n8n 1.56.2 → 1.57.0

package/dist/controllers/oauth/oAuth1Credential.controller.js

@@ -1,152 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth1CredentialController = void 0;
-const axios_1 = __importDefault(require("axios"));
-const oauth_1_0a_1 = __importDefault(require("oauth-1.0a"));
-const crypto_1 = require("crypto");
-const decorators_1 = require("../../decorators");
-const ResponseHelper_1 = require("../../ResponseHelper");
-const abstractOAuth_controller_1 = require("./abstractOAuth.controller");
-const not_found_error_1 = require("../../errors/response-errors/not-found.error");
-const algorithmMap = {
-    'HMAC-SHA256': 'sha256',
-    'HMAC-SHA512': 'sha512',
-    'HMAC-SHA1': 'sha1',
-};
-let OAuth1CredentialController = class OAuth1CredentialController extends abstractOAuth_controller_1.AbstractOAuthController {
-    constructor() {
-        super(...arguments);
-        this.oauthVersion = 1;
-    }
-    async getAuthUri(req) {
-        const credential = await this.getCredential(req);
-        const additionalData = await this.getAdditionalData();
-        const decryptedDataOriginal = await this.getDecryptedData(credential, additionalData);
-        const oauthCredentials = this.applyDefaultsAndOverwrites(credential, decryptedDataOriginal, additionalData);
-        const [csrfSecret, state] = this.createCsrfState(credential.id);
-        const signatureMethod = oauthCredentials.signatureMethod;
-        const oAuthOptions = {
-            consumer: {
-                key: oauthCredentials.consumerKey,
-                secret: oauthCredentials.consumerSecret,
-            },
-            signature_method: signatureMethod,
-            hash_function(base, key) {
-                var _a;
-                const algorithm = (_a = algorithmMap[signatureMethod]) !== null && _a !== void 0 ? _a : 'sha1';
-                return (0, crypto_1.createHmac)(algorithm, key).update(base).digest('base64');
-            },
-        };
-        const oauthRequestData = {
-            oauth_callback: `${this.baseUrl}/callback?state=${state}`,
-        };
-        await this.externalHooks.run('oauth1.authenticate', [oAuthOptions, oauthRequestData]);
-        const oauth = new oauth_1_0a_1.default(oAuthOptions);
-        const options = {
-            method: 'POST',
-            url: oauthCredentials.requestTokenUrl,
-            data: oauthRequestData,
-        };
-        const data = oauth.toHeader(oauth.authorize(options));
-        options.headers = data;
-        const { data: response } = await axios_1.default.request(options);
-        const paramsParser = new URLSearchParams(response);
-        const responseJson = Object.fromEntries(paramsParser.entries());
-        const returnUri = `${oauthCredentials.authUrl}?oauth_token=${responseJson.oauth_token}`;
-        decryptedDataOriginal.csrfSecret = csrfSecret;
-        await this.encryptAndSaveData(credential, decryptedDataOriginal);
-        this.logger.verbose('OAuth1 authorization successful for new credential', {
-            userId: req.user.id,
-            credentialId: credential.id,
-        });
-        return returnUri;
-    }
-    async handleCallback(req, res) {
-        try {
-            const { oauth_verifier, oauth_token, state: encodedState } = req.query;
-            if (!oauth_verifier || !oauth_token || !encodedState) {
-                return this.renderCallbackError(res, 'Insufficient parameters for OAuth1 callback.', `Received following query parameters: ${JSON.stringify(req.query)}`);
-            }
-            let state;
-            try {
-                state = this.decodeCsrfState(encodedState);
-            }
-            catch (error) {
-                return this.renderCallbackError(res, error.message);
-            }
-            const credentialId = state.cid;
-            const credential = await this.getCredentialWithoutUser(credentialId);
-            if (!credential) {
-                const errorMessage = 'OAuth1 callback failed because of insufficient permissions';
-                this.logger.error(errorMessage, { credentialId });
-                return this.renderCallbackError(res, errorMessage);
-            }
-            const additionalData = await this.getAdditionalData();
-            const decryptedDataOriginal = await this.getDecryptedData(credential, additionalData);
-            const oauthCredentials = this.applyDefaultsAndOverwrites(credential, decryptedDataOriginal, additionalData);
-            if (this.verifyCsrfState(decryptedDataOriginal, state)) {
-                const errorMessage = 'The OAuth1 callback state is invalid!';
-                this.logger.debug(errorMessage, { credentialId });
-                return this.renderCallbackError(res, errorMessage);
-            }
-            const options = {
-                method: 'POST',
-                url: oauthCredentials.accessTokenUrl,
-                params: {
-                    oauth_token,
-                    oauth_verifier,
-                },
-            };
-            let oauthToken;
-            try {
-                oauthToken = await axios_1.default.request(options);
-            }
-            catch (error) {
-                this.logger.error('Unable to fetch tokens for OAuth1 callback', { credentialId });
-                const errorResponse = new not_found_error_1.NotFoundError('Unable to get access tokens!');
