@7365admin1/core 3.32.2-staging.78 → 3.32.2-staging.79

package/dist/index.d.ts

@@ -9209,7 +9209,7 @@ type HidObjectBatch = {
 };
 type HidObjectQuery = {
     object: string;
-    where?: Record<string, any>;
+    where?: UnknownRecord;
     fields?: string[];
     order?: string[];
     limit?: number;
@@ -9241,14 +9241,19 @@ declare function useHidAmicoService(): {
         message: string;
         results: Record<string, any>[];
     }>;
-    receiveNotification: (readerId: string, type: string, payload: Record<string, any>) => Promise<{
-        _id: bson.ObjectId;
-        reader: bson.ObjectId;
-        site: bson.ObjectId | undefined;
-        type: string;
-        payload: Record<string, any>;
-        status: "failed" | "received" | "processed";
-        createdAt: string | Date;
+    receiveNotification: (readerId: string, type: string, payload: UnknownRecord) => Promise<{
+        event: {
+            _id: bson.ObjectId;
+            reader: bson.ObjectId;
+            site: bson.ObjectId | undefined;
+            type: string;
+            payload: Record<string, any>;
+            status: "failed" | "received" | "processed";
+            createdAt: string | Date;
+        };
+        response: {
+            result: UnknownRecord;
+        } | null;
     }>;
     listLogs: (value: {
         reader: string;

package/dist/index.js

@@ -74438,6 +74438,8 @@ var schemaHidAmicoNotificationParams = import_joi153.default.object({
     "secbox",
     "access_photo",
     "new_user_identified",
+    "new_qrcode",
+    "new_card",
     "push_result"
   ).required()
 });
@@ -75269,6 +75271,8 @@ async function configureVisitorQrReader(client, qrFormat) {
 }
 async function ensureVisitorAccessAuthorization(client, readerId, readerLocation, hidUserId) {
   const accessRuleId = createStableHidId(`visitor-access-rule:${readerId}`);
+  const timeZoneId = createStableHidId(`visitor-time-zone:${readerId}`);
+  const timeSpanId = createStableHidId(`visitor-time-span:${readerId}`);
   const existingRuleResponse = await client.loadObjects({
     object: "access_rules",
     where: { access_rules: { id: accessRuleId } },
@@ -75296,6 +75300,74 @@ async function ensureVisitorAccessAuthorization(client, readerId, readerLocation
       }]
     });
   }
+  const existingTimeZoneResponse = await client.loadObjects({
+    object: "time_zones",
+    where: { time_zones: { id: timeZoneId } },
+    limit: 1,
+    offset: 0
+  });
+  if (getHidObjectRows(existingTimeZoneResponse, "time_zones").length) {
+    await client.modifyObjects({
+      object: "time_zones",
+      where: { time_zones: { id: timeZoneId } },
+      values: { name: "iService365 Visitor Schedule" }
+    });
+  } else {
+    await client.createObjects({
+      object: "time_zones",
+      values: [{ id: timeZoneId, name: "iService365 Visitor Schedule" }]
+    });
+  }
+  const visitorTimeSpan = {
+    time_zone_id: timeZoneId,
+    start: 0,
+    end: 86399,
+    sun: 1,
+    mon: 1,
+    tue: 1,
+    wed: 1,
+    thu: 1,
+    fri: 1,
+    sat: 1,
+    hol1: 1,
+    hol2: 1,
+    hol3: 1
+  };
+  const existingTimeSpanResponse = await client.loadObjects({
+    object: "time_spans",
+    where: { time_spans: { id: timeSpanId } },
+    limit: 1,
+    offset: 0
+  });
+  if (getHidObjectRows(existingTimeSpanResponse, "time_spans").length) {
+    await client.modifyObjects({
+      object: "time_spans",
+      where: { time_spans: { id: timeSpanId } },
+      values: visitorTimeSpan
+    });
+  } else {
+    await client.createObjects({
+      object: "time_spans",
+      values: [{ id: timeSpanId, ...visitorTimeSpan }]
+    });
+  }
+  const accessRuleTimeZoneResponse = await client.loadObjects({
+    object: "access_rule_time_zones",
+    where: {
+      access_rule_time_zones: {
+        access_rule_id: accessRuleId,
+        time_zone_id: timeZoneId
+      }
+    },
+    limit: 1,
+    offset: 0
+  });
+  if (!getHidObjectRows(accessRuleTimeZoneResponse, "access_rule_time_zones").length) {
+    await client.createObjects({
+      object: "access_rule_time_zones",
+      values: [{ access_rule_id: accessRuleId, time_zone_id: timeZoneId }]
+    });
+  }
   const portalsResponse = await client.loadObjects({
     object: "portals",
     limit: 100,
