zibri 2.2.1 → 2.4.0

package/dist/cjs/auth/strategies/cookie/cookie-auth-data.model.js

@@ -0,0 +1,60 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CookieAuthData = void 0;
+const property_decorator_1 = require("../../../entity/decorators/property.decorator");
+/**
+ * The authentication data that gets returned when logging in or refreshing the login.
+ */
+class CookieAuthData {
+    /**
+     * The id of the user of the cookie.
+     */
+    userId;
+    /**
+     * The roles of the user.
+     */
+    roles;
+    /**
+     * The token to prohibit cross site request forgery.
+     */
+    csrfToken;
+    /**
+     * The expiration date of the session.
+     */
+    sessionExpirationDate;
+    /**
+     * The expiration date of the refresh session.
+     */
+    refreshSessionExpirationDate;
+}
+exports.CookieAuthData = CookieAuthData;
+__decorate([
+    property_decorator_1.Property.string({ format: 'uuid' }),
+    __metadata("design:type", String)
+], CookieAuthData.prototype, "userId", void 0);
+__decorate([
+    property_decorator_1.Property.array({ items: { type: 'string' } }),
+    __metadata("design:type", Array)
+], CookieAuthData.prototype, "roles", void 0);
+__decorate([
+    property_decorator_1.Property.string(),
+    __metadata("design:type", String)
+], CookieAuthData.prototype, "csrfToken", void 0);
+__decorate([
+    property_decorator_1.Property.date(),
+    __metadata("design:type", Date)
+], CookieAuthData.prototype, "sessionExpirationDate", void 0);
+__decorate([
+    property_decorator_1.Property.date(),
+    __metadata("design:type", Date)
+], CookieAuthData.prototype, "refreshSessionExpirationDate", void 0);
+//# sourceMappingURL=cookie-auth-data.model.js.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-data.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-data.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-data.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,sFAAyE;AAEzE;;GAEG;AACH,MAAa,cAAc;IACvB;;OAEG;IAEH,MAAM,CAAU;IAChB;;OAEG;IAEH,KAAK,CAAU;IACf;;OAEG;IAEH,SAAS,CAAU;IACnB;;OAEG;IAEH,qBAAqB,CAAQ;IAC7B;;OAEG;IAEH,4BAA4B,CAAQ;CACvC;AA1BD,wCA0BC;AArBG;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;8CACpB;AAKhB;IADC,6BAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;;6CAC/B;AAKf;IADC,6BAAQ,CAAC,MAAM,EAAE;;iDACC;AAKnB;IADC,6BAAQ,CAAC,IAAI,EAAE;8BACQ,IAAI;6DAAC;AAK7B;IADC,6BAAQ,CAAC,IAAI,EAAE;8BACe,IAAI;oEAAC"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-logout-data.model.d.ts

@@ -0,0 +1,19 @@
+import { Transaction } from '../../../data-source/transaction/transaction.model';
+/**
+ * Data for logging a user out with the cookie auth strategy.
+ */
+export declare class CookieAuthLogoutData {
+    /**
+     * Whether or not cookies should be cleared.
+     */
+    clearCookies: boolean;
+    /**
+     * The id of the refresh session to logout.
+     */
+    refreshSessionId: string;
+    /**
+     * The transaction that this should run in.
+     */
+    transaction: Transaction | undefined;
+}
+//# sourceMappingURL=cookie-auth-logout-data.model.d.ts.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-logout-data.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-logout-data.model.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-logout-data.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AAGjF;;GAEG;AACH,qBAAa,oBAAoB;IAC7B;;OAEG;IAEH,YAAY,EAAG,OAAO,CAAC;IACvB;;OAEG;IAEH,gBAAgB,EAAG,MAAM,CAAC;IAC1B;;OAEG;IACH,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC;CACxC"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-logout-data.model.js