-                return (0, ResponseHelper_1.sendErrorResponse)(res, errorResponse);
-            }
-            const paramParser = new URLSearchParams(oauthToken.data);
-            const oauthTokenJson = Object.fromEntries(paramParser.entries());
-            decryptedDataOriginal.oauthTokenData = oauthTokenJson;
-            await this.encryptAndSaveData(credential, decryptedDataOriginal);
-            this.logger.verbose('OAuth1 callback successful for new credential', {
-                credentialId,
-            });
-            return res.render('oauth-callback');
-        }
-        catch (error) {
-            this.logger.error('OAuth1 callback failed because of insufficient user permissions');
-            return (0, ResponseHelper_1.sendErrorResponse)(res, error);
-        }
-    }
-};
-exports.OAuth1CredentialController = OAuth1CredentialController;
-__decorate([
-    (0, decorators_1.Get)('/auth'),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], OAuth1CredentialController.prototype, "getAuthUri", null);
-__decorate([
-    (0, decorators_1.Get)('/callback', { usesTemplates: true, skipAuth: true }),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object]),
-    __metadata("design:returntype", Promise)
-], OAuth1CredentialController.prototype, "handleCallback", null);
-exports.OAuth1CredentialController = OAuth1CredentialController = __decorate([
-    (0, decorators_1.RestController)('/oauth1-credential')
-], OAuth1CredentialController);
-//# sourceMappingURL=oAuth1Credential.controller.js.map

package/dist/controllers/oauth/oAuth1Credential.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oAuth1Credential.controller.js","sourceRoot":"","sources":["../../../src/controllers/oauth/oAuth1Credential.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAEA,kDAA0B;AAE1B,4DAAsC;AACtC,mCAAoC;AACpC,6CAAmD;AAEnD,qDAAqD;AACrD,yEAA0F;AAC1F,8EAAyE;AAWzE,MAAM,YAAY,GAAG;IACpB,aAAa,EAAE,QAAQ;IACvB,aAAa,EAAE,QAAQ;IACvB,WAAW,EAAE,MAAM;CACV,CAAC;AAGJ,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,kDAAuB;IAAhE;;QACG,iBAAY,GAAG,CAAC,CAAC;IAwJ3B,CAAC;IApJM,AAAN,KAAK,CAAC,UAAU,CAAC,GAAuC;QACvD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACtF,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CACvD,UAAU,EACV,qBAAqB,EACrB,cAAc,CACd,CAAC;QACF,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAEhE,MAAM,eAAe,GAAG,gBAAgB,CAAC,eAAe,CAAC;QAEzD,MAAM,YAAY,GAAyB;YAC1C,QAAQ,EAAE;gBACT,GAAG,EAAE,gBAAgB,CAAC,WAAW;gBACjC,MAAM,EAAE,gBAAgB,CAAC,cAAc;aACvC;YACD,gBAAgB,EAAE,eAAe;YAEjC,aAAa,CAAC,IAAI,EAAE,GAAG;;gBACtB,MAAM,SAAS,GAAG,MAAA,YAAY,CAAC,eAAe,CAAC,mCAAI,MAAM,CAAC;gBAC1D,OAAO,IAAA,mBAAU,EAAC,SAAS,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjE,CAAC;SACD,CAAC;QAEF,MAAM,gBAAgB,GAAG;YACxB,cAAc,EAAE,GAAG,IAAI,CAAC,OAAO,mBAAmB,KAAK,EAAE;SACzD,CAAC;QAEF,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAEtF,MAAM,KAAK,GAAG,IAAI,oBAAY,CAAC,YAAY,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAmB;YAC/B,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,gBAAgB,CAAC,eAAe;YACrC,IAAI,EAAE,gBAAgB;SACtB,CAAC;QAEF,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAGtD,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QAGvB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAK,CAAC,OAAO,CAAC,OAAsC,CAAC,CAAC;QAIvF,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,QAAkB,CAAC,CAAC;QAE7D,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;QAEhE,MAAM,SAAS,GAAG,GAAG,gBAAgB,CAAC,OAAO,gBAAgB,YAAY,CAAC,WAAW,EAAE,CAAC;QAExF,qBAAqB,CAAC,UAAU,GAAG,UAAU,CAAC;QAC9C,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QAEjE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,oDAAoD,EAAE;YACzE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACnB,YAAY,EAAE,UAAU,CAAC,EAAE;SAC3B,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IAClB,CAAC;IAIK,AAAN,KAAK,CAAC,cAAc,CAAC,GAA2C,EAAE,GAAa;QAC9E,IAAI,CAAC;YACJ,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;YAEvE,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,mBAAmB,CAC9B,GAAG,EACH,8CAA8C,EAC9C,wCAAwC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CACnE,CAAC;YACH,CAAC;YAED,IAAI,KAAqB,CAAC;YAC1B,IAAI,CAAC;gBACJ,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC;YAC/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;YACrE,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,MAAM,YAAY,GAAG,4DAA4D,CAAC;gBAClF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClD,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YACtF,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CACvD,UAAU,EACV,qBAAqB,EACrB,cAAc,CACd,CAAC;YAEF,IAAI,IAAI,CAAC,eAAe,CAAC,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,YAAY,GAAG,uCAAuC,CAAC;gBAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClD,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,OAAO,GAAuB;gBACnC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,gBAAgB,CAAC,cAAc;gBACpC,MAAM,EAAE;oBACP,WAAW;oBACX,cAAc;iBACd;aACD,CAAC;YAEF,IAAI,UAAU,CAAC;YAEf,IAAI,CAAC;gBACJ,UAAU,GAAG,MAAM,eAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClF,MAAM,aAAa,GAAG,IAAI,+BAAa,CAAC,8BAA8B,CAAC,CAAC;gBACxE,OAAO,IAAA,kCAAiB,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YAC9C,CAAC;YAID,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,UAAU,CAAC,IAAc,CAAC,CAAC;YAEnE,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAEjE,qBAAqB,CAAC,cAAc,GAAG,cAAc,CAAC;YAEtD,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;YAEjE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,+CAA+C,EAAE;gBACpE,YAAY;aACZ,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACrF,OAAO,IAAA,kCAAiB,EAAC,GAAG,EAAE,KAAc,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC;CACD,CAAA;AAzJY,gEAA0B;AAKhC;IADL,IAAA,gBAAG,EAAC,OAAO,CAAC;;;;4DAkEZ;AAIK;IADL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;gEA+EzD;qCAxJW,0BAA0B;IADtC,IAAA,2BAAc,EAAC,oBAAoB,CAAC;GACxB,0BAA0B,CAyJtC"}

