   email: external_exports.email().max(320),
   occurredAt: external_exports.iso.datetime({ offset: true })
 }).readonly();
+var userCredentialLifecycleDomainEvent = defineEvent(USER_CREDENTIAL_LIFECYCLE_EVENT_TYPE, userCredentialLifecycleEventSchema, {
+  producer: "cn.zlooks.password.auth.server",
+  aggregateType: "credential",
+  aggregateId: ({ subject }) => subject
+});
 var userCredentialLifecycleResponseSchema = external_exports.strictObject({
   acknowledged: external_exports.literal(true)
 }).readonly();
@@ -15499,7 +15505,7 @@ var __hileRemoteClientBoundary = __hileRegisterClientReference(function() {
 function __hileDefault(props) {
   return React.createElement(__hileRemoteClientBoundary, {
     pluginId: "auth.password",
-    buildId: "build-mu23gtxh-f44b8610",
+    buildId: "build-mu41ll5m-02df9102",
     referenceId: "auth.password/src/plugin/password-form#default",
     exportName: "default",
     props
@@ -15516,7 +15522,7 @@ var __hileRemoteClientBoundary2 = __hileRegisterClientReference2(function() {
 function __hileDefault2(props) {
   return React2.createElement(__hileRemoteClientBoundary2, {
     pluginId: "auth.password",
-    buildId: "build-mu23gtxh-f44b8610",
+    buildId: "build-mu41ll5m-02df9102",
     referenceId: "auth.password/src/plugin/page-frame#default",
     exportName: "default",
     props

package/dist/password/password-authenticator.d.ts

@@ -1,3 +1,4 @@
+import type { DomainEventPublisher } from '@zlooks.cn/event-client';
 import type { PasswordAuthConfig } from '../config/schema.js';
 import type { PasswordCredentialRepository } from './credential-repository.js';
 import type { PasswordAttemptCoordinator } from './attempt-coordinator.js';
@@ -25,8 +26,9 @@ export declare class PasswordAuthenticator {
     private readonly unknownCredentialHash;
     private readonly clock;
     private readonly attemptCoordinator?;
+    private readonly lifecycleEvents?;
     private constructor();
-    static create(repository: PasswordCredentialRepository, policy: PasswordPolicy, clock?: () => Date, attemptCoordinator?: PasswordAttemptCoordinator): Promise<PasswordAuthenticator>;
+    static create(repository: PasswordCredentialRepository, policy: PasswordPolicy, clock?: () => Date, attemptCoordinator?: PasswordAttemptCoordinator, lifecycleEvents?: DomainEventPublisher): Promise<PasswordAuthenticator>;
     register(input: {
         readonly identifier: string;
         readonly password: string;
@@ -53,6 +55,7 @@ export declare class PasswordAuthenticator {
         readonly identifier: string;
         readonly password: string;
     }): Promise<VerificationResult>;
+    private publishLifecycleEvent;
 }
 export declare function normalizeEmailIdentifier(value: string): string | undefined;
 export {};

package/dist/password/password-authenticator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password-authenticator.d.ts","sourceRoot":"","sources":["../../src/password/password-authenticator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,KAAK,cAAc,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;AAErD,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAEnE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAC7G;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAEjE,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IALtC,OAAO,eAMH;IAEJ,OAAoB,MAAM,CACxB,UAAU,EAAE,4BAA4B,EACxC,MAAM,EAAE,cAAc,EACtB,KAAK,GAAE,MAAM,IAAuB,EACpC,kBAAkB,CAAC,EAAE,0BAA0B,GAC9C,OAAO,CAAC,qBAAqB,CAAC,CAGhC;IAEY,QAAQ,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAQ9B;YAEa,kBAAkB;YAkBlB,mBAAmB;IAWpB,MAAM,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAM9B;YAEa,gBAAgB;IAmCjB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC,CAAC,CAIF;IAEY,gBAAgB,CAAC,KAAK,EAAE;QACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoC9B;IAEY,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAM3E;IAEY,aAAa,CAAC,KAAK,EAAE;QAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6B9B;CACF;AAaD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG1E"}
+{"version":3,"file":"password-authenticator.d.ts","sourceRoot":"","sources":["../../src/password/password-authenticator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAMpE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAK9D,OAAO,KAAK,EAEV,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAE3E,KAAK,cAAc,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;AAErD,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAEnE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAC7G;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAEjE,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACpC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;IANnC,OAAO,eAOH;IAEJ,OAAoB,MAAM,CACxB,UAAU,EAAE,4BAA4B,EACxC,MAAM,EAAE,cAAc,EACtB,KAAK,GAAE,MAAM,IAAuB,EACpC,kBAAkB,CAAC,EAAE,0BAA0B,EAC/C,eAAe,CAAC,EAAE,oBAAoB,GACrC,OAAO,CAAC,qBAAqB,CAAC,CAUhC;IAEY,QAAQ,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAQ9B;YAEa,kBAAkB;YAkBlB,mBAAmB;IAWpB,MAAM,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAM9B;YAEa,gBAAgB;IAmCjB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC,CAAC,CAIF;IAEY,gBAAgB,CAAC,KAAK,EAAE;QACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmD9B;IAEY,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAM3E;IAEY,aAAa,CAAC,KAAK,EAAE;QAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA4C9B;YAEa,qBAAqB;CAapC;AAkBD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG1E"}

