@abtnode/auth 1.16.23-beta-47ca27f8 → 1.16.23-beta-f25d8f54

package/lib/auth.js

@@ -799,9 +799,13 @@ const handleIssuePassportResponse = async ({
   await updateSession({ passportId: vc.id });
 
   return {
-    disposition: 'attachment',
-    type: 'VerifiableCredential',
-    data: vc,
+    response: {
+      disposition: 'attachment',
+      type: 'VerifiableCredential',
+      data: vc,
+    },
+    role,
+    passport,
   };
 };
 

package/lib/invitation.js

@@ -7,10 +7,120 @@ const { getDisplayName } = require('@blocklet/meta/lib/util');
 const logger = require('@abtnode/logger')(require('../package.json').name);
 const { getUserAvatarUrl } = require('@abtnode/util/lib/user');
 
+/**
+ * @typedef {Object} InvitationInfo
+ * @property {string} inviteId
+ * @property {string} teamDid
+ * @property {number} expireDate
+ * @property {Object} info
+ * @property {Object} inviter
+ * @property {Object} receiver
+ * @property {Object} role
+ * @property {string} remark
+ */
+/**
+ * @typedef {Object} InvitationData
+ * @property {string} inviteId
+ * @property {string} teamDid
+ * @property {Date} expireDate
+ * @property {Object} inviter
+ * @property {Object} role
+ * @property {string} remark
+ */
+
+/**
+ * @typedef {Object} IssuePassportData
+ * @property {string} id
+ * @property {'passport-issuance'} type
+ * @property {string} key - 实际上是颁发者的 userDid
+ * @property {string} name
+ * @property {string} title
+ * @property {string} ownerDid
+ * @property {string} teamDid
+ * @property {number} expireDate
+ * @property {Date} createdAt
+ * @property {Date} updatedAt
+ */
+
+/**
+ * @typedef {Object} Role
+ * @property {string} name
+ * @property {string} title
+ * @property {string} description
+ * @property {Arrary} permissions
+ * @property {Arrary} grants
+ */
+
+async function getInvitation({ node, teamDid, inviteId, roles }) {
+  /**
+   * @type {InvitationData}
+   */
+  const invitationData = await node.getInvitation({ teamDid, inviteId });
+  if (invitationData) {
+    /**
+     * @type {Role}
+     */
+    const role = roles.find((v) => v.name === invitationData.role);
+    const invitation = {
+      ...invitationData,
+      expireDate: new Date(invitationData.expireDate).getTime(),
+      receiver: null,
+    };
+
+    return {
+      invitation,
+      role,
+    };
+  }
+  return {
+    invitation: null,
+    role: null,
+  };
+}
+
+/**
+ * 通过指定用户颁发通行证获得 invitation 数据结构
+ * @returns {Promise<{invitation: InvitationInfo, role: Role}>}
+ */
+async function getInvitationByIssuePassport({ node, teamDid, inviteId, roles }) {
+  /**
+   * @type {IssuePassportData}
+   */
+  const passportIssuance = await node.getPassportIssuance({ teamDid, sessionId: inviteId });
+  if (passportIssuance) {
+    const role = roles.find((v) => v.name === passportIssuance.name);
+
+    const invitation = {
+      inviteId: passportIssuance.id,
+      teamDid,
+      expireDate: new Date(passportIssuance.expireDate).getTime(),
+      inviter: {
+        did: passportIssuance.key,
+      },
+      remark: '',
+      role: {
+        name: passportIssuance.name,
+        title: passportIssuance.title,
+      },
+      receiver: {
+        did: passportIssuance.ownerDid,
+      },
+    };
+    return {
+      invitation,
+      role,
+    };
+  }
+  return {
+    invitation: null,
+    role: null,
+  };
+}
+
 module.exports = {
   init(server, node, { prefix, type } = {}) {
     server.get(`${prefix}/invitation`, async (req, res) => {
-      const { inviteId } = req.query;
+      const { inviteId, mode = 'invite' } = req.query;
       const groupPathPrefix = req.headers['x-group-path-prefix'] || '/';
 