@@ -0,0 +1,40 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CookieAuthLogoutData = void 0;
+const property_decorator_1 = require("../../../entity/decorators/property.decorator");
+/**
+ * Data for logging a user out with the cookie auth strategy.
+ */
+class CookieAuthLogoutData {
+    /**
+     * Whether or not cookies should be cleared.
+     */
+    clearCookies;
+    /**
+     * The id of the refresh session to logout.
+     */
+    refreshSessionId;
+    /**
+     * The transaction that this should run in.
+     */
+    transaction;
+}
+exports.CookieAuthLogoutData = CookieAuthLogoutData;
+__decorate([
+    property_decorator_1.Property.boolean(),
+    __metadata("design:type", Boolean)
+], CookieAuthLogoutData.prototype, "clearCookies", void 0);
+__decorate([
+    property_decorator_1.Property.string({ format: 'uuid' }),
+    __metadata("design:type", String)
+], CookieAuthLogoutData.prototype, "refreshSessionId", void 0);
+//# sourceMappingURL=cookie-auth-logout-data.model.js.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-logout-data.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-logout-data.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-logout-data.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,sFAAyE;AAEzE;;GAEG;AACH,MAAa,oBAAoB;IAC7B;;OAEG;IAEH,YAAY,CAAW;IACvB;;OAEG;IAEH,gBAAgB,CAAU;IAC1B;;OAEG;IACH,WAAW,CAA0B;CACxC;AAfD,oDAeC;AAVG;IADC,6BAAQ,CAAC,OAAO,EAAE;;0DACI;AAKvB;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;8DACV"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-refresh-login-data.model.d.ts

@@ -0,0 +1,11 @@
+import { Transaction } from '../../../data-source/transaction/transaction.model';
+/**
+ * Data for refreshing a login with the cookie auth strategy.
+ */
+export declare class CookieAuthRefreshLoginData {
+    /**
+     * The transaction that this should run in.
+     */
+    transaction: Transaction;
+}
+//# sourceMappingURL=cookie-auth-refresh-login-data.model.d.ts.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-refresh-login-data.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-refresh-login-data.model.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-refresh-login-data.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AAEjF;;GAEG;AACH,qBAAa,0BAA0B;IACnC;;OAEG;IACH,WAAW,EAAG,WAAW,CAAC;CAC7B"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-refresh-login-data.model.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CookieAuthRefreshLoginData = void 0;
+/**
+ * Data for refreshing a login with the cookie auth strategy.
+ */
+class CookieAuthRefreshLoginData {
+    /**
+     * The transaction that this should run in.
+     */
+    transaction;
+}
+exports.CookieAuthRefreshLoginData = CookieAuthRefreshLoginData;
+//# sourceMappingURL=cookie-auth-refresh-login-data.model.js.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-refresh-login-data.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-refresh-login-data.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-refresh-login-data.model.ts"],"names":[],"mappings":";;;AAEA;;GAEG;AACH,MAAa,0BAA0B;IACnC;;OAEG;IACH,WAAW,CAAe;CAC7B;AALD,gEAKC"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-refresh-session.model.d.ts

@@ -0,0 +1,39 @@
+import { BaseEntity } from '../../../entity/base-entity.model';
+/**
+ * A cookie auth refresh session.
+ */
+export declare class CookieAuthRefreshSession extends BaseEntity {
+    /**
+     * The id of the user that this session belong to.
+     */
+    userId: string;
+    /**
+     * The expiration date of the session.
+     */
+    expirationDate: Date;
+    /**
+     * The token to prohibit cross site request forgery.
+     */
+    csrfToken: string;
+    /**
+     * Whether or not this session has been blacklisted.
+     *
+     * Is used for automatic reuse detection.
+     */
+    blacklisted: boolean;
+    /**
+     * The id of the "family" this token belongs to.
+     * All tokens that belong to the same "ancestor" are considered to be in a family.
+     *
+     * Is used for automatic reuse detection.
+     */
+    familyId: string;
+}
+declare const CookieAuthRefreshSessionCreateData_base: import("../../..").Newable<Omit<CookieAuthRefreshSession, "id">>;
+/**
+ * Data for creating a new cookie auth refresh session.
+ */
+export declare class CookieAuthRefreshSessionCreateData extends CookieAuthRefreshSessionCreateData_base {
+}
+export {};
+//# sourceMappingURL=cookie-auth-refresh-session.model.d.ts.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-refresh-session.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-refresh-session.model.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-refresh-session.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAK/D;;GAEG;AACH,qBACa,wBAAyB,SAAQ,UAAU;IACpD;;OAEG;IAEH,MAAM,EAAG,MAAM,CAAC;IAChB;;OAEG;IAEH,cAAc,EAAG,IAAI,CAAC;IACtB;;OAEG;IAEH,SAAS,EAAG,MAAM,CAAC;IACnB;;;;OAIG;IAEH,WAAW,EAAG,OAAO,CAAC;IACtB;;;;;OAKG;IAEH,QAAQ,EAAG,MAAM,CAAC;CACrB;;AAED;;GAEG;AACH,qBAAa,kCAAmC,SAAQ,uCAA2C;CAAG"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-refresh-session.model.js