package/dist/controllers/oauth/oAuth2Credential.controller.d.ts

@@ -1,9 +0,0 @@
-import { Response } from 'express';
-import { OAuthRequest } from '../../requests';
-import { AbstractOAuthController } from './abstractOAuth.controller';
-export declare class OAuth2CredentialController extends AbstractOAuthController {
-    oauthVersion: number;
-    getAuthUri(req: OAuthRequest.OAuth2Credential.Auth): Promise<string>;
-    handleCallback(req: OAuthRequest.OAuth2Credential.Callback, res: Response): Promise<void>;
-    private convertCredentialToOptions;
-}

package/dist/controllers/oauth/oAuth2Credential.controller.js

@@ -1,196 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OAuth2CredentialController = void 0;
-const client_oauth2_1 = require("@n8n/client-oauth2");
-const pkce_challenge_1 = __importDefault(require("pkce-challenge"));
-const qs = __importStar(require("querystring"));
-const omit_1 = __importDefault(require("lodash/omit"));
-const set_1 = __importDefault(require("lodash/set"));
-const split_1 = __importDefault(require("lodash/split"));
-const decorators_1 = require("../../decorators");
-const n8n_workflow_1 = require("n8n-workflow");
-const abstractOAuth_controller_1 = require("./abstractOAuth.controller");
-const constants_1 = require("../../constants");
-let OAuth2CredentialController = class OAuth2CredentialController extends abstractOAuth_controller_1.AbstractOAuthController {
-    constructor() {
-        super(...arguments);
-        this.oauthVersion = 2;
-    }
-    async getAuthUri(req) {
-        const credential = await this.getCredential(req);
-        const additionalData = await this.getAdditionalData();
-        const decryptedDataOriginal = await this.getDecryptedData(credential, additionalData);
-        if ((decryptedDataOriginal === null || decryptedDataOriginal === void 0 ? void 0 : decryptedDataOriginal.scope) &&
-            credential.type.includes('OAuth2') &&
-            !constants_1.GENERIC_OAUTH2_CREDENTIALS_WITH_EDITABLE_SCOPE.includes(credential.type)) {
-            delete decryptedDataOriginal.scope;
-        }
-        const oauthCredentials = this.applyDefaultsAndOverwrites(credential, decryptedDataOriginal, additionalData);
-        const [csrfSecret, state] = this.createCsrfState(credential.id);
-        const oAuthOptions = {
-            ...this.convertCredentialToOptions(oauthCredentials),
-            state,
-        };
-        if (oauthCredentials.authQueryParameters) {
-            oAuthOptions.query = qs.parse(oauthCredentials.authQueryParameters);
-        }
-        await this.externalHooks.run('oauth2.authenticate', [oAuthOptions]);
-        decryptedDataOriginal.csrfSecret = csrfSecret;
-        if (oauthCredentials.grantType === 'pkce') {
-            const { code_verifier, code_challenge } = (0, pkce_challenge_1.default)();
-            oAuthOptions.query = {
-                ...oAuthOptions.query,
-                code_challenge,
-                code_challenge_method: 'S256',
-            };
-            decryptedDataOriginal.codeVerifier = code_verifier;
-        }
-        await this.encryptAndSaveData(credential, decryptedDataOriginal);
-        const oAuthObj = new client_oauth2_1.ClientOAuth2(oAuthOptions);
-        const returnUri = oAuthObj.code.getUri();
-        this.logger.verbose('OAuth2 authorization url created for credential', {
-            userId: req.user.id,
-            credentialId: credential.id,
-        });
-        return returnUri.toString();
-    }
-    async handleCallback(req, res) {
-        try {
-            const { code, state: encodedState } = req.query;
-            if (!code || !encodedState) {
-                return this.renderCallbackError(res, 'Insufficient parameters for OAuth2 callback.', `Received following query parameters: ${JSON.stringify(req.query)}`);
-            }
-            let state;
-            try {
-                state = this.decodeCsrfState(encodedState);
-            }
-            catch (error) {
-                return this.renderCallbackError(res, error.message);
-            }
-            const credentialId = state.cid;
-            const credential = await this.getCredentialWithoutUser(credentialId);
-            if (!credential) {
-                const errorMessage = 'OAuth2 callback failed because of insufficient permissions';
-                this.logger.error(errorMessage, { credentialId });
-                return this.renderCallbackError(res, errorMessage);
-            }
-            const additionalData = await this.getAdditionalData();
-            const decryptedDataOriginal = await this.getDecryptedData(credential, additionalData);
-            const oauthCredentials = this.applyDefaultsAndOverwrites(credential, decryptedDataOriginal, additionalData);
-            if (this.verifyCsrfState(decryptedDataOriginal, state)) {
-                const errorMessage = 'The OAuth2 callback state is invalid!';
-                this.logger.debug(errorMessage, { credentialId });