       const nodeInfo = await node.getNodeInfo();
@@ -43,15 +153,28 @@ module.exports = {
         }
 
         const teamDid = info.did;
-        const invitations = await node.getInvitations({ teamDid, filter: () => true });
-        const invitation = invitations.find((v) => v.inviteId === inviteId);
+        const roles = await node.getRoles({ teamDid });
+        let invitation;
+        let role;
+        if (mode === 'invite') {
+          ({ invitation, role } = await getInvitation({
+            node,
+            inviteId,
+            teamDid,
+            roles,
+          }));
+        } else if (mode === 'issue-passport') {
+          ({ invitation, role } = await getInvitationByIssuePassport({ node, inviteId, teamDid, roles }));
+        } else {
+          res.status(400).send('Invitation mode is invalid');
+          return;
+        }
+
         if (!invitation || Date.now() > new Date(invitation.expireDate).getTime()) {
           res.status(404).send('Invitation not found or invitation has been used');
           return;
         }
 
-        const roles = await node.getRoles({ teamDid });
-        const role = roles.find((v) => v.name === invitation.role);
         try {
           role.permissions = await node.getPermissionsByRole({ teamDid, role: { name: role.name } });
         } catch (err) {
@@ -71,10 +194,10 @@ module.exports = {
         }
 
         const inviter = {
-          did: invitation.inviter.did,
-          email: invitation.inviter.email,
-          fullName: invitation.inviter.fullName || user?.fullName,
-          role: invitation.inviter.role,
+          did: user.did,
+          email: user.email,
+          fullName: user.fullName,
+          role: user.role,
           avatar: getUserAvatarUrl(baseUrl, user.avatar, nodeInfo, isServer),
         };
 
@@ -82,7 +205,6 @@ module.exports = {
           ...invitation,
           info: omit(info, 'dataDir'),
           inviter,
-          inviterRaw: invitation.inviter,
           role: role || {},
         });
       } catch (err) {

package/lib/lost-passport.js

@@ -9,7 +9,7 @@ const getNodeWallet = require('@abtnode/util/lib/get-app-wallet');
 const { getDisplayName, getBlockletAppIdList } = require('@blocklet/meta/lib/util');
 const { VC_TYPE_NODE_PASSPORT, PASSPORT_STATUS, NODE_DATA_DIR_NAME } = require('@abtnode/constant');
 const get = require('lodash/get');
-const { getUserAvatarUrl, getAppAvatarUrl, getServerAvatarUrl } = require('@abtnode/util/lib/user');
+const { getUserAvatarUrl, getAppAvatarUrl, getServerAvatarUrl, extractUserAvatar } = require('@abtnode/util/lib/user');
 const { getWalletDid } = require('@blocklet/meta/lib/did-utils');
 
 const logger = require('./logger');
@@ -176,7 +176,7 @@ const createLostPassportIssueRoute = ({ node, type, authServicePrefix }) => ({
         const { locale, passportName, receiverDid } = extraParams;
         checkWalletVersion({ didwallet, locale });
 
-        const { teamDid, issuerDid, issuerName, issuerLogo, passportColor, info } = await getApplicationInfo({
+        const { teamDid, issuerDid, issuerName, issuerLogo, passportColor, info, dataDir } = await getApplicationInfo({
           node,
           req: request,
           type,
@@ -185,6 +185,8 @@ const createLostPassportIssueRoute = ({ node, type, authServicePrefix }) => ({
         const user = await getUser(node, teamDid, receiverDid, { enableConnectedAccount: true });
         const passport = await createPassport({ name: passportName, node, teamDid, locale });
 
+        const avatar = await extractUserAvatar(user.avatar, { dataDir });
+
         return {
           description: messages.receivePassport[locale],
           data: getRandomMessage(),
@@ -198,7 +200,7 @@ const createLostPassportIssueRoute = ({ node, type, authServicePrefix }) => ({
               issuerAvatarUrl: issuerLogo,
               ownerDid: receiverDid,
               ownerName: user.fullName || '',
-              ownerAvatarUrl: getUserAvatarUrl(baseUrl, user.avatar, info, info.did === teamDid),
+              ownerAvatarUrl: getUserAvatarUrl(baseUrl, avatar, info, info.did === teamDid),
               preferredColor: passportColor,
             }),
           }),
@@ -210,7 +212,7 @@ const createLostPassportIssueRoute = ({ node, type, authServicePrefix }) => ({
   onAuth: async ({ claims, userDid, userPk, extraParams, updateSession, baseUrl, req }) => {
     const { locale = 'en', receiverDid, passportName } = extraParams;
 
