{"version":3,"file":"revert-email-change.mjs","names":["userTokenServices.getSingle","constants","securityAuditServices.logSecurityAudit","authServices.refreshToken.revokeUserTokens"],"sources":["../../../src/services/account/revert-email-change.ts"],"sourcesContent":["import constants from \"../../constants/constants.js\";\nimport { copy } from \"../../libs/i18n/index.js\";\nimport {\n\tEmailChangeRequestsRepository,\n\tUsersRepository,\n\tUserTokensRepository,\n} from \"../../libs/repositories/index.js\";\nimport type { ServiceFn } from \"../../utils/services/types.js\";\nimport { invalidateAuthCache } from \"../auth/helpers/auth-cache.js\";\nimport {\n\tauthServices,\n\tsecurityAuditServices,\n\tuserTokenServices,\n} from \"../index.js\";\n\nconst revertEmailChange: ServiceFn<\n\t[\n\t\t{\n\t\t\ttoken: string;\n\t\t},\n\t],\n\tundefined\n> = async (context, data) => {\n\tconst Users = new UsersRepository(context.db.client, context.config.db);\n\tconst UserTokens = new UserTokensRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\tconst EmailChangeRequests = new EmailChangeRequestsRepository(\n\t\tcontext.db.client,\n\t\tcontext.config.db,\n\t);\n\n\tconst tokenRes = await userTokenServices.getSingle(context, {\n\t\ttoken: data.token,\n\t\ttokenType: constants.userTokens.emailChangeRevert,\n\t});\n\tif (tokenRes.error) return tokenRes;\n\n\tconst requestRes = await EmailChangeRequests.selectByRevertTokenId({\n\t\ttokenId: tokenRes.data.id,\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t\tdefaultError: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 404,\n\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t},\n\t\t},\n\t});\n\tif (requestRes.error) return requestRes;\n\n\tconst canRevert =\n\t\trequestRes.data.status === constants.emailChangeRequestStatuses.pending ||\n\t\trequestRes.data.status === constants.emailChangeRequestStatuses.confirmed;\n\tif (!canRevert || requestRes.data.user_id !== tokenRes.data.user_id) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 404,\n\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst now = new Date().toISOString();\n\n\tif (requestRes.data.status === constants.emailChangeRequestStatuses.pending) {\n\t\tconst updateRequestRes = await EmailChangeRequests.updateSingle({\n\t\t\tdata: {\n\t\t\t\tstatus: constants.emailChangeRequestStatuses.cancelled,\n\t\t\t\tcancelled_at: now,\n\t\t\t\tupdated_at: now,\n\t\t\t},\n\t\t\twhere: [\n\t\t\t\t{ key: \"id\", operator: \"=\", value: requestRes.data.id },\n\t\t\t\t{\n\t\t\t\t\tkey: \"status\",\n\t\t\t\t\toperator: \"=\",\n\t\t\t\t\tvalue: constants.emailChangeRequestStatuses.pending,\n\t\t\t\t},\n\t\t\t\t{ key: \"expires_at\", operator: \">\", value: now },\n\t\t\t],\n\t\t\treturning: [\"id\"],\n\t\t\tvalidation: {\n\t\t\t\tenabled: true,\n\t\t\t\tdefaultError: {\n\t\t\t\t\ttype: \"basic\",\n\t\t\t\t\tstatus: 404,\n\t\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t\t},\n\t\t\t},\n\t\t});\n\t\tif (updateRequestRes.error) return updateRequestRes;\n\n\t\tconst [consumeRevertTokenRes, revokeConfirmTokenRes] = await Promise.all([\n\t\t\tUserTokens.updateSingle({\n\t\t\t\tdata: {\n\t\t\t\t\tconsumed_at: now,\n\t\t\t\t\trevoked_at: now,\n\t\t\t\t\trevoke_reason: constants.userTokenRevokeReasons.emailChangeCancelled,\n\t\t\t\t\texpiry_date: now,\n\t\t\t\t},\n\t\t\t\twhere: [\n\t\t\t\t\t{ key: \"id\", operator: \"=\", value: requestRes.data.revert_token_id },\n\t\t\t\t\t{\n\t\t\t\t\t\tkey: \"token_type\",\n\t\t\t\t\t\toperator: \"=\",\n\t\t\t\t\t\tvalue: constants.userTokens.emailChangeRevert,\n\t\t\t\t\t},\n\t\t\t\t\t{ key: \"revoked_at\", operator: \"is\", value: null },\n\t\t\t\t\t{ key: \"consumed_at\", operator: \"is\", value: null },\n\t\t\t\t],\n\t\t\t\treturning: [\"id\"],\n\t\t\t\tvalidation: {\n\t\t\t\t\tenabled: true,\n\t\t\t\t\tdefaultError: {\n\t\t\t\t\t\ttype: \"basic\",\n\t\t\t\t\t\tstatus: 404,\n\t\t\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tUserTokens.updateSingle({\n\t\t\t\tdata: {\n\t\t\t\t\trevoked_at: now,\n\t\t\t\t\trevoke_reason: constants.userTokenRevokeReasons.emailChangeCancelled,\n\t\t\t\t\texpiry_date: now,\n\t\t\t\t},\n\t\t\t\twhere: [\n\t\t\t\t\t{ key: \"id\", operator: \"=\", value: requestRes.data.confirm_token_id },\n\t\t\t\t\t{\n\t\t\t\t\t\tkey: \"token_type\",\n\t\t\t\t\t\toperator: \"=\",\n\t\t\t\t\t\tvalue: constants.userTokens.emailChangeConfirm,\n\t\t\t\t\t},\n\t\t\t\t],\n\t\t\t\treturning: [\"id\"],\n\t\t\t}),\n\t\t]);\n\t\tif (consumeRevertTokenRes.error) return consumeRevertTokenRes;\n\t\tif (revokeConfirmTokenRes.error) return revokeConfirmTokenRes;\n\n\t\treturn {\n\t\t\terror: undefined,\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst userRes = await Users.selectSingle({\n\t\tselect: [\"id\", \"email\"],\n\t\twhere: [{ key: \"id\", operator: \"=\", value: requestRes.data.user_id }],\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t\tdefaultError: {\n\t\t\t\tstatus: 404,\n\t\t\t\tmessage: copy(\"server:core.user.not.found.message\"),\n\t\t\t},\n\t\t},\n\t});\n\tif (userRes.error) return userRes;\n\n\tif (userRes.data.email !== requestRes.data.new_email) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 409,\n\t\t\t\tmessage: copy(\"server:core.email.change.request.stale.message\"),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst [userWithOldEmailRes, reservedOldEmailRes] = await Promise.all([\n\t\tUsers.selectSingle({\n\t\t\tselect: [\"id\"],\n\t\t\twhere: [\n\t\t\t\t{ key: \"email\", operator: \"=\", value: requestRes.data.old_email },\n\t\t\t\t{ key: \"id\", operator: \"!