@adtrackify/at-service-common 3.17.3 → 3.17.5

package/dist/cjs/clients/third-party/shopify-client.js

@@ -1,147 +1,147 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ShopifyClient = void 0;
-const http_client_js_1 = require("../generic/http-client.js");
-const index_js_1 = require("../../index.js");
-class ShopifyClient {
-    static _shopify_api_version = process.env.SHOPIFY_API_VERSION;
-    static client;
-    static getClient = () => {
-        this.client = this.client ?? (0, http_client_js_1.axiosHttpService)();
-        return this.client;
-    };
-    static registerApp = async (shop, code, appKey, appSecret) => {
-        const client = this.getClient();
-        const url = 'https://' + shop + '/admin/oauth/access_token';
-        const payload = {
-            client_id: appKey,
-            client_secret: appSecret,
-            code,
-        };
-        const res = await client.post(url, payload);
-        return res;
-    };
-    static registerWebhookTopic = async (shop, accessToken, eventBridgeArn, topic) => {
-        const client = this.getClient();
-        const url = `https://${shop}/admin/api/${this._shopify_api_version}/webhooks.json`;
-        const payload = {
-            webhook: {
-                topic,
-                address: eventBridgeArn,
-                format: 'json',
-            },
-        };
-        const res = await client.post(url, payload, { headers: { 'X-Shopify-Access-Token': accessToken } });
-        if (res.status >= 400) {
-            index_js_1.Logger.error('Failed to register Webhook Topic', { res, shop, accessToken, eventBridgeArn, topic, url, payload });
-        }
-        index_js_1.Logger.debug('Shopify Client Webhook Registration Response', { registrationResponse: res });
-        return res;
-    };
-    static updateShopifyAppMetafield = async (shop, accessToken, pixelId) => {
-        const url = `https://${shop}/admin/api/${this._shopify_api_version}/metafields.json`;
-        const payload = {
-            metafield: {
-                namespace: 'adtr',
-                key: 'adtr.config',
-                value: pixelId,
-                type: 'single_line_text_field',
-            },
-        };
-        const res = await this.genericShopifyPost(url, accessToken, payload);
-        if (res.status >= 400) {
-            index_js_1.Logger.error('Failed to update Shopify app Metafield ', { shop, accessToken, url, payload });
-        }
-        return res;
-    };
-    static getShopifyStoreProperties = async (shop, accessToken) => {
-        const url = `https://${shop}/admin/api/${this._shopify_api_version}/shop.json`;
-        const res = await this.genericShopifyGet(url, accessToken);
-        if (res.status >= 400) {
-            index_js_1.Logger.error('Failed to get Shopify Store Properties', { shop, accessToken, url });
-        }
-        return res;
-    };
-    static createAppSubscription = async (shop, accessToken, planName, price, returnUrl, trialDays, test) => {
-        const url = `https://${shop}/admin/api/${this._shopify_api_version}/recurring_application_charges.json`;
-        const recurring_application_charge = {
-            name: planName,
-            price,
-            return_url: returnUrl,
-            trial_days: trialDays,
-            test,
-        };
-        const res = await this.genericShopifyPost(url, accessToken, { recurring_application_charge });
-        if (res.status >= 400) {
-            index_js_1.Logger.error('Failed to create App Subscription', { shop, accessToken, url });
-        }
-        return res;
-    };
