@alanszp/express-common-fn 9.2.7 → 10.0.1

package/node_modules/@alanszp/errors/tsconfig.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "rootDir": "src",
+    "outDir": "dist",
+    "module": "commonjs",
+    "target": "es6",
+    "types": ["node"],
+    "esModuleInterop": true,
+    "sourceMap": true,
+
+    "alwaysStrict": true,
+    "strictNullChecks": true
+  },
+  "exclude": ["node_modules"]
+}

package/node_modules/@alanszp/express/.gitignore

@@ -0,0 +1,3 @@
+node_modules
+*.log
+dist

package/node_modules/@alanszp/express/.npmignore

@@ -0,0 +1,3 @@
+node_modules
+src
+*.log

package/node_modules/@alanszp/express/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2021 Alan Szpigiel
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/node_modules/@alanszp/express/babel.config.js

@@ -0,0 +1,7 @@
+// Used by Jest
+module.exports = {
+  presets: [
+    ["@babel/preset-env", { targets: { node: "current" } }],
+    "@babel/preset-typescript",
+  ],
+};

package/node_modules/@alanszp/express/dist/helpers/appIdentifier.d.ts

@@ -0,0 +1 @@
+export declare function appIdentifier(): string;

package/node_modules/@alanszp/express/dist/helpers/appIdentifier.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.appIdentifier = void 0;
+function appIdentifier() {
+    const appName = process.env.API_ORIGIN_NAME || "undefined";
+    const env = process.env.NODE_ENV || "development";
+    return `${appName}:${env}`;
+}
+exports.appIdentifier = appIdentifier;
+//# sourceMappingURL=appIdentifier.js.map

package/node_modules/@alanszp/express/dist/helpers/appIdentifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appIdentifier.js","sourceRoot":"","sources":["../../src/helpers/appIdentifier.ts"],"names":[],"mappings":";;;AAAA,SAAgB,aAAa;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,WAAW,CAAC;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,CAAC;IAClD,OAAO,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC;AAC7B,CAAC;AAJD,sCAIC"}

package/node_modules/@alanszp/express/dist/helpers/getIp.d.ts

@@ -0,0 +1,2 @@
+import { Request } from "express";
+export declare function getIp(req: Request): string | string[] | undefined;

package/node_modules/@alanszp/express/dist/helpers/getIp.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIp = void 0;
+function getIp(req) {
+    var _a;
+    return req.headers["cf-connecting-ip"] || req.ip || ((_a = req.socket) === null || _a === void 0 ? void 0 : _a.remoteAddress);
+}
+exports.getIp = getIp;
+//# sourceMappingURL=getIp.js.map

package/node_modules/@alanszp/express/dist/helpers/getIp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIp.js","sourceRoot":"","sources":["../../src/helpers/getIp.ts"],"names":[],"mappings":";;;AAEA,SAAgB,KAAK,CAAC,GAAY;;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,EAAE,KAAI,MAAA,GAAG,CAAC,MAAM,0CAAE,aAAa,CAAA,CAAC;AAChF,CAAC;AAFD,sBAEC"}

package/node_modules/@alanszp/express/dist/helpers/getRequestLogger.d.ts

@@ -0,0 +1,2 @@
+import { Request } from "express";
+export declare function getRequestLogger(req: Request): import("@alanszp/logger").ILogger;

package/node_modules/@alanszp/express/dist/helpers/getRequestLogger.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRequestLogger = void 0;
+const logger_1 = require("@alanszp/logger");
+function getRequestLogger(req) {
+    var _a;
+    return ((_a = req.context) === null || _a === void 0 ? void 0 : _a.log) || new logger_1.MockLogger();
+}
+exports.getRequestLogger = getRequestLogger;
+//# sourceMappingURL=getRequestLogger.js.map