@@ -0,0 +1,77 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CookieAuthRefreshSessionCreateData = exports.CookieAuthRefreshSession = void 0;
+const base_entity_model_1 = require("../../../entity/base-entity.model");
+const entity_decorator_1 = require("../../../entity/decorators/entity.decorator");
+const property_decorator_1 = require("../../../entity/decorators/property.decorator");
+const omit_class_model_1 = require("../../../entity/omit-class.model");
+/**
+ * A cookie auth refresh session.
+ */
+let CookieAuthRefreshSession = class CookieAuthRefreshSession extends base_entity_model_1.BaseEntity {
+    /**
+     * The id of the user that this session belong to.
+     */
+    userId;
+    /**
+     * The expiration date of the session.
+     */
+    expirationDate;
+    /**
+     * The token to prohibit cross site request forgery.
+     */
+    csrfToken;
+    /**
+     * Whether or not this session has been blacklisted.
+     *
+     * Is used for automatic reuse detection.
+     */
+    blacklisted;
+    /**
+     * The id of the "family" this token belongs to.
+     * All tokens that belong to the same "ancestor" are considered to be in a family.
+     *
+     * Is used for automatic reuse detection.
+     */
+    familyId;
+};
+exports.CookieAuthRefreshSession = CookieAuthRefreshSession;
+__decorate([
+    property_decorator_1.Property.string({ format: 'uuid' }),
+    __metadata("design:type", String)
+], CookieAuthRefreshSession.prototype, "userId", void 0);
+__decorate([
+    property_decorator_1.Property.date(),
+    __metadata("design:type", Date)
+], CookieAuthRefreshSession.prototype, "expirationDate", void 0);
+__decorate([
+    property_decorator_1.Property.string(),
+    __metadata("design:type", String)
+], CookieAuthRefreshSession.prototype, "csrfToken", void 0);
+__decorate([
+    property_decorator_1.Property.boolean(),
+    __metadata("design:type", Boolean)
+], CookieAuthRefreshSession.prototype, "blacklisted", void 0);
+__decorate([
+    property_decorator_1.Property.string({ format: 'uuid' }),
+    __metadata("design:type", String)
+], CookieAuthRefreshSession.prototype, "familyId", void 0);
+exports.CookieAuthRefreshSession = CookieAuthRefreshSession = __decorate([
+    (0, entity_decorator_1.Entity)({ allowOrphan: true })
+], CookieAuthRefreshSession);
+/**
+ * Data for creating a new cookie auth refresh session.
+ */
+class CookieAuthRefreshSessionCreateData extends (0, omit_class_model_1.OmitClass)(CookieAuthRefreshSession, ['id']) {
+}
+exports.CookieAuthRefreshSessionCreateData = CookieAuthRefreshSessionCreateData;
+//# sourceMappingURL=cookie-auth-refresh-session.model.js.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-refresh-session.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-refresh-session.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-refresh-session.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yEAA+D;AAC/D,kFAAqE;AACrE,sFAAyE;AACzE,uEAA6D;AAE7D;;GAEG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,8BAAU;IACpD;;OAEG;IAEH,MAAM,CAAU;IAChB;;OAEG;IAEH,cAAc,CAAQ;IACtB;;OAEG;IAEH,SAAS,CAAU;IACnB;;;;OAIG;IAEH,WAAW,CAAW;IACtB;;;;;OAKG;IAEH,QAAQ,CAAU;CACrB,CAAA;AA/BY,4DAAwB;AAKjC;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;wDACpB;AAKhB;IADC,6BAAQ,CAAC,IAAI,EAAE;8BACC,IAAI;gEAAC;AAKtB;IADC,6BAAQ,CAAC,MAAM,EAAE;;2DACC;AAOnB;IADC,6BAAQ,CAAC,OAAO,EAAE;;6DACG;AAQtB;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;0DAClB;mCA9BT,wBAAwB;IADpC,IAAA,yBAAM,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;GACjB,wBAAwB,CA+BpC;AAED;;GAEG;AACH,MAAa,kCAAmC,SAAQ,IAAA,4BAAS,EAAC,wBAAwB,EAAE,CAAC,IAAI,CAAC,CAAC;CAAG;AAAtG,gFAAsG"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-request-password-reset-data.model.d.ts

