@appweaver/core 1.0.0

package/resources.d.ts

@@ -0,0 +1,9 @@
+export { default as apiKey } from './security/resources/api-key/model';
+export { default as oneTimeToken } from './security/resources/one-time-token/model';
+export { default as role } from './security/resources/role/model';
+export { default as permission } from './security/resources/permission/model';
+export { default as seeder } from './seeder/resources/seeder/model';
+export { default as file } from './storage/resources/file/model';
+export { default as apiKeyService } from './security/resources/api-key/service';
+export { default as apiKeyRoutes } from './security/resources/api-key/routes';
+export { default as apiKeyPolicy } from './security/resources/api-key/policy';

package/resources.js

@@ -0,0 +1,24 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiKeyPolicy = exports.apiKeyRoutes = exports.apiKeyService = exports.file = exports.seeder = exports.permission = exports.role = exports.oneTimeToken = exports.apiKey = void 0;
+var model_1 = require("./security/resources/api-key/model");
+Object.defineProperty(exports, "apiKey", { enumerable: true, get: function () { return __importDefault(model_1).default; } });
+var model_2 = require("./security/resources/one-time-token/model");
+Object.defineProperty(exports, "oneTimeToken", { enumerable: true, get: function () { return __importDefault(model_2).default; } });
+var model_3 = require("./security/resources/role/model");
+Object.defineProperty(exports, "role", { enumerable: true, get: function () { return __importDefault(model_3).default; } });
+var model_4 = require("./security/resources/permission/model");
+Object.defineProperty(exports, "permission", { enumerable: true, get: function () { return __importDefault(model_4).default; } });
+var model_5 = require("./seeder/resources/seeder/model");
+Object.defineProperty(exports, "seeder", { enumerable: true, get: function () { return __importDefault(model_5).default; } });
+var model_6 = require("./storage/resources/file/model");
+Object.defineProperty(exports, "file", { enumerable: true, get: function () { return __importDefault(model_6).default; } });
+var service_1 = require("./security/resources/api-key/service");
+Object.defineProperty(exports, "apiKeyService", { enumerable: true, get: function () { return __importDefault(service_1).default; } });
+var routes_1 = require("./security/resources/api-key/routes");
+Object.defineProperty(exports, "apiKeyRoutes", { enumerable: true, get: function () { return __importDefault(routes_1).default; } });
+var policy_1 = require("./security/resources/api-key/policy");
+Object.defineProperty(exports, "apiKeyPolicy", { enumerable: true, get: function () { return __importDefault(policy_1).default; } });

package/scheduler/cron-scheduler.d.ts

@@ -0,0 +1,12 @@
+import { CronJob, CronJobParams } from 'cron';
+import { Scheduler } from '@appweaver/common';
+export declare class CronScheduler extends Scheduler<CronJob, CronJobParams> {
+    onDestroy(): Promise<void>;
+    startAll(): void;
+    stopAll(): Promise<void>;
+    addJob(jobParams: CronJobParams): string;
+    getJob(jobId: string): CronJob | undefined;
+    startJob(jobId: string): boolean;
+    stopJob(jobId: string): Promise<boolean>;
+    removeJob(jobId: string): Promise<boolean>;
+}

package/scheduler/cron-scheduler.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CronScheduler = void 0;
+const cron_1 = require("cron");
+const common_1 = require("@appweaver/common");
+class CronScheduler extends common_1.Scheduler {
+    /** @internal */
+    _jobs = {};
+    async onDestroy() {
+        await this.stopAll();
+    }
+    startAll() {
+        for (const job of Object.values(this._jobs)) {
+            if (!job.isActive) {
+                job.start();
+            }
+        }
+    }
+    async stopAll() {
+        const stopActions = [];
+        for (const job of Object.values(this._jobs)) {
+            if (!job.isActive) {
+                return;
+            }
+            const stopAction = job.stop();
+            if (stopAction) {
+                stopActions.push(stopAction);
+            }
+        }
+        await Promise.allSettled(stopActions);
+    }
+    addJob(jobParams) {
+        const jobId = (0, common_1.uuid)();
+        this._jobs[jobId] = cron_1.CronJob.from({
+            start: common_1.config.SCHEDULER_AUTO_START_JOB,
+            waitForCompletion: true,
+            errorHandler: (e) => {
+                common_1.logger.error(e, `Job handler error`);
+            },
+            ...jobParams
+        });
+        return jobId;
+    }
+    getJob(jobId) {
+        return this._jobs[jobId];
+    }
+    startJob(jobId) {
+        const job = this._jobs[jobId];
+        if (!job) {
+            return false;
+        }
+        job.start();
+        return true;
+    }
+    async stopJob(jobId) {
+        const job = this._jobs[jobId];
+        if (!job) {
+            return false;
+        }
+        await job.stop();
+        return true;
+    }
+    async removeJob(jobId) {
+        const job = this._jobs[jobId];
+        if (!job) {
+            return false;
+        }
+        await job.stop();
+        delete this._jobs[jobId];
+        return true;
+    }
+}
+exports.CronScheduler = CronScheduler;