package/node_modules/@alanszp/express/dist/helpers/getRequestLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getRequestLogger.js","sourceRoot":"","sources":["../../src/helpers/getRequestLogger.ts"],"names":[],"mappings":";;;AACA,4CAA6C;AAE7C,SAAgB,gBAAgB,CAAC,GAAY;;IAC3C,OAAO,CAAA,MAAA,GAAG,CAAC,OAAO,0CAAE,GAAG,KAAI,IAAI,mBAAU,EAAE,CAAC;AAC9C,CAAC;AAFD,4CAEC"}

package/node_modules/@alanszp/express/dist/helpers/now.d.ts

@@ -0,0 +1 @@
+export declare function now(): Date;

package/node_modules/@alanszp/express/dist/helpers/now.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.now = void 0;
+function now() {
+    return new Date();
+}
+exports.now = now;
+//# sourceMappingURL=now.js.map

package/node_modules/@alanszp/express/dist/helpers/now.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"now.js","sourceRoot":"","sources":["../../src/helpers/now.ts"],"names":[],"mappings":";;;AAAA,SAAgB,GAAG;IACjB,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAFD,kBAEC"}

package/node_modules/@alanszp/express/dist/index.d.ts

@@ -0,0 +1,11 @@
+export * from "./views/errorView";
+export * from "./types/AuthMethod";
+export * from "./middlewares/auditLog";
+export * from "./middlewares/accessLogger";
+export * from "./middlewares/authedForOrg";
+export * from "./middlewares/createContext";
+export * from "./middlewares/authenticateUser";
+export * from "./middlewares/returnInternalServerError";
+export * from "./middlewares/returnNotFound";
+export * from "./middlewares/jsonBodyParser";
+export * from "./middlewares/hasRoles";

package/node_modules/@alanszp/express/dist/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./views/errorView"), exports);
+__exportStar(require("./types/AuthMethod"), exports);
+__exportStar(require("./middlewares/auditLog"), exports);
+__exportStar(require("./middlewares/accessLogger"), exports);
+__exportStar(require("./middlewares/authedForOrg"), exports);
+__exportStar(require("./middlewares/createContext"), exports);
+__exportStar(require("./middlewares/authenticateUser"), exports);
+__exportStar(require("./middlewares/returnInternalServerError"), exports);
+__exportStar(require("./middlewares/returnNotFound"), exports);
+__exportStar(require("./middlewares/jsonBodyParser"), exports);
+__exportStar(require("./middlewares/hasRoles"), exports);
+//# sourceMappingURL=index.js.map

package/node_modules/@alanszp/express/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oDAAkC;AAClC,qDAAmC;AACnC,yDAAuC;AACvC,6DAA2C;AAC3C,6DAA2C;AAC3C,8DAA4C;AAC5C,iEAA+C;AAC/C,0EAAwD;AACxD,+DAA6C;AAC7C,+DAA6C;AAC7C,yDAAuC"}

package/node_modules/@alanszp/express/dist/middlewares/accessLogger.d.ts

@@ -0,0 +1,3 @@
+import { NextFunction, Response } from "express";
+import { GenericRequest } from "../types/GenericRequest";
+export declare function accessLogger(req: GenericRequest, res: Response, next: NextFunction): void;

package/node_modules/@alanszp/express/dist/middlewares/accessLogger.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.accessLogger = void 0;
+const logger_1 = require("@alanszp/logger");
+const getIp_1 = require("../helpers/getIp");
+function accessLogger(req, res, next) {
+    const startTime = process.hrtime.bigint();
+    res.on("finish", () => {
+        const endTime = process.hrtime.bigint();
+        req.context.log.info("", {
+            log_type: logger_1.LogType.ACCESS,
+            method: req.method,
+            env: process.env.NODE_ENV,
+            duration: (endTime - startTime).toString(),
+            durationMs: ((endTime - startTime) / BigInt(1000000)).toString(),
+            remoteAddress: (0, getIp_1.getIp)(req),
+            forwardedFor: req.headers["x-forwarded-for"],
+            authentication: req.context.authenticated,
+            statusCode: res.statusCode,
+            url: req.originalUrl || req.url,
+            httpVersion: `${req.httpVersionMajor}.${req.httpVersionMinor}`,
+            referrer: req.headers.referer || req.headers.referrer || "-",
+            userAgent: req.headers["user-agent"],
+            contentLength: res.getHeader("content-length"),
+        });
+    });
+    return next();
+}
+exports.accessLogger = accessLogger;
+//# sourceMappingURL=accessLogger.js.map