-    static cancelAppSubscription = async (shop, accessToken, chargeId) => {
-        const url = `https://${shop}/admin/api/${this._shopify_api_version}/recurring_application_charges/${chargeId}.json`;
-        const client = this.getClient();
-        const res = await client.delete(url, { headers: { 'X-Shopify-Access-Token': accessToken } });
-        if (res.status !== 200) {
-            index_js_1.Logger.error('Failed to cancel recurring App billing', { shop, accessToken, url });
-        }
-        return res;
-    };
-    static listAppSubscriptions = async (shop, accessToken) => {
-        const url = `https://${shop}/admin/api/${this._shopify_api_version}/recurring_application_charges.json`;
-        const res = await this.genericShopifyGet(url, accessToken);
-        if (res.status >= 400) {
-            index_js_1.Logger.error('Failed to get App Subscriptions', { shop, accessToken, url });
-        }
-        return res;
-    };
-    static getOrder = async (shop, accessToken, orderId, retries = 0, maxRetries = 0, retryDelay = 5000) => {
-        const url = `https://${shop}/admin/api/${this._shopify_api_version}/orders/${orderId}.json`;
-        const res = await this.genericShopifyGet(url, accessToken);
-        if (res.status >= 400) {
-            index_js_1.Logger.error('Failed to get Order', { res, shop, accessToken, url, orderId });
-            if (retries < maxRetries) {
-                await new Promise((resolve) => setTimeout(resolve, retryDelay));
-                index_js_1.Logger.info('Retrying to get Order', { shop, accessToken, url, orderId, retries, maxRetries, retryDelay });
-                return await this.getOrder(shop, accessToken, orderId, retries + 1, maxRetries, retryDelay);
-            }
-        }
-        return res;
-    };
-    static getProductREST = async (shop, accessToken, productId) => {
-        const url = `https://${shop}/admin/api/${this._shopify_api_version}/products/${productId}.json`;
-        const res = await this.genericShopifyGet(url, accessToken);
-        if (res.status >= 400) {
-            index_js_1.Logger.error('Failed to get Product', { res, shop, accessToken, url, productId });
-        }
-        return res;
-    };
-    static genericShopifyPost = async (url, accessToken, payload) => {
-        const client = this.getClient();
-        const res = await client.post(url, payload, {
-            headers: { 'X-Shopify-Access-Token': accessToken, 'Content-Type': 'application/json' },
-        });
-        index_js_1.Logger.debug('Shopify Client Response', { res });
-        return res;
-    };
-    static genericShopifyGet = async (url, accessToken) => {
-        const client = this.getClient();
-        const res = await client.get(url, { headers: { 'X-Shopify-Access-Token': accessToken } });
-        index_js_1.Logger.debug('Shopify Client Response', { res });
-        return res;
-    };
-    static genericShopifyPut = async (url, accessToken, payload) => {
-        const client = this.getClient();
-        const res = await client.put(url, payload, { headers: { 'X-Shopify-Access-Token': accessToken } });
-        index_js_1.Logger.debug('Shopify Client Response', { res });
-        return res;
-    };
-    static unregisterWebhook = async (shop, webhookId, accessToken) => {
-        const client = this.getClient();
-        const url = `https://${shop}/admin/api/${this._shopify_api_version}/webhooks/${webhookId}.json`;
-        const res = await client.delete(url, { headers: { 'X-Shopify-Access-Token': accessToken } });
-        index_js_1.Logger.debug('Shopify Client Response', { res });
-        return res;
-    };
-}
