@affinidi/cli 2.0.0-beta.9 → 2.1.0

package/dist/services/affinidi/auth/bff-auth-provider.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BFFAuthProvider = void 0;
+const tslib_1 = require("tslib");
+const chalk_1 = tslib_1.__importDefault(require("chalk"));
+const express_1 = tslib_1.__importDefault(require("express"));
+const helmet_1 = tslib_1.__importDefault(require("helmet"));
+const open_1 = tslib_1.__importDefault(require("open"));
+const tcp_port_used_1 = require("tcp-port-used");
+const auth_result_page_1 = require("./auth-result-page");
+const jwk_1 = require("../../../helpers/jwk");
+const credentials_vault_1 = require("../../credentials-vault");
+const env_config_1 = require("../../env-config");
+const bff_service_1 = require("../bff-service");
+class BFFAuthProvider {
+    constructor({ logger }) {
+        this.logger = logger;
+    }
+    async authenticate({ privateKey, publicKey }) {
+        const port = 64287;
+        const isPortInUse = await (0, tcp_port_used_1.check)(env_config_1.config.redirectPort);
+        if (isPortInUse) {
+            throw new Error(`\n💥 Port [${port}] is unavailable. Affinidi CLI is currently relying on it.\n` +
+                `Please close the process that is using port [${port}] and try again.`);
+        }
+        const authUrl = await bff_service_1.bffService.postAuthUrl(await (0, jwk_1.JWKToPem)(publicKey));
+        const state = authUrl.searchParams.get('state');
+        if (!state) {
+            throw new Error('Unexpected error occurred. state parameter missing');
+        }
+        return new Promise((resolve, reject) => {
+            this.logger.debug('Start express server');
+            const app = (0, express_1.default)();
+            app.use((0, helmet_1.default)({
+                contentSecurityPolicy: {
+                    directives: {
+                        scriptSrc: ["'none'"],
+                    },
+                },
+            }));
+            const server = app.listen(port, () => {
+                this.logger.debug(`Express server started listening on port ${port}`);
+            });
+            const timeout = setTimeout(() => {
+                this.shutDownServer(server);
+                reject(new Error(`Authentication timeout (${env_config_1.config.redirectTimeoutMs / 1000}s) exceeded`));
+            }, env_config_1.config.redirectTimeoutMs);
+            app.get('/callback', async (req, res) => {
+                res.type('html');
+                if (req.query.state === 'error') {
+                    this.handleError({ reject, req, res, timeout });
+                    this.shutDownServer(server);
+                }
+                else {
+                    await this.handleSuccess({ privateKey, resolve, reject, res, timeout, state });
+                    this.shutDownServer(server);
+                }
+            });
+            this.logger.info(`\nAttempting to automatically open the authentication page in your default browser.\n` +
+                `\nIf the browser doesn't open automatically, or if your default browser isn't Google Chrome, please open the following URL in the Chrome browser:\n` +
+                `\n${chalk_1.default.underline(authUrl)}\n\n`);
+            // eslint-disable-next-line @typescript-eslint/no-floating-promises
+            (0, open_1.default)(authUrl.href);