package/node_modules/@alanszp/express/dist/middlewares/accessLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessLogger.js","sourceRoot":"","sources":["../../src/middlewares/accessLogger.ts"],"names":[],"mappings":";;;AACA,4CAA0C;AAC1C,4CAAyC;AAGzC,SAAgB,YAAY,CAC1B,GAAmB,EACnB,GAAa,EACb,IAAkB;IAElB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAE1C,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACxC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;YACvB,QAAQ,EAAE,gBAAO,CAAC,MAAM;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ;YACzB,QAAQ,EAAE,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,QAAQ,EAAE;YAC1C,UAAU,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,OAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;YAClE,aAAa,EAAE,IAAA,aAAK,EAAC,GAAG,CAAC;YACzB,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAC5C,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa;YACzC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,GAAG,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG;YAC/B,WAAW,EAAE,GAAG,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,gBAAgB,EAAE;YAC9D,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG;YAC5D,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;YACpC,aAAa,EAAE,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC;SAC/C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC;AA5BD,oCA4BC"}

package/node_modules/@alanszp/express/dist/middlewares/auditLog.d.ts

@@ -0,0 +1,8 @@
+import { NextFunction, Response, Request } from "express";
+import { AuditBody } from "@alanszp/audit";
+import { GenericRequest } from "../types/GenericRequest";
+export declare type AuditBodyModifier = (req: Request<Record<string, string>, unknown, unknown>, res: Response) => Promise<Partial<AuditBody>> | Partial<AuditBody>;
+/**
+ * Configures the audit log to execute AFTER the response is sent.
+ */
+export declare function auditLog(action: string, bodyModifier?: AuditBodyModifier): (req: GenericRequest, res: Response, next: NextFunction) => void;

package/node_modules/@alanszp/express/dist/middlewares/auditLog.js

@@ -0,0 +1,43 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditLog = void 0;
+const getIp_1 = require("../helpers/getIp");
+/**
+ * Configures the audit log to execute AFTER the response is sent.
+ */
+function auditLog(action, bodyModifier) {
+    return function writeAuditLogMiddleware(req, res, next) {
+        res.on("finish", function writeAuditLog() {
+            return __awaiter(this, void 0, void 0, function* () {
+                try {
+                    const audit = req.context.audit;
+                    const partialBody = bodyModifier
+                        ? yield Promise.resolve(bodyModifier(req, res))
+                        : {};
+                    if (req.context.jwtUser) {
+                        partialBody.orgRef = req.context.jwtUser.organizationReference;
+                        partialBody.actorRef = req.context.jwtUser.id;
+                    }
+                    partialBody.ip = (0, getIp_1.getIp)(req) || "no-ip";
+                    audit.log(Object.assign(Object.assign({ succeed: res.statusCode === 304 ||
+                            (res.statusCode >= 200 && res.statusCode < 300) }, partialBody), { action }));
+                }
+                catch (error) {
+                    req.context.log.error("auditLog.writeLog.error", { action, error });
+                }
+            });
+        });
+        next();
+    };
+}
+exports.auditLog = auditLog;
+//# sourceMappingURL=auditLog.js.map