-exports.ShopifyClient = ShopifyClient;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ShopifyClient = void 0;
+const http_client_js_1 = require("../generic/http-client.js");
+const index_js_1 = require("../../index.js");
+class ShopifyClient {
+    static _shopify_api_version = process.env.SHOPIFY_API_VERSION;
+    static client;
+    static getClient = () => {
+        this.client = this.client ?? (0, http_client_js_1.axiosHttpService)();
+        return this.client;
+    };
+    static registerApp = async (shop, code, appKey, appSecret) => {
+        const client = this.getClient();
+        const url = 'https://' + shop + '/admin/oauth/access_token';
+        const payload = {
+            client_id: appKey,
+            client_secret: appSecret,
+            code,
+        };
+        const res = await client.post(url, payload);
+        return res;
+    };
+    static registerWebhookTopic = async (shop, accessToken, eventBridgeArn, topic) => {
+        const client = this.getClient();
+        const url = `https://${shop}/admin/api/${this._shopify_api_version}/webhooks.json`;
+        const payload = {
+            webhook: {
+                topic,
+                address: eventBridgeArn,
+                format: 'json',
+            },
+        };
+        const res = await client.post(url, payload, { headers: { 'X-Shopify-Access-Token': accessToken } });
+        if (res.status >= 400) {
+            index_js_1.Logger.error('Failed to register Webhook Topic', { res, shop, accessToken, eventBridgeArn, topic, url, payload });
+        }
+        index_js_1.Logger.debug('Shopify Client Webhook Registration Response', { registrationResponse: res });
+        return res;
+    };
+    static updateShopifyAppMetafield = async (shop, accessToken, pixelId) => {
+        const url = `https://${shop}/admin/api/${this._shopify_api_version}/metafields.json`;
+        const payload = {
+            metafield: {
+                namespace: 'adtr',
+                key: 'adtr.config',
+                value: pixelId,
+                type: 'single_line_text_field',
+            },
+        };
+        const res = await this.genericShopifyPost(url, accessToken, payload);
+        if (res.status >= 400) {
+            index_js_1.Logger.error('Failed to update Shopify app Metafield ', { shop, accessToken, url, payload });
+        }
+        return res;
+    };
+    static getShopifyStoreProperties = async (shop, accessToken) => {
+        const url = `https://${shop}/admin/api/${this._shopify_api_version}/shop.json`;
+        const res = await this.genericShopifyGet(url, accessToken);
+        if (res.status >= 400) {
+            index_js_1.Logger.error('Failed to get Shopify Store Properties', { shop, accessToken, url });
+        }
+        return res;
+    };
+    static createAppSubscription = async (shop, accessToken, planName, price, returnUrl, trialDays, test) => {
+        const url = `https://${shop}/admin/api/${this._shopify_api_version}/recurring_application_charges.json`;
+        const recurring_application_charge = {
+            name: planName,
+            price,
+            return_url: returnUrl,
+            trial_days: trialDays,
+            test,
+        };
+        const res = await this.genericShopifyPost(url, accessToken, { recurring_application_charge });
+        if (res.status >= 400) {
+            index_js_1.Logger.error('Failed to create App Subscription', { shop, accessToken, url });
+        }
+        return res;
+    };
+    static cancelAppSubscription = async (shop, accessToken, chargeId) => {