package/dist/password/password-authenticator.js

@@ -1,22 +1,26 @@
 import { randomBytes, randomUUID } from 'node:crypto';
 import { hash, verify } from '@node-rs/argon2';
+import { createUserCredentialLifecycleDomainEvent, USER_CREDENTIAL_LIFECYCLE_PROTOCOL, } from '@zlooks.cn/user-shared';
 import { z } from 'zod';
+import { PASSWORD_AUTH_EXTENSION_ID, PASSWORD_AUTH_METHOD_ID, } from '../service-identity.js';
 export class PasswordAuthenticator {
     repository;
     policy;
     unknownCredentialHash;
     clock;
     attemptCoordinator;
-    constructor(repository, policy, unknownCredentialHash, clock, attemptCoordinator) {
+    lifecycleEvents;
+    constructor(repository, policy, unknownCredentialHash, clock, attemptCoordinator, lifecycleEvents) {
         this.repository = repository;
         this.policy = policy;
         this.unknownCredentialHash = unknownCredentialHash;
         this.clock = clock;
         this.attemptCoordinator = attemptCoordinator;
+        this.lifecycleEvents = lifecycleEvents;
     }
-    static async create(repository, policy, clock = () => new Date(), attemptCoordinator) {
+    static async create(repository, policy, clock = () => new Date(), attemptCoordinator, lifecycleEvents) {
         const unknownCredentialHash = await hash(randomBytes(32), argonOptions(policy));
-        return new PasswordAuthenticator(repository, policy, unknownCredentialHash, clock, attemptCoordinator);
+        return new PasswordAuthenticator(repository, policy, unknownCredentialHash, clock, attemptCoordinator, lifecycleEvents);
     }
     async register(input) {
         const identifier = normalizeEmailIdentifier(input.identifier);
@@ -98,9 +102,17 @@ export class PasswordAuthenticator {
         const operation = async () => {
             const existing = await this.repository.findByIdentifier(identifier);
             if (existing?.registrationTransactionId === input.transactionId) {
-                return await verify(existing.passwordHash, input.password).catch(() => false)
-                    ? { ok: true, subject: existing.subject, identifier }
-                    : { ok: false, code: 'registration-rejected' };
+                if (!await verify(existing.passwordHash, input.password).catch(() => false)) {
+                    return { ok: false, code: 'registration-rejected' };
+                }
+                await this.publishLifecycleEvent({
+                    transactionId: input.transactionId,
+                    kind: 'registration',
+                    subject: existing.subject,
+                    identifier,
+                    occurredAt: requiredLifecycleTime(existing.emailVerifiedAt, 'registration'),
+                });
+                return { ok: true, subject: existing.subject, identifier };
             }
             if (existing) {
                 return { ok: false, code: 'registration-rejected' };
@@ -125,6 +137,13 @@ export class PasswordAuthenticator {
             const credential = await this.repository.findByIdentifier(identifier);
             if (!credential)
                 throw new Error('Created password credential is unavailable');
+            await this.publishLifecycleEvent({
+                transactionId: input.transactionId,
+                kind: 'registration',
+                subject: credential.subject,
+                identifier,
+                occurredAt: now,
+            });
             return { ok: true, subject: credential.subject, identifier };
         };
         return this.attemptCoordinator ? this.attemptCoordinator.run(identifier, operation) : operation();
@@ -147,9 +166,17 @@ export class PasswordAuthenticator {
             if (!credential)
                 return { ok: false, code: 'invalid-credentials' };
             if (credential.passwordChangedTransactionId === input.transactionId) {
-                return await verify(credential.passwordHash, input.password).catch(() => false)
-                    ? { ok: true, subject: credential.subject, identifier, emailVerified: true }
-                    : { ok: false, code: 'invalid-credentials' };