package/node_modules/@alanszp/express/dist/middlewares/auditLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditLog.js","sourceRoot":"","sources":["../../src/middlewares/auditLog.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,4CAAyC;AAQzC;;GAEG;AACH,SAAgB,QAAQ,CAAC,MAAc,EAAE,YAAgC;IACvE,OAAO,SAAS,uBAAuB,CACrC,GAAmB,EACnB,GAAa,EACb,IAAkB;QAElB,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAe,aAAa;;gBAC3C,IAAI;oBACF,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;oBAEhC,MAAM,WAAW,GAAG,YAAY;wBAC9B,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;wBAC/C,CAAC,CAAE,EAAyB,CAAC;oBAE/B,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE;wBACvB,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC;wBAC/D,WAAW,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;qBAC/C;oBAED,WAAW,CAAC,EAAE,GAAG,IAAA,aAAK,EAAC,GAAG,CAAC,IAAI,OAAO,CAAC;oBAEvC,KAAK,CAAC,GAAG,+BACP,OAAO,EACL,GAAG,CAAC,UAAU,KAAK,GAAG;4BACtB,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,IAC9C,WAAW,KACd,MAAM,IACN,CAAC;iBACJ;gBAAC,OAAO,KAAc,EAAE;oBACvB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;iBACrE;YACH,CAAC;SAAA,CAAC,CAAC;QAEH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAnCD,4BAmCC"}

package/node_modules/@alanszp/express/dist/middlewares/authedForOrg.d.ts

@@ -0,0 +1,3 @@
+import { NextFunction, Response } from "express";
+import { GenericRequest } from "../types/GenericRequest";
+export declare function authForOrg(req: GenericRequest, res: Response, next: NextFunction): void;

package/node_modules/@alanszp/express/dist/middlewares/authedForOrg.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authForOrg = void 0;
+const errors_1 = require("@alanszp/errors");
+const errorView_1 = require("../views/errorView");
+const getRequestLogger_1 = require("../helpers/getRequestLogger");
+function response401(res) {
+    res.status(401).json((0, errorView_1.errorView)(new errors_1.UnauthorizedError(["jwt"])));
+}
+function authForOrg(req, res, next) {
+    var _a, _b, _c;
+    const { orgReference } = req.params;
+    const logger = (0, getRequestLogger_1.getRequestLogger)(req).child({ org: orgReference });
+    try {
+        if (!orgReference) {
+            logger.error("middleware.authForOrg.error.noOrgReferenceInPath");
+            return response401(res);
+        }
+        if (!((_b = (_a = req.context) === null || _a === void 0 ? void 0 : _a.jwtUser) === null || _b === void 0 ? void 0 : _b.organizationReference)) {
+            logger.info("middleware.authForOrg.error.noOrgInJwt", {
+                jwtUser: ((_c = req.context) === null || _c === void 0 ? void 0 : _c.jwtUser) || null,
+            });
+            return response401(res);
+        }
+        const jwtOrg = req.context.jwtUser.organizationReference;
+        if (jwtOrg !== orgReference) {
+            if (jwtOrg === "lara") {
+                req.context.jwtUser.organizationReference = orgReference;
+                return next();
+            }
+            logger.info("middleware.authForOrg.error.nonMatch", {
+                jwtOrg,
+            });
+            return response401(res);
+        }
+        return next();
+    }
+    catch (error) {
+        logger.info("middleware.authForOrg.error.noOrganization", {
+            error,
+        });
+        res.status(404).json((0, errorView_1.errorView)(new errors_1.NotFoundError()));
+    }
+}
+exports.authForOrg = authForOrg;
+//# sourceMappingURL=authedForOrg.js.map

