zibri 2.3.0 → 2.4.0

package/dist/esm/auth/strategies/jwt/jwt-credentials.model.js

@@ -1,3 +1,4 @@
+"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -7,14 +8,16 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-import { BaseEntity } from '../../../entity/base-entity.model';
-import { Entity } from '../../../entity/decorators/entity.decorator';
-import { Property } from '../../../entity/decorators/property.decorator';
-import { OmitClass } from '../../../entity/omit-class.model';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtCredentialsCreateData = exports.JwtCredentialsDto = exports.JwtCredentials = void 0;
+const base_entity_model_1 = require("../../../entity/base-entity.model");
+const entity_decorator_1 = require("../../../entity/decorators/entity.decorator");
+const property_decorator_1 = require("../../../entity/decorators/property.decorator");
+const omit_class_model_1 = require("../../../entity/omit-class.model");
 /**
  * The credentials used by the jwt auth strategy.
  */
-let JwtCredentials = class JwtCredentials extends BaseEntity {
+let JwtCredentials = class JwtCredentials extends base_entity_model_1.BaseEntity {
     /**
      * The id of the user that this credentials belong to.
      */
@@ -24,34 +27,44 @@ let JwtCredentials = class JwtCredentials extends BaseEntity {
      */
     email;
     /**
-     * The password.
+     * The hashed password.
      */
     password;
 };
+exports.JwtCredentials = JwtCredentials;
 __decorate([
-    Property.string({ format: 'uuid' }),
+    property_decorator_1.Property.string({ format: 'uuid' }),
     __metadata("design:type", String)
 ], JwtCredentials.prototype, "userId", void 0);
 __decorate([
-    Property.string({ unique: true, format: 'email' }),
+    property_decorator_1.Property.string({ unique: true, format: 'email' }),
     __metadata("design:type", String)
 ], JwtCredentials.prototype, "email", void 0);
 __decorate([
-    Property.string(),
+    property_decorator_1.Property.string({ hash: true }),
     __metadata("design:type", String)
 ], JwtCredentials.prototype, "password", void 0);
-JwtCredentials = __decorate([
-    Entity({ allowOrphan: true })
+exports.JwtCredentials = JwtCredentials = __decorate([
+    (0, entity_decorator_1.Entity)({ allowOrphan: true })
 ], JwtCredentials);
-export { JwtCredentials };
 /**
  * The actual credentials sent over http.
  */
-export class JwtCredentialsDto extends OmitClass(JwtCredentials, ['id', 'userId']) {
+class JwtCredentialsDto extends (0, omit_class_model_1.OmitClass)(JwtCredentials, ['id', 'userId', 'password']) {
+    /**
+     * The password.
+     */
+    password;
 }
+exports.JwtCredentialsDto = JwtCredentialsDto;
+__decorate([
+    property_decorator_1.Property.string(),
+    __metadata("design:type", String)
+], JwtCredentialsDto.prototype, "password", void 0);
 /**
  * The data for creating new jwt credentials.
  */
-export class JwtCredentialsCreateData extends OmitClass(JwtCredentials, ['id']) {
+class JwtCredentialsCreateData extends (0, omit_class_model_1.OmitClass)(JwtCredentials, ['id']) {
 }
+exports.JwtCredentialsCreateData = JwtCredentialsCreateData;
 //# sourceMappingURL=jwt-credentials.model.js.map