+                if (!await verify(credential.passwordHash, input.password).catch(() => false)) {
+                    return { ok: false, code: 'invalid-credentials' };
+                }
+                await this.publishLifecycleEvent({
+                    transactionId: input.transactionId,
+                    kind: 'recovery',
+                    subject: credential.subject,
+                    identifier,
+                    occurredAt: requiredLifecycleTime(credential.passwordChangedAt, 'recovery'),
+                });
+                return { ok: true, subject: credential.subject, identifier, emailVerified: true };
             }
             const changedAt = this.clock();
             await this.repository.updatePasswordWithLifecycleEvent(identifier, await hash(input.password, argonOptions(this.policy)), changedAt, {
@@ -159,10 +186,36 @@ export class PasswordAuthenticator {
                 identifier,
                 occurredAt: changedAt,
             });
+            await this.publishLifecycleEvent({
+                transactionId: input.transactionId,
+                kind: 'recovery',
+                subject: credential.subject,
+                identifier,
+                occurredAt: changedAt,
+            });
             return { ok: true, subject: credential.subject, identifier, emailVerified: true };
         };
         return this.attemptCoordinator ? this.attemptCoordinator.run(identifier, operation) : operation();
     }
+    async publishLifecycleEvent(event) {
+        if (!this.lifecycleEvents)
+            return;
+        await this.lifecycleEvents.publish(createUserCredentialLifecycleDomainEvent({
+            protocol: USER_CREDENTIAL_LIFECYCLE_PROTOCOL,
+            kind: event.kind,
+            authenticationTransactionId: event.transactionId,
+            extensionId: PASSWORD_AUTH_EXTENSION_ID,
+            methodId: PASSWORD_AUTH_METHOD_ID,
+            subject: event.subject,
+            email: event.identifier,
+            occurredAt: event.occurredAt.toISOString(),
+        }));
+    }
+}
+function requiredLifecycleTime(value, kind) {
+    if (!value)
+        throw new Error(`Password ${kind} lifecycle time is unavailable`);
+    return value;
 }
 function argonOptions(policy) {
     return {

package/dist/password/password-authenticator.js.map

@@ -1 +1 @@
-{"version":3,"file":"password-authenticator.js","sourceRoot":"","sources":["../../src/password/password-authenticator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,MAAM,OAAO,qBAAqB;IAEb,UAAU;IACV,MAAM;IACN,qBAAqB;IACrB,KAAK;IACL,kBAAkB;IALrC,YACmB,UAAwC,EACxC,MAAsB,EACtB,qBAA6B,EAC7B,KAAiB,EACjB,kBAA+C;0BAJ/C,UAAU;sBACV,MAAM;qCACN,qBAAqB;qBACrB,KAAK;kCACL,kBAAkB;IAClC,CAAC;IAEG,MAAM,CAAC,KAAK,CAAC,MAAM,CACxB,UAAwC,EACxC,MAAsB,EACtB,KAAK,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACpC,kBAA+C;QAE/C,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAChF,OAAO,IAAI,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACzG,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,KAGrB;QACC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;QACtD,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACpG,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,UAAkB,EAClB,QAAgB;QAEhB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACpE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEpE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3C,OAAO;YACP,UAAU;YACV,YAAY;SACb,CAAC,CAAC;QACH,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,UAAkB,EAAE,QAAgB;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnE,OAAO,QAAQ,CAAC,EAAE;YAChB,CAAC,CAAC;gBACA,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC;YACD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAGnB;QACC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,UAAU,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,UAA8B,EAC9B,QAAgB;QAEhB,MAAM,UAAU,GAAG,UAAU;YAC3B,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC;YACpD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,MAAM,CACxB,UAAU,EAAE,YAAY,IAAI,IAAI,CAAC,qBAAqB,EACtD,QAAQ,CACT,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;YAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CACjC,UAAW,EACX,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB;gBACvC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBACjD,CAAC,CAAC,SAAS,CACd,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,UAAW,CAAC,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,aAAa,EAAE,UAAU,CAAC,eAAe,KAAK,SAAS;SACxD,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,KAAa;QAI1C,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;IACpG,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,KAI7B;QACC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;QACtD,