@accounts/server - npm Package Compare versions

Comparing version 0.0.8 to 0.0.9-alpha.146b94d6

lib/AccountsServer.js

@@ -63,6 +63,6 @@ 'use strict';
       this.db = db;
-      if (options.sendMail) {
-        this.email = { sendMail: options.sendMail };
+      if (this._options.sendMail) {
+        this.email = { sendMail: this._options.sendMail };
       } else {
-        this.email = new _email2.default(_config3.default.email);
+        this.email = new _email2.default(this._options.email);
       }
@@ -536,4 +536,6 @@ this.emailTemplates = _emailTemplates2.default;
       var _options = this._options,
-          tokenSecret = _options.tokenSecret,
-          tokenConfigs = _options.tokenConfigs;
+          _options$tokenSecret = _options.tokenSecret,
+          tokenSecret = _options$tokenSecret === undefined ? _config3.default.tokenSecret : _options$tokenSecret,
+          _options$tokenConfigs = _options.tokenConfigs,
+          tokenConfigs = _options$tokenConfigs === undefined ? _config3.default.tokenConfigs : _options$tokenConfigs;
 
@@ -545,7 +547,7 @@ var accessToken = (0, _tokens.generateAccessToken)({
         secret: tokenSecret,
-        config: tokenConfigs.accessToken
+        config: tokenConfigs.accessToken || {}
       });
       var refreshToken = (0, _tokens.generateRefreshToken)({
         secret: tokenSecret,
-        config: tokenConfigs.refreshToken
+        config: tokenConfigs.refreshToken || {}
       });
@@ -1097,3 +1099,3 @@ return { accessToken: accessToken, refreshToken: refreshToken };
       var _ref14 = _asyncToGenerator(regeneratorRuntime.mark(function _callee13(userId, address) {
-        var user, email, emails, token, verifyEmailUrl;
+        var user, email, emails, token, siteUrl, verifyEmailUrl;
         return regeneratorRuntime.wrap(function _callee13$(_context13) {
@@ -1143,4 +1145,5 @@ while (1) {
               case 12:
-                verifyEmailUrl = this._options.siteUrl + '/verify-email/' + token;
-                _context13.next = 15;
+                siteUrl = this._options.siteUrl || _config3.default.siteUrl;
+                verifyEmailUrl = siteUrl + '/verify-email/' + token;
+                _context13.next = 16;
                 return this.email.sendMail({
@@ -1153,3 +1156,3 @@ from: this.emailTemplates.verifyEmail.from ? this.emailTemplates.verifyEmail.from : this.emailTemplates.from,
 
-              case 15:
+              case 16:
               case 'end':
@@ -1182,3 +1185,3 @@ return _context13.stop();
       var _ref15 = _asyncToGenerator(regeneratorRuntime.mark(function _callee14(userId, address) {
-        var user, token, resetPasswordUrl;
+        var user, token, siteUrl, resetPasswordUrl;
         return regeneratorRuntime.wrap(function _callee14$(_context14) {
@@ -1208,4 +1211,5 @@ while (1) {
               case 9:
-                resetPasswordUrl = this._options.siteUrl + '/reset-password/' + token;
-                _context14.next = 12;
+                siteUrl = this._options.siteUrl || _config3.default.siteUrl;
+                resetPasswordUrl = siteUrl + '/reset-password/' + token;
+                _context14.next = 13;
                 return this.email.sendMail({
@@ -1218,3 +1222,3 @@ from: this.emailTemplates.resetPassword.from ? this.emailTemplates.resetPassword.from : this.emailTemplates.from,
 
-              case 12:
+              case 13:
               case 'end':
@@ -1247,3 +1251,3 @@ return _context14.stop();
       var _ref16 = _asyncToGenerator(regeneratorRuntime.mark(function _callee15(userId, address) {
-        var user, token, enrollAccountUrl;
+        var user, token, siteUrl, enrollAccountUrl;
         return regeneratorRuntime.wrap(function _callee15$(_context15) {
@@ -1273,4 +1277,5 @@ while (1) {
               case 9:
-                enrollAccountUrl = this._options.siteUrl + '/enroll-account/' + token;
-                _context15.next = 12;
+                siteUrl = this._options.siteUrl || _config3.default.siteUrl;
+                enrollAccountUrl = siteUrl + '/enroll-account/' + token;
+                _context15.next = 13;
                 return this.email.sendMail({
@@ -1283,3 +1288,3 @@ from: this.emailTemplates.enrollAccount.from ? this.emailTemplates.enrollAccount.from : this.emailTemplates.from,
 
-              case 12:
+              case 13:
               case 'end':
@@ -1286,0 +1291,0 @@ return _context15.stop();

lib/index.js

@@ -1,28 +0,1748 @@
-'use strict';
+(function webpackUniversalModuleDefinition(root, factory) {
+	if(typeof exports === 'object' && typeof module === 'object')
+		module.exports = factory(require("babel-runtime/regenerator"), require("babel-runtime/helpers/asyncToGenerator"), require("babel-runtime/helpers/extends"), require("babel-runtime/helpers/classCallCheck"), require("babel-runtime/helpers/createClass"), require("lodash"), require("jsonwebtoken"), require("@accounts/common"), require("bcryptjs"), require("crypto"), require("babel-runtime/core-js/promise"), require("emailjs"));
+	else if(typeof define === 'function' && define.amd)
+		define(["babel-runtime/regenerator", "babel-runtime/helpers/asyncToGenerator", "babel-runtime/helpers/extends", "babel-runtime/helpers/classCallCheck", "babel-runtime/helpers/createClass", "lodash", "jsonwebtoken", "@accounts/common", "bcryptjs", "crypto", "babel-runtime/core-js/promise", "emailjs"], factory);
+	else if(typeof exports === 'object')
+		exports["@accounts/server"] = factory(require("babel-runtime/regenerator"), require("babel-runtime/helpers/asyncToGenerator"), require("babel-runtime/helpers/extends"), require("babel-runtime/helpers/classCallCheck"), require("babel-runtime/helpers/createClass"), require("lodash"), require("jsonwebtoken"), require("@accounts/common"), require("bcryptjs"), require("crypto"), require("babel-runtime/core-js/promise"), require("emailjs"));
+	else
+		root["@accounts/server"] = factory(root["babel-runtime/regenerator"], root["babel-runtime/helpers/asyncToGenerator"], root["babel-runtime/helpers/extends"], root["babel-runtime/helpers/classCallCheck"], root["babel-runtime/helpers/createClass"], root["lodash"], root["jsonwebtoken"], root["@accounts/common"], root["bcryptjs"], root["crypto"], root["babel-runtime/core-js/promise"], root["emailjs"]);
+})(this, function(__WEBPACK_EXTERNAL_MODULE_2__, __WEBPACK_EXTERNAL_MODULE_3__, __WEBPACK_EXTERNAL_MODULE_4__, __WEBPACK_EXTERNAL_MODULE_5__, __WEBPACK_EXTERNAL_MODULE_6__, __WEBPACK_EXTERNAL_MODULE_7__, __WEBPACK_EXTERNAL_MODULE_8__, __WEBPACK_EXTERNAL_MODULE_9__, __WEBPACK_EXTERNAL_MODULE_12__, __WEBPACK_EXTERNAL_MODULE_14__, __WEBPACK_EXTERNAL_MODULE_16__, __WEBPACK_EXTERNAL_MODULE_17__) {
+return /******/ (function(modules) { // webpackBootstrap
+/******/ 	// The module cache
+/******/ 	var installedModules = {};
 