-                return this.renderCallbackError(res, errorMessage);
-            }
-            let options = {};
-            const oAuthOptions = this.convertCredentialToOptions(oauthCredentials);
-            if (oauthCredentials.grantType === 'pkce') {
-                options = {
-                    body: { code_verifier: decryptedDataOriginal.codeVerifier },
-                };
-            }
-            else if (oauthCredentials.authentication === 'body') {
-                options = {
-                    body: {
-                        client_id: oAuthOptions.clientId,
-                        client_secret: oAuthOptions.clientSecret,
-                    },
-                };
-                delete oAuthOptions.clientSecret;
-            }
-            await this.externalHooks.run('oauth2.callback', [oAuthOptions]);
-            const oAuthObj = new client_oauth2_1.ClientOAuth2(oAuthOptions);
-            const queryParameters = req.originalUrl.split('?').splice(1, 1).join('');
-            const oauthToken = await oAuthObj.code.getToken(`${oAuthOptions.redirectUri}?${queryParameters}`, options);
-            if (Object.keys(req.query).length > 2) {
-                (0, set_1.default)(oauthToken.data, 'callbackQueryString', (0, omit_1.default)(req.query, 'state', 'code'));
-            }
-            if (oauthToken === undefined) {
-                const errorMessage = 'Unable to get OAuth2 access tokens!';
-                this.logger.error(errorMessage, { credentialId });
-                return this.renderCallbackError(res, errorMessage);
-            }
-            if (decryptedDataOriginal.oauthTokenData) {
-                Object.assign(decryptedDataOriginal.oauthTokenData, oauthToken.data);
-            }
-            else {
-                decryptedDataOriginal.oauthTokenData = oauthToken.data;
-            }
-            delete decryptedDataOriginal.csrfSecret;
-            await this.encryptAndSaveData(credential, decryptedDataOriginal);
-            this.logger.verbose('OAuth2 callback successful for credential', {
-                credentialId,
-            });
-            return res.render('oauth-callback');
-        }
-        catch (error) {
-            return this.renderCallbackError(res, error.message, 'body' in error ? (0, n8n_workflow_1.jsonStringify)(error.body) : undefined);
-        }
-    }
-    convertCredentialToOptions(credential) {
-        var _a, _b, _c, _d, _e, _f, _g;
-        return {
-            clientId: credential.clientId,
-            clientSecret: (_a = credential.clientSecret) !== null && _a !== void 0 ? _a : '',
-            accessTokenUri: (_b = credential.accessTokenUrl) !== null && _b !== void 0 ? _b : '',
-            authorizationUri: (_c = credential.authUrl) !== null && _c !== void 0 ? _c : '',
-            authentication: (_d = credential.authentication) !== null && _d !== void 0 ? _d : 'header',
-            redirectUri: `${this.baseUrl}/callback`,
-            scopes: (0, split_1.default)((_e = credential.scope) !== null && _e !== void 0 ? _e : 'openid', ','),
-            scopesSeparator: ((_f = credential.scope) === null || _f === void 0 ? void 0 : _f.includes(',')) ? ',' : ' ',
-            ignoreSSLIssues: (_g = credential.ignoreSSLIssues) !== null && _g !== void 0 ? _g : false,
-        };
-    }
-};
-exports.OAuth2CredentialController = OAuth2CredentialController;
-__decorate([
-    (0, decorators_1.Get)('/auth'),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], OAuth2CredentialController.prototype, "getAuthUri", null);
-__decorate([
-    (0, decorators_1.Get)('/callback', { usesTemplates: true, skipAuth: true }),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object]),
-    __metadata("design:returntype", Promise)
-], OAuth2CredentialController.prototype, "handleCallback", null);
-exports.OAuth2CredentialController = OAuth2CredentialController = __decorate([
-    (0, decorators_1.RestController)('/oauth2-credential')
-], OAuth2CredentialController);
-//# sourceMappingURL=oAuth2Credential.controller.js.map

package/dist/controllers/oauth/oAuth2Credential.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oAuth2Credential.controller.js","sourceRoot":"","sources":["../../../src/controllers/oauth/oAuth2Credential.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,sDAAkD;AAElD,oEAA2C;AAC3C,gDAAkC;AAClC,uDAA+B;AAC/B,qDAA6B;AAC7B,yDAAiC;AACjC,6CAAmD;AACnD,+CAA6C;AAE7C,yEAA0F;AAC1F,+CAAmI;AAG5H,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,kDAAuB;IAAhE;;QACG,iBAAY,GAAG,CAAC,CAAC;IA0L3B,CAAC;IAtLM,AAAN,KAAK,CAAC,UAAU,CAAC,GAAuC;QACvD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAMtF,IACC,CAAA,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,KAAK;YAC5B,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAClC,CAAC,0DAA8C,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EACxE,CAAC;YACF,OAAO,qBAAqB,CAAC,KAAK,CAAC;QACpC,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CACvD,UAAU,EACV,qBAAqB,EACrB,cAAc,CACd,CAAC;QAGF,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAEhE,MAAM,YAAY,GAAG;YACpB,GAAG,IAAI,CAAC,0BAA0B,CAAC,gBAAgB,CAAC;YACpD,KAAK;SACL,CAAC;QAEF,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,CAAC;YAC1C,YAAY,CAAC,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAEpE,qBAAqB,CAAC,UAAU,GAAG,UAAU,CAAC;QAC9C,IAAI,gBAAgB,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC3C,