@@ -0,0 +1,26 @@
+import { Transaction } from '../../../data-source/transaction/transaction.model';
+import { QueueEmailData } from '../../../email/models/create-email-data.model';
+import { BaseUser } from '../../models/base-user.model';
+/**
+ * The data used by the cookie auth strategy to request a password reset.
+ */
+export type CookieAuthRequestPasswordResetData<RoleType extends string, UserType extends BaseUser<RoleType>> = {
+    /**
+     * The user which password should be reset.
+     */
+    user: UserType;
+    /**
+     * Additional data for the password reset email.
+     */
+    emailData?: Partial<QueueEmailData & {
+        /**
+         * The url where the password reset confirmation happens.
+         */
+        confirmPasswordResetUrl: string;
+    }>;
+    /**
+     * The transaction that this should run in.
+     */
+    transaction: Transaction;
+};
+//# sourceMappingURL=cookie-auth-request-password-reset-data.model.d.ts.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-request-password-reset-data.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-request-password-reset-data.model.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-request-password-reset-data.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oDAAoD,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,+CAA+C,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAExD;;GAEG;AACH,MAAM,MAAM,kCAAkC,CAAC,QAAQ,SAAS,MAAM,EAAE,QAAQ,SAAS,QAAQ,CAAC,QAAQ,CAAC,IAAI;IAC3G;;OAEG;IACH,IAAI,EAAE,QAAQ,CAAC;IACf;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,CACf,cAAc,GAAG;QACb;;WAEG;QACH,uBAAuB,EAAE,MAAM,CAAA;KAClC,CACJ,CAAC;IACF;;OAEG;IACH,WAAW,EAAE,WAAW,CAAA;CAC3B,CAAC"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-request-password-reset-data.model.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=cookie-auth-request-password-reset-data.model.js.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-request-password-reset-data.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-request-password-reset-data.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-request-password-reset-data.model.ts"],"names":[],"mappings":""}

package/dist/cjs/auth/strategies/cookie/cookie-auth-session-cleanup.cron-job.d.ts