package/dist/esm/auth/strategies/jwt/jwt-credentials.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-credentials.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/jwt/jwt-credentials.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,6CAA6C,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,+CAA+C,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAG7D;;GAEG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,UAAU;IAC1C;;OAEG;IAEH,MAAM,CAAU;IAEhB;;OAEG;IAEH,KAAK,CAAU;IAEf;;OAEG;IAEH,QAAQ,CAAU;CACrB,CAAA;AAbG;IADC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;8CACpB;AAMhB;IADC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;;6CACpC;AAMf;IADC,QAAQ,CAAC,MAAM,EAAE;;gDACA;AAjBT,cAAc;IAD1B,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;GACjB,cAAc,CAkB1B;;AAED;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,SAAS,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;CAAG;AAErF;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,SAAS,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC;CAAG"}
+{"version":3,"file":"jwt-credentials.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/jwt/jwt-credentials.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yEAA+D;AAC/D,kFAAqE;AACrE,sFAAyE;AACzE,uEAA6D;AAI7D;;GAEG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,8BAAU;IAC1C;;OAEG;IAEH,MAAM,CAAU;IAEhB;;OAEG;IAEH,KAAK,CAAU;IAEf;;OAEG;IAEH,QAAQ,CAAc;CACzB,CAAA;AAlBY,wCAAc;AAKvB;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;8CACpB;AAMhB;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;;6CACpC;AAMf;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;gDACV;yBAjBb,cAAc;IAD1B,IAAA,yBAAM,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;GACjB,cAAc,CAkB1B;AAED;;GAEG;AACH,MAAa,iBAAkB,SAAQ,IAAA,4BAAS,EAAC,cAAc,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1F;;OAEG;IAEH,QAAQ,CAAU;CACrB;AAND,8CAMC;AADG;IADC,6BAAQ,CAAC,MAAM,EAAE;;mDACA;AAGtB;;GAEG;AACH,MAAa,wBAAyB,SAAQ,IAAA,4BAAS,EAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC;CAAG;AAAlF,4DAAkF"}

package/dist/esm/auth/strategies/jwt/jwt-refresh-login-data.model.js

@@ -1,3 +1,4 @@
+"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -7,18 +8,25 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-import { Property } from '../../../entity/decorators/property.decorator';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtRefreshLoginData = void 0;
+const property_decorator_1 = require("../../../entity/decorators/property.decorator");
 /**
  * The data used to refresh a login inside the jwt auth strategy.
  */
-export class JwtRefreshLoginData {
+class JwtRefreshLoginData {
     /**
      * The long lived refresh token.
      */
     refreshToken;
+    /**
+     * The transaction that this should run in.
+     */
+    transaction;
 }
+exports.JwtRefreshLoginData = JwtRefreshLoginData;
 __decorate([
-    Property.string(),
+    property_decorator_1.Property.string(),
     __metadata("design:type", String)
 ], JwtRefreshLoginData.prototype, "refreshToken", void 0);
 //# sourceMappingURL=jwt-refresh-login-data.model.js.map

package/dist/esm/auth/strategies/jwt/jwt-refresh-login-data.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-refresh-login-data.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/jwt/jwt-refresh-login-data.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,+CAA+C,CAAC;AAEzE;;GAEG;AACH,MAAM,OAAO,mBAAmB;IAC5B;;OAEG;IAEH,YAAY,CAAU;CACzB;AADG;IADC,QAAQ,CAAC,MAAM,EAAE;;yDACI"}
+{"version":3,"file":"jwt-refresh-login-data.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/jwt/jwt-refresh-login-data.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,sFAAyE;AAEzE;;GAEG;AACH,MAAa,mBAAmB;IAC5B;;OAEG;IAEH,YAAY,CAAU;IACtB;;OAEG;IACH,WAAW,CAAe;CAC7B;AAVD,kDAUC;AALG;IADC,6BAAQ,CAAC,MAAM,EAAE;;yDACI"}

package/dist/esm/auth/strategies/jwt/jwt-refresh-token-cleanup.cron-job.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtRefreshTokenCleanupCronJob = void 0;
+const jwt_refresh_token_model_1 = require("./jwt-refresh-token.model");
+const cron_expression_utilities_1 = require("../../../cron/cron-expression.utilities");
+const cron_job_model_1 = require("../../../cron/cron-job.model");
+const repository_1 = require("../../../data-source/repository");
+const inject_repository_decorator_1 = require("../../../di/decorators/inject-repository.decorator");
+/**
+ * A cron job to cleanup expired jwt refresh tokens.
+ */
+let JwtRefreshTokenCleanupCronJob = class JwtRefreshTokenCleanupCronJob extends cron_job_model_1.CronJob {
+    refreshTokenRepository;
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    initialConfig = {
+        name: 'Cleanup jwt refresh tokens',
+        cron: cron_expression_utilities_1.CronExpression.daily().build(),
+        runOnInit: false
+    };
+    constructor(refreshTokenRepository) {
+        super();
+        this.refreshTokenRepository = refreshTokenRepository;
+    }
+    // eslint-disable-next-line jsdoc/require-jsdoc
+    async onTick() {
+        // blacklisted tokens need to stay, to find out
+        // if someone tries to use them a second time.
+        await this.refreshTokenRepository.deleteAll({ expirationDate: { before: new Date() } });
+    }
+};
+exports.JwtRefreshTokenCleanupCronJob = JwtRefreshTokenCleanupCronJob;
+exports.JwtRefreshTokenCleanupCronJob = JwtRefreshTokenCleanupCronJob = __decorate([
+    __param(0, (0, inject_repository_decorator_1.InjectRepository)(jwt_refresh_token_model_1.JwtRefreshToken)),
+    __metadata("design:paramtypes", [repository_1.Repository])
+], JwtRefreshTokenCleanupCronJob);
+//# sourceMappingURL=jwt-refresh-token-cleanup.cron-job.js.map