+        });
+    }
+    /**
+     * Handles `Success` case when the user accepts
+     * the access to the personal data.
+     * This is the example of the accept endpoint call:
+     * http://127.0.0.1:64287/callback
+     * @param params
+     * @private
+     */
+    async handleSuccess(params) {
+        const { privateKey, resolve, reject, res, timeout, state } = params;
+        clearTimeout(timeout);
+        try {
+            this.logger.debug(`Getting sessionId for state: ${JSON.stringify(state)}`);
+            const encryptedSessionIdBase64 = await bff_service_1.bffService.getSessionId(state);
+            const encryptedSessionId = Buffer.from(encryptedSessionIdBase64, 'base64').toString('utf-8');
+            const sessionId = await (0, jwk_1.decryptSessionIdWithPrivateKey)(encryptedSessionId, privateKey);
+            this.logger.debug(`Received session: ${JSON.stringify(sessionId)}`);
+            await credentials_vault_1.credentialsVault.setSessionId(sessionId);
+            this.logger.debug('Session stored in vault');
+            resolve(sessionId);
+            res.end((0, auth_result_page_1.authResultPage)('Logged in successfully', 'Head back to the terminal to continue using Affinidi CLI.<br><br>You can also access our services from the <a href="https://portal.affinidi.com" target="_blank">Affindi Portal</a>'));
+        }
+        catch (error) {
+            this.logger.info(error);
+            const errorMessage = this.generateErrorMessage();
+            reject(errorMessage);
+            res.end((0, auth_result_page_1.authResultPage)('Login failed', errorMessage));
+        }
+    }
+    /**
+     * Handles `Error` case when there is an error or the
+     * user rejects the access to the personal data.
+     * This is the example of the reject endpoint call:
+     * http://127.0.0.1:64287/callback?state=error&error=access_denied&description=request_declined
+     * @param params
+     * @private
+     */
+    handleError(params) {
+        const { res, req, reject, timeout } = params;
+        const { type, description } = req.query;
+        clearTimeout(timeout);
+        const errorMessage = this.generateErrorMessage(type, description);
+        reject(errorMessage);
+        res.end((0, auth_result_page_1.authResultPage)('Login failed', errorMessage));
+    }
+    generateErrorMessage(type, errorDescription) {
+        let errorMessage;
+        switch (type) {
+            case 'access_denied':
+                errorMessage =
+                    errorDescription === 'request_declined'
+                        ? 'You have declined access to your data. Granting access to your data is necessary to avail our services.'
+                        : 'Access denied.';
+                break;
+            default:
+                errorMessage = 'Unexpected error occurred';
+        }
+        return errorMessage;
+    }
+    shutDownServer(server) {
+        server.close((error) => {
+            if (error) {
+                this.logger.error(`Error while shutting down the express server: ${error.message}`);
+                return;
+            }
+            this.logger.debug('Express server has been successfully shut down');
+        });
+    }
+}
+exports.BFFAuthProvider = BFFAuthProvider;
+//# sourceMappingURL=bff-auth-provider.js.map