package/node_modules/@alanszp/express/dist/middlewares/authedForOrg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authedForOrg.js","sourceRoot":"","sources":["../../src/middlewares/authedForOrg.ts"],"names":[],"mappings":";;;AAAA,4CAAmE;AACnE,kDAA+C;AAE/C,kEAA+D;AAG/D,SAAS,WAAW,CAAC,GAAa;IAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,qBAAS,EAAC,IAAI,0BAAiB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAgB,UAAU,CACxB,GAAmB,EACnB,GAAa,EACb,IAAkB;;IAElB,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IAClE,IAAI;QACF,IAAI,CAAC,YAAY,EAAE;YACjB,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACjE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;SACzB;QAED,IAAI,CAAC,CAAA,MAAA,MAAA,GAAG,CAAC,OAAO,0CAAE,OAAO,0CAAE,qBAAqB,CAAA,EAAE;YAChD,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;gBACpD,OAAO,EAAE,CAAA,MAAA,GAAG,CAAC,OAAO,0CAAE,OAAO,KAAI,IAAI;aACtC,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;SACzB;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC;QACzD,IAAI,MAAM,KAAK,YAAY,EAAE;YAC3B,IAAI,MAAM,KAAK,MAAM,EAAE;gBACrB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,GAAG,YAAY,CAAC;gBACzD,OAAO,IAAI,EAAE,CAAC;aACf;YAED,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBAClD,MAAM;aACP,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;SACzB;QAED,OAAO,IAAI,EAAE,CAAC;KACf;IAAC,OAAO,KAAc,EAAE;QACvB,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;YACxD,KAAK;SACN,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,qBAAS,EAAC,IAAI,sBAAa,EAAE,CAAC,CAAC,CAAC;KACtD;AACH,CAAC;AAxCD,gCAwCC"}

package/node_modules/@alanszp/express/dist/middlewares/authenticateUser.d.ts

@@ -0,0 +1,25 @@
+import { VerifyOptions } from "@alanszp/jwt";
+import { NextFunction, Response } from "express";
+import { GenericRequest } from "../types/GenericRequest";
+export declare enum AuthMethods {
+    JWT = "JWT",
+    API_KEY = "API_KEY"
+}
+export interface JWTVerifyOptions extends Partial<VerifyOptions> {
+    publicKey: string;
+}
+export interface JWTOptions {
+    jwtVerifyOptions: JWTVerifyOptions;
+    types: [AuthMethods.JWT];
+}
+export interface ApiKeyOptions {
+    validApiKeys: string[];
+    types: [AuthMethods.API_KEY];
+}
+export interface BothMethodsOptions {
+    jwtVerifyOptions: JWTVerifyOptions;
+    validApiKeys: string[];
+    types: [AuthMethods.JWT, AuthMethods.API_KEY] | [AuthMethods.API_KEY, AuthMethods.JWT];
+}
+export declare type AuthOptions = JWTOptions | ApiKeyOptions | BothMethodsOptions;
+export declare function createAuthContext<Options extends AuthOptions>(options: Options): (authMethods: Options["types"][number][]) => (req: GenericRequest, res: Response, next: NextFunction) => Promise<void>;