@@ -0,0 +1,15 @@
+import { CookieAuthRefreshSession } from './cookie-auth-refresh-session.model';
+import { CookieAuthSession } from './cookie-auth-session.model';
+import { CronJob, InitialCronConfig } from '../../../cron/cron-job.model';
+import { Repository } from '../../../data-source/repository';
+/**
+ * A cron job to cleanup expired cookie and cookie refresh sessions.
+ */
+export declare class CookieAuthSessionCleanupCronJob extends CronJob {
+    private readonly sessionRepository;
+    private readonly refreshSessionRepository;
+    initialConfig: InitialCronConfig;
+    constructor(sessionRepository: Repository<CookieAuthSession>, refreshSessionRepository: Repository<CookieAuthRefreshSession>);
+    onTick(): Promise<void>;
+}
+//# sourceMappingURL=cookie-auth-session-cleanup.cron-job.d.ts.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-session-cleanup.cron-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-session-cleanup.cron-job.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-session-cleanup.cron-job.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAG7D;;GAEG;AACH,qBAAa,+BAAgC,SAAQ,OAAO;IAUpD,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IAV7C,aAAa,EAAE,iBAAiB,CAI9B;gBAImB,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,CAAC,EAEhD,wBAAwB,EAAE,UAAU,CAAC,wBAAwB,CAAC;IAM7E,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CAMhC"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-session-cleanup.cron-job.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CookieAuthSessionCleanupCronJob = void 0;
+const cookie_auth_refresh_session_model_1 = require("./cookie-auth-refresh-session.model");
+const cookie_auth_session_model_1 = require("./cookie-auth-session.model");
+const cron_expression_utilities_1 = require("../../../cron/cron-expression.utilities");
+const cron_job_model_1 = require("../../../cron/cron-job.model");
+const repository_1 = require("../../../data-source/repository");
+const inject_repository_decorator_1 = require("../../../di/decorators/inject-repository.decorator");
+/**
+ * A cron job to cleanup expired cookie and cookie refresh sessions.
+ */
+let CookieAuthSessionCleanupCronJob = class CookieAuthSessionCleanupCronJob extends cron_job_model_1.CronJob {
+    sessionRepository;
+    refreshSessionRepository;
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    initialConfig = {
+        name: 'Cleanup cookie auth sessions',
+        cron: cron_expression_utilities_1.CronExpression.daily().build(),
+        runOnInit: false
+    };
+    constructor(sessionRepository, refreshSessionRepository) {
+        super();
+        this.sessionRepository = sessionRepository;
+        this.refreshSessionRepository = refreshSessionRepository;
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async onTick() {
+        await this.sessionRepository.deleteAll({ expirationDate: { before: new Date() } });
+        // blacklisted refresh sessions need to stay,
+        // to find out if someone tries to use them a second time.
+        await this.refreshSessionRepository.deleteAll({ expirationDate: { before: new Date() } });
+    }
+};
+exports.CookieAuthSessionCleanupCronJob = CookieAuthSessionCleanupCronJob;
+exports.CookieAuthSessionCleanupCronJob = CookieAuthSessionCleanupCronJob = __decorate([
+    __param(0, (0, inject_repository_decorator_1.InjectRepository)(cookie_auth_session_model_1.CookieAuthSession)),
+    __param(1, (0, inject_repository_decorator_1.InjectRepository)(cookie_auth_refresh_session_model_1.CookieAuthRefreshSession)),
+    __metadata("design:paramtypes", [repository_1.Repository,
+        repository_1.Repository])
+], CookieAuthSessionCleanupCronJob);
+//# sourceMappingURL=cookie-auth-session-cleanup.cron-job.js.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-session-cleanup.cron-job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-session-cleanup.cron-job.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-session-cleanup.cron-job.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2FAA+E;AAC/E,2EAAgE;AAChE,uFAAyE;AACzE,iEAA0E;AAC1E,gEAA6D;AAC7D,oGAAsF;AAEtF;;GAEG;AACH,IAAa,+BAA+B,GAA5C,MAAa,+BAAgC,SAAQ,wBAAO;IAUnC;IAEA;IAXrB,+CAA+C;IAC/C,aAAa,GAAsB;QAC/B,IAAI,EAAE,8BAA8B;QACpC,IAAI,EAAE,0CAAc,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE;QACpC,SAAS,EAAE,KAAK;KACnB,CAAC;IAEF,YAEqB,iBAAgD,EAEhD,wBAA8D;QAE/E,KAAK,EAAE,CAAC;QAJS,sBAAiB,GAAjB,iBAAiB,CAA+B;QAEhD,6BAAwB,GAAxB,wBAAwB,CAAsC;IAGnF,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,MAAM;QACR,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACnF,6CAA6C;QAC7C,0DAA0D;QAC1D,MAAM,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;CACJ,CAAA;AAxBY,0EAA+B;0CAA/B,+BAA+B;IASnC,WAAA,IAAA,8CAAgB,EAAC,6CAAiB,CAAC,CAAA;IAEnC,WAAA,IAAA,8CAAgB,EAAC,4DAAwB,CAAC,CAAA;qCADP,uBAAU;QAEH,uBAAU;GAZhD,+BAA+B,CAwB3C"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-session.model.d.ts

@@ -0,0 +1,29 @@
+import { BaseEntity } from '../../../entity/base-entity.model';
+/**
+ * A cookie auth session.
+ */
+export declare class CookieAuthSession extends BaseEntity {
+    /**
+     * The id of the user that this session belong to.
+     */
+    userId: string;
+    /**
+     * The expiration date of the session.
+     */
+    expirationDate: Date;
+    /**
+     * The id of the "family" this token belongs to.
+     * All tokens that belong to the same "ancestor" are considered to be in a family.
+     *
+     * Is used for automatic reuse detection.
+     */
+    familyId: string;
+}
+declare const CookieAuthSessionCreateData_base: import("../../..").Newable<Omit<CookieAuthSession, "id">>;
+/**
+ * Data for creating a new cookie auth session.
+ */
+export declare class CookieAuthSessionCreateData extends CookieAuthSessionCreateData_base {
+}
+export {};
+//# sourceMappingURL=cookie-auth-session.model.d.ts.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-session.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-session.model.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-session.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAK/D;;GAEG;AACH,qBACa,iBAAkB,SAAQ,UAAU;IAC7C;;OAEG;IAEH,MAAM,EAAG,MAAM,CAAC;IAChB;;OAEG;IAEH,cAAc,EAAG,IAAI,CAAC;IACtB;;;;;OAKG;IAEH,QAAQ,EAAG,MAAM,CAAC;CACrB;;AAED;;GAEG;AACH,qBAAa,2BAA4B,SAAQ,gCAAoC;CAAG"}