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.config = exports.encryption = exports.AccountsServer = undefined;
+/******/ 	// The require function
+/******/ 	function __webpack_require__(moduleId) {
 
-var _AccountsServer = require('./AccountsServer');
+/******/ 		// Check if module is in cache
+/******/ 		if(installedModules[moduleId])
+/******/ 			return installedModules[moduleId].exports;
 
-var _AccountsServer2 = _interopRequireDefault(_AccountsServer);
+/******/ 		// Create a new module (and put it into the cache)
+/******/ 		var module = installedModules[moduleId] = {
+/******/ 			exports: {},
+/******/ 			id: moduleId,
+/******/ 			loaded: false
+/******/ 		};
 
-var _encryption = require('./encryption');
+/******/ 		// Execute the module function
+/******/ 		modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);
 
-var encryption = _interopRequireWildcard(_encryption);
+/******/ 		// Flag the module as loaded
+/******/ 		module.loaded = true;
 
-var _config = require('./config');
+/******/ 		// Return the exports of the module
+/******/ 		return module.exports;
+/******/ 	}
 
-var _config2 = _interopRequireDefault(_config);
 
-function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) newObj[key] = obj[key]; } } newObj.default = obj; return newObj; } }
+/******/ 	// expose the modules object (__webpack_modules__)
+/******/ 	__webpack_require__.m = modules;
 
-function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+/******/ 	// expose the module cache
+/******/ 	__webpack_require__.c = installedModules;
 
-exports.default = _AccountsServer2.default; /* eslint-disable import/no-named-as-default */
+/******/ 	// __webpack_public_path__
+/******/ 	__webpack_require__.p = "";
 