package/dist/services/affinidi/auth/bff-auth-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bff-auth-provider.js","sourceRoot":"","sources":["../../../../src/services/affinidi/auth/bff-auth-provider.ts"],"names":[],"mappings":";;;;AACA,0DAAyB;AACzB,8DAA6B;AAC7B,4DAA2B;AAE3B,wDAAuB;AACvB,iDAAqC;AACrC,yDAAmD;AAEnD,8CAA+E;AAC/E,+DAA0D;AAC1D,iDAAyC;AACzC,gDAA2C;AAG3C,MAAa,eAAe;IAG1B,YAAY,EAAE,MAAM,EAAsB;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,SAAS,EAA+C;QAC9F,MAAM,IAAI,GAAG,KAAK,CAAA;QAClB,MAAM,WAAW,GAAG,MAAM,IAAA,qBAAK,EAAC,mBAAM,CAAC,YAAY,CAAC,CAAA;QACpD,IAAI,WAAW,EAAE;YACf,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,8DAA8D;gBAC9E,gDAAgD,IAAI,kBAAkB,CACzE,CAAA;SACF;QAED,MAAM,OAAO,GAAG,MAAM,wBAAU,CAAC,WAAW,CAAC,MAAM,IAAA,cAAQ,EAAC,SAAS,CAAC,CAAC,CAAA;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC/C,IAAI,CAAC,KAAK,EAAE;YACV,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;SACtE;QAED,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;YAEzC,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAA;YACrB,GAAG,CAAC,GAAG,CACL,IAAA,gBAAM,EAAC;gBACL,qBAAqB,EAAE;oBACrB,UAAU,EAAE;wBACV,SAAS,EAAE,CAAC,QAAQ,CAAC;qBACtB;iBACF;aACF,CAAC,CACH,CAAA;YACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAA;YACvE,CAAC,CAAC,CAAA;YAEF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;gBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,mBAAM,CAAC,iBAAiB,GAAG,IAAI,aAAa,CAAC,CAAC,CAAA;YAC5F,CAAC,EAAE,mBAAM,CAAC,iBAAiB,CAAC,CAAA;YAE5B,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBACtC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBAChB,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE;oBAC/B,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;oBAC/C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;iBAC5B;qBAAM;oBACL,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;oBAC9E,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;iBAC5B;YACH,CAAC,CAAC,CAAA;YAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,uFAAuF;gBACrF,qJAAqJ;gBACrJ,KAAK,eAAK,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CACtC,CAAA;YAED,mEAAmE;YACnE,IAAA,cAAI,EAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,aAAa,CAAC,MAO3B;QACC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;QAEnE,YAAY,CAAC,OAAO,CAAC,CAAA;QACrB,IAAI;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC1E,MAAM,wBAAwB,GAAG,MAAM,wBAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;YACrE,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC5F,MAAM,SAAS,GAAG,MAAM,IAAA,oCAA8B,EAAC,kBAAkB,EAAE,UAAU,CAAC,CAAA;YACtF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;YACnE,MAAM,oCAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;YAC9C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAA;YAC5C,OAAO,CAAC,SAAS,CAAC,CAAA;YAClB,GAAG,CAAC,GAAG,CACL,IAAA,iCAAc,EACZ,wBAAwB,EACxB,qLAAqL,CACtL,CACF,CAAA;SACF;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAA;YACjC,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAA;YAChD,MAAM,CAAC,YAAY,CAAC,CAAA;YACpB,GAAG,CAAC,GAAG,CAAC,IAAA,iCAAc,EAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAA;SACtD;IACH,CAAC;IAED;;;;;;;OAOG;IACK,WAAW,CAAC,MAKnB;QACC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;QAC5C,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAA;QACvC,YAAY,CAAC,OAAO,CAAC,CAAA;QACrB,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAc,EAAE,WAAqB,CAAC,CAAA;QACrF,MAAM,CAAC,YAAY,CAAC,CAAA;QACpB,GAAG,CAAC,GAAG,CAAC,IAAA,iCAAc,EAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAA;IACvD,CAAC;IAEO,oBAAoB,CAAC,IAAa,EAAE,gBAAyB;QACnE,IAAI,YAAoB,CAAA;QACxB,QAAQ,IAAI,EAAE;YACZ,KAAK,eAAe;gBAClB,YAAY;oBACV,gBAAgB,KAAK,kBAAkB;wBACrC,CAAC,CAAC,yGAAyG;wBAC3G,CAAC,CAAC,gBAAgB,CAAA;gBACtB,MAAK;YACP;gBACE,YAAY,GAAG,2BAA2B,CAAA;SAC7C;QACD,OAAO,YAAY,CAAA;IACrB,CAAC;IAEO,cAAc,CAAC,MAAmB;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC9B,IAAI,KAAK,EAAE;gBACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAkD,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC9F,OAAM;aACP;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AA3JD,0CA2JC"}