+        const url = `https://${shop}/admin/api/${this._shopify_api_version}/recurring_application_charges/${chargeId}.json`;
+        const client = this.getClient();
+        const res = await client.delete(url, { headers: { 'X-Shopify-Access-Token': accessToken } });
+        if (res.status !== 200) {
+            index_js_1.Logger.error('Failed to cancel recurring App billing', { shop, accessToken, url });
+        }
+        return res;
+    };
+    static listAppSubscriptions = async (shop, accessToken) => {
+        const url = `https://${shop}/admin/api/${this._shopify_api_version}/recurring_application_charges.json`;
+        const res = await this.genericShopifyGet(url, accessToken);
+        if (res.status >= 400) {
+            index_js_1.Logger.error('Failed to get App Subscriptions', { shop, accessToken, url });
+        }
+        return res;
+    };
+    static getOrder = async (shop, accessToken, orderId, retries = 0, maxRetries = 0, retryDelay = 5000) => {
+        const url = `https://${shop}/admin/api/${this._shopify_api_version}/orders/${orderId}.json`;
+        const res = await this.genericShopifyGet(url, accessToken);
+        if (res.status >= 400) {
+            index_js_1.Logger.error('Failed to get Order', { res, shop, accessToken, url, orderId });
+            if (retries < maxRetries) {
+                await new Promise((resolve) => setTimeout(resolve, retryDelay));
+                index_js_1.Logger.info('Retrying to get Order', { shop, accessToken, url, orderId, retries, maxRetries, retryDelay });
+                return await this.getOrder(shop, accessToken, orderId, retries + 1, maxRetries, retryDelay);
+            }
+        }
+        return res;
+    };
+    static getProductREST = async (shop, accessToken, productId) => {
+        const url = `https://${shop}/admin/api/${this._shopify_api_version}/products/${productId}.json`;
+        const res = await this.genericShopifyGet(url, accessToken);
+        if (res.status >= 400) {
+            index_js_1.Logger.error('Failed to get Product', { res, shop, accessToken, url, productId });
+        }
+        return res;
+    };
+    static genericShopifyPost = async (url, accessToken, payload) => {
+        const client = this.getClient();
+        const res = await client.post(url, payload, {
+            headers: { 'X-Shopify-Access-Token': accessToken, 'Content-Type': 'application/json' },
+        });
+        index_js_1.Logger.debug('Shopify Client Response', { res });
+        return res;
+    };
+    static genericShopifyGet = async (url, accessToken) => {
+        const client = this.getClient();
+        const res = await client.get(url, { headers: { 'X-Shopify-Access-Token': accessToken } });
+        index_js_1.Logger.debug('Shopify Client Response', { res });
+        return res;
+    };
+    static genericShopifyPut = async (url, accessToken, payload) => {
+        const client = this.getClient();
+        const res = await client.put(url, payload, { headers: { 'X-Shopify-Access-Token': accessToken } });
+        index_js_1.Logger.debug('Shopify Client Response', { res });
+        return res;
+    };
+    static unregisterWebhook = async (shop, webhookId, accessToken) => {
+        const client = this.getClient();
+        const url = `https://${shop}/admin/api/${this._shopify_api_version}/webhooks/${webhookId}.json`;
+        const res = await client.delete(url, { headers: { 'X-Shopify-Access-Token': accessToken } });
+        index_js_1.Logger.debug('Shopify Client Response', { res });
+        return res;
+    };
+}
+exports.ShopifyClient = ShopifyClient;
 //# sourceMappingURL=shopify-client.js.map