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,IAAiC,EAAE;YACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACpE,IAAI,QAAQ,EAAE,yBAAyB,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;gBAChE,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;oBAC3E,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE;oBACrD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;YACnD,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;YACtD,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC;gBAC7D,OAAO;gBACP,UAAU;gBACV,YAAY,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnE,eAAe,EAAE,GAAG;gBACpB,iBAAiB,EAAE,GAAG;aACvB,EAAE;gBACD,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,IAAI,EAAE,cAAc;gBACpB,OAAO;gBACP,UAAU;gBACV,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;YAClE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;QAC/D,CAAC,CAAC;QACF,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACpG,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,KAAa;QAC5C,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QAClF,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACpF,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,KAI1B;QACC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,IAAiC,EAAE;YACxD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YACnE,IAAI,UAAU,CAAC,4BAA4B,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;gBACpE,OAAO,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;oBAC7E,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE;oBAC5E,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YACjD,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,UAAU,CAAC,gCAAgC,CACpD,UAAU,EACV,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EACrD,SAAS,EACT;gBACE,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,UAAU;gBACV,UAAU,EAAE,SAAS;aACtB,CACF,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACpF,CAAC,CAAC;QACF,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACpG,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAsB;IAC1C,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,aAAa;QAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,EAAE;KACL,CAAC;AACb,CAAC;AAED,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEjD,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,qBAAqB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAsB;IAC7D,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC;IAC5D,OAAO,KAAK,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC;AAChE,CAAC"}
+{"version":3,"file":"password-authenticator.js","sourceRoot":"","sources":["../../src/password/password-authenticator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE/C,OAAO,EACL,wCAAwC,EACxC,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAiBhC,MAAM,OAAO,qBAAqB;IAEb,UAAU;IACV,MAAM;IACN,qBAAqB;IACrB,KAAK;IACL,kBAAkB;IAClB,eAAe;IANlC,YACmB,UAAwC,EACxC,MAAsB,EACtB,qBAA6B,EAC7B,KAAiB,EACjB,kBAA+C,EAC/C,eAAsC;0BALtC,UAAU;sBACV,MAAM;qCACN,qBAAqB;qBACrB,KAAK;kCACL,kBAAkB;+BAClB,eAAe;IAC/B,CAAC;IAEG,MAAM,CAAC,KAAK,CAAC,MAAM,CACxB,UAAwC,EACxC,MAAsB,EACtB,KAAK,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EACpC,kBAA+C,EAC/C,eAAsC;QAEtC,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAChF,OAAO,IAAI,qBAAqB,CAC9B,UAAU,EACV,MAAM,EACN,qBAAqB,EACrB,KAAK,EACL,kBAAkB,EAClB,eAAe,CAChB,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,KAGrB;QACC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;QACtD,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACpG,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,UAAkB,EAClB,QAAgB;QAEhB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACpE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAEpE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3C,OAAO;YACP,UAAU;YACV,YAAY;SACb,CAAC,CAAC;QACH,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,UAAkB,EAAE,QAAgB;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnE,OAAO,QAAQ,CAAC,EAAE;YAChB,CAAC,CAAC;gBACA,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC;YACD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAGnB;QACC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,UAAU,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,UAA8B,EAC9B,QAAgB;QAEhB,MAAM,UAAU,GAAG,UAAU;YAC3B,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC;YACpD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,KAAK,GAAG,MAAM,MAAM,CACxB,UAAU,EAAE,YAAY,IAAI,IAAI,CAAC,qBAAqB,EACtD,QAAQ,CACT,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;YAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CACjC,UAAW,EACX,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB;gBACvC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;gBACjD,CAAC,CAAC,SAAS,CACd,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,UAAW,CAAC,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,aAAa,EAAE,UAAU,CAAC,