package/dist/cjs/auth/strategies/cookie/cookie-auth-session.model.js

@@ -0,0 +1,59 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CookieAuthSessionCreateData = exports.CookieAuthSession = void 0;
+const base_entity_model_1 = require("../../../entity/base-entity.model");
+const entity_decorator_1 = require("../../../entity/decorators/entity.decorator");
+const property_decorator_1 = require("../../../entity/decorators/property.decorator");
+const omit_class_model_1 = require("../../../entity/omit-class.model");
+/**
+ * A cookie auth session.
+ */
+let CookieAuthSession = class CookieAuthSession extends base_entity_model_1.BaseEntity {
+    /**
+     * The id of the user that this session belong to.
+     */
+    userId;
+    /**
+     * The expiration date of the session.
+     */
+    expirationDate;
+    /**
+     * The id of the "family" this token belongs to.
+     * All tokens that belong to the same "ancestor" are considered to be in a family.
+     *
+     * Is used for automatic reuse detection.
+     */
+    familyId;
+};
+exports.CookieAuthSession = CookieAuthSession;
+__decorate([
+    property_decorator_1.Property.string({ format: 'uuid' }),
+    __metadata("design:type", String)
+], CookieAuthSession.prototype, "userId", void 0);
+__decorate([
+    property_decorator_1.Property.date(),
+    __metadata("design:type", Date)
+], CookieAuthSession.prototype, "expirationDate", void 0);
+__decorate([
+    property_decorator_1.Property.string({ format: 'uuid' }),
+    __metadata("design:type", String)
+], CookieAuthSession.prototype, "familyId", void 0);
+exports.CookieAuthSession = CookieAuthSession = __decorate([
+    (0, entity_decorator_1.Entity)({ allowOrphan: true })
+], CookieAuthSession);
+/**
+ * Data for creating a new cookie auth session.
+ */
+class CookieAuthSessionCreateData extends (0, omit_class_model_1.OmitClass)(CookieAuthSession, ['id']) {
+}
+exports.CookieAuthSessionCreateData = CookieAuthSessionCreateData;
+//# sourceMappingURL=cookie-auth-session.model.js.map

package/dist/cjs/auth/strategies/cookie/cookie-auth-session.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth-session.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth-session.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yEAA+D;AAC/D,kFAAqE;AACrE,sFAAyE;AACzE,uEAA6D;AAE7D;;GAEG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,8BAAU;IAC7C;;OAEG;IAEH,MAAM,CAAU;IAChB;;OAEG;IAEH,cAAc,CAAQ;IACtB;;;;;OAKG;IAEH,QAAQ,CAAU;CACrB,CAAA;AAnBY,8CAAiB;AAK1B;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;iDACpB;AAKhB;IADC,6BAAQ,CAAC,IAAI,EAAE;8BACC,IAAI;yDAAC;AAQtB;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;mDAClB;4BAlBT,iBAAiB;IAD7B,IAAA,yBAAM,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;GACjB,iBAAiB,CAmB7B;AAED;;GAEG;AACH,MAAa,2BAA4B,SAAQ,IAAA,4BAAS,EAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC;CAAG;AAAxF,kEAAwF"}

