@lucidcms/core
Version:
The core of the Lucid CMS. It's responsible for spinning up the API and serving the CMS.
1 lines • 7.29 kB
Source Map (JSON)
{"version":3,"file":"accept-invitation.mjs","names":["constants","formatter"],"sources":["../../../../src/services/auth/invitation/accept-invitation.ts"],"sourcesContent":["import { scrypt } from \"@noble/hashes/scrypt.js\";\nimport constants from \"../../../constants/constants.js\";\nimport formatter from \"../../../libs/formatters/index.js\";\nimport { copy } from \"../../../libs/i18n/index.js\";\nimport {\n\tUsersRepository,\n\tUserTokensRepository,\n} from \"../../../libs/repositories/index.js\";\nimport hashUserToken from \"../../../utils/helpers/hash-user-token.js\";\nimport { generateSecret } from \"../../../utils/helpers/index.js\";\nimport type { ServiceFn } from \"../../../utils/services/types.js\";\n\n/**\n * Accepts an invitation by setting the user's password and marking the invitation as accepted.\n */\nconst acceptInvitation: ServiceFn<\n\t[\n\t\t{\n\t\t\ttoken: string;\n\t\t\tpassword: string;\n\t\t},\n\t],\n\tundefined\n> = async (context, data) => {\n\tif (context.config.auth.password.enabled === false) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 400,\n\t\t\t\tmessage: copy(\n\t\t\t\t\t\"server:core.auth.password.authentication.disabled.message\",\n\t\t\t\t),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst UserTokens = new UserTokensRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\tconst Users = new UsersRepository(context.db.client, context.config.db);\n\tconst hashedToken = hashUserToken(data.token);\n\n\tconst tokenRes = await UserTokens.selectSingle({\n\t\tselect: [\"id\", \"user_id\"],\n\t\twhere: [\n\t\t\t{\n\t\t\t\tkey: \"token\",\n\t\t\t\toperator: \"=\",\n\t\t\t\tvalue: hashedToken,\n\t\t\t},\n\t\t\t{\n\t\t\t\tkey: \"token_type\",\n\t\t\t\toperator: \"=\",\n\t\t\t\tvalue: constants.userTokens.invitation,\n\t\t\t},\n\t\t\t{\n\t\t\t\tkey: \"expiry_date\",\n\t\t\t\toperator: \">\",\n\t\t\t\tvalue: new Date().toISOString(),\n\t\t\t},\n\t\t\t{\n\t\t\t\tkey: \"revoked_at\",\n\t\t\t\toperator: \"is\",\n\t\t\t\tvalue: null,\n\t\t\t},\n\t\t\t{\n\t\t\t\tkey: \"consumed_at\",\n\t\t\t\toperator: \"is\",\n\t\t\t\tvalue: null,\n\t\t\t},\n\t\t],\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t\tdefaultError: {\n\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t\tstatus: 404,\n\t\t\t},\n\t\t},\n\t});\n\tif (tokenRes.error) return tokenRes;\n\n\tconst userRes = await Users.selectSingle({\n\t\tselect: [\"id\", \"invitation_accepted\"],\n\t\twhere: [\n\t\t\t{\n\t\t\t\tkey: \"id\",\n\t\t\t\toperator: \"=\",\n\t\t\t\tvalue: tokenRes.data.user_id,\n\t\t\t},\n\t\t],\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t\tdefaultError: {\n\t\t\t\tstatus: 404,\n\t\t\t\tmessage: copy(\"server:core.user.not.found.message\"),\n\t\t\t},\n\t\t},\n\t});\n\tif (userRes.error) return userRes;\n\n\tif (formatter.formatBoolean(userRes.data?.invitation_accepted)) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 400,\n\t\t\t\tname: copy(\"server:core.auth.invitations.user.already.accepted.name\"),\n\t\t\t\tmessage: copy(\n\t\t\t\t\t\"server:core.auth.invitations.user.already.accepted.message\",\n\t\t\t\t),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst now = new Date().toISOString();\n\tconst consumeTokenRes = await UserTokens.updateSingle({\n\t\tdata: {\n\t\t\tconsumed_at: now,\n\t\t\trevoked_at: now,\n\t\t\trevoke_reason: constants.userTokenRevokeReasons.invitationAccepted,\n\t\t\texpiry_date: now,\n\t\t},\n\t\twhere: [\n\t\t\t{\n\t\t\t\tkey: \"id\",\n\t\t\t\toperator: \"=\",\n\t\t\t\tvalue: tokenRes.data.id,\n\t\t\t},\n\t\t\t{\n\t\t\t\tkey: \"token_type\",\n\t\t\t\toperator: \"=\",\n\t\t\t\tvalue: constants.userTokens.invitation,\n\t\t\t},\n\t\t\t{\n\t\t\t\tkey: \"expiry_date\",\n\t\t\t\toperator: \">\",\n\t\t\t\tvalue: now,\n\t\t\t},\n\t\t\t{\n\t\t\t\tkey: \"revoked_at\",\n\t\t\t\toperator: \"is\",\n\t\t\t\tvalue: null,\n\t\t\t},\n\t\t\t{\n\t\t\t\tkey: \"consumed_at\",\n\t\t\t\toperator: \"is\",\n\t\t\t\tvalue: null,\n\t\t\t},\n\t\t],\n\t\treturning: [\"id\"],\n\t});\n\tif (consumeTokenRes.error) return consumeTokenRes;\n\tif (!consumeTokenRes.data) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t\tstatus: 404,\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst { secret, encryptSecret } = generateSecret(\n\t\tcontext.config.secrets.encryption,\n\t);\n\n\tconst hashedPassword = Buffer.from(\n\t\tscrypt(data.password, secret, constants.scrypt),\n\t).toString(\"base64\");\n\n\tconst updatedUserRes = await Users.updateSingle({\n\t\tdata: {\n\t\t\tpassword: hashedPassword,\n\t\t\tsecret: encryptSecret,\n\t\t\tinvitation_accepted: true,\n\t\t\tupdated_at: new Date().toISOString(),\n\t\t},\n\t\twhere: [\n\t\t\t{\n\t\t\t\tkey: \"id\",\n\t\t\t\toperator: \"=\",\n\t\t\t\tvalue: tokenRes.data.user_id,\n\t\t\t},\n\t\t],\n\t\treturning: [\"id\"],\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t\tdefaultError: {\n\t\t\t\tstatus: 400,\n\t\t\t},\n\t\t},\n\t});\n\tif (updatedUserRes.error) return updatedUserRes;\n\n\treturn {\n\t\terror: undefined,\n\t\tdata: undefined,\n\t};\n};\n\nexport default acceptInvitation;\n"],"mappings":"waAeA,MAAM,EAQF,MAAO,EAAS,IAAS,CAC5B,GAAI,EAAQ,OAAO,KAAK,SAAS,UAAY,GAC5C,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,QAAS,EACR,2DACD,CACD,EACA,KAAM,IAAA,EACP,EAGD,IAAM,EAAa,IAAI,EACtB,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EACM,EAAQ,IAAI,EAAgB,EAAQ,GAAG,OAAQ,EAAQ,OAAO,EAAE,EAChE,EAAc,EAAc,EAAK,KAAK,EAEtC,EAAW,MAAM,EAAW,aAAa,CAC9C,OAAQ,CAAC,KAAM,SAAS,EACxB,MAAO,CACN,CACC,IAAK,QACL,SAAU,IACV,MAAO,CACR,EACA,CACC,IAAK,aACL,SAAU,IACV,MAAOA,EAAU,WAAW,UAC7B,EACA,CACC,IAAK,cACL,SAAU,IACV,MAAO,IAAI,KAAK,CAAA,CAAE,YAAY,CAC/B,EACA,CACC,IAAK,aACL,SAAU,KACV,MAAO,IACR,EACA,CACC,IAAK,cACL,SAAU,KACV,MAAO,IACR,CACD,EACA,WAAY,CACX,QAAS,GACT,aAAc,CACb,QAAS,EAAK,sCAAsC,EACpD,OAAQ,GACT,CACD,CACD,CAAC,EACD,GAAI,EAAS,MAAO,OAAO,EAE3B,IAAM,EAAU,MAAM,EAAM,aAAa,CACxC,OAAQ,CAAC,KAAM,qBAAqB,EACpC,MAAO,CACN,CACC,IAAK,KACL,SAAU,IACV,MAAO,EAAS,KAAK,OACtB,CACD,EACA,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,IACR,QAAS,EAAK,oCAAoC,CACnD,CACD,CACD,CAAC,EACD,GAAI,EAAQ,MAAO,OAAO,EAE1B,GAAIC,EAAU,cAAc,EAAQ,MAAM,mBAAmB,EAC5D,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,KAAM,EAAK,yDAAyD,EACpE,QAAS,EACR,4DACD,CACD,EACA,KAAM,IAAA,EACP,EAGD,IAAM,EAAM,IAAI,KAAK,CAAA,CAAE,YAAY,EAC7B,EAAkB,MAAM,EAAW,aAAa,CACrD,KAAM,CACL,YAAa,EACb,WAAY,EACZ,cAAeD,EAAU,uBAAuB,mBAChD,YAAa,CACd,EACA,MAAO,CACN,CACC,IAAK,KACL,SAAU,IACV,MAAO,EAAS,KAAK,EACtB,EACA,CACC,IAAK,aACL,SAAU,IACV,MAAOA,EAAU,WAAW,UAC7B,EACA,CACC,IAAK,cACL,SAAU,IACV,MAAO,CACR,EACA,CACC,IAAK,aACL,SAAU,KACV,MAAO,IACR,EACA,CACC,IAAK,cACL,SAAU,KACV,MAAO,IACR,CACD,EACA,UAAW,CAAC,IAAI,CACjB,CAAC,EACD,GAAI,EAAgB,MAAO,OAAO,EAClC,GAAI,CAAC,EAAgB,KACpB,MAAO,CACN,MAAO,CACN,KAAM,QACN,QAAS,EAAK,sCAAsC,EACpD,OAAQ,GACT,EACA,KAAM,IAAA,EACP,EAGD,GAAM,CAAE,SAAQ,iBAAkB,EACjC,EAAQ,OAAO,QAAQ,UACxB,EAEM,EAAiB,OAAO,KAC7B,EAAO,EAAK,SAAU,EAAQA,EAAU,MAAM,CAC/C,CAAC,CAAC,SAAS,QAAQ,EAEb,EAAiB,MAAM,EAAM,aAAa,CAC/C,KAAM,CACL,SAAU,EACV,OAAQ,EACR,oBAAqB,GACrB,WAAY,IAAI,KAAK,CAAA,CAAE,YAAY,CACpC,EACA,MAAO,CACN,CACC,IAAK,KACL,SAAU,IACV,MAAO,EAAS,KAAK,OACtB,CACD,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,GACT,CACD,CACD,CAAC,EAGD,OAFI,EAAe,MAAc,EAE1B,CACN,MAAO,IAAA,GACP,KAAM,IAAA,EACP,CACD"}