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,IAAA,wBAAa,GAAE,CAAC;YAC1D,YAAY,CAAC,KAAK,GAAG;gBACpB,GAAG,YAAY,CAAC,KAAK;gBACrB,cAAc;gBACd,qBAAqB,EAAE,MAAM;aAC7B,CAAC;YACF,qBAAqB,CAAC,YAAY,GAAG,aAAa,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QAEjE,MAAM,QAAQ,GAAG,IAAI,4BAAY,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAEzC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,iDAAiD,EAAE;YACtE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;YACnB,YAAY,EAAE,UAAU,CAAC,EAAE;SAC3B,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC7B,CAAC;IAIK,AAAN,KAAK,CAAC,cAAc,CAAC,GAA2C,EAAE,GAAa;QAC9E,IAAI,CAAC;YACJ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;YAChD,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC,mBAAmB,CAC9B,GAAG,EACH,8CAA8C,EAC9C,wCAAwC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CACnE,CAAC;YACH,CAAC;YAED,IAAI,KAAqB,CAAC;YAC1B,IAAI,CAAC;gBACJ,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC;YAC/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;YACrE,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,MAAM,YAAY,GAAG,4DAA4D,CAAC;gBAClF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClD,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtD,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YACtF,MAAM,gBAAgB,GAAG,IAAI,CAAC,0BAA0B,CACvD,UAAU,EACV,qBAAqB,EACrB,cAAc,CACd,CAAC;YAEF,IAAI,IAAI,CAAC,eAAe,CAAC,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,YAAY,GAAG,uCAAuC,CAAC;gBAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClD,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,OAAO,GAAiC,EAAE,CAAC;YAE/C,MAAM,YAAY,GAAG,IAAI,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;YAEvE,IAAI,gBAAgB,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;gBAC3C,OAAO,GAAG;oBACT,IAAI,EAAE,EAAE,aAAa,EAAE,qBAAqB,CAAC,YAAY,EAAE;iBAC3D,CAAC;YACH,CAAC;iBAAM,IAAI,gBAAgB,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;gBACvD,OAAO,GAAG;oBACT,IAAI,EAAE;wBACL,SAAS,EAAE,YAAY,CAAC,QAAQ;wBAChC,aAAa,EAAE,YAAY,CAAC,YAAY;qBACxC;iBACD,CAAC;gBACF,OAAO,YAAY,CAAC,YAAY,CAAC;YAClC,CAAC;YAED,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAEhE,MAAM,QAAQ,GAAG,IAAI,4BAAY,CAAC,YAAY,CAAC,CAAC;YAEhD,MAAM,eAAe,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEzE,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAC9C,GAAG,YAAY,CAAC,WAAqB,IAAI,eAAe,EAAE,EAC1D,OAAO,CACP,CAAC;YAEF,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,IAAA,aAAG,EAAC,UAAU,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAA,cAAI,EAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/E,CAAC;YAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,YAAY,GAAG,qCAAqC,CAAC;gBAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBAClD,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,qBAAqB,CAAC,cAAc,EAAE,CAAC;gBAG1C,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBAEP,qBAAqB,CAAC,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;YACxD,CAAC;YAED,OAAO,qBAAqB,CAAC,UAAU,CAAC;YACxC,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;YAEjE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,2CAA2C,EAAE;gBAChE,YAAY;aACZ,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,mBAAmB,CAC9B,GAAG,EACF,KAAe,CAAC,OAAO,EAExB,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,IAAA,4BAAa,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CACvD,CAAC;QACH,CAAC;IACF,CAAC;IAEO,0BAA0B,CAAC,UAAgC;;QAClE,OAAO;YACN,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,YAAY,EAAE,MAAA,UAAU,CAAC,YAAY,mCAAI,EAAE;YAC3C,cAAc,EAAE,MAAA,UAAU,CAAC,cAAc,mCAAI,EAAE;YAC/C,gBAAgB,EAAE,MAAA,UAAU,CAAC,OAAO,mCAAI,EAAE;YAC1C,cAAc,EAAE,MAAA,UAAU,CAAC,cAAc,mCAAI,QAAQ;YACrD,WAAW,EAAE,GAAG,IAAI,CAAC,OAAO,WAAW;YACvC,MAAM,EAAE,IAAA,eAAK,EAAC,MAAA,UAAU,CAAC,KAAK,mCAAI,QAAQ,EAAE,GAAG,CAAC;YAChD,eAAe,EAAE,CAAA,MAAA,UAAU,CAAC,KAAK,0CAAE,QAAQ,CAAC,GAAG,CAAC,EAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAC5D,eAAe,EAAE,MAAA,UAAU,CAAC,eAAe,mCAAI,KAAK;SACpD,CAAC;IACH,CAAC;CACD,CAAA;AA3LY,gEAA0B;AAKhC;IADL,IAAA,gBAAG,EAAC,OAAO,CAAC;;;;4DA4DZ;AAIK;IADL,IAAA,gBAAG,EAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;gEAyGzD;qCA5KW,0BAA0B;IADtC,IAAA,2BAAc,EAAC,oBAAoB,CAAC;GACxB,0BAA0B,CA2LtC"}

package/dist/controllers/passwordReset.controller.d.ts

@@ -1,30 +0,0 @@
-import { Response } from 'express';
-import { AuthService } from '../auth/auth.service';
-import { PasswordUtility } from '../services/password.utility';
-import { UserManagementMailer } from '../UserManagement/email';
-import { PasswordResetRequest } from '../requests';
-import { UserService } from '../services/user.service';
-import { License } from '../License';
-import { MfaService } from '../Mfa/mfa.service';
-import { Logger } from '../Logger';
-import { ExternalHooks } from '../ExternalHooks';
-import { UrlService } from '../services/url.service';
-import { UserRepository } from '../databases/repositories/user.repository';
-import { EventService } from '../events/event.service';
-export declare class PasswordResetController {
-    private readonly logger;
-    private readonly externalHooks;
-    private readonly mailer;
-    private readonly authService;
-    private readonly userService;
-    private readonly mfaService;
-    private readonly urlService;
-    private readonly license;
-    private readonly passwordUtility;
-    private readonly userRepository;
-    private readonly eventService;