package/dist/esm/auth/strategies/jwt/jwt-refresh-token-cleanup.cron-job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-refresh-token-cleanup.cron-job.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/jwt/jwt-refresh-token-cleanup.cron-job.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,uEAA4D;AAC5D,uFAAyE;AACzE,iEAA0E;AAC1E,gEAA6D;AAC7D,oGAAsF;AAEtF;;GAEG;AACH,IAAa,6BAA6B,GAA1C,MAAa,6BAA8B,SAAQ,wBAAO;IAUjC;IATrB,+CAA+C;IAC/C,aAAa,GAAsB;QAC/B,IAAI,EAAE,4BAA4B;QAClC,IAAI,EAAE,0CAAc,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE;QACpC,SAAS,EAAE,KAAK;KACnB,CAAC;IAEF,YAEqB,sBAAmD;QAEpE,KAAK,EAAE,CAAC;QAFS,2BAAsB,GAAtB,sBAAsB,CAA6B;IAGxE,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,MAAM;QACR,+CAA+C;QAC/C,8CAA8C;QAC9C,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC;CACJ,CAAA;AArBY,sEAA6B;wCAA7B,6BAA6B;IASjC,WAAA,IAAA,8CAAgB,EAAC,yCAAe,CAAC,CAAA;qCACO,uBAAU;GAV9C,6BAA6B,CAqBzC"}

package/dist/esm/auth/strategies/jwt/jwt-refresh-token-payload.model.js

@@ -1,2 +1,3 @@
-export {};
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
 //# sourceMappingURL=jwt-refresh-token-payload.model.js.map

package/dist/esm/auth/strategies/jwt/jwt-refresh-token.model.js

@@ -1,3 +1,4 @@
+"use strict";
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -7,14 +8,16 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
-import { BaseEntity } from '../../../entity/base-entity.model';
-import { Entity } from '../../../entity/decorators/entity.decorator';
-import { Property } from '../../../entity/decorators/property.decorator';
-import { OmitClass } from '../../../entity/omit-class.model';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtRefreshTokenCreateDto = exports.JwtRefreshToken = void 0;
+const base_entity_model_1 = require("../../../entity/base-entity.model");
+const entity_decorator_1 = require("../../../entity/decorators/entity.decorator");
+const property_decorator_1 = require("../../../entity/decorators/property.decorator");
+const omit_class_model_1 = require("../../../entity/omit-class.model");
 /**
  * The jwt refresh token that gets stored in the data source.
  */
-let JwtRefreshToken = class JwtRefreshToken extends BaseEntity {
+let JwtRefreshToken = class JwtRefreshToken extends base_entity_model_1.BaseEntity {
     /**
      * The id of the user that this token belongs to.
      */
@@ -41,33 +44,34 @@ let JwtRefreshToken = class JwtRefreshToken extends BaseEntity {
      */
     familyId;
 };
+exports.JwtRefreshToken = JwtRefreshToken;
 __decorate([
-    Property.string({ format: 'uuid' }),
+    property_decorator_1.Property.string({ format: 'uuid' }),
     __metadata("design:type", String)
 ], JwtRefreshToken.prototype, "userId", void 0);
 __decorate([
-    Property.string({ unique: true }),
+    property_decorator_1.Property.string({ unique: true }),
     __metadata("design:type", String)
 ], JwtRefreshToken.prototype, "value", void 0);
 __decorate([
-    Property.boolean(),
+    property_decorator_1.Property.boolean(),
     __metadata("design:type", Boolean)
 ], JwtRefreshToken.prototype, "blacklisted", void 0);
 __decorate([
-    Property.date(),
+    property_decorator_1.Property.date(),
     __metadata("design:type", Date)
 ], JwtRefreshToken.prototype, "expirationDate", void 0);
 __decorate([
-    Property.string({ format: 'uuid' }),
+    property_decorator_1.Property.string({ format: 'uuid' }),
     __metadata("design:type", String)
 ], JwtRefreshToken.prototype, "familyId", void 0);
-JwtRefreshToken = __decorate([
-    Entity({ allowOrphan: true })
+exports.JwtRefreshToken = JwtRefreshToken = __decorate([
+    (0, entity_decorator_1.Entity)({ allowOrphan: true })
 ], JwtRefreshToken);
-export { JwtRefreshToken };
 /**
  * Data for creating a new jwt refresh token.
  */
-export class JwtRefreshTokenCreateDto extends OmitClass(JwtRefreshToken, ['id']) {
+class JwtRefreshTokenCreateDto extends (0, omit_class_model_1.OmitClass)(JwtRefreshToken, ['id']) {
 }
+exports.JwtRefreshTokenCreateDto = JwtRefreshTokenCreateDto;
 //# sourceMappingURL=jwt-refresh-token.model.js.map