=\", value: requestRes.data.user_id },\n\t\t\t],\n\t\t}),\n\t\tEmailChangeRequests.selectReservedByEmail({\n\t\t\temail: requestRes.data.old_email,\n\t\t\texcludeUserId: requestRes.data.user_id,\n\t\t}),\n\t]);\n\tif (userWithOldEmailRes.error) return userWithOldEmailRes;\n\tif (reservedOldEmailRes.error) return reservedOldEmailRes;\n\tif (\n\t\tuserWithOldEmailRes.data !== undefined ||\n\t\treservedOldEmailRes.data !== undefined\n\t) {\n\t\treturn {\n\t\t\terror: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 409,\n\t\t\t\tmessage: copy(\"server:core.email.change.email.unavailable.message\"),\n\t\t\t},\n\t\t\tdata: undefined,\n\t\t};\n\t}\n\n\tconst updateRequestRes = await EmailChangeRequests.updateSingle({\n\t\tdata: {\n\t\t\tstatus: constants.emailChangeRequestStatuses.reverted,\n\t\t\treverted_at: now,\n\t\t\tupdated_at: now,\n\t\t},\n\t\twhere: [\n\t\t\t{ key: \"id\", operator: \"=\", value: requestRes.data.id },\n\t\t\t{\n\t\t\t\tkey: \"status\",\n\t\t\t\toperator: \"=\",\n\t\t\t\tvalue: constants.emailChangeRequestStatuses.confirmed,\n\t\t\t},\n\t\t\t{ key: \"expires_at\", operator: \">\", value: now },\n\t\t],\n\t\treturning: [\"id\"],\n\t\tvalidation: {\n\t\t\tenabled: true,\n\t\t\tdefaultError: {\n\t\t\t\ttype: \"basic\",\n\t\t\t\tstatus: 404,\n\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t},\n\t\t},\n\t});\n\tif (updateRequestRes.error) return updateRequestRes;\n\n\tconst [updateUserRes, consumeTokenRes, auditRes, revokeRefreshTokensRes] =\n\t\tawait Promise.all([\n\t\t\tUsers.updateSingle({\n\t\t\t\tdata: {\n\t\t\t\t\temail: requestRes.data.old_email,\n\t\t\t\t\tupdated_at: now,\n\t\t\t\t},\n\t\t\t\twhere: [{ key: \"id\", operator: \"=\", value: requestRes.data.user_id }],\n\t\t\t\treturning: [\"id\"],\n\t\t\t\tvalidation: {\n\t\t\t\t\tenabled: true,\n\t\t\t\t\tdefaultError: {\n\t\t\t\t\t\tstatus: 400,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tUserTokens.updateSingle({\n\t\t\t\tdata: {\n\t\t\t\t\tconsumed_at: now,\n\t\t\t\t\trevoked_at: now,\n\t\t\t\t\trevoke_reason: constants.userTokenRevokeReasons.emailChangeReverted,\n\t\t\t\t\texpiry_date: now,\n\t\t\t\t},\n\t\t\t\twhere: [\n\t\t\t\t\t{ key: \"id\", operator: \"=\", value: requestRes.data.revert_token_id },\n\t\t\t\t\t{\n\t\t\t\t\t\tkey: \"token_type\",\n\t\t\t\t\t\toperator: \"=\",\n\t\t\t\t\t\tvalue: constants.userTokens.emailChangeRevert,\n\t\t\t\t\t},\n\t\t\t\t\t{ key: \"revoked_at\", operator: \"is\", value: null },\n\t\t\t\t\t{ key: \"consumed_at\", operator: \"is\", value: null },\n\t\t\t\t],\n\t\t\t\treturning: [\"id\"],\n\t\t\t\tvalidation: {\n\t\t\t\t\tenabled: true,\n\t\t\t\t\tdefaultError: {\n\t\t\t\t\t\ttype: \"basic\",\n\t\t\t\t\t\tstatus: 404,\n\t\t\t\t\t\tmessage: copy(\"server:core.tokens.not.found.message\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tsecurityAuditServices.logSecurityAudit(context, {\n\t\t\t\tuserId: requestRes.data.user_id,\n\t\t\t\taction: constants.securityAudit.actions.emailChange,\n\t\t\t\tperformedBy: requestRes.data.user_id,\n\t\t\t\tpreviousValue: requestRes.data.new_email,\n\t\t\t\tnewValue: requestRes.data.old_email,\n\t\t\t}),\n\t\t\tauthServices.refreshToken.revokeUserTokens(context, {\n\t\t\t\tuserId: requestRes.data.user_id,\n\t\t\t\trevokeReason: constants.refreshTokenRevokeReasons.emailChangeReverted,\n\t\t\t}),\n\t\t]);\n\n\tawait invalidateAuthCache(context);\n\n\tif (updateUserRes.error) return updateUserRes;\n\tif (consumeTokenRes.error) return consumeTokenRes;\n\tif (auditRes.error) return auditRes;\n\tif (revokeRefreshTokensRes.error) return revokeRefreshTokensRes;\n\n\treturn {\n\t\terror: undefined,\n\t\tdata: undefined,\n\t};\n};\n\nexport default revertEmailChange;\n"],"mappings":"4eAeA,MAAM,EAOF,MAAO,EAAS,IAAS,CAC5B,IAAM,EAAQ,IAAI,EAAgB,EAAQ,GAAG,OAAQ,EAAQ,OAAO,EAAE,EAChE,EAAa,IAAI,EACtB,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EACM,EAAsB,IAAI,EAC/B,EAAQ,GAAG,OACX,EAAQ,OAAO,EAChB,EAEM,EAAW,MAAMA,EAA4B,EAAS,CAC3D,MAAO,EAAK,MACZ,UAAWC,EAAU,WAAW,iBACjC,CAAC,EACD,GAAI,EAAS,MAAO,OAAO,EAE3B,IAAM,EAAa,MAAM,EAAoB,sBAAsB,CAClE,QAAS,EAAS,KAAK,GACvB,WAAY,CACX,QAAS,GACT,aAAc,CACb,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,CACD,CACD,CAAC,EACD,GAAI,EAAW,MAAO,OAAO,EAK7B,GAAI,EAFH,EAAW,KAAK,SAAWA,EAAU,2BAA2B,SAChE,EAAW,KAAK,SAAWA,EAAU,2BAA2B,YAC/C,EAAW,KAAK,UAAY,EAAS,KAAK,QAC3D,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,EACA,KAAM,IAAA,EACP,EAGD,IAAM,EAAM,IAAI,KAAK,CAAA,CAAE,YAAY,EAEnC,GAAI,EAAW,KAAK,SAAWA,EAAU,2BAA2B,QAAS,CAC5E,IAAM,EAAmB,MAAM,EAAoB,aAAa,CAC/D,KAAM,CACL,OAAQA,EAAU,2BAA2B,UAC7C,aAAc,EACd,WAAY,CACb,EACA,MAAO,CACN,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAW,KAAK,EAAG,EACtD,CACC,IAAK,SACL,SAAU,IACV,MAAOA,EAAU,2BAA2B,OAC7C,EACA,CAAE,IAAK,aAAc,SAAU,IAAK,MAAO,CAAI,CAChD,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,CACD,CACD,CAAC,EACD,GAAI,EAAiB,MAAO,OAAO,EAEnC,GAAM,CAAC,EAAuB,GAAyB,MAAM,QAAQ,IAAI,CACxE,EAAW,aAAa,CACvB,KAAM,CACL,YAAa,EACb,WAAY,EACZ,cAAeA,EAAU,uBAAuB,qBAChD,YAAa,CACd,EACA,MAAO,CACN,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAW,KAAK,eAAgB,EACnE,CACC,IAAK,aACL,SAAU,IACV,MAAOA,EAAU,WAAW,iBAC7B,EACA,CAAE,IAAK,aAAc,SAAU,KAAM,MAAO,IAAK,EACjD,CAAE,IAAK,cAAe,SAAU,KAAM,MAAO,IAAK,CACnD,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