-    constructor(logger: Logger, externalHooks: ExternalHooks, mailer: UserManagementMailer, authService: AuthService, userService: UserService, mfaService: MfaService, urlService: UrlService, license: License, passwordUtility: PasswordUtility, userRepository: UserRepository, eventService: EventService);
-    forgotPassword(req: PasswordResetRequest.Email): Promise<void>;
-    resolvePasswordToken(req: PasswordResetRequest.Credentials): Promise<void>;
-    changePassword(req: PasswordResetRequest.NewPassword, res: Response): Promise<void>;
-}

package/dist/controllers/passwordReset.controller.js

@@ -1,201 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PasswordResetController = void 0;
-const validator_1 = __importDefault(require("validator"));
-const auth_service_1 = require("../auth/auth.service");
-const decorators_1 = require("../decorators");
-const password_utility_1 = require("../services/password.utility");
-const email_1 = require("../UserManagement/email");
-const ssoHelpers_1 = require("../sso/ssoHelpers");
-const user_service_1 = require("../services/user.service");
-const License_1 = require("../License");
-const constants_1 = require("../constants");
-const mfa_service_1 = require("../Mfa/mfa.service");
-const Logger_1 = require("../Logger");
-const ExternalHooks_1 = require("../ExternalHooks");
-const url_service_1 = require("../services/url.service");
-const internal_server_error_1 = require("../errors/response-errors/internal-server.error");
-const bad_request_error_1 = require("../errors/response-errors/bad-request.error");
-const forbidden_error_1 = require("../errors/response-errors/forbidden.error");
-const not_found_error_1 = require("../errors/response-errors/not-found.error");
-const unprocessable_error_1 = require("../errors/response-errors/unprocessable.error");
-const user_repository_1 = require("../databases/repositories/user.repository");
-const event_service_1 = require("../events/event.service");
-let PasswordResetController = class PasswordResetController {
-    constructor(logger, externalHooks, mailer, authService, userService, mfaService, urlService, license, passwordUtility, userRepository, eventService) {
-        this.logger = logger;
-        this.externalHooks = externalHooks;
-        this.mailer = mailer;
-        this.authService = authService;
-        this.userService = userService;
-        this.mfaService = mfaService;
-        this.urlService = urlService;
-        this.license = license;
-        this.passwordUtility = passwordUtility;
-        this.userRepository = userRepository;
-        this.eventService = eventService;
-    }
-    async forgotPassword(req) {
-        var _a, _b;
-        if (!this.mailer.isEmailSetUp) {
-            this.logger.debug('Request to send password reset email failed because emailing was not set up');
-            throw new internal_server_error_1.InternalServerError('Email sending must be set up in order to request a password reset email');
-        }
-        const { email } = req.body;
-        if (!email) {
-            this.logger.debug('Request to send password reset email failed because of missing email in payload', { payload: req.body });
-            throw new bad_request_error_1.BadRequestError('Email is mandatory');
-        }
-        if (!validator_1.default.isEmail(email)) {
-            this.logger.debug('Request to send password reset email failed because of invalid email in payload', { invalidEmail: email });
-            throw new bad_request_error_1.BadRequestError('Invalid email address');
-        }
-        const user = await this.userRepository.findNonShellUser(email);
-        if (!(user === null || user === void 0 ? void 0 : user.isOwner) && !this.license.isWithinUsersLimit()) {
-            this.logger.debug('Request to send password reset email failed because the user limit was reached');
-            throw new forbidden_error_1.ForbiddenError(constants_1.RESPONSE_ERROR_MESSAGES.USERS_QUOTA_REACHED);
-        }
-        if ((0, ssoHelpers_1.isSamlCurrentAuthenticationMethod)() &&
-            !((user === null || user === void 0 ? void 0 : user.hasGlobalScope('user:resetPassword')) === true ||
-                ((_a = user === null || user === void 0 ? void 0 : user.settings) === null || _a === void 0 ? void 0 : _a.allowSSOManualLogin) === true)) {
-            this.logger.debug('Request to send password reset email failed because login is handled by SAML');
-            throw new forbidden_error_1.ForbiddenError('Login is handled by SAML. Please contact your Identity Provider to reset your password.');
-        }
-        const ldapIdentity = (_b = user === null || user === void 0 ? void 0 : user.authIdentities) === null || _b === void 0 ? void 0 : _b.find((i) => i.providerType === 'ldap');
-        if (!(user === null || user === void 0 ? void 0 : user.password) || (ldapIdentity && user.disabled)) {
-            this.logger.debug('Request to send password reset email failed because no user was found for the provided email', { invalidEmail: email });
-            return;
-        }
-        if (this.license.isLdapEnabled() && ldapIdentity) {
-            throw new unprocessable_error_1.UnprocessableRequestError('forgotPassword.ldapUserPasswordResetUnavailable');
-        }
-        const url = this.authService.generatePasswordResetUrl(user);
-        const { id, firstName, lastName } = user;
-        try {
-            await this.mailer.passwordReset({
-                email,
-                firstName,