package/dist/services/affinidi/auth/types.d.ts

@@ -0,0 +1,11 @@
+import { KeyLike } from 'jose';
+import { LoggerAdapter } from '../logger';
+export interface AuthProvider {
+    authenticate(keys: {
+        privateKey: KeyLike;
+        publicKey: KeyLike;
+    }): Promise<string>;
+}
+export type AuthProviderConfig = {
+    logger: LoggerAdapter;
+};

package/dist/services/affinidi/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/services/affinidi/auth/types.ts"],"names":[],"mappings":""}

package/dist/services/affinidi/bff-service.d.ts

@@ -0,0 +1,32 @@
+import axios, { RawAxiosRequestHeaders } from 'axios';
+import { KeyLike } from 'jose';
+import { AuthProvider } from './auth/types';
+import { StatsProjectResourceLimit, StatsResponseOutput } from './bff-service.types';
+import { CreateProjectInput, ProjectDto } from './iam/iam.api';
+export declare const instance: axios.AxiosInstance;
+export declare function getBFFHeaders(): Promise<RawAxiosRequestHeaders>;
+export declare class BFFService {
+    private readonly logger;
+    readonly authProvider: AuthProvider;
+    constructor();
+    login(): Promise<string>;
+    logout(): Promise<void>;
+    whoami(): Promise<any>;
+    postAuthUrl(publicKey: string): Promise<URL>;
+    getSessionId(state: string): Promise<string>;
+    getProjects(): Promise<ProjectDto[]>;
+    createProject(projectInput: CreateProjectInput): Promise<ProjectDto>;
+    getActiveProjectLimits(resourceId?: string): Promise<number | StatsProjectResourceLimit[] | undefined>;
+    stats(): Promise<StatsResponseOutput>;
+    getActiveProject(): Promise<ProjectDto>;
+    setSessionActiveProject(projectId: string): Promise<string>;
+    exportLoginConfigs(ids: string[]): Promise<any>;
+    importLoginConfigs(data: any): Promise<any>;
+    exportGroups(groupNames: string[]): Promise<any>;
+    importGroups(data: any): Promise<any>;
+    generateKeyPair(): Promise<{
+        publicKey: KeyLike;
+        privateKey: KeyLike;
+    }>;
+}
+export declare const bffService: BFFService;