,CACD,CACD,CAAC,EACD,EAAW,aAAa,CACvB,KAAM,CACL,WAAY,EACZ,cAAeA,EAAU,uBAAuB,qBAChD,YAAa,CACd,EACA,MAAO,CACN,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAW,KAAK,gBAAiB,EACpE,CACC,IAAK,aACL,SAAU,IACV,MAAOA,EAAU,WAAW,kBAC7B,CACD,EACA,UAAW,CAAC,IAAI,CACjB,CAAC,CACF,CAAC,EAID,OAHI,EAAsB,MAAc,EACpC,EAAsB,MAAc,EAEjC,CACN,MAAO,IAAA,GACP,KAAM,IAAA,EACP,CACD,CAEA,IAAM,EAAU,MAAM,EAAM,aAAa,CACxC,OAAQ,CAAC,KAAM,OAAO,EACtB,MAAO,CAAC,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAW,KAAK,OAAQ,CAAC,EACpE,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,IACR,QAAS,EAAK,oCAAoC,CACnD,CACD,CACD,CAAC,EACD,GAAI,EAAQ,MAAO,OAAO,EAE1B,GAAI,EAAQ,KAAK,QAAU,EAAW,KAAK,UAC1C,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,gDAAgD,CAC/D,EACA,KAAM,IAAA,EACP,EAGD,GAAM,CAAC,EAAqB,GAAuB,MAAM,QAAQ,IAAI,CACpE,EAAM,aAAa,CAClB,OAAQ,CAAC,IAAI,EACb,MAAO,CACN,CAAE,IAAK,QAAS,SAAU,IAAK,MAAO,EAAW,KAAK,SAAU,EAChE,CAAE,IAAK,KAAM,SAAU,KAAM,MAAO,EAAW,KAAK,OAAQ,CAC7D,CACD,CAAC,EACD,EAAoB,sBAAsB,CACzC,MAAO,EAAW,KAAK,UACvB,cAAe,EAAW,KAAK,OAChC,CAAC,CACF,CAAC,EACD,GAAI,EAAoB,MAAO,OAAO,EACtC,GAAI,EAAoB,MAAO,OAAO,EACtC,GACC,EAAoB,OAAS,IAAA,IAC7B,EAAoB,OAAS,IAAA,GAE7B,MAAO,CACN,MAAO,CACN,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,oDAAoD,CACnE,EACA,KAAM,IAAA,EACP,EAGD,IAAM,EAAmB,MAAM,EAAoB,aAAa,CAC/D,KAAM,CACL,OAAQA,EAAU,2BAA2B,SAC7C,YAAa,EACb,WAAY,CACb,EACA,MAAO,CACN,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAW,KAAK,EAAG,EACtD,CACC,IAAK,SACL,SAAU,IACV,MAAOA,EAAU,2BAA2B,SAC7C,EACA,CAAE,IAAK,aAAc,SAAU,IAAK,MAAO,CAAI,CAChD,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,CACD,CACD,CAAC,EACD,GAAI,EAAiB,MAAO,OAAO,EAEnC,GAAM,CAAC,EAAe,EAAiB,EAAU,GAChD,MAAM,QAAQ,IAAI,CACjB,EAAM,aAAa,CAClB,KAAM,CACL,MAAO,EAAW,KAAK,UACvB,WAAY,CACb,EACA,MAAO,CAAC,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAW,KAAK,OAAQ,CAAC,EACpE,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,OAAQ,GACT,CACD,CACD,CAAC,EACD,EAAW,aAAa,CACvB,KAAM,CACL,YAAa,EACb,WAAY,EACZ,cAAeA,EAAU,uBAAuB,oBAChD,YAAa,CACd,EACA,MAAO,CACN,CAAE,IAAK,KAAM,SAAU,IAAK,MAAO,EAAW,KAAK,eAAgB,EACnE,CACC,IAAK,aACL,SAAU,IACV,MAAOA,EAAU,WAAW,iBAC7B,EACA,CAAE,IAAK,aAAc,SAAU,KAAM,MAAO,IAAK,EACjD,CAAE,IAAK,cAAe,SAAU,KAAM,MAAO,IAAK,CACnD,EACA,UAAW,CAAC,IAAI,EAChB,WAAY,CACX,QAAS,GACT,aAAc,CACb,KAAM,QACN,OAAQ,IACR,QAAS,EAAK,sCAAsC,CACrD,CACD,CACD,CAAC,EACDC,EAAuC,EAAS,CAC/C,OAAQ,EAAW,KAAK,QACxB,OAAQD,EAAU,cAAc,QAAQ,YACxC,YAAa,EAAW,KAAK,QAC7B,cAAe,EAAW,KAAK,UAC/B,SAAU,EAAW,KAAK,SAC3B,CAAC,EACDE,EAA2C,EAAS,CACnD,OAAQ,EAAW,KAAK,QACxB,aAAcF,EAAU,0BAA0B,mBACnD,CAAC,CACF,CAAC,EASF,OAPA,MAAM,EAAoB,CAAO,EAE7B,EAAc,MAAc,EAC5B,EAAgB,MAAc,EAC9B,EAAS,MAAc,EACvB,EAAuB,MAAc,EAElC,CACN,MAAO,IAAA,GACP,KAAM,IAAA,EACP,CACD"}