@lucidcms/core/dist/services/users/invite-single.mjs.map

The core of the Lucid CMS. It's responsible for spinning up the API and serving the CMS.

{"version":3,"file":"invite-single.mjs","names":["userServices.checks.checkRolesExist","constants","userTokenServices.createSingle","emailServices.sendEmail"],"sources":["../../../src/services/users/invite-single.ts"],"sourcesContent":["import { add } from \"date-fns\";\nimport constants from \"../../constants/constants.js\";\nimport { copy } from \"../../libs/i18n/index.js\";\nimport {\n\tEmailChangeRequestsRepository,\n\tUserRolesRepository,\n\tUsersRepository,\n\tUserTenantsRepository,\n} from \"../../libs/repositories/index.js\";\nimport generateSecret from \"../../utils/helpers/generate-secret.js\";\nimport { formatEmailSubject } from \"../../utils/helpers/index.js\";\nimport { normalizeEmailInput } from \"../../utils/helpers/normalize-input.js\";\nimport type { ServiceFn } from \"../../utils/services/types.js\";\nimport { emailServices, userServices, userTokenServices } from \"../index.js\";\nimport validateUserTenantMemberships from \"./helpers/validate-user-tenant-memberships.js\";\n\nconst inviteSingle: ServiceFn<\n\t[\n\t\t{\n\t\t\temail: string;\n\t\t\tusername: string;\n\t\t\tfirstName?: string;\n\t\t\tlastName?: string;\n\t\t\tsuperAdmin?: boolean;\n\t\t\troleIds: Array<number>;\n\t\t\ttenantKeys?: Array<string>;\n\t\t\tauthSuperAdmin: boolean;\n\t\t},\n\t],\n\tnumber\n> = async (context, data) => {\n\tconst Users = new UsersRepository(context.db.client, context.config.db);\n\tconst EmailChangeRequests = new EmailChangeRequestsRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\tconst email = normalizeEmailInput(data.email);\n\n\tconst [userExistsRes, reservedEmailRes, roleExistsRes] = await Promise.all([\n\t\tUsers.selectSingleByEmailUsername({\n\t\t\tselect: [\"id\", \"username\", \"email\"],\n\t\t\twhere: {\n\t\t\t\tusername: data.username,\n\t\t\t\temail: email,\n\t\t\t},\n\t\t}),\n\t\tEmailChangeRequests.selectReservedByEmail({\n\t\t\temail,\n\t\t}),\n\t\tuserServices.checks.checkRolesExist(context, {\n\t\t\troleIds: data.roleIds,\n\t\t\ttenantKey: data.authSuperAdmin ? undefined : context.request.tenantKey,\n\t\t}),\n\t]);\n\tif (userExistsRes.error) return userExistsRes;\n\tif (reservedEmailRes.error) return reservedEmailRes;\n\tif (roleExistsRes.error) return roleExistsRes;\n\n\tif (userExistsRes.data !== undefined || reservedEmailRes.data !== undefined) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 500,\n\t\t\t\terrors: {\n\t\t\t\t\temail:\n\t\t\t\t\t\tuserExistsRes.data?.email === email ||\n\t\t\t\t\t\treservedEmailRes.data !