@lucidcms/core/dist/services/account/confirm-email-change.mjs.map

The core of the Lucid CMS. It's responsible for spinning up the API and serving the CMS.

{"version":3,"file":"confirm-email-change.mjs","names":["userTokenServices.getSingle","constants","securityAuditServices.logSecurityAudit"],"sources":["../../../src/services/account/confirm-email-change.ts"],"sourcesContent":["import constants from \"../../constants/constants.js\";\nimport { copy } from \"../../libs/i18n/index.js\";\nimport {\n\tEmailChangeRequestsRepository,\n\tUsersRepository,\n\tUserTokensRepository,\n} from \"../../libs/repositories/index.js\";\nimport type { ServiceFn } from \"../../utils/services/types.js\";\nimport { invalidateAuthCache } from \"../auth/helpers/auth-cache.js\";\nimport { securityAuditServices, userTokenServices } from \"../index.js\";\n\nconst confirmEmailChange: ServiceFn<\n\t[\n\t\t{\n\t\t\ttoken: string;\n\t\t},\n\t],\n\tundefined\n> = async (context, data) => {\n\tconst Users = new UsersRepository(context.db.client, context.config.db);\n\tconst UserTokens = new UserTokensRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\tconst EmailChangeRequests = new EmailChangeRequestsRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\n\tconst tokenRes = await userTokenServices.getSingle(context, {\n\t\ttoken: data.token,\n\t\ttokenType: constants.userTokens.emailChangeConfirm,\n\t});\n\tif (tokenRes.error) return tokenRes;\n\n\tconst requestRes = await EmailChangeRequests.selectByConfirmTokenId({\n\t\ttokenId: tokenRes.data.id,\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t\tdefaultError: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 404,\n\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t},\n\t\t},\n\t});\n\tif (requestRes.error) return requestRes;\n\n\tif (\n\t\trequestRes.data.status !== constants.emailChangeRequestStatuses.pending ||\n\t\trequestRes.data.user_id !== tokenRes.data.user_id\n\t) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 404,\n\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst userRes = await Users.selectSingle({\n\t\tselect: [\"id\", \"email\"],\n\t\twhere: [{ key: \"id\", operator: \"=\", value: requestRes.data.user_id }],\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t\tdefaultError: {\n\t\t\t\tstatus: 404,\n\t\t\t\tmessage: copy(\"server:core.user.not.found.message\"),\n\t\t\t},\n\t\t},\n\t});\n\tif (userRes.error) return userRes;\n\n\tif (userRes.data.email !== requestRes.data.old_email) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 409,\n\t\t\t\tmessage: copy(\"server:core.email.change.request.stale.message\"),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst [userWithEmailRes, reservedEmailRes] = await Promise.all([\n\t\tUsers.selectSingle({\n\t\t\tselect: [\"id\"],\n\t\t\twhere: [\n\t\t\t\t{ key: \"email\", operator: \"=\", value: requestRes.data.new_email },\n\t\t\t\t{ key: \"id\", operator: \"!