package/dist/cjs/auth/strategies/cookie/cookie-auth.auth-strategy.d.ts

@@ -0,0 +1,73 @@
+import { CookieAuthConfirmPasswordResetData } from './cookie-auth-confirm-password-reset-data.model';
+import { CookieAuthRefreshLoginData } from './cookie-auth-refresh-login-data.model';
+import { CookieAuthRefreshSession, CookieAuthRefreshSessionCreateData } from './cookie-auth-refresh-session.model';
+import { CookieAuthRequestPasswordResetData } from './cookie-auth-request-password-reset-data.model';
+import { CookieAuthSession, CookieAuthSessionCreateData } from './cookie-auth-session.model';
+import { ZibriApplication } from '../../../application';
+import { HttpRequestContext } from '../../../context/request/http-request.context';
+import { WebsocketRequestContext } from '../../../context/request/websocket-request.context';
+import { Repository } from '../../../data-source/repository';
+import { type EmailServiceInterface } from '../../../email/email-service.interface';
+import { BaseEntity } from '../../../entity/base-entity.model';
+import { OpenApiSecuritySchemeObject } from '../../../open-api/open-api.model';
+import { Newable } from '../../../types/newable.type';
+import { type OmitStrict } from '../../../types/omit-strict.type';
+import { type HashServiceInterface } from '../../hash/hash-service.interface';
+import { BaseUser } from '../../models/base-user.model';
+import { type UserServiceInterface } from '../../user/user-service.interface';
+import { AuthStrategyInterface } from '../auth-strategy.interface';
+import { CookieAuthCredentials, CookieAuthCredentialsData } from './cookie-auth-credentials.model';
+import { CookieAuthData } from './cookie-auth-data.model';
+import { CookieAuthLogoutData } from './cookie-auth-logout-data.model';
+import { type CookieOptions } from '../../../http/cookie-options.model';
+import { PasswordResetToken } from '../../models/password-reset-token.model';
+/**
+ * Options input for any cookie session.
+ */
+export type CookieAuthSessionOptionsInput = OmitStrict<CookieOptions, 'maxAge' | 'expires' | 'signed' | 'httpOnly' | 'secure'>;
+/**
+ * Cookie auth strategy implementation of Zibri.
+ */
+export declare class CookieAuthStrategy<RoleType extends string, UserType extends BaseUser<RoleType> = BaseUser<RoleType>> implements AuthStrategyInterface<RoleType, UserType, CookieAuthData<RoleType>, CookieAuthCredentialsData, CookieAuthRequestPasswordResetData<RoleType, UserType>, CookieAuthConfirmPasswordResetData, CookieAuthRefreshLoginData, CookieAuthLogoutData> {
+    private readonly sessionRepository;
+    private readonly refreshSessionRepository;
+    private readonly userService;
+    private readonly csrfTokenHeader;
+    private readonly sessionExpiresInMs;
+    private readonly refreshSessionExpiresInMs;
+    private readonly passwordResetTokenExpiresInMs;
+    private readonly passwordResetTokenRepository;
+    private readonly credentialsRepository;
+    private readonly emailService;
+    private readonly hashService;
+    readonly name: string;
+    readonly securityScheme: OpenApiSecuritySchemeObject;
+    private readonly confirmPasswordResetUrl;
+    private readonly PasswordResetEmail;
+    private readonly sessionOptions;
+    private readonly refreshSessionOptions;
+    constructor(sessionRepository: Repository<CookieAuthSession, CookieAuthSessionCreateData>, refreshSessionRepository: Repository<CookieAuthRefreshSession, CookieAuthRefreshSessionCreateData>, userService: UserServiceInterface, csrfTokenHeader: string, sessionOptions: OmitStrict<CookieOptions, 'maxAge' | 'expires'>, refreshSessionOptions: OmitStrict<CookieOptions, 'maxAge' | 'expires'>, sessionExpiresInMs: number, refreshSessionExpiresInMs: number, passwordResetTokenExpiresInMs: number, passwordResetTokenRepository: Repository<PasswordResetToken>, credentialsRepository: Repository<CookieAuthCredentials>, emailService: EmailServiceInterface, hashService: HashServiceInterface, secret: string | undefined);
+    init(app: ZibriApplication): void;
+    resolveUser(context: HttpRequestContext | WebsocketRequestContext): Promise<UserType | undefined>;
+    login(credentials: CookieAuthCredentialsData): Promise<CookieAuthData<RoleType>>;
+    logout(data: CookieAuthLogoutData): Promise<void>;
+    refreshLogin(data: CookieAuthRefreshLoginData): Promise<CookieAuthData<RoleType>>;
+    private rotateSessions;
+    isLoggedIn(context: HttpRequestContext | WebsocketRequestContext): Promise<boolean>;
+    hasRole(context: HttpRequestContext | WebsocketRequestContext, allowedRoles: RoleType[]): Promise<boolean>;
+    belongsTo<TargetEntity extends Newable<BaseEntity>>(context: HttpRequestContext | WebsocketRequestContext, targetEntity: TargetEntity, targetUserIdKey: keyof InstanceType<TargetEntity>, targetIdParamKey: string): Promise<boolean>;
+    requestPasswordReset(data: CookieAuthRequestPasswordResetData<RoleType, UserType>): Promise<void>;
+    confirmPasswordReset(data: CookieAuthConfirmPasswordResetData): Promise<void>;
+    private activePasswordResetTokenAlreadyExists;
+    private resolveSession;
+    private resolveAndValidateSession;
+    private isCsrfTokenValid;
+    private resolveRefreshSession;
+    private createSession;
+    private createRefreshSession;
+    private resolveCsrfTokenFromHeader;
+    private clearCookies;
+    private setSessionCookie;
+    private setRefreshSessionCookie;
+}
+//# sourceMappingURL=cookie-auth.auth-strategy.d.ts.map