-exports.AccountsServer = _AccountsServer.AccountsServer;
-exports.encryption = encryption;
-exports.config = _config2.default;
+/******/ 	// Load entry module and return exports
+/******/ 	return __webpack_require__(0);
+/******/ })
+/************************************************************************/
+/******/ ([
+/* 0 */
+/***/ function(module, exports, __webpack_require__) {
+
+	'use strict';
+
+	Object.defineProperty(exports, "__esModule", {
+	  value: true
+	});
+	exports.config = exports.encryption = exports.AccountsServer = undefined;
+
+	var _AccountsServer = __webpack_require__(1);
+
+	var _AccountsServer2 = _interopRequireDefault(_AccountsServer);
+
+	var _encryption = __webpack_require__(11);
+
+	var encryption = _interopRequireWildcard(_encryption);
+
+	var _config = __webpack_require__(10);
+
+	var _config2 = _interopRequireDefault(_config);
+
+	function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) newObj[key] = obj[key]; } } newObj.default = obj; return newObj; } }
+
+	function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+	exports.default = _AccountsServer2.default; /* eslint-disable import/no-named-as-default */
+
+	exports.AccountsServer = _AccountsServer.AccountsServer;
+	exports.encryption = encryption;
+	exports.config = _config2.default;
+
+/***/ },
+/* 1 */
+/***/ function(module, exports, __webpack_require__) {
+
+	'use strict';
+
+	Object.defineProperty(exports, "__esModule", {
+	  value: true
+	});
+	exports.AccountsServer = undefined;
+
+	var _regenerator = __webpack_require__(2);
+
+	var _regenerator2 = _interopRequireDefault(_regenerator);
+
+	var _asyncToGenerator2 = __webpack_require__(3);
+
+	var _asyncToGenerator3 = _interopRequireDefault(_asyncToGenerator2);
+
+	var _extends2 = __webpack_require__(4);
+
+	var _extends3 = _interopRequireDefault(_extends2);
+
+	var _classCallCheck2 = __webpack_require__(5);
+
+	var _classCallCheck3 = _interopRequireDefault(_classCallCheck2);
+
+	var _createClass2 = __webpack_require__(6);
+
+	var _createClass3 = _interopRequireDefault(_createClass2);
+
+	var _lodash = __webpack_require__(7);
+
+	var _jsonwebtoken = __webpack_require__(8);
+
+	var _jsonwebtoken2 = _interopRequireDefault(_jsonwebtoken);
+
+	var _common = __webpack_require__(9);
+
+	var _config2 = __webpack_require__(10);
+
+	var _config3 = _interopRequireDefault(_config2);
+
+	var _encryption = __webpack_require__(11);
+
+	var _tokens = __webpack_require__(13);
+
+	var _email = __webpack_require__(15);
+
+	var _email2 = _interopRequireDefault(_email);
+
+	var _emailTemplates = __webpack_require__(18);
+
+	var _emailTemplates2 = _interopRequireDefault(_emailTemplates);
+
+	function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+	var AccountsServer = exports.AccountsServer = function () {
+	  function AccountsServer() {
+	    (0, _classCallCheck3.default)(this, AccountsServer);
+	  }
+
+	  (0, _createClass3.default)(AccountsServer, [{
+	    key: 'config',
+
+
+	    /**
+	     * @description Configure AccountsServer.
+	     * @param {Object} options - Options for AccountsServer.
+	     * @param {Object} db - DBInterface for AccountsServer.
+	     * @returns {Object} - Return the options.
+	     */
+	    value: function config(options, db) {
+	      this._options = (0, _extends3.default)({}, _config3.default, options);
+	      if (!db) {
+	        throw new _common.AccountsError('A database driver is required');
+	      }
+	      this.db = db;
+	      if (this._options.sendMail) {
+	        this.email = { sendMail: this._options.sendMail };
+	      } else {
+	        this.email = new _email2.default(this._options.email);
+	      }
+	      this.emailTemplates = _emailTemplates2.default;
+	    }
+
+	    /**
+	     * @description Return the AccountsServer options.
+	     * @returns {Object} - Return the options.
+	     */
+
+	  }, {
+	    key: 'options',
+	    value: function options() {
+	      return this._options;
+	    }
+
+	    /**
+	     * @description Login the user with his password.
+	     * @param {Object} user - User to login.
+	     * @param {string} password - Password of user to login.
+	     * @param {string} ip - User ip.
+	     * @param {string} userAgent - User user agent.
+	     * @returns {Promise<Object>} - LoginReturnType.
+	     */
+	    // eslint-disable-next-line max-len
+
+	  }, {
+	    key: 'loginWithPassword',
+	    value: function () {
+	      var _ref = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee(user, password, ip, userAgent) {
+	        var foundUser, sessionId, _createTokens, accessToken, refreshToken;
+
+	        return _regenerator2.default.wrap(function _callee$(_context) {
+	          while (1) {
+	            switch (_context.prev = _context.next) {
+	              case 0:
+	                if (!(!user || !password)) {
+	                  _context.next = 2;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Unrecognized options for login request', user, 400);
+
+	              case 2:
+	                if (!(!(0, _lodash.isString)(user) && !(0, _lodash.isPlainObject)(user) || !(0, _lodash.isString)(password))) {
+	                  _context.next = 4;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Match failed', user, 400);
+
+	              case 4:
+	                foundUser = void 0;
+
+	                if (!this._options.passwordAuthenticator) {
+	                  _context.next = 17;
+	                  break;
+	                }
+
+	                _context.prev = 6;
+	                _context.next = 9;
+	                return this._externalPasswordAuthenticator(this._options.passwordAuthenticator, user, password);
+
+	              case 9:
+	                foundUser = _context.sent;
+	                _context.next = 15;
+	                break;
+
+	              case 12:
+	                _context.prev = 12;
+	                _context.t0 = _context['catch'](6);
+	                throw new _common.AccountsError(_context.t0, user, 403);
+
+	              case 15:
+	                _context.next = 20;
+	                break;
+
+	              case 17:
+	                _context.next = 19;
+	                return this._defaultPasswordAuthenticator(user, password);
+
+	              case 19:
+	                foundUser = _context.sent;
+
+	              case 20:
+	                if (foundUser) {
+	                  _context.next = 22;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User not found', user, 403);
+
+	              case 22:
+	                _context.next = 24;
+	                return this.db.createSession(foundUser.id, ip, userAgent);
+
+	              case 24:
+	                sessionId = _context.sent;
+	                _createTokens = this.createTokens(sessionId), accessToken = _createTokens.accessToken, refreshToken = _createTokens.refreshToken;
+	                return _context.abrupt('return', {
+	                  sessionId: sessionId,
+	                  user: foundUser,
+	                  tokens: {
+	                    refreshToken: refreshToken,
+	                    accessToken: accessToken
+	                  }
+	                });
+
+	              case 27:
+	              case 'end':
+	                return _context.stop();
+	            }
+	          }
+	        }, _callee, this, [[6, 12]]);
+	      }));
+
+	      function loginWithPassword(_x, _x2, _x3, _x4) {
+	        return _ref.apply(this, arguments);
+	      }
+
+	      return loginWithPassword;
+	    }()
+
+	    // eslint-disable-next-line max-len
+
+	  }, {
+	    key: '_externalPasswordAuthenticator',
+	    value: function () {
+	      var _ref2 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee2(authFn, user, password) {
+	        return _regenerator2.default.wrap(function _callee2$(_context2) {
+	          while (1) {
+	            switch (_context2.prev = _context2.next) {
+	              case 0:
+	                return _context2.abrupt('return', authFn(user, password));
+
+	              case 1:
+	              case 'end':
+	                return _context2.stop();
+	            }
+	          }
+	        }, _callee2, this);
+	      }));
+
+	      function _externalPasswordAuthenticator(_x5, _x6, _x7) {
+	        return _ref2.apply(this, arguments);
+	      }
+
+	      return _externalPasswordAuthenticator;
+	    }()
+	  }, {
+	    key: '_defaultPasswordAuthenticator',
+	    value: function () {
+	      var _ref3 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee3(user, password) {
+	        var _ref4, username, email, id, foundUser, hash, isPasswordValid;
+
+	        return _regenerator2.default.wrap(function _callee3$(_context3) {
+	          while (1) {
+	            switch (_context3.prev = _context3.next) {
+	              case 0:
+	                _ref4 = (0, _lodash.isString)(user) ? (0, _common.toUsernameAndEmail)({ user: user }) : (0, _common.toUsernameAndEmail)((0, _extends3.default)({}, user)), username = _ref4.username, email = _ref4.email, id = _ref4.id;
+	                foundUser = void 0;
+
+	                if (!id) {
+	                  _context3.next = 8;
+	                  break;
+	                }
+
+	                _context3.next = 5;
+	                return this.db.findUserById(id);
+
+	              case 5:
+	                foundUser = _context3.sent;
+	                _context3.next = 18;
+	                break;
+
+	              case 8:
+	                if (!username) {
+	                  _context3.next = 14;
+	                  break;
+	                }
+
+	                _context3.next = 11;
+	                return this.db.findUserByUsername(username);
+
+	              case 11:
+	                foundUser = _context3.sent;
+	                _context3.next = 18;
+	                break;
+
+	              case 14:
+	                if (!email) {
+	                  _context3.next = 18;
+	                  break;
+	                }
+
+	                _context3.next = 17;
+	                return this.db.findUserByEmail(email);
+
+	              case 17:
+	                foundUser = _context3.sent;
+
+	              case 18:
+	                if (foundUser) {
+	                  _context3.next = 20;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User not found', user, 403);
+
+	              case 20:
+	                _context3.next = 22;
+	                return this.db.findPasswordHash(foundUser.id);
+
+	              case 22:
+	                hash = _context3.sent;
+
+	                if (hash) {
+	                  _context3.next = 25;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User has no password set', user, 403);
+
+	              case 25:
+	                _context3.next = 27;
+	                return (0, _encryption.verifyPassword)(password, hash);
+
+	              case 27:
+	                isPasswordValid = _context3.sent;
+
+	                if (isPasswordValid) {
+	                  _context3.next = 30;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Incorrect password', user, 403);
+
+	              case 30:
+	                return _context3.abrupt('return', foundUser);
+
+	              case 31:
+	              case 'end':
+	                return _context3.stop();
+	            }
+	          }
+	        }, _callee3, this);
+	      }));
+
+	      function _defaultPasswordAuthenticator(_x8, _x9) {
+	        return _ref3.apply(this, arguments);
+	      }
+
+	      return _defaultPasswordAuthenticator;
+	    }()
+
+	    /**
+	     * @description Create a new user.
+	     * @param {Object} user - The user object.
+	     * @returns {Promise<string>} - Return the id of user created.
+	     */
+
+	  }, {
+	    key: 'createUser',
+	    value: function () {
+	      var _ref5 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee4(user) {
+	        var userId;
+	        return _regenerator2.default.wrap(function _callee4$(_context4) {
+	          while (1) {
+	            switch (_context4.prev = _context4.next) {
+	              case 0:
+	                if (!(!_common.validators.validateUsername(user.username) && !_common.validators.validateEmail(user.email))) {
+	                  _context4.next = 2;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Username or Email is required', {
+	                  username: user && user.username,
+	                  email: user && user.email
+	                });
+
+	              case 2:
+	                _context4.t0 = user.username;
+
+	                if (!_context4.t0) {
+	                  _context4.next = 7;
+	                  break;
+	                }
+
+	                _context4.next = 6;
+	                return this.db.findUserByUsername(user.username);
+
+	              case 6:
+	                _context4.t0 = _context4.sent;
+
+	              case 7:
+	                if (!_context4.t0) {
+	                  _context4.next = 9;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Username already exists', { username: user.username });
+
+	              case 9:
+	                _context4.t1 = user.email;
+
+	                if (!_context4.t1) {
+	                  _context4.next = 14;
+	                  break;
+	                }
+
+	                _context4.next = 13;
+	                return this.db.findUserByEmail(user.email);
+
+	              case 13:
+	                _context4.t1 = _context4.sent;
+
+	              case 14:
+	                if (!_context4.t1) {
+	                  _context4.next = 16;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Email already exists', { email: user.email });
+
+	              case 16:
+	                _context4.next = 18;
+	                return this.db.createUser({
+	                  username: user.username,
+	                  email: user.email && user.email.toLowerCase(),
+	                  password: user.password,
+	                  profile: user.profile
+	                });
+
+	              case 18:
+	                userId = _context4.sent;
+	                return _context4.abrupt('return', userId);
+
+	              case 20:
+	              case 'end':
+	                return _context4.stop();
+	            }
+	          }
+	        }, _callee4, this);
+	      }));
+
+	      function createUser(_x10) {
+	        return _ref5.apply(this, arguments);
+	      }
+
+	      return createUser;
+	    }()
+
+	    /**
+	     * @description Refresh a user token.
+	     * @param {string} accessToken - User access token.
+	     * @param {string} refreshToken - User refresh token.
+	     * @param {string} ip - User ip.
+	     * @param {string} userAgent - User user agent.
+	     * @returns {Promise<Object>} - LoginReturnType.
+	     */
+	    // eslint-disable-next-line max-len
+
+	  }, {
+	    key: 'refreshTokens',
+	    value: function () {
+	      var _ref6 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee5(accessToken, refreshToken, ip, userAgent) {
+	        var sessionId, decodedAccessToken, session, user, tokens;
+	        return _regenerator2.default.wrap(function _callee5$(_context5) {
+	          while (1) {
+	            switch (_context5.prev = _context5.next) {
+	              case 0:
+	                if (!(!(0, _lodash.isString)(accessToken) || !(0, _lodash.isString)(refreshToken))) {
+	                  _context5.next = 2;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('An accessToken and refreshToken are required');
+
+	              case 2:
+	                sessionId = void 0;
+	                _context5.prev = 3;
+
+	                _jsonwebtoken2.default.verify(refreshToken, this._options.tokenSecret);
+	                decodedAccessToken = _jsonwebtoken2.default.verify(accessToken, this._options.tokenSecret, {
+	                  ignoreExpiration: true
+	                });
+
+	                sessionId = decodedAccessToken.data.sessionId;
+	                _context5.next = 12;
+	                break;
+
+	              case 9:
+	                _context5.prev = 9;
+	                _context5.t0 = _context5['catch'](3);
+	                throw new _common.AccountsError('Tokens are not valid');
+
+	              case 12:
+	                _context5.next = 14;
+	                return this.db.findSessionById(sessionId);
+
+	              case 14:
+	                session = _context5.sent;
+
+	                if (session) {
+	                  _context5.next = 17;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Session not found');
+
+	              case 17:
+	                if (!session.valid) {
+	                  _context5.next = 29;
+	                  break;
+	                }
+
+	                _context5.next = 20;
+	                return this.db.findUserById(session.userId);
+
+	              case 20:
+	                user = _context5.sent;
+
+	                if (user) {
+	                  _context5.next = 23;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User not found', { id: session.userId });
+
+	              case 23:
+	                tokens = this.createTokens(sessionId);
+	                _context5.next = 26;
+	                return this.db.updateSession(sessionId, ip, userAgent);
+
+	              case 26:
+	                return _context5.abrupt('return', {
+	                  sessionId: sessionId,
+	                  user: user,
+	                  tokens: tokens
+	                });
+
+	              case 29:
+	                throw new _common.AccountsError('Session is no longer valid', { id: session.userId });
+
+	              case 30:
+	              case 'end':
+	                return _context5.stop();
+	            }
+	          }
+	        }, _callee5, this, [[3, 9]]);
+	      }));
+
+	      function refreshTokens(_x11, _x12, _x13, _x14) {
+	        return _ref6.apply(this, arguments);
+	      }
+
+	      return refreshTokens;
+	    }()
+
+	    /**
+	     * @description Refresh a user token.
+	     * @param {string} sessionId - User session id.
+	     * @returns {Promise<Object>} - Return a new accessToken and refreshToken.
+	     */
+
+	  }, {
+	    key: 'createTokens',
+	    value: function createTokens(sessionId) {
+	      var _options = this._options,
+	          _options$tokenSecret = _options.tokenSecret,
+	          tokenSecret = _options$tokenSecret === undefined ? _config3.default.tokenSecret : _options$tokenSecret,
+	          _options$tokenConfigs = _options.tokenConfigs,
+	          tokenConfigs = _options$tokenConfigs === undefined ? _config3.default.tokenConfigs : _options$tokenConfigs;
+
+	      var accessToken = (0, _tokens.generateAccessToken)({
+	        data: {
+	          sessionId: sessionId
+	        },
+	        secret: tokenSecret,
+	        config: tokenConfigs.accessToken || {}
+	      });
+	      var refreshToken = (0, _tokens.generateRefreshToken)({
+	        secret: tokenSecret,
+	        config: tokenConfigs.refreshToken || {}
+	      });
+	      return { accessToken: accessToken, refreshToken: refreshToken };
+	    }
+
+	    /**
+	     * @description Logout a user and invalidate his session.
+	     * @param {string} accessToken - User access token.
+	     * @returns {Promise<void>} - Return a promise.
+	     */
+
+	  }, {
+	    key: 'logout',
+	    value: function () {
+	      var _ref7 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee6(accessToken) {
+	        var session, user;
+	        return _regenerator2.default.wrap(function _callee6$(_context6) {
+	          while (1) {
+	            switch (_context6.prev = _context6.next) {
+	              case 0:
+	                _context6.next = 2;
+	                return this.findSessionByAccessToken(accessToken);
+
+	              case 2:
+	                session = _context6.sent;
+
+	                if (!session.valid) {
+	                  _context6.next = 13;
+	                  break;
+	                }
+
+	                _context6.next = 6;
+	                return this.db.findUserById(session.userId);
+
+	              case 6:
+	                user = _context6.sent;
+
+	                if (user) {
+	                  _context6.next = 9;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User not found', { id: session.userId });
+
+	              case 9:
+	                _context6.next = 11;
+	                return this.db.invalidateSession(session.sessionId);
+
+	              case 11:
+	                _context6.next = 14;
+	                break;
+
+	              case 13:
+	                throw new _common.AccountsError('Session is no longer valid', { id: session.userId });
+
+	              case 14:
+	              case 'end':
+	                return _context6.stop();
+	            }
+	          }
+	        }, _callee6, this);
+	      }));
+
+	      function logout(_x15) {
+	        return _ref7.apply(this, arguments);
+	      }
+
+	      return logout;
+	    }()
+	  }, {
+	    key: 'resumeSession',