eAAe,KAAK,SAAS;SACxD,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,KAAa;QAI1C,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;IACpG,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,KAI7B;QACC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;QACtD,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,IAAiC,EAAE;YACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACpE,IAAI,QAAQ,EAAE,yBAAyB,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;gBAChE,IAAI,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;gBACtD,CAAC;gBACD,MAAM,IAAI,CAAC,qBAAqB,CAAC;oBAC/B,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,UAAU;oBACV,UAAU,EAAE,qBAAqB,CAAC,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC;iBAC5E,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;YAC7D,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;YACtD,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC;gBAC7D,OAAO;gBACP,UAAU;gBACV,YAAY,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnE,eAAe,EAAE,GAAG;gBACpB,iBAAiB,EAAE,GAAG;aACvB,EAAE;gBACD,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,IAAI,EAAE,cAAc;gBACpB,OAAO;gBACP,UAAU;gBACV,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;YAClE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC/E,MAAM,IAAI,CAAC,qBAAqB,CAAC;gBAC/B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,UAAU;gBACV,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;QAC/D,CAAC,CAAC;QACF,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACpG,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,KAAa;QAC5C,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QAClF,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACpF,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,KAI1B;QACC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,IAAiC,EAAE;YACxD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;YACnE,IAAI,UAAU,CAAC,4BAA4B,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;gBACpE,IAAI,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;gBACpD,CAAC;gBACD,MAAM,IAAI,CAAC,qBAAqB,CAAC;oBAC/B,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,UAAU;oBACV,UAAU,EAAE,qBAAqB,CAAC,UAAU,CAAC,iBAAiB,EAAE,UAAU,CAAC;iBAC5E,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;YACpF,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,UAAU,CAAC,gCAAgC,CACpD,UAAU,EACV,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EACrD,SAAS,EACT;gBACE,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,UAAU;gBACV,UAAU,EAAE,SAAS;aACtB,CACF,CAAC;YACF,MAAM,IAAI,CAAC,qBAAqB,CAAC;gBAC/B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,UAAU;gBACV,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACpF,CAAC,CAAC;QACF,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACpG,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,KAAuC;QACzE,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO;QAClC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,wCAAwC,CAAC;YAC1E,QAAQ,EAAE,kCAAkC;YAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,2BAA2B,EAAE,KAAK,CAAC,aAAa;YAChD,WAAW,EAAE,0BAA0B;YACvC,QAAQ,EAAE,uBAAuB;YACjC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,UAAU;YACvB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;SAC3C,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,KAAuB,EAAE,IAAY;IAClE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,gCAAgC,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,MAAsB;IAC1C,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,aAAa;QAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,EAAE;KACL,CAAC;AACb,CAAC;AAED,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEjD,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,qBAAqB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAsB;IAC7D,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC;IAC5D,OAAO,KAAK,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC;AAChE,CAAC"}

package/dist/password/typeorm-credential-repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typeorm-credential-repository.d.ts","sourceRoot":"","sources":["../../src/password/typeorm-credential-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAKlD,OAAO,KAAK,EACV,kBAAkB,EAClB,gCAAgC,EAChC,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AAEpC,qBAAa,mCAAoC,YAAW,4BAA4B;IACnE,OAAO,CAAC,QAAQ,CAAC,UAAU;IAA9C,YAAoC,UAAU,EAAE,UAAU,EAAI;IAEjD,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAiBzF;IAEY,MAAM,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAkBpE;IAEY,wBAAwB,CACnC,UAAU,EAAE,kBAAkB,EAC9B,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,OAAO,CAAC,CAqBlB;IAEY,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhF;IAEY,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK5D;IAEY,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAKlF;IAEY,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAYpG;IAEY,gCAAgC,CAC3C,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,IAAI,EACf,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,IAAI,CAAC,CAgBf;CACF"}