package/dist/services/affinidi/bff-service.js

@@ -0,0 +1,195 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bffService = exports.BFFService = exports.getBFFHeaders = exports.instance = void 0;
+const tslib_1 = require("tslib");
+const errors_1 = require("@oclif/core/lib/errors");
+const axios_1 = tslib_1.__importStar(require("axios"));
+const jose_1 = require("jose");
+const bff_auth_provider_1 = require("./auth/bff-auth-provider");
+const errors_2 = require("./errors");
+const logger_1 = require("./logger");
+const constants_1 = require("../../common/constants");
+const credentials_vault_1 = require("../credentials-vault");
+const env_config_1 = require("../env-config");
+/* eslint-disable-next-line @typescript-eslint/ban-ts-comment, @typescript-eslint/no-require-imports, @typescript-eslint/no-var-requires */
+require('pkginfo')(module, 'version');
+exports.instance = axios_1.default.create({
+    baseURL: env_config_1.config.bffHost,
+});
+async function getBFFHeaders() {
+    const sessionId = await credentials_vault_1.credentialsVault.getSessionId();
+    return {
+        'Content-Type': 'application/json',
+        Accept: 'application/json',
+        'Accept-Encoding': 'gzip, deflate, br',
+        Cookie: `${env_config_1.config.bffCookieName}=${sessionId}`,
+        'affinidi-cli-version': module.exports.version,
+    };
+}
+exports.getBFFHeaders = getBFFHeaders;
+class BFFService {
+    constructor() {
+        this.logger = new logger_1.ConsoleLoggerAdapter(env_config_1.config.logLevel);
+        this.authProvider = new bff_auth_provider_1.BFFAuthProvider({
+            logger: this.logger,
+        });
+    }
+    async login() {
+        const { privateKey, publicKey } = await this.generateKeyPair();
+        return this.authProvider.authenticate({ privateKey, publicKey });
+    }
+    async logout() {
+        const headers = await getBFFHeaders();
+        try {
+            await exports.instance.post('/api/auth/logout', {}, { headers });
+            await credentials_vault_1.credentialsVault.clear();
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async whoami() {
+        const headers = await getBFFHeaders();
+        try {
+            const res = await exports.instance.get('/api/whoami', { headers });
+            return res.data;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async postAuthUrl(publicKey) {
+        try {
+            const response = await exports.instance.post('/api/auth/url', { publicKey, uxClient: env_config_1.config.bffUxClient }, { headers: await getBFFHeaders() });
+            return new URL(response.data.authUrl);
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async getSessionId(state) {
+        const headers = await getBFFHeaders();
+        try {
+            const res = await exports.instance.get('/api/session-id', { params: { state: state }, headers });
+            return res.data.sessionId;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async getProjects() {
+        const headers = await getBFFHeaders();
+        try {
+            const res = await exports.instance.get('/api/projects', { headers });
+            return res.data;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async createProject(projectInput) {
+        const headers = await getBFFHeaders();
+        try {
+            const res = await exports.instance.post('/api/project', projectInput, { headers });
+            return res.data;
+        }
+        catch (error) {
+            if (error instanceof axios_1.AxiosError && error.response?.data?.errorCodeStr === 'ProjectCreation') {
+                const projectsLimit = await this.getActiveProjectLimits(constants_1.ServiceResourceIds.IAM_PROJECTS);
+                throw new errors_1.CLIError(`You can create a maximum of ${projectsLimit} projects. For any further queries reach out to our Customer support.`);
+            }
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async getActiveProjectLimits(resourceId) {
+        try {
+            const stats = await this.stats();
+            const limits = stats.projects[0].limits;
+            if (resourceId) {
+                return limits.find((limit) => limit.resourceId === resourceId)?.initialValue;
+            }
+            return limits;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async stats() {
+        const headers = await getBFFHeaders();
+        try {
+            const project = await this.getActiveProject();
+            const res = await exports.instance.get(`/api/stats/${project.id}`, { headers });
+            return res.data;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async getActiveProject() {
+        const headers = await getBFFHeaders();
+        try {
+            const res = await exports.instance.get('/api/project', { headers });
+            return res.data;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async setSessionActiveProject(projectId) {
+        const headers = await getBFFHeaders();
+        try {
+            const res = await exports.instance.get(`/api/projects/${projectId}`, { headers });
+            return res.data.projectId;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async exportLoginConfigs(ids) {
+        const headers = await getBFFHeaders();
+        try {
+            const res = await exports.instance.post('/api/login/export-login-configs', { ids }, { headers });
+            return res.data;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async importLoginConfigs(data) {
+        const headers = await getBFFHeaders();
+        try {
+            const res = await exports.instance.post('/api/login/import-login-configs', { data }, { headers });
+            return res.data;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async exportGroups(groupNames) {
+        const headers = await getBFFHeaders();
+        try {
+            const res = await exports.instance.post('/api/login/export-user-groups', { groupNames }, { headers });
+            return res.data;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async importGroups(data) {
+        const headers = await getBFFHeaders();
+        try {
+            const res = await exports.instance.post('/api/login/import-user-groups', { data }, { headers });
+            return res.data;
+        }
+        catch (error) {
+            (0, errors_2.handleServiceError)(error);
+        }
+    }
+    async generateKeyPair() {
+        const { publicKey, privateKey } = await (0, jose_1.generateKeyPair)(constants_1.SupportedAlgorithms.RS256);
+        return { publicKey, privateKey };
+    }
+}
+exports.BFFService = BFFService;
+exports.bffService = new BFFService();
+//# sourceMappingURL=bff-service.js.map