package/security/account/account-routes.d.ts

@@ -0,0 +1,2 @@
+import { Server } from '../../types';
+export declare function accountRoutes(server: Server): void;

package/security/account/account-routes.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.accountRoutes = accountRoutes;
+const common_1 = require("@appweaver/common");
+const account_schema_1 = require("./account-schema");
+const account_service_1 = require("./account-service");
+const context_1 = require("../../context");
+function accountRoutes(server) {
+    const { authenticate, currentUser, recaptcha } = server;
+    const accountService = (0, context_1.inject)(account_service_1.AccountService);
+    if (common_1.config.SECURITY_ACCOUNT_VERIFY_EMAIL_ENABLED) {
+        server.post('/send-verify-email', {
+            schema: account_schema_1.sendEmailVerificationSchema,
+            onRequest: authenticate(),
+            config: {
+                rateLimit: {
+                    max: 10,
+                    timeWindow: 900000 // 15 minutes
+                }
+            }
+        }, async (request, reply) => {
+            const authUser = currentUser();
+            const message = await accountService.sendEmailVerification(authUser, request.body.redirectToUrl, request.body.verificationType);
+            return reply.send({ message });
+        });
+        server.post('/verify-email', {
+            schema: account_schema_1.verifyEmailSchema,
+            config: {
+                rateLimit: {
+                    max: 12
+                }
+            }
+        }, async (request, reply) => {
+            const message = await accountService.verifyEmailAddress(request.body.token);
+            return reply.send({ message });
+        });
+        server.get('/verify-email-redirect', {
+            schema: account_schema_1.verifyEmailRedirectSchema,
+            config: {
+                rateLimit: {
+                    max: 12
+                }
+            }
+        }, async (request, reply) => {
+            const { redirectUrl, status, message } = await accountService.verifyEmailAddressRedirect(request.query.token);
+            return reply.redirect(`${redirectUrl}status=${status}&message=${message}`);
+        });
+    }
+    if (common_1.config.SECURITY_ACCOUNT_RESET_PASSWORD_ENABLED) {
+        server.post('/send-reset-password', {
+            schema: account_schema_1.sendResetPasswordSchema,
+            onRequest: recaptcha,
+            config: {
+                rateLimit: {
+                    max: 10,
+                    timeWindow: 900000 // 15 minutes
+                }
+            }
+        }, async (request, reply) => {
+            const message = await accountService.sendResetPassword(request.body.email, request.body.redirectToUrl);
+            return reply.send({ message });
+        });
+        server.post('/reset-password', {
+            schema: account_schema_1.resetPasswordSchema,
+            onRequest: recaptcha,
+            config: {
+                rateLimit: {
+                    max: 12
+                }
+            }
+        }, async (request, reply) => {
+            const message = await accountService.resetPassword(request.body.token, request.body.newPassword);
+            return reply.send({ message });
+        });
+    }
+    if (common_1.config.SECURITY_ACCOUNT_2FA_ENABLED) {
+        server.post('/send-2fa-code', {
+            schema: account_schema_1.send2FACodeSchema,
+            onRequest: authenticate([common_1.AuthType.Jwt]),
+            config: {
+                rateLimit: {
+                    max: 10,
+                    timeWindow: 900000 // 15 minutes
+                }
+            }
+        }, async (request, reply) => {
+            const authUser = currentUser();
+            const response = await accountService.send2FACode(authUser, request.body.purpose);
+            return reply.send(response);
+        });
+        server.post('/verify-2fa-code', {
+            schema: account_schema_1.verify2FACodeSchema,
+            onRequest: authenticate([common_1.AuthType.Jwt]),
+            config: {
+                rateLimit: {
+                    max: 12
+                }
+            }
+        }, async (request, reply) => {
+            const response = await accountService.verify2FACode(request.body.challengeId, request.body.code);
+            return reply.send(response);
+        });
+    }
+}