-                lastName,
-                passwordResetUrl: url,
-                domain: this.urlService.getInstanceBaseUrl(),
-            });
-        }
-        catch (error) {
-            this.eventService.emit('email-failed', {
-                user,
-                messageType: 'Reset password',
-                publicApi: false,
-            });
-            if (error instanceof Error) {
-                throw new internal_server_error_1.InternalServerError(`Please contact your administrator: ${error.message}`);
-            }
-        }
-        this.logger.info('Sent password reset email successfully', { userId: user.id, email });
-        this.eventService.emit('user-transactional-email-sent', {
-            userId: id,
-            messageType: 'Reset password',
-            publicApi: false,
-        });
-        this.eventService.emit('user-password-reset-request-click', { user });
-    }
-    async resolvePasswordToken(req) {
-        const { token } = req.query;
-        if (!token) {
-            this.logger.debug('Request to resolve password token failed because of missing password reset token', {
-                queryString: req.query,
-            });
-            throw new bad_request_error_1.BadRequestError('');
-        }
-        const user = await this.authService.resolvePasswordResetToken(token);
-        if (!user)
-            throw new not_found_error_1.NotFoundError('');
-        if (!(user === null || user === void 0 ? void 0 : user.isOwner) && !this.license.isWithinUsersLimit()) {
-            this.logger.debug('Request to resolve password token failed because the user limit was reached', { userId: user.id });
-            throw new forbidden_error_1.ForbiddenError(constants_1.RESPONSE_ERROR_MESSAGES.USERS_QUOTA_REACHED);
-        }
-        this.logger.info('Reset-password token resolved successfully', { userId: user.id });
-        this.eventService.emit('user-password-reset-email-click', { user });
-    }
-    async changePassword(req, res) {
-        var _a;
-        const { token, password, mfaToken } = req.body;
-        if (!token || !password) {
-            this.logger.debug('Request to change password failed because of missing user ID or password or reset password token in payload', {
-                payload: req.body,
-            });
-            throw new bad_request_error_1.BadRequestError('Missing user ID or password or reset password token');
-        }
-        const validPassword = this.passwordUtility.validate(password);
-        const user = await this.authService.resolvePasswordResetToken(token);
-        if (!user)
-            throw new not_found_error_1.NotFoundError('');
-        if (user.mfaEnabled) {
-            if (!mfaToken)
-                throw new bad_request_error_1.BadRequestError('If MFA enabled, mfaToken is required.');
-            const { decryptedSecret: secret } = await this.mfaService.getSecretAndRecoveryCodes(user.id);
-            const validToken = this.mfaService.totp.verifySecret({ secret, token: mfaToken });
-            if (!validToken)
-                throw new bad_request_error_1.BadRequestError('Invalid MFA token.');
-        }
-        const passwordHash = await this.passwordUtility.hash(validPassword);
-        await this.userService.update(user.id, { password: passwordHash });
-        this.logger.info('User password updated successfully', { userId: user.id });
-        this.authService.issueCookie(res, user, req.browserId);
-        this.eventService.emit('user-updated', { user, fieldsChanged: ['password'] });
-        const ldapIdentity = (_a = user === null || user === void 0 ? void 0 : user.authIdentities) === null || _a === void 0 ? void 0 : _a.find((i) => i.providerType === 'ldap');
-        if (ldapIdentity) {
-            this.eventService.emit('user-signed-up', {
-                user,
-                userType: 'email',
-                wasDisabledLdapUser: true,
-            });
-        }
-        await this.externalHooks.run('user.password.update', [user.email, passwordHash]);
-    }
-};
-exports.PasswordResetController = PasswordResetController;
-__decorate([
-    (0, decorators_1.Post)('/forgot-password', { skipAuth: true, rateLimit: { limit: 3 } }),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], PasswordResetController.prototype, "forgotPassword", null);
-__decorate([
-    (0, decorators_1.Get)('/resolve-password-token', { skipAuth: true }),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], PasswordResetController.prototype, "resolvePasswordToken", null);
-__decorate([
-    (0, decorators_1.Post)('/change-password', { skipAuth: true }),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object]),
-    __metadata("design:returntype", Promise)
-], PasswordResetController.prototype, "changePassword", null);
-exports.PasswordResetController = PasswordResetController = __decorate([
-    (0, decorators_1.RestController)(),
-    __metadata("design:paramtypes", [Logger_1.Logger,
-        ExternalHooks_1.ExternalHooks,
-        email_1.UserManagementMailer,
-        auth_service_1.AuthService,
-        user_service_1.UserService,
-        mfa_service_1.MfaService,
-        url_service_1.UrlService,
-        License_1.License,
-        password_utility_1.PasswordUtility,
-        user_repository_1.UserRepository,
-        event_service_1.EventService])
-], PasswordResetController);