+	    value: function () {
+	      var _ref8 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee7(accessToken) {
+	        var session, user;
+	        return _regenerator2.default.wrap(function _callee7$(_context7) {
+	          while (1) {
+	            switch (_context7.prev = _context7.next) {
+	              case 0:
+	                _context7.next = 2;
+	                return this.findSessionByAccessToken(accessToken);
+
+	              case 2:
+	                session = _context7.sent;
+
+	                if (!session.valid) {
+	                  _context7.next = 19;
+	                  break;
+	                }
+
+	                _context7.next = 6;
+	                return this.db.findUserById(session.userId);
+
+	              case 6:
+	                user = _context7.sent;
+
+	                if (user) {
+	                  _context7.next = 9;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User not found', { id: session.userId });
+
+	              case 9:
+	                if (!this._options.resumeSessionValidator) {
+	                  _context7.next = 18;
+	                  break;
+	                }
+
+	                _context7.prev = 10;
+	                _context7.next = 13;
+	                return this._options.resumeSessionValidator(user, session);
+
+	              case 13:
+	                _context7.next = 18;
+	                break;
+
+	              case 15:
+	                _context7.prev = 15;
+	                _context7.t0 = _context7['catch'](10);
+	                throw new _common.AccountsError(_context7.t0, { id: session.userId }, 403);
+
+	              case 18:
+	                return _context7.abrupt('return', user);
+
+	              case 19:
+	                return _context7.abrupt('return', null);
+
+	              case 20:
+	              case 'end':
+	                return _context7.stop();
+	            }
+	          }
+	        }, _callee7, this, [[10, 15]]);
+	      }));
+
+	      function resumeSession(_x16) {
+	        return _ref8.apply(this, arguments);
+	      }
+
+	      return resumeSession;
+	    }()
+	  }, {
+	    key: 'findSessionByAccessToken',
+	    value: function () {
+	      var _ref9 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee8(accessToken) {
+	        var sessionId, decodedAccessToken, session;
+	        return _regenerator2.default.wrap(function _callee8$(_context8) {
+	          while (1) {
+	            switch (_context8.prev = _context8.next) {
+	              case 0:
+	                if ((0, _lodash.isString)(accessToken)) {
+	                  _context8.next = 2;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('An accessToken is required');
+
+	              case 2:
+	                sessionId = void 0;
+	                _context8.prev = 3;
+	                decodedAccessToken = _jsonwebtoken2.default.verify(accessToken, this._options.tokenSecret);
+
+	                sessionId = decodedAccessToken.data.sessionId;
+	                _context8.next = 11;
+	                break;
+
+	              case 8:
+	                _context8.prev = 8;
+	                _context8.t0 = _context8['catch'](3);
+	                throw new _common.AccountsError('Tokens are not valid');
+
+	              case 11:
+	                _context8.next = 13;
+	                return this.db.findSessionById(sessionId);
+
+	              case 13:
+	                session = _context8.sent;
+
+	                if (session) {
+	                  _context8.next = 16;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Session not found');
+
+	              case 16:
+	                return _context8.abrupt('return', session);
+
+	              case 17:
+	              case 'end':
+	                return _context8.stop();
+	            }
+	          }
+	        }, _callee8, this, [[3, 8]]);
+	      }));
+
+	      function findSessionByAccessToken(_x17) {
+	        return _ref9.apply(this, arguments);
+	      }
+
+	      return findSessionByAccessToken;
+	    }()
+
+	    /**
+	     * @description Find a user by one of his emails.
+	     * @param {string} email - User email.
+	     * @returns {Promise<Object>} - Return a user or null if not found.
+	     */
+
+	  }, {
+	    key: 'findUserByEmail',
+	    value: function findUserByEmail(email) {
+	      return this.db.findUserByEmail(email);
+	    }
+
+	    /**
+	     * @description Find a user by his username.
+	     * @param {string} username - User username.
+	     * @returns {Promise<Object>} - Return a user or null if not found.
+	     */
+
+	  }, {
+	    key: 'findUserByUsername',
+	    value: function findUserByUsername(username) {
+	      return this.db.findUserByUsername(username);
+	    }
+
+	    /**
+	     * @description Find a user by his id.
+	     * @param {string} userId - User id.
+	     * @returns {Promise<Object>} - Return a user or null if not found.
+	     */
+
+	  }, {
+	    key: 'findUserById',
+	    value: function findUserById(userId) {
+	      return this.db.findUserById(userId);
+	    }
+
+	    /**
+	     * @description Add an email address for a user.
+	     * Use this instead of directly updating the database.
+	     * @param {string} userId - User id.
+	     * @param {string} newEmail - A new email address for the user.
+	     * @param {boolean} [verified] - Whether the new email address should be marked as verified.
+	     * Defaults to false.
+	     * @returns {Promise<void>} - Return a Promise.
+	     */
+
+	  }, {
+	    key: 'addEmail',
+	    value: function addEmail(userId, newEmail, verified) {
+	      return this.db.addEmail(userId, newEmail, verified);
+	    }
+
+	    /**
+	     * @description Remove an email address for a user.
+	     * Use this instead of directly updating the database.
+	     * @param {string} userId - User id.
+	     * @param {string} email - The email address to remove.
+	     * @returns {Promise<void>} - Return a Promise.
+	     */
+
+	  }, {
+	    key: 'removeEmail',
+	    value: function removeEmail(userId, email) {
+	      return this.db.removeEmail(userId, email);
+	    }
+
+	    /**
+	     * @description Marks the user's email address as verified.
+	     * @param {string} token - The token retrieved from the verification URL.
+	     * @returns {Promise<void>} - Return a Promise.
+	     */
+
+	  }, {
+	    key: 'verifyEmail',
+	    value: function () {
+	      var _ref10 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee9(token) {
+	        var user, verificationTokens, tokenRecord, emailRecord;
+	        return _regenerator2.default.wrap(function _callee9$(_context9) {
+	          while (1) {
+	            switch (_context9.prev = _context9.next) {
+	              case 0:
+	                _context9.next = 2;
+	                return this.db.findUserByEmailVerificationToken(token);
+
+	              case 2:
+	                user = _context9.sent;
+
+	                if (user) {
+	                  _context9.next = 5;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Verify email link expired');
+
+	              case 5:
+	                verificationTokens = (0, _lodash.get)(user, ['services', 'email', 'verificationTokens'], []);
+	                tokenRecord = (0, _lodash.find)(verificationTokens, function (t) {
+	                  return t.token === token;
+	                });
+
+	                if (tokenRecord) {
+	                  _context9.next = 9;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Verify email link expired');
+
+	              case 9:
+	                // TODO check time for expiry date
+	                emailRecord = (0, _lodash.find)(user.emails, function (e) {
+	                  return e.address === tokenRecord.address;
+	                });
+
+	                if (emailRecord) {
+	                  _context9.next = 12;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Verify email link is for unknown address');
+
+	              case 12:
+	                _context9.next = 14;
+	                return this.db.verifyEmail(user.id, emailRecord.address);
+
+	              case 14:
+	              case 'end':
+	                return _context9.stop();
+	            }
+	          }
+	        }, _callee9, this);
+	      }));
+
+	      function verifyEmail(_x18) {
+	        return _ref10.apply(this, arguments);
+	      }
+
+	      return verifyEmail;
+	    }()
+
+	    /**
+	     * @description Reset the password for a user using a token received in email.
+	     * @param {string} token - The token retrieved from the reset password URL.
+	     * @param {string} newPassword - A new password for the user.
+	     * @returns {Promise<void>} - Return a Promise.
+	     */
+
+	  }, {
+	    key: 'resetPassword',
+	    value: function () {
+	      var _ref11 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee10(token, newPassword) {
+	        var user, resetTokens, resetTokenRecord, emails;
+	        return _regenerator2.default.wrap(function _callee10$(_context10) {
+	          while (1) {
+	            switch (_context10.prev = _context10.next) {
+	              case 0:
+	                _context10.next = 2;
+	                return this.db.findUserByResetPasswordToken(token);
+
+	              case 2:
+	                user = _context10.sent;
+
+	                if (user) {
+	                  _context10.next = 5;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Reset password link expired');
+
+	              case 5:
+	                resetTokens = (0, _lodash.get)(user, ['services', 'password', 'resetTokens']);
+	                resetTokenRecord = (0, _lodash.find)(resetTokens, function (t) {
+	                  return t.token === token;
+	                });
+
+	                if (resetTokenRecord) {
+	                  _context10.next = 9;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Reset password link expired');
+
+	              case 9:
+	                // TODO check time for expiry date
+	                emails = user.emails || [];
+
+	                if ((0, _lodash.includes)(emails.map(function (email) {
+	                  return email.address;
+	                }), resetTokenRecord.email)) {
+	                  _context10.next = 12;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('Token has invalid email address');
+
+	              case 12:
+	                _context10.next = 14;
+	                return this.db.setResetPasssword(user.id, resetTokenRecord.email, newPassword, token);