package/security/account/account-schema.d.ts

@@ -0,0 +1,290 @@
+import { VerificationType } from './account-service';
+export declare const AccountSendEmailVerificationRequest: import("@sinclair/typebox").TObject<{
+    redirectToUrl: import("@sinclair/typebox").TString;
+    verificationType: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnsafe<VerificationType>>;
+}>;
+export declare const AccountEmailVerificationRequest: import("@sinclair/typebox").TObject<{
+    token: import("@sinclair/typebox").TString;
+}>;
+export declare const AccountSendResetPasswordRequest: import("@sinclair/typebox").TObject<{
+    redirectToUrl: import("@sinclair/typebox").TString;
+    email: import("@sinclair/typebox").TString;
+}>;
+export declare const AccountResetPasswordRequest: import("@sinclair/typebox").TObject<{
+    token: import("@sinclair/typebox").TString;
+    newPassword: import("@sinclair/typebox").TString;
+}>;
+export declare const AccountSend2FACodeRequest: import("@sinclair/typebox").TObject<{
+    purpose: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>;
+export declare const AccountSend2FAResponse: import("@sinclair/typebox").TObject<{
+    challengeId: import("@sinclair/typebox").TString;
+    expiresIn: import("@sinclair/typebox").TInteger;
+}>;
+export declare const AccountVerify2FARequest: import("@sinclair/typebox").TObject<{
+    challengeId: import("@sinclair/typebox").TString;
+    code: import("@sinclair/typebox").TString;
+}>;
+export declare const AccountVerify2FAResponse: import("@sinclair/typebox").TObject<{
+    token: import("@sinclair/typebox").TString;
+    expiresIn: import("@sinclair/typebox").TInteger;
+}>;
+export declare const AccountStatusResponse: import("@sinclair/typebox").TObject<{
+    message: import("@sinclair/typebox").TString;
+}>;
+export declare const sendEmailVerificationSchema: {
+    tags: string[];
+    security: any[];
+    summary: string;
+    description: string;
+    response: {
+        '4xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        '5xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        200: import("@sinclair/typebox").TObject<{
+            message: import("@sinclair/typebox").TString;
+        }>;
+    };
+    body: import("@sinclair/typebox").TObject<{
+        redirectToUrl: import("@sinclair/typebox").TString;
+        verificationType: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnsafe<VerificationType>>;
+    }>;
+};
+export declare const verifyEmailSchema: {
+    tags: string[];
+    summary: string;
+    description: string;
+    response: {
+        '4xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        '5xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        200: import("@sinclair/typebox").TObject<{
+            message: import("@sinclair/typebox").TString;
+        }>;
+    };
+    body: import("@sinclair/typebox").TObject<{
+        token: import("@sinclair/typebox").TString;
+    }>;
+};
+export declare const verifyEmailRedirectSchema: {
+    tags: string[];
+    summary: string;
+    description: string;
+    querystring: import("@sinclair/typebox").TObject<{
+        token: import("@sinclair/typebox").TString;
+    }>;
+    response: {
+        '4xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        '5xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        302: {
+            description: string;
+        };
+    };
+};
+export declare const sendResetPasswordSchema: {
+    tags: string[];
+    header: import("@sinclair/typebox").TObject<import("@sinclair/typebox").TProperties>;
+    summary: string;
+    description: string;
+    response: {
+        '4xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        '5xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        200: import("@sinclair/typebox").TObject<{
+            message: import("@sinclair/typebox").TString;
+        }>;
+    };
+    body: import("@sinclair/typebox").TObject<{
+        redirectToUrl: import("@sinclair/typebox").TString;
+        email: import("@sinclair/typebox").TString;
+    }>;
+};
+export declare const resetPasswordSchema: {
+    tags: string[];
+    header: import("@sinclair/typebox").TObject<import("@sinclair/typebox").TProperties>;
+    summary: string;
+    description: string;
+    response: {
+        '4xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        '5xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        200: import("@sinclair/typebox").TObject<{
+            message: import("@sinclair/typebox").TString;
+        }>;
+    };
+    body: import("@sinclair/typebox").TObject<{
+        token: import("@sinclair/typebox").TString;
+        newPassword: import("@sinclair/typebox").TString;
+    }>;
+};
+export declare const send2FACodeSchema: {
+    tags: string[];
+    security: any[];
+    summary: string;
+    description: string;
+    response: {
+        '4xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        '5xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        200: import("@sinclair/typebox").TObject<{
+            challengeId: import("@sinclair/typebox").TString;
+            expiresIn: import("@sinclair/typebox").TInteger;
+        }>;
+    };
+    body: import("@sinclair/typebox").TObject<{
+        purpose: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+};
+export declare const verify2FACodeSchema: {
+    tags: string[];
+    security: any[];
+    summary: string;
+    description: string;
+    response: {
+        '4xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        '5xx': {
+            description: string;
+            content: {
+                'application/json': {
+                    schema: import("@sinclair/typebox").TObject<{
+                        errorCode: import("@sinclair/typebox").TInteger;
+                        message: import("@sinclair/typebox").TString;
+                    }>;
+                };
+            };
+        };
+        200: import("@sinclair/typebox").TObject<{
+            token: import("@sinclair/typebox").TString;
+            expiresIn: import("@sinclair/typebox").TInteger;
+        }>;
+    };
+    body: import("@sinclair/typebox").TObject<{
+        challengeId: import("@sinclair/typebox").TString;
+        code: import("@sinclair/typebox").TString;
+    }>;
+};