package/dist/cjs/helpers/account-users-helper.d.ts

@@ -1,2 +1,2 @@
-import { UserAccountRecord } from '@adtrackify/at-tracking-event-types';
-export declare const excludeInternalUsers: (users: UserAccountRecord[]) => UserAccountRecord[];
+import { UserAccountRecord } from '@adtrackify/at-tracking-event-types';
+export declare const excludeInternalUsers: (users: UserAccountRecord[]) => UserAccountRecord[];

package/dist/cjs/helpers/account-users-helper.js

@@ -1,23 +1,23 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.excludeInternalUsers = void 0;
-const logging_helper_1 = require("./logging-helper");
-const EXCLUDED_USERS = [
-    'upstackified.com',
-    'caspahcosmetics.com',
-    'upstackdata.com',
-    'eacapgroup.com',
-    'michael.v.alt@gmail.com',
-    'lemiguel.narciso14@gmail.com',
-];
-const excludeInternalUsers = (users) => {
-    try {
-        return users.filter((user) => !EXCLUDED_USERS.some((excludedPattern) => user?.email?.toLowerCase().includes(excludedPattern.toLowerCase())));
-    }
-    catch (error) {
-        logging_helper_1.Logger.error('Failed to filter internal users', { error });
-        return users;
-    }
-};
-exports.excludeInternalUsers = excludeInternalUsers;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.excludeInternalUsers = void 0;
+const logging_helper_1 = require("./logging-helper");
+const EXCLUDED_USERS = [
+    'upstackified.com',
+    'caspahcosmetics.com',
+    'upstackdata.com',
+    'eacapgroup.com',
+    'michael.v.alt@gmail.com',
+    'lemiguel.narciso14@gmail.com',
+];
+const excludeInternalUsers = (users) => {
+    try {
+        return users.filter((user) => !EXCLUDED_USERS.some((excludedPattern) => user?.email?.toLowerCase().includes(excludedPattern.toLowerCase())));
+    }
+    catch (error) {
+        logging_helper_1.Logger.error('Failed to filter internal users', { error });
+        return users;
+    }
+};
+exports.excludeInternalUsers = excludeInternalUsers;
 //# sourceMappingURL=account-users-helper.js.map