+
+	              case 14:
+	                // Changing the password should invalidate existing sessions
+	                this.db.invalidateAllSessions(user.id);
+
+	              case 15:
+	              case 'end':
+	                return _context10.stop();
+	            }
+	          }
+	        }, _callee10, this);
+	      }));
+
+	      function resetPassword(_x19, _x20) {
+	        return _ref11.apply(this, arguments);
+	      }
+
+	      return resetPassword;
+	    }()
+
+	    /**
+	     * @description Change the password for a user.
+	     * @param {string} userId - User id.
+	     * @param {string} newPassword - A new password for the user.
+	     * @returns {Promise<void>} - Return a Promise.
+	     */
+
+	  }, {
+	    key: 'setPassword',
+	    value: function setPassword(userId, newPassword) {
+	      return this.db.setPasssword(userId, newPassword);
+	    }
+
+	    /**
+	     * @description Change the profile for a user.
+	     * @param {string} userId - User id.
+	     * @param {Object} profile - The new user profile.
+	     * @returns {Promise<void>} - Return a Promise.
+	     */
+
+	  }, {
+	    key: 'setProfile',
+	    value: function () {
+	      var _ref12 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee11(userId, profile) {
+	        var user;
+	        return _regenerator2.default.wrap(function _callee11$(_context11) {
+	          while (1) {
+	            switch (_context11.prev = _context11.next) {
+	              case 0:
+	                _context11.next = 2;
+	                return this.db.findUserById(userId);
+
+	              case 2:
+	                user = _context11.sent;
+
+	                if (user) {
+	                  _context11.next = 5;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User not found', { id: userId });
+
+	              case 5:
+	                _context11.next = 7;
+	                return this.db.setProfile(userId, profile);
+
+	              case 7:
+	              case 'end':
+	                return _context11.stop();
+	            }
+	          }
+	        }, _callee11, this);
+	      }));
+
+	      function setProfile(_x21, _x22) {
+	        return _ref12.apply(this, arguments);
+	      }
+
+	      return setProfile;
+	    }()
+
+	    /**
+	     * @description Update the profile for a user,
+	     * the new profile will be added to the existing one.
+	     * @param {string} userId - User id.
+	     * @param {Object} profile - User profile to add.
+	     * @returns {Promise<Object>} - Return a Promise.
+	     */
+
+	  }, {
+	    key: 'updateProfile',
+	    value: function () {
+	      var _ref13 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee12(userId, profile) {
+	        var user, res;
+	        return _regenerator2.default.wrap(function _callee12$(_context12) {
+	          while (1) {
+	            switch (_context12.prev = _context12.next) {
+	              case 0:
+	                _context12.next = 2;
+	                return this.db.findUserById(userId);
+
+	              case 2:
+	                user = _context12.sent;
+
+	                if (user) {
+	                  _context12.next = 5;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User not found', { id: userId });
+
+	              case 5:
+	                _context12.next = 7;
+	                return this.db.setProfile(userId, (0, _extends3.default)({}, user.profile, profile));
+
+	              case 7:
+	                res = _context12.sent;
+	                return _context12.abrupt('return', res);
+
+	              case 9:
+	              case 'end':
+	                return _context12.stop();
+	            }
+	          }
+	        }, _callee12, this);
+	      }));
+
+	      function updateProfile(_x23, _x24) {
+	        return _ref13.apply(this, arguments);
+	      }
+
+	      return updateProfile;
+	    }()
+
+	    /**
+	     * @description Send an email with a link the user can use verify their email address.
+	     * @param {string} userId - The id of the user to send email to.
+	     * @param {string} [address] - Which address of the user's to send the email to.
+	     * This address must be in the user's emails list.
+	     * Defaults to the first unverified email in the list.
+	     * @returns {Promise<void>} - Return a Promise.
+	     */
+
+	  }, {
+	    key: 'sendVerificationEmail',
+	    value: function () {
+	      var _ref14 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee13(userId, address) {
+	        var user, email, emails, token, siteUrl, verifyEmailUrl;
+	        return _regenerator2.default.wrap(function _callee13$(_context13) {
+	          while (1) {
+	            switch (_context13.prev = _context13.next) {
+	              case 0:
+	                _context13.next = 2;
+	                return this.db.findUserById(userId);
+
+	              case 2:
+	                user = _context13.sent;
+
+	                if (user) {
+	                  _context13.next = 5;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User not found', { id: userId });
+
+	              case 5:
+	                // If no address provided find the first unverified email
+	                if (!address) {
+	                  email = (0, _lodash.find)(user.emails, function (e) {
+	                    return !e.verified;
+	                  });
+
+	                  address = email && email.address; // eslint-disable-line no-param-reassign
+	                }
+	                // Make sure the address is valid
+	                emails = user.emails || [];
+
+	                if (!(!address || !(0, _lodash.includes)(emails.map(function (email) {
+	                  return email.address;
+	                }), address))) {
+	                  _context13.next = 9;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('No such email address for user');
+
+	              case 9:
+	                token = (0, _tokens.generateRandomToken)();
+	                _context13.next = 12;
+	                return this.db.addEmailVerificationToken(userId, address, token);
+
+	              case 12:
+	                siteUrl = this._options.siteUrl || _config3.default.siteUrl;
+	                verifyEmailUrl = siteUrl + '/verify-email/' + token;
+	                _context13.next = 16;
+	                return this.email.sendMail({
+	                  from: this.emailTemplates.verifyEmail.from ? this.emailTemplates.verifyEmail.from : this.emailTemplates.from,
+	                  to: address,
+	                  subject: this.emailTemplates.verifyEmail.subject(user),
+	                  text: this.emailTemplates.verifyEmail.text(user, verifyEmailUrl)
+	                });
+
+	              case 16:
+	              case 'end':
+	                return _context13.stop();
+	            }
+	          }
+	        }, _callee13, this);
+	      }));
+
+	      function sendVerificationEmail(_x25, _x26) {
+	        return _ref14.apply(this, arguments);
+	      }
+
+	      return sendVerificationEmail;
+	    }()
+
+	    /**
+	     * @description Send an email with a link the user can use to reset their password.
+	     * @param {string} userId - The id of the user to send email to.
+	     * @param {string} [address] - Which address of the user's to send the email to.
+	     * This address must be in the user's emails list.
+	     * Defaults to the first email in the list.
+	     * @returns {Promise<void>} - Return a Promise.
+	     */
+
+	  }, {
+	    key: 'sendResetPasswordEmail',
+	    value: function () {
+	      var _ref15 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee14(userId, address) {
+	        var user, token, siteUrl, resetPasswordUrl;
+	        return _regenerator2.default.wrap(function _callee14$(_context14) {
+	          while (1) {
+	            switch (_context14.prev = _context14.next) {
+	              case 0:
+	                _context14.next = 2;
+	                return this.db.findUserById(userId);
+
+	              case 2:
+	                user = _context14.sent;
+
+	                if (user) {
+	                  _context14.next = 5;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User not found', { id: userId });
+
+	              case 5:
+	                address = this._getFirstUserEmail(user, address); // eslint-disable-line no-param-reassign
+	                token = (0, _tokens.generateRandomToken)();
+	                _context14.next = 9;
+	                return this.db.addResetPasswordToken(userId, address, token);
+
+	              case 9:
+	                siteUrl = this._options.siteUrl || _config3.default.siteUrl;
+	                resetPasswordUrl = siteUrl + '/reset-password/' + token;
+	                _context14.next = 13;
+	                return this.email.sendMail({
+	                  from: this.emailTemplates.resetPassword.from ? this.emailTemplates.resetPassword.from : this.emailTemplates.from,
+	                  to: address,
+	                  subject: this.emailTemplates.resetPassword.subject(user),
+	                  text: this.emailTemplates.resetPassword.text(user, resetPasswordUrl)
+	                });
+
+	              case 13:
+	              case 'end':
+	                return _context14.stop();
+	            }
+	          }
+	        }, _callee14, this);
+	      }));
+
+	      function sendResetPasswordEmail(_x27, _x28) {
+	        return _ref15.apply(this, arguments);
+	      }
+
+	      return sendResetPasswordEmail;
+	    }()
+
+	    /**
+	     * @description Send an email with a link the user can use to set their initial password.
+	     * @param {string} userId - The id of the user to send email to.
+	     * @param {string} [address] - Which address of the user's to send the email to.
+	     * This address must be in the user's emails list.
+	     * Defaults to the first email in the list.
+	     * @returns {Promise<void>} - Return a Promise.
+	     */
+
+	  }, {
+	    key: 'sendEnrollmentEmail',
+	    value: function () {
+	      var _ref16 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee15(userId, address) {
+	        var user, token, siteUrl, enrollAccountUrl;
+	        return _regenerator2.default.wrap(function _callee15$(_context15) {
+	          while (1) {
+	            switch (_context15.prev = _context15.next) {
+	              case 0:
+	                _context15.next = 2;
+	                return this.db.findUserById(userId);
+
+	              case 2:
+	                user = _context15.sent;
+
+	                if (user) {
+	                  _context15.next = 5;
+	                  break;
+	                }
+
+	                throw new _common.AccountsError('User not found', { id: userId });
+
+	              case 5:
+	                address = this._getFirstUserEmail(user, address); // eslint-disable-line no-param-reassign
+	                token = (0, _tokens.generateRandomToken)();
+	                _context15.next = 9;
+	                return this.db.addResetPasswordToken(userId, address, token, 'enroll');
+
+	              case 9:
+	                siteUrl = this._options.siteUrl || _config3.default.siteUrl;
+	                enrollAccountUrl = siteUrl + '/enroll-account/' + token;
+	                _context15.next = 13;
+	                return this.email.sendMail({
+	                  from: this.emailTemplates.enrollAccount.from ? this.emailTemplates.enrollAccount.from : this.emailTemplates.from,
+	                  to: address,
+	                  subject: this.emailTemplates.enrollAccount.subject(user),
+	                  text: this.emailTemplates.enrollAccount.text(user, enrollAccountUrl)
+	                });
+
+	              case 13:
+	              case 'end':
+	                return _context15.stop();
+	            }
+	          }
+	        }, _callee15, this);
+	      }));
+
+	      function sendEnrollmentEmail(_x29, _x30) {
+	        return _ref16.apply(this, arguments);
+	      }
+
+	      return sendEnrollmentEmail;
+	    }()
+	  }, {
+	    key: '_getFirstUserEmail',
+	    value: function _getFirstUserEmail(user, address) {
+	      // Pick the first email if we weren't passed an email
+	      if (!address && user.emails && user.emails[0]) {
+	        address = user.emails[0].address; // eslint-disable-line no-param-reassign
+	      }
+	      // Make sure the address is valid
+	      var emails = user.emails || [];
+	      if (!address || !(0, _lodash.includes)(emails.map(function (email) {
+	        return email.address;
+	      }), address)) {
+	        throw new _common.AccountsError('No such email address for user');
+	      }
+	      return address;
+	    }
+	  }]);
+	  return AccountsServer;
+	}();
+
+	exports.default = new AccountsServer();
+
+/***/ },
+/* 2 */
+/***/ function(module, exports) {
+
+	module.exports = require("babel-runtime/regenerator");
+
+/***/ },
+/* 3 */
+/***/ function(module, exports) {
+
+	module.exports = require("babel-runtime/helpers/asyncToGenerator");
+
+/***/ },
+/* 4 */
+/***/ function(module, exports) {
+
+	module.exports = require("babel-runtime/helpers/extends");
+
+/***/ },
+/* 5 */
+/***/ function(module, exports) {
+
+	module.exports = require("babel-runtime/helpers/classCallCheck");
+
+/***/ },
+/* 6 */
+/***/ function(module, exports) {
+
+	module.exports = require("babel-runtime/helpers/createClass");
+
+/***/ },
+/* 7 */
+/***/ function(module, exports) {
+
+	module.exports = require("lodash");
+
+/***/ },
+/* 8 */
+/***/ function(module, exports) {
+
+	module.exports = require("jsonwebtoken");
+
+/***/ },
+/* 9 */
+/***/ function(module, exports) {
+
+	module.exports = require("@accounts/common");
+
+/***/ },
+/* 10 */
+/***/ function(module, exports, __webpack_require__) {
+
+	'use strict';
+
+	Object.defineProperty(exports, "__esModule", {
+	  value: true
+	});
+
+	var _extends2 = __webpack_require__(4);
+
+	var _extends3 = _interopRequireDefault(_extends2);
+
+	var _common = __webpack_require__(9);
+
+	function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+	exports.default = (0, _extends3.default)({}, _common.config, {
+	  tokenSecret: 'terrible secret',
+	  tokenConfigs: {
+	    accessToken: {
+	      expiresIn: '90m'
+	    },
+	    refreshToken: {
+	      expiresIn: '1d'
+	    }
+	  }
+	});
+
+/***/ },
+/* 11 */
+/***/ function(module, exports, __webpack_require__) {
+
+	'use strict';
+
+	Object.defineProperty(exports, "__esModule", {
+	  value: true
+	});
+	exports.verifyPassword = exports.hashPassword = undefined;
+
+	var _regenerator = __webpack_require__(2);
+
+	var _regenerator2 = _interopRequireDefault(_regenerator);
+
+	var _asyncToGenerator2 = __webpack_require__(3);
+
+	var _asyncToGenerator3 = _interopRequireDefault(_asyncToGenerator2);
+
+	var _bcryptjs = __webpack_require__(12);
+
+	var _bcryptjs2 = _interopRequireDefault(_bcryptjs);
+
+	function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+	var hashPassword = function () {
+	  var _ref = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee(password) {
+	    var salt, hash;
+	    return _regenerator2.default.wrap(function _callee$(_context) {
+	      while (1) {
+	        switch (_context.prev = _context.next) {
+	          case 0:
+	            _context.next = 2;
+	            return _bcryptjs2.default.genSalt(10);
+
+	          case 2:
+	            salt = _context.sent;
+	            _context.next = 5;
+	            return _bcryptjs2.default.hash(password, salt);
+
+	          case 5:
+	            hash = _context.sent;
+	            return _context.abrupt('return', hash);
+
+	          case 7:
+	          case 'end':
+	            return _context.stop();
+	        }
+	      }
+	    }, _callee, undefined);
+	  }));
+
+	  return function hashPassword(_x) {
+	    return _ref.apply(this, arguments);
+	  };
+	}();
+
+	exports.hashPassword = hashPassword;
+
+
+	var verifyPassword = function () {
+	  var _ref2 = (0, _asyncToGenerator3.default)(_regenerator2.default.mark(function _callee2(password, hash) {
+	    return _regenerator2.default.wrap(function _callee2$(_context2) {
+	      while (1) {
+	        switch (_context2.prev = _context2.next) {
+	          case 0:
+	            return _context2.abrupt('return', _bcryptjs2.default.compare(password, hash));
+
+	          case 1:
+	          case 'end':
+	            return _context2.stop();
+	        }
+	      }
+	    }, _callee2, undefined);
+	  }));
+
+	  return function verifyPassword(_x2, _x3) {
+	    return _ref2.apply(this, arguments);
+	  };
+	}();
+
+	exports.verifyPassword = verifyPassword;
+
+/***/ },
+/* 12 */
+/***/ function(module, exports) {
+
+	module.exports = require("bcryptjs");
+
+/***/ },
+/* 13 */
+/***/ function(module, exports, __webpack_require__) {
+
+	'use strict';
+
+	Object.defineProperty(exports, "__esModule", {
+	  value: true
+	});
+	exports.generateRefreshToken = exports.generateAccessToken = exports.generateRandomToken = undefined;
+
+	var _jsonwebtoken = __webpack_require__(8);
+
+	var _jsonwebtoken2 = _interopRequireDefault(_jsonwebtoken);
+
+	var _crypto = __webpack_require__(14);
+
+	var _crypto2 = _interopRequireDefault(_crypto);
+
+	function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+	var generateRandomToken = exports.generateRandomToken = function generateRandomToken() {
+	  var length = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : 43;
+	  return _crypto2.default.randomBytes(length).toString('hex');
+	};
+
+	var generateAccessToken = exports.generateAccessToken = function generateAccessToken(_ref) {
+	  var secret = _ref.secret,
+	      data = _ref.data,
+	      config = _ref.config;
+	  return _jsonwebtoken2.default.sign({
+	    data: data
+	  }, secret, config);
+	};
+
+	var generateRefreshToken = exports.generateRefreshToken = function generateRefreshToken(_ref2) {
+	  var secret = _ref2.secret,
+	      data = _ref2.data,
+	      config = _ref2.config;
+	  return _jsonwebtoken2.default.sign({
+	    data: data
+	  }, secret, config);
+	};
+
+/***/ },
+/* 14 */
+/***/ function(module, exports) {
+
+	module.exports = require("crypto");
+
+/***/ },
+/* 15 */
+/***/ function(module, exports, __webpack_require__) {
+
+	'use strict';
+
+	Object.defineProperty(exports, "__esModule", {
+	  value: true
+	});
+
+	var _promise = __webpack_require__(16);
+
+	var _promise2 = _interopRequireDefault(_promise);
+
+	var _classCallCheck2 = __webpack_require__(5);
+
+	var _classCallCheck3 = _interopRequireDefault(_classCallCheck2);
+
+	var _createClass2 = __webpack_require__(6);
+
+	var _createClass3 = _interopRequireDefault(_createClass2);
+
+	var _emailjs = __webpack_require__(17);
+
+	var _emailjs2 = _interopRequireDefault(_emailjs);
+
+	function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+
+	var Email = function () {
+	  function Email(emailConfig) {
+	    (0, _classCallCheck3.default)(this, Email);
+
+	    if (emailConfig) {
+	      this.server = _emailjs2.default.server.connect(emailConfig);
+	    }
+	  }
+
+	  (0, _createClass3.default)(Email, [{
+	    key: 'sendMail',
+	    value: function sendMail(mail) {
+	      var _this = this;
+
+	      return new _promise2.default(function (resolve, reject) {
+	        // eslint-disable-line flowtype/require-parameter-type
+	        // If no configuration for email just warn the user
+	        if (!_this.server) {
+	          console.log('No configuration for email, you must set an email configuration');
+	          resolve();
+	          return;
+	        }
+	        _this.server.send(mail, function (err, message) {
+	          if (err) return reject(err);
+	          return resolve(message);
+	        });
+	      });
+	    }
+	  }]);
+	  return Email;
+	}();
+
+	exports.default = Email;
+
+/***/ },
+/* 16 */
+/***/ function(module, exports) {
+
+	module.exports = require("babel-runtime/core-js/promise");
+
+/***/ },
+/* 17 */
+/***/ function(module, exports) {
+
+	module.exports = require("emailjs");
+
+/***/ },
+/* 18 */
+/***/ function(module, exports) {
+
+	'use strict';
+
+	Object.defineProperty(exports, "__esModule", {
+	  value: true
+	});
+	exports.default = {
+	  from: 'js-accounts <[e-mail]>',
+
+	  verifyEmail: {
+	    subject: function subject() {
+	      return 'Verify your account email';
+	    },
+	    text: function text(user, url) {
+	      return 'To verify your account email please click on this link: ' + url;
+	    }
+	  },
+
+	  resetPassword: {
+	    subject: function subject() {
+	      return 'Reset your password';
+	    },
+	    text: function text(user, url) {
+	      return 'To reset your password please click on this link: ' + url;
+	    }
+	  },
+
+	  enrollAccount: {
+	    subject: function subject() {
+	      return 'Set your password';
+	    },
+	    text: function text(user, url) {
+	      return 'To set your password please click on this link: ' + url;
+	    }
+	  }
+	};
+
+/***/ }
+/******/ ])
+});
+;