package/dist/cjs/auth/strategies/cookie/cookie-auth.auth-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie-auth.auth-strategy.d.ts","sourceRoot":"","sources":["../../../../../src/auth/strategies/cookie/cookie-auth.auth-strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,wBAAwB,EAAE,kCAAkC,EAAE,MAAM,qCAAqC,CAAC;AACnH,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AAErG,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAO7D,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAEpF,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAK/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAE/E,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAGlE,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAgC,MAAM,yCAAyC,CAAC;AAG3G;;GAEG;AACH,MAAM,MAAM,6BAA6B,GAAG,UAAU,CAAC,aAAa,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC;AAQ/H;;GAEG;AACH,qBAAa,kBAAkB,CAC3B,QAAQ,SAAS,MAAM,EACvB,QAAQ,SAAS,QAAQ,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAC1D,YAAW,qBAAqB,CAC9B,QAAQ,EACR,QAAQ,EACR,cAAc,CAAC,QAAQ,CAAC,EACxB,yBAAyB,EACzB,kCAAkC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACtD,kCAAkC,EAClC,0BAA0B,EAC1B,oBAAoB,CACvB;IAaO,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAElC,OAAO,CAAC,QAAQ,CAAC,wBAAwB;IAEzC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAE5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAMhC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IAEnC,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAE1C,OAAO,CAAC,QAAQ,CAAC,6BAA6B;IAE9C,OAAO,CAAC,QAAQ,CAAC,4BAA4B;IAE7C,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IAEtC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAnChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAY;IAEjC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;IAErD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiD;IACpF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA2B;gBAI5C,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,EAE7E,wBAAwB,EAAE,UAAU,CAAC,wBAAwB,EAAE,kCAAkC,CAAC,EAElG,WAAW,EAAE,oBAAoB,EAEjC,eAAe,EAAE,MAAM,EAExC,cAAc,EAAE,UAAU,CAAC,aAAa,EAAE,QAAQ,GAAG,SAAS,CAAC,EAE/D,qBAAqB,EAAE,UAAU,CAAC,aAAa,EAAE,QAAQ,GAAG,SAAS,CAAC,EAErD,kBAAkB,EAAE,MAAM,EAE1B,yBAAyB,EAAE,MAAM,EAEjC,6BAA6B,EAAE,MAAM,EAErC,4BAA4B,EAAE,UAAU,CAAC,kBAAkB,CAAC,EAE5D,qBAAqB,EAAE,UAAU,CAAC,qBAAqB,CAAC,EAExD,YAAY,EAAE,qBAAqB,EAEnC,WAAW,EAAE,oBAAoB,EAElD,MAAM,EAAE,MAAM,GAAG,SAAS;IA0C9B,IAAI,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI;IAO3B,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,uBAAuB,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IAUjG,KAAK,CAAC,WAAW,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAiChF,MAAM,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBjD,YAAY,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YA4CzE,cAAc;IAiCtB,UAAU,CAAC,OAAO,EAAE,kBAAkB,GAAG,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC;IAKnF,OAAO,CACT,OAAO,EAAE,kBAAkB,GAAG,uBAAuB,EACrD,YAAY,EAAE,QAAQ,EAAE,GACzB,OAAO,CAAC,OAAO,CAAC;IAUb,SAAS,CAAC,YAAY,SAAS,OAAO,CAAC,UAAU,CAAC,EACpD,OAAO,EAAE,kBAAkB,GAAG,uBAAuB,EACrD,YAAY,EAAE,YAAY,EAC1B,eAAe,EAAE,MAAM,YAAY,CAAC,YAAY,CAAC,EACjD,gBAAgB,EAAE,MAAM,GACzB,OAAO,CAAC,OAAO,CAAC;IAyBb,oBAAoB,CAAC,IAAI,EAAE,kCAAkC,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCjG,oBAAoB,CAAC,IAAI,EAAE,kCAAkC,GAAG,OAAO,CAAC,IAAI,CAAC;YAyBrE,qCAAqC;YAcrC,cAAc;YAed,yBAAyB;IAiCvC,OAAO,CAAC,gBAAgB;YAgBV,qBAAqB;YAkBrB,aAAa;YAYb,oBAAoB;IAelC,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,uBAAuB;CAQlC"}