-    const { teamDid, issuerDidList, issuerName, issuerLogo, issuerWallet, passportColor, info } =
+    const { teamDid, issuerDidList, issuerName, issuerLogo, issuerWallet, passportColor, info, dataDir } =
       await getApplicationInfo({ node, req, type, baseUrl });
     const statusEndpointBaseUrl = getStatusEndpointBaseUrl(type, baseUrl, authServicePrefix);
 
@@ -261,6 +263,8 @@ const createLostPassportIssueRoute = ({ node, type, authServicePrefix }) => ({
       );
     }
 
+    const avatar = await extractUserAvatar(user.avatar, { dataDir });
+
     const vcParams = {
       issuerName,
       issuerWallet,
@@ -279,7 +283,7 @@ const createLostPassportIssueRoute = ({ node, type, authServicePrefix }) => ({
         teamDid,
       }),
       types: [],
-      ownerProfile: { ...user, avatar: getUserAvatarUrl(baseUrl, user.avatar, info, info.did === teamDid) },
+      ownerProfile: { ...user, avatar: getUserAvatarUrl(baseUrl, avatar, info, info.did === teamDid) },
       preferredColor: passportColor,
     };
 

package/locales/ar.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: 'غير مسموح بنقل الخادم إلى نفسك',
   tagRequired: 'العلامة مطلوبة',
   appIsInProgress: 'التطبيق قيد التقدم، يرجى الانتظار حتى الانتهاء.',
+  requestDidSpace: 'يرجى تفويض مساحة DID للاستمرار',
 };

package/locales/de.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: 'Nicht erlaubt, den Server an sich selbst zu übertragen',
   tagRequired: 'Es ist ein Pflichtfeld',
   appIsInProgress: 'Die Anwendung befindet sich in Bearbeitung. Bitte warten Sie, bis sie abgeschlossen ist.',
+  requestDidSpace: 'Bitte autorisieren Sie DID Space, um fortzufahren',
 };

package/locales/es.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: 'No se permite transferir el servidor a ti mismo',
   tagRequired: 'La etiqueta es requerida',
   appIsInProgress: 'La aplicación está en progreso, por favor espere a que termine',
+  requestDidSpace: 'Por favor, autoriza a DID Space para continuar',
 };

package/locales/fr.js

@@ -65,4 +65,5 @@ module.exports = {
   notAllowedTransferToSelf: 'Interdiction de transférer le serveur vers vous-même',
   tagRequired: 'Les balises sont obligatoires',
   appIsInProgress: "L'application est en cours, veuillez attendre qu'elle se termine.",
+  requestDidSpace: 'Veuillez autoriser DID Space à continuer',
 };

package/locales/hi.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: 'सर्वर को खुद को स्थानांतरित करने की अनुमति नहीं है',
   tagRequired: 'टैग आवश्यक है',
   appIsInProgress: 'ऐप्लीकेशन प्रगति में है, कृपया पूरा होने तक प्रतीक्षा करें।',
+  requestDidSpace: 'कृपया DID स्थान की प्राधिकरणदिये जारी रखें',
 };

package/locales/id.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: 'Dilarang mentransfer Server ke diri sendiri',
   tagRequired: 'Tag diperlukan',
   appIsInProgress: 'Aplikasi ini sedang berjalan, mohon tunggu hingga selesai',
+  requestDidSpace: 'Silakan otorisasi DID Space untuk melanjutkan',
 };

package/locales/ja.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: 'サーバーを自分に移動することは許可されていません',
   tagRequired: 'タグは必須です',
   appIsInProgress: 'アプリケーションは進行中です。完了するまでお待ちください',
+  requestDidSpace: '続行するためにDID Spaceへの承認をお願いします',
 };