package/node_modules/@alanszp/express/dist/middlewares/authenticateUser.js

@@ -0,0 +1,115 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthContext = exports.AuthMethods = void 0;
+const jwt_1 = require("@alanszp/jwt");
+const errors_1 = require("@alanszp/errors");
+const errorView_1 = require("../views/errorView");
+const getRequestLogger_1 = require("../helpers/getRequestLogger");
+const lodash_1 = require("lodash");
+function parseAuthorizationHeader(authorization) {
+    if (!authorization)
+        return undefined;
+    const [bearer, jwt, ...other] = authorization.split(" ");
+    if (bearer !== "Bearer" || other.length > 0)
+        return undefined;
+    return jwt;
+}
+var AuthMethods;
+(function (AuthMethods) {
+    AuthMethods["JWT"] = "JWT";
+    AuthMethods["API_KEY"] = "API_KEY";
+})(AuthMethods = exports.AuthMethods || (exports.AuthMethods = {}));
+const middlewareGetterByAuthType = {
+    [AuthMethods.JWT]: (jwt, options, logger) => __awaiter(void 0, void 0, void 0, function* () {
+        try {
+            if (!jwt)
+                return undefined;
+            const jwtUser = yield (0, jwt_1.verifyJWT)(options.jwtVerifyOptions.publicKey, jwt, (0, lodash_1.omit)(options.jwtVerifyOptions, "publicKey"));
+            logger.debug("auth.authWithJwt.authed", {
+                user: jwtUser.id,
+                org: jwtUser.organizationReference,
+            });
+            return jwtUser;
+        }
+        catch (error) {
+            logger.info("auth.authWithJwt.invalidJwt", { jwt, error });
+            return null;
+        }
+    }),
+    [AuthMethods.API_KEY]: (token, options, logger) => __awaiter(void 0, void 0, void 0, function* () {
+        try {
+            if (!token)
+                return undefined;
+            if (options.validApiKeys.includes(token)) {
+                logger.debug("auth.authWithApiKey.authed", {
+                    user: "0",
+                    org: "lara",
+                });
+                return Promise.resolve({
+                    id: "0",
+                    employeeReference: "0",
+                    organizationReference: "lara",
+                    roles: [],
+                    segmentReference: null,
+                    permissions: [],
+                });
+            }
+            else {
+                return null;
+            }
+        }
+        catch (error) {
+            logger.info("auth.authWithApiKey.invalidApiKey", { token, error });
+            return null;
+        }
+    }),
+};
+function createAuthContext(options) {
+    return function getMiddlewareForMethods(authMethods) {
+        return function authWithGivenMethods(req, res, next) {
+            return __awaiter(this, void 0, void 0, function* () {
+                const logger = (0, getRequestLogger_1.getRequestLogger)(req);
+                const cookies = req.cookies || {};
+                const jwt = cookies.jwt || parseAuthorizationHeader(req.headers.authorization);
+                try {
+                    const authAttempts = yield Promise.all(authMethods.map((method) => middlewareGetterByAuthType[method](method === AuthMethods.JWT ? jwt : req.headers.authorization, options, logger)));
+                    const successfulAuthAttempts = (0, lodash_1.compact)(authAttempts);
+                    if ((0, lodash_1.isEmpty)(successfulAuthAttempts)) {
+                        res
+                            .status(401)
+                            .json((0, errorView_1.errorView)(new errors_1.UnauthorizedError([
+                            authAttempts.includes(null)
+                                ? `Token invalid for methods ${authMethods}`
+                                : `Token not set for methods ${authMethods}`,
+                        ])));
+                        return;
+                    }
+                    const jwtUser = successfulAuthAttempts[0];
+                    req.context.jwtUser = jwtUser;
+                    req.context.authenticated.push(jwtUser.employeeReference !== "0" ? "jwt" : "api_key");
+                    next();
+                }
+                catch (error) {
+                    logger.info("auth.authenticateUser.error", {
+                        jwt,
+                        token: req.headers.authorization,
+                        methods: AuthMethods,
+                        error,
+                    });
+                    res.status(401).json((0, errorView_1.errorView)(new errors_1.UnauthorizedError(authMethods)));
+                }
+            });
+        };
+    };
+}
+exports.createAuthContext = createAuthContext;
+//# sourceMappingURL=authenticateUser.js.map