package/dist/cjs/helpers/api-key-auth-helper.d.ts

@@ -0,0 +1,9 @@
+import { API_KEY_SCOPE } from '@adtrackify/at-tracking-event-types';
+export interface ApiKeyAuthContext {
+    pixelId: string;
+    accountId: string;
+    scopes: string[];
+    apiKeyPk: string;
+}
+export declare const extractApiKeyAuth: (event: import("aws-lambda").APIGatewayProxyEvent) => ApiKeyAuthContext;
+export declare const requireScope: (scopes: string[], required: API_KEY_SCOPE) => void;

package/dist/cjs/helpers/api-key-auth-helper.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireScope = exports.extractApiKeyAuth = void 0;
+const at_tracking_event_types_1 = require("@adtrackify/at-tracking-event-types");
+const logging_helper_js_1 = require("./logging-helper.js");
+const http_error_js_1 = require("../libs/http-error.js");
+const expandLegacyScopes = (rawScopes) => {
+    const expanded = new Set();
+    for (const scope of rawScopes) {
+        const replacement = at_tracking_event_types_1.LEGACY_API_KEY_SCOPE_EXPANSION[scope];
+        if (replacement) {
+            for (const modern of replacement)
+                expanded.add(modern);
+        }
+        else {
+            expanded.add(scope);
+        }
+    }
+    return [...expanded];
+};
+const extractApiKeyAuth = (event) => {
+    const authorizer = event.requestContext.authorizer;
+    const pixelId = authorizer?.pixelId;
+    const accountId = authorizer?.accountId;
+    const apiKeyPk = authorizer?.apiKeyPk;
+    const rawScopes = (authorizer?.scopes || '').split(',').filter(Boolean);
+    const scopes = expandLegacyScopes(rawScopes);
+    if (!pixelId) {
+        throw http_error_js_1.HttpError.unauthorized();
+    }
+    return { pixelId, accountId, scopes, apiKeyPk };
+};
+exports.extractApiKeyAuth = extractApiKeyAuth;
+const requireScope = (scopes, required) => {
+    if (!scopes.includes(required)) {
+        logging_helper_js_1.Logger.info('requireScope: missing required scope', { scopes, required });
+        throw http_error_js_1.HttpError.forbidden(`API key does not have the ${required} scope`);
+    }
+};
+exports.requireScope = requireScope;
+//# sourceMappingURL=api-key-auth-helper.js.map

package/dist/cjs/helpers/api-key-auth-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-auth-helper.js","sourceRoot":"","sources":["../../../src/helpers/api-key-auth-helper.ts"],"names":[],"mappings":";;;AAUA,iFAAoG;AACpG,2DAA6C;AAC7C,yDAAkD;AAOlD,MAAM,kBAAkB,GAAG,CAAC,SAAmB,EAAY,EAAE;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE;QAC7B,MAAM,WAAW,GAAG,wDAA8B,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,WAAW,EAAE;YACf,KAAK,MAAM,MAAM,IAAI,WAAW;gBAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;SACxD;aAAM;YACL,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;SACrB;KACF;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;AACvB,CAAC,CAAC;AAcK,MAAM,iBAAiB,GAAG,CAAC,KAAsB,EAAqB,EAAE;IAC7E,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC;IACnD,MAAM,OAAO,GAAG,UAAU,EAAE,OAAiB,CAAC;IAC9C,MAAM,SAAS,GAAG,UAAU,EAAE,SAAmB,CAAC;IAClD,MAAM,QAAQ,GAAG,UAAU,EAAE,QAAkB,CAAC;IAChD,MAAM,SAAS,GAAG,CAAE,UAAU,EAAE,MAAiB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAE7C,IAAI,CAAC,OAAO,EAAE;QACZ,MAAM,yBAAS,CAAC,YAAY,EAAE,CAAC;KAChC;IAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC,CAAC;AAbW,QAAA,iBAAiB,qBAa5B;AAGK,MAAM,YAAY,GAAG,CAAC,MAAgB,EAAE,QAAuB,EAAQ,EAAE;IAC9E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAC9B,0BAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1E,MAAM,yBAAS,CAAC,SAAS,CAAC,6BAA6B,QAAQ,QAAQ,CAAC,CAAC;KAC1E;AACH,CAAC,CAAC;AALW,QAAA,YAAY,gBAKvB"}