package/dist/services/affinidi/bff-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bff-service.js","sourceRoot":"","sources":["../../../src/services/affinidi/bff-service.ts"],"names":[],"mappings":";;;;AAAA,mDAAiD;AACjD,uDAAiE;AACjE,+BAA+C;AAC/C,gEAA0D;AAG1D,qCAA6C;AAE7C,qCAA8D;AAC9D,sDAAgF;AAChF,4DAAuD;AACvD,8CAAsC;AAEtC,2IAA2I;AAC3I,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AAExB,QAAA,QAAQ,GAAG,eAAK,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,mBAAM,CAAC,OAAO;CACxB,CAAC,CAAA;AAEK,KAAK,UAAU,aAAa;IACjC,MAAM,SAAS,GAAG,MAAM,oCAAgB,CAAC,YAAY,EAAE,CAAA;IACvD,OAAO;QACL,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,kBAAkB;QAC1B,iBAAiB,EAAE,mBAAmB;QACtC,MAAM,EAAE,GAAG,mBAAM,CAAC,aAAa,IAAI,SAAS,EAAE;QAC9C,sBAAsB,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;KAC/C,CAAA;AACH,CAAC;AATD,sCASC;AAED,MAAa,UAAU;IAIrB;QACE,IAAI,CAAC,MAAM,GAAG,IAAI,6BAAoB,CAAC,mBAAM,CAAC,QAAQ,CAAC,CAAA;QACvD,IAAI,CAAC,YAAY,GAAG,IAAI,mCAAe,CAAC;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;QAC9D,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;IAClE,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,gBAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YACxD,MAAM,oCAAgB,CAAC,KAAK,EAAE,CAAA;SAC/B;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YAC1D,OAAO,GAAG,CAAC,IAAI,CAAA;SAChB;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,SAAiB;QACxC,IAAI;YACF,MAAM,QAAQ,GAAG,MAAM,gBAAQ,CAAC,IAAI,CAClC,eAAe,EACf,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAM,CAAC,WAAW,EAAE,EAC3C,EAAE,OAAO,EAAE,MAAM,aAAa,EAAE,EAAE,CACnC,CAAA;YACD,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;SACtC;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,KAAa;QACrC,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YACxF,OAAO,GAAG,CAAC,IAAI,CAAC,SAAS,CAAA;SAC1B;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,WAAW;QACtB,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YAC5D,OAAO,GAAG,CAAC,IAAoB,CAAA;SAChC;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,YAAgC;QACzD,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YAC1E,OAAO,GAAG,CAAC,IAAkB,CAAA;SAC9B;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,kBAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,iBAAiB,EAAE;gBAC3F,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,8BAAkB,CAAC,YAAY,CAAC,CAAA;gBAExF,MAAM,IAAI,iBAAQ,CAChB,+BAA+B,aAAa,uEAAuE,CACpH,CAAA;aACF;YAED,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,UAAmB;QACrD,IAAI;YACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;YAChC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;YAEvC,IAAI,UAAU,EAAE;gBACd,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAgC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,EAAE,YAAY,CAAA;aACxG;YAED,OAAO,MAAM,CAAA;SACd;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAA;YAE7C,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YACvE,OAAO,GAAG,CAAC,IAAI,CAAA;SAChB;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,gBAAgB;QAC3B,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YAC3D,OAAO,GAAG,CAAC,IAAkB,CAAA;SAC9B;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,SAAiB;QACpD,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,GAAG,CAAC,iBAAiB,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YACzE,OAAO,GAAG,CAAC,IAAI,CAAC,SAAmB,CAAA;SACpC;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,GAAa;QAC3C,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YACxF,OAAO,GAAG,CAAC,IAAW,CAAA;SACvB;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,IAAS;QACvC,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YACzF,OAAO,GAAG,CAAC,IAAW,CAAA;SACvB;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,UAAoB;QAC5C,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YAC7F,OAAO,GAAG,CAAC,IAAW,CAAA;SACvB;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,IAAS;QACjC,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAA;QACrC,IAAI;YACF,MAAM,GAAG,GAAG,MAAM,gBAAQ,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YACvF,OAAO,GAAG,CAAC,IAAW,CAAA;SACvB;QAAC,OAAO,KAAK,EAAE;YACd,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAA;SAC1B;IACH,CAAC;IAEM,KAAK,CAAC,eAAe;QAC1B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,sBAAe,EAAC,+BAAmB,CAAC,KAAK,CAAC,CAAA;QAClF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAClC,CAAC;CACF;AAlLD,gCAkLC;AAEY,QAAA,UAAU,GAAG,IAAI,UAAU,EAAE,CAAA"}

package/dist/services/affinidi/bff-service.types.d.ts

@@ -0,0 +1,38 @@
+type StatsProjectScheduledBundleChange = {
+    bundleId: string;
+    bundleName: string;
+    bundleDescription: string;
+    startDate: string;
+    endDate: string;
+    changeType: string;
+};
+export type StatsProjectResourceLimit = {
+    resourceId: string;
+    initialValue: number;
+    value: number;
+    creditCost: number;
+};
+type StatsProject = {
+    id: string;
+    bundle: {
+        bundleId: string;
+        bundleName: string;
+        bundleDescription: string;
+    };
+    createdAt: string;
+    credits: number;
+    initialCredits: number;
+    scheduledBundleChanges: StatsProjectScheduledBundleChange[];
+    limits: StatsProjectResourceLimit[];
+};
+export type StatsResponseOutput = {
+    cachedAt: string;
+    updatedAt: string;
+    expiresAt: string;
+    health: {
+        status: number;
+        message: string;
+    };
+    projects: StatsProject[];
+};
+export {};