package/node_modules/@alanszp/express/dist/middlewares/authenticateUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticateUser.js","sourceRoot":"","sources":["../../src/middlewares/authenticateUser.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,sCAAiE;AACjE,4CAAoD;AACpD,kDAA+C;AAE/C,kEAA+D;AAG/D,mCAAgD;AAEhD,SAAS,wBAAwB,CAC/B,aAAiC;IAEjC,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEzD,IAAI,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAY,WAGX;AAHD,WAAY,WAAW;IACrB,0BAAW,CAAA;IACX,kCAAmB,CAAA;AACrB,CAAC,EAHW,WAAW,GAAX,mBAAW,KAAX,mBAAW,QAGtB;AA0BD,MAAM,0BAA0B,GAO5B;IACF,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CACjB,GAA8B,EAC9B,OAA4C,EAC5C,MAAe,EACf,EAAE;QACF,IAAI;YACF,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,IAAA,eAAS,EAC7B,OAAO,CAAC,gBAAgB,CAAC,SAAS,EAClC,GAAG,EACH,IAAA,aAAI,EAAC,OAAO,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAC5C,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,IAAI,EAAE,OAAO,CAAC,EAAE;gBAChB,GAAG,EAAE,OAAO,CAAC,qBAAqB;aACnC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;SAChB;QAAC,OAAO,KAAc,EAAE;YACvB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;SACb;IACH,CAAC,CAAA;IACD,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CACrB,KAAgC,EAChC,OAAyC,EACzC,MAAe,EACsB,EAAE;QACvC,IAAI;YACF,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC7B,IAAI,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBACxC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;oBACzC,IAAI,EAAE,GAAG;oBACT,GAAG,EAAE,MAAM;iBACZ,CAAC,CAAC;gBACH,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,EAAE,EAAE,GAAG;oBACP,iBAAiB,EAAE,GAAG;oBACtB,qBAAqB,EAAE,MAAM;oBAC7B,KAAK,EAAE,EAAE;oBACT,gBAAgB,EAAE,IAAI;oBACtB,WAAW,EAAE,EAAE;iBAChB,CAAC,CAAC;aACJ;iBAAM;gBACL,OAAO,IAAI,CAAC;aACb;SACF;QAAC,OAAO,KAAc,EAAE;YACvB,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;SACb;IACH,CAAC,CAAA;CACF,CAAC;AAEF,SAAgB,iBAAiB,CAC/B,OAAgB;IAEhB,OAAO,SAAS,uBAAuB,CACrC,WAAuC;QAEvC,OAAO,SAAe,oBAAoB,CACxC,GAAmB,EACnB,GAAa,EACb,IAAkB;;gBAElB,MAAM,MAAM,GAAG,IAAA,mCAAgB,EAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,OAAO,GAAI,GAAG,CAAC,OAA8C,IAAI,EAAE,CAAC;gBAC1E,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,IAAI,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAErE,IAAI;oBACF,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACzB,0BAA0B,CAAC,MAAM,CAAC,CAChC,MAAM,KAAK,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAC5D,OAAO,EACP,MAAM,CACP,CACF,CACF,CAAC;oBAEF,MAAM,sBAAsB,GAAG,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAC;oBAErD,IAAI,IAAA,gBAAO,EAAC,sBAAsB,CAAC,EAAE;wBACnC,GAAG;6BACA,MAAM,CAAC,GAAG,CAAC;6BACX,IAAI,CACH,IAAA,qBAAS,EACP,IAAI,0BAAiB,CAAC;4BACpB,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;gCACzB,CAAC,CAAC,6BAA6B,WAAW,EAAE;gCAC5C,CAAC,CAAC,6BAA6B,WAAW,EAAE;yBAC/C,CAAC,CACH,CACF,CAAC;wBACJ,OAAO;qBACR;oBAED,MAAM,OAAO,GAAY,sBAAsB,CAAC,CAAC,CAAC,CAAC;oBACnD,GAAG,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;oBAC9B,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAC5B,OAAO,CAAC,iBAAiB,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CACtD,CAAC;oBACF,IAAI,EAAE,CAAC;iBACR;gBAAC,OAAO,KAAc,EAAE;oBACvB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;wBACzC,GAAG;wBACH,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa;wBAChC,OAAO,EAAE,WAAW;wBACpB,KAAK;qBACN,CAAC,CAAC;oBACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,qBAAS,EAAC,IAAI,0BAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;iBACrE;YACH,CAAC;SAAA,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AA7DD,8CA6DC"}

package/node_modules/@alanszp/express/dist/middlewares/authenticateUser.test.d.ts

@@ -0,0 +1 @@
+export {};