== undefined\n\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\tcode: \"invalid\",\n\t\t\t\t\t\t\t\t\tmessage: copy(\"server:core.database.duplicates.entry\"),\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\tusername:\n\t\t\t\t\t\tuserExistsRes.data?.username === data.username\n\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\tcode: \"invalid\",\n\t\t\t\t\t\t\t\t\tmessage: copy(\"server:core.database.duplicates.entry\"),\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t: undefined,\n\t\t\t\t},\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\t// Tenant memberships - only super admins decide them, other users add the new user to their current tenant\n\tconst targetSuperAdmin = data.authSuperAdmin && data.superAdmin === true;\n\tconst tenantKeys = Array.from(\n\t\tnew Set(\n\t\t\tdata.authSuperAdmin\n\t\t\t\t? (data.tenantKeys ?? [])\n\t\t\t\t: context.request.tenantKey\n\t\t\t\t\t? [context.request.tenantKey]\n\t\t\t\t\t: [],\n\t\t),\n\t);\n\n\tconst tenantMembershipsError = validateUserTenantMemberships({\n\t\tconfig: context.config,\n\t\ttenantKeys,\n\t\ttargetSuperAdmin,\n\t});\n\tif (tenantMembershipsError !== undefined) {\n\t\treturn {\n\t\t\terror: tenantMembershipsError,\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst { encryptSecret } = generateSecret(context.config.secrets.encryption);\n\n\tconst newUserRes = await Users.createSingle({\n\t\tdata: {\n\t\t\temail: email,\n\t\t\tusername: data.username,\n\t\t\tfirst_name: data.firstName,\n\t\t\tlast_name: data.lastName,\n\t\t\tsuper_admin: targetSuperAdmin,\n\t\t\ttriggered_password_reset: false,\n\t\t\tsecret: encryptSecret,\n\t\t\tinvitation_accepted: false,\n\t\t\tis_locked: false,\n\t\t},\n\t\treturning: [\"id\"],\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t\tdefaultError: {\n\t\t\t\tstatus: 500,\n\t\t\t},\n\t\t},\n\t});\n\tif (newUserRes.error) return newUserRes;\n\n\tif (tenantKeys.length > 0) {\n\t\tconst UserTenants = new UserTenantsRepository(\n\t\t\tcontext.db.client,\n\t\t\tcontext.config.db,\n\t\t);\n\t\tconst createTenantsRes = await UserTenants.createMultiple({\n\t\t\tdata: tenantKeys.map((key) => ({\n\t\t\t\tuser_id: newUserRes.data.id,\n\t\t\t\ttenant_key: key,\n\t\t\t})),\n\t\t});\n\t\tif (createTenantsRes.error) return createTenantsRes;\n\t}\n\n\t// Email Invite\n\tconst expiryDate = add(new Date(), {\n\t\tminutes: constants.userInviteTokenExpirationMinutes,\n\t}).toISOString();\n\n\tconst userTokenRes = await userTokenServices.createSingle(context, {\n\t\tuserId: newUserRes.data.id,\n\t\ttokenType: constants.userTokens.invitation,\n\t\texpiryDate: expiryDate,\n\t});\n\tif (userTokenRes.error) return userTokenRes;\n\n\tconst sendEmailRes = await emailServices.sendEmail(context, {\n\t\ttype: \"internal\",\n\t\tto: email,\n\t\tsubject: (emailData) =>\n\t\t\tformatEmailSubject(\n\t\t\t\tcontext.translate(\"server:core.email.invitations.email.subject\"),\n\t\t\t\temailData.context.brand.name,\n\t\t\t),\n\t\ttemplate: constants.email.templates.userInvite.key,\n\t\tdata: {\n\t\t\tfirstName: data.firstName,\n\t\t\tlastName: data.lastName,\n\t\t\temail: email,\n\t\t\tinviteLink: `${constants.email.locations.acceptInvitation}?token=${userTokenRes.data.token}`,\n\t\t},\n\t\tstorage: constants.email.templates.userInvite.storage,\n\t\ttenantKeys,\n\t});\n\tif (sendEmailRes.error) return sendEmailRes;\n\n\t// Roles\n\tif (data.roleIds === undefined || data.roleIds.length === 0) {\n\t\treturn {\n\t\t\terror: undefined,\n\t\t\tdata: newUserRes.data.id,\n\t\t};\n\t}\n\n\tconst UserRoles = new UserRolesRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\n\tconst createMultipleRes = await UserRoles.createMultiple({\n\t\tdata: data.roleIds.map((r) => ({\n\t\t\tuser_id: newUserRes.data.id,\n\t\t\trole_id: r,\n\t\t})),\n\t});\n\tif (createMultipleRes.error) return createMultipleRes;\n\n\treturn {\n\t\terror: undefined,\n\t\tdata: newUserRes.data.id,\n\t};\n};\n\nexport default inviteSingle;\n"],"mappings":"guBAgBA,MAAM,EAcF,MAAO,EAAS,IAAS,CAC5B,IAAM,EAAQ,IAAI,EAAgB,EAAQ,GAAG,OAAQ,EAAQ,OAAO,EAAE,EAChE,EAAsB,IAAI,EAC/B,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EACM,EAAQ,EAAoB,EAAK,KAAK,EAEtC,CAAC,EAAe,EAAkB,GAAiB,MAAM,QAAQ,IAAI,CAC1E,EAAM,4BAA4B,CACjC,OAAQ,CAAC,KAAM,WAAY,OAAO,EAClC,MAAO,CACN,SAAU,EAAK,SACR,OACR,CACD,CAAC,EACD,EAAoB,sBAAsB,CACzC,OACD,CAAC,EACDA,EAAoC,EAAS,CAC5C,QAAS,EAAK,QACd,UAAW,EAAK,eAAiB,IAAA,GAAY,EAAQ,QAAQ,SAC9D,CAAC,CACF,CAAC,EACD,GAAI,EAAc,MAAO,OAAO,EAChC,GAAI,EAAiB,MAAO,OAAO,EACnC,GAAI,EAAc,MAAO,OAAO,EAEhC,GAAI,EAAc,OAAS,IAAA,IAAa,EAAiB,OAAS,IAAA,GACjE,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,OAAQ,CACP,MACC,EAAc,MAAM,QAAU,GAC9B,EAAiB,OAAS,IAAA,GACvB,CACA,KAAM,UACN,QAAS,EAAK,uCAAuC,CACtD,EACC,IAAA,GACJ,SACC,EAAc,MAAM,WAAa,EAAK,SACnC,CACA,KAAM,UACN,QAAS,EAAK,uCAAuC,CACtD,EACC,IAAA,EACL,CACD,EACA,KAAM,IAAA,EACP,EAID,IAAM,EAAmB,EAAK,gBAAkB,EAAK,aAAe,GAC9D,EAAa,MAAM,KACxB,IAAI,IACH,EAAK,eACD,EAAK,YAAc,CAAC,EACrB,EAAQ,QAAQ,UACf,CAAC,EAAQ,QAAQ,SAAS,EAC1B,CAAC,CACN,CACD,EAEM,EAAyB,EAA8B,CAC5D,OAAQ,EAAQ,OAChB,aACA,kBACD,CAAC,EACD,GAAI,IAA2B,IAAA,GAC9B,MAAO,CACN,MAAO,EACP,KAAM,IAAA,EACP,EAGD,GAAM,CAAE,iBAAkB,EAAe,EAAQ,OAAO,QAAQ,UAAU,EAEpE,EAAa,MAAM,EAAM,aAAa,CAC3C,KAAM,CACE,QACP,SAAU,EAAK,SACf,WAAY,EAAK,UACjB,UAAW,EAAK,SAChB,YAAa,EACb,yBAA0B,GAC1B,OAAQ,EACR,oBAAqB,GACrB,UAAW,EACZ,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,GACT,CACD,CACD,CAAC,EACD,GAAI,EAAW,MAAO,OAAO,EAE7B,GAAI,EAAW,OAAS,EAAG,CAK1B,IAAM,EAAmB,MAAM,IAJP,EACvB,EAAQ,GAAG,OACX,EAAQ,OAAO,EAEyB,CAAC,CAAC,eAAe,CACzD,KAAM,EAAW,IAAK,IAAS,CAC9B,QAAS,EAAW,KAAK,GACzB,WAAY,CACb,EAAE,CACH,CAAC,EACD,GAAI,EAAiB,MAAO,OAAO,CACpC,CAGA,IAAM,EAAa,EAAI,IAAI,KAAQ,CAClC,QAASC,EAAU,gCACpB,CAAC,CAAC,CAAC,YAAY,EAET,EAAe,MAAMC,EAA+B,EAAS,CAClE,OAAQ,EAAW,KAAK,GACxB,UAAWD,EAAU,WAAW,WACpB,YACb,CAAC,EACD,GAAI,EAAa,MAAO,OAAO,EAE/B,IAAM,EAAe,MAAME,EAAwB,EAAS,CAC3D,KAAM,WACN,GAAI,EACJ,QAAU,GACT,EACC,EAAQ,UAAU,6CAA6C,EAC/D,EAAU,QAAQ,MAAM,IACzB,EACD,SAAUF,EAAU,MAAM,UAAU,WAAW,IAC/C,KAAM,CACL,UAAW,EAAK,UAChB,SAAU,EAAK,SACR,QACP,WAAY,GAAGA,EAAU,MAAM,UAAU,iBAAiB,SAAS,EAAa,KAAK,OACtF,EACA,QAASA,EAAU,MAAM,UAAU,WAAW,QAC9C,YACD,CAAC,EACD,GAAI,EAAa,MAAO,OAAO,EAG/B,GAAI,EAAK,UAAY,IAAA,IAAa,EAAK,QAAQ,SAAW,EACzD,MAAO,CACN,MAAO,IAAA,GACP,KAAM,EAAW,KAAK,EACvB,EAQD,IAAM,EAAoB,MAAM,IALV,EACrB,EAAQ,GAAG,OACX,EAAQ,OAAO,EAGwB,CAAC,CAAC,eAAe,CACxD,KAAM,EAAK,QAAQ,IAAK,IAAO,CAC9B,QAAS,EAAW,KAAK,GACzB,QAAS,CACV,EAAE,CACH,CAAC,EAGD,OAFI,EAAkB,MAAc,EAE7B,CACN,MAAO,IAAA,GACP,KAAM,EAAW,KAAK,EACvB,CACD"}