package/dist/cjs/helpers/api-key-authorizer-helper.d.ts

@@ -0,0 +1,36 @@
+import { Context } from 'aws-lambda';
+export interface ApiKeyAuthorizerConfig {
+    apiKeysTable: string;
+    apiKeysTableKey?: string;
+    pixelsTable: string;
+}
+interface AllowPolicy {
+    principalId: string;
+    policyDocument: {
+        Version: string;
+        Statement: {
+            Action: string;
+            Effect: 'Allow';
+            Resource: string;
+        }[];
+    };
+    context: {
+        pixelId: string;
+        accountId: string;
+        scopes: string;
+        apiKeyPk: string;
+    };
+}
+interface DenyPolicy {
+    principalId: string;
+    policyDocument: {
+        Version: string;
+        Statement: {
+            Action: string;
+            Effect: 'Deny';
+            Resource: string;
+        }[];
+    };
+}
+export declare const createApiKeyAuthorizerHandler: (config: ApiKeyAuthorizerConfig) => (event: any, context: Context) => Promise<AllowPolicy | DenyPolicy>;
+export {};

package/dist/cjs/helpers/api-key-authorizer-helper.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createApiKeyAuthorizerHandler = void 0;
+const at_tracking_event_types_1 = require("@adtrackify/at-tracking-event-types");
+const logging_helper_js_1 = require("./logging-helper.js");
+const crypto_js_1 = require("../libs/crypto.js");
+const api_keys_db_service_js_1 = require("../services/db/api-keys-db-service.js");
+const pixels_db_service_js_1 = require("../services/db/pixels-db-service.js");
+const toWildcardArn = (methodArn) => {
+    const parts = methodArn.split('/');
+    return `${parts[0]}/${parts[1]}/*`;
+};
+const generateDenyPolicy = (methodArn) => ({
+    principalId: 'anonymous',
+    policyDocument: {
+        Version: '2012-10-17',
+        Statement: [{ Action: 'execute-api:Invoke', Effect: 'Deny', Resource: methodArn }],
+    },
+});
+const createApiKeyAuthorizerHandler = (config) => {
+    const apiKeysDb = new api_keys_db_service_js_1.ApiKeysDbService(config.apiKeysTable, config.apiKeysTableKey);
+    const pixelsDb = new pixels_db_service_js_1.PixelsDbService(config.pixelsTable);
+    return async function handler(event, context) {
+        const methodArn = event.methodArn;
+        try {
+            (0, logging_helper_js_1.configureLogger)(event, context);
+            const apiKey = event.headers?.['x-api-key'] || event.headers?.['X-Api-Key'];
+            const pixelId = event.headers?.['x-pixel-id'] || event.headers?.['X-Pixel-Id'];
+            if (!apiKey || !pixelId) {
+                logging_helper_js_1.Logger.info('ApiKeyAuthorizer: missing x-api-key or x-pixel-id header');
+                return generateDenyPolicy(methodArn);
+            }
+            const keyHash = (0, crypto_js_1.generateSha256Hash)(apiKey);
+            const pk = `${pixelId}_${keyHash}`;
+            const apiKeyRecord = await apiKeysDb.getApiKeyByPk(pk);
+            if (!apiKeyRecord) {
+                logging_helper_js_1.Logger.info('ApiKeyAuthorizer: no matching key found');
+                return generateDenyPolicy(methodArn);
+            }
+            if (apiKeyRecord.status !== at_tracking_event_types_1.API_KEY_STATUS.ACTIVE) {
+                logging_helper_js_1.Logger.info('ApiKeyAuthorizer: key is not active', { status: apiKeyRecord.status });
+                return generateDenyPolicy(methodArn);
+            }
+            if (apiKeyRecord.expiresAt && new Date(apiKeyRecord.expiresAt) < new Date()) {
+                logging_helper_js_1.Logger.info('ApiKeyAuthorizer: key has expired', { expiresAt: apiKeyRecord.expiresAt });
+                return generateDenyPolicy(methodArn);
+            }
+            if (!Array.isArray(apiKeyRecord.scopes)) {
+                logging_helper_js_1.Logger.error('ApiKeyAuthorizer: record is missing scopes array', { pk: apiKeyRecord.pk });
+                return generateDenyPolicy(methodArn);
+            }
+            const pixel = await pixelsDb.getPixelById(pixelId);
+            if (!pixel || pixel.status !== at_tracking_event_types_1.PIXEL_STATUS.ACTIVE) {
+                logging_helper_js_1.Logger.info('ApiKeyAuthorizer: pixel is not active', { pixelId, status: pixel?.status });
+                return generateDenyPolicy(methodArn);
+            }
+            logging_helper_js_1.Logger.info('ApiKeyAuthorizer: key authorized', {
+                pixelId: apiKeyRecord.pixelId,
+                apiKeyPk: apiKeyRecord.pk,
+            });
+            return {
+                principalId: apiKeyRecord.pixelId,
+                policyDocument: {
+                    Version: '2012-10-17',
+                    Statement: [{
+                            Action: 'execute-api:Invoke',
+                            Effect: 'Allow',
+                            Resource: toWildcardArn(methodArn),
+                        }],
+                },
+                context: {
+                    pixelId: apiKeyRecord.pixelId,
+                    accountId: apiKeyRecord.accountId,
+                    scopes: apiKeyRecord.scopes.join(','),
+                    apiKeyPk: apiKeyRecord.pk,
+                },
+            };
+        }
+        catch (error) {
+            logging_helper_js_1.Logger.error('ApiKeyAuthorizer: error', { error });
+            return generateDenyPolicy(methodArn);
+        }
+    };
+};
+exports.createApiKeyAuthorizerHandler = createApiKeyAuthorizerHandler;
+//# sourceMappingURL=api-key-authorizer-helper.js.map

