ofauth-shared-core 0.1.0-alpha.0 → 0.2.0-alpha.0

package/dist/services/impl/runtimeSupport.js

@@ -1,112 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_SESSION_TTL_SECONDS = exports.DEFAULT_LOCKOUT_COOLDOWN_SECONDS = exports.DEFAULT_LOCKOUT_THRESHOLD = void 0;
-exports.nowIso = nowIso;
-exports.plusSecondsIso = plusSecondsIso;
-exports.isPast = isPast;
-exports.makeIdFactory = makeIdFactory;
-exports.toIdentityRef = toIdentityRef;
-exports.toAssignment = toAssignment;
-exports.toSessionRef = toSessionRef;
-exports.verifySecret = verifySecret;
-exports.emitAuthActivity = emitAuthActivity;
-exports.getAssignmentById = getAssignmentById;
-exports.fallbackPolicyProfiles = fallbackPolicyProfiles;
-const schemas_1 = require("../../data/schemas");
-exports.DEFAULT_LOCKOUT_THRESHOLD = 5;
-exports.DEFAULT_LOCKOUT_COOLDOWN_SECONDS = 15 * 60;
-exports.DEFAULT_SESSION_TTL_SECONDS = 8 * 60 * 60;
-function nowIso() {
-    return new Date().toISOString();
-}
-function plusSecondsIso(baseIso, seconds) {
-    return new Date(new Date(baseIso).getTime() + seconds * 1000).toISOString();
-}
-function isPast(iso) {
-    return new Date(iso).getTime() <= Date.now();
-}
-function makeIdFactory(prefix) {
-    let counter = 0;
-    return () => {
-        counter += 1;
-        return `${prefix}-${Date.now()}-${counter}`;
-    };
-}
-function toIdentityRef(row) {
-    return {
-        identityId: row.id,
-        principal: row.principal,
-        status: row.status,
-    };
-}
-function toAssignment(row) {
-    return {
-        assignmentId: row.id,
-        identityId: row.identityId,
-        roleRef: row.roleRef,
-        scopeRef: {
-            ...(row.tenantId ? { tenantId: row.tenantId } : {}),
-            ...(row.branchId ? { branchId: row.branchId } : {}),
-            ...(row.scopeAttributes ? { attributes: row.scopeAttributes } : {}),
-        },
-    };
-}
-function toSessionRef(row, assignment) {
-    return {
-        sessionId: row.id,
-        identityId: row.identityId,
-        activeScopeRef: assignment
-            ? {
-                ...(assignment.tenantId ? { tenantId: assignment.tenantId } : {}),
-                ...(assignment.branchId ? { branchId: assignment.branchId } : {}),
-                ...(assignment.scopeAttributes ? { attributes: assignment.scopeAttributes } : {}),
-            }
-            : undefined,
-        assuranceLevel: row.assuranceLevel,
-        issuedAt: row.issuedAt,
-        expiresAt: row.expiresAt,
-    };
-}
-async function verifySecret(platformAdapter, plainSecret, secretHash) {
-    if (platformAdapter) {
-        return platformAdapter.verifyPin(plainSecret, secretHash);
-    }
-    return plainSecret === secretHash;
-}
-async function emitAuthActivity(options, event) {
-    if (!options.emitActivity)
-        return;
-    await options.emitActivity({
-        activityId: event.eventId,
-        activityType: `ofauth.${event.eventType.toLowerCase()}`,
-        occurredAt: event.timestamp,
-        scopeRef: {
-            domain: 'ofauth',
-            ...(event.scopeRef?.tenantId ? { tenantId: event.scopeRef.tenantId } : {}),
-            ...(event.scopeRef?.branchId ? { branchId: event.scopeRef.branchId } : {}),
-        },
-        actor: event.identityId ? { userId: event.identityId } : undefined,
-        payload: {
-            eventType: event.eventType,
-            result: event.result,
-            reasonCode: event.reasonCode ?? null,
-            sessionId: event.sessionId ?? null,
-            scopeAttributes: event.scopeRef?.attributes ?? null,
-        },
-    });
-}
-async function getAssignmentById(db, id) {
-    if (!id)
-        return null;
-    const row = await db.get(schemas_1.OFAUTH_TABLES.assignments, id);
-    if (!row || row.deleted)
-        return null;
-    return row;
-}
-function fallbackPolicyProfiles() {
-    return [
-        { profileId: 'cashier_fast', defaultAssuranceLevel: 'basic', lockoutPolicyRef: 'default' },
-        { profileId: 'supervisor_strict', defaultAssuranceLevel: 'elevated', lockoutPolicyRef: 'strict' },
-        { profileId: 'member_self_service', defaultAssuranceLevel: 'basic', lockoutPolicyRef: 'member' },
-    ];
-}