package/locales/ko.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: '서버를 자신에게 전송할 수 없습니다',
   tagRequired: '태그가 필요합니다',
   appIsInProgress: '애플리케이션 진행 중입니다. 완료될 때까지 기다려주세요',
+  requestDidSpace: '계속하려면 DID Space를 인증해주세요',
 };

package/locales/pt.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: 'Não é permitido transferir o servidor para você mesmo',
   tagRequired: 'A tag é necessária',
   appIsInProgress: 'O aplicativo está em progresso, por favor, aguarde até que ele termine',
+  requestDidSpace: 'Por favor, autorize o DID Space a continuar',
 };

package/locales/ru.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: 'Запрещено передавать сервер себе',
   tagRequired: 'Требуется тег',
   appIsInProgress: 'Приложение находится в процессе, пожалуйста, подождите, пока оно закончится.',
+  requestDidSpace: 'Пожалуйста, авторизуйте DID Space для продолжения',
 };

package/locales/th.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: 'ไม่อนุญาตให้โอนเซิร์ฟเวอร์ให้ตัวเอง',
   tagRequired: 'ต้องใส่แท็ก',
   appIsInProgress: 'แอปพลิเคชันกำลังดำเนินการ โปรดรอให้เสร็จสิ้น',
+  requestDidSpace: 'โปรดอนุญาตให้ DID Space ดำเนินการต่อ',
 };

package/locales/vi.js

@@ -64,4 +64,5 @@ module.exports = {
   notAllowedTransferToSelf: 'Không được phép chuyển máy chủ cho chính bạn',
   tagRequired: 'Tag là bắt buộc',
   appIsInProgress: 'Ứng dụng đang tiến hành, vui lòng đợi cho đến khi nó hoàn thành',
+  requestDidSpace: 'Vui lòng cho phép DID Space tiếp tục',
 };

package/locales/zh-tw.js

@@ -62,4 +62,5 @@ module.exports = {
   notAllowedTransferToSelf: '不允許將伺服器轉移到您自己',
   tagRequired: '需要標籤',
   appIsInProgress: '應用程式正在進行中，請等待完成',
+  requestDidSpace: '請授權DID Space繼續',
 };

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.16.23-beta-47ca27f8",
+  "version": "1.16.23-beta-f25d8f54",
   "description": "Simple lib to manage auth in ABT Node",
   "main": "lib/index.js",
   "files": [
@@ -20,15 +20,15 @@
   "author": "linchen <linchen1987@foxmail.com> (http://github.com/linchen1987)",
   "license": "Apache-2.0",
   "dependencies": {
-    "@abtnode/constant": "1.16.23-beta-47ca27f8",
-    "@abtnode/logger": "1.16.23-beta-47ca27f8",
-    "@abtnode/util": "1.16.23-beta-47ca27f8",
+    "@abtnode/constant": "1.16.23-beta-f25d8f54",
+    "@abtnode/logger": "1.16.23-beta-f25d8f54",
+    "@abtnode/util": "1.16.23-beta-f25d8f54",
     "@arcblock/did": "1.18.110",
-    "@arcblock/nft-display": "2.9.24",
+    "@arcblock/nft-display": "2.9.28",
     "@arcblock/validator": "^1.18.110",
     "@arcblock/vc": "1.18.110",
-    "@blocklet/constant": "1.16.23-beta-47ca27f8",
-    "@blocklet/meta": "1.16.23-beta-47ca27f8",
+    "@blocklet/constant": "1.16.23-beta-f25d8f54",
+    "@blocklet/meta": "1.16.23-beta-f25d8f54",
     "@ocap/client": "^1.18.110",
     "@ocap/mcrypto": "1.18.110",
     "@ocap/util": "1.18.110",
@@ -49,5 +49,5 @@
   "devDependencies": {
     "jest": "^29.7.0"
   },
-  "gitHead": "d0a1e85532a1826150275067f55e0f3873ea39d6"
+  "gitHead": "0c6357195f3e28095234bc05cfb4f3b051474377"
 }