=\", value: requestRes.data.user_id },\n\t\t\t],\n\t\t}),\n\t\tEmailChangeRequests.selectReservedByEmail({\n\t\t\temail: requestRes.data.new_email,\n\t\t\texcludeUserId: requestRes.data.user_id,\n\t\t}),\n\t]);\n\tif (userWithEmailRes.error) return userWithEmailRes;\n\tif (reservedEmailRes.error) return reservedEmailRes;\n\tif (\n\t\tuserWithEmailRes.data !== undefined ||\n\t\treservedEmailRes.data !== undefined\n\t) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 409,\n\t\t\t\tmessage: copy(\"server:core.email.change.email.unavailable.message\"),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst now = new Date().toISOString();\n\tconst updateRequestRes = await EmailChangeRequests.updateSingle({\n\t\tdata: {\n\t\t\tstatus: constants.emailChangeRequestStatuses.confirmed,\n\t\t\tconfirmed_at: now,\n\t\t\tupdated_at: now,\n\t\t},\n\t\twhere: [\n\t\t\t{ key: \"id\", operator: \"=\", value: requestRes.data.id },\n\t\t\t{\n\t\t\t\tkey: \"status\",\n\t\t\t\toperator: \"=\",\n\t\t\t\tvalue: constants.emailChangeRequestStatuses.pending,\n\t\t\t},\n\t\t\t{ key: \"expires_at\", operator: \">\", value: now },\n\t\t],\n\t\treturning: [\"id\"],\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t\tdefaultError: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 404,\n\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t},\n\t\t},\n\t});\n\tif (updateRequestRes.error) return updateRequestRes;\n\n\tconst [updateUserRes, consumeTokenRes, auditRes] = await Promise.all([\n\t\tUsers.updateSingle({\n\t\t\tdata: {\n\t\t\t\temail: requestRes.data.new_email,\n\t\t\t\tupdated_at: now,\n\t\t\t},\n\t\t\twhere: [{ key: \"id\", operator: \"=\", value: requestRes.data.user_id }],\n\t\t\treturning: [\"id\"],\n\t\t\tvalidation: {\n\t\t\t\tenabled: true,\n\t\t\t\tdefaultError: {\n\t\t\t\t\tstatus: 400,\n\t\t\t\t},\n\t\t\t},\n\t\t}),\n\t\tUserTokens.updateSingle({\n\t\t\tdata: {\n\t\t\t\tconsumed_at: now,\n\t\t\t\trevoked_at: now,\n\t\t\t\trevoke_reason: constants.userTokenRevokeReasons.emailChangeConfirmed,\n\t\t\t\texpiry_date: now,\n\t\t\t},\n\t\t\twhere: [\n\t\t\t\t{ key: \"id\", operator: \"=\", value: tokenRes.data.id },\n\t\t\t\t{\n\t\t\t\t\tkey: \"token_type\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: constants.userTokens.emailChangeConfirm,\n\t\t\t\t},\n\t\t\t\t{ key: \"revoked_at\", operator: \"is\", value: null },\n\t\t\t\t{ key: \"consumed_at\", operator: \"is\", value: null },\n\t\t\t],\n\t\t\treturning: [\"id\"],\n\t\t\tvalidation: {\n\t\t\t\tenabled: true,\n\t\t\t\tdefaultError: {\n\t\t\t\t\ttype: \"basic\",\n\t\t\t\t\tstatus: 404,\n\t\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t\t},\n\t\t\t},\n\t\t}),\n\t\tsecurityAuditServices.logSecurityAudit(context, {\n\t\t\tuserId: requestRes.data.user_id,\n\t\t\taction: constants.securityAudit.actions.emailChange,\n\t\t\tperformedBy: requestRes.data.user_id,\n\t\t\tpreviousValue: requestRes.data.old_email,\n\t\t\tnewValue: requestRes.data.new_email,\n\t\t}),\n\t]);\n\n\tawait invalidateAuthCache(context);\n\n\tif (updateUserRes.error) return updateUserRes;\n\tif (consumeTokenRes.error) return consumeTokenRes;\n\tif (auditRes.error) return auditRes;\n\n\treturn {\n\t\terror: undefined,\n\t\tdata: undefined,\n\t};\n};\n\nexport default confirmEmailChange;\n"],"mappings":"gbAWA,MAAM,EAOF,MAAO,EAAS,IAAS,CAC5B,IAAM,EAAQ,IAAI,EAAgB,EAAQ,GAAG,OAAQ,EAAQ,OAAO,EAAE,EAChE,EAAa,IAAI,EACtB,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EACM,EAAsB,IAAI,EAC/B,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EAEM,EAAW,MAAMA,EAA4B,EAAS,CAC3D,MAAO,EAAK,MACZ,UAAWC,EAAU,WAAW,kBACjC,CAAC,EACD,GAAI,EAAS,MAAO,OAAO,EAE3B,IAAM,EAAa,MAAM,EAAoB,uBAAuB,CACnE,QAAS,EAAS,KAAK,GACvB,WAAY,CACX,QAAS,GACT,aAAc,CACb,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,CACD,CACD,CAAC,EACD,GAAI,EAAW,MAAO,OAAO,EAE7B,GACC,EAAW,KAAK,SAAWA,EAAU,2BAA2B,SAChE,EAAW,KAAK,UAAY,EAAS,KAAK,QAE1C,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,EACA,KAAM,IAAA,EACP,EAGD,IAAM,EAAU,MAAM,EAAM,aAAa,CACxC,OAAQ,CAAC,KAAM,OAAO,EACtB,MAAO,CAAC,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAW,KAAK,OAAQ,CAAC,EACpE,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,IACR,QAAS,EAAK,oCAAoC,CACnD,CACD,CACD,CAAC,EACD,GAAI,EAAQ,MAAO,OAAO,EAE1B,GAAI,EAAQ,KAAK,QAAU,EAAW,KAAK,UAC1C,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,gDAAgD,CAC/D,EACA,KAAM,IAAA,EACP,EAGD,GAAM,CAAC,EAAkB,GAAoB,MAAM,QAAQ,IAAI,CAC9D,EAAM,aAAa,CAClB,OAAQ,CAAC,IAAI,EACb,MAAO,CACN,CAAE,IAAK,QAAS,SAAU,IAAK,MAAO,EAAW,KAAK,SAAU,EAChE,CAAE,IAAK,KAAM,SAAU,KAAM,MAAO,EAAW,KAAK,OAAQ,CAC7D,CACD,CAAC,EACD,EAAoB,sBAAsB,CACzC,MAAO,EAAW,KAAK,UACvB,cAAe,EAAW,KAAK,OAChC,CAAC,CACF,CAAC,EACD,GAAI,EAAiB,MAAO,OAAO,EACnC,GAAI,EAAiB,MAAO,OAAO,EACnC,GACC,EAAiB,OAAS,IAAA,IAC1B,EAAiB,OAAS,IAAA,GAE1B,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,oDAAoD,CACnE,EACA,KAAM,IAAA,EACP,EAGD,IAAM,EAAM,IAAI,KAAK,CAAA,CAAE,YAAY,EAC7B,EAAmB,MAAM,EAAoB,aAAa,CAC/D,KAAM,CACL,OAAQA,EAAU,2BAA2B,UAC7C,aAAc,EACd,WAAY,CACb,EACA,MAAO,CACN,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAW,KAAK,EAAG,EACtD,CACC,IAAK,SACL,SAAU,IACV,MAAOA,EAAU,2BAA2B,OAC7C,EACA,CAAE,IAAK,aAAc,SAAU,IAAK,MAAO,CAAI,CAChD,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,CACD,CACD,CAAC,EACD,GAAI,EAAiB,MAAO,OAAO,EAEnC,GAAM,CAAC,EAAe,EAAiB,GAAY,MAAM,QAAQ,IAAI,CACpE,EAAM,aAAa,CAClB,KAAM,CACL,MAAO,EAAW,KAAK,UACvB,WAAY,CACb,EACA,MAAO,CAAC,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAW,KAAK,OAAQ,CAAC,EACpE,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,GACT,CACD,CACD,CAAC,EACD,EAAW,aAAa,CACvB,KAAM,CACL,YAAa,EACb,WAAY,EACZ,cAAeA,EAAU,uBAAuB,qBAChD,YAAa,CACd,EACA,MAAO,CACN,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAS,KAAK,EAAG,EACpD,CACC,IAAK,aACL,SAAU,IACV,MAAOA,EAAU,WAAW,kBAC7B,EACA,CAAE,IAAK,aAAc,SAAU,KAAM,MAAO,IAAK,EACjD,CAAE,IAAK,cAAe,SAAU,KAAM,MAAO,IAAK,CACnD,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,CACD,CACD,CAAC,EACDC,EAAuC,EAAS,CAC/C,OAAQ,EAAW,KAAK,QACxB,OAAQD,EAAU,cAAc,QAAQ,YACxC,YAAa,EAAW,KAAK,QAC7B,cAAe,EAAW,KAAK,UAC/B,SAAU,EAAW,KAAK,SAC3B,CAAC,CACF,CAAC,EAQD,OANA,MAAM,EAAoB,CAAO,EAE7B,EAAc,MAAc,EAC5B,EAAgB,MAAc,EAC9B,EAAS,MAAc,EAEpB,CACN,MAAO,IAAA,GACP,KAAM,IAAA,EACP,CACD"}