@lucidcms/core/dist/services/users/unlink-auth-provider.mjs.map

The core of the Lucid CMS. It's responsible for spinning up the API and serving the CMS.

{"version":3,"file":"unlink-auth-provider.mjs","names":["formatter","securityAuditServices.logSecurityAudit","constants"],"sources":["../../../src/services/users/unlink-auth-provider.ts"],"sourcesContent":["import constants from \"../../constants/constants.js\";\nimport formatter from \"../../libs/formatters/index.js\";\nimport { copy } from \"../../libs/i18n/index.js\";\nimport {\n\tUserAuthProvidersRepository,\n\tUsersRepository,\n} from \"../../libs/repositories/index.js\";\nimport type { LucidAuth } from \"../../types/hono.js\";\nimport type { ServiceFn } from \"../../utils/services/types.js\";\nimport { securityAuditServices } from \"../index.js\";\n\n/**\n * Unlinks an auth provider from the target user.\n *\n * You cannot unlink the last auth provider when:\n * - password authentication is disabled, or\n * - the user does not have a password set.\n */\nconst unlinkAuthProvider: ServiceFn<\n\t[\n\t\t{\n\t\t\tauth: LucidAuth;\n\t\t\ttargetUserId: number;\n\t\t\tproviderKey: string;\n\t\t},\n\t],\n\tundefined\n> = async (context, data) => {\n\tconst Users = new UsersRepository(context.db.client, context.config.db);\n\tconst UserAuthProviders = new UserAuthProvidersRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\n\tconst passwordEnabled = context.config.auth.password.enabled === true;\n\n\tconst [userRes, providerRes, providersCountRes] = await Promise.all([\n\t\tUsers.selectSinglePreset({\n\t\t\ttenantKey: context.request.tenantKey,\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tkey: \"id\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: data.targetUserId,\n\t\t\t\t},\n\t\t\t],\n\t\t\tvalidation: {\n\t\t\t\tenabled: true,\n\t\t\t\tdefaultError: {\n\t\t\t\t\tstatus: 404,\n\t\t\t\t\tmessage: copy(\"server:core.user.not.found.message\"),\n\t\t\t\t},\n\t\t\t},\n\t\t}),\n\t\tUserAuthProviders.selectSingle({\n\t\t\tselect: [\"id\"],\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tkey: \"user_id\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: data.targetUserId,\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tkey: \"provider_key\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: data.providerKey,\n\t\t\t\t},\n\t\t\t],\n\t\t\tvalidation: {\n\t\t\t\tenabled: true,\n\t\t\t\tdefaultError: {\n\t\t\t\t\tstatus: 404,\n\t\t\t\t\tname: copy(\"server:core.auth.providers.link.not.found.name\"),\n\t\t\t\t\tmessage: copy(\"server:core.auth.providers.link.not.found.message\"),\n\t\t\t\t},\n\t\t\t},\n\t\t}),\n\t\tUserAuthProviders.count({\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tkey: \"user_id\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: data.targetUserId,\n\t\t\t\t},\n\t\t\t],\n\t\t}),\n\t]);\n\tif (userRes.error) return userRes;\n\tif (providerRes.error) return providerRes;\n\tif (providersCountRes.error) return providersCountRes;\n\n\tconst providersCount = formatter.parseCount(providersCountRes.data?.count);\n\tconst isLastProvider = providersCount <= 1;\n\tconst hasPassword = Boolean(userRes.data.password);\n\n\tif (isLastProvider && passwordEnabled === false) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 400,\n\t\t\t\tname: copy(\"server:core.auth.providers.cannot.remove.last.link.name\"),\n\t\t\t\tmessage: copy(\n\t\t\t\t\t\"server:core.auth.providers.cannot.remove.last.link.password.disabled.message\",\n\t\t\t\t),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tif (isLastProvider && hasPassword === false) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 400,\n\t\t\t\tname: copy(\"server:core.auth.providers.cannot.remove.last.link.name\"),\n\t\t\t\tmessage: copy(\n\t\t\t\t\t\"server:core.auth.providers.cannot.remove.last.link.no.password.message\",\n\t\t\t\t),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst [deleteRes, updateRes, auditRes] = await Promise.all([\n\t\tUserAuthProviders.deleteSingle({\n\t\t\treturning: [\"id\"],\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tkey: \"user_id\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: data.targetUserId,\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tkey: \"provider_key\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: data.providerKey,\n\t\t\t\t},\n\t\t\t],\n\t\t\tvalidation: {\n\t\t\t\tenabled: true,\n\t\t\t\tdefaultError: {\n\t\t\t\t\tstatus: 404,\n\t\t\t\t\tname: copy(\"server:core.auth.providers.link.not.found.name\"),\n\t\t\t\t\tmessage: copy(\"server:core.auth.providers.link.not.found.message\"),\n\t\t\t\t},\n\t\t\t},\n\t\t}),\n\t\tUsers.updateSingle({\n\t\t\tdata: {\n\t\t\t\tupdated_at: new Date().toISOString(),\n\t\t\t},\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tkey: \"id\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: data.targetUserId,\n\t\t\t\t},\n\t\t\t],\n\t\t\treturning: [\"id\"],\n\t\t\tvalidation: {\n\t\t\t\tenabled: true,\n\t\t\t\tdefaultError: {\n\t\t\t\t\tstatus: 500,\n\t\t\t\t},\n\t\t\t},\n\t\t}),\n\t\tsecurityAuditServices.logSecurityAudit(context, {\n\t\t\tuserId: data.targetUserId,\n\t\t\taction: constants.securityAudit.actions.authProviderUnlink,\n\t\t\tperformedBy: data.auth.id,\n\t\t\tpreviousValue: data.providerKey,\n\t\t\tnewValue: \"unlinked\",\n\t\t}),\n\t]);\n\tif (deleteRes.error) return deleteRes;\n\tif (updateRes.error) return updateRes;\n\tif (auditRes.error) return auditRes;\n\n\treturn {\n\t\terror: undefined,\n\t\tdata: undefined,\n\t};\n};\n\nexport default unlinkAuthProvider;\n"],"mappings":"oTAkBA,MAAM,EASF,MAAO,EAAS,IAAS,CAC5B,IAAM,EAAQ,IAAI,EAAgB,EAAQ,GAAG,OAAQ,EAAQ,OAAO,EAAE,EAChE,EAAoB,IAAI,EAC7B,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EAEM,EAAkB,EAAQ,OAAO,KAAK,SAAS,UAAY,GAE3D,CAAC,EAAS,EAAa,GAAqB,MAAM,QAAQ,IAAI,CACnE,EAAM,mBAAmB,CACxB,UAAW,EAAQ,QAAQ,UAC3B,MAAO,CACN,CACC,IAAK,KACL,SAAU,IACV,MAAO,EAAK,YACb,CACD,EACA,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,IACR,QAAS,EAAK,oCAAoC,CACnD,CACD,CACD,CAAC,EACD,EAAkB,aAAa,CAC9B,OAAQ,CAAC,IAAI,EACb,MAAO,CACN,CACC,IAAK,UACL,SAAU,IACV,MAAO,EAAK,YACb,EACA,CACC,IAAK,eACL,SAAU,IACV,MAAO,EAAK,WACb,CACD,EACA,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,IACR,KAAM,EAAK,gDAAgD,EAC3D,QAAS,EAAK,mDAAmD,CAClE,CACD,CACD,CAAC,EACD,EAAkB,MAAM,CACvB,MAAO,CACN,CACC,IAAK,UACL,SAAU,IACV,MAAO,EAAK,YACb,CACD,CACD,CAAC,CACF,CAAC,EACD,GAAI,EAAQ,MAAO,OAAO,EAC1B,GAAI,EAAY,MAAO,OAAO,EAC9B,GAAI,EAAkB,MAAO,OAAO,EAGpC,IAAM,EADiBA,EAAU,WAAW,EAAkB,MAAM,KAChC,GAAK,EACnC,EAAc,EAAQ,EAAQ,KAAK,SAEzC,GAAI,GAAkB,IAAoB,GACzC,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,KAAM,EAAK,yDAAyD,EACpE,QAAS,EACR,8EACD,CACD,EACA,KAAM,IAAA,EACP,EAGD,GAAI,GAAkB,IAAgB,GACrC,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,KAAM,EAAK,yDAAyD,EACpE,QAAS,EACR,wEACD,CACD,EACA,KAAM,IAAA,EACP,EAGD,GAAM,CAAC,EAAW,EAAW,GAAY,MAAM,QAAQ,IAAI,CAC1D,EAAkB,aAAa,CAC9B,UAAW,CAAC,IAAI,EAChB,MAAO,CACN,CACC,IAAK,UACL,SAAU,IACV,MAAO,EAAK,YACb,EACA,CACC,IAAK,eACL,SAAU,IACV,MAAO,EAAK,WACb,CACD,EACA,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,IACR,KAAM,EAAK,gDAAgD,EAC3D,QAAS,EAAK,mDAAmD,CAClE,CACD,CACD,CAAC,EACD,EAAM,aAAa,CAClB,KAAM,CACL,WAAY,IAAI,KAAK,CAAA,CAAE,YAAY,CACpC,EACA,MAAO,CACN,CACC,IAAK,KACL,SAAU,IACV,MAAO,EAAK,YACb,CACD,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,GACT,CACD,CACD,CAAC,EACDC,EAAuC,EAAS,CAC/C,OAAQ,EAAK,aACb,OAAQC,EAAU,cAAc,QAAQ,mBACxC,YAAa,EAAK,KAAK,GACvB,cAAe,EAAK,YACpB,SAAU,UACX,CAAC,CACF,CAAC,EAKD,OAJI,EAAU,MAAc,EACxB,EAAU,MAAc,EACxB,EAAS,MAAc,EAEpB,CACN,MAAO,IAAA,GACP,KAAM,IAAA,EACP,CACD"}