-//# sourceMappingURL=passwordReset.controller.js.map

package/dist/controllers/passwordReset.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"passwordReset.controller.js","sourceRoot":"","sources":["../../src/controllers/passwordReset.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AACA,0DAAkC;AAElC,sDAAkD;AAClD,6CAAyD;AACzD,kEAA8D;AAC9D,kDAA8D;AAE9D,iDAAqE;AACrE,0DAAsD;AACtD,uCAAoC;AACpC,2CAAsD;AACtD,mDAA+C;AAC/C,qCAAkC;AAClC,mDAAgD;AAChD,wDAAoD;AACpD,0FAAqF;AACrF,kFAA6E;AAC7E,8EAA0E;AAC1E,8EAAyE;AACzE,sFAAyF;AACzF,8EAA0E;AAC1E,0DAAsD;AAG/C,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACnC,YACkB,MAAc,EACd,aAA4B,EAC5B,MAA4B,EAC5B,WAAwB,EACxB,WAAwB,EACxB,UAAsB,EACtB,UAAsB,EACtB,OAAgB,EAChB,eAAgC,EAChC,cAA8B,EAC9B,YAA0B;QAV1B,WAAM,GAAN,MAAM,CAAQ;QACd,kBAAa,GAAb,aAAa,CAAe;QAC5B,WAAM,GAAN,MAAM,CAAsB;QAC5B,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QACtB,eAAU,GAAV,UAAU,CAAY;QACtB,YAAO,GAAP,OAAO,CAAS;QAChB,oBAAe,GAAf,eAAe,CAAiB;QAChC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAME,AAAN,KAAK,CAAC,cAAc,CAAC,GAA+B;;QACnD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,6EAA6E,CAC7E,CAAC;YACF,MAAM,IAAI,2CAAmB,CAC5B,yEAAyE,CACzE,CAAC;QACH,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,iFAAiF,EACjF,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CACrB,CAAC;YACF,MAAM,IAAI,mCAAe,CAAC,oBAAoB,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,mBAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,iFAAiF,EACjF,EAAE,YAAY,EAAE,KAAK,EAAE,CACvB,CAAC;YACF,MAAM,IAAI,mCAAe,CAAC,uBAAuB,CAAC,CAAC;QACpD,CAAC;QAGD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE/D,IAAI,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,CAAA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,gFAAgF,CAChF,CAAC;YACF,MAAM,IAAI,gCAAc,CAAC,mCAAuB,CAAC,mBAAmB,CAAC,CAAC;QACvE,CAAC;QACD,IACC,IAAA,8CAAiC,GAAE;YACnC,CAAC,CACA,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,CAAC,oBAAoB,CAAC,MAAK,IAAI;gBACnD,CAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,0CAAE,mBAAmB,MAAK,IAAI,CAC5C,EACA,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,8EAA8E,CAC9E,CAAC;YACF,MAAM,IAAI,gCAAc,CACvB,yFAAyF,CACzF,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;QAClF,IAAI,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,CAAA,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,8FAA8F,EAC9F,EAAE,YAAY,EAAE,KAAK,EAAE,CACvB,CAAC;YACF,OAAO;QACR,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,YAAY,EAAE,CAAC;YAClD,MAAM,IAAI,+CAAyB,CAAC,iDAAiD,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAE5D,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QACzC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC/B,KAAK;gBACL,SAAS;gBACT,QAAQ;gBACR,gBAAgB,EAAE,GAAG;gBACrB,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE;aAC5C,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE;gBACtC,IAAI;gBACJ,WAAW,EAAE,gBAAgB;gBAC7B,SAAS,EAAE,KAAK;aAChB,CAAC,CAAC;YACH,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC5B,MAAM,IAAI,2CAAmB,CAAC,sCAAsC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtF,CAAC;QACF,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,+BAA+B,EAAE;YACvD,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,gBAAgB;YAC7B,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAMK,AAAN,KAAK,CAAC,oBAAoB,CAAC,GAAqC;QAC/D,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QAE5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,kFAAkF,EAClF;gBACC,WAAW,EAAE,GAAG,CAAC,KAAK;aACtB,CACD,CAAC;YACF,MAAM,IAAI,mCAAe,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,+BAAa,CAAC,EAAE,CAAC,CAAC;QAEvC,IAAI,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,CAAA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,6EAA6E,EAC7E,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CACnB,CAAC;YACF,MAAM,IAAI,gCAAc,CAAC,mCAAuB,CAAC,mBAAmB,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAMK,AAAN,KAAK,CAAC,cAAc,CAAC,GAAqC,EAAE,GAAa;;QACxE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE/C,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,6GAA6G,EAC7G;gBACC,OAAO,EAAE,GAAG,CAAC,IAAI;aACjB,CACD,CAAC;YACF,MAAM,IAAI,mCAAe,CAAC,qDAAqD,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,+BAAa,CAAC,EAAE,CAAC,CAAC;QAEvC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,mCAAe,CAAC,uCAAuC,CAAC,CAAC;YAElF,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE7F,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAElF,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,mCAAe,CAAC,oBAAoB,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEpE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QAEnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAE5E,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAG9E,MAAM,YAAY,GAAG,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC;QAClF,IAAI,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBACxC,IAAI;gBACJ,QAAQ,EAAE,OAAO;gBACjB,mBAAmB,EAAE,IAAI;aACzB,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;IAClF,CAAC;CACD,CAAA;AAzMY,0DAAuB;AAmB7B;IADL,IAAA,iBAAI,EAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;;;;6DA+FrE;AAMK;IADL,IAAA,gBAAG,EAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;mEA2BlD;AAMK;IADL,IAAA,iBAAI,EAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;6DAkD5C;kCAxMW,uBAAuB;IADnC,IAAA,2BAAc,GAAE;qCAGU,eAAM;QACC,6BAAa;QACpB,4BAAoB;QACf,0BAAW;QACX,0BAAW;QACZ,wBAAU;QACV,wBAAU;QACb,iBAAO;QACC,kCAAe;QAChB,gCAAc;QAChB,4BAAY;GAZhC,uBAAuB,CAyMnC"}