package.json

 {
   "name": "@accounts/server",
-  "version": "0.0.8",
+  "version": "0.0.9-alpha.146b94d6",
   "description": "Fullstack authentication and accounts-management",
   "main": "lib/index.js",
+  "jsnext:main": "lib-es6/index.js",
   "publishConfig": {
@@ -11,3 +12,5 @@ "access": "public"
     "start": "webpack -p --config --progress --watch",
-    "compile": "babel ./src --out-dir ./lib",
+    "compile": "npm run compile:es6 && npm run compile:umd",
+    "compile:es6": "babel ./src --out-dir ./lib-es6",
+    "compile:umd": "webpack",
     "postcompile": "npm run flow:prepublish",
@@ -19,3 +22,3 @@ "prepublish": "npm run compile",
     "flow:check": "flow check",
-    "flow:prepublish": "for i in `ls ./src/*.js`; do cp $i `echo $i | sed \"s/src/lib/g\" | sed \"s/js/js\\.flow/g\"`; done",
+    "flow:prepublish": "for i in `ls ./src/*.js`; do cp $i `echo $i | sed \"s/src/lib-es6/g\" | sed \"s/js/js\\.flow/g\"`; done",
     "coverage": "npm run testonly -- --coverage",
@@ -48,3 +51,4 @@ "coveralls": "cat ./coverage/lcov.info | ./node_modules/coveralls/bin/coveralls.js && rm -rf ./coverage"
   "dependencies": {
-    "@accounts/common": "^0.0.7",
+    "@accounts/common": "^0.0.9-alpha.146b94d6",
+    "babel-polyfill": "^6.23.0",
     "bcryptjs": "^2.4.0",
@@ -66,4 +70,6 @@ "crypto": "^0.0.3",
     "babel-plugin-transform-regenerator": "^6.16.1",
+    "babel-plugin-transform-runtime": "^6.23.0",
     "babel-preset-es2015": "^6.18.0",
     "babel-preset-es2015-node4": "^2.1.0",
+    "babel-preset-stage-0": "^6.22.0",
     "coveralls": "^2.11.14",
@@ -70,0 +76,0 @@ "flow-bin": "^0.39.0",

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

567257

increased by68.23%

Number of package files

51

increased by64.52%

Lines of code

8268

increased by100.15%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dependency count

8

increased by14.29%

Dev dependency count

19

increased by11.76%

Dependency changes

• + Addedbabel-polyfill@^6.23.0

• + Added@accounts/common@0.0.9(transitive)

• + Addedbabel-polyfill@6.26.0(transitive)

• + Addedbabel-runtime@6.26.0(transitive)

• + Addedcore-js@2.6.12(transitive)

• + Addedregenerator-runtime@0.10.50.11.1(transitive)

• - Removed@accounts/common@0.0.7(transitive)

• Updated@accounts/common@^0.0.9-alpha.146b94d6