@@ -75350,7 +75422,7 @@ async function ensureVisitorAccessAuthorization(client, readerId, readerLocation
       values: missingPortalLinks
     });
   }
-  return { accessRuleId, portalIds };
+  return { accessRuleId, portalIds, timeZoneId };
 }
 function getRelayAuth() {
   const username = process.env.HID_AMICO_RELAY_USERNAME;
@@ -75688,19 +75760,95 @@ function normalizeBatches(payload) {
 function firstValue(payload, keys) {
   for (const key of keys) {
     const value = payload?.[key];
-    if (value !== void 0 && value !== null && value !== "") {
+    if ((typeof value === "string" || typeof value === "number") && value !== "") {
       return value;
     }
   }
   return void 0;
 }
 function extractIdentityKeys(payload) {
-  const nested = payload?.user || payload?.person || payload?.data || {};
+  const nestedCandidate = payload.user || payload.person || payload.data;
+  const nested = isUnknownRecord(nestedCandidate) ? nestedCandidate : {};
   const merged = { ...payload, ...nested };
+  const hidUserId = firstValue(merged, ["hidUserId", "hid_user_id", "user_id", "userId", "id", "user"]);
+  const registration = firstValue(merged, ["registration", "register", "employeeNo", "staffNo", "memberNo"]);
+  const cardNo = firstValue(merged, [
+    "qrcode_value",
+    "qrCodeValue",
+    "qr_code_value",
+    "card_value",
+    "cardNo",
+    "card_no",
+    "card",
+    "cardNumber",
+    "value"
+  ]);
+  return {
+    hidUserId,
+    registration: registration === void 0 ? void 0 : String(registration),
+    cardNo: cardNo === void 0 ? void 0 : String(cardNo)
+  };
+}
+function toPositiveInteger(value) {
+  const parsed = Number(value);
+  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : null;
+}
+function toDateTimestamp(value) {
+  if (value instanceof Date)
+    return value.getTime();
+  if (typeof value !== "string" && typeof value !== "number")
+    return null;
+  const parsed = new Date(value).getTime();
+  return Number.isFinite(parsed) ? parsed : null;
+}
+function buildOnlineIdentificationResponse(identity, payload) {
+  const metadata = identity && isUnknownRecord(identity.metadata) ? identity.metadata : {};
+  const requestedPortalId = toPositiveInteger(payload.portal_id ?? payload.portalId);
+  const configuredPortalIds = Array.isArray(metadata.portalIds) ? metadata.portalIds.map(toPositiveInteger).filter((value) => value !== null) : [];
+  const portalId = requestedPortalId ?? (configuredPortalIds.length === 1 ? configuredPortalIds[0] : null);
+  const now = Date.now();
+  const issuedAt = toDateTimestamp(metadata.issuedAt);
+  const expiresAt = toDateTimestamp(metadata.expiresAt);
+  let deniedReason = "User is not registered for this reader.";
+  if (identity) {
+    deniedReason = "Access denied.";
+    if (identity.type === "visitor" && issuedAt !== null && now < issuedAt) {
+      deniedReason = "Visitor pass is not active yet.";
+    } else if (identity.type === "visitor" && expiresAt !== null && now > expiresAt) {
+      deniedReason = "Visitor pass has expired.";
+    } else if (identity.type === "visitor" && configuredPortalIds.length > 0 && requestedPortalId !== null && !configuredPortalIds.includes(requestedPortalId)) {
+      deniedReason = "Visitor is not permitted to use this portal.";
+    } else {
+      const userId = toPositiveInteger(identity.hidUserId ?? payload.user_id);
+      const userName = String(metadata.name ?? payload.user_name ?? "").trim();
+      const result = {
+        event: 7,
+        user_id: userId ?? 0,
+        user_name: userName,
+        user_image: Boolean(metadata.facialEnrolled),
+        portal_id: portalId === null ? "" : String(portalId),
+        message: "Access granted"
+      };
+      if (portalId !== null) {
+        result.actions = [{ action: "door", parameters: `door=${portalId}` }];
+      }
+      return { granted: true, reason: "Access granted", response: { result } };
+    }
+  }
   return {
-    hidUserId: firstValue(merged, ["hidUserId", "hid_user_id", "user_id", "userId", "id", "user"]),
-    registration: firstValue(merged, ["registration", "register", "employeeNo", "staffNo", "memberNo"]),
-    cardNo: firstValue(merged, ["cardNo", "card_no", "card", "cardNumber", "value"])
+    granted: false,
+    reason: deniedReason,
+    response: {
+      result: {
+        event: 6,