package/dist/services/affinidi/{config.js → bff-service.types.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=config.js.map
+//# sourceMappingURL=bff-service.types.js.map

package/dist/services/affinidi/bff-service.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bff-service.types.js","sourceRoot":"","sources":["../../../src/services/affinidi/bff-service.types.ts"],"names":[],"mappings":""}

package/dist/services/affinidi/{errors/index.js → errors.js}

@@ -6,6 +6,7 @@ const errors_1 = require("@oclif/core/lib/errors");
 const axios_1 = require("axios");
 const chalk_1 = tslib_1.__importDefault(require("chalk"));
 const http_status_codes_1 = require("http-status-codes");
+const credentials_vault_1 = require("../credentials-vault");
 exports.AuthTokenExpired = "Your session has expired. Please, run command 'affinidi start' and try again.";
 exports.InvalidOrMissingAuthToken = "Your session token is invalid or missing. Please, run command 'affinidi start' and try again.";
 // eslint-disable-next-line  @typescript-eslint/no-explicit-any
@@ -13,7 +14,7 @@ const getCommonAPIErrorMessage = (response) => {
     switch (response.status) {
         case http_status_codes_1.StatusCodes.FORBIDDEN:
         case http_status_codes_1.StatusCodes.UNAUTHORIZED:
-            return "You are not authorized to perform this action\nPlease, make sure you are logged in and have an active project by running command 'affinidi start'";
+            return "You are not authorized to perform this action\nPlease, make sure you are logged in by running command 'affinidi start'";
         case http_status_codes_1.StatusCodes.NOT_FOUND:
             return 'The resource you are trying to access was not found\nPlease, check the entered resource identifier';
         case http_status_codes_1.StatusCodes.TOO_MANY_REQUESTS:
@@ -57,19 +58,27 @@ const getCommonAPIErrorMessage = (response) => {
     }
 };
 function handleServiceError(error, serviceErrorMessageHandler) {
-    if (error instanceof axios_1.AxiosError && error.response) {
-        const { name, details } = error.response.data;
+    const isAxiosError = error instanceof axios_1.AxiosError;
+    if (!isAxiosError) {
+        throw error;
+    }
+    const isServerError = isAxiosError && error.response && error.response.status >= 500;
+    if (isServerError) {
+        void credentials_vault_1.credentialsVault.clear();
+    }
+    if (error?.response?.data) {
+        const { name, details, message, errorCodeStr } = error.response.data;
         const isJwtExpired = name && name === 'InvalidJwtTokenError' && details?.some((err) => err.issue === 'jwt-expired');
         if (isJwtExpired) {
             throw new Error(exports.AuthTokenExpired);
         }
-        if (error.response) {
-            throw new errors_1.CLIError(serviceErrorMessageHandler
-                ? serviceErrorMessageHandler(error.response) ?? getCommonAPIErrorMessage(error.response)
-                : getCommonAPIErrorMessage(error.response));
+        if (errorCodeStr === 'CLIVersionInvalid' && message) {
+            throw new errors_1.CLIError(message);
         }
     }
-    throw error;
+    throw new errors_1.CLIError(serviceErrorMessageHandler
+        ? serviceErrorMessageHandler(error.response) ?? getCommonAPIErrorMessage(error.response)
+        : getCommonAPIErrorMessage(error.response));
 }
 exports.handleServiceError = handleServiceError;
-//# sourceMappingURL=index.js.map
+//# sourceMappingURL=errors.js.map