package/dist/esm/auth/strategies/jwt/jwt-refresh-token.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-refresh-token.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/jwt/jwt-refresh-token.model.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,6CAA6C,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,+CAA+C,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAE7D;;GAEG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,UAAU;IAC3C;;OAEG;IAEH,MAAM,CAAU;IAEhB;;OAEG;IAEH,KAAK,CAAU;IAEf;;;;OAIG;IAEH,WAAW,CAAW;IAEtB;;OAEG;IAEH,cAAc,CAAQ;IAEtB;;;;;OAKG;IAEH,QAAQ,CAAU;CACrB,CAAA;AA9BG;IADC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;+CACpB;AAMhB;IADC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;;8CACnB;AAQf;IADC,QAAQ,CAAC,OAAO,EAAE;;oDACG;AAMtB;IADC,QAAQ,CAAC,IAAI,EAAE;8BACC,IAAI;uDAAC;AAStB;IADC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;iDAClB;AAlCT,eAAe;IAD3B,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;GACjB,eAAe,CAmC3B;;AAED;;GAEG;AACH,MAAM,OAAO,wBAAyB,SAAQ,SAAS,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;CAAG"}
+{"version":3,"file":"jwt-refresh-token.model.js","sourceRoot":"","sources":["../../../../../src/auth/strategies/jwt/jwt-refresh-token.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yEAA+D;AAC/D,kFAAqE;AACrE,sFAAyE;AACzE,uEAA6D;AAE7D;;GAEG;AAEI,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,8BAAU;IAC3C;;OAEG;IAEH,MAAM,CAAU;IAEhB;;OAEG;IAEH,KAAK,CAAU;IAEf;;;;OAIG;IAEH,WAAW,CAAW;IAEtB;;OAEG;IAEH,cAAc,CAAQ;IAEtB;;;;;OAKG;IAEH,QAAQ,CAAU;CACrB,CAAA;AAnCY,0CAAe;AAKxB;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;+CACpB;AAMhB;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;;8CACnB;AAQf;IADC,6BAAQ,CAAC,OAAO,EAAE;;oDACG;AAMtB;IADC,6BAAQ,CAAC,IAAI,EAAE;8BACC,IAAI;uDAAC;AAStB;IADC,6BAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;iDAClB;0BAlCT,eAAe;IAD3B,IAAA,yBAAM,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;GACjB,eAAe,CAmC3B;AAED;;GAEG;AACH,MAAa,wBAAyB,SAAQ,IAAA,4BAAS,EAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;CAAG;AAAnF,4DAAmF"}

package/dist/esm/auth/strategies/jwt/jwt-request-password-reset-data.model.js

@@ -1,2 +1,3 @@
-export {};
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
 //# sourceMappingURL=jwt-request-password-reset-data.model.js.map