+        user_id: toPositiveInteger(identity?.hidUserId ?? payload.user_id) ?? 0,
+        user_name: String(metadata.name ?? payload.user_name ?? "").trim(),
+        user_image: Boolean(metadata.facialEnrolled),
+        portal_id: portalId === null ? "" : String(portalId),
+        actions: [],
+        message: deniedReason
+      }
+    }
   };
 }
 function useHidAmicoService() {
@@ -75854,6 +76002,7 @@ function useHidAmicoService() {
       reader: readerId,
       ...identityKeys
     });
+    const authorization = ["new_user_identified", "new_qrcode", "new_card"].includes(type) ? buildOnlineIdentificationResponse(identity, payload) : null;
     const enrichedPayload = identity ? {
       ...payload,
       identity: {
@@ -75866,20 +76015,33 @@ function useHidAmicoService() {
         user: identity.user,
         member: identity.member,
         visitor: identity.visitor
-      }
+      },
+      ...authorization ? {
+        authorization: {
+          granted: authorization.granted,
+          reason: authorization.reason
+        }
+      } : {}
     } : {
       ...payload,
       identity: null,
-      identityLookup: identityKeys
+      identityLookup: identityKeys,
+      ...authorization ? {
+        authorization: {
+          granted: authorization.granted,
+          reason: authorization.reason
+        }
+      } : {}
     };
     await repo.updateById(readerId, { lastSeenAt: /* @__PURE__ */ new Date() });
-    return repo.addEvent({
+    const event = await repo.addEvent({
       reader: readerId,
       site: reader.site,
       type,
       payload: enrichedPayload,
-      status: identity ? "processed" : "received"
+      status: authorization ? authorization.granted ? "processed" : "failed" : identity ? "processed" : "received"
     });
+    return { event, response: authorization?.response ?? null };
   }
   async function listLogs(value) {
     return repo.listEvents(value);
@@ -76021,6 +76183,7 @@ function useHidAmicoService() {
       const identityPayload = {
         hidUserId: String(hidUserId),
         registration,
+        cardNo: credential.qrValue,
         visitor: value.visitorId,
         type: "visitor",
         status: "active",
@@ -76030,8 +76193,10 @@ function useHidAmicoService() {
           qrFormat: value.qrFormat,
           credentialObject: credential.object,
           credentialId: credential.credentialId,
+          qrValue: credential.qrValue,
           accessRuleId: authorization.accessRuleId,
           portalIds: authorization.portalIds,
+          timeZoneId: authorization.timeZoneId,
           issuedAt: issuedAt.toISOString(),
           expiresAt: expiresAt.toISOString()
         }
@@ -76057,6 +76222,7 @@ function useHidAmicoService() {
           credentialObject: credential.object,
           accessRuleId: authorization.accessRuleId,
           portalIds: authorization.portalIds,
+          timeZoneId: authorization.timeZoneId,
           issuedAt: issuedAt.toISOString(),
           expiresAt: expiresAt.toISOString()
         }
@@ -76828,18 +76994,28 @@ function useHidAmicoController() {
     }
   }
   async function receiveNotification(req, res, next) {
-    const validation = schemaHidAmicoNotificationParams.validate(req.params);
+    const type = String(req.params.type ?? "").replace(/\.fcgi$/i, "");
+    const validation = schemaHidAmicoNotificationParams.validate({
+      ...req.params,
+      type
+    });
     if (validation.error) {
       next(new import_node_server_utils267.BadRequestError(validation.error.message));
       return;
     }
     try {
-      const event = await service.receiveNotification(
+      const queryPayload = req.query && typeof req.query === "object" ? req.query : {};
+      const bodyPayload = req.body && typeof req.body === "object" ? req.body : {};
+      const notification = await service.receiveNotification(
         validation.value.readerId,
         validation.value.type,
-        req.body ?? {}
+        { ...queryPayload, ...bodyPayload }
       );
-      res.status(202).json({ data: event });
+      if (notification.response) {
+        res.status(200).json(notification.response);
+        return;
+      }
+      res.status(202).json({ data: notification.event });
     } catch (error) {
       next(error);
     }