package/dist/services/affinidi/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/services/affinidi/errors.ts"],"names":[],"mappings":";;;;AAAA,mDAAiD;AACjD,iCAAkC;AAClC,0DAAyB;AACzB,yDAA+C;AAC/C,4DAAuD;AAE1C,QAAA,gBAAgB,GAAG,+EAA+E,CAAA;AAClG,QAAA,yBAAyB,GACpC,+FAA+F,CAAA;AAEjG,+DAA+D;AAC/D,MAAM,wBAAwB,GAAG,CAAC,QAAa,EAAU,EAAE;IACzD,QAAQ,QAAQ,CAAC,MAAM,EAAE;QACvB,KAAK,+BAAW,CAAC,SAAS,CAAC;QAC3B,KAAK,+BAAW,CAAC,YAAY;YAC3B,OAAO,wHAAwH,CAAA;QACjI,KAAK,+BAAW,CAAC,SAAS;YACxB,OAAO,oGAAoG,CAAA;QAC7G,KAAK,+BAAW,CAAC,iBAAiB;YAChC,OAAO,8DAA8D,CAAA;QACvE,KAAK,+BAAW,CAAC,WAAW;YAC1B,QAAQ,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE;gBAC3B,KAAK,mBAAmB;oBACtB,OAAO,0EAA0E,CAAA;gBACnF,OAAO,CAAC,CAAC;oBACP,IAAI,OAAO,GAAG,0BAA0B,CAAA;oBACxC,OAAO;wBACL,wGAAwG,CAAA;oBAC1G,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAA;oBACpC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE;wBAC3B,OAAO,IAAI,iBAAiB,CAAA;wBAC5B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAwB,EAAE,EAAE;4BAC1C,OAAO,IAAI,OAAO,KAAK,CAAC,KAAK,EAAE,CAAA;wBACjC,CAAC,CAAC,CAAA;qBACH;oBACD,OAAO,OAAO,CAAA;iBACf;aACF;QACH,KAAK,+BAAW,CAAC,QAAQ;YACvB,QAAQ,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE;gBAC3B,KAAK,oBAAoB;oBACvB,OAAO,2GAA2G,CAAA;gBACpH,KAAK,oBAAoB;oBACvB,OAAO,iGAAiG,eAAK,CAAC,SAAS,CACrH,wDAAwD,CACzD,GAAG,CAAA;gBACN;oBACE,OAAO,6DAA6D,CAAA;aACvE;QACH;YACE,OAAO;UAEH,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO;gBAC5C,CAAC,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC;oBAC3B,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO;oBAC9B,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO;iBAC/B,CAAC,EAAE;gBACN,CAAC,CAAC,EACN;kCAC0B,eAAK,CAAC,SAAS,CAAC,wDAAwD,CAAC,EAAE,CAAA;KAC1G;AACH,CAAC,CAAA;AAED,SAAgB,kBAAkB,CAChC,KAAc,EACd,0BAA6D;IAE7D,MAAM,YAAY,GAAG,KAAK,YAAY,kBAAU,CAAA;IAEhD,IAAI,CAAC,YAAY,EAAE;QACjB,MAAM,KAAK,CAAA;KACZ;IAED,MAAM,aAAa,GAAG,YAAY,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAA;IAEpF,IAAI,aAAa,EAAE;QACjB,KAAK,oCAAgB,CAAC,KAAK,EAAE,CAAA;KAC9B;IAED,IAAI,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAA;QAEpE,MAAM,YAAY,GAChB,IAAI,IAAI,IAAI,KAAK,sBAAsB,IAAI,OAAO,EAAE,IAAI,CAAC,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC,CAAA;QAErG,IAAI,YAAY,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,wBAAgB,CAAC,CAAA;SAClC;QAED,IAAI,YAAY,KAAK,mBAAmB,IAAI,OAAO,EAAE;YACnD,MAAM,IAAI,iBAAQ,CAAC,OAAO,CAAC,CAAA;SAC5B;KACF;IAED,MAAM,IAAI,iBAAQ,CAChB,0BAA0B;QACxB,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACxF,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAC7C,CAAA;AACH,CAAC;AApCD,gDAoCC"}