package/dist/cjs/helpers/api-key-authorizer-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-authorizer-helper.js","sourceRoot":"","sources":["../../../src/helpers/api-key-authorizer-helper.ts"],"names":[],"mappings":";;;AAsBA,iFAAmF;AACnF,2DAA8D;AAC9D,iDAAuD;AACvD,kFAAyE;AACzE,8EAAsE;AAkCtE,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAU,EAAE;IAElD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAc,EAAE,CAAC,CAAC;IAC7D,WAAW,EAAE,WAAW;IACxB,cAAc,EAAE;QACd,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;KACnF;CACF,CAAC,CAAC;AAEI,MAAM,6BAA6B,GAAG,CAAC,MAA8B,EAAE,EAAE;IAC9E,MAAM,SAAS,GAAG,IAAI,yCAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,IAAI,sCAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEzD,OAAO,KAAK,UAAU,OAAO,CAAC,KAAU,EAAE,OAAgB;QACxD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAElC,IAAI;YACF,IAAA,mCAAe,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;YAE/E,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE;gBACvB,0BAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;gBACxE,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;aACtC;YAED,MAAM,OAAO,GAAG,IAAA,8BAAkB,EAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,EAAE,GAAG,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;YACnC,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAEvD,IAAI,CAAC,YAAY,EAAE;gBACjB,0BAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;gBACvD,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;aACtC;YAED,IAAI,YAAY,CAAC,MAAM,KAAK,wCAAc,CAAC,MAAM,EAAE;gBACjD,0BAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpF,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;aACtC;YAED,IAAI,YAAY,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE;gBAC3E,0BAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;gBACxF,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;aACtC;YAKD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE;gBACvC,0BAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1F,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;aACtC;YAED,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,sCAAY,CAAC,MAAM,EAAE;gBAClD,0BAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBACzF,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;aACtC;YAED,0BAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC9C,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,QAAQ,EAAE,YAAY,CAAC,EAAE;aAC1B,CAAC,CAAC;YAEH,OAAO;gBACL,WAAW,EAAE,YAAY,CAAC,OAAO;gBACjC,cAAc,EAAE;oBACd,OAAO,EAAE,YAAY;oBACrB,SAAS,EAAE,CAAC;4BACV,MAAM,EAAE,oBAAoB;4BAC5B,MAAM,EAAE,OAAO;4BACf,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC;yBACnC,CAAC;iBACH;gBACD,OAAO,EAAE;oBACP,OAAO,EAAE,YAAY,CAAC,OAAO;oBAC7B,SAAS,EAAE,YAAY,CAAC,SAAS;oBACjC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;oBACrC,QAAQ,EAAE,YAAY,CAAC,EAAE;iBAC1B;aACF,CAAC;SACH;QAAC,OAAO,KAAK,EAAE;YACd,0BAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;SACtC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AA7EW,QAAA,6BAA6B,iCA6ExC"}

package/dist/cjs/helpers/identity-cache-helper.d.ts

@@ -1,21 +1,21 @@
-import { AdClickInfo, EventIdentity, EventIdentityTraits } from '@adtrackify/at-tracking-event-types';
-export interface IdentityCacheStaleTracker {
-    cachedTraits: EventIdentityTraits;
-    incomingTraits: EventIdentityTraits;
-    isIdentityIdStale: boolean;
-    isUserIdsStale: boolean;
-    isIdsStale: boolean;
-    isEmailsStale: boolean;
-    isPhonesStale: boolean;
-    isShopifyYIdsStale: boolean;
-    isGendersStale: boolean;
-    isDobsStale: boolean;
-    isAddressesStale: boolean;
-    isClickInfosStale: boolean;
-    isIpAddressStale: boolean;
-    isUserAgentStale: boolean;
-    isThirdPartyContactsStale: boolean;
-    isCacheStale: boolean;
-}
-export declare const isIdentityCacheStale: (identityCache: EventIdentity, incomingIdentity: EventIdentity) => IdentityCacheStaleTracker;
-export declare const isClickInfosStale: (cachedClick: AdClickInfo, incomingClick: AdClickInfo) => boolean;
+import { AdClickInfo, EventIdentity, EventIdentityTraits } from '@adtrackify/at-tracking-event-types';
+export interface IdentityCacheStaleTracker {
+    cachedTraits: EventIdentityTraits;
+    incomingTraits: EventIdentityTraits;
+    isIdentityIdStale: boolean;
+    isUserIdsStale: boolean;
+    isIdsStale: boolean;
+    isEmailsStale: boolean;
+    isPhonesStale: boolean;
+    isShopifyYIdsStale: boolean;
+    isGendersStale: boolean;
+    isDobsStale: boolean;
+    isAddressesStale: boolean;
+    isClickInfosStale: boolean;
+    isIpAddressStale: boolean;
+    isUserAgentStale: boolean;
+    isThirdPartyContactsStale: boolean;
+    isCacheStale: boolean;
+}
+export declare const isIdentityCacheStale: (identityCache: EventIdentity, incomingIdentity: EventIdentity) => IdentityCacheStaleTracker;
+export declare const isClickInfosStale: (cachedClick: AdClickInfo, incomingClick: AdClickInfo) => boolean;