+{"version":3,"file":"typeorm-credential-repository.d.ts","sourceRoot":"","sources":["../../src/password/typeorm-credential-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,KAAK,EACV,kBAAkB,EAClB,gCAAgC,EAChC,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AAEpC,qBAAa,mCAAoC,YAAW,4BAA4B;IACnE,OAAO,CAAC,QAAQ,CAAC,UAAU;IAA9C,YAAoC,UAAU,EAAE,UAAU,EAAI;IAEjD,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAiBzF;IAEY,MAAM,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAkBpE;IAEY,wBAAwB,CACnC,UAAU,EAAE,kBAAkB,EAC9B,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,OAAO,CAAC,CAElB;IAEY,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhF;IAEY,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK5D;IAEY,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAKlF;IAEY,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAYpG;IAEY,gCAAgC,CAC3C,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,IAAI,EACf,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,IAAI,CAAC,CAaf;CACF"}

package/dist/password/typeorm-credential-repository.js

@@ -1,5 +1,5 @@
 import { IsNull } from 'typeorm';
-import { PasswordCredentialEntity, PasswordCredentialLifecycleOutboxEntity, } from '../persistence/entities.js';
+import { PasswordCredentialEntity } from '../persistence/entities.js';
 export class TypeOrmPasswordCredentialRepository {
     dataSource;
     constructor(dataSource) {
@@ -45,28 +45,7 @@ export class TypeOrmPasswordCredentialRepository {
         }
     }
     async createWithLifecycleEvent(credential, event) {
-        try {
-            await this.dataSource.transaction(async (manager) => {
-                await manager.getRepository(PasswordCredentialEntity).insert({
-                    subject: credential.subject,
-                    identifier: credential.identifier,
-                    passwordHash: credential.passwordHash,
-                    failedAttempts: 0,
-                    lockedUntil: null,
-                    emailVerifiedAt: credential.emailVerifiedAt ?? null,
-                    passwordChangedAt: credential.passwordChangedAt ?? null,
-                    registrationTransactionId: event.transactionId,
-                    passwordChangedTransactionId: credential.passwordChangedTransactionId ?? null,
-                });
-                await manager.getRepository(PasswordCredentialLifecycleOutboxEntity).insert(toOutboxRow(event));
-            });
-            return true;
-        }
-        catch (error) {
-            if (isUniqueViolation(error))
-                return false;
-            throw error;
-        }
+        return this.create({ ...credential, registrationTransactionId: event.transactionId });
     }
     async recordFailure(identifier, lockedUntil) {
         await this.dataSource.transaction(async (manager) => {
@@ -93,32 +72,18 @@ export class TypeOrmPasswordCredentialRepository {
         });
     }
     async updatePasswordWithLifecycleEvent(identifier, passwordHash, changedAt, event) {
-        await this.dataSource.transaction(async (manager) => {
-            const updated = await manager.getRepository(PasswordCredentialEntity).update({ identifier }, {
-                passwordHash,
-                passwordChangedAt: changedAt,
-                emailVerifiedAt: changedAt,
-                failedAttempts: 0,
-                lockedUntil: null,
-                passwordChangedTransactionId: event.transactionId,
-            });
-            if (updated.affected !== 1)
-                throw new Error('Password credential is unavailable');
-            await manager.getRepository(PasswordCredentialLifecycleOutboxEntity).insert(toOutboxRow(event));
+        const updated = await this.dataSource.getRepository(PasswordCredentialEntity).update({ identifier }, {
+            passwordHash,
+            passwordChangedAt: changedAt,
+            emailVerifiedAt: changedAt,
+            failedAttempts: 0,
+            lockedUntil: null,
+            passwordChangedTransactionId: event.transactionId,
         });
+        if (updated.affected !== 1)
+            throw new Error('Password credential is unavailable');
     }
 }
-function toOutboxRow(event) {
-    return {
-        transactionId: event.transactionId,
-        kind: event.kind,
-        subject: event.subject,
-        identifier: event.identifier,
-        occurredAt: event.occurredAt,
-        attempts: 0,
-        nextAttemptAt: event.occurredAt,
-    };
-}
 function isUniqueViolation(error) {
     return typeof error === 'object' && error !== null && 'code' in error && error.code === '23505';
 }